last executing test programs:

2.561321465s ago: executing program 1 (id=2716):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x46}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.56110089s ago: executing program 1 (id=2717):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.68296383s ago: executing program 1 (id=2725):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x96}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)

1.620448709s ago: executing program 1 (id=2727):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c)
recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x1822b, 0x0)
syz_emit_ethernet(0xfc0, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb2, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf9e, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0)

919.848706ms ago: executing program 0 (id=2749):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000001c0)={0x6}, 0x8)

850.414586ms ago: executing program 0 (id=2751):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000740)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x2, &(0x7f00000000c0)={0x0, 0x0, 0xffffffff}, 0x10}, 0x94)

799.048658ms ago: executing program 0 (id=2753):
r0 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000000)=0x2f9d)

740.888566ms ago: executing program 1 (id=2754):
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"])
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98)

740.757298ms ago: executing program 0 (id=2755):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100005800c0006"], 0x34}}, 0x0)

639.292073ms ago: executing program 1 (id=2757):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323bac0c45b45602067fffffff81004e22030d00ff00289242a8002000eaa57b00090080020e1b05000000000000ff0004f0c703000800ffffffffffffffffff0300e7ee0000000000000000020000", 0x58}], 0x1)
openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0)
unshare(0x20400)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x10000000000000, 0x4000001, 0x0, 0xec0000000000000, 0x3, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0xffff, 0x2004, 0x40004, 0x80000000000000, 0x6a9}, 0x0, 0x0)

580.445552ms ago: executing program 0 (id=2759):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
recvmmsg$unix(r1, &(0x7f0000005a40)=[{{0x0, 0x0, &(0x7f0000004bc0)=[{&(0x7f0000004b80)=""/13, 0xd}], 0x1}}], 0x1, 0x40000000, 0x0)

556.387006ms ago: executing program 0 (id=2761):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r3, 0x0, 0x20000000002)

108.739688ms ago: executing program 2 (id=2771):
syz_emit_ethernet(0x6c, &(0x7f00000002c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5e, 0x68, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x0, [0x219a, 0x9], "7f49"}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0xfffffffe, {{0x0, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x4}, 0x2, {0x0, 0xfffd}}}}}}}}, 0x0)

108.071241ms ago: executing program 2 (id=2772):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x0, 0x0, 0x20000, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xfffd, 0x0, 0x4, 0x0, @empty, @remote}}}})

50.300243ms ago: executing program 2 (id=2773):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000002000010026bd7000fbdbdf2502101000090000060f00010008000200ac14142a08000b0006000000050016008900000008000100"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)

50.099955ms ago: executing program 2 (id=2774):
r0 = socket(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000140)="7800000016002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x24040000, 0x0, 0x0)

304.618µs ago: executing program 2 (id=2775):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x118, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0xd4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0xc8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x764f15e2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0xfffffffffffffdeb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa4}]}], {0x14, 0x10}}, 0x140}}, 0x0)

0s ago: executing program 2 (id=2776):
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000080))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdafb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2a}]}, 0x24}}, 0x2000c800)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000600000000000000030000009310000001"], 0x0, 0x5}, 0x94)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0xf, 0x0, 0x0, 0xf, 0x0, 0x0, 0x25dfdbfb, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x100, @private0, 0xc3}}, @sadb_x_policy={0x8, 0x12, 0x3, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0xff}}}]}, 0x78}}, 0x0)

0s ago: executing program 2 (id=2777):
socket$kcm(0x21, 0x2, 0xa)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
recvmmsg$unix(r2, &(0x7f0000004a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00'})
bpf$MAP_CREATE(0x700000080010000, 0x0, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r3, 0xfffffffc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:22470' (ED25519) to the list of known hosts.
syzkaller login: [   50.951273][ T5545] cgroup: Unknown subsys name 'net'
[   51.078774][ T5545] cgroup: Unknown subsys name 'cpuset'
[   51.084961][ T5545] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   52.922996][ T5545] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   57.139520][ T5600] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   57.145293][ T5600] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   57.149642][ T5600] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   57.156289][ T5600] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   57.159865][ T5600] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   57.209196][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   57.214935][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   57.229312][ T4991] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   57.235363][ T4991] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   57.242157][ T4991] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   57.247318][ T4991] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   57.251520][ T4991] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   57.254964][ T4991] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   57.260087][ T5608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   57.264154][ T5608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   57.700076][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.703110][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.705742][ T5599] bridge_slave_0: entered allmulticast mode
[   57.708685][ T5599] bridge_slave_0: entered promiscuous mode
[   57.730388][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.732718][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.735673][ T5599] bridge_slave_1: entered allmulticast mode
[   57.739011][ T5599] bridge_slave_1: entered promiscuous mode
[   57.788723][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.801046][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.837029][ T5599] team0: Port device team_slave_0 added
[   57.850896][ T5599] team0: Port device team_slave_1 added
[   57.892249][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.894745][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.905639][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.922647][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.925345][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.934340][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.020422][ T5599] hsr_slave_0: entered promiscuous mode
[   58.023156][ T5599] hsr_slave_1: entered promiscuous mode
[   58.206700][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.209874][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.212967][ T5606] bridge_slave_0: entered allmulticast mode
[   58.217410][ T5606] bridge_slave_0: entered promiscuous mode
[   58.240376][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.242709][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.245423][ T5606] bridge_slave_1: entered allmulticast mode
[   58.248258][ T5606] bridge_slave_1: entered promiscuous mode
[   58.314262][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.317358][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.320403][ T5604] bridge_slave_0: entered allmulticast mode
[   58.324897][ T5604] bridge_slave_0: entered promiscuous mode
[   58.330150][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.332554][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.335221][ T5604] bridge_slave_1: entered allmulticast mode
[   58.339569][ T5604] bridge_slave_1: entered promiscuous mode
[   58.346409][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.373059][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.403007][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.410599][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.439308][ T5606] team0: Port device team_slave_0 added
[   58.460183][ T5606] team0: Port device team_slave_1 added
[   58.473596][ T5604] team0: Port device team_slave_0 added
[   58.476277][ T5599] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.490684][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   58.502278][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.506320][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   58.514791][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.522744][ T5604] team0: Port device team_slave_1 added
[   58.536789][ T5599] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.546716][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   58.550328][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.558117][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   58.569444][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.590647][ T5599] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.599530][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   58.603235][ T5599] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.612897][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   58.629975][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.632792][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   58.644524][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.656653][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.659594][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   58.671221][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.745638][ T5606] hsr_slave_0: entered promiscuous mode
[   58.748560][ T5606] hsr_slave_1: entered promiscuous mode
[   58.750735][ T5606] debugfs: 'hsr0' already exists in 'hsr'
[   58.752604][ T5606] Cannot create hsr debugfs directory
[   58.758782][ T5604] hsr_slave_0: entered promiscuous mode
[   58.761070][ T5604] hsr_slave_1: entered promiscuous mode
[   58.763230][ T5604] debugfs: 'hsr0' already exists in 'hsr'
[   58.766247][ T5604] Cannot create hsr debugfs directory
[   59.000295][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.007901][ T5606] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   59.017567][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   59.024566][ T5606] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   59.030888][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   59.042260][ T5599] 8021q: adding VLAN 0 to HW filter on device team0
[   59.049019][ T5606] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   59.056620][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   59.059407][ T5606] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   59.065237][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   59.080307][ T3512] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.083703][ T3512] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.110692][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.113695][ T3512] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.161143][ T5604] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   59.170243][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   59.180810][ T5604] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   59.185973][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   59.190776][ T5604] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   59.194116][ T5600] Bluetooth: hci0: command tx timeout
[   59.197306][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   59.200131][ T5604] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   59.205523][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   59.313165][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.338808][ T5606] 8021q: adding VLAN 0 to HW filter on device team0
[   59.351232][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.355662][ T5608] Bluetooth: hci1: command tx timeout
[   59.358126][ T5600] Bluetooth: hci2: command tx timeout
[   59.365317][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.368171][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.379253][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.381616][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.409458][ T5604] 8021q: adding VLAN 0 to HW filter on device team0
[   59.430265][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.432620][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.458137][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.460566][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.614975][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.691910][ T5599] veth0_vlan: entered promiscuous mode
[   59.710591][ T5599] veth1_vlan: entered promiscuous mode
[   59.757130][ T5599] veth0_macvtap: entered promiscuous mode
[   59.767576][ T5599] veth1_macvtap: entered promiscuous mode
[   59.789147][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.802639][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.832298][ T5665] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.839021][ T5665] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.846449][ T5665] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.856576][ T5665] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.890037][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.918611][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.981280][   T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.992743][   T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.010317][ T5606] veth0_vlan: entered promiscuous mode
[   60.022304][ T5604] veth0_vlan: entered promiscuous mode
[   60.055169][ T5606] veth1_vlan: entered promiscuous mode
[   60.059515][ T5604] veth1_vlan: entered promiscuous mode
[   60.064767][   T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.071734][   T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.097300][ T5604] veth0_macvtap: entered promiscuous mode
[   60.107444][ T5606] veth0_macvtap: entered promiscuous mode
[   60.114407][ T5606] veth1_macvtap: entered promiscuous mode
[   60.117962][ T5604] veth1_macvtap: entered promiscuous mode
[   60.132743][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.145191][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.149597][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.161894][ T5631] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.165963][ T5599] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   60.170760][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.172706][ T5631] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.186871][ T5631] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.206041][ T5631] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.230597][ T5631] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.235147][ T5631] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.275918][ T5631] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.285989][ T5631] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.351708][   T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.356132][   T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.390053][ T3512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.401709][ T3512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.448372][   T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.457927][   T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.497369][ T3558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.511232][ T3558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.283984][ T5600] Bluetooth: hci0: command tx timeout
[   61.433827][ T5600] Bluetooth: hci2: command tx timeout
[   61.433942][ T5608] Bluetooth: hci1: command tx timeout
[   61.733940][ T5771] warning: `syz.0.21' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.945911][ T5789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.30'.
[   62.139711][ T5803] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   62.201234][ T5608] Bluetooth: hci0: unexpected cc 0x2003 length: 10 > 9
[   62.247831][ T5810] netlink: 104 bytes leftover after parsing attributes in process `syz.1.39'.
[   62.338353][ T5816] Cannot find map_set index 0 as target
[   62.500664][ T5829] x_tables: duplicate entry at hook 3
[   62.673019][ T5845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.54'.
[   62.676862][ T5845] netlink: 'syz.1.54': attribute type 7 has an invalid length.
[   62.685223][ T5845] netlink: 'syz.1.54': attribute type 8 has an invalid length.
[   62.695970][ T5845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.54'.
[   63.060841][ T5874] syzkaller0: entered promiscuous mode
[   63.063240][ T5874] syzkaller0: entered allmulticast mode
[   63.515435][ T5608] Bluetooth: hci2: command tx timeout
[   63.519073][ T5600] Bluetooth: hci1: command tx timeout
[   63.789497][ T5879] Bluetooth: MGMT ver 1.23
[   64.234267][ T5608] Bluetooth: hci0: command tx timeout
[   64.430802][ T5900] syzkaller0: entered promiscuous mode
[   64.433079][ T5900] syzkaller0: entered allmulticast mode
[   64.445740][ T5900] tc action pedit 'at' offset 5 out of bounds
[   65.556762][ T5922] X25: received unknown 00 with LCI 000
[   65.594447][ T5608] Bluetooth: hci2: command tx timeout
[   65.597431][ T5608] Bluetooth: hci1: command tx timeout
[   65.772675][ T5946] netlink: 20 bytes leftover after parsing attributes in process `syz.2.100'.
[   66.037625][ T5963] netlink: 'syz.0.104': attribute type 8 has an invalid length.
[   66.071482][ T5963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.104'.
[   66.182087][ T5963] veth3: entered allmulticast mode
[   66.959409][ T6042] Zero length message leads to an empty skb
[   69.714977][ T6116] vlan2: entered promiscuous mode
[   69.720777][ T6116] macvlan0: entered promiscuous mode
[   69.876816][ T6131] netlink: 272 bytes leftover after parsing attributes in process `syz.0.137'.
[   70.334359][ T6157] netlink: 36 bytes leftover after parsing attributes in process `syz.0.151'.
[   70.377136][ T6159] syz.2.152 uses obsolete (PF_INET,SOCK_PACKET)
[   70.457991][ T6163] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   70.615635][ T6172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.158'.
[   70.626782][ T6172] vlan3: entered promiscuous mode
[   70.628569][ T6172] veth0: entered promiscuous mode
[   70.651872][ T6166] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   70.658951][ T6166] bond1 (unregistering): Released all slaves
[   71.041095][ T6193] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   71.297208][ T6208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   71.301423][ T6208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   71.309989][ T6208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   71.352152][ T6208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   71.356778][ T6208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   71.360268][ T6208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   71.363855][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   71.383890][ T6214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   71.387740][ T6214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   71.421905][ T6200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   71.677977][ T1371] ieee802154 phy0 wpan0: encryption failed: -22
[   71.683451][ T1371] ieee802154 phy1 wpan1: encryption failed: -22
[   71.769512][ T6226] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20000
[   71.904549][ T6237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.005777][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.191'.
[   72.019446][ T6246] ip6gre2: entered promiscuous mode
[   72.021722][ T6246] ip6gre2: entered allmulticast mode
[   72.594461][ T5631] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[   72.606620][ T5631] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[   72.623812][    T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[   72.674516][    T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[   72.704536][ T6268] syzkaller1: entered promiscuous mode
[   72.710303][ T6268] syzkaller1: entered allmulticast mode
[   73.209043][   T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[   73.676901][ T6290] Illegal XDP return value 4294967289 on prog  (id 33) dev N/A, expect packet loss!
[   74.509562][ T6294] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   74.821373][ T6322] syzkaller0: entered promiscuous mode
[   74.829392][ T6322] syzkaller0: entered allmulticast mode
[   74.835654][ T6324] netlink: 100 bytes leftover after parsing attributes in process `syz.1.226'.
[   74.942778][ T6326] tipc: Started in network mode
[   74.949379][ T6326] tipc: Node identity 1a5c43073f97, cluster identity 4711
[   74.954496][ T6326] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.022155][ T6326] syzkaller0: entered promiscuous mode
[   75.024697][ T6326] syzkaller0: entered allmulticast mode
[   75.027611][ T6326] tipc: Resetting bearer <eth:syzkaller0>
[   75.036602][ T6325] tipc: Resetting bearer <eth:syzkaller0>
[   76.258407][ T6325] tipc: Disabling bearer <eth:syzkaller0>
[   76.267669][ T5069] tipc: Node number set to 634077959
[   76.553763][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[   76.953823][ T5675] net_ratelimit: 337 callbacks suppressed
[   76.953841][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   77.459186][ T6384] netlink: 132 bytes leftover after parsing attributes in process `syz.2.250'.
[   77.789027][ T6405] netlink: 16 bytes leftover after parsing attributes in process `syz.2.255'.
[   77.997278][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   78.311852][ T6437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   78.316491][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   78.364546][   T24] cfg80211: failed to load regulatory.db
[   78.397043][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   78.516777][ T6451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.271'.
[   78.793260][ T6472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   78.819096][ T6474] netlink: 'syz.1.282': attribute type 32 has an invalid length.
[   78.954595][ T6480] netlink: 'syz.1.284': attribute type 12 has an invalid length.
[   79.034484][ T5069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   80.073832][ T5069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   80.287398][ T6519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.299'.
[   80.291374][ T6519] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) !
[   80.338796][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.300'.
[   80.457275][ T6508] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   80.705450][ T6529] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.709254][ T6529] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.130230][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   81.310668][ T6567] tipc: Started in network mode
[   81.323469][ T6567] tipc: Node identity 4ae4a9f98679, cluster identity 4711
[   81.330620][ T6567] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.347127][ T6567] syzkaller0: entered promiscuous mode
[   81.349146][ T6567] syzkaller0: entered allmulticast mode
[   81.400131][ T6567] tipc: Resetting bearer <eth:syzkaller0>
[   81.416941][ T6566] tipc: Resetting bearer <eth:syzkaller0>
[   81.435711][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   81.441458][ T6566] tipc: Disabling bearer <eth:syzkaller0>
[   81.456227][ T6577] netlink: 'syz.2.326': attribute type 1 has an invalid length.
[   81.578523][ T6587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   81.672010][ T6591] syz_tun: entered allmulticast mode
[   81.681719][ T6590] syz_tun: left allmulticast mode
[   81.996532][ T6614] netlink: 'syz.0.343': attribute type 4 has an invalid length.
[   82.086560][ T6620] net_ratelimit: 7 callbacks suppressed
[   82.086578][ T6620] netlink: del zone limit has 4 unknown bytes
[   82.159005][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   82.256068][ T6626] nbd0: detected capacity change from 0 to 63
[   82.260769][ T6628] block nbd0: NBD_DISCONNECT
[   82.268498][ T6628] block nbd0: Disconnected due to user request.
[   82.271994][ T6628] block nbd0: shutting down sockets
[   82.273932][ T5938] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.283032][ T5938] Buffer I/O error on dev nbd0, logical block 2, async page read
[   82.286680][    C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.287634][   T97] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.289829][    C0] Buffer I/O error on dev nbd0, logical block 0, async page read
[   82.289983][    C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.289996][    C0] Buffer I/O error on dev nbd0, logical block 1, async page read
[   82.304143][   T97] Buffer I/O error on dev nbd0, logical block 3, async page read
[   82.307176][ T5938] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.310178][ T5938] Buffer I/O error on dev nbd0, logical block 0, async page read
[   82.313232][ T5938] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.316954][ T5938] Buffer I/O error on dev nbd0, logical block 1, async page read
[   82.320045][ T5938] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.323795][ T5938] Buffer I/O error on dev nbd0, logical block 2, async page read
[   82.326517][ T5938] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.329501][ T5938] Buffer I/O error on dev nbd0, logical block 3, async page read
[   82.332215][ T5938] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.336513][ T5938] Buffer I/O error on dev nbd0, logical block 0, async page read
[   82.343613][ T5938] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.347102][ T5938] Buffer I/O error on dev nbd0, logical block 1, async page read
[   82.355743][ T5938] ldm_validate_partition_table(): Disk read failed.
[   82.360659][ T6628] netlink: 'syz.0.349': attribute type 1 has an invalid length.
[   82.362474][ T5938] Dev nbd0: unable to read RDB block 0
[   82.366662][ T5938]  nbd0: unable to read partition table
[   82.378779][ T5938] ldm_validate_partition_table(): Disk read failed.
[   82.382444][ T5938] Dev nbd0: unable to read RDB block 0
[   82.385795][ T5938]  nbd0: unable to read partition table
[   82.439895][ T6628] 8021q: adding VLAN 0 to HW filter on device bond1
[   82.462656][ T6634] bond1: (slave veth5): Enslaving as an active interface with a down link
[   82.478101][ T6628] netlink: 328 bytes leftover after parsing attributes in process `syz.0.349'.
[   82.480981][ T6628] netlink: 'syz.0.349': attribute type 9 has an invalid length.
[   82.483982][ T6628] netlink: 108 bytes leftover after parsing attributes in process `syz.0.349'.
[   82.487428][ T6628] netlink: 32 bytes leftover after parsing attributes in process `syz.0.349'.
[   82.557648][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   82.561441][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   82.881895][   T10] IPVS: starting estimator thread 0...
[   82.973824][ T6656] IPVS: using max 67 ests per chain, 160800 per kthread
[   83.193892][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   83.198068][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   83.677089][ T6711] syzkaller0: entered promiscuous mode
[   83.679382][ T6711] syzkaller0: entered allmulticast mode
[   83.704109][ T6715] netlink: 'syz.2.387': attribute type 1 has an invalid length.
[   83.859511][ T6729] netlink: 14 bytes leftover after parsing attributes in process `syz.0.394'.
[   83.929575][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.397'.
[   83.932496][ T6735] netlink: 'syz.2.397': attribute type 1 has an invalid length.
[   84.039650][ T6747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.401'.
[   84.042864][ T6747] netlink: 'syz.0.401': attribute type 20 has an invalid length.
[   84.047360][ T6747] netlink: 'syz.0.401': attribute type 21 has an invalid length.
[   84.234276][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   84.473638][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[   85.273755][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   85.593768][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   86.315992][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   87.037005][ T6746] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   87.247751][ T6783] Bluetooth: MGMT ver 1.23
[   87.342560][ T6791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.420'.
[   87.354859][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   87.620504][ T6809] netlink: 16 bytes leftover after parsing attributes in process `syz.0.427'.
[   88.285635][ T6835] batman_adv: batadv0: Adding interface: gretap1
[   88.288428][ T6835] batman_adv: batadv0: The MTU of interface gretap1 is too small (1442) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.298161][ T6835] batman_adv: batadv0: Interface activated: gretap1
[   88.404762][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   88.429717][ T6847] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[   88.635702][ T2373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   88.958329][ T2373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   88.962067][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   89.016040][ T6887] netlink: 'syz.2.463': attribute type 12 has an invalid length.
[   89.018701][ T6887] netlink: 'syz.2.463': attribute type 29 has an invalid length.
[   89.021341][ T6887] netlink: 148 bytes leftover after parsing attributes in process `syz.2.463'.
[   89.025062][ T6887] netlink: 59 bytes leftover after parsing attributes in process `syz.2.463'.
[   89.028514][ T6887] netlink: 'syz.2.463': attribute type 12 has an invalid length.
[   89.031207][ T6887] netlink: 'syz.2.463': attribute type 29 has an invalid length.
[   89.035953][ T6887] netlink: 148 bytes leftover after parsing attributes in process `syz.2.463'.
[   89.039298][ T6887] netlink: 59 bytes leftover after parsing attributes in process `syz.2.463'.
[   89.445114][ T5069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   89.618872][ T6920] tipc: Can't bind to reserved service type 0
[   89.666568][ T6927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.482'.
[   89.672416][ T6925] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   89.849922][ T6938] syzkaller1: entered promiscuous mode
[   89.851784][ T6938] syzkaller1: entered allmulticast mode
[   89.900769][ T6927] virtio_blk virtio1: 1/0/0 default/read/poll queues
[   89.906617][ T6927] virtio_blk virtio1: [vda] 262144 512-byte logical blocks (134 MB/128 MiB)
[   90.035101][ T6927] syz.2.482 (6927) used greatest stack depth: 20024 bytes left
[   90.086607][ T6953] netlink: 'syz.1.493': attribute type 1 has an invalid length.
[   90.354555][ T6975] netlink: 3084 bytes leftover after parsing attributes in process `syz.0.505'.
[   90.360128][ T6975] netlink: 198796 bytes leftover after parsing attributes in process `syz.0.505'.
[   90.372223][ T6977] ip_tables: iptables: counters copy to user failed while replacing table
[   90.380546][ T6978] sctp: [Deprecated]: syz.1.501 (pid 6978) Use of struct sctp_assoc_value in delayed_ack socket option.
[   90.380546][ T6978] Use struct sctp_sack_info instead
[   90.390537][ T6978] sctp: [Deprecated]: syz.1.501 (pid 6978) Use of struct sctp_assoc_value in delayed_ack socket option.
[   90.390537][ T6978] Use struct sctp_sack_info instead
[   90.484272][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   90.665482][ T6993] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   90.672811][ T6993] bond2 (unregistering): Released all slaves
[   90.874770][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   90.953025][ T7005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   92.030490][ T7062] netlink: 'syz.1.543': attribute type 1 has an invalid length.
[   92.084915][ T7066] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   92.096309][ T7068] netlink: 'syz.1.546': attribute type 10 has an invalid length.
[   92.148163][ T7068] team0 (unregistering): Port device team_slave_0 removed
[   92.159863][ T7068] team0 (unregistering): Port device team_slave_1 removed
[   92.501863][ T7093] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.559'.
[   92.513866][ T7093] netlink: 116 bytes leftover after parsing attributes in process `syz.0.559'.
[   92.566861][ T5675] net_ratelimit: 9 callbacks suppressed
[   92.566878][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   92.695918][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.566'.
[   92.733066][ T7107] team0: No ports can be present during mode change
[   92.864219][ T7116] xt_TCPMSS: Only works on TCP SYN packets
[   92.899750][ T7120] No such timeout policy "syz0"
[   93.498197][ T7150] netlink: 24 bytes leftover after parsing attributes in process `syz.2.586'.
[   93.600250][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   94.635711][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   94.694243][ T7163] netlink: 830 bytes leftover after parsing attributes in process `syz.0.591'.
[   94.890390][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.596'.
[   94.895256][ T7173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'.
[   94.900010][ T7173] netlink: 'syz.1.596': attribute type 6 has an invalid length.
[   94.915512][ T5665] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   94.918808][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.596'.
[   94.922230][ T5665] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   94.927442][ T7173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'.
[   94.931825][ T5665] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   94.934939][ T7173] netlink: 'syz.1.596': attribute type 6 has an invalid length.
[   94.939268][ T5665] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   95.034096][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.353117][ T7202] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   95.359375][ T7202] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[   95.366115][ T7202] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   95.678653][ T5069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   96.102770][ T7249] netlink: 424 bytes leftover after parsing attributes in process `syz.2.631'.
[   96.106558][ T7249] netlink: 424 bytes leftover after parsing attributes in process `syz.2.631'.
[   96.225461][ T7256] netlink: 32 bytes leftover after parsing attributes in process `syz.2.634'.
[   96.319244][ T7268] netlink: 'syz.0.639': attribute type 2 has an invalid length.
[   96.720764][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   96.931977][ T7301] bridge_slave_0: left allmulticast mode
[   96.938220][ T7301] bridge_slave_0: left promiscuous mode
[   96.942488][ T7301] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.973249][ T7301] bridge_slave_1: left allmulticast mode
[   96.976367][ T7301] bridge_slave_1: left promiscuous mode
[   96.979213][ T7301] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.995411][ T7301] bond0: (slave bond_slave_0): Releasing backup interface
[   97.005031][ T7301] bond0: (slave bond_slave_1): Releasing backup interface
[   97.038348][ T7301] team0: Port device team_slave_0 removed
[   97.052697][ T7301] team0: Port device team_slave_1 removed
[   97.060520][ T7301] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.070964][ T7301] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.088462][ T7301] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.091076][ T7301] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.100417][ T7301] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   97.139500][ T7304] team0: Mode changed to "loadbalance"
[   97.754892][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   98.076514][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   98.127839][ T7357] xt_bpf: check failed: parse error
[   98.554664][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   98.794920][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   98.864115][   T34] audit: type=1800 audit(1789676928.610:2): pid=7387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.686" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1167 res=0 errno=0
[   98.914676][ T7389] __nla_validate_parse: 1 callbacks suppressed
[   98.914690][ T7389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.687'.
[   99.193726][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[   99.199277][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   99.206024][ T2373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   99.243249][ T7401] netlink: 'syz.0.692': attribute type 28 has an invalid length.
[   99.247575][ T7401] netlink: 32 bytes leftover after parsing attributes in process `syz.0.692'.
[   99.655321][ T7423] bridge_slave_0: left allmulticast mode
[   99.661247][ T7423] bridge_slave_0: left promiscuous mode
[   99.672129][ T7423] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.694246][ T7427] netlink: 20 bytes leftover after parsing attributes in process `syz.2.704'.
[   99.702586][ T7423] bridge_slave_1: left allmulticast mode
[   99.713588][ T7423] bridge_slave_1: left promiscuous mode
[   99.716693][ T7423] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.743911][ T7423] bond0: (slave bond_slave_0): Releasing backup interface
[   99.774262][ T7423] bond0: (slave bond_slave_1): Releasing backup interface
[   99.795172][ T7423] team0: Port device team_slave_0 removed
[   99.830297][ T7423] team0: Port device team_slave_1 removed
[   99.834624][ T5069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   99.835509][ T7423] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.849553][ T7423] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.622186][ T7423] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.628460][ T7423] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.640881][ T7423] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  100.874126][ T5069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  101.348118][ T7454] batman_adv: batadv0: Interface deactivated: gretap1
[  101.356650][ T5656] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.360434][ T5656] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.365659][ T5656] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.377812][ T5656] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.913831][ T7477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  102.820964][ T7433] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  102.955264][ T7455] net_ratelimit: 1 callbacks suppressed
[  102.955282][ T7455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  102.960784][ T7485] netlink: 'syz.2.717': attribute type 3 has an invalid length.
[  102.960807][ T7485] netlink: 646 bytes leftover after parsing attributes in process `syz.2.717'.
[  103.095019][ T7493] syzkaller0: entered promiscuous mode
[  103.097027][ T7493] syzkaller0: entered allmulticast mode
[  103.104204][ T7493] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.107360][ T7492] tipc: Resetting bearer <eth:syzkaller0>
[  103.124911][ T7492] tipc: Disabling bearer <eth:syzkaller0>
[  103.382853][ T7455] IPVS: starting estimator thread 0...
[  103.474410][ T7512] IPVS: using max 67 ests per chain, 160800 per kthread
[  103.537984][ T7521] netlink: 256 bytes leftover after parsing attributes in process `syz.1.733'.
[  103.541851][ T7521] unsupported nlmsg_type 40
[  103.595789][ T7524] netlink: 'syz.1.734': attribute type 10 has an invalid length.
[  103.603189][ T7525] tls_set_device_offload: netdev not found
[  103.606077][ T7524] netlink: 72 bytes leftover after parsing attributes in process `syz.1.734'.
[  103.623181][ T7524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.734'.
[  103.783151][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.742'.
[  103.801008][ T5656] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0
[  103.805784][ T5656] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0
[  103.809327][ T5656] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0
[  103.812358][ T5656] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0
[  103.994221][ T7477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  104.047828][ T7556] netlink: 48 bytes leftover after parsing attributes in process `syz.2.748'.
[  104.102854][ T7560] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  104.200265][ T7566] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  104.237552][ T7568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.754'.
[  104.334958][ T7570] raw_sendmsg: syz.2.755 forgot to set AF_INET. Fix it!
[  104.721407][ T7590] netlink: 44 bytes leftover after parsing attributes in process `syz.2.764'.
[  104.786957][ T7595] sctp: [Deprecated]: syz.2.767 (pid 7595) Use of struct sctp_assoc_value in delayed_ack socket option.
[  104.786957][ T7595] Use struct sctp_sack_info instead
[  105.033752][ T7455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  105.070437][ T7618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.775'.
[  105.089109][ T7614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  105.094771][ T7618] veth3: entered allmulticast mode
[  105.274454][ T7458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  105.344128][ T7477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  105.406414][ T7477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  105.444881][ T7477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  105.514579][ T7458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  105.904653][ T7647] netlink: 36 bytes leftover after parsing attributes in process `syz.1.789'.
[  106.102225][ T7649] netlink: 'syz.0.790': attribute type 83 has an invalid length.
[  106.299507][ T7660] netlink: 'syz.0.795': attribute type 1 has an invalid length.
[  106.345462][ T7660] 8021q: adding VLAN 0 to HW filter on device bond2
[  106.400773][ T7660] bond2: (slave veth7): Enslaving as an active interface with a down link
[  106.417221][ T7665] Bluetooth: hci0: unsupported parameter 512
[  106.420043][ T7665] Bluetooth: hci0: invalid length 0, exp 2 for type 27
[  106.515483][ T7666] 8021q: adding VLAN 0 to HW filter on device batadv1
[  106.529029][ T7666] bond2: (slave batadv1): making interface the new active one
[  106.542898][ T7666] batadv1: entered promiscuous mode
[  106.546483][ T7666] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  106.557906][ T7660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.795'.
[  106.569049][ T7673] netlink: 'syz.1.800': attribute type 2 has an invalid length.
[  107.228024][ T7709] syzkaller0: entered promiscuous mode
[  107.231248][ T7709] syzkaller0: entered allmulticast mode
[  107.278104][ T7713] syzkaller0: entered promiscuous mode
[  107.279930][ T7713] syzkaller0: entered allmulticast mode
[  107.361784][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.821'.
[  107.365164][ T7716] netlink: 16 bytes leftover after parsing attributes in process `syz.0.821'.
[  107.444298][ T7725] netlink: 16 bytes leftover after parsing attributes in process `syz.1.826'.
[  107.484030][ T7730] netlink: 'syz.0.828': attribute type 10 has an invalid length.
[  107.487292][ T7730] netlink: 55 bytes leftover after parsing attributes in process `syz.0.828'.
[  107.966098][ T7472] net_ratelimit: 29 callbacks suppressed
[  107.966110][ T7472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  108.078173][ T7472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  108.272759][ T7455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  108.280636][ T7769] 0: renamed from hsr0
[  108.296936][ T7769] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  108.306758][ T7769] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  108.317061][ T7769] 0: entered allmulticast mode
[  108.319747][ T7769] hsr_slave_0: entered allmulticast mode
[  108.322973][ T7769] hsr_slave_1: entered allmulticast mode
[  108.327939][ T7769] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  108.729613][ T7818] Cannot find set identified by id 0 to match
[  109.273708][ T7455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  109.584201][ T7862] __nla_validate_parse: 2 callbacks suppressed
[  109.584217][ T7862] netlink: 32 bytes leftover after parsing attributes in process `syz.2.880'.
[  110.044868][ T7871] syzkaller1: entered promiscuous mode
[  110.047317][ T7871] syzkaller1: entered allmulticast mode
[  110.313774][ T7455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.116316][ T7458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.354283][ T7472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.357901][ T7477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.434184][ T7472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  112.295487][ T7878] x_tables: duplicate underflow at hook 4
[  112.413299][ T7880] netlink: 'syz.1.887': attribute type 1 has an invalid length.
[  112.640085][ T7886] netlink: 68 bytes leftover after parsing attributes in process `syz.1.890'.
[  112.888314][ T7894] x_tables: duplicate underflow at hook 3
[  112.922083][ T7898] netlink: 20 bytes leftover after parsing attributes in process `syz.2.896'.
[  112.931324][ T7898] netlink: 'syz.2.896': attribute type 1 has an invalid length.
[  112.951050][ T7898] netlink: 60 bytes leftover after parsing attributes in process `syz.2.896'.
[  112.958983][ T7901] netlink: 52 bytes leftover after parsing attributes in process `syz.0.897'.
[  113.147421][ T7908] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  113.335264][ T7918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.904'.
[  113.434316][ T7455] net_ratelimit: 1 callbacks suppressed
[  113.434333][ T7455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  113.740739][ T7947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  114.186511][ T7965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.925'.
[  114.473697][ T7455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  114.476426][ T7455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  114.886445][ T5608] Bluetooth: hci1: Malformed HCI Event
[  115.031403][ T7993] netlink: 60 bytes leftover after parsing attributes in process `syz.2.934'.
[  115.104487][ T8006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  115.108449][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  115.124622][ T8006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  115.128216][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  115.515743][ T7476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  115.716171][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.949'.
[  115.850989][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.946'.
[  116.043628][ T8049] netlink: 60 bytes leftover after parsing attributes in process `syz.0.956'.
[  116.711899][ T8069] netlink: 24 bytes leftover after parsing attributes in process `syz.2.965'.
[  116.791082][ T8064] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0
[  116.800316][ T8064] ip6gretap0: entered promiscuous mode
[  116.806803][ T8064] ip6gretap0: entered allmulticast mode
[  116.830081][ T5656] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  116.883232][    C0] vcan0: j1939_tp_rxtimer: 0xffff8881133d7800: rx timeout, send abort
[  117.169217][ T8093] netlink: 128 bytes leftover after parsing attributes in process `syz.0.973'.
[  117.360541][ T8108] lo: entered allmulticast mode
[  117.362973][ T8108] lo: left allmulticast mode
[  117.384267][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811510ac00: rx timeout, send abort
[  117.388234][    C0] vcan0: j1939_tp_rxtimer: 0xffff8881133d7800: abort rx timeout. Force session deactivation
[  117.483064][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.982'.
[  117.485973][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.982'.
[  117.578566][ T5348] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  117.785661][ T5665] batadv1: left promiscuous mode
[  117.886880][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811510ac00: abort rx timeout. Force session deactivation
[  118.047996][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'.
[  118.079436][ T8153] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  118.105595][ T8153] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  118.198805][ T8163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.999'.
[  118.782967][ T5348] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  118.796359][ T8203] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  119.109631][ T8214] openvswitch: netlink: Flow key attr not present in new flow.
[  119.702023][ T8231] nbd: must specify at least one socket
[  119.761708][ T8235] netlink: 'syz.2.1027': attribute type 21 has an invalid length.
[  119.765923][ T8235] netlink: 'syz.2.1027': attribute type 5 has an invalid length.
[  121.660191][ T8265] __nla_validate_parse: 3 callbacks suppressed
[  121.660204][ T8265] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1035'.
[  121.666327][ T8265] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1035'.
[  122.147480][ T8299] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  122.238667][ T8308] team_slave_0: entered allmulticast mode
[  122.633781][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  122.776080][ T5348] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  122.814977][ T8347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1067'.
[  122.818634][ T8347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1067'.
[  122.911832][ T8203] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  123.329132][ T8355] batadv_slave_1: entered promiscuous mode
[  123.333922][ T8354] batadv_slave_1: left promiscuous mode
[  123.388860][ T8357] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1072'.
[  123.922810][ T8382] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1084'.
[  124.541815][ T8414] batman_adv: batadv0: Adding interface: syzkaller0
[  124.545061][ T8414] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  124.560343][ T8414] batman_adv: batadv0: Interface activated: syzkaller0
[  124.568587][ T8413] batman_adv: batadv0: Interface deactivated: syzkaller0
[  124.595092][ T8413] batman_adv: batadv0: Removing interface: syzkaller0
[  124.836059][ T5656] tipc: Subscription rejected, illegal request
[  124.871426][ T8425] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1102'.
[  124.876215][ T8425] bond0: ARP target 0.0.0.2 is already present
[  124.878902][ T8425] bond0: option arp_ip_target: invalid value (33554432)
[  124.938345][ T8427] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1103'.
[  125.124092][ T8440] syzkaller1: entered promiscuous mode
[  125.126624][ T8440] syzkaller1: entered allmulticast mode
[  125.418152][ T8449] syzkaller0: entered promiscuous mode
[  125.432958][ T8449] syzkaller0: entered allmulticast mode
[  125.630236][ T8461] syzkaller0: entered promiscuous mode
[  125.634240][ T8461] syzkaller0: entered allmulticast mode
[  126.199534][ T8503] netlink: 'syz.2.1139': attribute type 1 has an invalid length.
[  126.316279][ T8503] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  126.331130][ T8503] bond2 (unregistering): Released all slaves
[  126.337038][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1144'.
[  126.376478][ T8513] bridge1: entered promiscuous mode
[  126.413057][ T8513] bond1: (slave bridge1): making interface the new active one
[  126.431280][ T8523] netlink: 'syz.1.1146': attribute type 30 has an invalid length.
[  126.437569][ T8513] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  126.515201][ T8523] netlink: 'syz.1.1146': attribute type 30 has an invalid length.
[  126.735303][   T55] block nbd0: Receive control failed (result -32)
[  126.740355][ T6629] block nbd0: Receive control failed (result -32)
[  126.776276][ T5348] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  126.832667][ T8539] netlink: 'syz.1.1152': attribute type 29 has an invalid length.
[  126.937712][ T8545] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1155'.
[  126.941339][ T8545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1155'.
[  127.250704][ T8563] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  127.693888][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  128.134363][ T8597] x_tables: duplicate entry at hook 1
[  128.250804][ T8597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1177'.
[  128.288092][ T8597] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1177'.
[  128.307069][ T8597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1177'.
[  128.309419][ T8603] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1178'.
[  128.724550][ T8635] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1190'.
[  129.304962][ T8672] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  129.540035][ T5665] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  129.547054][ T5665] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  129.554196][ T5665] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  129.565949][ T5665] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  129.596885][ T8693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1215'.
[  129.617124][ T8691] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  129.625351][ T8691] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  129.631926][ T8691] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  129.643728][ T8691] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  129.660608][ T8691] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  130.444316][ T8744] netlink: 'syz.1.1240': attribute type 29 has an invalid length.
[  130.447401][ T8744] netlink: 'syz.1.1240': attribute type 1 has an invalid length.
[  130.527505][ T8750] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  130.702994][ T8760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1247'.
[  130.785452][ T5348] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  130.964179][ T8778] xt_hashlimit: size too large, truncated to 1048576
[  131.116499][ T8786] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1259'.
[  131.319944][ T8798] x_tables: duplicate entry at hook 1
[  131.771706][ T8826] pim6reg1: entered promiscuous mode
[  131.775403][ T8826] pim6reg1: entered allmulticast mode
[  131.854426][ T8203] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  132.348809][ T8880] __nla_validate_parse: 3 callbacks suppressed
[  132.348820][ T8880] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1305'.
[  132.356471][ T8880] netlink: 'syz.2.1305': attribute type 1 has an invalid length.
[  132.360006][ T8880] netlink: 'syz.2.1305': attribute type 2 has an invalid length.
[  132.499063][ T8892] team0: entered promiscuous mode
[  132.500887][ T8892] team0: entered allmulticast mode
[  132.503230][ T8892] 8021q: adding VLAN 0 to HW filter on device team0
[  132.525140][ T8894] netlink: 'syz.1.1312': attribute type 1 has an invalid length.
[  132.555630][ T8894] 8021q: adding VLAN 0 to HW filter on device bond1
[  132.582179][ T8894] bond1: (slave syz_tun): making interface the new active one
[  132.591927][ T8894] bond1: (slave syz_tun): Enslaving as an active interface with an up link
[  132.720277][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1316'.
[  132.723552][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  133.117821][ T1371] ieee802154 phy0 wpan0: encryption failed: -22
[  133.120194][ T1371] ieee802154 phy1 wpan1: encryption failed: -22
[  133.122543][ T1371] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  133.994220][ T5608] Bluetooth: hci2: command tx timeout
[  134.460898][ T8932] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1330'.
[  134.479418][ T8932] NCSI netlink: No device for ifindex 566712438
[  134.487818][ T8934] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  134.614679][ T8946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1337'.
[  134.629958][ T8946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1337'.
[  134.684785][ T8948] bridge0: port 1(wlan1) entered blocking state
[  134.699021][ T8948] bridge0: port 1(wlan1) entered disabled state
[  134.701721][ T8948] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  134.720298][ T8948] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[  134.742879][ T8948] mac80211_hwsim hwsim6 wlan1 (unregistering): left allmulticast mode
[  134.750901][ T8948] mac80211_hwsim hwsim6 wlan1 (unregistering): left promiscuous mode
[  134.756071][ T8948] bridge0: port 1(wlan1) entered disabled state
[  134.877551][ T8962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1345'.
[  134.889909][ T8960] bridge3: entered promiscuous mode
[  135.007566][ T8973] batman_adv: batadv0: Adding interface: syzkaller0
[  135.010851][ T8973] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  135.023174][ T8973] batman_adv: batadv0: Interface activated: syzkaller0
[  135.045812][ T8972] batman_adv: batadv0: Interface deactivated: syzkaller0
[  135.069026][ T8972] batman_adv: batadv0: Removing interface: syzkaller0
[  135.371407][ T8996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1360'.
[  135.447594][ T9002] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1363'.
[  135.450941][ T9002] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1363'.
[  135.740147][ T5631] tipc: Subscription rejected, illegal request
[  135.858225][ T9025] netlink: 'syz.1.1369': attribute type 1 has an invalid length.
[  135.897687][ T9024] bond2: option updelay: invalid value (18446744073709518847)
[  135.901015][ T9024] bond2: option updelay: allowed values 0 - 2147483647
[  135.905753][ T9024] bond2 (unregistering): Released all slaves
[  136.167589][ T9032] syzkaller0: entered promiscuous mode
[  136.170069][ T9032] syzkaller0: entered allmulticast mode
[  136.719101][ T9045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1379'.
[  136.925571][ T9069] netlink: 'syz.2.1390': attribute type 3 has an invalid length.
[  137.082171][ T9081] batman_adv: batadv0: Adding interface: syzkaller0
[  137.084736][ T9081] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  137.093294][ T9081] batman_adv: batadv0: Interface activated: syzkaller0
[  137.100832][ T9080] batman_adv: batadv0: Interface deactivated: syzkaller0
[  137.139061][ T9080] batman_adv: batadv0: Removing interface: syzkaller0
[  137.355612][ T9098] netlink: 'syz.2.1403': attribute type 9 has an invalid length.
[  137.358128][ T9098] netlink: 'syz.2.1403': attribute type 6 has an invalid length.
[  137.360615][ T9098] netlink: 'syz.2.1403': attribute type 7 has an invalid length.
[  137.363089][ T9098] netlink: 'syz.2.1403': attribute type 8 has an invalid length.
[  137.753614][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  138.177053][ T9124] __nla_validate_parse: 2 callbacks suppressed
[  138.177072][ T9124] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1415'.
[  138.438620][ T9136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1421'.
[  138.442294][ T9136] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1421'.
[  138.453040][ T9138] netlink: 'syz.0.1422': attribute type 1 has an invalid length.
[  138.503093][ T9138] gretap1: entered allmulticast mode
[  138.512148][ T9138] bond3: (slave gretap1): making interface the new active one
[  138.520176][ T9138] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  138.960050][ T5608] Bluetooth: hci0: Received unexpected HCI Event 0x00
[  139.000147][ T9172] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1439'.
[  139.099690][ T9179] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1441'.
[  139.317847][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1447'.
[  139.555017][ T9211] syzkaller0: entered promiscuous mode
[  139.557182][ T9211] syzkaller0: entered allmulticast mode
[  139.735600][ T9216] syzkaller0: entered promiscuous mode
[  139.737524][ T9216] syzkaller0: entered allmulticast mode
[  139.781223][ T9216] tipc: Started in network mode
[  139.785355][ T9216] tipc: Node identity 6eaee2ed40ac, cluster identity 4711
[  139.788754][ T9216] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.809801][ T9215] tipc: Resetting bearer <eth:syzkaller0>
[  139.850144][ T9215] tipc: Disabling bearer <eth:syzkaller0>
[  140.149480][ T5665] nci: nci_rx_work: unknown MT 0x6
[  140.153250][ T9250] netlink: 'syz.0.1461': attribute type 4 has an invalid length.
[  140.179637][ T9250] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1461'.
[  140.212133][ T9250] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  140.409415][ T9268] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1471'.
[  140.860731][ T9299] netlink: 'syz.1.1478': attribute type 1 has an invalid length.
[  142.793653][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  143.013590][ T9237] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  143.585359][ T9356] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  143.747691][ T9359] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1495'.
[  143.840138][ T9366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1499'.
[  144.770423][ T9426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1520'.
[  145.019168][ T9446] netlink: 'syz.2.1526': attribute type 16 has an invalid length.
[  145.022474][ T9446] netlink: 'syz.2.1526': attribute type 17 has an invalid length.
[  145.041640][ T9446] gretap0: entered promiscuous mode
[  145.080522][ T9446] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.083170][ T9446] team0: left promiscuous mode
[  145.085112][ T9446] team0: left allmulticast mode
[  145.090696][ T9446] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.127759][ T9446] team_slave_0: left allmulticast mode
[  145.138257][ T9452] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1526'.
[  145.140471][ T9446] 0: left allmulticast mode
[  145.143042][ T9446] hsr_slave_0: left allmulticast mode
[  145.145369][ T9446] hsr_slave_1: left allmulticast mode
[  145.149534][ T9446] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  145.156783][ T9451] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  145.302752][ T9460] SET target dimension over the limit!
[  145.501992][ T9478] xfrm1: entered allmulticast mode
[  145.736000][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1554'.
[  145.814409][ T9505] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  145.872279][ T9511] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1558'.
[  147.249063][ T8203] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  147.668722][ T9577] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  147.817215][ T9588] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1589'.
[  147.821068][ T9588] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1589'.
[  147.833746][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  147.892144][ T9592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  148.006313][ T9601] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1595'.
[  148.313006][ T9622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1605'.
[  148.511189][ T9637] xt_connbytes: Forcing CT accounting to be enabled
[  148.887405][ T9665] bond0: (slave macvlan0): Opening slave failed
[  149.507338][ T9707] __nla_validate_parse: 1 callbacks suppressed
[  149.507356][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1639'.
[  150.514065][ T9721] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1647'.
[  151.037620][ T9732] tc_dump_action: action bad kind
[  152.152413][ T9685] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  152.812441][ T9794] netlink: 'syz.0.1681': attribute type 1 has an invalid length.
[  152.837656][ T9798] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1682'.
[  152.857308][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1682'.
[  152.873602][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  152.909430][ T9806] netem: change failed
[  152.947661][ T9809] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1688'.
[  152.991125][ T9814] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1691'.
[  153.006149][ T9809] netlink: 'syz.2.1688': attribute type 3 has an invalid length.
[  153.010802][ T9809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1688'.
[  153.263859][ T9837] syzkaller0: entered promiscuous mode
[  153.266355][ T9837] syzkaller0: entered allmulticast mode
[  155.152709][ T9910] netlink: 'syz.1.1736': attribute type 1 has an invalid length.
[  155.329504][ T9925] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1744'.
[  155.544553][    C0] vcan0: j1939_tp_rxtimer: 0xffff888112042000: rx timeout, send abort
[  155.548222][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888112042000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  155.776153][ T9957] netlink: 'syz.0.1757': attribute type 1 has an invalid length.
[  155.969543][ T9979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1768'.
[  157.259005][T10008] syzkaller0: entered promiscuous mode
[  157.263647][T10008] syzkaller0: entered allmulticast mode
[  157.432519][T10022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1787'.
[  157.503941][T10029] ip_tables: iptables: counters copy to user failed while replacing table
[  157.540711][T10031] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1791'.
[  157.913730][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  158.616474][T10091] netlink: 'syz.1.1819': attribute type 1 has an invalid length.
[  158.739237][T10097] netlink: 'syz.2.1821': attribute type 1 has an invalid length.
[  158.748830][T10097] netlink: 'syz.2.1821': attribute type 3 has an invalid length.
[  158.761807][T10097] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1821'.
[  159.039396][T10116] xt_CT: You must specify a L4 protocol and not use inversions on it
[  159.170153][T10134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1837'.
[  159.525884][T10164] netlink: 'syz.0.1852': attribute type 1 has an invalid length.
[  159.650765][T10175] netlink: 'syz.1.1857': attribute type 17 has an invalid length.
[  159.740878][T10183] netlink: 'syz.1.1861': attribute type 1 has an invalid length.
[  160.046691][T10210] netlink: 'syz.2.1873': attribute type 1 has an invalid length.
[  161.034434][ T7458] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  161.129901][T10298] tc action pedit offset must be on 32 bit boundaries
[  161.213593][ T7463] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  161.505057][ T5665] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  162.160994][T10337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1935'.
[  162.557896][   T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  162.575751][   T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  162.649091][T10368] netlink: 'syz.0.1950': attribute type 37 has an invalid length.
[  162.739679][T10377] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1955'.
[  162.877119][T10388] xt_CT: You must specify a L4 protocol and not use inversions on it
[  162.921574][T10390] geneve0: entered promiscuous mode
[  162.928276][T10390] geneve0: left promiscuous mode
[  162.953534][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  162.959094][T10394] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  162.962193][T10394] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  163.104498][ T7455] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  164.641536][T10475] netlink: 'syz.2.2001': attribute type 3 has an invalid length.
[  164.930705][T10497] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  164.938983][T10497] bond2 (unregistering): Released all slaves
[  165.221522][T10522] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2019'.
[  165.225038][T10522] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2019'.
[  165.228923][T10522] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2019'.
[  165.359397][T10535] ip6tnl1: entered allmulticast mode
[  165.366034][   T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  165.369834][   T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  165.384858][ T7458] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  165.963623][ T7458] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  165.983760][T10569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2042'.
[  166.395233][ T7463] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  166.626719][T10613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2062'.
[  166.633548][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  167.296678][T10677] netlink: 'syz.2.2093': attribute type 1 has an invalid length.
[  167.356780][T10683] netlink: 1700 bytes leftover after parsing attributes in process `syz.2.2096'.
[  167.362955][T10683] netlink: 1700 bytes leftover after parsing attributes in process `syz.2.2096'.
[  167.842012][T10735] gretap0: entered allmulticast mode
[  167.988059][T10747] gtp0: entered promiscuous mode
[  167.989740][T10747] gtp0: entered allmulticast mode
[  167.993555][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  168.722170][T10797] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  169.195999][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  169.609882][T10837] netlink: 'syz.2.2169': attribute type 16 has an invalid length.
[  169.612425][T10837] netlink: 'syz.2.2169': attribute type 3 has an invalid length.
[  169.617368][T10837] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.2169'.
[  169.716913][T10843] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2171'.
[  169.851824][T10851] ip6gre3: entered promiscuous mode
[  169.855885][T10851] ip6gre3: entered allmulticast mode
[  169.860881][ T5665] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  169.864332][T10851] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  169.865135][ T5665] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  169.894000][ T7455] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  169.915698][ T7455] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  169.922979][T10856] netlink: 'syz.0.2178': attribute type 12 has an invalid length.
[  169.926371][T10856] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2178'.
[  169.976931][T10859] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2179'.
[  170.022591][T10861] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  170.025634][T10861] ip6gre2: left promiscuous mode
[  170.030079][T10861] bridge1: left promiscuous mode
[  170.033320][T10861] ip6gre3: left promiscuous mode
[  170.176416][ T7455] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  170.394602][T10882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2191'.
[  171.365499][T10902] nbd: couldn't find a device at index 1
[  171.421359][T10906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2201'.
[  171.590337][T10915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2204'.
[  171.602876][T10915] netlink: 580 bytes leftover after parsing attributes in process `syz.0.2204'.
[  171.910896][T10945] netlink: 'syz.1.2221': attribute type 1 has an invalid length.
[  172.030907][T10956] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  172.325599][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0
[  172.329350][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0
[  172.332934][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0
[  172.340933][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0
[  173.033619][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  173.646707][T11040] __nla_validate_parse: 6 callbacks suppressed
[  173.646722][T11040] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2260'.
[  173.652986][T11040] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2260'.
[  173.729631][T11046] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2263'.
[  173.763606][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  174.779211][T11150] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2303'.
[  174.908811][T11158] netlink: 3084 bytes leftover after parsing attributes in process `syz.0.2306'.
[  174.911906][T11158] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2306'.
[  175.353654][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  175.597221][T11216] netlink: 'syz.2.2336': attribute type 1 has an invalid length.
[  175.601585][T11216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2336'.
[  176.072060][T11262] netlink: 'syz.1.2355': attribute type 7 has an invalid length.
[  176.077385][T11262] netlink: 'syz.1.2355': attribute type 8 has an invalid length.
[  176.242874][T11274] syzkaller0: entered promiscuous mode
[  176.244908][T11274] syzkaller0: entered allmulticast mode
[  176.827393][T11314] Bluetooth: hci0: invalid length 0, exp 2 for type 15
[  176.965753][T11324] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2385'.
[  177.273602][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  177.384313][T11360] syzkaller0: entered promiscuous mode
[  177.386565][T11360] syzkaller0: entered allmulticast mode
[  178.073503][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  178.252466][T11383] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2413'.
[  178.507212][ T8203] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  178.608968][ T5608] Bluetooth: hci2: link tx timeout
[  178.612630][ T5608] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  178.845442][T11425] xt_hashlimit: size too large, truncated to 1048576
[  178.927111][T11431] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  179.269552][T11445] tc_dump_action: action bad kind
[  179.470274][T11460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2448'.
[  179.616593][T11477] netlink: 'syz.1.2456': attribute type 10 has an invalid length.
[  179.675055][T11484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2458'.
[  179.779367][T11493] sch_fq: defrate 2 ignored.
[  179.785818][T11493] syzkaller0: entered promiscuous mode
[  179.793115][T11493] syzkaller0: entered allmulticast mode
[  179.804165][T11493] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.810949][T11492] tipc: Resetting bearer <eth:syzkaller0>
[  179.851115][T11492] tipc: Disabling bearer <eth:syzkaller0>
[  180.274745][T11519] netlink: 'syz.0.2474': attribute type 1 has an invalid length.
[  180.636485][ T4991] Bluetooth: hci2: command 0x0406 tx timeout
[  180.659183][T11548] netlink: 'syz.1.2485': attribute type 1 has an invalid length.
[  180.862443][T11566] bridge0: port 3(veth1_virt_wifi) entered blocking state
[  180.865870][T11566] bridge0: port 3(veth1_virt_wifi) entered disabled state
[  180.868872][T11566] veth1_virt_wifi: entered allmulticast mode
[  180.877944][T11566] veth1_virt_wifi: left allmulticast mode
[  180.922838][T11572] IPv6: sit2: Disabled Multicast RS
[  180.982551][T11578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2499'.
[  181.127423][T11574] syzkaller1: entered promiscuous mode
[  181.129717][T11574] syzkaller1: entered allmulticast mode
[  181.240591][T11601] ip6erspan0: entered allmulticast mode
[  181.283703][ T5600] Bluetooth: hci0: command 0x0406 tx timeout
[  181.285988][ T4991] Bluetooth: hci1: command 0x0406 tx timeout
[  181.753527][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  182.733838][T11671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2540'.
[  182.742106][T11671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2540'.
[  182.786209][T11675] netlink: 'syz.0.2542': attribute type 13 has an invalid length.
[  182.789706][T11675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2542'.
[  183.032216][T11703] netlink: 'syz.2.2554': attribute type 10 has an invalid length.
[  183.044689][T11703] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2554'.
[  183.062473][T11703] dummy0: entered promiscuous mode
[  183.078337][T11703] bridge0: port 1(dummy0) entered blocking state
[  183.081225][T11703] bridge0: port 1(dummy0) entered disabled state
[  183.085516][T11703] dummy0: entered allmulticast mode
[  183.113503][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  183.681037][T11747] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2575'.
[  183.727523][T11751] netlink: 'syz.1.2577': attribute type 1 has an invalid length.
[  183.879313][T11765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2584'.
[  184.070348][T11785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2594'.
[  184.177300][T11796] netlink: 'syz.2.2599': attribute type 1 has an invalid length.
[  184.467580][T11827] bond2: Unable to set up delay as MII monitoring is disabled
[  184.479037][T11827] bond2 (unregistering): Released all slaves
[  184.678973][T11852] RDS: rds_bind could not find a transport for 0:0:80::, load rds_tcp or rds_rdma?
[  184.743816][T11859] __nla_validate_parse: 3 callbacks suppressed
[  184.743829][T11859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2630'.
[  185.042554][T11889] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2642'.
[  185.255764][T11898] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2646'.
[  185.261867][T11898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2646'.
[  185.265662][T11898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2646'.
[  185.608703][T11917] netlink: 'syz.1.2655': attribute type 3 has an invalid length.
[  185.701861][T11926] macsec1: entered allmulticast mode
[  185.705297][T11926] 8021q: adding VLAN 0 to HW filter on device macsec1
[  186.142041][T11951] syzkaller0: entered promiscuous mode
[  186.145426][T11951] syzkaller0: entered allmulticast mode
[  188.153617][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  188.529916][T12011] tc action pedit 'at' offset 5 out of bounds
[  188.812195][T12042] netlink: 'syz.1.2711': attribute type 1 has an invalid length.
[  188.841874][T12042] 8021q: adding VLAN 0 to HW filter on device bond2
[  188.855668][T12042] bond2: (slave geneve2): making interface the new active one
[  188.861600][T12042] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  188.877325][T12042] syz.1.2711 (12042) used greatest stack depth: 19976 bytes left
[  188.921161][T12048] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  188.925891][T12048] IPv6: NLM_F_CREATE should be set when creating new route
[  188.928794][T12048] IPv6: NLM_F_CREATE should be set when creating new route
[  189.727864][T12058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2720'.
[  189.965530][T12077] netlink: 'syz.0.2724': attribute type 1 has an invalid length.
[  190.062735][T12086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2729'.
[  190.110096][T12089] syzkaller0: entered promiscuous mode
[  190.111946][T12089] syzkaller0: entered allmulticast mode
[  190.296098][T12101] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  190.304360][T12101] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  191.059314][T12157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2761'.
[  191.108752][   T56] block nbd3: Receive control failed (result -1)
[  191.257858][T12172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2766'.
[  191.353636][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  191.525160][T12186] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2773'.
[  191.579581][T12190] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2775'.
[  191.582471][T12190] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2775'.
[  191.649083][T12193] 
[  191.650141][T12193] ======================================================
[  191.652870][T12193] WARNING: possible circular locking dependency detected
[  191.655634][T12193] syzkaller #0 Not tainted
[  191.657569][T12193] ------------------------------------------------------
[  191.660329][T12193] syz.2.2777/12193 is trying to acquire lock:
[  191.662750][T12193] ffff88801e750370 (&vma_lock->rw_sema){++++}-{4:4}, at: hugetlb_fault+0x3dd/0x12c0
[  191.666492][T12193] 
[  191.666492][T12193] but task is already holding lock:
[  191.669419][T12193] ffff888162ab0308 (&hugetlb_fault_mutex_table[i]){+.+.}-{4:4}, at: hugetlb_fault+0x3d0/0x12c0
[  191.673781][T12193] 
[  191.673781][T12193] which lock already depends on the new lock.
[  191.673781][T12193] 
[  191.677810][T12193] 
[  191.677810][T12193] the existing dependency chain (in reverse order) is:
[  191.681375][T12193] 
[  191.681375][T12193] -> #9 (&hugetlb_fault_mutex_table[i]){+.+.}-{4:4}:
[  191.684830][T12193]        __mutex_lock+0x19d/0x1590
[  191.686927][T12193]        hugetlb_fault+0x3d0/0x12c0
[  191.689006][T12193]        handle_mm_fault+0x1f44/0x3080
[  191.691167][T12193]        do_user_addr_fault+0x744/0x1340
[  191.693410][T12193]        exc_page_fault+0x6a/0xc0
[  191.695531][T12193]        asm_exc_page_fault+0x26/0x30
[  191.697610][T12193]        rep_movs_alternative+0x75/0x90
[  191.699787][T12193]        _copy_from_iter+0x408/0x1660
[  191.701914][T12193]        tcp_sendmsg_locked+0x2620/0x55c0
[  191.704119][T12193]        tcp_sendmsg+0x2f/0x50
[  191.705981][T12193]        ____sys_sendmsg+0x853/0xa20
[  191.708038][T12193]        ___sys_sendmsg+0x2a5/0x360
[  191.709823][T12193]        __sys_sendmmsg+0x27c/0x4e0
[  191.711478][T12193]        __x64_sys_sendmmsg+0xa0/0xc0
[  191.713078][T12193]        do_syscall_64+0x174/0x580
[  191.714605][T12193]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.716719][T12193] 
[  191.716719][T12193] -> #8 (&mm->mmap_lock){++++}-{4:4}:
[  191.719188][T12193]        __might_fault+0xcb/0x130
[  191.720693][T12193]        _copy_from_user+0x28/0xb0
[  191.722214][T12193]        csum_and_copy_from_iter_full+0x210/0x1fb0
[  191.724147][T12193]        ip_generic_getfrag+0x149/0x2d0
[  191.725786][T12193]        __ip6_append_data+0x3aef/0x4080
[  191.727573][T12193]        ip6_append_data+0x108/0x270
[  191.729297][T12193]        rawv6_sendmsg+0x1298/0x18c0
[  191.730908][T12193]        ____sys_sendmsg+0x853/0xa20
[  191.732584][T12193]        ___sys_sendmsg+0x2a5/0x360
[  191.734243][T12193]        __x64_sys_sendmsg+0x1bd/0x2a0
[  191.735868][T12193]        do_syscall_64+0x174/0x580
[  191.737542][T12193]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.739459][T12193] 
[  191.739459][T12193] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  191.742008][T12193]        lock_sock_nested+0x41/0x100
[  191.743580][T12193]        inet_shutdown+0x6a/0x390
[  191.745083][T12193]        nbd_mark_nsock_dead+0x2cb/0x550
[  191.746829][T12193]        recv_work+0x1cef/0x1e10
[  191.748511][T12193]        process_scheduled_works+0xa8e/0x14e0
[  191.750400][T12193]        worker_thread+0xa47/0xfb0
[  191.751933][T12193]        kthread+0x389/0x470
[  191.753314][T12193]        ret_from_fork+0x514/0xb70
[  191.754852][T12193]        ret_from_fork_asm+0x1a/0x30
[  191.756508][T12193] 
[  191.756508][T12193] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  191.758849][T12193]        __mutex_lock+0x19d/0x1590
[  191.760417][T12193]        nbd_queue_rq+0x373/0x1150
[  191.761988][T12193]        blk_mq_dispatch_rq_list+0x499/0x1990
[  191.763801][T12193]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  191.765868][T12193]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  191.767890][T12193]        blk_mq_run_hw_queue+0x348/0x4f0
[  191.769555][T12193]        blk_mq_dispatch_list+0xd11/0xe10
[  191.771279][T12193]        blk_mq_flush_plug_list+0x45f/0x540
[  191.773061][T12193]        __blk_flush_plug+0x3ed/0x4d0
[  191.774858][T12193]        __submit_bio+0x465/0x560
[  191.776559][T12193]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  191.778411][T12193]        block_read_full_folio+0x599/0x830
[  191.780202][T12193]        filemap_read_folio+0x12c/0x3a0
[  191.781850][T12193]        do_read_cache_folio+0x354/0x590
[  191.783790][T12193]        read_part_sector+0xb6/0x2b0
[  191.785392][T12193]        adfspart_check_ICS+0xb1/0x960
[  191.787044][T12193]        bdev_disk_changed+0x82b/0x1780
[  191.788662][T12193]        blkdev_get_whole+0x372/0x510
[  191.790246][T12193]        bdev_open+0x324/0xd70
[  191.791971][T12193]        blkdev_open+0x461/0x600
[  191.793884][T12193]        do_dentry_open+0x816/0x1380
[  191.795523][T12193]        vfs_open+0x3b/0x340
[  191.797000][T12193]        path_openat+0x2e3b/0x3890
[  191.798593][T12193]        do_file_open+0x23e/0x4a0
[  191.800320][T12193]        do_sys_openat2+0x113/0x200
[  191.802264][T12193]        __x64_sys_openat+0x138/0x170
[  191.803970][T12193]        do_syscall_64+0x174/0x580
[  191.805659][T12193]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.808016][T12193] 
[  191.808016][T12193] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  191.810189][T12193]        __mutex_lock+0x19d/0x1590
[  191.811862][T12193]        nbd_queue_rq+0xc1/0x1150
[  191.813657][T12193]        blk_mq_dispatch_rq_list+0x499/0x1990
[  191.815626][T12193]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  191.817708][T12193]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  191.819866][T12193]        blk_mq_run_hw_queue+0x348/0x4f0
[  191.821962][T12193]        blk_mq_dispatch_list+0xd11/0xe10
[  191.823810][T12193]        blk_mq_flush_plug_list+0x45f/0x540
[  191.825635][T12193]        __blk_flush_plug+0x3ed/0x4d0
[  191.827310][T12193]        __submit_bio+0x465/0x560
[  191.828866][T12193]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  191.830737][T12193]        block_read_full_folio+0x599/0x830
[  191.832525][T12193]        filemap_read_folio+0x12c/0x3a0
[  191.834349][T12193]        do_read_cache_folio+0x354/0x590
[  191.836162][T12193]        read_part_sector+0xb6/0x2b0
[  191.837848][T12193]        adfspart_check_ICS+0xb1/0x960
[  191.839471][T12193]        bdev_disk_changed+0x82b/0x1780
[  191.841277][T12193]        blkdev_get_whole+0x372/0x510
[  191.843073][T12193]        bdev_open+0x324/0xd70
[  191.844532][T12193]        blkdev_open+0x461/0x600
[  191.846040][T12193]        do_dentry_open+0x816/0x1380
[  191.847639][T12193]        vfs_open+0x3b/0x340
[  191.849041][T12193]        path_openat+0x2e3b/0x3890
[  191.850568][T12193]        do_file_open+0x23e/0x4a0
[  191.852127][T12193]        do_sys_openat2+0x113/0x200
[  191.853701][T12193]        __x64_sys_openat+0x138/0x170
[  191.855321][T12193]        do_syscall_64+0x174/0x580
[  191.856870][T12193]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.858788][T12193] 
[  191.858788][T12193] -> #4 (set->srcu){.+.+}-{0:0}:
[  191.861030][T12193]        __synchronize_srcu+0xc9/0x2f0
[  191.862733][T12193]        elevator_switch+0x1e8/0x7b0
[  191.864353][T12193]        elevator_change+0x2fa/0x480
[  191.866226][T12193]        elevator_set_default+0x375/0x440
[  191.868073][T12193]        blk_register_queue+0x3f3/0x4e0
[  191.869753][T12193]        __add_disk+0x6cb/0xe30
[  191.871282][T12193]        add_disk_fwnode+0xfb/0x4b0
[  191.872858][T12193]        nbd_dev_add+0x733/0xb60
[  191.874370][T12193]        nbd_init+0x15f/0x1e0
[  191.875943][T12193]        do_one_initcall+0x250/0x870
[  191.877548][T12193]        do_initcall_level+0x10a/0x1a0
[  191.879209][T12193]        do_initcalls+0x59/0xa0
[  191.880696][T12193]        kernel_init_freeable+0x29d/0x3e0
[  191.882432][T12193]        kernel_init+0x1d/0x1d0
[  191.883930][T12193]        ret_from_fork+0x514/0xb70
[  191.885479][T12193]        ret_from_fork_asm+0x1a/0x30
[  191.887100][T12193] 
[  191.887100][T12193] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  191.889936][T12193]        __mutex_lock+0x19d/0x1590
[  191.891754][T12193]        elevator_change+0x1af/0x480
[  191.893846][T12193]        elevator_set_none+0xb5/0x140
[  191.895945][T12193]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  191.898401][T12193]        nbd_start_device+0x189/0xb30
[  191.900499][T12193]        nbd_genl_connect+0x1597/0x1c10
[  191.902625][T12193]        genl_family_rcv_msg_doit+0x233/0x340
[  191.904515][T12193]        genl_rcv_msg+0x614/0x7a0
[  191.906082][T12193]        netlink_rcv_skb+0x226/0x4a0
[  191.907661][T12193]        genl_rcv+0x28/0x40
[  191.909060][T12193]        netlink_unicast+0x7bb/0x940
[  191.910771][T12193]        netlink_sendmsg+0x813/0xb40
[  191.912873][T12193]        ____sys_sendmsg+0x9b9/0xa20
[  191.914711][T12193]        ___sys_sendmsg+0x2a5/0x360
[  191.916640][T12193]        __x64_sys_sendmsg+0x1bd/0x2a0
[  191.918320][T12193]        do_syscall_64+0x174/0x580
[  191.919858][T12193]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.921759][T12193] 
[  191.921759][T12193] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  191.924542][T12193]        blk_alloc_queue+0x544/0x690
[  191.926302][T12193]        __blk_mq_alloc_disk+0x194/0x390
[  191.928257][T12193]        nbd_dev_add+0x494/0xb60
[  191.929783][T12193]        nbd_init+0x15f/0x1e0
[  191.931267][T12193]        do_one_initcall+0x250/0x870
[  191.932888][T12193]        do_initcall_level+0x10a/0x1a0
[  191.934543][T12193]        do_initcalls+0x59/0xa0
[  191.936046][T12193]        kernel_init_freeable+0x29d/0x3e0
[  191.937791][T12193]        kernel_init+0x1d/0x1d0
[  191.939285][T12193]        ret_from_fork+0x514/0xb70
[  191.940836][T12193]        ret_from_fork_asm+0x1a/0x30
[  191.942464][T12193] 
[  191.942464][T12193] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  191.944643][T12193]        fs_reclaim_acquire+0x71/0x100
[  191.946419][T12193]        __kmalloc_cache_noprof+0x40/0x660
[  191.948199][T12193]        allocate_file_region_entries+0x1ef/0x5a0
[  191.950139][T12193]        __vma_reservation_common+0x7c2/0x9c0
[  191.952279][T12193]        alloc_hugetlb_folio+0x2cf/0x1620
[  191.954490][T12193]        hugetlb_no_page+0xfdd/0x1fc0
[  191.956580][T12193]        hugetlb_fault+0x570/0x12c0
[  191.958617][T12193]        handle_mm_fault+0x1f44/0x3080
[  191.960747][T12193]        __get_user_pages+0x1678/0x2720
[  191.962946][T12193]        populate_vma_page_range+0x2be/0x3c0
[  191.964752][T12193]        __mm_populate+0x25f/0x390
[  191.966403][T12193]        vm_mmap_pgoff+0x353/0x4e0
[  191.968437][T12193]        ksys_mmap_pgoff+0x57d/0x760
[  191.970517][T12193]        do_syscall_64+0x174/0x580
[  191.972521][T12193]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.975006][T12193] 
[  191.975006][T12193] -> #0 (&vma_lock->rw_sema){++++}-{4:4}:
[  191.978080][T12193]        __lock_acquire+0x1520/0x2cd0
[  191.980192][T12193]        lock_acquire+0x106/0x350
[  191.982157][T12193]        down_read+0x47/0x2e0
[  191.984006][T12193]        hugetlb_fault+0x3dd/0x12c0
[  191.986037][T12193]        handle_mm_fault+0x1f44/0x3080
[  191.988176][T12193]        do_user_addr_fault+0xa4d/0x1340
[  191.990352][T12193]        exc_page_fault+0x6a/0xc0
[  191.992121][T12193]        asm_exc_page_fault+0x26/0x30
[  191.994062][T12193] 
[  191.994062][T12193] other info that might help us debug this:
[  191.994062][T12193] 
[  191.997811][T12193] Chain exists of:
[  191.997811][T12193]   &vma_lock->rw_sema --> &mm->mmap_lock --> &hugetlb_fault_mutex_table[i]
[  191.997811][T12193] 
[  192.003315][T12193]  Possible unsafe locking scenario:
[  192.003315][T12193] 
[  192.005660][T12193]        CPU0                    CPU1
[  192.007327][T12193]        ----                    ----
[  192.008954][T12193]   lock(&hugetlb_fault_mutex_table[i]);
[  192.010661][T12193]                                lock(&mm->mmap_lock);
[  192.012700][T12193]                                lock(&hugetlb_fault_mutex_table[i]);
[  192.015351][T12193]   rlock(&vma_lock->rw_sema);
[  192.016978][T12193] 
[  192.016978][T12193]  *** DEADLOCK ***
[  192.016978][T12193] 
[  192.019877][T12193] 2 locks held by syz.2.2777/12193:
[  192.021447][T12193]  #0: ffff88801e518388 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  192.024221][T12193]  #1: ffff888162ab0308 (&hugetlb_fault_mutex_table[i]){+.+.}-{4:4}, at: hugetlb_fault+0x3d0/0x12c0
[  192.027421][T12193] 
[  192.027421][T12193] stack backtrace:
[  192.029670][T12193] CPU: 0 UID: 0 PID: 12193 Comm: syz.2.2777 Not tainted syzkaller #0 PREEMPT(full) 
[  192.029682][T12193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  192.029689][T12193] Call Trace:
[  192.029694][T12193]  <TASK>
[  192.029700][T12193]  dump_stack_lvl+0xe8/0x150
[  192.029713][T12193]  print_circular_bug+0x2e1/0x300
[  192.029727][T12193]  check_noncircular+0x12e/0x150
[  192.029739][T12193]  __lock_acquire+0x1520/0x2cd0
[  192.029750][T12193]  ? __mutex_lock+0x30f/0x1590
[  192.029760][T12193]  ? page_table_check_set+0x4b3/0x510
[  192.029768][T12193]  ? page_table_check_set+0x126/0x510
[  192.029776][T12193]  ? hugetlb_fault+0x3dd/0x12c0
[  192.029784][T12193]  lock_acquire+0x106/0x350
[  192.029793][T12193]  ? hugetlb_fault+0x3dd/0x12c0
[  192.029803][T12193]  down_read+0x47/0x2e0
[  192.029841][T12193]  ? hugetlb_fault+0x3dd/0x12c0
[  192.029857][T12193]  hugetlb_fault+0x3dd/0x12c0
[  192.029876][T12193]  ? __pfx_hugetlb_fault+0x10/0x10
[  192.029895][T12193]  ? lock_vma_under_rcu+0x1d1/0x500
[  192.029907][T12193]  handle_mm_fault+0x1f44/0x3080
[  192.029920][T12193]  ? handle_mm_fault+0xec/0x3080
[  192.029931][T12193]  ? __pfx_handle_mm_fault+0x10/0x10
[  192.029940][T12193]  ? lock_vma_under_rcu+0x45a/0x500
[  192.029947][T12193]  ? __pfx_do_futex+0x10/0x10
[  192.029959][T12193]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  192.029969][T12193]  do_user_addr_fault+0xa4d/0x1340
[  192.029981][T12193]  ? trace_page_fault_user+0x84/0x1e0
[  192.029990][T12193]  exc_page_fault+0x6a/0xc0
[  192.029998][T12193]  asm_exc_page_fault+0x26/0x30
[  192.030006][T12193] RIP: 0033:0x7fb683c67702
[  192.030016][T12193] Code: 30 48 8b 14 24 48 85 d2 74 17 8b 44 24 10 0f c8 89 c0 48 89 44 24 10 48 83 fa 01 0f 85 aa 02 00 00 48 8b 44 24 18 8b 74 24 10 <89> 30 e9 1e fe ff ff 48 8b 44 24 18 8b 10 48 8b 04 24 48 85 c0 0f
[  192.030022][T12193] RSP: 002b:00007ffd4347baf0 EFLAGS: 00010246
[  192.030029][T12193] RAX: 0000200000000180 RBX: 0000000000000004 RCX: 0000000000000000
[  192.030034][T12193] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 000055557d34f3d8
[  192.030039][T12193] RBP: 00007ffd4347bc10 R08: 0000000000000000 R09: 0000000000000000
[  192.030043][T12193] R10: 0000000000000011 R11: 0000000000000000 R12: 00007ffd4347bc50
[  192.030048][T12193] R13: 00007fb684025fac R14: 000000000002ec2b R15: 00007fb684025fa0
[  192.030056][T12193]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  192.227048][ T5599] tipc: Resetting bearer <eth:syz_tun>
[  192.275421][ T5599] bond1: (slave syz_tun): Releasing active interface
[  192.295307][ T5599] tipc: Resetting bearer <eth:syz_tun>
[  192.306190][ T5599] tipc: Disabling bearer <eth:syz_tun>
[  192.633709][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  193.193524][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  194.554910][ T1371] ieee802154 phy0 wpan0: encryption failed: -22
[  194.558029][ T1371] ieee802154 phy1 wpan1: encryption failed: -22
[  194.560946][ T1371] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  197.113735][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  198.233586][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
