last executing test programs:

50.882666239s ago: executing program 0 (id=405):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0)

45.30317517s ago: executing program 0 (id=405):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0)

38.534704727s ago: executing program 0 (id=405):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0)

32.155209245s ago: executing program 0 (id=405):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0)

25.883767822s ago: executing program 0 (id=405):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0)

21.243802873s ago: executing program 0 (id=405):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0)

21.106713006s ago: executing program 32 (id=405):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0)

1.194050818s ago: executing program 2 (id=2551):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000a80)=ANY=[@ANYBLOB="e80200001000200027bd7000fddbdf25fe800000000000000000000000000043ac1414bb00"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000004d4ff0000000a01010200000000000000000000000005000000000000000700000000000000030000000000000001000000000000002840ffffffffffff0900000000000000010000000000000000000000000000000900000000000000000000000000000002000000000000000600000000000000f7ffffff08000000040000002bbd7000063500000a000301300000000000000014000d00fe8000000000000000000000000000bbf90001007368613338342d617678000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000880500008bb6453733432a81f81bb4a5be765aa0cb3b4ecfa6604979bc63148d185a2c0f6f92985d7797cf1c57de6780a3f838cfd5a910cbdf93204a3c0df4dbc58ae746f52db8470aa6ba8b248b56bd05f520f47ca753de24478b020d787ae6e585f1f4496c9ca2abd273a4b9b4c140ed872344797d9d043f8e534f9dcd5e8168128ee14b9d64d127d06a227182f98478497a4bcc1944bbfbfcf9872c8a4ae5c5f8ed884c000000080016000100010008001e0004000000d500120067636d286165732900000000000000000000000000f0845e2a003916f2196948f02c3300000000000000000000000000000000000000000000000000000000000000000000000048040000600000009e4f02424aa644670285ed0b5fb7d0532630e8d116b8e0ee60f9fd0f3ac7e5fb374e6f137eda72ab6985611e6e8457c2574a22da48e667cef92e300922e378f9eab6cf5626b0aad7918ea06adf42c403b7f1da577b47d88256328ab3b8f242b26809d88c60812a675b8506b17254bdc1675484a69b05c6abeffc8229f2d79e48cb5c2d1d264e356b9d00"/686], 0x2e8}, 0x1, 0x0, 0x0, 0x10}, 0x4c040)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x7d}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000040)="9c0e9e085911", 0x6}], 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="adc79706ffbc16f214000000800000000000000007000000"], 0x18}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004100)={0x18, 0x42, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x4}]}, 0x18}}, 0x4000)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000014c0)=@filter={'filter\x00', 0x2, 0x4, 0x3c8, 0xffffffff, 0x208, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0x5, 0x1, 0x4, {0x92}}}, @common=@srh={{0x30}, {0x2e, 0x0, 0x80, 0x0, 0x0, 0x0, 0xa}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x0, 0x0, 0xffffffff], [0xff, 0x0, 0x0, 0xffffff00], 'bridge_slave_0\x00', 'bridge0\x00', {}, {}, 0xc}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRESOCT=r6, @ANYBLOB="2503000000000000000016000000140001"], 0x5f}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000300)={0x0, 0x2, 0x5, 0x2378e939})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r10=>0x0})
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r12 = socket(0x400000000010, 0x3, 0x0)
r13 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r14, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0xa0, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r14, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x74, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xe, 0x9, 0x5, 0x5, 0x7de, 0x74, 0xe, 0xdc, [{0x80000001, 0x2, 0x9, 0x1ff}, {0x3ee, 0x1, 0x4}, {0x9, 0xf12, 0x7f, 0xa}, {0x7ff, 0x2, 0x1, 0x8000}, {0x3, 0x1, 0x3, 0x3e}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}, @TCA_U32_POLICE={0x4}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004)
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000024}, 0xc1)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4)
sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20044005}, 0x4000010)

914.228497ms ago: executing program 1 (id=2561):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0)
r9 = socket(0x10, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001400010f00000000ffdbdf250a000400", @ANYRES32=r10, @ANYBLOB="140006000700000000010400000000000400000014000200fe"], 0x40}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0)

225.031798ms ago: executing program 1 (id=2562):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@can_newroute={0x2c, 0x18, 0x1, 0x70bd25, 0xfffffffc, {0x1d, 0x1, 0x1}, [@CGW_MOD_AND={0x15, 0x1, {{{0x4, 0x1, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "0e5fa2e4e96119c1"}, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008044}, 0xc000)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0)

224.593357ms ago: executing program 1 (id=2564):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close(0x4)
r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000a40)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85e", 0x4e}], 0x1}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x18}], 0x1, 0x0, 0x0, 0x24000810}, 0x4000084)
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_type(r3, &(0x7f0000000040), 0x2, 0x0)
sendfile(0xffffffffffffffff, r4, &(0x7f0000000240)=0x6, 0x9)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, 0x0, 0x4040000)
recvmmsg$unix(r6, 0x0, 0x0, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x41, 0x3, 0x3c8, 0x258, 0x19, 0x0, 0x0, 0x0, 0x330, 0x1f0, 0x1f0, 0x330, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'ip6erspan0\x00', 'veth0_vlan\x00'}, 0x0, 0x1f8, 0x258, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'dvmrp0\x00', {0x0, 0x3d40, 0x0, 0x0, 0x0, 0x687c, 0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x428)
r7 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r7, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000001fff000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd00008e4100030006010000418e01400004fcff", 0x58}], 0x1)

168.055535ms ago: executing program 2 (id=2566):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xc}}, 0x14)

165.724642ms ago: executing program 1 (id=2568):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r0}, 0x18)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, 0x0)

154.270352ms ago: executing program 2 (id=2569):
syz_emit_ethernet(0x86, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x1, 0x65, 0x0, 0x1, 0x2f, 0x0, @loopback, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@remote}, {@private=0xa010100, 0xb00}, {@broadcast}, {}, {@initdev={0xac, 0x1e, 0x41, 0x0}}, {@local}, {@local}, {@multicast1}]}]}}}}}}}, 0x0)

105.269334ms ago: executing program 3 (id=2570):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000240)=""/178, &(0x7f0000000300)=0xb2)

105.17457ms ago: executing program 2 (id=2571):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0x71, 0x2}, 0xfd}, 0x18)
setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000400)=0x1, 0x4)
sendmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000140)=@can, 0x80, 0x0}}], 0x1, 0x0)

105.109734ms ago: executing program 3 (id=2572):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0xa}}}, &(0x7f0000000200)='syzkaller\x00', 0x5}, 0x90)

58.91982ms ago: executing program 3 (id=2573):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = socket(0x28, 0x5, 0x0)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r2, 0x4)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYRES8=r3], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)

54.291282ms ago: executing program 1 (id=2574):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x4)
write(r2, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29)

52.564947ms ago: executing program 3 (id=2575):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="bfc628bd7000ffdbdf251a00000005009200800000000700210062620008100022800400008004"], 0x34}, 0x1, 0x0, 0x0, 0x20044044}, 0x800)

2.767067ms ago: executing program 2 (id=2576):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newnexthop={0x28, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0x4}, @NHA_FDB={0x4}, @NHA_GROUP_TYPE={0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080d8}, 0x4000080)

2.51961ms ago: executing program 3 (id=2577):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x3e, [@func_proto={0x0, 0x1fffff13, 0x0, 0xd, 0x0, [{0x4, 0x5}]}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x0, 0x5f, 0x5f, 0x2e, 0x1e, 0x30, 0x5f]}}, 0x0, 0x41, 0x0, 0x1, 0x7}, 0x28)

1.164144ms ago: executing program 1 (id=2578):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)

957.114µs ago: executing program 2 (id=2579):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x120, 0x4c, 0x232, 0x0, 0x0, 0x340, 0x2e8, 0x2e8, 0x340, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [0x0, 0xff, 0xffffff00], 'bridge_slave_0\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x5, 0x4}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, @private1, [], [0x0, 0xff, 0xff, 0xff], 'team_slave_0\x00', 'xfrm0\x00', {}, {}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xf8, 0x220, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"b825", 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x6, 'u:r:untrusted_app:s0:c512,c768\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470)

0s ago: executing program 3 (id=2580):
r0 = socket$kcm(0x10, 0x2, 0x4)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f00000003c0)=@ethtool_rxnfc={0x2e, 0xd, 0x6, {0x1, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}})

kernel console output (not intermixed with test programs):

 T7915]  ? gup_fast_fallback+0x1afc/0x2260
[   84.328164][ T7915]  gup_fast_fallback+0x1cd4/0x2260
[   84.328186][ T7915]  ? __pfx_gup_fast_fallback+0x10/0x10
[   84.328193][ T7915]  ? trace_contention_end+0x39/0x120
[   84.328203][ T7915]  ? __mutex_lock+0x330/0xe80
[   84.328210][ T7915]  ? futex_unqueue+0x22/0x240
[   84.328219][ T7915]  ? futex_unqueue+0x22/0x240
[   84.328227][ T7915]  ? futex_unqueue+0x22/0x240
[   84.328235][ T7915]  ? is_valid_gup_args+0x11f/0x200
[   84.328244][ T7915]  ? get_user_pages_fast+0x4d/0xb0
[   84.328253][ T7915]  __iov_iter_get_pages_alloc+0x39a/0xb40
[   84.328265][ T7915]  ? __pfx_pipe_clear_nowait+0x10/0x10
[   84.328274][ T7915]  ? get_futex_key+0x880/0x1640
[   84.328281][ T7915]  ? wait_for_space+0x24d/0x2d0
[   84.328291][ T7915]  iov_iter_get_pages2+0x5e/0xa0
[   84.328301][ T7915]  __se_sys_vmsplice+0x548/0x10d0
[   84.328317][ T7915]  ? __pfx___se_sys_vmsplice+0x10/0x10
[   84.328327][ T7915]  ? __pfx_futex_wait+0x10/0x10
[   84.328338][ T7915]  ? __lock_acquire+0xab9/0xd20
[   84.328359][ T7915]  ? do_pipe2+0xf7/0x170
[   84.328370][ T7915]  ? rcu_is_watching+0x15/0xb0
[   84.328381][ T7915]  ? do_syscall_64+0xbe/0x3b0
[   84.328391][ T7915]  do_syscall_64+0xfa/0x3b0
[   84.328397][ T7915]  ? lockdep_hardirqs_on+0x9c/0x150
[   84.328407][ T7915]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.328414][ T7915]  ? exc_page_fault+0x9f/0xf0
[   84.328425][ T7915]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.328432][ T7915] RIP: 0033:0x7f94b3f8e929
[   84.328439][ T7915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   84.328446][ T7915] RSP: 002b:00007f94b4d1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[   84.328454][ T7915] RAX: ffffffffffffffda RBX: 00007f94b41b5fa0 RCX: 00007f94b3f8e929
[   84.328459][ T7915] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000e
[   84.328464][ T7915] RBP: 00007f94b4010b39 R08: 0000000000000000 R09: 0000000000000000
[   84.328468][ T7915] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[   84.328472][ T7915] R13: 0000000000000000 R14: 00007f94b41b5fa0 R15: 00007ffe6722ab08
[   84.328483][ T7915]  </TASK>
[   84.440040][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.809'.
[   84.443806][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.809'.
[   84.456403][ T7916] ip6tnl1: entered promiscuous mode
[   84.458846][ T7916] ip6tnl1: entered allmulticast mode
[   84.499579][ T7913] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.580990][ T7913] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.655034][ T7913] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.731521][ T7913] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.746288][ T7913] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.756082][ T7913] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.764808][ T7913] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.884984][ T7944] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.823'.
[   84.903856][ T7946] netlink: 148 bytes leftover after parsing attributes in process `syz.2.824'.
[   84.908185][ T7946] net_ratelimit: 13 callbacks suppressed
[   84.908196][ T7946] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[   85.041392][ T7959] netlink: 'syz.1.826': attribute type 13 has an invalid length.
[   85.044313][ T7959] netlink: 'syz.1.826': attribute type 17 has an invalid length.
[   85.074498][ T7959] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   85.197069][ T7950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.254220][ T7950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.309318][ T7959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.817367][ T7950] syz.1.826 (7950) used greatest stack depth: 17912 bytes left
[   85.967850][ T7978] netlink: 'syz.2.834': attribute type 1 has an invalid length.
[   86.001718][ T7982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.836'.
[   86.060630][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.747018][ T8023] netlink: 'syz.2.843': attribute type 1 has an invalid length.
[   86.817339][ T5218] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   86.821634][ T5218] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   86.824523][ T5218] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   86.827976][ T5218] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   86.831802][ T5218] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   86.841432][ T8033] netlink: 'syz.2.847': attribute type 39 has an invalid length.
[   86.944816][ T8028] chnl_net:caif_netlink_parms(): no params data found
[   86.996030][ T8028] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.000935][ T8028] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.003297][ T8028] bridge_slave_0: entered allmulticast mode
[   87.006041][ T8028] bridge_slave_0: entered promiscuous mode
[   87.013804][ T8028] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.016025][ T8028] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.018292][ T8028] bridge_slave_1: entered allmulticast mode
[   87.023006][ T8028] bridge_slave_1: entered promiscuous mode
[   87.043450][ T8028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.047824][ T8028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.079914][ T8028] team0: Port device team_slave_0 added
[   87.083614][ T8028] team0: Port device team_slave_1 added
[   87.093314][ T8055] netlink: 92 bytes leftover after parsing attributes in process `syz.1.855'.
[   87.096727][ T8055] tc_dump_action: action bad kind
[   87.114667][ T8028] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.116908][ T8028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.125506][ T8028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.130762][ T8028] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.133150][ T8028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.142225][ T8028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.175725][ T8028] hsr_slave_0: entered promiscuous mode
[   87.178015][ T8028] hsr_slave_1: entered promiscuous mode
[   87.180292][ T8028] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.182699][ T8028] Cannot create hsr debugfs directory
[   87.294314][ T8067] netlink: 52 bytes leftover after parsing attributes in process `syz.1.861'.
[   87.297134][ T8067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   88.004540][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.061387][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.124797][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.233289][   T13] bridge_slave_1: left allmulticast mode
[   88.235197][   T13] bridge_slave_1: left promiscuous mode
[   88.237154][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.252507][   T13] bridge_slave_0: left allmulticast mode
[   88.254301][   T13] bridge_slave_0: left promiscuous mode
[   88.256139][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.467226][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   88.471234][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   88.474606][   T13] bond0 (unregistering): Released all slaves
[   88.694054][ T8098] netlink: 20 bytes leftover after parsing attributes in process `syz.1.870'.
[   88.717724][ T8098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.870'.
[   88.800707][   T13] hsr_slave_0: left promiscuous mode
[   88.802885][   T13] hsr_slave_1: left promiscuous mode
[   88.804939][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.807499][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.818001][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.823161][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   88.832147][   T13] veth1_macvtap: left promiscuous mode
[   88.834025][   T13] veth0_macvtap: left promiscuous mode
[   88.838215][   T13] veth1_vlan: left promiscuous mode
[   88.846179][   T13] veth0_vlan: left promiscuous mode
[   88.879309][ T5218] Bluetooth: hci0: command tx timeout
[   89.104455][   T13] team0 (unregistering): Port device team_slave_1 removed
[   89.125102][   T13] team0 (unregistering): Port device team_slave_0 removed
[   89.382210][ T8028] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   89.388119][ T8028] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   89.393726][ T8028] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   89.406244][ T8028] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   89.523794][ T8028] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.562746][ T8028] 8021q: adding VLAN 0 to HW filter on device team0
[   89.568300][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.570733][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.590808][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.593165][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.794080][ T8138] team0 (unregistering): Port device team_slave_0 removed
[   89.812973][ T8138] team0 (unregistering): Port device team_slave_1 removed
[   89.839943][ T8151] vlan2: entered promiscuous mode
[   89.842060][ T8151] team0: entered promiscuous mode
[   89.893161][ T8028] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.935573][ T8028] veth0_vlan: entered promiscuous mode
[   89.951065][ T8028] veth1_vlan: entered promiscuous mode
[   89.954833][ T8163] netlink: 'syz.2.888': attribute type 1 has an invalid length.
[   89.975313][ T8163] bond2: (slave ip6gretap2): Enslaving as a backup interface with an up link
[   89.984152][ T8163] 8021q: adding VLAN 0 to HW filter on device bond2
[   89.987075][ T5878] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   90.009867][ T8163] veth3: entered promiscuous mode
[   90.013661][ T8163] bond2: (slave veth3): Enslaving as a backup interface with a down link
[   90.017153][ T8028] veth0_macvtap: entered promiscuous mode
[   90.037653][ T8163] bond2: (slave ip6gretap2): Removing an active aggregator
[   90.041713][ T8163] bond2: (slave ip6gretap2): Releasing backup interface
[   90.044100][ T8163] bond2: (slave ip6gretap2): the permanent HWaddr of slave - ca:39:48:6f:1c:d1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   90.052963][ T8163] bond2: (slave veth3): Releasing backup interface
[   90.065921][ T8028] veth1_macvtap: entered promiscuous mode
[   90.084781][ T8028] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.097950][ T8028] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.107769][ T8028] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.112721][ T8028] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.115731][ T8028] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.118651][ T8028] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.186581][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.191484][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.212924][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.216025][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.311096][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'.
[   90.354367][ T8173] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98
[   90.461902][ T8186] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[   90.558754][ T8193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.900'.
[   91.663121][ T5878] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.518243][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   92.522369][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   92.526572][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   92.534196][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   92.539495][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   92.691098][ T8233] chnl_net:caif_netlink_parms(): no params data found
[   92.761015][ T8233] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.763397][ T8233] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.765672][ T8233] bridge_slave_0: entered allmulticast mode
[   92.768302][ T8233] bridge_slave_0: entered promiscuous mode
[   92.772560][ T8233] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.775496][ T8233] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.780827][ T8233] bridge_slave_1: entered allmulticast mode
[   92.783461][ T8233] bridge_slave_1: entered promiscuous mode
[   92.808137][ T8233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.815860][ T8233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.821586][ T8265] netlink: 'syz.2.928': attribute type 3 has an invalid length.
[   92.843700][ T8233] team0: Port device team_slave_0 added
[   92.847000][ T8233] team0: Port device team_slave_1 added
[   92.874435][ T8233] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.876702][ T8233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.902070][ T8233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.904514][ T8273] netlink: 24 bytes leftover after parsing attributes in process `syz.2.932'.
[   92.907843][ T8233] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.913406][ T8233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.923632][ T8233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.944910][ T8273] netlink: 24 bytes leftover after parsing attributes in process `syz.2.932'.
[   93.014016][ T5878] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.024155][ T8233] hsr_slave_0: entered promiscuous mode
[   93.026460][ T8233] hsr_slave_1: entered promiscuous mode
[   93.028541][ T8233] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   93.033245][ T8233] Cannot create hsr debugfs directory
[   93.214678][ T5878] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.233273][ T8292] netlink: 20 bytes leftover after parsing attributes in process `syz.1.940'.
[   93.273704][ T5878] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.297278][ T8298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.943'.
[   93.409280][ T5878] bridge_slave_1: left allmulticast mode
[   93.411984][ T5878] bridge_slave_1: left promiscuous mode
[   93.414398][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.423283][ T5878] bridge_slave_0: left allmulticast mode
[   93.425100][ T5878] bridge_slave_0: left promiscuous mode
[   93.426969][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.663215][ T5878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   93.667089][ T5878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   93.671004][ T5878] bond0 (unregistering): Released all slaves
[   93.936182][ T5878] hsr_slave_0: left promiscuous mode
[   93.945307][ T5878] hsr_slave_1: left promiscuous mode
[   93.953434][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.968075][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.979867][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.982933][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_1
[   94.007688][ T5878] veth1_macvtap: left promiscuous mode
[   94.013106][ T5878] veth0_macvtap: left promiscuous mode
[   94.015496][ T5878] veth1_vlan: left promiscuous mode
[   94.017810][ T5878] veth0_vlan: left promiscuous mode
[   94.294065][ T5878] team0 (unregistering): Port device team_slave_1 removed
[   94.315940][ T5878] team0 (unregistering): Port device team_slave_0 removed
[   94.447571][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.962'.
[   94.452548][ T8352] netlink: 7 bytes leftover after parsing attributes in process `syz.2.962'.
[   94.560010][ T5218] Bluetooth: hci0: command tx timeout
[   94.599757][ T8233] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   94.602372][ T8356] netlink: 20 bytes leftover after parsing attributes in process `syz.2.964'.
[   94.606905][ T8233] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   94.621752][ T8356] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   94.624423][ T8356] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   94.626989][ T8356] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   94.629757][ T8356] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   94.634313][ T8233] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   94.638503][ T8233] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   94.697474][ T8233] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.713147][ T8233] 8021q: adding VLAN 0 to HW filter on device team0
[   94.715755][ T8363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.964'.
[   94.732361][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.734677][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.737516][ T1116] block nbd0: Possible stuck request ffff8880209c0000: control (read@0,1024B). Runtime 30 seconds
[   94.743797][ T1116] block nbd0: Possible stuck request ffff8880209c0200: control (read@1024,1024B). Runtime 30 seconds
[   94.747193][ T1116] block nbd0: Possible stuck request ffff8880209c0400: control (read@2048,1024B). Runtime 30 seconds
[   94.751110][ T1116] block nbd0: Possible stuck request ffff8880209c0600: control (read@3072,1024B). Runtime 30 seconds
[   94.758887][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.761215][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.863186][ T8233] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.885397][ T8233] veth0_vlan: entered promiscuous mode
[   94.891443][ T8233] veth1_vlan: entered promiscuous mode
[   94.916575][ T8233] veth0_macvtap: entered promiscuous mode
[   94.921708][ T8233] veth1_macvtap: entered promiscuous mode
[   94.945213][ T8233] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.952515][ T8233] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.957368][ T8233] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.961375][ T8233] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.964228][ T8233] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.968083][ T8233] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.012355][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.020397][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.037566][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.040841][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.266795][ T8391] vlan2: entered promiscuous mode
[   95.268537][ T8391] bridge0: entered promiscuous mode
[   95.271005][ T8391] vlan2: entered allmulticast mode
[   95.272932][ T8391] bridge0: entered allmulticast mode
[   95.793179][ T8442] netlink: 24 bytes leftover after parsing attributes in process `syz.2.995'.
[   95.796738][ T8442] netlink: 24 bytes leftover after parsing attributes in process `syz.2.995'.
[   95.805490][ T8442] netlink: 24 bytes leftover after parsing attributes in process `syz.2.995'.
[   95.819232][ T8442] netlink: 24 bytes leftover after parsing attributes in process `syz.2.995'.
[   95.822675][ T8442] netlink: 24 bytes leftover after parsing attributes in process `syz.2.995'.
[   95.825433][ T8442] netlink: 24 bytes leftover after parsing attributes in process `syz.2.995'.
[   95.864504][ T8452] netlink: 248 bytes leftover after parsing attributes in process `syz.2.999'.
[   95.947785][ T8462] netlink: 'syz.2.1002': attribute type 8 has an invalid length.
[   96.013169][ T8469] syzkaller0: entered promiscuous mode
[   96.014975][ T8469] syzkaller0: entered allmulticast mode
[   96.018054][ T8469] syzkaller0: mtu less than device minimum
[   96.424860][ T8516] netlink: 'syz.2.1019': attribute type 21 has an invalid length.
[   96.427502][ T8516] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1019'.
[   97.052708][ T5878] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.921504][ T8556] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1029'.
[   98.012211][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1033'.
[   98.058176][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   98.062222][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   98.067437][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   98.078947][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   98.085830][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   98.267404][ T8567] chnl_net:caif_netlink_parms(): no params data found
[   98.339672][ T8567] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.342172][ T8567] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.344912][ T8567] bridge_slave_0: entered allmulticast mode
[   98.348217][ T8567] bridge_slave_0: entered promiscuous mode
[   98.353940][ T8567] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.356289][ T8567] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.358599][ T8567] bridge_slave_1: entered allmulticast mode
[   98.363251][ T8567] bridge_slave_1: entered promiscuous mode
[   98.393752][ T8567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.405665][ T8567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.428435][ T8567] team0: Port device team_slave_0 added
[   98.432589][ T8567] team0: Port device team_slave_1 added
[   98.451013][ T8601] sctp: [Deprecated]: syz.2.1047 (pid 8601) Use of struct sctp_assoc_value in delayed_ack socket option.
[   98.451013][ T8601] Use struct sctp_sack_info instead
[   98.463030][ T8567] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.465310][ T8567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.478971][ T8567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.494974][ T8567] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.497197][ T8567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.507143][ T8567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.607200][ T8607] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.610368][ T8607] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.628597][ T8607] batman_adv: batadv0: Interface deactivated: dummy0
[   98.704468][ T8607] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.715850][ T8607] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.785104][ T8607] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.787976][ T8607] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.791129][ T8607] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.794072][ T8607] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.827413][ T8607] batadv1: left allmulticast mode
[   98.832808][ T8607] ip6tnl1: left promiscuous mode
[   98.834537][ T8607] ip6tnl1: left allmulticast mode
[   98.838901][ T8607] vlan2: left promiscuous mode
[   98.840917][ T8607] bridge0: left promiscuous mode
[   98.842759][ T8607] vlan2: left allmulticast mode
[   98.844441][ T8607] bridge0: left allmulticast mode
[   98.848886][ T8567] hsr_slave_0: entered promiscuous mode
[   98.852871][ T8567] hsr_slave_1: entered promiscuous mode
[   98.856684][ T8567] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   98.859330][ T8567] Cannot create hsr debugfs directory
[   98.892054][ T5878] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.940868][ T5878] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.992365][ T5878] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.093366][ T5878] bridge_slave_1: left allmulticast mode
[   99.095295][ T5878] bridge_slave_1: left promiscuous mode
[   99.097235][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.103162][ T5878] bridge_slave_0: left allmulticast mode
[   99.105006][ T5878] bridge_slave_0: left promiscuous mode
[   99.106990][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.318431][ T5878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   99.322582][ T5878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   99.326141][ T5878] bond0 (unregistering): Released all slaves
[   99.670505][ T5878] hsr_slave_0: left promiscuous mode
[   99.672671][ T5878] hsr_slave_1: left promiscuous mode
[   99.674709][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.677149][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.692179][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.699968][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.708127][ T5878] veth1_macvtap: left promiscuous mode
[   99.711492][ T5878] veth0_macvtap: left promiscuous mode
[   99.713262][ T5878] veth1_vlan: left promiscuous mode
[   99.714913][ T5878] veth0_vlan: left promiscuous mode
[   99.977592][ T5878] team0 (unregistering): Port device team_slave_1 removed
[  100.003831][ T5878] team0 (unregistering): Port device team_slave_0 removed
[  100.162723][   T55] Bluetooth: hci0: command tx timeout
[  100.334017][ T8567] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  100.351820][ T8567] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  100.366533][ T8567] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  100.381342][ T8567] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  100.446232][ T8610] IPVS: starting estimator thread 0...
[  100.446655][ T8682] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  100.508977][ T8693] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  100.524679][ T8697] netlink: 'syz.1.1080': attribute type 5 has an invalid length.
[  100.534077][ T8697] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  100.536973][ T8697] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  100.540285][ T8697] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  100.543182][ T8697] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  100.546203][ T8695] IPVS: using max 79 ests per chain, 189600 per kthread
[  100.553506][ T8567] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.576090][ T8567] 8021q: adding VLAN 0 to HW filter on device team0
[  100.591409][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.593747][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.615068][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.617373][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.723646][ T8567] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.747587][ T8715] netlink: 'syz.2.1087': attribute type 10 has an invalid length.
[  100.750194][ T8567] veth0_vlan: entered promiscuous mode
[  100.765564][ T8715] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  100.771506][ T8567] veth1_vlan: entered promiscuous mode
[  100.775455][ T5296] srz1: Port: 1 Link ACTIVE
[  100.781887][ T8714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.792455][ T8567] veth0_macvtap: entered promiscuous mode
[  100.796139][ T8567] veth1_macvtap: entered promiscuous mode
[  100.807114][ T8567] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.814355][ T8567] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.821347][ T8567] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.824154][ T8567] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.826949][ T8567] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.830536][ T8567] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.901069][ T4458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.903532][ T4458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.917996][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.922221][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.341128][ T8726] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  101.344359][ T8726] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.395052][ T8726] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  101.398233][ T8726] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.484029][ T8726] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  101.487387][ T8726] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.561260][ T8726] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  101.564324][ T8726] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.664430][ T8726] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  101.673952][ T8726] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.686456][ T8726] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  101.689326][ T8726] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.698329][ T8726] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  101.702854][ T8726] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.705144][ T8731] __nla_validate_parse: 8 callbacks suppressed
[  101.705152][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1092'.
[  101.715847][ T8726] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  101.721693][ T8726] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.796184][ T8735] netlink: 'syz.1.1094': attribute type 11 has an invalid length.
[  101.798719][ T8735] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1094'.
[  101.805589][ T8735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1094'.
[  101.895084][ T8742] netlink: 'syz.1.1097': attribute type 21 has an invalid length.
[  101.897553][ T8742] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1097'.
[  101.902002][ T8742] netlink: 'syz.1.1097': attribute type 5 has an invalid length.
[  101.909277][ T8742] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1097'.
[  101.945208][ T8747] netlink: 'syz.1.1100': attribute type 27 has an invalid length.
[  102.326088][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1122'.
[  102.376073][ T8803] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  102.581270][ T8821] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1133'.
[  102.584330][ T8821] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  102.587046][ T8821] openvswitch: netlink: Message has 1 unknown bytes.
[  102.621582][ T8823] netlink: 336 bytes leftover after parsing attributes in process `syz.2.1134'.
[  102.707995][ T8829] netlink: 'syz.2.1137': attribute type 1 has an invalid length.
[  102.710608][ T8829] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1137'.
[  102.766988][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.777365][ T8834] dummy0: entered promiscuous mode
[  102.785926][ T8834] dummy0: left promiscuous mode
[  103.813111][ T5218] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  103.816135][ T5218] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  103.820749][ T5218] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  103.823778][ T5218] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  103.826214][ T5218] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  103.987204][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.019604][ T8854] chnl_net:caif_netlink_parms(): no params data found
[  104.068479][ T8882] syz_tun: entered promiscuous mode
[  104.073911][ T8882] vlan2: entered promiscuous mode
[  104.179349][ T8854] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.188143][ T8854] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.190672][ T8854] bridge_slave_0: entered allmulticast mode
[  104.198115][ T8854] bridge_slave_0: entered promiscuous mode
[  104.237434][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.245150][ T8854] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.248893][ T8854] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.259436][ T8854] bridge_slave_1: entered allmulticast mode
[  104.263419][ T8854] bridge_slave_1: entered promiscuous mode
[  104.297301][ T8854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.302389][ T8854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.318292][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.344729][ T8854] team0: Port device team_slave_0 added
[  104.348441][ T8854] team0: Port device team_slave_1 added
[  104.383206][ T8854] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.385505][ T8854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.406303][ T8854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.417884][ T8854] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.426931][ T8854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.435043][ T8854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.449565][ T8910] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1170'.
[  104.487147][ T8854] hsr_slave_0: entered promiscuous mode
[  104.491658][ T8854] hsr_slave_1: entered promiscuous mode
[  104.493883][ T8854] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  104.496217][ T8854] Cannot create hsr debugfs directory
[  104.518415][   T13] bridge_slave_1: left allmulticast mode
[  104.523401][   T13] bridge_slave_1: left promiscuous mode
[  104.525256][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.529712][   T13] bridge_slave_0: left allmulticast mode
[  104.531457][   T13] bridge_slave_0: left promiscuous mode
[  104.533343][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.730696][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  104.734841][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  104.738423][   T13] bond0 (unregistering): Released all slaves
[  104.760860][ T8913] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  104.763881][ T8913] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  104.766713][ T8913] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  104.770318][ T8913] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  104.773397][ T8913] geneve2: entered promiscuous mode
[  104.775260][ T8913] geneve2: entered allmulticast mode
[  104.994499][   T13] hsr_slave_0: left promiscuous mode
[  105.000683][   T13] hsr_slave_1: left promiscuous mode
[  105.005993][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.017955][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  105.021167][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.023639][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  105.034476][   T13] veth1_macvtap: left promiscuous mode
[  105.036648][   T13] veth0_macvtap: left promiscuous mode
[  105.038822][ T8927] netlink: 'syz.1.1174': attribute type 1 has an invalid length.
[  105.041843][   T13] veth1_vlan: left promiscuous mode
[  105.043717][   T13] veth0_vlan: left promiscuous mode
[  105.284428][   T13] team0 (unregistering): Port device team_slave_1 removed
[  105.305833][   T13] team0 (unregistering): Port device team_slave_0 removed
[  105.817330][ T8854] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  105.823729][ T8854] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  105.830765][ T8854] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  105.843434][ T8854] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  105.922537][   T55] Bluetooth: hci0: command tx timeout
[  105.971662][ T8854] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.985532][ T8854] 8021q: adding VLAN 0 to HW filter on device team0
[  105.994400][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.996699][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.012940][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.015261][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.176162][ T8854] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.224815][ T8854] veth0_vlan: entered promiscuous mode
[  106.238926][ T8854] veth1_vlan: entered promiscuous mode
[  106.256818][ T8854] veth0_macvtap: entered promiscuous mode
[  106.263753][ T8854] veth1_macvtap: entered promiscuous mode
[  106.282784][ T8854] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.288430][ T8854] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.295567][ T8854] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.298406][ T8854] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.309523][ T8854] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.312269][ T8854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.362826][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.365382][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.433588][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.436127][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.903576][ T9037] netlink: 'syz.2.1211': attribute type 9 has an invalid length.
[  107.446081][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888037829800: rx timeout, send abort
[  107.946149][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88803782a400: rx timeout, send abort
[  107.949460][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888037829800: abort rx timeout. Force session deactivation
[  108.009154][   T55] Bluetooth: hci0: command 0x041b tx timeout
[  108.256344][ T9096] netlink: 'syz.2.1234': attribute type 1 has an invalid length.
[  108.448842][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88803782a400: abort rx timeout. Force session deactivation
[  108.513761][ T9116] __nla_validate_parse: 4 callbacks suppressed
[  108.513771][ T9116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1244'.
[  108.518665][ T9116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1244'.
[  108.617557][ T9121] --map-set only usable from mangle table
[  108.744765][ T9133] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1252'.
[  108.962917][ T9158] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode
[  108.965229][ T9158] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  109.026716][ T9168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1265'.
[  109.173224][ T9183] trusted_key: syz.1.1272 sent an empty control message without MSG_MORE.
[  109.427027][ T9205] netlink: 'syz.1.1281': attribute type 10 has an invalid length.
[  109.553677][ T9209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1283'.
[  109.666047][ T5854] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.888488][ T5854] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.958285][ T5854] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.000365][ T5854] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.078839][ T5854] bridge_slave_1: left allmulticast mode
[  110.082402][ T5854] bridge_slave_1: left promiscuous mode
[  110.084264][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.088029][ T5854] bridge_slave_0: left allmulticast mode
[  110.092431][ T5854] bridge_slave_0: left promiscuous mode
[  110.094305][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.263092][ T5854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  110.267104][ T5854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  110.271623][ T5854] bond0 (unregistering): Released all slaves
[  110.453295][ T5854] hsr_slave_0: left promiscuous mode
[  110.459264][ T5854] hsr_slave_1: left promiscuous mode
[  110.461302][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  110.463731][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_0
[  110.466374][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.468825][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.478027][ T5854] veth1_macvtap: left promiscuous mode
[  110.480318][ T5854] veth0_macvtap: left promiscuous mode
[  110.482390][ T5854] veth1_vlan: left promiscuous mode
[  110.484310][ T5854] veth0_vlan: left promiscuous mode
[  110.801457][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  110.811660][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  110.820372][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  110.824381][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  110.827030][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  110.827506][ T5854] team0 (unregistering): Port device team_slave_1 removed
[  110.856672][ T5854] team0 (unregistering): Port device team_slave_0 removed
[  111.240884][ T9244] chnl_net:caif_netlink_parms(): no params data found
[  111.328202][ T9244] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.334283][ T9244] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.336813][ T9244] bridge_slave_0: entered allmulticast mode
[  111.339741][ T9244] bridge_slave_0: entered promiscuous mode
[  111.356681][ T9244] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.362551][ T9244] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.365665][ T9244] bridge_slave_1: entered allmulticast mode
[  111.368953][ T9244] bridge_slave_1: entered promiscuous mode
[  111.394003][ T9244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  111.398649][ T9244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  111.421298][ T9244] team0: Port device team_slave_0 added
[  111.424852][ T9244] team0: Port device team_slave_1 added
[  111.443637][ T9244] batman_adv: batadv0: Adding interface: batadv_slave_0
[  111.446104][ T9244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.455487][ T9244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.460694][ T9244] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.462922][ T9244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.472003][ T9244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  111.475638][ T9279] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1297'.
[  111.478618][ T9279] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1297'.
[  111.505069][ T9244] hsr_slave_0: entered promiscuous mode
[  111.507575][ T9244] hsr_slave_1: entered promiscuous mode
[  111.509915][ T9244] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  111.512246][ T9244] Cannot create hsr debugfs directory
[  111.556824][ T9284] batadv1: entered allmulticast mode
[  111.559501][ T9284] 8021q: adding VLAN 0 to HW filter on device batadv1
[  111.944859][ T9311] netlink: 'syz.2.1308': attribute type 1 has an invalid length.
[  111.947456][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1308'.
[  111.990511][ T9244] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  111.994651][ T9244] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  112.003295][ T9244] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  112.007783][ T9244] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  112.052646][ T9244] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.054975][ T9244] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.057379][ T9244] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.059877][ T9244] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.072329][ T9327] syz_tun: entered allmulticast mode
[  112.075091][ T9325] syz_tun: left allmulticast mode
[  112.127472][ T9244] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.142332][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.146459][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.185401][ T9244] 8021q: adding VLAN 0 to HW filter on device team0
[  112.214769][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.217040][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.224844][ T9344] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1315'.
[  112.251505][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.253791][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.386156][ T9244] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.444410][ T9244] veth0_vlan: entered promiscuous mode
[  112.449776][ T9244] veth1_vlan: entered promiscuous mode
[  112.468299][ T9244] veth0_macvtap: entered promiscuous mode
[  112.476214][ T9244] veth1_macvtap: entered promiscuous mode
[  112.488116][ T9244] batman_adv: batadv0: Interface activated: batadv_slave_0
[  112.495097][ T9244] batman_adv: batadv0: Interface activated: batadv_slave_1
[  112.503454][ T9244] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.517519][ T9244] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.525641][ T9366] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1320'.
[  112.529117][ T9244] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.531952][ T9244] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.552115][ T9368] bridge4: entered promiscuous mode
[  112.553916][ T9368] bridge4: entered allmulticast mode
[  112.615119][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.617717][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.661868][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.666268][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.993299][ T9414] tipc: Started in network mode
[  112.994962][ T9414] tipc: Node identity , cluster identity 4711
[  112.997053][ T9414] tipc: Failed to obtain node identity
[  112.998938][ T9414] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  113.291016][ T9432] (unnamed net_device) (uninitialized): option lacp_active: invalid value (18)
[  113.675594][ T9465] __nla_validate_parse: 4 callbacks suppressed
[  113.675603][ T9465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1364'.
[  114.023440][ T9493] netlink: 'syz.2.1376': attribute type 21 has an invalid length.
[  114.025896][ T9493] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1376'.
[  114.051703][ T9495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1377'.
[  114.189826][ T9501] netlink: 'syz.2.1380': attribute type 13 has an invalid length.
[  114.192887][ T9501] netlink: 'syz.2.1380': attribute type 17 has an invalid length.
[  114.311731][ T9501] veth3: left promiscuous mode
[  114.320778][ T9501] batadv1: left allmulticast mode
[  114.323324][ T9501] bridge4: left promiscuous mode
[  114.324919][ T9501] bridge4: left allmulticast mode
[  114.342252][ T5864] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  114.382435][ T9501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  114.451199][ T9501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  114.506357][ T9501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  114.761847][ T5864] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.938599][ T9514] 8021q: adding VLAN 0 to HW filter on device bond3
[  115.944586][ T9514] bridge0: port 1(bond3) entered blocking state
[  115.947175][ T9514] bridge0: port 1(bond3) entered disabled state
[  115.954679][ T9514] bond3: entered allmulticast mode
[  115.958104][ T9514] bond3: entered promiscuous mode
[  115.965485][ T9514] bridge0: port 1(bond3) entered blocking state
[  115.967750][ T9514] bridge0: port 1(bond3) entered forwarding state
[  115.978407][   T27] bridge0: port 1(bond3) entered disabled state
[  115.998379][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  116.003291][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  116.006237][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  116.009311][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  116.013025][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  116.030960][ T9514] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1384'.
[  116.033748][ T9514] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1384'.
[  116.040188][ T9514] dummy0: entered promiscuous mode
[  116.043272][ T9514] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network
[  116.050756][ T9514] bridge0: port 2(hsr1) entered blocking state
[  116.052741][ T9514] bridge0: port 2(hsr1) entered disabled state
[  116.054712][ T9514] hsr1: entered allmulticast mode
[  116.056273][ T9514] dummy0: entered allmulticast mode
[  116.057912][ T9514] team0: entered allmulticast mode
[  116.061148][ T9514] hsr1: entered promiscuous mode
[  116.063110][ T9514] bridge0: port 2(hsr1) entered blocking state
[  116.065118][ T9514] bridge0: port 2(hsr1) entered forwarding state
[  116.147286][ T9528] netlink: 'syz.1.1389': attribute type 10 has an invalid length.
[  116.156423][ T9528] batman_adv: batadv0: Removing interface: dummy0
[  116.162264][ T9528] netlink: 'syz.1.1389': attribute type 10 has an invalid length.
[  116.166941][ T9528] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  116.226755][ T9522] chnl_net:caif_netlink_parms(): no params data found
[  116.292993][ T9522] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.295813][ T9522] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.298873][ T9522] bridge_slave_0: entered allmulticast mode
[  116.306361][ T9522] bridge_slave_0: entered promiscuous mode
[  116.310016][ T9522] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.312273][ T9522] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.314652][ T9522] bridge_slave_1: entered allmulticast mode
[  116.317921][ T9522] bridge_slave_1: entered promiscuous mode
[  116.333971][ T9548] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  116.365220][ T9522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  116.376596][ T9522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  116.413992][ T5864] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.422811][ T9522] team0: Port device team_slave_0 added
[  116.426609][ T9522] team0: Port device team_slave_1 added
[  116.451515][ T9522] batman_adv: batadv0: Adding interface: batadv_slave_0
[  116.453843][ T9522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.462446][ T9522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  116.470206][ T9522] batman_adv: batadv0: Adding interface: batadv_slave_1
[  116.472479][ T9522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.486841][ T9522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  116.501831][ T5864] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.535241][ T9522] hsr_slave_0: entered promiscuous mode
[  116.537770][ T9522] hsr_slave_1: entered promiscuous mode
[  116.544580][ T9522] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  116.546929][ T9522] Cannot create hsr debugfs directory
[  116.561529][ T5864] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.809317][ T5864] bridge_slave_1: left allmulticast mode
[  116.811235][ T5864] bridge_slave_1: left promiscuous mode
[  116.813058][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.855181][ T5864] bridge_slave_0: left allmulticast mode
[  116.859201][ T5864] bridge_slave_0: left promiscuous mode
[  116.870443][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.254656][ T5864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  117.258608][ T5864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  117.262278][ T5864] bond0 (unregistering): Released all slaves
[  117.387814][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1408'.
[  117.397310][ T9587] openvswitch: netlink: Missing key (keys=40, expected=100)
[  117.603347][ T9522] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  117.611957][ T9522] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  117.626907][ T5864] hsr_slave_0: left promiscuous mode
[  117.629979][ T5864] hsr_slave_1: left promiscuous mode
[  117.631997][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.634280][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_0
[  117.636951][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  117.641444][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_1
[  117.649350][ T5864] veth1_macvtap: left promiscuous mode
[  117.651119][ T5864] veth0_macvtap: left promiscuous mode
[  117.652880][ T5864] veth1_vlan: left promiscuous mode
[  117.654518][ T5864] veth0_vlan: left promiscuous mode
[  117.891006][ T5864] team0 (unregistering): Port device team_slave_1 removed
[  117.911241][ T5864] team0 (unregistering): Port device team_slave_0 removed
[  118.081535][   T55] Bluetooth: hci0: command tx timeout
[  118.118678][ T9522] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  118.125689][ T9522] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  118.216823][ T9522] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.235966][ T9522] 8021q: adding VLAN 0 to HW filter on device team0
[  118.264911][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.267188][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.272336][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.274649][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.295793][ T9522] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  118.300384][ T9522] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  118.400143][    C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  118.420365][ T9522] 8021q: adding VLAN 0 to HW filter on device batadv0
[  118.474116][ T9522] veth0_vlan: entered promiscuous mode
[  118.484469][ T9522] veth1_vlan: entered promiscuous mode
[  118.513212][ T9522] veth0_macvtap: entered promiscuous mode
[  118.517941][ T9522] veth1_macvtap: entered promiscuous mode
[  118.555677][ T9522] batman_adv: batadv0: Interface activated: batadv_slave_0
[  118.564572][ T9522] batman_adv: batadv0: Interface activated: batadv_slave_1
[  118.580712][ T9522] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.585234][ T9522] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.588147][ T9522] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.595915][ T9522] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.666084][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.668503][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.698269][ T4458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.705321][ T4458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.718059][  T790] IPVS: starting estimator thread 0...
[  118.805277][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1439'.
[  118.813124][ T9669] IPVS: using max 79 ests per chain, 189600 per kthread
[  118.816047][ T9675] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  118.818973][ T9675] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  119.254704][ T9711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1454'.
[  120.308875][ T9738] netlink: 'syz.2.1464': attribute type 2 has an invalid length.
[  120.341232][ T5854] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.537205][ T9745] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1466'.
[  121.673109][ T5218] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  121.676501][ T5218] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  121.680343][ T5218] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  121.683184][ T5218] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  121.686123][ T5218] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  121.814475][ T9758] chnl_net:caif_netlink_parms(): no params data found
[  121.878713][ T5854] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.951714][ T9758] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.955761][ T9758] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.958561][ T9758] bridge_slave_0: entered allmulticast mode
[  121.969094][ T9758] bridge_slave_0: entered promiscuous mode
[  121.972121][ T9758] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.974399][ T9758] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.976670][ T9758] bridge_slave_1: entered allmulticast mode
[  121.979387][ T9758] bridge_slave_1: entered promiscuous mode
[  122.000328][ T5854] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.034552][ T9758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  122.038975][ T9758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  122.063439][ T9758] team0: Port device team_slave_0 added
[  122.083896][ T5854] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.100200][ T9758] team0: Port device team_slave_1 added
[  122.135444][ T9758] batman_adv: batadv0: Adding interface: batadv_slave_0
[  122.137999][ T9758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.148762][ T9758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  122.218708][ T9810] bridge0: port 2(hsr1) entered disabled state
[  122.372263][ T9810] tipc: Resetting bearer <eth:veth0_macvtap>
[  122.396453][ T9810] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.402864][ T9810] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.408858][ T9810] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.415869][ T9810] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.484907][ T9810] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  122.487711][ T9810] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  122.490364][ T9810] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  122.492904][ T9810] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  122.522489][ T9758] batman_adv: batadv0: Adding interface: batadv_slave_1
[  122.524749][ T9758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.535941][ T9758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  122.613978][ T9758] hsr_slave_0: entered promiscuous mode
[  122.618415][ T9758] hsr_slave_1: entered promiscuous mode
[  122.623102][ T9758] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  122.625672][ T9758] Cannot create hsr debugfs directory
[  122.726379][ T9841] ipvlan2: entered promiscuous mode
[  122.857038][ T5854] bridge_slave_1: left allmulticast mode
[  122.858814][ T5854] bridge_slave_1: left promiscuous mode
[  122.869706][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.878089][ T5854] bridge_slave_0: left allmulticast mode
[  122.886656][ T5854] bridge_slave_0: left promiscuous mode
[  122.899548][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.960101][ T9851] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  123.180046][ T5854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  123.185014][ T5854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  123.188650][ T5854] bond0 (unregistering): Released all slaves
[  123.461365][ T5854] hsr_slave_0: left promiscuous mode
[  123.463729][ T5854] hsr_slave_1: left promiscuous mode
[  123.465802][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.469312][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.474501][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.479133][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.496242][ T5854] veth1_macvtap: left promiscuous mode
[  123.499362][ T5854] veth0_macvtap: left promiscuous mode
[  123.505820][ T5854] veth1_vlan: left promiscuous mode
[  123.507503][ T5854] veth0_vlan: left promiscuous mode
[  123.761213][ T5218] Bluetooth: hci0: command tx timeout
[  123.815810][ T5854] team0 (unregistering): Port device team_slave_1 removed
[  123.848363][ T5854] team0 (unregistering): Port device team_slave_0 removed
[  123.903789][ T9885] netlink: 'syz.2.1516': attribute type 1 has an invalid length.
[  124.128790][ T9886] bond4 (unregistering): Released all slaves
[  124.243892][ T9758] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  124.273454][ T9758] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  124.300683][ T9758] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  124.312375][ T9758] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  124.418901][ T9758] 8021q: adding VLAN 0 to HW filter on device bond0
[  124.427383][ T9758] 8021q: adding VLAN 0 to HW filter on device team0
[  124.433070][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.435259][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state
[  124.447901][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.450159][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state
[  124.693457][ T9758] 8021q: adding VLAN 0 to HW filter on device batadv0
[  124.811000][ T1116] block nbd0: Possible stuck request ffff8880209c0000: control (read@0,1024B). Runtime 60 seconds
[  124.814359][ T1116] block nbd0: Possible stuck request ffff8880209c0200: control (read@1024,1024B). Runtime 60 seconds
[  124.817746][ T1116] block nbd0: Possible stuck request ffff8880209c0400: control (read@2048,1024B). Runtime 60 seconds
[  124.821561][ T1116] block nbd0: Possible stuck request ffff8880209c0600: control (read@3072,1024B). Runtime 60 seconds
[  124.837504][ T9758] veth0_vlan: entered promiscuous mode
[  124.845769][ T9758] veth1_vlan: entered promiscuous mode
[  124.873823][ T9758] veth0_macvtap: entered promiscuous mode
[  124.883433][ T9758] veth1_macvtap: entered promiscuous mode
[  124.900823][ T9758] batman_adv: batadv0: Interface activated: batadv_slave_0
[  124.915301][ T9758] batman_adv: batadv0: Interface activated: batadv_slave_1
[  124.924564][ T9758] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.927405][ T9758] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.932574][ T9758] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.935451][ T9758] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.032728][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.035216][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.058144][ T4458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.061850][ T4458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.135739][ T9965] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  125.213099][ T9970] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1544'.
[  126.110254][T10020] netlink: 'syz.1.1568': attribute type 11 has an invalid length.
[  126.114927][T10026] tc_dump_action: action bad kind
[  126.304256][T10050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1582'.
[  126.344048][T10054] ieee802154 phy0 wpan0: encryption failed: -22
[  126.395592][T10060] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1587'.
[  126.417158][T10062] pim6reg1: entered promiscuous mode
[  126.418917][T10062] pim6reg1: entered allmulticast mode
[  126.525664][T10076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  126.528745][T10074] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1594'.
[  126.846455][T10104] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1609'.
[  126.896484][T10108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1611'.
[  127.007225][T10118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1616'.
[  127.012989][T10118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1616'.
[  127.049261][T10120] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1617'.
[  127.104796][T10127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1620'.
[  127.116178][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.316219][ T5278] udevd[5278]: worker [5829] /devices/virtual/block/nbd0 is taking a long time
[  128.547780][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  128.551226][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  128.553801][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  128.556737][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  128.560965][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  128.701955][T10144] chnl_net:caif_netlink_parms(): no params data found
[  128.774919][T10144] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.777255][T10144] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.780134][T10144] bridge_slave_0: entered allmulticast mode
[  128.782812][T10144] bridge_slave_0: entered promiscuous mode
[  128.787837][T10144] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.792054][T10144] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.795260][T10144] bridge_slave_1: entered allmulticast mode
[  128.797852][T10144] bridge_slave_1: entered promiscuous mode
[  128.830268][T10144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  128.834719][T10144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  128.855053][T10179] Bluetooth: hci1: Opcode 0x080f failed: -4
[  128.873026][T10144] team0: Port device team_slave_0 added
[  128.881878][T10144] team0: Port device team_slave_1 added
[  128.910173][T10144] batman_adv: batadv0: Adding interface: batadv_slave_0
[  128.913983][T10144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.923347][T10144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  128.927543][T10144] batman_adv: batadv0: Adding interface: batadv_slave_1
[  128.930153][T10144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.937961][T10144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  128.977029][T10144] hsr_slave_0: entered promiscuous mode
[  128.980188][T10144] hsr_slave_1: entered promiscuous mode
[  128.982234][T10144] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  128.985073][T10144] Cannot create hsr debugfs directory
[  129.036089][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.116346][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.181379][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.297156][T10216] netlink: 'syz.2.1659': attribute type 7 has an invalid length.
[  129.300252][   T13] bridge_slave_1: left allmulticast mode
[  129.301403][T10216] netlink: 'syz.2.1659': attribute type 8 has an invalid length.
[  129.303189][   T13] bridge_slave_1: left promiscuous mode
[  129.306617][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.316776][   T13] bridge_slave_0: left allmulticast mode
[  129.318581][   T13] bridge_slave_0: left promiscuous mode
[  129.320677][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.374316][T10222] netlink: 'syz.2.1662': attribute type 58 has an invalid length.
[  129.537117][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  129.541363][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  129.544968][   T13] bond0 (unregistering): Released all slaves
[  129.817576][   T13] hsr_slave_0: left promiscuous mode
[  129.819954][   T13] hsr_slave_1: left promiscuous mode
[  129.825842][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  129.828204][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  129.840868][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  129.843160][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  129.863725][   T13] veth1_macvtap: left promiscuous mode
[  129.865906][   T13] veth0_macvtap: left promiscuous mode
[  129.867689][   T13] veth1_vlan: left promiscuous mode
[  129.892389][   T13] veth0_vlan: left promiscuous mode
[  130.375207][T10284] __nla_validate_parse: 5 callbacks suppressed
[  130.375217][T10284] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1685'.
[  130.383569][T10284] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1685'.
[  130.386453][T10284] netlink: 'syz.2.1685': attribute type 5 has an invalid length.
[  130.388955][T10284] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1685'.
[  130.395556][   T13] team0 (unregistering): Port device team_slave_1 removed
[  130.428690][   T13] team0 (unregistering): Port device team_slave_0 removed
[  130.640172][   T55] Bluetooth: hci0: command tx timeout
[  130.734132][T10144] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  130.744508][T10144] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  130.753753][T10144] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  130.766869][T10144] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  130.803716][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1696'.
[  130.864247][T10144] 8021q: adding VLAN 0 to HW filter on device bond0
[  130.881811][   T55] Bluetooth: hci1: command 0x080f tx timeout
[  130.884170][T10144] 8021q: adding VLAN 0 to HW filter on device team0
[  130.891464][T10319] ip6gretap0: entered promiscuous mode
[  130.896601][T10319] ip6gretap0: left promiscuous mode
[  130.916873][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.919363][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.931608][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.934105][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  131.124631][T10343] ieee802154 phy0 wpan0: encryption failed: -22
[  131.135702][T10144] 8021q: adding VLAN 0 to HW filter on device batadv0
[  131.176498][T10348] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1710'.
[  131.182864][T10348] nbd: illegal input index 65508
[  131.207184][T10144] veth0_vlan: entered promiscuous mode
[  131.217325][T10144] veth1_vlan: entered promiscuous mode
[  131.234467][T10144] veth0_macvtap: entered promiscuous mode
[  131.237246][T10353] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1712'.
[  131.242405][T10144] veth1_macvtap: entered promiscuous mode
[  131.261404][T10144] batman_adv: batadv0: Interface activated: batadv_slave_0
[  131.271882][T10144] batman_adv: batadv0: Interface activated: batadv_slave_1
[  131.275619][T10144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.278375][T10144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.283666][T10144] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.286364][T10144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.341324][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.343828][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.371235][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.373673][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.567680][T10373] netlink: 'syz.1.1722': attribute type 39 has an invalid length.
[  131.835219][T10388] netlink: 'syz.1.1729': attribute type 2 has an invalid length.
[  131.837634][T10388] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1729'.
[  132.437599][T10442] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1745'.
[  132.442757][T10442] netlink: 'syz.1.1745': attribute type 32 has an invalid length.
[  132.446032][T10442] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  132.480788][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.516748][T10450] tipc: Started in network mode
[  132.518405][T10450] tipc: Node identity 9ee97785958, cluster identity 4711
[  132.521157][T10450] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.526053][T10450] syzkaller0: entered promiscuous mode
[  132.529300][T10450] syzkaller0: entered allmulticast mode
[  132.549531][T10450] tipc: Resetting bearer <eth:syzkaller0>
[  132.556661][T10449] tipc: Resetting bearer <eth:syzkaller0>
[  132.579728][T10449] tipc: Disabling bearer <eth:syzkaller0>
[  133.108067][T10514] vlan2: entered allmulticast mode
[  133.112787][T10514] veth1: entered allmulticast mode
[  133.295993][T10538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1791'.
[  133.308227][T10540] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.487501][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.511632][T10560] IPVS: Scheduler module ip_vs_sip not found
[  133.514241][T10560] IPVS: length: 8 != 446622349272
[  135.004916][ T5218] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  135.008713][ T5218] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  135.012893][ T5218] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  135.016016][ T5218] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  135.018633][ T5218] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  135.027521][T10578] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1808'.
[  135.112597][T10591] netlink: 'syz.2.1814': attribute type 29 has an invalid length.
[  135.143410][T10577] chnl_net:caif_netlink_parms(): no params data found
[  135.166262][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.183264][T10598] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  135.187691][T10598] netlink: 'syz.1.1817': attribute type 2 has an invalid length.
[  135.253199][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.312417][T10616] netlink: 'syz.1.1824': attribute type 3 has an invalid length.
[  135.324142][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.333626][T10577] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.335903][T10577] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.338397][T10577] bridge_slave_0: entered allmulticast mode
[  135.342186][T10577] bridge_slave_0: entered promiscuous mode
[  135.352677][T10617] Bluetooth: MGMT ver 1.23
[  135.368183][T10577] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.381983][T10577] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.385756][T10577] bridge_slave_1: entered allmulticast mode
[  135.388516][T10577] bridge_slave_1: entered promiscuous mode
[  135.461209][T10577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.466499][T10577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.504891][T10577] team0: Port device team_slave_0 added
[  135.508061][T10577] team0: Port device team_slave_1 added
[  135.542351][   T13] bridge_slave_1: left allmulticast mode
[  135.544132][   T13] bridge_slave_1: left promiscuous mode
[  135.546050][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.550705][   T13] bridge_slave_0: left allmulticast mode
[  135.552632][   T13] bridge_slave_0: left promiscuous mode
[  135.554496][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.776695][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  135.781142][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  135.784714][   T13] bond0 (unregistering): Released all slaves
[  135.813468][T10577] batman_adv: batadv0: Adding interface: batadv_slave_0
[  135.815793][T10577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.824790][T10577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  135.834924][T10577] batman_adv: batadv0: Adding interface: batadv_slave_1
[  135.837252][T10577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.850889][T10577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  135.927225][T10577] hsr_slave_0: entered promiscuous mode
[  135.930233][T10577] hsr_slave_1: entered promiscuous mode
[  135.932498][T10577] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  135.935089][T10577] Cannot create hsr debugfs directory
[  135.969863][T10629] nbd1: detected capacity change from 0 to 63
[  135.973169][   T57] block nbd1: Receive control failed (result -32)
[  135.982792][ T7793] block nbd1: Dead connection, failed to find a fallback
[  135.989176][ T7793] block nbd1: shutting down sockets
[  135.991738][ T7793] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  135.997261][ T7793] Buffer I/O error on dev nbd1, logical block 0, async page read
[  136.007104][ T7793] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  136.013528][ T7793] Buffer I/O error on dev nbd1, logical block 1, async page read
[  136.029171][ T7793] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  136.032106][ T7793] Buffer I/O error on dev nbd1, logical block 2, async page read
[  136.034702][ T7793] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  136.037619][ T7793] Buffer I/O error on dev nbd1, logical block 3, async page read
[  136.062842][ T7793] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  136.068766][ T7793] Buffer I/O error on dev nbd1, logical block 0, async page read
[  136.079483][ T7793] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  136.088921][ T7793] Buffer I/O error on dev nbd1, logical block 1, async page read
[  136.094800][ T7793] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  136.105777][ T7793] Buffer I/O error on dev nbd1, logical block 2, async page read
[  136.114074][ T7793] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  136.129178][ T7793] Buffer I/O error on dev nbd1, logical block 3, async page read
[  136.132260][ T7793] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  136.135064][ T7793] Buffer I/O error on dev nbd1, logical block 0, async page read
[  136.137499][ T7793] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  136.163670][ T7793] Buffer I/O error on dev nbd1, logical block 1, async page read
[  136.168110][ T7793] ldm_validate_partition_table(): Disk read failed.
[  136.175516][ T7793] Dev nbd1: unable to read RDB block 0
[  136.178097][ T7793]  nbd1: unable to read partition table
[  136.186750][ T7793] ldm_validate_partition_table(): Disk read failed.
[  136.190136][ T7793] Dev nbd1: unable to read RDB block 0
[  136.192271][   T13] hsr_slave_0: left promiscuous mode
[  136.192716][ T7793]  nbd1: unable to read partition table
[  136.195937][   T13] hsr_slave_1: left promiscuous mode
[  136.202627][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  136.204907][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  136.210945][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  136.213491][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  136.222361][   T13] veth1_macvtap: left promiscuous mode
[  136.224199][   T13] veth0_macvtap: left promiscuous mode
[  136.226065][   T13] veth1_vlan: left promiscuous mode
[  136.227794][   T13] veth0_vlan: left promiscuous mode
[  136.499863][   T13] team0 (unregistering): Port device team_slave_1 removed
[  136.520231][   T13] team0 (unregistering): Port device team_slave_0 removed
[  136.738106][T10639] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  136.793103][T10645] __nla_validate_parse: 2 callbacks suppressed
[  136.793113][T10645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1836'.
[  137.039113][   T55] Bluetooth: hci0: command tx timeout
[  137.060954][T10668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1842'.
[  137.075713][T10668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1842'.
[  137.077579][T10577] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  137.097494][T10668] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1842'.
[  137.102128][T10577] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  137.116547][T10577] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  137.131490][T10577] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  137.192034][T10577] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.200932][T10577] 8021q: adding VLAN 0 to HW filter on device team0
[  137.206194][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.208506][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  137.216092][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.218502][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  137.344197][T10577] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.366866][T10577] veth0_vlan: entered promiscuous mode
[  137.373411][T10577] veth1_vlan: entered promiscuous mode
[  137.388796][T10577] veth0_macvtap: entered promiscuous mode
[  137.392678][T10577] veth1_macvtap: entered promiscuous mode
[  137.401675][T10577] batman_adv: batadv0: Interface activated: batadv_slave_0
[  137.407740][T10577] batman_adv: batadv0: Interface activated: batadv_slave_1
[  137.412788][T10577] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  137.415678][T10577] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  137.418507][T10577] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  137.422051][T10577] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.463140][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.467200][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.483096][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.485527][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.847348][T10705] bond0: (slave wlan1): Releasing backup interface
[  137.851380][T10705] bond3: left allmulticast mode
[  137.853408][T10705] bond3: left promiscuous mode
[  137.855231][T10705] bridge0: port 1(bond3) entered disabled state
[  137.860157][T10705] hsr1: left allmulticast mode
[  137.861763][T10705] dummy0: left allmulticast mode
[  137.863483][T10705] team0: left allmulticast mode
[  137.865087][T10705] hsr1: left promiscuous mode
[  137.866761][T10705] bridge0: port 2(hsr1) entered disabled state
[  137.871640][ T5296] srz1: Port: 1 Link DOWN
[  138.043826][T10709] nbd: nbd1 already in use
[  138.046073][T10709] block nbd1: NBD_DISCONNECT
[  138.047656][T10709] block nbd1: Send disconnect failed -32
[  138.149502][T10715] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.152323][T10715] syzkaller0: entered promiscuous mode
[  138.154296][T10715] syzkaller0: entered allmulticast mode
[  138.170058][T10715] tipc: Resetting bearer <eth:syzkaller0>
[  138.174877][T10714] tipc: Resetting bearer <eth:syzkaller0>
[  138.183164][T10714] tipc: Disabling bearer <eth:syzkaller0>
[  138.393968][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1862'.
[  138.460571][T10737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1865'.
[  138.463462][T10737] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1865'.
[  138.777783][T10745] netlink: 'syz.2.1868': attribute type 7 has an invalid length.
[  139.158377][T10757] netlink: 'syz.2.1874': attribute type 1 has an invalid length.
[  139.386204][T10763] 8021q: adding VLAN 0 to HW filter on device bond2
[  139.389327][T10763] bond0: (slave bond2): Enslaving as an active interface with an up link
[  139.771573][ T5854] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.287778][T10780] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1883'.
[  141.288481][T10784] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1884'.
[  141.382777][T10788] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1886'.
[  141.442988][ T5218] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  141.446050][ T5218] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  141.451594][ T5218] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  141.455658][ T5218] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  141.459637][ T5218] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  141.574517][T10795] chnl_net:caif_netlink_parms(): no params data found
[  141.646748][T10795] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.651360][T10795] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.654187][T10795] bridge_slave_0: entered allmulticast mode
[  141.657301][T10795] bridge_slave_0: entered promiscuous mode
[  141.663074][T10795] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.665948][T10795] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.668749][T10795] bridge_slave_1: entered allmulticast mode
[  141.673774][T10795] bridge_slave_1: entered promiscuous mode
[  141.699944][T10795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  141.706484][T10795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  141.748571][T10795] team0: Port device team_slave_0 added
[  141.767754][ T5854] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.782027][T10795] team0: Port device team_slave_1 added
[  141.802723][T10795] batman_adv: batadv0: Adding interface: batadv_slave_0
[  141.804907][T10829] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1902'.
[  141.805615][T10795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.816779][T10795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  141.823828][T10795] batman_adv: batadv0: Adding interface: batadv_slave_1
[  141.826605][T10795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.840882][T10795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  141.856468][ T5854] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.906261][T10795] hsr_slave_0: entered promiscuous mode
[  141.910823][T10795] hsr_slave_1: entered promiscuous mode
[  141.912959][T10795] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  141.915531][T10795] Cannot create hsr debugfs directory
[  141.935181][ T5854] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.044132][ T5854] bridge_slave_1: left allmulticast mode
[  142.046073][ T5854] bridge_slave_1: left promiscuous mode
[  142.047982][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.054783][ T5854] bridge_slave_0: left allmulticast mode
[  142.056670][ T5854] bridge_slave_0: left promiscuous mode
[  142.058571][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.257089][ T5854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  142.262948][ T5854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  142.266353][ T5854] bond0 (unregistering): Released all slaves
[  142.526860][ T5854] hsr_slave_0: left promiscuous mode
[  142.533353][ T5854] hsr_slave_1: left promiscuous mode
[  142.536082][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  142.538579][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_0
[  142.542299][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  142.546061][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_1
[  142.556797][ T5854] veth1_macvtap: left promiscuous mode
[  142.559939][ T5854] veth0_macvtap: left promiscuous mode
[  142.561982][ T5854] veth1_vlan: left promiscuous mode
[  142.564631][ T5854] veth0_vlan: left promiscuous mode
[  142.644639][T10864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1913'.
[  142.738064][T10868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1915'.
[  143.519216][   T55] Bluetooth: hci0: command tx timeout
[  143.758842][ T5854] team0 (unregistering): Port device team_slave_1 removed
[  143.792594][ T5854] team0 (unregistering): Port device team_slave_0 removed
[  144.091866][T10795] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  144.102350][T10883] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1921'.
[  144.105283][T10883] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1921'.
[  144.124254][T10795] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  144.641911][ T5218] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  144.645577][ T5218] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  144.648705][ T5218] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  144.656447][ T5218] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  144.661058][ T5218] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  144.740938][ T5854] bridge_slave_1: left allmulticast mode
[  144.742988][ T5854] bridge_slave_1: left promiscuous mode
[  144.744960][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.749666][ T5854] bridge_slave_0: left allmulticast mode
[  144.751621][ T5854] bridge_slave_0: left promiscuous mode
[  144.753644][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.812914][ T5854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  144.817062][ T5854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  144.820965][ T5854] bond0 (unregistering): Released all slaves
[  144.907214][ T5854] hsr_slave_0: left promiscuous mode
[  144.912840][ T5854] hsr_slave_1: left promiscuous mode
[  144.915064][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.918642][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_1
[  145.015990][ T5854] team0 (unregistering): Port device team_slave_1 removed
[  145.034059][ T5854] team0 (unregistering): Port device team_slave_0 removed
[  145.166388][T10918] chnl_net:caif_netlink_parms(): no params data found
[  145.233895][T10918] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.236154][T10918] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.238445][T10918] bridge_slave_0: entered allmulticast mode
[  145.242577][T10918] bridge_slave_0: entered promiscuous mode
[  145.245974][T10918] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.248387][T10918] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.257122][T10918] bridge_slave_1: entered allmulticast mode
[  145.264192][T10918] bridge_slave_1: entered promiscuous mode
[  145.299542][T10918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  145.303793][T10918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  145.329574][T10918] team0: Port device team_slave_0 added
[  145.335254][T10918] team0: Port device team_slave_1 added
[  145.356076][T10918] batman_adv: batadv0: Adding interface: batadv_slave_0
[  145.358273][T10918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.366866][T10918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  145.372307][T10918] batman_adv: batadv0: Adding interface: batadv_slave_1
[  145.374561][T10918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.382894][T10918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  145.416971][T10918] hsr_slave_0: entered promiscuous mode
[  145.419762][T10918] hsr_slave_1: entered promiscuous mode
[  145.421848][T10918] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  145.424132][T10918] Cannot create hsr debugfs directory
[  145.524802][T10918] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  145.532358][T10918] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  145.539747][T10918] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  145.544232][T10918] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  145.574997][T10918] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.577292][T10918] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.580039][T10918] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.582449][T10918] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.617872][T10918] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.628178][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.632130][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.641907][T10918] 8021q: adding VLAN 0 to HW filter on device team0
[  145.650017][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.652271][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.670511][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.672860][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.823450][T10918] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.852859][T10918] veth0_vlan: entered promiscuous mode
[  145.857642][T10918] veth1_vlan: entered promiscuous mode
[  145.873202][T10918] veth0_macvtap: entered promiscuous mode
[  145.877371][T10918] veth1_macvtap: entered promiscuous mode
[  145.890304][T10918] batman_adv: batadv0: Interface activated: batadv_slave_0
[  145.896746][T10918] batman_adv: batadv0: Interface activated: batadv_slave_1
[  145.907990][T10918] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.911191][T10918] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.913896][T10918] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.916662][T10918] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.964206][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.966734][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.990082][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.992844][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.093157][T11001] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1943'.
[  146.096037][T11001] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1943'.
[  146.098934][T11001] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  146.146214][T11007] nbd: must specify at least one socket
[  146.446163][T11031] mac80211_hwsim hwsim43 wlan1: entered allmulticast mode
[  146.469266][T11031] bridge_slave_0: left allmulticast mode
[  146.471975][T11031] bridge_slave_0: left promiscuous mode
[  146.473952][T11031] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.480229][T11031] bridge_slave_1: left allmulticast mode
[  146.482139][T11031] bridge_slave_1: left promiscuous mode
[  146.484096][T11031] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.493748][T11031] bond0: (slave bond_slave_0): Releasing backup interface
[  146.503531][T11031] bond0: (slave bond_slave_1): Releasing backup interface
[  146.511479][T11036] netlink: 'syz.3.1951': attribute type 10 has an invalid length.
[  146.524369][T11031] team0: Port device team_slave_0 removed
[  146.533587][T11031] team0: Port device team_slave_1 removed
[  146.535821][T11031] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  146.538480][T11031] batman_adv: batadv0: Removing interface: batadv_slave_0
[  146.542437][T11031] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  146.544877][T11031] batman_adv: batadv0: Removing interface: batadv_slave_1
[  146.555372][T11036] mac80211_hwsim hwsim43 wlan1: left allmulticast mode
[  146.561229][T11036] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.565284][T11036] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  146.591790][T11039] xt_hashlimit: overflow, try lower: 18446744073709551615/7
[  146.722500][   T55] Bluetooth: hci0: command tx timeout
[  147.116467][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1974'.
[  147.151655][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1975'.
[  147.159574][T11095] netlink: 'syz.3.1975': attribute type 29 has an invalid length.
[  147.163800][T11095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1975'.
[  147.229836][T11101] macsec1: entered allmulticast mode
[  147.231838][T11101] macsec0: entered allmulticast mode
[  147.387715][T11115] netlink: 'syz.2.1985': attribute type 14 has an invalid length.
[  147.422289][T11117] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1986'.
[  147.534442][T11134] netlink: 'syz.3.1994': attribute type 11 has an invalid length.
[  147.543030][T11132] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1993'.
[  147.632902][T11145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1998'.
[  147.695424][   T33] audit: type=1800 audit(1752390252.310:2): pid=11153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1998" name="memory.events" dev="tmpfs" ino=165 res=0 errno=0
[  147.707312][T11156] netlink: 'syz.1.2002': attribute type 4 has an invalid length.
[  147.713067][T11156] netlink: 'syz.1.2002': attribute type 4 has an invalid length.
[  147.865880][T11166] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2007'.
[  147.925155][T11171] netlink: 'syz.2.2009': attribute type 1 has an invalid length.
[  148.531769][T11199] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2019'.
[  148.574286][T11201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2020'.
[  148.577325][T11201] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2020'.
[  148.619745][T11203] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input4
[  148.799240][   T55] Bluetooth: hci0: command tx timeout
[  148.925857][T11228] netlink: 'syz.3.2033': attribute type 1 has an invalid length.
[  148.928434][T11228] netlink: 'syz.3.2033': attribute type 2 has an invalid length.
[  148.943770][T11230] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.022896][T11238] netlink: 'syz.1.2037': attribute type 21 has an invalid length.
[  149.061190][T11242] Bluetooth: MGMT ver 1.23
[  149.681823][T11318] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  149.685241][T11318] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  149.730847][T11326] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.803391][T11333] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  149.805963][T11333] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  150.143674][T11370] syz.1.2098: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  150.153328][T11370] CPU: 0 UID: 0 PID: 11370 Comm: syz.1.2098 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  150.153341][T11370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  150.153347][T11370] Call Trace:
[  150.153351][T11370]  <TASK>
[  150.153354][T11370]  dump_stack_lvl+0x189/0x250
[  150.153393][T11370]  ? __pfx_dump_stack_lvl+0x10/0x10
[  150.153405][T11370]  ? __pfx__printk+0x10/0x10
[  150.153417][T11370]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  150.153434][T11370]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  150.153444][T11370]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  150.153455][T11370]  warn_alloc+0x214/0x310
[  150.153467][T11370]  ? stack_depot_save_flags+0x40/0x900
[  150.153480][T11370]  ? __pfx_warn_alloc+0x10/0x10
[  150.153491][T11370]  ? kasan_save_track+0x4f/0x80
[  150.153499][T11370]  ? xskq_create+0x56/0x170
[  150.153510][T11370]  ? xsk_init_queue+0xb0/0x110
[  150.153519][T11370]  ? xsk_setsockopt+0x43f/0x710
[  150.153529][T11370]  ? do_sock_setsockopt+0x25a/0x3e0
[  150.153538][T11370]  ? __x64_sys_setsockopt+0x18b/0x220
[  150.153545][T11370]  ? do_syscall_64+0xfa/0x3b0
[  150.153552][T11370]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.153562][T11370]  __vmalloc_node_range_noprof+0x125/0x12f0
[  150.153584][T11370]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  150.153596][T11370]  ? __kasan_kmalloc+0x93/0xb0
[  150.153607][T11370]  vmalloc_user_noprof+0xad/0xf0
[  150.153617][T11370]  ? xskq_create+0xbf/0x170
[  150.153628][T11370]  xskq_create+0xbf/0x170
[  150.153639][T11370]  xsk_init_queue+0xb0/0x110
[  150.153651][T11370]  xsk_setsockopt+0x43f/0x710
[  150.153662][T11370]  ? __pfx_xsk_setsockopt+0x10/0x10
[  150.153671][T11370]  ? __lock_acquire+0xab9/0xd20
[  150.153683][T11370]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  150.153694][T11370]  ? __pfx_xsk_setsockopt+0x10/0x10
[  150.153704][T11370]  do_sock_setsockopt+0x25a/0x3e0
[  150.153714][T11370]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  150.153725][T11370]  ? __fget_files+0x2a/0x420
[  150.153739][T11370]  __x64_sys_setsockopt+0x18b/0x220
[  150.153750][T11370]  do_syscall_64+0xfa/0x3b0
[  150.153756][T11370]  ? lockdep_hardirqs_on+0x9c/0x150
[  150.153785][T11370]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.153793][T11370]  ? exc_page_fault+0x9f/0xf0
[  150.153804][T11370]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.153811][T11370] RIP: 0033:0x7f94b3f8e929
[  150.153819][T11370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  150.153826][T11370] RSP: 002b:00007f94b4d1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  150.153835][T11370] RAX: ffffffffffffffda RBX: 00007f94b41b5fa0 RCX: 00007f94b3f8e929
[  150.153841][T11370] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  150.153846][T11370] RBP: 00007f94b4010b39 R08: 0000000000000004 R09: 0000000000000000
[  150.153851][T11370] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  150.153856][T11370] R13: 0000000000000000 R14: 00007f94b41b5fa0 R15: 00007ffe6722ab08
[  150.153868][T11370]  </TASK>
[  150.154035][T11370] Mem-Info:
[  150.259606][T11370] active_anon:5903 inactive_anon:0 isolated_anon:0
[  150.259606][T11370]  active_file:1218 inactive_file:38285 isolated_file:0
[  150.259606][T11370]  unevictable:1778 dirty:327 writeback:0
[  150.259606][T11370]  slab_reclaimable:9609 slab_unreclaimable:100952
[  150.259606][T11370]  mapped:18437 shmem:2595 pagetables:1181
[  150.259606][T11370]  sec_pagetables:0 bounce:0
[  150.259606][T11370]  kernel_misc_reclaimable:0
[  150.259606][T11370]  free:251661 free_pcp:15779 free_cma:0
[  150.273759][T11370] Node 0 active_anon:12364kB inactive_anon:0kB active_file:2800kB inactive_file:94960kB unevictable:3576kB isolated(anon):0kB isolated(file):0kB mapped:45168kB dirty:652kB writeback:0kB shmem:4968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5104kB pagetables:2276kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  150.284850][T11370] Node 1 active_anon:11248kB inactive_anon:0kB active_file:2072kB inactive_file:58180kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28648kB dirty:656kB writeback:0kB shmem:5412kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7288kB pagetables:2244kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  150.296308][T11370] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  150.305645][T11370] lowmem_reserve[]: 0 812 812 812 812
[  150.307473][T11370] Node 0 DMA32 free:209704kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12364kB inactive_anon:0kB active_file:2800kB inactive_file:94960kB unevictable:3576kB writepending:652kB present:1556484kB managed:831872kB mlocked:40kB bounce:0kB free_pcp:26328kB local_pcp:6352kB free_cma:0kB
[  150.318909][T11370] lowmem_reserve[]: 0 0 0 0 0
[  150.322547][T11370] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  150.331922][T11370] lowmem_reserve[]: 0 0 854 854 854
[  150.333758][T11370] Node 1 Normal free:323088kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11316kB inactive_anon:0kB active_file:2072kB inactive_file:58180kB unevictable:3536kB writepending:656kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:37304kB local_pcp:18460kB free_cma:0kB
[  150.344111][T11370] lowmem_reserve[]: 0 0 0 0 0
[  150.354710][T11370] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  150.361360][T11370] Node 0 DMA32: 598*4kB (UME) 394*8kB (UME) 224*16kB (UME) 132*32kB (UME) 66*64kB (UME) 155*128kB (UM) 71*256kB (UME) 21*512kB (UE) 10*1024kB (UM) 7*2048kB (UME) 29*4096kB (UM) = 209704kB
[  150.367325][T11370] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  150.372707][T11370] Node 1 Normal: 2*4kB (ME) 559*8kB (UME) 541*16kB (UE) 82*32kB (UE) 277*64kB (UME) 78*128kB (UME) 30*256kB (UM) 11*512kB (UM) 6*1024kB (UME) 1*2048kB (M) 63*4096kB (UM) = 323024kB
[  150.398874][T11370] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  150.402699][T11370] Node 1 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB
[  150.405953][T11370] 42098 total pagecache pages
[  150.407546][T11370] 0 pages in swap cache
[  150.408932][T11370] Free swap  = 124996kB
[  150.416888][T11370] Total swap = 124996kB
[  150.421284][T11370] 786301 pages RAM
[  150.422722][T11370] 0 pages HighMem/MovableOnly
[  150.424438][T11370] 241085 pages reserved
[  150.425914][T11370] 0 pages cma reserved
[  150.978644][T11376] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  151.092670][T11442] erspan0: entered promiscuous mode
[  151.094895][T11442] gretap0: entered promiscuous mode
[  151.101999][T11442] erspan0: left promiscuous mode
[  151.106463][T11442] gretap0: left promiscuous mode
[  151.464338][T11485] bond0: (slave wlan1): Releasing backup interface
[  151.468166][T11485] bond0: Destroying bond
[  151.563898][T11485] bond0 (unregistering): Released all slaves
[  151.842998][T11516] lo: entered allmulticast mode
[  151.844784][T11516] lo: left allmulticast mode
[  151.995622][T11526] infiniband syz2: set down
[  151.998030][T11526] infiniband syz2: added bond_slave_1
[  152.020591][T11526] RDS/IB: syz2: added
[  152.022969][T11526] smc: adding ib device syz2 with port count 1
[  152.025085][T11526] smc:    ib device syz2 port 1 has pnetid 
[  152.815758][T11564] tipc: Started in network mode
[  152.817418][T11564] tipc: Node identity ac14142a, cluster identity 4711
[  152.824067][T11564] tipc: Enabled bearer <udp:syz2>, priority 10
[  152.850897][T11569] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  152.853694][T11569] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  152.856661][T11569] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  152.860045][T11569] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  152.862276][T11568] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  152.873249][T11569] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  152.878661][T11569] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  152.893680][T11569] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  152.898337][T11569] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  152.986116][T11581] validate_nla: 8 callbacks suppressed
[  152.986125][T11581] netlink: 'syz.1.2195': attribute type 5 has an invalid length.
[  153.040798][   T55] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  153.187929][T11606] syz_tun: entered allmulticast mode
[  153.195769][T11606] dvmrp8: entered allmulticast mode
[  153.210343][T11605] syz_tun: left allmulticast mode
[  153.343432][T11626] !: renamed from dummy0 (while UP)
[  153.720910][   T33] audit: type=1800 audit(1752390258.330:3): pid=11657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2218" name="memory.events" dev="tmpfs" ino=3365 res=0 errno=0
[  153.940166][   T10] tipc: Node number set to 2886997034
[  153.989862][T11678] ip6t_REJECT: ECHOREPLY is not supported
[  154.066173][T11687] __nla_validate_parse: 14 callbacks suppressed
[  154.066185][T11687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2229'.
[  154.779189][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  154.946683][ T1116] block nbd0: Possible stuck request ffff8880209c0000: control (read@0,1024B). Runtime 90 seconds
[  154.950130][ T1116] block nbd0: Possible stuck request ffff8880209c0200: control (read@1024,1024B). Runtime 90 seconds
[  154.953690][ T1116] block nbd0: Possible stuck request ffff8880209c0400: control (read@2048,1024B). Runtime 90 seconds
[  154.957281][ T1116] block nbd0: Possible stuck request ffff8880209c0600: control (read@3072,1024B). Runtime 90 seconds
[  155.026414][T11747] netlink: 'syz.2.2255': attribute type 1 has an invalid length.
[  155.028971][T11747] netlink: 'syz.2.2255': attribute type 1 has an invalid length.
[  155.109282][   T33] audit: type=1800 audit(1752390259.720:4): pid=11749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2256" name="memory.events" dev="tmpfs" ino=5270 res=0 errno=0
[  155.361579][T11770] sctp: [Deprecated]: syz.2.2266 (pid 11770) Use of int in max_burst socket option.
[  155.361579][T11770] Use struct sctp_assoc_value instead
[  155.831003][T11803] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2282'.
[  156.338280][T11846] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2292'.
[  156.463624][T11858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2297'.
[  156.508590][T11863] xt_l2tp: invalid flags combination: c
[  156.746639][T11891] netlink: 'syz.1.2308': attribute type 21 has an invalid length.
[  156.753382][T11891] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2308'.
[  157.483715][T11882] batadv_slave_0: entered promiscuous mode
[  157.485848][T11891] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2308'.
[  157.661931][T11912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2315'.
[  157.665918][T11912] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2315'.
[  157.702033][T11917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2317'.
[  157.704949][T11917] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2317'.
[  157.778046][T11924] xt_TPROXY: Can be used only with -p tcp or -p udp
[  158.146601][T11972] netlink: 'syz.2.2341': attribute type 1 has an invalid length.
[  158.226468][T11982] IPVS: length: 8 != 446622349272
[  159.277869][T12023] __nla_validate_parse: 1 callbacks suppressed
[  159.277878][T12023] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2364'.
[  159.374643][T12033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2369'.
[  159.400402][T12036] syz_tun: entered allmulticast mode
[  159.404366][T12035] syz_tun: left allmulticast mode
[  159.467417][T12044] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2373'.
[  159.471407][T12044] 0: renamed from hsr0
[  159.474827][T12044] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  159.487127][T12044] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  159.492357][T12044] 0: entered allmulticast mode
[  159.494441][T12044] hsr_slave_0: entered allmulticast mode
[  159.496176][T12044] hsr_slave_1: entered allmulticast mode
[  159.498816][T12044] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  159.543717][T12052] xt_bpf: check failed: parse error
[  159.630475][T12060] netlink: 'syz.2.2382': attribute type 1 has an invalid length.
[  159.633029][T12060] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2382'.
[  159.635896][T12060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2382'.
[  159.662550][T12063] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2383'.
[  159.708631][T12007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  159.950513][T12095] netlink: 'syz.3.2396': attribute type 1 has an invalid length.
[  160.164593][T12115] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2402'.
[  160.331664][T12127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2407'.
[  160.353192][T12131] netlink: 'syz.2.2409': attribute type 64 has an invalid length.
[  160.370150][T12131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2409'.
[  160.385479][T12134] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  160.460839][T12137] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2412'.
[  161.014003][T12183] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  161.514982][T12210] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  161.721301][T12221] C: renamed from team_slave_0
[  161.750544][T12221] netlink: 'syz.1.2450': attribute type 1 has an invalid length.
[  161.753206][T12221] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  162.041907][T12131] Set syz1 is full, maxelem 65536 reached
[  162.755735][T12286] ieee802154 phy0 wpan0: encryption failed: -22
[  162.970589][T12302] lo speed is unknown, defaulting to 1000
[  162.973730][T12302] lo speed is unknown, defaulting to 1000
[  162.975916][T12302] lo speed is unknown, defaulting to 1000
[  162.987355][T12304] netlink: 'syz.3.2488': attribute type 83 has an invalid length.
[  163.042166][T12310] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  163.073804][T12302] infiniband syz0: set down
[  163.076613][T12302] infiniband syz0: added lo
[  163.078245][ T9824] lo speed is unknown, defaulting to 1000
[  163.100663][T12302] RDS/IB: syz0: added
[  163.102009][T12302] smc: adding ib device syz0 with port count 1
[  163.104051][T12302] smc:    ib device syz0 port 1 has pnetid 
[  163.105954][   T10] lo speed is unknown, defaulting to 1000
[  163.109811][T12302] lo speed is unknown, defaulting to 1000
[  163.232481][T12302] lo speed is unknown, defaulting to 1000
[  163.383783][T12302] lo speed is unknown, defaulting to 1000
[  163.501713][T12302] lo speed is unknown, defaulting to 1000
[  164.003672][T12399] netlink: 'syz.2.2529': attribute type 5 has an invalid length.
[  164.008398][T12398] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  164.012840][T12398] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  164.020273][T12398] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  164.028059][T12398] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  164.030892][T12398] geneve3: entered promiscuous mode
[  164.305025][T12429] syzkaller0: entered promiscuous mode
[  164.307370][T12429] syzkaller0: entered allmulticast mode
[  164.347538][T12441] netlink: 'syz.2.2550': attribute type 15 has an invalid length.
[  164.454428][T12448] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  164.865128][T12472] __nla_validate_parse: 19 callbacks suppressed
[  164.865138][T12472] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2561'.
[  165.365406][T12474] netlink: 'syz.1.2562': attribute type 29 has an invalid length.
[  165.368673][T12474] netlink: 'syz.1.2562': attribute type 29 has an invalid length.
[  165.373952][T12474] netlink: 488 bytes leftover after parsing attributes in process `syz.1.2562'.
[  165.426182][T12478] SET target dimension over the limit!
[  165.619760][T12508] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2578'.
[  165.627533][T12510] x_tables: ip6_tables: mh match: only valid for protocol 135
[  165.656192][T12514] delete_channel: no stack
[  165.657040][ T1092] 
[  165.658982][ T1092] ======================================================
[  165.661146][ T1092] WARNING: possible circular locking dependency detected
[  165.663317][ T1092] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  165.666311][ T1092] ------------------------------------------------------
[  165.668467][ T1092] kworker/u10:7/1092 is trying to acquire lock:
[  165.670375][ T1092] ffff888111bec358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0
[  165.673143][ T1092] 
[  165.673143][ T1092] but task is already holding lock:
[  165.675448][ T1092] ffff888035445188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  165.678644][ T1092] 
[  165.678644][ T1092] which lock already depends on the new lock.
[  165.678644][ T1092] 
[  165.681816][ T1092] 
[  165.681816][ T1092] the existing dependency chain (in reverse order) is:
[  165.684686][ T1092] 
[  165.684686][ T1092] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  165.687414][ T1092]        lock_acquire+0x120/0x360
[  165.689011][ T1092]        down_write+0x96/0x1f0
[  165.690613][ T1092]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  165.692539][ T1092]        nbd_start_device+0x16c/0xac0
[  165.694203][ T1092]        nbd_genl_connect+0x1250/0x1930
[  165.695911][ T1092]        genl_family_rcv_msg_doit+0x215/0x300
[  165.697851][ T1092]        genl_rcv_msg+0x60e/0x790
[  165.699383][ T1092]        netlink_rcv_skb+0x208/0x470
[  165.701078][ T1092]        genl_rcv+0x28/0x40
[  165.702563][ T1092]        netlink_unicast+0x75c/0x8e0
[  165.704240][ T1092]        netlink_sendmsg+0x805/0xb30
[  165.705854][ T1092]        __sock_sendmsg+0x21c/0x270
[  165.707469][ T1092]        ____sys_sendmsg+0x505/0x830
[  165.709084][ T1092]        ___sys_sendmsg+0x21f/0x2a0
[  165.710684][ T1092]        __x64_sys_sendmsg+0x19b/0x260
[  165.712357][ T1092]        do_syscall_64+0xfa/0x3b0
[  165.713922][ T1092]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.715931][ T1092] 
[  165.715931][ T1092] -> #1 (&nbd->config_lock){+.+.}-{4:4}:
[  165.718392][ T1092]        lock_acquire+0x120/0x360
[  165.720010][ T1092]        __mutex_lock+0x182/0xe80
[  165.721630][ T1092]        refcount_dec_and_mutex_lock+0x30/0xa0
[  165.723596][ T1092]        nbd_config_put+0x2c/0x790
[  165.725249][ T1092]        nbd_release+0xfe/0x140
[  165.726854][ T1092]        bdev_release+0x536/0x650
[  165.728504][ T1092]        blkdev_release+0x15/0x20
[  165.730136][ T1092]        __fput+0x44c/0xa70
[  165.731633][ T1092]        fput_close_sync+0x119/0x200
[  165.733366][ T1092]        __x64_sys_close+0x7f/0x110
[  165.735052][ T1092]        do_syscall_64+0xfa/0x3b0
[  165.736712][ T1092]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.738794][ T1092] 
[  165.738794][ T1092] -> #0 (&disk->open_mutex){+.+.}-{4:4}:
[  165.741307][ T1092]        validate_chain+0xb9b/0x2140
[  165.743018][ T1092]        __lock_acquire+0xab9/0xd20
[  165.744706][ T1092]        lock_acquire+0x120/0x360
[  165.746334][ T1092]        __mutex_lock+0x182/0xe80
[  165.747964][ T1092]        __del_gendisk+0x129/0x9e0
[  165.749596][ T1092]        del_gendisk+0xe8/0x160
[  165.751116][ T1092]        nbd_dev_remove_work+0x47/0xe0
[  165.752807][ T1092]        process_scheduled_works+0xae1/0x17b0
[  165.754723][ T1092]        worker_thread+0x8a0/0xda0
[  165.756373][ T1092]        kthread+0x711/0x8a0
[  165.757823][ T1092]        ret_from_fork+0x3fc/0x770
[  165.759448][ T1092]        ret_from_fork_asm+0x1a/0x30
[  165.761151][ T1092] 
[  165.761151][ T1092] other info that might help us debug this:
[  165.761151][ T1092] 
[  165.764346][ T1092] Chain exists of:
[  165.764346][ T1092]   &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock
[  165.764346][ T1092] 
[  165.768730][ T1092]  Possible unsafe locking scenario:
[  165.768730][ T1092] 
[  165.771107][ T1092]        CPU0                    CPU1
[  165.772850][ T1092]        ----                    ----
[  165.774585][ T1092]   rlock(&set->update_nr_hwq_lock);
[  165.776314][ T1092]                                lock(&nbd->config_lock);
[  165.778603][ T1092]                                lock(&set->update_nr_hwq_lock);
[  165.781079][ T1092]   lock(&disk->open_mutex);
[  165.782597][ T1092] 
[  165.782597][ T1092]  *** DEADLOCK ***
[  165.782597][ T1092] 
[  165.785190][ T1092] 3 locks held by kworker/u10:7/1092:
[  165.786964][ T1092]  #0: ffff8881082bd148 ((wq_completion)nbd-del){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  165.790447][ T1092]  #1: ffffc90006f87bc0 ((work_completion)(&nbd->remove_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  165.794253][ T1092]  #2: ffff888035445188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  165.797473][ T1092] 
[  165.797473][ T1092] stack backtrace:
[  165.799341][ T1092] CPU: 1 UID: 0 PID: 1092 Comm: kworker/u10:7 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  165.799352][ T1092] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  165.799358][ T1092] Workqueue: nbd-del nbd_dev_remove_work
[  165.799368][ T1092] Call Trace:
[  165.799372][ T1092]  <TASK>
[  165.799376][ T1092]  dump_stack_lvl+0x189/0x250
[  165.799386][ T1092]  ? __pfx_dump_stack_lvl+0x10/0x10
[  165.799394][ T1092]  ? __pfx__printk+0x10/0x10
[  165.799404][ T1092]  ? print_lock_name+0xde/0x100
[  165.799413][ T1092]  print_circular_bug+0x2ee/0x310
[  165.799423][ T1092]  check_noncircular+0x134/0x160
[  165.799433][ T1092]  validate_chain+0xb9b/0x2140
[  165.799442][ T1092]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  165.799453][ T1092]  ? arch_stack_walk+0x11c/0x150
[  165.799463][ T1092]  __lock_acquire+0xab9/0xd20
[  165.799471][ T1092]  ? __del_gendisk+0x129/0x9e0
[  165.799478][ T1092]  lock_acquire+0x120/0x360
[  165.799485][ T1092]  ? __del_gendisk+0x129/0x9e0
[  165.799492][ T1092]  ? check_path+0x21/0x40
[  165.799501][ T1092]  __mutex_lock+0x182/0xe80
[  165.799508][ T1092]  ? __del_gendisk+0x129/0x9e0
[  165.799516][ T1092]  ? __del_gendisk+0x129/0x9e0
[  165.799523][ T1092]  ? __pfx___mutex_lock+0x10/0x10
[  165.799530][ T1092]  ? __pfx___might_resched+0x10/0x10
[  165.799539][ T1092]  ? __lock_acquire+0xab9/0xd20
[  165.799545][ T1092]  ? disk_del_events+0xb5/0x210
[  165.799553][ T1092]  ? __del_gendisk+0xc1/0x9e0
[  165.799560][ T1092]  __del_gendisk+0x129/0x9e0
[  165.799567][ T1092]  ? del_gendisk+0xe0/0x160
[  165.799574][ T1092]  ? __pfx___del_gendisk+0x10/0x10
[  165.799582][ T1092]  ? down_read+0x1ad/0x2e0
[  165.799589][ T1092]  del_gendisk+0xe8/0x160
[  165.799596][ T1092]  nbd_dev_remove_work+0x47/0xe0
[  165.799609][ T1092]  ? process_scheduled_works+0x9ef/0x17b0
[  165.799617][ T1092]  process_scheduled_works+0xae1/0x17b0
[  165.799628][ T1092]  ? __pfx_process_scheduled_works+0x10/0x10
[  165.799638][ T1092]  worker_thread+0x8a0/0xda0
[  165.799650][ T1092]  kthread+0x711/0x8a0
[  165.799660][ T1092]  ? __pfx_worker_thread+0x10/0x10
[  165.799668][ T1092]  ? __pfx_kthread+0x10/0x10
[  165.799677][ T1092]  ? _raw_spin_unlock_irq+0x23/0x50
[  165.799686][ T1092]  ? lockdep_hardirqs_on+0x9c/0x150
[  165.799696][ T1092]  ? __pfx_kthread+0x10/0x10
[  165.799705][ T1092]  ret_from_fork+0x3fc/0x770
[  165.799713][ T1092]  ? __pfx_ret_from_fork+0x10/0x10
[  165.799720][ T1092]  ? __switch_to_asm+0x39/0x70
[  165.799729][ T1092]  ? __switch_to_asm+0x33/0x70
[  165.799737][ T1092]  ? __pfx_kthread+0x10/0x10
[  165.799747][ T1092]  ret_from_fork_asm+0x1a/0x30
[  165.799757][ T1092]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  165.895818][T12517] set match dimension is over the limit!
[  166.184998][ T5878] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.243427][ T5878] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.283672][ T5878] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.324573][ T5878] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.426880][ T5878] dvmrp8 (unregistering): left allmulticast mode
[  166.437184][ T5878] bond0 (unregistering): Released all slaves
[  166.488401][ T5878] tipc: Disabling bearer <udp:syz2>
[  166.490982][ T5878] tipc: Left network mode
[  166.657877][ T5878] hsr_slave_0: left promiscuous mode
[  166.660445][ T5878] hsr_slave_1: left promiscuous mode
[  166.664247][ T5878] veth1_macvtap: left promiscuous mode
[  166.665966][ T5878] veth0_macvtap: left promiscuous mode
[  166.667748][ T5878] veth1_vlan: left promiscuous mode
[  166.670232][ T5878] veth0_vlan: left promiscuous mode

VM DIAGNOSIS:
07:04:30  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b4c210 RBX=ffff88804b03b1c0 RCX=ffff888021531cc0 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900075ef600 RSP=ffffc900075ef4a0
R8 =ffffc900075ef547 R9 =1ffff92000ebdea8 R10=dffffc0000000000 R11=fffff52000ebdea9
R12=1ffff11026cc7f5d R13=dffffc0000000000 R14=0000000000000001 R15=ffff88813663fae8
RIP=ffffffff81b4c1f9 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe2e014c6c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f94b417f2d8 CR3=00000001109f2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000074 RBX=0000000000000074 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90006f86e10
R8 =ffff888107f78237 R9 =1ffff11020fef046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98d2 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b31f1cff8 CR3=000000001f9fe000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=0000000000000051 000000006b610030
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffff0000ff00 XMM09=2d78742f73657565 75712f346e616c77
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
