last executing test programs:

2.78659286s ago: executing program 2 (id=2053):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\b\x00\x00\x00']}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@generic="a664f7feda247668"]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

1.156979931s ago: executing program 1 (id=2060):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', <r2=>0x0})
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', <r5=>0x0})
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10)

1.106856666s ago: executing program 1 (id=2061):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={<r1=>0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={r1, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84)

385.258798ms ago: executing program 2 (id=2062):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc)

382.682169ms ago: executing program 2 (id=2064):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x5a, 0x1, 0x0, 0x25dfdbfb, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32=r4], 0x7c}}, 0x20000000)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000300000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000340))
r5 = socket(0x10, 0x803, 0x0)
sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0x4000000}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000003a0096eef56015fc0701002000000000e6ffff0a00000008"], 0x1c}, 0x1, 0x0, 0x0, 0xd1}, 0x10)

263.837592ms ago: executing program 1 (id=2067):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), r1)
sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="78d8f92dbf64605cdd118f48e23e98c60b", 0x11}], 0x1, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x4004080)

193.491542ms ago: executing program 0 (id=2068):
r0 = socket$inet(0x2, 0x3, 0xa)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000001a00)=0x7, 0x4)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x0)

193.260228ms ago: executing program 0 (id=2069):
socket(0x2, 0x80805, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000001340)={@empty}, 0x14)
close(0x4)

126.700865ms ago: executing program 0 (id=2070):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058)

126.44196ms ago: executing program 0 (id=2071):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000480)=@ethtool_eeprom={0x4f, 0xcd, 0x7}})

107.47025ms ago: executing program 1 (id=2072):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000001540), 0xffffffffffffffff)

93.226542ms ago: executing program 2 (id=2073):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0x0, 0x3d8, 0xd0, 0x3d8, 0x3d8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv0\x00', {}, {0xff}, 0x11, 0x5, 0x1, 0x18}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}, {}, {0x11}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xffffff00], [0xffffff00], 'ip6gre0\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x7], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@mcast1, 0x6, 0x27, 0xd}}}, {{@ipv6={@loopback, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'ip6erspan0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8)

90.008787ms ago: executing program 0 (id=2074):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="90000000000101040000000000000000020000002400018014000180080001"], 0x90}}, 0x0)

88.715965ms ago: executing program 1 (id=2075):
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2, 0x25, 0x2, @val=@tcx}, 0x1c)
syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[], 0x0)

40.848859ms ago: executing program 2 (id=2076):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x20000001, 0x5, 0x4}, 0x1, r2}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)

3.992464ms ago: executing program 0 (id=2077):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000740)="c08a2b0e", 0x4)

3.775501ms ago: executing program 2 (id=2078):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x8040)
write$cgroup_pid(r3, &(0x7f0000000240), 0x12)

0s ago: executing program 1 (id=2079):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:32076' (ED25519) to the list of known hosts.
syzkaller login: [   49.270164][ T5536] cgroup: Unknown subsys name 'net'
[   49.410553][ T5536] cgroup: Unknown subsys name 'cpuset'
[   49.414593][ T5536] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.629388][ T5536] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   57.726712][ T5671] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.599743][ T5706] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   59.615694][ T5708] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   59.623198][ T5708] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   59.627364][ T5708] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   59.630631][ T5711] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   59.636603][ T5708] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   59.640186][ T5711] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   59.643589][ T5711] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   59.645539][ T5708] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   59.649644][ T5712] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   59.656939][   T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   59.664506][ T5712] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   59.668126][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   59.670617][   T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   59.675474][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.252061][ T5702] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.254897][ T5702] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.257476][ T5702] bridge_slave_0: entered allmulticast mode
[   60.260470][ T5702] bridge_slave_0: entered promiscuous mode
[   60.275688][ T5702] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.278146][ T5702] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.280463][ T5702] bridge_slave_1: entered allmulticast mode
[   60.283029][ T5702] bridge_slave_1: entered promiscuous mode
[   60.311554][ T5707] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.313945][ T5707] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.316334][ T5707] bridge_slave_0: entered allmulticast mode
[   60.319310][ T5707] bridge_slave_0: entered promiscuous mode
[   60.322880][ T5707] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.325077][ T5707] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.327299][ T5707] bridge_slave_1: entered allmulticast mode
[   60.329901][ T5707] bridge_slave_1: entered promiscuous mode
[   60.358734][ T5702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.363134][ T5702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.372245][ T5705] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.374707][ T5705] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.377013][ T5705] bridge_slave_0: entered allmulticast mode
[   60.380812][ T5705] bridge_slave_0: entered promiscuous mode
[   60.397034][ T5707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.400457][ T5705] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.403461][ T5705] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.406428][ T5705] bridge_slave_1: entered allmulticast mode
[   60.410419][ T5705] bridge_slave_1: entered promiscuous mode
[   60.428394][ T5702] team0: Port device team_slave_0 added
[   60.432696][ T5707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.459268][ T5702] team0: Port device team_slave_1 added
[   60.481546][ T5705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.498133][ T5707] team0: Port device team_slave_0 added
[   60.501564][ T5705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.505226][ T5702] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.509155][ T5702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   60.519444][ T5702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.525468][ T5707] team0: Port device team_slave_1 added
[   60.541165][ T5702] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.543769][ T5702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   60.554012][ T5702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.565658][ T5707] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.568193][ T5707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   60.575874][ T5707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.595853][ T5707] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.598495][ T5707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   60.607197][ T5707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.613076][ T5705] team0: Port device team_slave_0 added
[   60.623086][ T5705] team0: Port device team_slave_1 added
[   60.682503][ T5707] hsr_slave_0: entered promiscuous mode
[   60.684707][ T5707] hsr_slave_1: entered promiscuous mode
[   60.690796][ T5702] hsr_slave_0: entered promiscuous mode
[   60.692848][ T5702] hsr_slave_1: entered promiscuous mode
[   60.694833][ T5702] debugfs: 'hsr0' already exists in 'hsr'
[   60.696531][ T5702] Cannot create hsr debugfs directory
[   60.699113][ T5705] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.701851][ T5705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   60.711850][ T5705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.725023][ T5705] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.728055][ T5705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   60.735857][ T5705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.810537][ T5705] hsr_slave_0: entered promiscuous mode
[   60.812674][ T5705] hsr_slave_1: entered promiscuous mode
[   60.814607][ T5705] debugfs: 'hsr0' already exists in 'hsr'
[   60.816362][ T5705] Cannot create hsr debugfs directory
[   60.979548][ T5707] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   60.989692][ T5707] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   60.993978][ T5707] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   60.998488][ T5707] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   61.008760][ T5707] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   61.012847][ T5707] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   61.015484][ T5707] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   61.019766][ T5707] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   61.049569][ T5702] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.054723][ T5702] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   61.062010][ T5702] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.067296][ T5702] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   61.071289][ T5707] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.073818][ T5707] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.076329][ T5707] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.078575][ T5707] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.084280][ T5702] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.090739][ T5702] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   61.093989][ T5702] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.098703][ T5702] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   61.116576][ T1389] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.119613][ T1389] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.150276][ T5705] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   61.154637][ T5705] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   61.157206][ T5705] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   61.162383][ T5705] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   61.165130][ T5705] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   61.169905][ T5705] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   61.173605][ T5705] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   61.179065][ T5705] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   61.273611][ T5707] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.301491][ T5707] 8021q: adding VLAN 0 to HW filter on device team0
[   61.312133][ T1389] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.314357][ T1389] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.322690][ T5702] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.330724][ T1389] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.333096][ T1389] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.352329][ T5702] 8021q: adding VLAN 0 to HW filter on device team0
[   61.361884][   T81] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.364231][   T81] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.373580][ T5705] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.383871][   T81] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.386099][   T81] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.435906][ T5705] 8021q: adding VLAN 0 to HW filter on device team0
[   61.457298][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.460453][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.474166][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.476989][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.691968][ T5707] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.739373][   T53] Bluetooth: hci0: command tx timeout
[   61.739807][ T5706] Bluetooth: hci2: command tx timeout
[   61.741510][ T5001] Bluetooth: hci1: command tx timeout
[   61.760556][ T5707] veth0_vlan: entered promiscuous mode
[   61.771452][ T5707] veth1_vlan: entered promiscuous mode
[   61.789878][ T5702] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.802018][ T5707] veth0_macvtap: entered promiscuous mode
[   61.810425][ T5707] veth1_macvtap: entered promiscuous mode
[   61.820417][ T5705] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.837311][ T5707] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.854449][ T5702] veth0_vlan: entered promiscuous mode
[   61.859521][ T5707] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.871691][ T5740] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.875112][ T5740] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.882231][ T5702] veth1_vlan: entered promiscuous mode
[   61.890166][ T5740] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.893759][ T5740] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.912288][ T5705] veth0_vlan: entered promiscuous mode
[   61.939404][ T5705] veth1_vlan: entered promiscuous mode
[   61.955576][ T5702] veth0_macvtap: entered promiscuous mode
[   61.973516][ T5702] veth1_macvtap: entered promiscuous mode
[   61.999349][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.002123][ T5702] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.006211][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.015110][ T5702] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.027314][ T5705] veth0_macvtap: entered promiscuous mode
[   62.037013][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.042249][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.050432][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.053770][ T4250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.056922][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.060109][ T4250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.064147][ T5705] veth1_macvtap: entered promiscuous mode
[   62.133467][ T5705] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.165129][ T5705] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.202998][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.206340][ T1389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.210400][ T1389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.210400][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.243249][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.252268][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.262311][ T4250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.268952][ T4250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.333957][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.336874][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.366195][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.376807][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.523437][ T5832] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.555683][ T5837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.63'.
[   62.570279][ T5837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.63'.
[   62.575936][ T5837] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   62.643976][ T5842] syz.0.65 uses obsolete (PF_INET,SOCK_PACKET)
[   62.725974][ T5850] netlink: 20 bytes leftover after parsing attributes in process `syz.1.70'.
[   62.905898][ T5869] netlink: 'syz.0.76': attribute type 32 has an invalid length.
[   62.916702][ T5869] netlink: 20 bytes leftover after parsing attributes in process `syz.0.76'.
[   63.197323][ T5889] netlink: 44 bytes leftover after parsing attributes in process `syz.0.85'.
[   63.205974][ T5889] netlink: 43 bytes leftover after parsing attributes in process `syz.0.85'.
[   63.210699][ T5889] netlink: 'syz.0.85': attribute type 5 has an invalid length.
[   63.214737][ T5889] netlink: 43 bytes leftover after parsing attributes in process `syz.0.85'.
[   63.262854][ T5892] netlink: 'syz.0.87': attribute type 1 has an invalid length.
[   63.279151][ T5892] netlink: 'syz.0.87': attribute type 2 has an invalid length.
[   63.661182][ T5919] IPVS: Error connecting to the multicast addr
[   63.821812][   T53] Bluetooth: hci2: command tx timeout
[   63.822600][ T5706] Bluetooth: hci0: command tx timeout
[   63.823868][ T5001] Bluetooth: hci1: command tx timeout
[   64.175850][ T5959] netlink: 616 bytes leftover after parsing attributes in process `syz.0.118'.
[   64.757005][ T6017] openvswitch: netlink: Actions may not be safe on all matching packets
[   64.885387][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'.
[   65.016196][ T6036] netlink: 20 bytes leftover after parsing attributes in process `syz.2.154'.
[   65.405290][ T6074] bond0: (slave wlan0): Error: Device can not be enslaved while up
[   65.414243][   T33] audit: type=1800 audit(1778606177.091:2): pid=6071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.170" name="r" dev="tmpfs" ino=276 res=0 errno=0
[   65.704700][ T5740] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   65.708477][ T6095] Zero length message leads to an empty skb
[   65.711332][ T5740] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   65.715287][ T5740] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   65.720274][ T5740] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   65.885911][ T6105] block nbd2: not configured, cannot reconfigure
[   65.898107][   T53] Bluetooth: hci1: command tx timeout
[   65.898984][ T5706] Bluetooth: hci2: command tx timeout
[   65.900326][ T5001] Bluetooth: hci0: command tx timeout
[   66.045638][ T6110] syzkaller0: entered promiscuous mode
[   66.048262][ T6110] syzkaller0: entered allmulticast mode
[   67.529985][    C0] clocksource: Watchdog remote CPU 1 read timed out
[   67.856001][ T6148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'.
[   67.869954][ T6148] netlink: 'syz.1.200': attribute type 30 has an invalid length.
[   67.892518][ T6152] netlink: 'syz.2.201': attribute type 29 has an invalid length.
[   67.896269][ T6148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'.
[   67.899962][ T6148] netlink: 'syz.1.200': attribute type 30 has an invalid length.
[   67.902909][ T5740] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   67.906833][ T5740] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   67.914251][ T6152] netlink: 'syz.2.201': attribute type 29 has an invalid length.
[   67.917072][ T5740] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   67.917361][ T6152] netlink: 500 bytes leftover after parsing attributes in process `syz.2.201'.
[   67.924598][ T5740] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   67.926782][ T6152] unsupported nla_type 58
[   67.980807][ T5706] Bluetooth: hci2: command tx timeout
[   67.988139][ T5706] Bluetooth: hci0: command tx timeout
[   67.989539][ T5001] Bluetooth: hci1: command tx timeout
[   68.009183][ T6160] netlink: 20 bytes leftover after parsing attributes in process `syz.2.206'.
[   68.034261][ T6162] syzkaller0: entered promiscuous mode
[   68.036709][ T6164] netlink: 164 bytes leftover after parsing attributes in process `syz.1.208'.
[   68.041548][ T6162] syzkaller0: entered allmulticast mode
[   68.220823][ T6176] netlink: 'syz.1.212': attribute type 6 has an invalid length.
[   68.275934][ T6180] tipc: Invalid UDP bearer configuration
[   68.275975][ T6180] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   68.493731][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.226'.
[   68.609253][ T6216] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.231'.
[   68.710696][ T6225] netlink: 'syz.1.235': attribute type 2 has an invalid length.
[   68.713386][ T6225] netlink: 132 bytes leftover after parsing attributes in process `syz.1.235'.
[   68.723923][ T6222] netlink: 200 bytes leftover after parsing attributes in process `syz.2.233'.
[   68.733915][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'.
[   69.606995][   T55] block nbd0: Receive control failed (result -1)
[   70.545413][ T6319] netem: incorrect gi model size
[   70.553100][ T6319] netem: change failed
[   70.887133][ T6321] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[   70.889637][ T6337] hsr0: entered promiscuous mode
[   70.896764][ T6338] netlink: 'syz.2.279': attribute type 4 has an invalid length.
[   71.370960][ T6375] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   71.402237][ T6378] netlink: 'syz.1.299': attribute type 28 has an invalid length.
[   71.542070][ T6396] openvswitch: netlink: Unknown nsh attribute 0
[   71.964888][ T6415] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   72.233974][ T5780] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x42
[   72.397324][ T6446] netlink: 'syz.2.325': attribute type 32 has an invalid length.
[   72.515281][ T6453] netlink: 'syz.2.328': attribute type 12 has an invalid length.
[   72.526823][ T6453] netlink: 'syz.2.328': attribute type 2 has an invalid length.
[   72.630479][ T6464] syzkaller0: entered promiscuous mode
[   72.632844][ T6464] syzkaller0: entered allmulticast mode
[   72.669211][ T6467] netlink: 'syz.2.335': attribute type 15 has an invalid length.
[   72.983141][ T6489] hsr0: left promiscuous mode
[   73.101137][ T6498] __nla_validate_parse: 10 callbacks suppressed
[   73.101148][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.350'.
[   73.254833][ T6518] netlink: 'syz.0.359': attribute type 21 has an invalid length.
[   73.537910][ T6545] TC_ACT_REPEAT abuse ?
[   73.572733][ T6548] bond1: up delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[   73.575640][ T6548] bond1: down delay (128) is not a multiple of miimon (100), value rounded to 100 ms
[   73.740723][ T6564] netlink: 'syz.2.379': attribute type 1 has an invalid length.
[   73.751963][ T6564] netlink: 96 bytes leftover after parsing attributes in process `syz.2.379'.
[   73.755784][ T6564] netlink: 1 bytes leftover after parsing attributes in process `syz.2.379'.
[   73.766730][ T6564] netlink: 658 bytes leftover after parsing attributes in process `syz.2.379'.
[   73.836238][ T6571] netlink: 'syz.1.382': attribute type 1 has an invalid length.
[   74.954308][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'.
[   75.013057][ T6606] netlink: 24 bytes leftover after parsing attributes in process `syz.2.398'.
[   75.085916][ T6610] x_tables: duplicate underflow at hook 3
[   75.093799][ T6612] syz_tun: entered allmulticast mode
[   75.294384][ T6630] netlink: 76 bytes leftover after parsing attributes in process `syz.2.411'.
[   75.830699][ T6673] netlink: 488 bytes leftover after parsing attributes in process `syz.1.432'.
[   75.833683][ T6673] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.432'.
[   76.123083][ T6689] netlink: 24 bytes leftover after parsing attributes in process `syz.1.437'.
[   76.669731][ T5813] IPVS: starting estimator thread 0...
[   76.714639][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[   76.717373][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[   76.780206][ T6719] IPVS: using max 81 ests per chain, 194400 per kthread
[   77.453499][ T6791] syzkaller0: entered promiscuous mode
[   77.455374][ T6791] syzkaller0: entered allmulticast mode
[   77.481228][ T6795] netlink: 'syz.0.487': attribute type 1 has an invalid length.
[   77.761256][ T6819] raw_sendmsg: syz.2.499 forgot to set AF_INET. Fix it!
[   78.044858][ T6846] IPv6: addrconf: prefix option has invalid lifetime
[   78.205560][ T6863] netlink: 'syz.1.520': attribute type 1 has an invalid length.
[   78.250309][ T6863] 8021q: adding VLAN 0 to HW filter on device bond1
[   78.274407][ T6863] __nla_validate_parse: 3 callbacks suppressed
[   78.274419][ T6863] netlink: 28 bytes leftover after parsing attributes in process `syz.1.520'.
[   78.292603][ T6863] bond1: entered promiscuous mode
[   78.297897][ T6863] bond1: entered allmulticast mode
[   78.336919][ T6863] bond1: (slave dummy0): making interface the new active one
[   78.344917][ T6863] dummy0: entered promiscuous mode
[   78.350100][ T6863] dummy0: entered allmulticast mode
[   78.355771][ T6863] bond1: (slave dummy0): Enslaving as an active interface with an up link
[   78.435228][ T6878] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   78.447053][ T6878] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.450393][ T6878] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.546601][ T6884] veth1_to_bond: entered allmulticast mode
[   78.549458][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.529'.
[   78.588921][ T6884] veth1_to_bond (unregistering): left allmulticast mode
[   79.195691][ T6884] bond0: (slave bond_slave_1): Releasing backup interface
[   79.320531][ T6899] netlink: 'syz.2.537': attribute type 1 has an invalid length.
[   79.352708][ T6899] 8021q: adding VLAN 0 to HW filter on device bond1
[   79.379003][ T6899] bond1: (slave ip6gretap1): making interface the new active one
[   79.382670][ T6899] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[   79.484154][ T6917] netlink: 'syz.0.544': attribute type 4 has an invalid length.
[   79.547172][ T6927] netlink: 'syz.1.549': attribute type 1 has an invalid length.
[   79.555907][ T6927] netlink: 'syz.1.549': attribute type 11 has an invalid length.
[   79.559311][ T6927] netlink: 224 bytes leftover after parsing attributes in process `syz.1.549'.
[   80.371682][ T7009] netlink: 24 bytes leftover after parsing attributes in process `syz.0.584'.
[   80.528778][ T7019] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   80.536150][ T7019] bond2: (slave lo): Enslaving as an active interface with an up link
[   80.544417][ T7019] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[   80.563745][ T7024] netlink: 100 bytes leftover after parsing attributes in process `syz.0.590'.
[   80.639733][ T7028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.593'.
[   80.642776][ T7028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.593'.
[   80.803264][ T7045] xt_CONNSECMARK: invalid mode: 0
[   80.864010][ T7046] bond3 (unregistering): Released all slaves
[   80.910177][ T7053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.604'.
[   80.983718][ T7057] Driver unsupported XDP return value 0 on prog  (id 67) dev N/A, expect packet loss!
[   81.090501][ T7065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.609'.
[   81.101773][ T7065] erspan0: entered promiscuous mode
[   81.268901][ T7073] netlink: 71 bytes leftover after parsing attributes in process `syz.1.613'.
[   84.303130][ T7226] __nla_validate_parse: 4 callbacks suppressed
[   84.303139][ T7226] netlink: 1 bytes leftover after parsing attributes in process `syz.1.680'.
[   84.308871][ T7226] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.113839][ T7275] netem: change failed
[   85.197067][ T7284] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[   85.364372][ T7299] netlink: 'syz.2.711': attribute type 9 has an invalid length.
[   85.852179][ T7314] syzkaller0: entered promiscuous mode
[   85.855729][ T7314] syzkaller0: entered allmulticast mode
[   85.872097][ T7314] tipc: Started in network mode
[   85.874376][ T7314] tipc: Node identity 02b6ff83e801, cluster identity 4711
[   85.877597][ T7314] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.885625][ T7313] tipc: Resetting bearer <eth:syzkaller0>
[   85.911684][ T7313] tipc: Disabling bearer <eth:syzkaller0>
[   86.076804][ T7332] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.266481][ T7345] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   86.706718][ T7370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.735'.
[   86.934965][ T7394] netlink: 'syz.1.747': attribute type 1 has an invalid length.
[   86.945165][  T812] cfg80211: failed to load regulatory.db
[   86.947865][ T7394] netlink: 88 bytes leftover after parsing attributes in process `syz.1.747'.
[   86.956419][ T7394] netlink: 1 bytes leftover after parsing attributes in process `syz.1.747'.
[   86.960207][ T7394] netlink: 'syz.1.747': attribute type 1 has an invalid length.
[   86.962393][ T7394] netlink: 634 bytes leftover after parsing attributes in process `syz.1.747'.
[   87.913234][ T7465] netlink: 'syz.1.768': attribute type 1 has an invalid length.
[   88.016857][ T7472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.771'.
[   88.022809][ T7472] ip6gre1: entered promiscuous mode
[   88.024578][ T7472] ip6gre1: entered allmulticast mode
[   88.027400][ T5780] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   88.035945][ T5780] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   88.048012][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   88.081927][ T7476] netlink: 'syz.1.772': attribute type 13 has an invalid length.
[   88.093639][ T7476] netlink: 'syz.1.772': attribute type 17 has an invalid length.
[   88.177458][ T7473] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.185473][ T7473] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.283531][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.772'.
[   88.443977][ T7476] erspan0: left promiscuous mode
[   88.496071][ T7476] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.501892][ T7476] 8021q: adding VLAN 0 to HW filter on device team0
[   88.511500][ T7476] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.542292][ T7476] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.545315][ T7476] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.552181][ T7476] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.555171][ T7476] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.572214][ T7476] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.578267][ T7476] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.598031][  T812] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   88.604938][ T7476] veth1_vlan: left promiscuous mode
[   88.609091][ T7476] veth0_vlan: left promiscuous mode
[   88.612557][ T7476] veth0_vlan: entered promiscuous mode
[   88.622239][ T7476] veth1_vlan: entered promiscuous mode
[   88.628930][ T7476] veth1_macvtap: left promiscuous mode
[   88.631555][ T7476] veth0_macvtap: left promiscuous mode
[   88.642471][ T7476] veth0_macvtap: entered promiscuous mode
[   88.653761][ T7476] veth1_macvtap: entered promiscuous mode
[   88.660430][ T7476] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   88.668051][ T7476] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   88.676184][ T7476] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   88.683273][ T7476] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   88.687871][  T812] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   88.697096][ T7476] bond1: left promiscuous mode
[   88.699352][ T7476] dummy0: left promiscuous mode
[   88.701173][ T7476] bond1: left allmulticast mode
[   88.702853][ T7476] dummy0: left allmulticast mode
[   88.705137][ T7476] 8021q: adding VLAN 0 to HW filter on device bond1
[   88.710273][ T7476] 8021q: adding VLAN 0 to HW filter on device bond2
[   88.712840][ T7476] erspan0: entered promiscuous mode
[   88.752357][ T7482] syzkaller0: entered promiscuous mode
[   88.754489][ T7482] syzkaller0: entered allmulticast mode
[   88.964435][ T7496] netlink: 32 bytes leftover after parsing attributes in process `syz.1.776'.
[   89.172865][ T7516] netlink: 80 bytes leftover after parsing attributes in process `syz.2.782'.
[   89.184895][ T7516] warning: `syz.2.782' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   89.924993][ T7565] netlink: 'syz.0.808': attribute type 1 has an invalid length.
[   89.950025][ T7565] bond2: entered promiscuous mode
[   89.952148][ T7565] 8021q: adding VLAN 0 to HW filter on device bond2
[   90.184027][ T7565] 8021q: adding VLAN 0 to HW filter on device bond2
[   90.186450][ T7565] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address
[   90.189753][ T7565] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[   90.196756][ T7565] bond2: (slave ip6gre1): making interface the new active one
[   90.201146][ T7565] ip6gre1: entered promiscuous mode
[   90.218414][ T7565] bond2: (slave ip6gre1): Enslaving as an active interface with an up link
[   90.270386][   T33] audit: type=1804 audit(1778606201.951:3): pid=7575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.812" name="/newroot/237/memory.events" dev="tmpfs" ino=1210 res=1 errno=0
[   90.283557][ T7577] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   90.283929][   T33] audit: type=1800 audit(1778606201.951:4): pid=7575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.812" name="memory.events" dev="tmpfs" ino=1210 res=0 errno=0
[   90.298295][   T33] audit: type=1804 audit(1778606201.961:5): pid=7575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.812" name="/newroot/237/memory.events" dev="tmpfs" ino=1210 res=1 errno=0
[   90.384685][ T7583] netlink: 'syz.1.817': attribute type 4 has an invalid length.
[   90.436181][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.818'.
[   90.493503][ T7592] netlink: 68 bytes leftover after parsing attributes in process `syz.1.820'.
[   90.496377][ T7592] netlink: 16 bytes leftover after parsing attributes in process `syz.1.820'.
[   90.502975][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.820'.
[   90.620911][ T7604] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component
[   91.015800][ T7638] netlink: 16 bytes leftover after parsing attributes in process `syz.2.842'.
[   91.021769][ T7638] netlink: 16 bytes leftover after parsing attributes in process `syz.2.842'.
[   91.166793][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.848'.
[   92.164586][ T7738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.883'.
[   92.301432][ T7748] netlink: 'syz.1.888': attribute type 1 has an invalid length.
[   92.304591][ T7748] netlink: 'syz.1.888': attribute type 4 has an invalid length.
[   92.308221][ T7748] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.888'.
[   92.356441][ T7752] netlink: 16 bytes leftover after parsing attributes in process `syz.1.890'.
[   92.458843][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   93.510066][ T7782] syzkaller0: entered promiscuous mode
[   93.512367][ T7782] syzkaller0: entered allmulticast mode
[   93.611063][ T7786] syzkaller0: entered promiscuous mode
[   93.613420][ T7786] syzkaller0: entered allmulticast mode
[   94.606111][ T7797] netlink: 'syz.2.910': attribute type 2 has an invalid length.
[   94.704561][ T7813] netlink: 'syz.2.917': attribute type 12 has an invalid length.
[   97.683456][ T7807] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   97.817242][ T7834] __nla_validate_parse: 3 callbacks suppressed
[   97.817258][ T7834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.922'.
[   97.924197][ T7843] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[   97.931708][ T7843] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[   97.938877][ T7843] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[   97.953431][ T7843] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   97.985493][ T7843] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   98.080388][ T7837] smbdirect: ib_dev[syz1] removed
[   98.149424][ T7860] gtp0: entered promiscuous mode
[   98.158424][ T7860] gtp0: entered allmulticast mode
[   98.180078][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.932'.
[   98.363206][ T7882] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   98.373191][ T7885] netlink: 28 bytes leftover after parsing attributes in process `syz.0.943'.
[   98.377498][ T7885] netlink: 28 bytes leftover after parsing attributes in process `syz.0.943'.
[   98.383574][ T7885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.943'.
[   98.401402][ T7887] tipc: Started in network mode
[   98.403468][ T7887] tipc: Node identity 3eeac331950f, cluster identity 4711
[   98.405950][ T7887] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.411358][ T7887] syzkaller0: entered promiscuous mode
[   98.413068][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.945'.
[   98.413265][ T7887] syzkaller0: entered allmulticast mode
[   98.434459][ T7889] team1: entered promiscuous mode
[   98.436689][ T7889] team1: entered allmulticast mode
[   98.439985][ T7889] 8021q: adding VLAN 0 to HW filter on device team1
[   98.449098][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.945'.
[   98.453336][ T7889] team2 (uninitialized): Failed to send options change via netlink (err -105)
[   98.466989][ T7889] team2: entered promiscuous mode
[   98.469189][ T7889] team2: entered allmulticast mode
[   98.471181][ T7889] 8021q: adding VLAN 0 to HW filter on device team2
[   98.478154][ T7887] tipc: Resetting bearer <eth:syzkaller0>
[   98.487196][ T7886] tipc: Resetting bearer <eth:syzkaller0>
[   98.507362][ T7886] tipc: Disabling bearer <eth:syzkaller0>
[   98.512595][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.946'.
[   98.814683][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.956'.
[   98.820543][ T7920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.956'.
[   98.827852][ T7920] geneve3: entered promiscuous mode
[   98.829649][ T7920] geneve3: entered allmulticast mode
[   98.967339][ T7936] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[   98.970423][ T7936] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   98.996390][ T7938] netlink: 'syz.0.965': attribute type 3 has an invalid length.
[   99.341955][ T7979] syzkaller0: entered promiscuous mode
[   99.343628][ T7979] syzkaller0: entered allmulticast mode
[   99.617110][ T8005] Bluetooth: MGMT ver 1.23
[   99.851623][ T8020] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  100.623005][ T8031] syzkaller1: entered promiscuous mode
[  100.625832][ T8031] syzkaller1: entered allmulticast mode
[  100.656310][ T8035] netlink: 'syz.2.1006': attribute type 1 has an invalid length.
[  100.686442][ T8035] bond2: entered promiscuous mode
[  100.690227][ T8035] 8021q: adding VLAN 0 to HW filter on device bond2
[  100.708784][ T8035] bond2: left promiscuous mode
[  100.710930][ T8035] bond2: entered allmulticast mode
[  100.732457][ T8035] bond2: (slave bridge3): making interface the new active one
[  100.737906][ T8035] bridge3: entered allmulticast mode
[  100.744616][ T8035] bond2: (slave bridge3): Enslaving as an active interface with an up link
[  101.658839][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  101.817515][ T8065] syzkaller0: entered promiscuous mode
[  101.821177][ T8065] syzkaller0: entered allmulticast mode
[  101.957519][ T8086] erspan0: entered promiscuous mode
[  101.960864][ T8086] macsec1: entered promiscuous mode
[  101.967079][ T8086] erspan0: left promiscuous mode
[  102.714402][ T8075] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  102.841865][ T8125] __nla_validate_parse: 8 callbacks suppressed
[  102.841881][ T8125] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1044'.
[  102.907134][ T8129] openvswitch: netlink: Unexpected mask (mask=200044, allowed=1004c)
[  103.269147][ T8147] openvswitch: netlink: IP tunnel dst address not specified
[  103.485837][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1062'.
[  103.490605][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1062'.
[  103.544086][ T8157] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.570234][ T8166] tipc: Started in network mode
[  103.574218][ T8166] tipc: Node identity 6a2d25b695c6, cluster identity 4711
[  103.582156][ T8166] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.596769][ T8166] syzkaller0: entered promiscuous mode
[  103.599129][ T8166] syzkaller0: entered allmulticast mode
[  103.606358][ T8166] netem: change failed
[  103.669286][ T8166] netlink: 'syz.0.1063': attribute type 1 has an invalid length.
[  103.673505][ T8157] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.677342][ T8166] netlink: 'syz.0.1063': attribute type 2 has an invalid length.
[  103.688506][ T8166] netlink: 'syz.0.1063': attribute type 2 has an invalid length.
[  103.699162][ T8166] netlink: 'syz.0.1063': attribute type 2 has an invalid length.
[  103.702496][ T8166] netlink: 'syz.0.1063': attribute type 1 has an invalid length.
[  103.707123][ T8166] netlink: 'syz.0.1063': attribute type 2 has an invalid length.
[  103.807069][ T8157] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.826643][ T8165] tipc: Resetting bearer <eth:syzkaller0>
[  103.841821][ T8165] tipc: Disabling bearer <eth:syzkaller0>
[  103.849953][ T8184] xfrm0: entered promiscuous mode
[  103.851669][ T8184] xfrm0: entered allmulticast mode
[  103.889219][ T8157] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.979081][ T8195] netlink: 'syz.0.1074': attribute type 1 has an invalid length.
[  104.031754][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.076100][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.102128][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.124319][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.217367][ T8212] xt_HMARK: proto mask must be zero with L3 mode
[  104.363438][ T8221] netlink: 'syz.2.1085': attribute type 11 has an invalid length.
[  105.116037][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1114'.
[  105.138751][ T8289] unsupported nlmsg_type 40
[  105.318451][ T8310] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1122'.
[  105.577147][ T8322] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  105.614518][ T8332] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1131'.
[  105.620319][ T8332] bond0: entered promiscuous mode
[  105.622075][ T8332] bond_slave_0: entered promiscuous mode
[  105.624003][ T8332] bond_slave_1: entered promiscuous mode
[  105.629277][ T8332] bond0: left promiscuous mode
[  105.632180][ T8332] bond_slave_0: left promiscuous mode
[  105.637642][ T8332] bond_slave_1: left promiscuous mode
[  106.110900][ T8362] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.150253][ T8366] tun0: tun_chr_ioctl cmd 1074812118
[  106.152108][ T8366] tun0: tun_chr_ioctl cmd 1074033169
[  106.224550][ T8369] bridge0: port 3(macvlan2) entered blocking state
[  106.229079][ T8369] bridge0: port 3(macvlan2) entered disabled state
[  106.233530][ T8369] macvlan2: entered allmulticast mode
[  106.237372][ T8369] ip6gretap0: entered allmulticast mode
[  106.248386][ T8369] macvlan2: entered promiscuous mode
[  106.251475][ T8369] bridge0: port 3(macvlan2) entered blocking state
[  106.254942][ T8369] bridge0: port 3(macvlan2) entered forwarding state
[  106.805495][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1153'.
[  106.956830][ T8386] netlink: 'syz.0.1154': attribute type 39 has an invalid length.
[  107.004685][ T8389] netlink: 'syz.1.1155': attribute type 1 has an invalid length.
[  107.036836][ T8392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1157'.
[  107.042903][ T8392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1157'.
[  107.064636][ T8392] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1157'.
[  107.117479][ T8398] netlink: 'syz.1.1159': attribute type 21 has an invalid length.
[  108.331178][ T8461] __nla_validate_parse: 3 callbacks suppressed
[  108.331188][ T8461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1184'.
[  108.526250][ T8476] syzkaller0: entered promiscuous mode
[  108.534850][ T8476] syzkaller0: entered allmulticast mode
[  108.539678][ T8476] syzkaller0: tun_net_xmit 14
[  108.655302][ T8482] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  109.096009][ T8506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1203'.
[  109.099097][ T8506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1203'.
[  109.272148][ T8521] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1211'.
[  109.454883][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1215'.
[  109.458330][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1215'.
[  109.588404][ T8541] ip6t_srh: unknown srh match flags  4000
[  109.656941][ T8550] vti0: entered promiscuous mode
[  109.694633][ T8552] netlink: 'syz.0.1225': attribute type 1 has an invalid length.
[  110.009329][ T8586] netlink: 'syz.0.1241': attribute type 58 has an invalid length.
[  110.011944][ T8586] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1241'.
[  110.047155][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1243'.
[  110.053804][ T8588] SET target dimension over the limit!
[  110.288614][ T8604] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1250'.
[  110.744244][ T8630] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1255'.
[  110.806112][ T8634] nicvf0: tun_chr_ioctl cmd 1074812117
[  111.568409][ T8699] bond3: entered promiscuous mode
[  111.755474][ T8706] netlink: 'syz.0.1290': attribute type 2 has an invalid length.
[  111.768697][ T8706] netlink: 'syz.0.1290': attribute type 2 has an invalid length.
[  111.797103][ T8706] macsec1: entered promiscuous mode
[  112.055600][ T8733] syzkaller0: entered promiscuous mode
[  112.063094][ T8733] syzkaller0: entered allmulticast mode
[  112.337997][ T8754] netlink: 'syz.0.1313': attribute type 1 has an invalid length.
[  112.377353][ T8754] 8021q: adding VLAN 0 to HW filter on device bond3
[  112.501127][ T8765] bridge0: port 3(macvlan2) entered disabled state
[  112.504053][ T8765] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.509074][ T8765] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.539847][ T8769] netlink: 'syz.1.1319': attribute type 13 has an invalid length.
[  112.633404][ T8765] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  112.642647][ T8765] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  112.750773][ T8765] bond2: left promiscuous mode
[  112.752836][ T8765] ip6gre1: left promiscuous mode
[  112.757595][ T8765] team1: left promiscuous mode
[  112.760010][ T8765] team1: left allmulticast mode
[  112.763149][ T8765] team2: left promiscuous mode
[  112.765187][ T8765] team2: left allmulticast mode
[  112.768621][ T8765] geneve3: left promiscuous mode
[  112.770660][ T8765] geneve3: left allmulticast mode
[  113.048156][ T8772] syz_tun (unregistering): left allmulticast mode
[  113.094125][   T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  113.097218][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.107455][   T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  113.116923][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.125151][   T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  113.135954][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.155543][   T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  113.172426][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.565406][ T8807] netlink: 'syz.2.1326': attribute type 13 has an invalid length.
[  113.673801][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  113.761319][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  114.117490][ T8866] netlink: 'syz.2.1336': attribute type 12 has an invalid length.
[  114.689708][ T8879] nftables ruleset with unbound chain
[  115.184141][ T8885] tap0: tun_chr_ioctl cmd 1074025681
[  115.315924][ T8897] netlink: 'syz.1.1351': attribute type 6 has an invalid length.
[  115.343916][ T8901] syzkaller0: entered promiscuous mode
[  115.345857][ T8901] syzkaller0: entered allmulticast mode
[  115.615302][ T8926] geneve2: entered promiscuous mode
[  116.273035][ T8993] __nla_validate_parse: 7 callbacks suppressed
[  116.273076][ T8993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1396'.
[  116.353326][ T8998] wg2: Caught tx_queue_len zero misconfig
[  116.424110][ T9007] sock: sock_set_timeout: `syz.0.1402' (pid 9007) tries to set negative timeout
[  116.462794][ T9011] netlink: 212320 bytes leftover after parsing attributes in process `syz.0.1405'.
[  116.684266][ T9036] tipc: Failed to remove unknown binding: 66,0,0/0:855896441/855896443
[  116.690678][ T9036] tipc: Failed to remove unknown binding: 66,0,0/0:855896441/855896442
[  116.703957][ T9036] tipc: Failed to remove unknown binding: 66,0,0/0:855896441/855896443
[  116.717947][ T9036] tipc: Failed to remove unknown binding: 66,0,0/0:855896441/855896442
[  117.218740][ T9067] syzkaller0: entered promiscuous mode
[  117.220678][ T9067] syzkaller0: entered allmulticast mode
[  117.852587][ T9105] tap0: tun_chr_ioctl cmd 1074025692
[  118.275856][ T9134] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1462'.
[  118.291274][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1461'.
[  118.337362][ T9141] netlink: 'syz.1.1464': attribute type 3 has an invalid length.
[  118.762376][ T9179] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1483'.
[  118.765415][ T9179] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1483'.
[  118.774313][ T9179] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1483'.
[  118.777573][ T9179] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1483'.
[  118.781295][ T9179] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1483'.
[  118.784115][ T9179] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1483'.
[  118.862703][ T9188] openvswitch: netlink: IP tunnel dst address not specified
[  119.166068][ T9210] netlink: 'syz.2.1496': attribute type 11 has an invalid length.
[  119.376283][ T9222] lo: Caught tx_queue_len zero misconfig
[  119.972926][ T9230] ip6tnl0: Caught tx_queue_len zero misconfig
[  120.023104][ T9236] sit1: entered promiscuous mode
[  120.102146][ T9244] xt_nat: multiple ranges no longer supported
[  120.218896][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  120.229070][   T33] audit: type=1800 audit(1778606231.901:6): pid=9257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1516" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2318 res=0 errno=0
[  120.498122][ T9279] netlink: 'syz.0.1528': attribute type 11 has an invalid length.
[  120.657466][ T9295] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  120.740662][ T9305] lo: entered allmulticast mode
[  120.743040][ T9305] lo: left allmulticast mode
[  120.869202][ T9317] netlink: 'syz.0.1547': attribute type 1 has an invalid length.
[  120.871803][ T9317] netlink: 'syz.0.1547': attribute type 2 has an invalid length.
[  121.352095][ T9340] __nla_validate_parse: 2 callbacks suppressed
[  121.352106][ T9340] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1555'.
[  121.408917][ T9342] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1556'.
[  121.559254][ T9348] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1559'.
[  121.915960][ T9359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1564'.
[  121.972439][ T9359] bond3: (slave vcan0): refused to change device type
[  122.376580][ T9400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1584'.
[  122.991755][ T9455] netlink: 'syz.1.1607': attribute type 1 has an invalid length.
[  122.994280][ T9455] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1607'.
[  123.016827][ T9457] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.103733][ T9463] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  123.106763][ T9463] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  123.809312][ T9478] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  124.010686][ T9501] netlink: 'syz.1.1620': attribute type 1 has an invalid length.
[  124.139999][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1626'.
[  124.215287][ T9529] netlink: 'syz.2.1633': attribute type 4 has an invalid length.
[  124.234899][ T9529] netlink: 'syz.2.1633': attribute type 4 has an invalid length.
[  124.533408][ T9567] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1650'.
[  124.800395][ T9583] x_tables: duplicate underflow at hook 3
[  124.813960][ T9585] xt_hashlimit: size too large, truncated to 1048576
[  124.875376][ T9593] sctp: [Deprecated]: syz.2.1661 (pid 9593) Use of int in maxseg socket option.
[  124.875376][ T9593] Use struct sctp_assoc_value instead
[  124.942872][ T9597] ieee802154 phy0 wpan0: encryption failed: -22
[  124.977636][ T9603] IPv6: NLM_F_CREATE should be specified when creating new route
[  125.002871][ T9607] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1668'.
[  125.169677][ T9624] pim6reg1: entered allmulticast mode
[  125.414821][ T9649] netlink: 'syz.0.1689': attribute type 15 has an invalid length.
[  125.455059][ T9652] batman_adv: batadv0: Adding interface: macvtap1
[  125.457152][ T9652] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  125.465697][ T9652] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  125.781274][ T9674] netlink: 296 bytes leftover after parsing attributes in process `syz.0.1701'.
[  125.851553][ T9678] syzkaller0: entered promiscuous mode
[  125.853364][ T9678] syzkaller0: entered allmulticast mode
[  125.872890][ T9612] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  127.110858][ T5001] Bluetooth: hci0: command 0x0401 tx timeout
[  127.984790][ T9701] syzkaller0: entered promiscuous mode
[  127.987180][ T9701] syzkaller0: entered allmulticast mode
[  128.145907][ T9704] xt_hashlimit: size too large, truncated to 1048576
[  128.503204][ T9736] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1728'.
[  128.709799][ T9770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1745'.
[  128.831507][ T9784] tipc: New replicast peer: 172.20.20.170
[  128.835480][ T9784] tipc: Enabled bearer <udp:syz2>, priority 10
[  129.076608][ T9805] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1760'.
[  129.498591][ T9840] tunl0: Caught tx_queue_len zero misconfig
[  129.583063][ T9845] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1777'.
[  129.816419][ T9869] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1786'.
[  129.842831][ T9869] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1786'.
[  129.949400][   T24] tipc: Node number set to 4293600694
[  130.636301][ T9914] xt_NFQUEUE: number of total queues is 0
[  130.831330][ T9932] bridge0: entered allmulticast mode
[  130.834756][ T9932] bridge0: left allmulticast mode
[  130.975610][ T9940] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1818'.
[  134.485382][ T9967] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  134.490810][ T9983] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1834'.
[  134.638884][T10001] netlink: 'syz.0.1843': attribute type 1 has an invalid length.
[  134.641480][T10001] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.697170][T10007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1846'.
[  134.875986][T10020] macvtap2: entered promiscuous mode
[  134.877917][T10020] team0: entered promiscuous mode
[  134.879638][T10020] team_slave_0: entered promiscuous mode
[  134.881883][T10020] team_slave_1: entered promiscuous mode
[  134.884132][T10020] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  134.886590][T10020] team0: Device macvtap2 is already an upper device of the team interface
[  134.893350][T10020] team0: left promiscuous mode
[  134.896288][T10020] team_slave_0: left promiscuous mode
[  134.899187][T10020] team_slave_1: left promiscuous mode
[  135.636183][T10044] batadv_slave_0: entered promiscuous mode
[  135.639237][T10043] batadv_slave_0: left promiscuous mode
[  135.809357][   T24] IPVS: starting estimator thread 0...
[  135.877112][T10054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1866'.
[  135.907913][T10061] IPVS: using max 81 ests per chain, 194400 per kthread
[  136.126054][T10080] netlink: 'syz.0.1878': attribute type 29 has an invalid length.
[  136.417483][T10114] netlink: 153712 bytes leftover after parsing attributes in process `syz.1.1894'.
[  136.552279][T10125] netlink: 'syz.2.1898': attribute type 62 has an invalid length.
[  136.571454][T10127] openvswitch: netlink: Message has 1 unknown bytes.
[  136.573565][T10127] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.106709][T10145] Cannot find del_set index 49151 as target
[  137.217158][T10153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1909'.
[  137.220212][T10153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1909'.
[  137.390938][T10168] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1916'.
[  137.497366][T10176] vlan2: entered promiscuous mode
[  137.499880][T10176] bond0: entered promiscuous mode
[  137.502036][T10176] bond_slave_0: entered promiscuous mode
[  137.579180][ T5001] Bluetooth: hci2: link tx timeout
[  137.582845][ T5001] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  137.587012][ T5001] Bluetooth: hci2: link tx timeout
[  137.589421][ T5001] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  137.593024][ T5001] Bluetooth: hci2: link tx timeout
[  137.594652][ T5001] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  137.597029][ T5001] Bluetooth: hci2: link tx timeout
[  137.599000][ T5001] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  138.043103][T10194] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1929'.
[  138.140732][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  138.142833][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  138.200618][T10204] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1933'.
[  138.203569][T10204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1933'.
[  138.452143][T10224] netlink: zone id is out of range
[  138.453946][T10224] netlink: get zone limit has 4 unknown bytes
[  138.754694][T10243] lo: Caught tx_queue_len zero misconfig
[  138.915806][T10253] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.918367][T10253] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.550734][T10283] __nla_validate_parse: 7 callbacks suppressed
[  139.550744][T10283] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1969'.
[  139.658148][ T5001] Bluetooth: hci2: command 0x0405 tx timeout
[  139.837858][T10307] tunl0: Caught tx_queue_len zero misconfig
[  139.886272][T10311] Bluetooth: MGMT ver 1.23
[  140.909604][T10341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1996'.
[  140.925011][T10341] 8021q: adding VLAN 0 to HW filter on device bond4
[  141.032081][T10350] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2000'.
[  141.035642][T10350] openvswitch: netlink: Key type 769 is out of range max 32
[  141.473487][T10383] netlink: 'syz.1.2015': attribute type 1 has an invalid length.
[  141.570682][T10389] No such timeout policy "syz0"
[  141.701228][T10401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2023'.
[  141.712922][T10401] macvtap2: entered promiscuous mode
[  141.715312][T10401] batadv0: entered promiscuous mode
[  141.720792][T10401] macvtap2: entered allmulticast mode
[  141.723204][T10401] batadv0: entered allmulticast mode
[  141.726589][T10401] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  141.739481][ T5001] Bluetooth: hci2: command 0x0405 tx timeout
[  141.747818][T10401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2023'.
[  141.756605][T10401] batadv0: left allmulticast mode
[  141.761020][T10401] batadv0: left promiscuous mode
[  141.762949][T10401] macvtap2: left promiscuous mode
[  141.764631][T10401] macvtap2: left allmulticast mode
[  142.057054][T10426] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2033'.
[  142.319423][T10448] syzkaller0: entered promiscuous mode
[  142.321380][T10448] syzkaller0: entered allmulticast mode
[  142.561869][T10463] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.949014][T10418] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  145.020785][T10491] netlink: 'syz.2.2064': attribute type 10 has an invalid length.
[  145.052306][T10491] team0: Port device dummy0 added
[  145.119539][T10494] netlink: 'syz.2.2064': attribute type 10 has an invalid length.
[  145.131270][T10494] team0: Port device dummy0 removed
[  145.141518][T10494] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  145.268387][T10491] nbd2: detected capacity change from 0 to 63
[  145.278911][   T54] block nbd2: Receive control failed (result -104)
[  145.278931][T10509] block nbd2: Receive control failed (result -32)
[  145.333969][T10518] Cannot find map_set index 17 as target
[  145.339356][T10520] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2074'.
[  145.350471][T10520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2074'.
[  145.359070][T10520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2074'.
[  145.371205][T10526] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2076'.
[  145.377167][T10526] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2076'.
[  145.382624][T10526] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2076'.
[  145.436094][T10532] 
[  145.436874][T10532] ======================================================
[  145.439084][T10532] WARNING: possible circular locking dependency detected
[  145.441334][T10532] syzkaller #0 Not tainted
[  145.442828][T10532] ------------------------------------------------------
[  145.445039][T10532] syz.2.2078/10532 is trying to acquire lock:
[  145.446932][T10532] ffffffff8e99c6d0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_procs_write_start+0x574/0x900
[  145.450310][T10532] 
[  145.450310][T10532] but task is already holding lock:
[  145.452713][T10532] ffffffff8e7eb750 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x568/0x900
[  145.455858][T10532] 
[  145.455858][T10532] which lock already depends on the new lock.
[  145.455858][T10532] 
[  145.459028][T10532] 
[  145.459028][T10532] the existing dependency chain (in reverse order) is:
[  145.461851][T10532] 
[  145.461851][T10532] -> #8 (cpu_hotplug_lock){++++}-{0:0}:
[  145.464351][T10532]        cpus_read_lock+0x42/0x160
[  145.466004][T10532]        static_key_slow_inc+0x12/0x30
[  145.467708][T10532]        ipv6_flowlabel_opt+0x1b94/0x28e0
[  145.469538][T10532]        do_ipv6_setsockopt+0xd9f/0x3150
[  145.471322][T10532]        ipv6_setsockopt+0x59/0x170
[  145.472958][T10532]        rawv6_setsockopt+0x276/0x5f0
[  145.474638][T10532]        do_sock_setsockopt+0x17c/0x1b0
[  145.476426][T10532]        __x64_sys_setsockopt+0x13d/0x1b0
[  145.478227][T10532]        do_syscall_64+0x15f/0xf80
[  145.479766][T10532]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.481730][T10532] 
[  145.481730][T10532] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  145.484177][T10532]        lock_sock_nested+0x41/0x100
[  145.485826][T10532]        inet_shutdown+0x6a/0x390
[  145.487423][T10532]        nbd_mark_nsock_dead+0x2e9/0x560
[  145.489148][T10532]        recv_work+0x1c2e/0x1d40
[  145.490734][T10532]        process_scheduled_works+0xb5d/0x1860
[  145.492716][T10532]        worker_thread+0xa53/0xfc0
[  145.494343][T10532]        kthread+0x388/0x470
[  145.495833][T10532]        ret_from_fork+0x514/0xb70
[  145.497452][T10532]        ret_from_fork_asm+0x1a/0x30
[  145.499152][T10532] 
[  145.499152][T10532] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  145.501535][T10532]        __mutex_lock+0x1a3/0x1550
[  145.503276][T10532]        nbd_queue_rq+0x37b/0x1100
[  145.504932][T10532]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  145.506840][T10532]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  145.509001][T10532]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  145.511067][T10532]        blk_mq_run_hw_queue+0x348/0x4f0
[  145.512912][T10532]        blk_mq_dispatch_list+0xd16/0xe10
[  145.514700][T10532]        blk_mq_flush_plug_list+0x48d/0x570
[  145.516570][T10532]        __blk_flush_plug+0x3ed/0x4d0
[  145.518279][T10532]        __submit_bio+0x28d/0x580
[  145.519882][T10532]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  145.522005][T10532]        block_read_full_folio+0x599/0x830
[  145.523822][T10532]        filemap_read_folio+0x137/0x3b0
[  145.525598][T10532]        do_read_cache_folio+0x358/0x590
[  145.527357][T10532]        read_part_sector+0xb6/0x2b0
[  145.529198][T10532]        adfspart_check_ICS+0xb1/0x960
[  145.530953][T10532]        bdev_disk_changed+0x817/0x1770
[  145.532718][T10532]        blkdev_get_whole+0x380/0x510
[  145.534439][T10532]        bdev_open+0x31e/0xd30
[  145.535936][T10532]        blkdev_open+0x470/0x610
[  145.537496][T10532]        do_dentry_open+0x785/0x14e0
[  145.539181][T10532]        vfs_open+0x3b/0x340
[  145.540667][T10532]        path_openat+0x2e08/0x3860
[  145.542478][T10532]        do_file_open+0x23e/0x4a0
[  145.544145][T10532]        do_sys_openat2+0x113/0x200
[  145.545726][T10532]        __x64_sys_openat+0x138/0x170
[  145.547507][T10532]        do_syscall_64+0x15f/0xf80
[  145.549259][T10532]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.551304][T10532] 
[  145.551304][T10532] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  145.553736][T10532]        __mutex_lock+0x1a3/0x1550
[  145.555403][T10532]        nbd_queue_rq+0xc6/0x1100
[  145.557046][T10532]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  145.559001][T10532]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  145.561274][T10532]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  145.563510][T10532]        blk_mq_run_hw_queue+0x348/0x4f0
[  145.565250][T10532]        blk_mq_dispatch_list+0xd16/0xe10
[  145.567014][T10532]        blk_mq_flush_plug_list+0x48d/0x570
[  145.568815][T10532]        __blk_flush_plug+0x3ed/0x4d0
[  145.570852][T10532]        __submit_bio+0x28d/0x580
[  145.572940][T10532]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  145.575343][T10532]        block_read_full_folio+0x599/0x830
[  145.577541][T10532]        filemap_read_folio+0x137/0x3b0
[  145.579341][T10532]        do_read_cache_folio+0x358/0x590
[  145.581144][T10532]        read_part_sector+0xb6/0x2b0
[  145.582918][T10532]        adfspart_check_ICS+0xb1/0x960
[  145.584700][T10532]        bdev_disk_changed+0x817/0x1770
[  145.586445][T10532]        blkdev_get_whole+0x380/0x510
[  145.588299][T10532]        bdev_open+0x31e/0xd30
[  145.590157][T10532]        blkdev_open+0x470/0x610
[  145.591793][T10532]        do_dentry_open+0x785/0x14e0
[  145.593491][T10532]        vfs_open+0x3b/0x340
[  145.595000][T10532]        path_openat+0x2e08/0x3860
[  145.596588][T10532]        do_file_open+0x23e/0x4a0
[  145.598161][T10532]        do_sys_openat2+0x113/0x200
[  145.599749][T10532]        __x64_sys_openat+0x138/0x170
[  145.601444][T10532]        do_syscall_64+0x15f/0xf80
[  145.603076][T10532]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.605090][T10532] 
[  145.605090][T10532] -> #4 (set->srcu){.+.+}-{0:0}:
[  145.607448][T10532]        __synchronize_srcu+0xca/0x300
[  145.609271][T10532]        elevator_switch+0x1e8/0x7a0
[  145.611130][T10532]        elevator_change+0x2cc/0x450
[  145.613074][T10532]        elevator_set_default+0x36c/0x430
[  145.614847][T10532]        blk_register_queue+0x3e9/0x4e0
[  145.616559][T10532]        __add_disk+0x677/0xd50
[  145.618083][T10532]        add_disk_fwnode+0xfb/0x480
[  145.619681][T10532]        nbd_dev_add+0x72c/0xb50
[  145.621260][T10532]        nbd_init+0x168/0x1f0
[  145.622728][T10532]        do_one_initcall+0x250/0x870
[  145.624382][T10532]        do_initcall_level+0x104/0x190
[  145.626083][T10532]        do_initcalls+0x59/0xa0
[  145.627587][T10532]        kernel_init_freeable+0x2a6/0x3e0
[  145.629362][T10532]        kernel_init+0x1d/0x1d0
[  145.630917][T10532]        ret_from_fork+0x514/0xb70
[  145.632874][T10532]        ret_from_fork_asm+0x1a/0x30
[  145.634924][T10532] 
[  145.634924][T10532] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  145.637825][T10532]        __mutex_lock+0x1a3/0x1550
[  145.639423][T10532]        elevator_change+0x1b3/0x450
[  145.641062][T10532]        elevator_set_none+0xb5/0x140
[  145.642723][T10532]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  145.644675][T10532]        nbd_start_device+0x17f/0xb10
[  145.646336][T10532]        nbd_genl_connect+0x165b/0x1cf0
[  145.648029][T10532]        genl_family_rcv_msg_doit+0x22a/0x330
[  145.649868][T10532]        genl_rcv_msg+0x61c/0x7a0
[  145.651683][T10532]        netlink_rcv_skb+0x232/0x4b0
[  145.653716][T10532]        genl_rcv+0x28/0x40
[  145.655481][T10532]        netlink_unicast+0x75c/0x8e0
[  145.657393][T10532]        netlink_sendmsg+0x813/0xb40
[  145.659418][T10532]        ____sys_sendmsg+0x972/0x9f0
[  145.661441][T10532]        ___sys_sendmsg+0x2a5/0x360
[  145.663457][T10532]        __x64_sys_sendmsg+0x1bd/0x2a0
[  145.665576][T10532]        do_syscall_64+0x15f/0xf80
[  145.667219][T10532]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.669636][T10532] 
[  145.669636][T10532] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}:
[  145.672990][T10532]        blk_alloc_queue+0x546/0x680
[  145.674956][T10532]        __blk_mq_alloc_disk+0x197/0x390
[  145.676698][T10532]        nbd_dev_add+0x499/0xb50
[  145.678542][T10532]        nbd_init+0x168/0x1f0
[  145.680165][T10532]        do_one_initcall+0x250/0x870
[  145.681929][T10532]        do_initcall_level+0x104/0x190
[  145.683878][T10532]        do_initcalls+0x59/0xa0
[  145.685686][T10532]        kernel_init_freeable+0x2a6/0x3e0
[  145.687643][T10532]        kernel_init+0x1d/0x1d0
[  145.689380][T10532]        ret_from_fork+0x514/0xb70
[  145.691309][T10532]        ret_from_fork_asm+0x1a/0x30
[  145.693087][T10532] 
[  145.693087][T10532] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  145.695449][T10532]        fs_reclaim_acquire+0x71/0x100
[  145.697260][T10532]        kmem_cache_alloc_lru_noprof+0x45/0x640
[  145.699166][T10532]        alloc_inode+0xb8/0x1b0
[  145.700664][T10532]        iget_locked+0x131/0x6a0
[  145.702190][T10532]        kernfs_get_inode+0x4f/0x780
[  145.703852][T10532]        cgroup_attach_permissions+0x26a/0x9e0
[  145.705742][T10532]        __cgroup_procs_write+0x23a/0x300
[  145.707473][T10532]        cgroup_procs_write+0x27/0x50
[  145.709113][T10532]        cgroup_file_write+0x331/0x8f0
[  145.710776][T10532]        kernfs_fop_write_iter+0x3af/0x540
[  145.712572][T10532]        vfs_write+0x61d/0xb90
[  145.714159][T10532]        ksys_write+0x150/0x270
[  145.715653][T10532]        do_syscall_64+0x15f/0xf80
[  145.717213][T10532]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.719160][T10532] 
[  145.719160][T10532] -> #0 (cgroup_threadgroup_rwsem){++++}-{0:0}:
[  145.721666][T10532]        __lock_acquire+0x15a5/0x2cf0
[  145.723308][T10532]        lock_acquire+0x106/0x350
[  145.725002][T10532]        percpu_down_write+0x54/0x320
[  145.726762][T10532]        cgroup_procs_write_start+0x574/0x900
[  145.728658][T10532]        __cgroup_procs_write+0x9b/0x300
[  145.730618][T10532]        cgroup_procs_write+0x27/0x50
[  145.732439][T10532]        cgroup_file_write+0x331/0x8f0
[  145.734272][T10532]        kernfs_fop_write_iter+0x3af/0x540
[  145.736088][T10532]        vfs_write+0x61d/0xb90
[  145.737582][T10532]        ksys_write+0x150/0x270
[  145.739113][T10532]        do_syscall_64+0x15f/0xf80
[  145.740723][T10532]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.742687][T10532] 
[  145.742687][T10532] other info that might help us debug this:
[  145.742687][T10532] 
[  145.745785][T10532] Chain exists of:
[  145.745785][T10532]   cgroup_threadgroup_rwsem --> sk_lock-AF_INET6 --> cpu_hotplug_lock
[  145.745785][T10532] 
[  145.750107][T10532]  Possible unsafe locking scenario:
[  145.750107][T10532] 
[  145.752350][T10532]        CPU0                    CPU1
[  145.754000][T10532]        ----                    ----
[  145.755619][T10532]   rlock(cpu_hotplug_lock);
[  145.757038][T10532]                                lock(sk_lock-AF_INET6);
[  145.759169][T10532]                                lock(cpu_hotplug_lock);
[  145.761230][T10532]   lock(cgroup_threadgroup_rwsem);
[  145.762994][T10532] 
[  145.762994][T10532]  *** DEADLOCK ***
[  145.762994][T10532] 
[  145.765702][T10532] 5 locks held by syz.2.2078/10532:
[  145.767335][T10532]  #0: ffff8881127214f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  145.770259][T10532]  #1: ffff88816e41c410 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x227/0xb90
[  145.773522][T10532]  #2: ffff88811361b480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540
[  145.776812][T10532]  #3: ffffffff8e99c420 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x13c/0x230
[  145.780362][T10532]  #4: ffffffff8e7eb750 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x568/0x900
[  145.784082][T10532] 
[  145.784082][T10532] stack backtrace:
[  145.786082][T10532] CPU: 0 UID: 0 PID: 10532 Comm: syz.2.2078 Not tainted syzkaller #0 PREEMPT(full) 
[  145.786094][T10532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  145.786100][T10532] Call Trace:
[  145.786105][T10532]  <TASK>
[  145.786109][T10532]  dump_stack_lvl+0xe8/0x150
[  145.786120][T10532]  print_circular_bug+0x2e1/0x300
[  145.786131][T10532]  check_noncircular+0x12e/0x150
[  145.786141][T10532]  __lock_acquire+0x15a5/0x2cf0
[  145.786151][T10532]  ? is_bpf_text_address+0x292/0x2b0
[  145.786161][T10532]  ? __lock_acquire+0x6b5/0x2cf0
[  145.786169][T10532]  ? __pfx___mutex_trylock_common+0x10/0x10
[  145.786180][T10532]  ? cgroup_procs_write_start+0x574/0x900
[  145.786187][T10532]  lock_acquire+0x106/0x350
[  145.786195][T10532]  ? cgroup_procs_write_start+0x574/0x900
[  145.786203][T10532]  percpu_down_write+0x54/0x320
[  145.786214][T10532]  ? cgroup_procs_write_start+0x574/0x900
[  145.786221][T10532]  cgroup_procs_write_start+0x574/0x900
[  145.786229][T10532]  ? __pfx_cgroup_procs_write_start+0x10/0x10
[  145.786238][T10532]  __cgroup_procs_write+0x9b/0x300
[  145.786248][T10532]  ? kernfs_root+0x1c/0x230
[  145.786257][T10532]  ? kernfs_root+0x1c/0x230
[  145.786267][T10532]  cgroup_procs_write+0x27/0x50
[  145.786278][T10532]  ? __pfx_cgroup_procs_write+0x10/0x10
[  145.786287][T10532]  cgroup_file_write+0x331/0x8f0
[  145.786298][T10532]  ? __pfx_cgroup_file_write+0x10/0x10
[  145.786310][T10532]  ? __pfx_cgroup_file_write+0x10/0x10
[  145.786319][T10532]  kernfs_fop_write_iter+0x3af/0x540
[  145.786327][T10532]  vfs_write+0x61d/0xb90
[  145.786338][T10532]  ? __pfx_vfs_write+0x10/0x10
[  145.786349][T10532]  ? __fget_files+0x2a/0x420
[  145.786358][T10532]  ksys_write+0x150/0x270
[  145.786374][T10532]  ? __pfx_ksys_write+0x10/0x10
[  145.786390][T10532]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.786402][T10532]  do_syscall_64+0x15f/0xf80
[  145.786412][T10532]  ? trace_irq_disable+0x3b/0x140
[  145.786430][T10532]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.786441][T10532] RIP: 0033:0x7fdab899cdd9
[  145.786453][T10532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  145.786459][T10532] RSP: 002b:00007fdab97ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  145.786467][T10532] RAX: ffffffffffffffda RBX: 00007fdab8c15fa0 RCX: 00007fdab899cdd9
[  145.786473][T10532] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 0000000000000004
[  145.786477][T10532] RBP: 00007fdab8a32d69 R08: 0000000000000000 R09: 0000000000000000
[  145.786481][T10532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  145.786485][T10532] R13: 00007fdab8c16038 R14: 00007fdab8c15fa0 R15: 00007ffcf485eb48
[  145.786493][T10532]  </TASK>
