last executing test programs:

1.899926015s ago: executing program 1 (id=1552):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01800000000000000000030202000900010053"], 0x20}, 0x1, 0x40030000000000, 0x0, 0x20000400}, 0x0)

1.089608137s ago: executing program 1 (id=1555):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214717a70700000000430600000000000000000000721d5874f72c000000000000000feb56a29357215d78fc44fac3f44da0", 0x33}], 0x1, 0x3e42, 0x407ff)

980.597111ms ago: executing program 1 (id=1559):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)

980.366282ms ago: executing program 1 (id=1560):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000004b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x40091}, 0x40)

932.239156ms ago: executing program 1 (id=1563):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f00000004c0)=0x27)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r2}, 0x8)

810.560258ms ago: executing program 0 (id=1567):
socket$kcm(0x10, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
socketpair(0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = socket$inet(0x2, 0x3, 0x33)
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2000)

762.291755ms ago: executing program 0 (id=1568):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0xb)
writev(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0)

622.663851ms ago: executing program 0 (id=1569):
unshare(0x40600)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0x1}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r0, 0x10000}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r1}, 0x38)

622.370461ms ago: executing program 2 (id=1570):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000000200)="e16ad3f4a802aaf9d8611a0b38472fb7b435285c118130a10764b68ad75a8817c7742a7ffd1073b1bb336b6ebadd9eb049ed9e65f7a813b6892c2251475ba10b51a64c339e07ef37", 0x48}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="d6", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f00000003c0)="24575a133ced050020e56d946964b2b9dfa3ee193cb64a1211e25adf788b95be7954e1910e775bb81ffbd135d331739ffb05b79966d199bfa3ed395440c44700"/75, 0x4b}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0x4}], 0x2}}], 0x40000000000037d, 0x4008001)
setsockopt$sock_int(r0, 0x1, 0x20, 0x0, 0x0)

622.293189ms ago: executing program 0 (id=1571):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}, 0x2}}, 0x10)
bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10)
close(0x3)

622.100855ms ago: executing program 2 (id=1572):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)

610.686662ms ago: executing program 0 (id=1573):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x10040)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x34, 0xfffc, 0x0, 0x8, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x80, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x2, 0xb2}]}}}}}}}, 0x0)

550.701847ms ago: executing program 0 (id=1574):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2ff49051d920611, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0}, 0x94)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xe)

549.849584ms ago: executing program 2 (id=1575):
socketpair(0x21, 0x2, 0x45, &(0x7f0000000000))

549.706314ms ago: executing program 2 (id=1576):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1ac}}, 0x0)

462.532608ms ago: executing program 2 (id=1577):
close(0x3)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x4924924924925c1, 0x8801)

379.091888ms ago: executing program 2 (id=1578):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6}, 0x10)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @remote}, 0x10)
r3 = socket$packet(0x11, 0x3, 0x300)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})

0s ago: executing program 1 (id=1579):
r0 = socket(0x2, 0x80805, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'erspan0\x00'})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCBRDELBR(r1, 0x89a3, &(0x7f0000000200)='bridge0\x00')

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:17110' (ED25519) to the list of known hosts.
syzkaller login: [   56.339253][ T5593] cgroup: Unknown subsys name 'net'
[   56.426075][ T5593] cgroup: Unknown subsys name 'cpuset'
[   56.430064][ T5593] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.676480][ T5593] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   61.498140][ T5000] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.502374][ T5000] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.505932][ T5000] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.509777][ T5000] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.513007][ T5000] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.530018][   T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.533243][   T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.536576][   T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.542220][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.545249][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   61.563028][ T5000] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.567383][ T5000] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.570108][ T5000] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.574678][ T5000] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.577717][ T5000] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.079777][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.082993][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.086663][ T5615] bridge_slave_0: entered allmulticast mode
[   62.089602][ T5615] bridge_slave_0: entered promiscuous mode
[   62.116211][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.119308][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.122178][ T5615] bridge_slave_1: entered allmulticast mode
[   62.124966][ T5615] bridge_slave_1: entered promiscuous mode
[   62.157844][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.160350][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.162799][ T5619] bridge_slave_0: entered allmulticast mode
[   62.166152][ T5619] bridge_slave_0: entered promiscuous mode
[   62.187380][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.189793][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.192129][ T5619] bridge_slave_1: entered allmulticast mode
[   62.194841][ T5619] bridge_slave_1: entered promiscuous mode
[   62.200041][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.221726][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.236824][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.262568][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.267882][ T5615] team0: Port device team_slave_0 added
[   62.270093][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.272545][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.275250][ T5611] bridge_slave_0: entered allmulticast mode
[   62.279021][ T5611] bridge_slave_0: entered promiscuous mode
[   62.293148][ T5615] team0: Port device team_slave_1 added
[   62.301565][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.304527][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.307232][ T5611] bridge_slave_1: entered allmulticast mode
[   62.310206][ T5611] bridge_slave_1: entered promiscuous mode
[   62.326530][ T5619] team0: Port device team_slave_0 added
[   62.347608][ T5619] team0: Port device team_slave_1 added
[   62.350578][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.353585][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.362873][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.396979][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.399744][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.408362][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.416199][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.419711][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.422591][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.432719][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.438638][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.441077][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.449692][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.460910][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.501136][ T5611] team0: Port device team_slave_0 added
[   62.526254][ T5611] team0: Port device team_slave_1 added
[   62.545366][ T5615] hsr_slave_0: entered promiscuous mode
[   62.548540][ T5615] hsr_slave_1: entered promiscuous mode
[   62.567780][ T5619] hsr_slave_0: entered promiscuous mode
[   62.570794][ T5619] hsr_slave_1: entered promiscuous mode
[   62.573902][ T5619] debugfs: 'hsr0' already exists in 'hsr'
[   62.576618][ T5619] Cannot create hsr debugfs directory
[   62.591148][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.593998][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.604290][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.610341][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.613174][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.622245][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.750023][ T5611] hsr_slave_0: entered promiscuous mode
[   62.753281][ T5611] hsr_slave_1: entered promiscuous mode
[   62.756368][ T5611] debugfs: 'hsr0' already exists in 'hsr'
[   62.758695][ T5611] Cannot create hsr debugfs directory
[   62.991058][ T5615] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   62.997498][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   63.000477][ T5615] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.005470][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   63.008233][ T5615] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.012569][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   63.016082][ T5615] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.020347][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   63.068605][ T5619] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.074148][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   63.080803][ T5619] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.085724][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   63.088951][ T5619] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.095642][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   63.108630][ T5619] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.114168][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   63.168458][ T5611] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.173249][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   63.176599][ T5611] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.180441][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   63.190394][ T5611] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.196110][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   63.198637][ T5611] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.202663][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   63.290091][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.325055][ T5615] 8021q: adding VLAN 0 to HW filter on device team0
[   63.340821][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.343544][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.350212][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.361291][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.363896][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.370833][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.388415][ T5619] 8021q: adding VLAN 0 to HW filter on device team0
[   63.402146][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.404558][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.425757][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.428430][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.435962][ T5611] 8021q: adding VLAN 0 to HW filter on device team0
[   63.447080][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.449392][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.463067][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.465945][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.544689][   T53] Bluetooth: hci0: command tx timeout
[   63.624572][   T53] Bluetooth: hci2: command tx timeout
[   63.627130][   T53] Bluetooth: hci1: command tx timeout
[   63.825691][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.846571][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.879588][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.905707][ T5615] veth0_vlan: entered promiscuous mode
[   63.910837][ T5619] veth0_vlan: entered promiscuous mode
[   63.925094][ T5615] veth1_vlan: entered promiscuous mode
[   63.932059][ T5619] veth1_vlan: entered promiscuous mode
[   63.972018][ T5611] veth0_vlan: entered promiscuous mode
[   63.978014][ T5615] veth0_macvtap: entered promiscuous mode
[   63.992419][ T5615] veth1_macvtap: entered promiscuous mode
[   64.009028][ T5619] veth0_macvtap: entered promiscuous mode
[   64.015057][ T5611] veth1_vlan: entered promiscuous mode
[   64.021694][ T5619] veth1_macvtap: entered promiscuous mode
[   64.036384][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.054891][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.071232][ T5666] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.075482][ T5666] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.078662][ T5666] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.085977][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.097225][ T5666] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.107391][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.126729][ T5611] veth0_macvtap: entered promiscuous mode
[   64.135110][ T5666] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.139145][ T5666] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.144770][ T5611] veth1_macvtap: entered promiscuous mode
[   64.162712][ T5666] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.166597][ T5666] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.201334][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.213048][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.215851][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.254359][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.272352][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.278791][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.279716][ T5666] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.300589][ T5666] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.304216][  T280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.308479][  T280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.309264][ T5666] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.332886][ T5666] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.381370][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.382598][ T5615] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.384689][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.486334][  T996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.496249][  T996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.520796][  T280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.531383][  T280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.715863][ T5727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4'.
[   65.106979][ T5759] netlink: 'syz.1.19': attribute type 1 has an invalid length.
[   65.111546][ T5759] netlink: 'syz.1.19': attribute type 2 has an invalid length.
[   65.131266][ T5761] netlink: 44 bytes leftover after parsing attributes in process `syz.2.20'.
[   65.136745][ T5761] netlink: 43 bytes leftover after parsing attributes in process `syz.2.20'.
[   65.140353][ T5761] netlink: 'syz.2.20': attribute type 5 has an invalid length.
[   65.145877][ T5761] netlink: 43 bytes leftover after parsing attributes in process `syz.2.20'.
[   65.352146][ T5777] netlink: 20 bytes leftover after parsing attributes in process `syz.0.27'.
[   65.624977][ T5000] Bluetooth: hci0: command tx timeout
[   65.650283][ T5802] netlink: 'syz.1.40': attribute type 32 has an invalid length.
[   65.653214][ T5802] netlink: 20 bytes leftover after parsing attributes in process `syz.1.40'.
[   65.694740][ T5806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42'.
[   65.704276][ T5000] Bluetooth: hci1: command tx timeout
[   65.704709][   T53] Bluetooth: hci2: command tx timeout
[   65.712233][ T5806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42'.
[   65.720777][ T5806] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   65.988339][ T5823] netlink: 616 bytes leftover after parsing attributes in process `syz.1.50'.
[   66.231960][ T5845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.57'.
[   66.241417][ T5848] netlink: 'syz.0.58': attribute type 32 has an invalid length.
[   66.260898][   T54] block nbd0: Receive control failed (result -1)
[   66.690389][ T5666] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   66.693644][ T5869] Zero length message leads to an empty skb
[   66.703556][ T5666] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   66.711566][ T5666] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   66.719244][ T5666] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   66.749017][ T5871] netlink: 'syz.1.67': attribute type 9 has an invalid length.
[   66.869765][ T5879] syz.0.70 uses obsolete (PF_INET,SOCK_PACKET)
[   67.347816][ T5911] v: renamed from ip6_vti0 (while UP)
[   67.704336][ T5000] Bluetooth: hci0: command tx timeout
[   67.784534][ T5000] Bluetooth: hci2: command tx timeout
[   67.784713][   T53] Bluetooth: hci1: command tx timeout
[   68.716862][ T5994] syzkaller0: entered promiscuous mode
[   68.719256][ T5994] syzkaller0: entered allmulticast mode
[   68.791264][ T5996] netlink: 'syz.1.123': attribute type 30 has an invalid length.
[   68.805640][ T5646] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   68.805658][ T5996] netlink: 'syz.1.123': attribute type 30 has an invalid length.
[   68.812942][ T5646] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   68.819477][ T5646] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   68.827168][ T5646] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   69.215480][ T6017] xt_l2tp: invalid flags combination: 0
[   69.726064][ T6056] __nla_validate_parse: 13 callbacks suppressed
[   69.726080][ T6056] netlink: 20 bytes leftover after parsing attributes in process `syz.0.152'.
[   69.733250][ T6056] netlink: 'syz.0.152': attribute type 4 has an invalid length.
[   69.783491][   T53] Bluetooth: hci0: command tx timeout
[   69.865463][   T53] Bluetooth: hci1: command tx timeout
[   69.874908][   T53] Bluetooth: hci2: command tx timeout
[   70.311712][ T6095] syzkaller0: entered promiscuous mode
[   70.314949][ T6095] syzkaller0: entered allmulticast mode
[   70.320706][ T6089] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.164'.
[   70.325123][ T6089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.164'.
[   70.600596][ T6112] netlink: 'syz.2.174': attribute type 2 has an invalid length.
[   70.603118][ T6112] netlink: 132 bytes leftover after parsing attributes in process `syz.2.174'.
[   71.073047][ T6130] tipc: Started in network mode
[   71.079035][ T6130] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711
[   71.089403][ T6130] tipc: Enabled bearer <udp:syz0>, priority 10
[   71.153259][ T6135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.185'.
[   71.157750][ T6135] openvswitch: netlink: Unknown nsh attribute 0
[   71.316960][ T6141] netlink: 'syz.2.186': attribute type 1 has an invalid length.
[   71.319517][ T6141] netlink: 244 bytes leftover after parsing attributes in process `syz.2.186'.
[   72.047710][ T6149] hsr0: entered promiscuous mode
[   72.094345][   T10] tipc: Node number set to 4269801491
[   72.430019][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'.
[   72.502110][ T6175] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   72.677657][ T6194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'.
[   72.820175][ T6203] netlink: 'syz.1.214': attribute type 21 has an invalid length.
[   73.874626][ T6227] netlink: 'syz.0.223': attribute type 32 has an invalid length.
[   73.986850][ T6237] Illegal XDP return value 4294967274 on prog  (id 30) dev N/A, expect packet loss!
[   74.234213][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'.
[   75.340860][ T6289] x_tables: duplicate underflow at hook 3
[   75.701865][ T6319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.268'.
[   75.781145][ T6324] netlink: 24 bytes leftover after parsing attributes in process `syz.1.270'.
[   75.839398][ T6322] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[   75.976186][ T6332] warning: `syz.1.274' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   76.076224][ T6338] netlink: 24 bytes leftover after parsing attributes in process `syz.1.277'.
[   76.090345][ T6338] netlink: 24 bytes leftover after parsing attributes in process `syz.1.277'.
[   76.144551][ T6340] netlink: 277 bytes leftover after parsing attributes in process `syz.0.278'.
[   76.746928][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[   76.749984][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[   77.117628][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.296'.
[   77.122994][ T6381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'.
[   77.132436][ T6381] netlink: 'syz.2.296': attribute type 5 has an invalid length.
[   77.144157][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.296'.
[   77.147075][ T5646] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   77.150001][ T5646] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   77.152826][ T6381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'.
[   77.155754][ T6381] netlink: 'syz.2.296': attribute type 5 has an invalid length.
[   77.158461][ T5646] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   77.166544][ T5646] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   77.375622][ T6404] netlink: 56 bytes leftover after parsing attributes in process `syz.0.308'.
[   77.653041][ T6428] tc_dump_action: action bad kind
[   77.745939][ T6434] IPv6: addrconf: prefix option has invalid lifetime
[   77.996046][ T6443] syzkaller0: entered promiscuous mode
[   78.000117][ T6443] syzkaller0: entered allmulticast mode
[   78.178806][ T6457] veth1_to_bond: entered allmulticast mode
[   78.228250][ T6457] veth1_to_bond (unregistering): left allmulticast mode
[   78.240699][ T6457] bond0: (slave bond_slave_1): Releasing backup interface
[   78.640567][ T6494] netlink: 'syz.2.351': attribute type 10 has an invalid length.
[   78.682954][ T6494] tap0: tun_chr_ioctl cmd 1074025677
[   78.687237][ T6494] tap0: linktype set to 773
[   78.707839][ T6494] : entered promiscuous mode
[   78.899834][ T6517] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   78.908405][ T6517] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.912368][ T6517] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.494729][ T6546] team0: entered promiscuous mode
[   79.502560][ T6546] team_slave_0: entered promiscuous mode
[   79.506032][ T6546] team_slave_1: entered promiscuous mode
[   79.512605][ T6546] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   79.748077][ T6563] netlink: 'syz.2.381': attribute type 6 has an invalid length.
[   79.750998][ T6563] netlink: 'syz.2.381': attribute type 6 has an invalid length.
[   79.791660][ T6565] netlink: 'syz.2.382': attribute type 4 has an invalid length.
[   80.738910][ T6607] __nla_validate_parse: 4 callbacks suppressed
[   80.738926][ T6607] netlink: 24 bytes leftover after parsing attributes in process `syz.0.402'.
[   80.871157][ T6611] netlink: 'syz.2.403': attribute type 1 has an invalid length.
[   80.915861][ T6613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.404'.
[   80.959804][ T6611] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   80.974196][ T6611] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   81.055580][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.403'.
[   81.067586][ T6615] bond1: (slave gretap1): making interface the new active one
[   81.082626][ T6615] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   81.100534][ T6618] macvlan2: entered promiscuous mode
[   81.105454][ T6618] macvlan2: entered allmulticast mode
[   81.204725][ T6625] netlink: 'syz.0.408': attribute type 1 has an invalid length.
[   81.267460][ T6625] bond1: entered promiscuous mode
[   81.275827][ T6625] 8021q: adding VLAN 0 to HW filter on device bond1
[   81.326348][ T6637] netlink: 'syz.2.412': attribute type 21 has an invalid length.
[   81.337828][ T6625] bond1: (slave bridge1): making interface the new active one
[   81.351174][ T6625] bridge1: entered promiscuous mode
[   81.363165][ T6625] bridge1: left promiscuous mode
[   81.424404][ T6637] netlink: 132 bytes leftover after parsing attributes in process `syz.2.412'.
[   81.540993][ T6643] netlink: 'syz.0.415': attribute type 12 has an invalid length.
[   82.226839][  T811] IPVS: starting estimator thread 0...
[   82.232052][ T6678] IPVS: sh: FWM 3 0x00000003 - no destination available
[   82.323728][ T6679] IPVS: using max 80 ests per chain, 192000 per kthread
[   84.618689][ T6656] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   85.593084][ T6837] erspan0: entered promiscuous mode
[   85.599937][ T6839] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[   85.600020][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.489'.
[   85.997601][ T6877] erspan1: entered promiscuous mode
[   85.999618][ T6877] erspan1: entered allmulticast mode
[   86.038037][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'.
[   86.045035][ T6879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.511'.
[   86.048561][ T6879] netlink: 'syz.2.511': attribute type 14 has an invalid length.
[   86.053184][ T6879] netlink: 'syz.2.511': attribute type 13 has an invalid length.
[   86.278415][ T6895] netlink: 28 bytes leftover after parsing attributes in process `syz.1.516'.
[   87.010245][   T31] cfg80211: failed to load regulatory.db
[   87.278829][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.539'.
[   87.281764][ T6948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.539'.
[   87.286736][ T6948] netlink: 'syz.0.539': attribute type 18 has an invalid length.
[   87.607431][ T6963] netlink: 24 bytes leftover after parsing attributes in process `syz.0.545'.
[   88.551656][ T6984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.554'.
[   89.107624][ T7038] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.110923][ T7038] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.118887][ T7042] netlink: 'syz.1.573': attribute type 13 has an invalid length.
[   89.122032][ T7042] netlink: 'syz.1.573': attribute type 17 has an invalid length.
[   89.157652][ T7038] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.166224][ T7038] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.299785][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.573'.
[   89.332816][ T7042] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.340223][ T7042] 8021q: adding VLAN 0 to HW filter on device team0
[   89.345735][ T7042] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.365024][ T7042] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.367609][ T7042] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.374394][ T7042] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.377128][ T7042] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.389165][ T7042] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.394369][ T7042] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.410869][ T7042] veth1_vlan: left promiscuous mode
[   89.413870][ T7042] veth0_vlan: left promiscuous mode
[   89.416838][ T7042] veth0_vlan: entered promiscuous mode
[   89.422819][ T7042] veth1_vlan: entered promiscuous mode
[   89.430417][ T7042] veth1_macvtap: left promiscuous mode
[   89.433591][ T7042] veth0_macvtap: left promiscuous mode
[   89.437864][ T7042] veth0_macvtap: entered promiscuous mode
[   89.449121][ T7042] veth1_macvtap: entered promiscuous mode
[   89.458777][ T7042] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   89.469303][ T7042] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   89.477914][ T7042] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   89.485882][ T7042] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   89.652966][ T7059] netlink: 20 bytes leftover after parsing attributes in process `syz.2.578'.
[   90.183595][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.591'.
[   90.528574][ T7123] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component
[   91.152505][    C0] IPv4: Oversized IP packet from 172.20.20.170
[   91.177302][ T7197] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[   91.202916][ T7198] Bluetooth: MGMT ver 1.23
[   91.219448][ T7198] IPv6: NLM_F_CREATE should be specified when creating new route
[   91.391923][ T7212] __nla_validate_parse: 3 callbacks suppressed
[   91.391939][ T7212] netlink: 16 bytes leftover after parsing attributes in process `syz.2.645'.
[   91.632586][ T7232] syzkaller1: tun_chr_ioctl cmd 1074025677
[   91.634821][ T7232] syzkaller1: linktype set to 260
[   91.778790][ T7247] netlink: 9 bytes leftover after parsing attributes in process `syz.1.662'.
[   91.782598][ T7247] netlink: 9 bytes leftover after parsing attributes in process `syz.1.662'.
[   91.880300][ T7259] netlink: 1 bytes leftover after parsing attributes in process `syz.1.667'.
[   91.924301][ T7263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.669'.
[   92.136753][ T7279] netlink: 'syz.1.676': attribute type 1 has an invalid length.
[   92.140945][ T7279] netlink: 'syz.1.676': attribute type 4 has an invalid length.
[   92.147271][ T7279] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.676'.
[   92.199157][ T7280] gretap0: entered promiscuous mode
[   92.217539][ T7280] vlan2: entered promiscuous mode
[   92.320539][ T7291] IPv6: addrconf: prefix option has invalid lifetime
[   93.835251][ T7297] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   94.437007][ T7325] netlink: 'syz.2.699': attribute type 12 has an invalid length.
[   94.561357][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.703'.
[   94.650679][ T7345] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.676344][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.705'.
[   94.829616][ T7364] netlink: 27 bytes leftover after parsing attributes in process `syz.0.712'.
[   95.739501][ T7409] netlink: 'syz.0.733': attribute type 12 has an invalid length.
[   95.743608][ T7409] netlink: 132 bytes leftover after parsing attributes in process `syz.0.733'.
[   95.951540][ T7426] bond2: entered promiscuous mode
[   95.958396][ T7426] 8021q: adding VLAN 0 to HW filter on device bond2
[   96.192640][ T7446] ieee802154 phy0 wpan0: encryption failed: -22
[   96.354109][ T7467] batadv_slave_1: entered promiscuous mode
[   96.369881][ T7466] batadv_slave_1: left promiscuous mode
[   96.417867][ T7469] sctp: [Deprecated]: syz.1.761 (pid 7469) Use of struct sctp_assoc_value in delayed_ack socket option.
[   96.417867][ T7469] Use struct sctp_sack_info instead
[   96.792713][ T7497] erspan0: entered promiscuous mode
[   96.795849][ T7497] macsec1: entered promiscuous mode
[   96.798859][ T7497] erspan0: left promiscuous mode
[   96.825035][ T7501] syzkaller0: entered promiscuous mode
[   96.827244][ T7501] syzkaller0: entered allmulticast mode
[   97.920710][ T7520] __nla_validate_parse: 2 callbacks suppressed
[   97.920721][ T7520] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.781'.
[   98.115468][ T7535] netlink: 332 bytes leftover after parsing attributes in process `syz.2.788'.
[   98.123591][ T7535] netlink: 'syz.2.788': attribute type 9 has an invalid length.
[   98.126971][ T7535] netlink: 108 bytes leftover after parsing attributes in process `syz.2.788'.
[   98.130730][ T7535] netlink: 32 bytes leftover after parsing attributes in process `syz.2.788'.
[   98.134872][ T7533] tipc: Started in network mode
[   98.140183][ T7533] tipc: Node identity 82cd7c2a2246, cluster identity 4711
[   98.148415][ T7533] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.157167][ T7533] syzkaller0: entered promiscuous mode
[   98.162138][ T7533] syzkaller0: entered allmulticast mode
[   98.198776][ T7533] tipc: Resetting bearer <eth:syzkaller0>
[   98.217029][ T7532] tipc: Resetting bearer <eth:syzkaller0>
[   98.248082][ T7532] tipc: Disabling bearer <eth:syzkaller0>
[   98.279027][ T7544] netlink: 68 bytes leftover after parsing attributes in process `syz.2.792'.
[   98.499269][ T7560] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[   98.510532][ T7560] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[   98.518209][ T7560] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[   98.530492][ T7560] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   98.538932][ T7560] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   98.597763][ T7553] smbdirect: ib_dev[syz1] removed
[   98.677394][ T7578] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[   98.684386][ T7578] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   98.818622][ T7597] netlink: 28 bytes leftover after parsing attributes in process `syz.1.811'.
[   98.822622][ T7597] netlink: 28 bytes leftover after parsing attributes in process `syz.1.811'.
[   98.829053][ T7597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.811'.
[   98.976721][ T7613] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   98.981751][ T7613] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.055758][ T7613] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   99.061499][ T7613] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.100479][ T7622] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.105586][ T7622] syzkaller0: entered promiscuous mode
[   99.108257][ T7622] syzkaller0: entered allmulticast mode
[   99.146030][ T7613] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   99.149537][ T7613] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.163780][ T7622] tipc: Resetting bearer <eth:syzkaller0>
[   99.170326][ T7621] tipc: Resetting bearer <eth:syzkaller0>
[   99.181301][ T7621] tipc: Disabling bearer <eth:syzkaller0>
[   99.259624][ T7613] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   99.263142][ T7613] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.288408][ T7627] veth0: entered promiscuous mode
[   99.290475][ T7626] veth0: left promiscuous mode
[   99.317004][ T7046] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   99.324559][ T7046] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.347214][ T7046] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   99.353769][ T7046] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.376418][ T7046] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   99.381482][ T7046] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.393663][ T7046] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   99.400661][ T7046] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.470282][ T7633] syzkaller0: entered promiscuous mode
[   99.472725][ T7633] syzkaller0: entered allmulticast mode
[   99.480223][ T7633] 0: reclassify loop, rule prio 0, protocol 800
[   99.815598][ T7652] syzkaller0: entered promiscuous mode
[   99.820651][ T7652] syzkaller0: entered allmulticast mode
[   99.860401][ T7657] Bluetooth: MGMT ver 1.23
[   99.909462][ T7663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.839'.
[  100.033204][ T7675] syzkaller0: entered promiscuous mode
[  100.035938][ T7675] syzkaller0: entered allmulticast mode
[  100.048014][ T7674] netlink: 24 bytes leftover after parsing attributes in process `syz.0.845'.
[  100.333152][ T7693] tc_dump_action: action bad kind
[  100.607023][ T7714] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  101.141325][ T7749] syzkaller1: entered promiscuous mode
[  101.143261][ T7749] syzkaller1: entered allmulticast mode
[  101.439478][ T7776] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  101.444142][ T7776] bond0 (unregistering): Released all slaves
[  101.681865][ T7806] netlink: 'syz.2.899': attribute type 1 has an invalid length.
[  101.716817][ T7806] bond2: entered promiscuous mode
[  101.718713][ T7806] 8021q: adding VLAN 0 to HW filter on device bond2
[  101.751959][ T7806] bond2: left promiscuous mode
[  101.754119][ T7806] bond2: entered allmulticast mode
[  101.782921][ T7806] bond2: (slave bridge2): making interface the new active one
[  101.786173][ T7806] bridge2: entered allmulticast mode
[  101.790171][ T7806] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  102.252429][ T7842] syzkaller0: entered promiscuous mode
[  102.254870][ T7842] syzkaller0: entered allmulticast mode
[  102.688228][ T7884] openvswitch: netlink: Message has 4 unknown bytes.
[  102.702405][ T7884] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.951507][ T7914] openvswitch: netlink: IP tunnel dst address not specified
[  103.260944][ T7938] __nla_validate_parse: 12 callbacks suppressed
[  103.260958][ T7938] netlink: 68 bytes leftover after parsing attributes in process `syz.1.959'.
[  103.330044][ T7946] openvswitch: netlink: Unexpected mask (mask=200044, allowed=1004c)
[  103.436159][ T7943] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.958'.
[  103.482212][ T7959] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.965'.
[  103.733284][ T7976] netlink: 16 bytes leftover after parsing attributes in process `syz.1.971'.
[  103.749971][ T7976] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  104.350650][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'.
[  104.362429][ T8008] unsupported nlmsg_type 40
[  104.514662][ T8024] syzkaller0: entered promiscuous mode
[  104.516735][ T8024] syzkaller0: entered allmulticast mode
[  105.160531][ T8045] syzkaller0: entered promiscuous mode
[  105.162415][ T8045] syzkaller0: entered allmulticast mode
[  105.505766][ T8071] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.574425][ T8076] bridge0: port 3(macvlan2) entered blocking state
[  105.576907][ T8076] bridge0: port 3(macvlan2) entered disabled state
[  105.579517][ T8076] macvlan2: entered allmulticast mode
[  105.581233][ T8076] ip6gretap0: entered allmulticast mode
[  105.584254][ T8076] macvlan2: entered promiscuous mode
[  105.586592][ T8076] bridge0: port 3(macvlan2) entered blocking state
[  105.589261][ T8076] bridge0: port 3(macvlan2) entered forwarding state
[  105.914805][ T8105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.930848][ T8112] netlink: 'syz.2.1033': attribute type 4 has an invalid length.
[  106.618952][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1044'.
[  106.624070][ T8138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1044'.
[  106.627012][ T8097] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  106.648368][ T8138] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1044'.
[  106.714958][ T8147] ip6_vti0 speed is unknown, defaulting to 1000
[  106.718484][ T8147] ip6_vti0 speed is unknown, defaulting to 1000
[  106.727025][ T8147] ip6_vti0 speed is unknown, defaulting to 1000
[  106.874120][ T5426] ip6_vti0 speed is unknown, defaulting to 1000
[  106.877440][ T8147] infiniband syz2: set active
[  106.880035][ T8147] infiniband syz2: added ip6_vti0
[  106.912120][ T8147] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  106.917859][ T8147] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  106.923630][ T8147] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  106.927123][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1058'.
[  106.969872][ T8147] RDS/IB: syz2: added
[  106.973826][ T8147] smc: adding ib device syz2 with port count 1
[  106.976474][ T8147] smc:    ib device syz2 port 1 has no pnetid
[  106.980661][ T5426] ip6_vti0 speed is unknown, defaulting to 1000
[  106.986078][ T8147] ip6_vti0 speed is unknown, defaulting to 1000
[  107.196530][ T8147] ip6_vti0 speed is unknown, defaulting to 1000
[  107.433951][ T8147] ip6_vti0 speed is unknown, defaulting to 1000
[  107.477923][ T8189] sctp: [Deprecated]: syz.0.1067 (pid 8189) Use of struct sctp_assoc_value in delayed_ack socket option.
[  107.477923][ T8189] Use struct sctp_sack_info instead
[  107.489657][ T8189] sctp: [Deprecated]: syz.0.1067 (pid 8189) Use of struct sctp_assoc_value in delayed_ack socket option.
[  107.489657][ T8189] Use struct sctp_sack_info instead
[  107.501112][ T8189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  107.514920][ T8189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  107.779837][ T8206] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1073'.
[  108.100699][ T8228] lo speed is unknown, defaulting to 1000
[  108.103012][ T8228] lo speed is unknown, defaulting to 1000
[  108.106420][ T8228] lo speed is unknown, defaulting to 1000
[  108.160319][ T8231] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  108.390844][ T8228] infiniband sqz0: set down
[  108.392761][   T24] lo speed is unknown, defaulting to 1000
[  108.400387][ T8228] infiniband sqz0: added lo
[  108.400885][ T8247] netlink: 'syz.1.1088': attribute type 39 has an invalid length.
[  108.416762][ T8228] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  108.423047][ T8228] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  108.430645][ T8228] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  108.457535][ T8228] RDS/IB: sqz0: added
[  108.461979][ T8228] smc: adding ib device sqz0 with port count 1
[  108.465861][ T8228] smc:    ib device sqz0 port 1 has no pnetid
[  108.530950][   T24] lo speed is unknown, defaulting to 1000
[  108.534618][ T8228] lo speed is unknown, defaulting to 1000
[  108.699945][ T8228] lo speed is unknown, defaulting to 1000
[  108.809268][ T8228] lo speed is unknown, defaulting to 1000
[  109.064685][ T8267] __nla_validate_parse: 1 callbacks suppressed
[  109.064697][ T8267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1096'.
[  109.084838][ T8267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1096'.
[  109.293996][ T8278] vti0: entered promiscuous mode
[  110.437256][ T8324] netlink: 'syz.0.1120': attribute type 58 has an invalid length.
[  110.439760][ T8324] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1120'.
[  110.480786][ T8330] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1123'.
[  110.674635][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1130'.
[  110.682128][ T8345] SET target dimension over the limit!
[  110.882870][ T8361] syzkaller0: entered promiscuous mode
[  110.884830][ T8361] syzkaller0: entered allmulticast mode
[  111.065296][ T8375] netlink: 'syz.1.1145': attribute type 1 has an invalid length.
[  111.087444][ T8375] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.408228][ T8404] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1159'.
[  111.856885][ T8442] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1169'.
[  111.928064][ T8449] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1171'.
[  111.961488][ T8451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1172'.
[  112.487509][ T8518] netlink: 'syz.2.1184': attribute type 13 has an invalid length.
[  112.601371][ T8526] syzkaller0: entered promiscuous mode
[  112.603470][ T8526] syzkaller0: entered allmulticast mode
[  112.710546][ T8531] netlink: 'syz.1.1186': attribute type 2 has an invalid length.
[  112.716745][ T8531] netlink: 'syz.1.1186': attribute type 2 has an invalid length.
[  112.731107][ T8531] macsec1: entered promiscuous mode
[  112.752946][ T8537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1192'.
[  112.997734][  T811] hid-generic 0005:046A:0A0E.0001: item fetching failed at offset 0/1
[  113.003077][  T811] hid-generic 0005:046A:0A0E.0001: probe with driver hid-generic failed with error -22
[  113.998134][ T8590] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.001163][ T8590] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.099547][ T8606] openvswitch: netlink: Duplicate or invalid key (type 0).
[  114.105294][ T8606] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.129710][ T8590] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.146710][ T8590] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.154668][ T8612] xt_HMARK: spi-set and port-set can't be combined
[  114.297306][   T10] ip6_vti0 speed is unknown, defaulting to 1000
[  114.307265][ T5646] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  114.313519][ T5646] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.313871][   T10] syz2: Port: 1 Link DOWN
[  114.317285][ T5646] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  114.322320][ T5646] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.345797][ T5646] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  114.360494][ T5646] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.368213][ T5646] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  114.382065][ T5646] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.404168][ T8620] ip6_vti0 speed is unknown, defaulting to 1000
[  114.411053][ T8629] tap0: tun_chr_ioctl cmd 1074025681
[  114.430610][ T8631] __nla_validate_parse: 2 callbacks suppressed
[  114.430621][ T8631] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.1230'.
[  114.532325][ T8639] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1232'.
[  114.576440][ T8641] netlink: 'syz.1.1236': attribute type 3 has an invalid length.
[  114.580918][ T8641] netlink: 772 bytes leftover after parsing attributes in process `syz.1.1236'.
[  114.589811][ T8641] netlink: 'syz.1.1236': attribute type 3 has an invalid length.
[  114.595326][ T8641] netlink: 772 bytes leftover after parsing attributes in process `syz.1.1236'.
[  114.615419][ T8645] netlink: 'syz.2.1238': attribute type 12 has an invalid length.
[  114.675445][ T8652] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1240'.
[  114.858778][ T8665] syzkaller0: entered promiscuous mode
[  114.860884][ T8665] syzkaller0: entered allmulticast mode
[  115.030098][ T8678] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.330298][ T8708] IPv6: Can't replace route, no match found
[  115.333886][ T8708] IPv6: Can't replace route, no match found
[  115.585886][ T8730] netlink: 'syz.0.1268': attribute type 13 has an invalid length.
[  115.660078][ T8733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1268'.
[  115.673085][ T8730] hsr0: left promiscuous mode
[  116.148700][ T7046] tipc: Subscription rejected, illegal request
[  117.005695][ T8775] netlink: 'syz.2.1288': attribute type 3 has an invalid length.
[  117.224637][ T8792] tipc: Failed to remove unknown binding: 66,0,0/0:1724272928/1724272930
[  117.229219][ T8792] tipc: Failed to remove unknown binding: 66,0,0/0:1724272928/1724272929
[  117.238666][ T8792] tipc: Failed to remove unknown binding: 66,0,0/0:1724272928/1724272930
[  117.243307][ T8792] tipc: Failed to remove unknown binding: 66,0,0/0:1724272928/1724272929
[  117.251659][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1297'.
[  117.255677][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1297'.
[  117.627688][ T8832] tap0: tun_chr_ioctl cmd 1074025692
[  117.745598][ T8841] syzkaller0: entered promiscuous mode
[  117.748039][ T8841] syzkaller0: entered allmulticast mode
[  118.050211][ T8853] ip6_vti0 speed is unknown, defaulting to 1000
[  118.141987][ T8859] vlan2: entered promiscuous mode
[  118.146595][ T8859] gretap0: entered promiscuous mode
[  118.231234][ T8853] lo speed is unknown, defaulting to 1000
[  119.019979][ T8903] sit1: entered promiscuous mode
[  119.056736][ T8905] x_tables: ip_tables: icmp match: only valid for protocol 1
[  119.117665][ T8909] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1340'.
[  119.518568][ T8923] netlink: 'syz.0.1345': attribute type 3 has an invalid length.
[  120.014943][ T8933] netlink: 'syz.0.1350': attribute type 3 has an invalid length.
[  120.032455][ T8933] netlink: 'syz.0.1350': attribute type 3 has an invalid length.
[  120.101978][ T8935] ip6tnl0: Caught tx_queue_len zero misconfig
[  120.314896][ T8941] netlink: 'syz.1.1354': attribute type 11 has an invalid length.
[  120.510401][ T8960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1360'.
[  120.531272][ T7046] nci: nci_rsp_packet: unsupported rsp opcode 0xf00
[  121.208733][ T8974] syzkaller0: entered promiscuous mode
[  121.211128][ T8974] syzkaller0: entered allmulticast mode
[  122.885943][ T8996] syzkaller0: entered promiscuous mode
[  122.888357][ T8996] syzkaller0: entered allmulticast mode
[  123.440288][ T8951] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  123.640295][ T9006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1380'.
[  123.779149][ T9011] netlink: 'syz.0.1381': attribute type 1 has an invalid length.
[  124.152900][ T9009] 8021q: adding VLAN 0 to HW filter on device bond2
[  124.168711][ T9009] bond2 (unregistering): Released all slaves
[  124.235762][ T9012] gretap1: entered allmulticast mode
[  124.241251][ T9012] bond3: (slave gretap1): making interface the new active one
[  124.245761][ T9012] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  124.432216][ T9029] xt_hashlimit: size too large, truncated to 1048576
[  124.667831][ T9043] syzkaller0: entered promiscuous mode
[  124.670005][ T9043] syzkaller0: entered allmulticast mode
[  125.167345][ T9077] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  125.194850][ T9077] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  125.314413][ T9091] netlink: 'syz.0.1413': attribute type 9 has an invalid length.
[  125.317534][ T9091] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.1413'.
[  125.719872][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1419'.
[  126.044693][ T9111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1420'.
[  126.177892][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1423'.
[  126.191449][ T9120] netlink: 'syz.1.1423': attribute type 22 has an invalid length.
[  126.194610][ T9120] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1423'.
[  126.220473][ T9122] openvswitch: netlink: IPv4 tun info is not correct
[  126.311300][ T9129] netlink: 'syz.2.1428': attribute type 2 has an invalid length.
[  126.350340][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1430'.
[  126.352058][ T9132] syzkaller0: entered promiscuous mode
[  126.354239][ T9134] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1430'.
[  126.355968][ T9132] syzkaller0: entered allmulticast mode
[  126.358266][ T9134] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1430'.
[  126.612657][ T9153] syzkaller0: entered promiscuous mode
[  126.614910][ T9153] syzkaller0: entered allmulticast mode
[  127.447683][ T9166] bridge2: the hash_elasticity option has been deprecated and is always 16
[  127.450498][ T9166] bridge2: entered allmulticast mode
[  127.731952][ T9183] xt_hashlimit: size too large, truncated to 1048576
[  127.918598][ T9206] xt_hashlimit: max too large, truncated to 1048576
[  128.109419][ T9222] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  129.417452][ T9271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1489'.
[  129.438580][ T9271] 8021q: adding VLAN 0 to HW filter on device bond2
[  129.448613][ T9271] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  129.798040][ T9291] netlink: 212916 bytes leftover after parsing attributes in process `syz.1.1497'.
[  131.173662][ T9230] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  131.436275][ T9320] netlink: 'syz.2.1510': attribute type 3 has an invalid length.
[  131.494516][ T9324] netem: incorrect ge model size
[  131.497897][ T9324] netem: change failed
[  131.588675][ T9326] syzkaller1: tun_chr_ioctl cmd 21731
[  131.942770][ T9345] team0: entered promiscuous mode
[  131.950583][ T9345] team_slave_0: entered promiscuous mode
[  131.956558][ T9345] team_slave_1: entered promiscuous mode
[  131.961546][ T9345] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  132.006248][ T9352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1523'.
[  132.111222][ T9358] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1522'.
[  132.114371][ T9358] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1522'.
[  132.770521][ T9347] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  133.143072][ T9427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1553'.
[  133.846714][ T9413] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  134.123116][ T9452] netlink: 'syz.2.1565': attribute type 10 has an invalid length.
[  134.131161][ T9452] dummy0: entered promiscuous mode
[  134.134469][ T9452] team0: Port device dummy0 added
[  134.190962][ T9461] netlink: 'syz.2.1565': attribute type 10 has an invalid length.
[  134.194703][ T9461] dummy0: left promiscuous mode
[  134.202025][ T9461] team0: Port device dummy0 removed
[  134.212134][ T9461] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  134.323605][ T9452] nbd2: detected capacity change from 0 to 63
[  134.332194][ T9464] block nbd2: Receive control failed (result -104)
[  134.334917][   T55] block nbd2: Receive control failed (result -32)
[  134.475266][ T9482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1576'.
[  134.559222][ T9484] sctp: [Deprecated]: syz.2.1577 (pid 9484) Use of int in max_burst socket option.
[  134.559222][ T9484] Use struct sctp_assoc_value instead
[  135.580192][ T9486] 
[  135.581271][ T9486] ======================================================
[  135.583948][ T9486] WARNING: possible circular locking dependency detected
[  135.586644][ T9486] syzkaller #0 Not tainted
[  135.588450][ T9486] ------------------------------------------------------
[  135.591068][ T9486] syz.2.1578/9486 is trying to acquire lock:
[  135.593379][ T9486] ffff8881012b4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4ed/0x5c0
[  135.597415][ T9486] 
[  135.597415][ T9486] but task is already holding lock:
[  135.600231][ T9486] ffff8881012b4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0
[  135.603796][ T9486] 
[  135.603796][ T9486] which lock already depends on the new lock.
[  135.603796][ T9486] 
[  135.607641][ T9486] 
[  135.607641][ T9486] the existing dependency chain (in reverse order) is:
[  135.610750][ T9486] 
[  135.610750][ T9486] -> #10 (&root->kernfs_rwsem){++++}-{4:4}:
[  135.613212][ T9486]        down_write+0x96/0x200
[  135.614680][ T9486]        kernfs_add_one+0x41/0x5c0
[  135.616220][ T9486]        kernfs_create_dir_ns+0xde/0x130
[  135.617950][ T9486]        internal_create_group+0x425/0x1180
[  135.619754][ T9486]        cpuhp_invoke_callback+0x445/0x860
[  135.621596][ T9486]        cpuhp_issue_call+0x430/0x7a0
[  135.623220][ T9486]        __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0
[  135.625231][ T9486]        __cpuhp_setup_state+0x3f/0x60
[  135.626923][ T9486]        do_one_initcall+0x250/0x870
[  135.628521][ T9486]        do_initcall_level+0x104/0x190
[  135.630365][ T9486]        do_initcalls+0x59/0xa0
[  135.631873][ T9486]        kernel_init_freeable+0x2a6/0x3e0
[  135.633584][ T9486]        kernel_init+0x1d/0x1d0
[  135.635077][ T9486]        ret_from_fork+0x514/0xb70
[  135.636640][ T9486]        ret_from_fork_asm+0x1a/0x30
[  135.638265][ T9486] 
[  135.638265][ T9486] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}:
[  135.640653][ T9486] 
[  135.640653][ T9486] -> #8 (cpu_hotplug_lock){++++}-{0:0}:
[  135.642991][ T9486]        cpus_read_lock+0x42/0x160
[  135.644623][ T9486]        static_key_slow_inc+0x12/0x30
[  135.646336][ T9486]        ipv6_flowlabel_opt+0x1b94/0x28e0
[  135.648149][ T9486]        do_ipv6_setsockopt+0xd9f/0x3150
[  135.650147][ T9486]        ipv6_setsockopt+0x59/0x170
[  135.651787][ T9486]        rawv6_setsockopt+0x276/0x5f0
[  135.653439][ T9486]        do_sock_setsockopt+0x17c/0x1b0
[  135.655165][ T9486]        __x64_sys_setsockopt+0x13d/0x1b0
[  135.656918][ T9486]        do_syscall_64+0x15f/0xf80
[  135.658671][ T9486]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.660752][ T9486] 
[  135.660752][ T9486] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  135.663490][ T9486]        lock_sock_nested+0x41/0x100
[  135.665215][ T9486]        inet_shutdown+0x6a/0x390
[  135.667054][ T9486]        nbd_mark_nsock_dead+0x2e9/0x560
[  135.669142][ T9486]        recv_work+0x1c2e/0x1d40
[  135.670930][ T9486]        process_scheduled_works+0xb5d/0x1860
[  135.672976][ T9486]        worker_thread+0xa53/0xfc0
[  135.674747][ T9486]        kthread+0x388/0x470
[  135.676155][ T9486]        ret_from_fork+0x514/0xb70
[  135.677712][ T9486]        ret_from_fork_asm+0x1a/0x30
[  135.679324][ T9486] 
[  135.679324][ T9486] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  135.681667][ T9486]        __mutex_lock+0x1a3/0x1550
[  135.683208][ T9486]        nbd_queue_rq+0x37b/0x1100
[  135.684832][ T9486]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  135.686678][ T9486]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  135.688957][ T9486]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  135.691225][ T9486]        blk_mq_run_hw_queue+0x348/0x4f0
[  135.692992][ T9486]        blk_mq_dispatch_list+0xd16/0xe10
[  135.694825][ T9486]        blk_mq_flush_plug_list+0x48d/0x570
[  135.696671][ T9486]        __blk_flush_plug+0x3ed/0x4d0
[  135.698341][ T9486]        __submit_bio+0x28d/0x580
[  135.700015][ T9486]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  135.702224][ T9486]        block_read_full_folio+0x599/0x830
[  135.704196][ T9486]        filemap_read_folio+0x137/0x3b0
[  135.705987][ T9486]        do_read_cache_folio+0x358/0x590
[  135.707745][ T9486]        read_part_sector+0xb6/0x2b0
[  135.709512][ T9486]        adfspart_check_ICS+0xb1/0x960
[  135.711420][ T9486]        bdev_disk_changed+0x817/0x1770
[  135.713191][ T9486]        blkdev_get_whole+0x380/0x510
[  135.714868][ T9486]        bdev_open+0x31e/0xd30
[  135.716363][ T9486]        blkdev_open+0x470/0x610
[  135.717830][ T9486]        do_dentry_open+0x785/0x14e0
[  135.719451][ T9486]        vfs_open+0x3b/0x340
[  135.720863][ T9486]        path_openat+0x2e08/0x3860
[  135.722453][ T9486]        do_file_open+0x23e/0x4a0
[  135.723985][ T9486]        do_sys_openat2+0x113/0x200
[  135.725621][ T9486]        __x64_sys_openat+0x138/0x170
[  135.727277][ T9486]        do_syscall_64+0x15f/0xf80
[  135.729084][ T9486]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.731217][ T9486] 
[  135.731217][ T9486] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  135.733382][ T9486]        __mutex_lock+0x1a3/0x1550
[  135.734993][ T9486]        nbd_queue_rq+0xc6/0x1100
[  135.736568][ T9486]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  135.738372][ T9486]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  135.740413][ T9486]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  135.742526][ T9486]        blk_mq_run_hw_queue+0x348/0x4f0
[  135.744358][ T9486]        blk_mq_dispatch_list+0xd16/0xe10
[  135.746106][ T9486]        blk_mq_flush_plug_list+0x48d/0x570
[  135.747904][ T9486]        __blk_flush_plug+0x3ed/0x4d0
[  135.749588][ T9486]        __submit_bio+0x28d/0x580
[  135.751124][ T9486]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  135.752945][ T9486]        block_read_full_folio+0x599/0x830
[  135.754793][ T9486]        filemap_read_folio+0x137/0x3b0
[  135.756520][ T9486]        do_read_cache_folio+0x358/0x590
[  135.758192][ T9486]        read_part_sector+0xb6/0x2b0
[  135.759757][ T9486]        adfspart_check_ICS+0xb1/0x960
[  135.761380][ T9486]        bdev_disk_changed+0x817/0x1770
[  135.763022][ T9486]        blkdev_get_whole+0x380/0x510
[  135.764859][ T9486]        bdev_open+0x31e/0xd30
[  135.766732][ T9486]        blkdev_open+0x470/0x610
[  135.768485][ T9486]        do_dentry_open+0x785/0x14e0
[  135.770306][ T9486]        vfs_open+0x3b/0x340
[  135.771969][ T9486]        path_openat+0x2e08/0x3860
[  135.773717][ T9486]        do_file_open+0x23e/0x4a0
[  135.775449][ T9486]        do_sys_openat2+0x113/0x200
[  135.777133][ T9486]        __x64_sys_openat+0x138/0x170
[  135.779157][ T9486]        do_syscall_64+0x15f/0xf80
[  135.781080][ T9486]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.783440][ T9486] 
[  135.783440][ T9486] -> #4 (set->srcu){.+.+}-{0:0}:
[  135.785739][ T9486]        __synchronize_srcu+0xca/0x300
[  135.787647][ T9486]        elevator_switch+0x1e8/0x7a0
[  135.789268][ T9486]        elevator_change+0x2cc/0x450
[  135.791001][ T9486]        elevator_set_default+0x36c/0x430
[  135.792885][ T9486]        blk_register_queue+0x3e9/0x4e0
[  135.794819][ T9486]        __add_disk+0x677/0xd50
[  135.796442][ T9486]        add_disk_fwnode+0xfb/0x480
[  135.797972][ T9486]        nbd_dev_add+0x72c/0xb50
[  135.799456][ T9486]        nbd_init+0x168/0x1f0
[  135.800917][ T9486]        do_one_initcall+0x250/0x870
[  135.802462][ T9486]        do_initcall_level+0x104/0x190
[  135.804311][ T9486]        do_initcalls+0x59/0xa0
[  135.806082][ T9486]        kernel_init_freeable+0x2a6/0x3e0
[  135.808194][ T9486]        kernel_init+0x1d/0x1d0
[  135.809935][ T9486]        ret_from_fork+0x514/0xb70
[  135.811977][ T9486]        ret_from_fork_asm+0x1a/0x30
[  135.814076][ T9486] 
[  135.814076][ T9486] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  135.817112][ T9486]        __mutex_lock+0x1a3/0x1550
[  135.819122][ T9486]        elevator_change+0x1b3/0x450
[  135.821249][ T9486]        elevator_set_none+0xb5/0x140
[  135.823376][ T9486]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  135.825554][ T9486]        nbd_start_device+0x17f/0xb10
[  135.827135][ T9486]        nbd_genl_connect+0x165b/0x1cf0
[  135.829014][ T9486]        genl_family_rcv_msg_doit+0x22a/0x330
[  135.831102][ T9486]        genl_rcv_msg+0x61c/0x7a0
[  135.833012][ T9486]        netlink_rcv_skb+0x232/0x4b0
[  135.835003][ T9486]        genl_rcv+0x28/0x40
[  135.836847][ T9486]        netlink_unicast+0x75c/0x8e0
[  135.838966][ T9486]        netlink_sendmsg+0x813/0xb40
[  135.841081][ T9486]        ____sys_sendmsg+0x972/0x9f0
[  135.843186][ T9486]        ___sys_sendmsg+0x2a5/0x360
[  135.845213][ T9486]        __x64_sys_sendmsg+0x1bd/0x2a0
[  135.847322][ T9486]        do_syscall_64+0x15f/0xf80
[  135.849302][ T9486]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.851782][ T9486] 
[  135.851782][ T9486] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}:
[  135.855205][ T9486]        blk_alloc_queue+0x546/0x680
[  135.857334][ T9486]        __blk_mq_alloc_disk+0x197/0x390
[  135.859471][ T9486]        nbd_dev_add+0x499/0xb50
[  135.860991][ T9486]        nbd_init+0x168/0x1f0
[  135.862419][ T9486]        do_one_initcall+0x250/0x870
[  135.864111][ T9486]        do_initcall_level+0x104/0x190
[  135.865953][ T9486]        do_initcalls+0x59/0xa0
[  135.867886][ T9486]        kernel_init_freeable+0x2a6/0x3e0
[  135.870151][ T9486]        kernel_init+0x1d/0x1d0
[  135.872089][ T9486]        ret_from_fork+0x514/0xb70
[  135.874079][ T9486]        ret_from_fork_asm+0x1a/0x30
[  135.876175][ T9486] 
[  135.876175][ T9486] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  135.879010][ T9486]        fs_reclaim_acquire+0x71/0x100
[  135.881166][ T9486]        kmem_cache_alloc_noprof+0x40/0x650
[  135.883507][ T9486]        __kernfs_iattrs+0xdf/0x320
[  135.885597][ T9486]        kernfs_iop_setattr+0xea/0x3f0
[  135.887785][ T9486]        notify_change+0xc1a/0xf40
[  135.889805][ T9486]        do_truncate+0x1c2/0x250
[  135.891780][ T9486]        path_openat+0x2f89/0x3860
[  135.893818][ T9486]        do_file_open+0x23e/0x4a0
[  135.895682][ T9486]        do_sys_openat2+0x113/0x200
[  135.897277][ T9486]        __x64_sys_openat+0x138/0x170
[  135.898977][ T9486]        do_syscall_64+0x15f/0xf80
[  135.900871][ T9486]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.903009][ T9486] 
[  135.903009][ T9486] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[  135.906320][ T9486]        __lock_acquire+0x15a5/0x2cf0
[  135.908171][ T9486]        lock_acquire+0x106/0x350
[  135.909691][ T9486]        down_write+0x96/0x200
[  135.911249][ T9486]        kernfs_link_sibling+0x4ed/0x5c0
[  135.913004][ T9486]        kernfs_add_one+0x1ca/0x5c0
[  135.914760][ T9486]        kernfs_create_dir_ns+0xde/0x130
[  135.916846][ T9486]        sysfs_create_dir_ns+0x12f/0x2a0
[  135.918902][ T9486]        kobject_add_internal+0x62b/0xd00
[  135.921026][ T9486]        kobject_add+0x163/0x240
[  135.922854][ T9486]        device_add+0x408/0xbb0
[  135.924648][ T9486]        netdev_register_kobject+0x178/0x310
[  135.926938][ T9486]        register_netdevice+0x1456/0x1ec0
[  135.929122][ T9486]        br_add_bridge+0xa3/0xf0
[  135.931034][ T9486]        br_ioctl_stub+0x588/0xd60
[  135.932963][ T9486]        sock_ioctl+0x523/0x7f0
[  135.934774][ T9486]        __se_sys_ioctl+0xfc/0x170
[  135.936365][ T9486]        do_syscall_64+0x15f/0xf80
[  135.937920][ T9486]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.939862][ T9486] 
[  135.939862][ T9486] other info that might help us debug this:
[  135.939862][ T9486] 
[  135.943372][ T9486] Chain exists of:
[  135.943372][ T9486]   &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem
[  135.943372][ T9486] 
[  135.947493][ T9486]  Possible unsafe locking scenario:
[  135.947493][ T9486] 
[  135.950139][ T9486]        CPU0                    CPU1
[  135.952241][ T9486]        ----                    ----
[  135.954447][ T9486]   lock(&root->kernfs_rwsem);
[  135.956347][ T9486]                                lock(cpuhp_state_mutex);
[  135.959139][ T9486]                                lock(&root->kernfs_rwsem);
[  135.962012][ T9486]   lock(&root->kernfs_iattr_rwsem);
[  135.964066][ T9486] 
[  135.964066][ T9486]  *** DEADLOCK ***
[  135.964066][ T9486] 
[  135.967264][ T9486] 3 locks held by syz.2.1578/9486:
[  135.969323][ T9486]  #0: ffffffff8fdb0fc0 (br_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x4fa/0x7f0
[  135.972879][ T9486]  #1: ffffffff8fdd0300 (rtnl_mutex){+.+.}-{4:4}, at: br_ioctl_stub+0x1a8/0xd60
[  135.976535][ T9486]  #2: ffff8881012b4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0
[  135.980413][ T9486] 
[  135.980413][ T9486] stack backtrace:
[  135.982684][ T9486] CPU: 0 UID: 0 PID: 9486 Comm: syz.2.1578 Not tainted syzkaller #0 PREEMPT(full) 
[  135.982695][ T9486] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  135.982701][ T9486] Call Trace:
[  135.982706][ T9486]  <TASK>
[  135.982710][ T9486]  dump_stack_lvl+0xe8/0x150
[  135.982723][ T9486]  print_circular_bug+0x2e1/0x300
[  135.982734][ T9486]  check_noncircular+0x12e/0x150
[  135.982745][ T9486]  __lock_acquire+0x15a5/0x2cf0
[  135.982754][ T9486]  ? __lock_acquire+0x6b5/0x2cf0
[  135.982764][ T9486]  ? kernfs_link_sibling+0x4ed/0x5c0
[  135.982774][ T9486]  lock_acquire+0x106/0x350
[  135.982782][ T9486]  ? kernfs_link_sibling+0x4ed/0x5c0
[  135.982795][ T9486]  down_write+0x96/0x200
[  135.982804][ T9486]  ? kernfs_link_sibling+0x4ed/0x5c0
[  135.982813][ T9486]  ? __pfx_down_write+0x10/0x10
[  135.982820][ T9486]  ? kernfs_root+0x1c/0x230
[  135.982829][ T9486]  ? kernfs_root+0x1c/0x230
[  135.982838][ T9486]  ? kernfs_root+0x1ea/0x230
[  135.982847][ T9486]  kernfs_link_sibling+0x4ed/0x5c0
[  135.982858][ T9486]  kernfs_add_one+0x1ca/0x5c0
[  135.982868][ T9486]  kernfs_create_dir_ns+0xde/0x130
[  135.982878][ T9486]  sysfs_create_dir_ns+0x12f/0x2a0
[  135.982887][ T9486]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  135.982896][ T9486]  ? do_raw_spin_unlock+0x4d/0x210
[  135.982908][ T9486]  kobject_add_internal+0x62b/0xd00
[  135.982919][ T9486]  kobject_add+0x163/0x240
[  135.982930][ T9486]  ? __pfx_kobject_add+0x10/0x10
[  135.982937][ T9486]  ? get_device_parent+0x366/0x3a0
[  135.982946][ T9486]  device_add+0x408/0xbb0
[  135.982954][ T9486]  ? device_initialize+0x26a/0x460
[  135.982961][ T9486]  netdev_register_kobject+0x178/0x310
[  135.982971][ T9486]  register_netdevice+0x1456/0x1ec0
[  135.982981][ T9486]  ? __pfx_register_netdevice+0x10/0x10
[  135.982988][ T9486]  ? alloc_netdev_mqs+0xce1/0x1210
[  135.982996][ T9486]  ? __kvmalloc_node_noprof+0x393/0x8a0
[  135.983009][ T9486]  ? alloc_netdev_mqs+0xe00/0x1210
[  135.983017][ T9486]  br_add_bridge+0xa3/0xf0
[  135.983025][ T9486]  br_ioctl_stub+0x588/0xd60
[  135.983033][ T9486]  ? do_vfs_ioctl+0x1166/0x1530
[  135.983043][ T9486]  ? __pfx_br_ioctl_stub+0x10/0x10
[  135.983050][ T9486]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  135.983061][ T9486]  ? sock_ioctl+0x4fa/0x7f0
[  135.983069][ T9486]  ? do_futex+0x333/0x420
[  135.983079][ T9486]  ? __pfx_br_ioctl_stub+0x10/0x10
[  135.983086][ T9486]  sock_ioctl+0x523/0x7f0
[  135.983093][ T9486]  ? __pfx_sock_ioctl+0x10/0x10
[  135.983100][ T9486]  ? __fget_files+0x2a/0x420
[  135.983109][ T9486]  ? __fget_files+0x3a0/0x420
[  135.983117][ T9486]  ? __fget_files+0x2a/0x420
[  135.983126][ T9486]  ? bpf_lsm_file_ioctl+0x9/0x20
[  135.983138][ T9486]  ? __pfx_sock_ioctl+0x10/0x10
[  135.983145][ T9486]  __se_sys_ioctl+0xfc/0x170
[  135.983156][ T9486]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.983163][ T9486]  do_syscall_64+0x15f/0xf80
[  135.983170][ T9486]  ? trace_irq_disable+0x3b/0x140
[  135.983181][ T9486]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.983192][ T9486] RIP: 0033:0x7fed51f9cdd9
[  135.983204][ T9486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  135.983243][ T9486] RSP: 002b:00007fed52e8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  135.983257][ T9486] RAX: ffffffffffffffda RBX: 00007fed52215fa0 RCX: 00007fed51f9cdd9
[  135.983265][ T9486] RDX: 0000200000000040 RSI: 00000000000089a0 RDI: 0000000000000003
[  135.983273][ T9486] RBP: 00007fed52032d69 R08: 0000000000000000 R09: 0000000000000000
[  135.983280][ T9486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  135.983287][ T9486] R13: 00007fed52216038 R14: 00007fed52215fa0 R15: 00007ffff7509648
[  135.983299][ T9486]  </TASK>
[  138.185122][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[  138.187913][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
