last executing test programs:

28.227335289s ago: executing program 1 (id=868):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000), 0x4)

27.987621289s ago: executing program 1 (id=876):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0)

23.618933086s ago: executing program 1 (id=876):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0)

17.352174601s ago: executing program 1 (id=876):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0)

10.476797374s ago: executing program 1 (id=876):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0)

3.150569521s ago: executing program 1 (id=876):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0)

1.175377992s ago: executing program 0 (id=1284):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000100)={r0, r0, 0xfffe, 0x0, 0x0, 0xc2, 0x85, 0x15c2, 0x5886, 0x6, 0x0, 0x0, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})

1.095391803s ago: executing program 0 (id=1286):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_deladdr={0x34, 0x15, 0x1, 0xfffffffd, 0x0, {0x2, 0x18, 0x0, 0x0, r1}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}, @IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x34}}, 0x0)

1.0047946s ago: executing program 0 (id=1290):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)=r0}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38)

1.00441756s ago: executing program 0 (id=1291):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b0f, &(0x7f0000000040)={'wlan1\x00'})
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB, @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r4, 0x0, 0x8c4)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r7, 0x0, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0)
recvmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0x6c5621a684f1998c}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x15, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xfffffffffffffdac}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)

822.362384ms ago: executing program 2 (id=1294):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000001900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x485c)
recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000500)=""/3, 0x3}], 0x1}, 0x400}], 0x1, 0x2103, 0x0)

715.387738ms ago: executing program 2 (id=1295):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040}, 0x0)

629.075917ms ago: executing program 2 (id=1296):
r0 = socket(0xa, 0x3, 0x3a)
connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffff00000007, 0x25d4283d975b53f0}, 0xc)

564.90376ms ago: executing program 2 (id=1297):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="780200002400010026bd7000fedbdf25670200800c00010002"], 0x278}], 0x1}, 0x0)

134.479946ms ago: executing program 2 (id=1298):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

133.593531ms ago: executing program 0 (id=1299):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0)

51.436801ms ago: executing program 2 (id=1300):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000007bec5590fe2245bf90b093cc59a642e7f3face2b8b7ddd66d0dcbb4a0a8c1df8541f3d9ae95e3590e1f021c5c26f23074463ce36e19a2f4d882348687fd63747c0efa0cd544f5d480496d78f8d2610c37a0b118b95c5d337b9b051ee09cdc2d92206e9a41307f88264321913bf10ebee1f4d149024148ffefa017da57a8c0ab66aa56d5457a66fb0bd2b31246e29e11cc7df7d8c259ecb5259218e8d5f95116ded65821b52c233f18868fedd82a2e4725e193e5e883135ac8234193ef1964f9"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000440)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000005140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000c00020000000000000000001c0007800c00018008000100", @ANYRES32=r1], 0x3c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x2c, 0x19, 0xa428a332fa3ee95f, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c9, &(0x7f0000000100))

0s ago: executing program 0 (id=1301):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01422006020607f6"], 0xa)
bind$bt_hci(r0, &(0x7f00000019c0)={0x1f, 0x3, 0x2}, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4d0246c370db626d"}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4070}, 0x4000080)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c0002800c00028008000340000000024c000280080003400000000408000180fffffffd0800f1d7fffffffd08000340000000030900020073797a3200000000080001"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$smc(&(0x7f0000000180), r6)
sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0xc004}, 0x44040)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'team0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r7, @ANYBLOB="800202000a000200577f00"], 0x48}}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r11=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r13=>0x0})
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32=r11, @ANYBLOB="20ed42eea1f32ae5ab24230ecd5225000100", @ANYRES32=r13, @ANYBLOB="01000400ffffffff00"/24], 0x38}}, 0x20044050)
syz_emit_ethernet(0x4e, &(0x7f0000000480)=ANY=[@ANYBLOB="8e0086dd6000000000183a00fe8000000000000000000000000000bbff024000000200000000358a5d93fa072f5f0000003a80b6f0e58a1a59000000fc00000000000000"], 0x0)
sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0)
r14 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r14, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:33491' (ED25519) to the list of known hosts.
syzkaller login: [   50.840052][ T5758] cgroup: Unknown subsys name 'net'
[   50.946792][ T5758] cgroup: Unknown subsys name 'cpuset'
[   50.951403][ T5758] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   52.796111][ T5758] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   57.377320][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   57.380478][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   57.383249][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   57.386749][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   57.389578][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   57.428483][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   57.431280][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   57.434013][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   57.439089][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   57.442427][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   57.453918][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   57.457270][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   57.460198][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   57.480385][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   57.483024][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   57.677920][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   57.776910][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   57.808654][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.811369][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.814705][ T5826] bridge_slave_0: entered allmulticast mode
[   57.817786][ T5826] bridge_slave_0: entered promiscuous mode
[   57.828641][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.831329][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.833674][ T5826] bridge_slave_1: entered allmulticast mode
[   57.837206][ T5826] bridge_slave_1: entered promiscuous mode
[   57.885049][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.888277][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   57.896190][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.986607][ T5826] team0: Port device team_slave_0 added
[   57.992554][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.995403][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.997831][ T5830] bridge_slave_0: entered allmulticast mode
[   58.000823][ T5830] bridge_slave_0: entered promiscuous mode
[   58.005625][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.007912][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.010548][ T5830] bridge_slave_1: entered allmulticast mode
[   58.013481][ T5830] bridge_slave_1: entered promiscuous mode
[   58.017038][ T5826] team0: Port device team_slave_1 added
[   58.060875][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.072053][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.074359][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.077204][ T5831] bridge_slave_0: entered allmulticast mode
[   58.079931][ T5831] bridge_slave_0: entered promiscuous mode
[   58.093065][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.105047][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.107250][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.109438][ T5831] bridge_slave_1: entered allmulticast mode
[   58.112198][ T5831] bridge_slave_1: entered promiscuous mode
[   58.124668][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.126855][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.135015][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.158928][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.161070][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.169391][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.175528][ T5830] team0: Port device team_slave_0 added
[   58.179760][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.188218][ T5830] team0: Port device team_slave_1 added
[   58.192102][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.231148][ T5831] team0: Port device team_slave_0 added
[   58.235380][ T5831] team0: Port device team_slave_1 added
[   58.266963][ T5826] hsr_slave_0: entered promiscuous mode
[   58.269475][ T5826] hsr_slave_1: entered promiscuous mode
[   58.281382][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.283590][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.292201][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.297004][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.299198][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.307314][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.311194][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.313349][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.321734][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.326283][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.328434][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.336338][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.427117][ T5830] hsr_slave_0: entered promiscuous mode
[   58.429648][ T5830] hsr_slave_1: entered promiscuous mode
[   58.431957][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.434790][ T5830] Cannot create hsr debugfs directory
[   58.440241][ T5831] hsr_slave_0: entered promiscuous mode
[   58.442598][ T5831] hsr_slave_1: entered promiscuous mode
[   58.446443][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.449128][ T5831] Cannot create hsr debugfs directory
[   58.710773][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.722558][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.729105][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.735783][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.782692][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.788326][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.806740][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.816551][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.888504][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.895885][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.907003][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.913106][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   59.032032][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.041730][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.085303][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   59.092741][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   59.107019][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.109983][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.146245][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.149103][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.156290][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.159122][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.197607][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.200513][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.211554][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.247359][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   59.261987][ T5826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   59.270751][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   59.293065][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.296030][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.331935][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.334347][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.448456][   T54] Bluetooth: hci0: command tx timeout
[   59.460730][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.490721][ T5826] veth0_vlan: entered promiscuous mode
[   59.522019][ T5826] veth1_vlan: entered promiscuous mode
[   59.524674][   T54] Bluetooth: hci1: command tx timeout
[   59.527278][   T54] Bluetooth: hci2: command tx timeout
[   59.547884][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.606972][ T5826] veth0_macvtap: entered promiscuous mode
[   59.615197][ T5826] veth1_macvtap: entered promiscuous mode
[   59.649488][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.657876][ T5830] veth0_vlan: entered promiscuous mode
[   59.667127][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.676043][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.683063][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.689165][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.692547][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.697773][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.705221][ T5830] veth1_vlan: entered promiscuous mode
[   59.758878][ T5830] veth0_macvtap: entered promiscuous mode
[   59.788190][ T5830] veth1_macvtap: entered promiscuous mode
[   59.798056][ T5831] veth0_vlan: entered promiscuous mode
[   59.823567][ T3607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.828379][ T3607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.836223][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.850607][ T5831] veth1_vlan: entered promiscuous mode
[   59.859377][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.878155][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.881097][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.885464][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.887084][ T3607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.888446][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.891265][ T3607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.955025][ T5831] veth0_macvtap: entered promiscuous mode
[   59.960991][ T5831] veth1_macvtap: entered promiscuous mode
[   59.961440][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   60.036436][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.044827][ T3607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.053301][ T3607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.060794][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.088490][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.091868][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.111017][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.118264][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.174831][ T3607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.179569][ T3607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.222493][ T3607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.225525][ T3607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.255596][ T3607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.257901][ T3607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.612232][ T5923] netlink: 4208 bytes leftover after parsing attributes in process `syz.0.16'.
[   60.623144][ T5921] syz.2.15 uses obsolete (PF_INET,SOCK_PACKET)
[   60.928398][ T5937] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.126823][ T5955] netlink: 256 bytes leftover after parsing attributes in process `syz.1.25'.
[   61.228421][ T5961] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   61.312131][ T5967] Bluetooth: MGMT ver 1.23
[   61.392618][ T5972] netlink: 'syz.2.30': attribute type 1 has an invalid length.
[   61.437741][ T5974] netlink: 'syz.2.32': attribute type 11 has an invalid length.
[   61.440292][ T5974] netlink: 140 bytes leftover after parsing attributes in process `syz.2.32'.
[   61.524384][ T5220] Bluetooth: hci0: command tx timeout
[   61.536263][ T5983] Cannot find del_set index 4 as target
[   61.604162][ T5220] Bluetooth: hci2: command tx timeout
[   61.606172][ T5220] Bluetooth: hci1: command tx timeout
[   61.691504][ T5989] netlink: 'syz.2.38': attribute type 1 has an invalid length.
[   61.699332][ T5989] team_slave_0: entered promiscuous mode
[   61.701652][ T5989] team_slave_0: entered allmulticast mode
[   61.803386][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.806514][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.896765][ T5990] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.903191][  T790] cfg80211: failed to load regulatory.db
[   61.908423][ T5990] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.981806][ T5990] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.985944][ T5990] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.990069][ T5990] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.993510][ T5990] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.013986][ T5996] xt_policy: output policy not valid in PREROUTING and INPUT
[   62.096134][ T5990] syz.2.38 (5990) used greatest stack depth: 20728 bytes left
[   62.098690][ T5998] Cannot find add_set index 0 as target
[   62.157192][ T6003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.44'.
[   62.488491][ T6031] netlink: 40 bytes leftover after parsing attributes in process `syz.2.56'.
[   62.491276][ T6031] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   62.568396][ T6039] xt_CT: You must specify a L4 protocol and not use inversions on it
[   63.191227][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.76'.
[   63.349839][ T6097] tipc: Started in network mode
[   63.354184][ T6097] tipc: Node identity ac14140f, cluster identity 4711
[   63.359628][ T6097] tipc: New replicast peer: 255.255.255.255
[   63.362537][ T6097] tipc: Enabled bearer <udp:syz2>, priority 10
[   63.380875][ T6097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.80'.
[   63.385598][ T6097] tipc: Disabling bearer <udp:syz2>
[   63.586356][ T6113] netlink: 504 bytes leftover after parsing attributes in process `syz.0.87'.
[   63.608193][   T54] Bluetooth: hci0: command tx timeout
[   63.684271][   T54] Bluetooth: hci1: command tx timeout
[   63.686589][   T54] Bluetooth: hci2: command tx timeout
[   63.740867][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.90'.
[   64.021763][ T6142] netlink: 16 bytes leftover after parsing attributes in process `syz.0.101'.
[   64.137621][ T6148] netlink: 'syz.0.103': attribute type 4 has an invalid length.
[   64.425873][ T6174] netlink: 'syz.1.113': attribute type 4 has an invalid length.
[   64.514883][  T790] IPVS: starting estimator thread 0...
[   64.634028][ T6185] IPVS: using max 62 ests per chain, 148800 per kthread
[   64.635925][ T6192] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   65.486722][ T6229] Zero length message leads to an empty skb
[   65.490270][ T6229] bridge0: port 3(macvlan1) entered blocking state
[   65.492676][ T6229] bridge0: port 3(macvlan1) entered disabled state
[   65.496660][ T6229] macvlan1: entered allmulticast mode
[   65.504886][ T6229] macvlan1: entered promiscuous mode
[   65.512337][ T6229] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[   65.684369][ T5220] Bluetooth: hci0: command tx timeout
[   65.765039][ T5220] Bluetooth: hci2: command tx timeout
[   65.767223][ T5220] Bluetooth: hci1: command tx timeout
[   65.860531][ T6257] __nla_validate_parse: 4 callbacks suppressed
[   65.860541][ T6257] netlink: 16 bytes leftover after parsing attributes in process `syz.1.149'.
[   66.019417][ T6265] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.153'.
[   66.032699][ T6267] netlink: 182 bytes leftover after parsing attributes in process `syz.2.154'.
[   66.290987][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'.
[   66.651879][ T6302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'.
[   67.123283][ T6320] bridge_slave_0: left allmulticast mode
[   67.134126][ T6320] bridge_slave_0: left promiscuous mode
[   67.144323][ T6320] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.173527][ T6320] bridge_slave_1: left allmulticast mode
[   67.175892][ T6320] bridge_slave_1: left promiscuous mode
[   67.178203][ T6320] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.199637][ T6320] bond0: (slave bond_slave_0): Releasing backup interface
[   67.211493][ T6320] bond0: (slave bond_slave_1): Releasing backup interface
[   67.226869][ T6320] team0: Port device team_slave_0 removed
[   67.236794][ T6320] team0: Port device team_slave_1 removed
[   67.239429][ T6320] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.241771][ T6320] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.246483][ T6320] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.248732][ T6320] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.772129][ T6351] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.190'.
[   67.810254][ T6344] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.819915][ T6344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'.
[   67.849262][ T6344] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   67.862522][ T6344] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   68.697341][ T6371] netlink: 'syz.1.199': attribute type 1 has an invalid length.
[   68.917982][ T6383] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.930197][ T6381] bridge1: entered promiscuous mode
[   68.932221][ T6381] bridge1: entered allmulticast mode
[   68.971251][ T6381] team0: Port device bridge1 added
[   69.132737][ T6397] syz.2.212 uses old SIOCAX25GETINFO
[   69.801369][ T6451] ieee802154 phy0 wpan0: encryption failed: -22
[   69.871019][ T6459] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) !
[   70.084612][    C0] Unknown status report in ack skb
[   71.127375][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.129550][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.176433][ T6510] team_slave_0: left promiscuous mode
[   71.178142][ T6510] team_slave_0: left allmulticast mode
[   71.191108][ T6510] bridge1: left promiscuous mode
[   71.192662][ T6510] bridge1: left allmulticast mode
[   71.567183][ T6533] netlink: 'syz.2.276': attribute type 11 has an invalid length.
[   71.570082][ T6533] netlink: 36 bytes leftover after parsing attributes in process `syz.2.276'.
[   72.030840][ T6562] netlink: 28 bytes leftover after parsing attributes in process `syz.1.290'.
[   72.233198][ T6577] netlink: 'syz.1.297': attribute type 2 has an invalid length.
[   72.237171][ T6577] netlink: 'syz.1.297': attribute type 1 has an invalid length.
[   72.240232][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.297'.
[   72.295253][ T6582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.297'.
[   72.703141][ T6609] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   72.709233][ T6609] macsec1: entered promiscuous mode
[   72.711521][ T6609] macsec1: entered allmulticast mode
[   72.713377][ T6609] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   72.750865][ T6611] netlink: 'syz.0.312': attribute type 9 has an invalid length.
[   73.010684][ T6623] warning: `syz.0.317' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   73.847303][ T6686] netlink: 270 bytes leftover after parsing attributes in process `syz.2.348'.
[   73.922866][ T6692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.351'.
[   73.932093][ T6692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.351'.
[   75.074338][ T6714] netlink: 36 bytes leftover after parsing attributes in process `syz.1.360'.
[   75.078742][ T6714] netlink: 'syz.1.360': attribute type 29 has an invalid length.
[   75.087977][ T6717] netlink: 40 bytes leftover after parsing attributes in process `syz.0.356'.
[   75.094074][ T6717] netlink: 60 bytes leftover after parsing attributes in process `syz.0.356'.
[   75.116500][ T6714] Driver unsupported XDP return value 0 on prog  (id 62) dev N/A, expect packet loss!
[   75.596122][ T6747] x_tables: duplicate entry at hook 1
[   76.251248][ T6805] netlink: 'syz.2.393': attribute type 1 has an invalid length.
[   76.798523][ T6820] tap0: tun_chr_ioctl cmd 1074025677
[   76.800722][ T6820] tap0: linktype set to 1
[   76.950531][ T6823] ip6gretap0: entered promiscuous mode
[   76.953156][ T6823] macsec2: entered promiscuous mode
[   76.956422][ T6823] macsec2: entered allmulticast mode
[   76.958580][ T6823] ip6gretap0: entered allmulticast mode
[   77.650993][ T6885] af_packet: tpacket_rcv: packet too big, clamped from 65238 to 3952. macoff=96
[   77.790579][ T6894] macsec3: entered promiscuous mode
[   77.792657][ T6894] macsec3: entered allmulticast mode
[   77.877373][ T6894] syz.0.432 (6894) used greatest stack depth: 20064 bytes left
[   77.931407][ T6908] __nla_validate_parse: 6 callbacks suppressed
[   77.931418][ T6908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.439'.
[   77.936770][ T6908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.439'.
[   77.940007][ T6908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.439'.
[   77.996222][ T6915] openvswitch: netlink: IP tunnel dst address not specified
[   78.152679][ T6926] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   78.950021][ T6963] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   79.058653][ T6973] netlink: 28 bytes leftover after parsing attributes in process `syz.1.469'.
[   79.221445][ T6993] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[   79.289244][ T7001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.483'.
[   79.588982][ T7030] C: renamed from team_slave_0
[   79.600684][ T7030] netlink: 'syz.2.496': attribute type 3 has an invalid length.
[   79.603718][ T7030] netlink: 152 bytes leftover after parsing attributes in process `syz.2.496'.
[   79.613651][ T7034] netlink: 16 bytes leftover after parsing attributes in process `syz.1.498'.
[   79.625254][ T7034] netlink: 224 bytes leftover after parsing attributes in process `syz.1.498'.
[   79.882867][ T7060] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   79.974381][ T7068] netlink: 16 bytes leftover after parsing attributes in process `syz.1.515'.
[   80.614649][ T7103] bridge_slave_0: left allmulticast mode
[   80.617160][ T7103] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.624082][ T7103] bridge_slave_1: left allmulticast mode
[   80.626858][ T7103] bridge_slave_1: left promiscuous mode
[   80.629366][ T7103] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.634571][ T7103] bond0: (slave bond_slave_0): Releasing backup interface
[   80.641595][ T7103] bond0: (slave bond_slave_1): Releasing backup interface
[   80.652383][ T7103] team0: Port device C removed
[   80.658067][ T7103] team0: Port device team_slave_1 removed
[   80.661291][ T7103] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.673878][ T7103] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.678302][ T7103] macvlan1: left allmulticast mode
[   80.680619][ T7103] macvlan1: left promiscuous mode
[   80.683437][ T7103] bridge0: port 3(macvlan1) entered disabled state
[   80.695674][ T7103] team0: Port device bridge1 removed
[   81.191037][ T7123] netlink: 28 bytes leftover after parsing attributes in process `syz.1.539'.
[   81.195899][ T7123] netlink: 'syz.1.539': attribute type 7 has an invalid length.
[   81.199042][ T7123] netlink: 'syz.1.539': attribute type 8 has an invalid length.
[   81.211100][ T7123] ip6gretap0: entered promiscuous mode
[   81.215058][ T7123] syz_tun: entered promiscuous mode
[   81.220370][ T7123] ip6gretap0: left promiscuous mode
[   81.224478][ T7123] syz_tun: left promiscuous mode
[   81.287110][ T7129] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[   81.290131][ T7129] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.579750][ T7151] sctp: [Deprecated]: syz.1.551 (pid 7151) Use of struct sctp_assoc_value in delayed_ack socket option.
[   81.579750][ T7151] Use struct sctp_sack_info instead
[   81.866983][ T7172] netlink: 'syz.1.562': attribute type 2 has an invalid length.
[   81.870825][ T7172] netlink: 'syz.1.562': attribute type 8 has an invalid length.
[   82.097360][ T7200] xt_CT: You must specify a L4 protocol and not use inversions on it
[   82.277840][ T7210] netlink: 'syz.1.577': attribute type 16 has an invalid length.
[   82.537030][ T7232] IPVS: length: 148 != 24
[   83.070046][ T7279] netlink: 'syz.2.600': attribute type 10 has an invalid length.
[   83.078251][ T7279] 8021q: adding VLAN 0 to HW filter on device team0
[   83.086494][ T7279] bond0: (slave team0): Enslaving as an active interface with an up link
[   83.157922][ T7288] syz_tun: entered allmulticast mode
[   83.166815][ T7286] syz_tun: left allmulticast mode
[   83.436888][ T7310] __nla_validate_parse: 3 callbacks suppressed
[   83.436908][ T7310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.616'.
[   83.442826][ T7310] netlink: 28 bytes leftover after parsing attributes in process `syz.0.616'.
[   83.456946][ T7310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.616'.
[   83.460776][ T7310] netlink: 28 bytes leftover after parsing attributes in process `syz.0.616'.
[   83.465050][ T7310] netlink: 'syz.0.616': attribute type 6 has an invalid length.
[   83.542108][ T7321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.619'.
[   83.688725][ T7328] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   83.715171][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'.
[   83.731493][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'.
[   83.926903][ T5220] Bluetooth: hci2: command 0x0405 tx timeout
[   84.219273][ T7374] netlink: 24 bytes leftover after parsing attributes in process `syz.2.643'.
[   84.355074][ T7386] xt_hashlimit: size too large, truncated to 1048576
[   84.535987][ T7401] bond0: entered promiscuous mode
[   84.765339][ T7412] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[   84.769173][ T7412] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   85.555225][ T7434] netlink: 20 bytes leftover after parsing attributes in process `syz.2.669'.
[   86.026179][ T7463] delete_channel: no stack
[   86.096721][ T7469] netlink: 32 bytes leftover after parsing attributes in process `syz.0.687'.
[   86.162906][ T7475] geneve2: entered promiscuous mode
[   86.170996][ T7474] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   86.276978][ T7482] macsec1: entered allmulticast mode
[   86.278706][ T7482] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[   86.282505][ T7482] batman_adv: batadv0: Adding interface: macsec1
[   86.287766][ T7482] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.301564][ T7482] batman_adv: batadv0: Interface activated: macsec1
[   86.589415][ T7504] bridge0: port 1(veth0_to_bridge) entered blocking state
[   86.592591][ T7504] bridge0: port 1(veth0_to_bridge) entered disabled state
[   86.598938][ T7504] veth0_to_bridge: entered allmulticast mode
[   86.602599][ T7504] veth0_to_bridge: entered promiscuous mode
[   86.606962][ T7504] bridge0: port 1(veth0_to_bridge) entered blocking state
[   86.609936][ T7504] bridge0: port 1(veth0_to_bridge) entered forwarding state
[   86.751191][ T7518] syzkaller1: entered promiscuous mode
[   86.753487][ T7518] syzkaller1: entered allmulticast mode
[   86.815646][ T5856] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   86.818420][ T5856] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   86.851110][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   87.117671][ T7546] veth0: entered promiscuous mode
[   87.327572][   T96] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   87.368787][ T7555] netlink: 'syz.2.726': attribute type 1 has an invalid length.
[   87.371629][ T7555] netlink: 'syz.2.726': attribute type 1 has an invalid length.
[   87.374721][ T7555] netlink: 'syz.2.726': attribute type 1 has an invalid length.
[   87.377384][ T7555] netlink: 'syz.2.726': attribute type 1 has an invalid length.
[   87.380292][ T7555] netlink: 'syz.2.726': attribute type 1 has an invalid length.
[   87.386461][ T7555] netlink: 'syz.2.726': attribute type 1 has an invalid length.
[   87.388940][ T7555] netlink: 'syz.2.726': attribute type 1 has an invalid length.
[   87.392533][ T7555] netlink: 'syz.2.726': attribute type 1 has an invalid length.
[   87.395785][ T7555] netlink: 'syz.2.726': attribute type 1 has an invalid length.
[   87.402639][ T7555] netlink: 'syz.2.726': attribute type 1 has an invalid length.
[   87.446322][  T790] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   87.694407][  T790] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   88.032484][ T7614] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   88.537823][ T7669] __nla_validate_parse: 82 callbacks suppressed
[   88.537843][ T7669] netlink: 128 bytes leftover after parsing attributes in process `syz.1.752'.
[   88.547911][ T7669] netlink: 3 bytes leftover after parsing attributes in process `syz.1.752'.
[   88.764128][ T7685] tipc: Started in network mode
[   88.765696][ T7685] tipc: Node identity beb1a2981c96, cluster identity 4711
[   88.768788][ T7685] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.771821][ T7685] syzkaller0: entered promiscuous mode
[   88.773583][ T7685] syzkaller0: entered allmulticast mode
[   88.789655][ T7685] tipc: Resetting bearer <eth:syzkaller0>
[   88.797902][ T7684] tipc: Resetting bearer <eth:syzkaller0>
[   88.815391][ T7684] tipc: Disabling bearer <eth:syzkaller0>
[   88.958349][ T7711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.763'.
[   88.961421][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.763'.
[   89.017142][ T7718] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[   89.020408][ T7718] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[   89.249532][ T7742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.770'.
[   89.297365][ T7745] netlink: 40 bytes leftover after parsing attributes in process `syz.2.772'.
[   89.344585][ T7748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.773'.
[   89.419327][ T7754] vlan2: entered promiscuous mode
[   89.421053][ T7754] bond0: entered promiscuous mode
[   89.422571][ T7754] team0: entered promiscuous mode
[   89.425362][ T7754] bond0: (slave vlan2): Opening slave failed
[   89.745308][ T7774] raw_sendmsg: syz.2.786 forgot to set AF_INET. Fix it!
[   89.799380][ T7778] vlan3: entered promiscuous mode
[   89.801242][ T7778] vlan2: entered promiscuous mode
[   89.803078][ T7778] gretap0: entered promiscuous mode
[   90.041792][ T7799] netlink: 52 bytes leftover after parsing attributes in process `syz.0.796'.
[   90.052376][ T7799] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   90.130398][ T7807] netlink: 16 bytes leftover after parsing attributes in process `syz.1.801'.
[   90.143922][ T7807] tipc: Invalid UDP bearer configuration
[   90.143958][ T7807] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   90.318774][ T7826] netlink: 36 bytes leftover after parsing attributes in process `syz.2.811'.
[   90.432776][ T7838] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   90.644111][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   90.695017][ T7866] bridge_slave_0: left allmulticast mode
[   90.697313][ T7866] bridge_slave_0: left promiscuous mode
[   90.699717][ T7866] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.710261][ T7866] bridge_slave_1: left allmulticast mode
[   90.712193][ T7866] bridge_slave_1: left promiscuous mode
[   90.716239][ T7866] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.726250][ T7866] bond0: (slave bond_slave_0): Releasing backup interface
[   90.735282][ T7866] bond0: (slave bond_slave_1): Releasing backup interface
[   90.751606][ T7866] team0: Port device team_slave_0 removed
[   90.763466][ T7866] team0: Port device team_slave_1 removed
[   90.768791][ T7866] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   90.771939][ T7866] batman_adv: batadv0: Removing interface: batadv_slave_0
[   90.778438][ T7866] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.781401][ T7866] batman_adv: batadv0: Removing interface: batadv_slave_1
[   90.834571][ T5298] syz1: Port: 1 Link DOWN
[   91.192917][ T7899] openvswitch: netlink: Flow key attr not present in new flow.
[   91.425128][ T7916] openvswitch: netlink: IP tunnel dst address not specified
[   91.430154][ T7914] batadv1: entered promiscuous mode
[   91.432294][ T7914] batadv1: entered allmulticast mode
[   91.842696][ T7943] sctp: [Deprecated]: syz.2.862 (pid 7943) Use of struct sctp_assoc_value in delayed_ack socket option.
[   91.842696][ T7943] Use struct sctp_sack_info instead
[   91.988831][ T7951] syzkaller1: entered promiscuous mode
[   91.990543][ T7951] syzkaller1: entered allmulticast mode
[   92.761156][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   92.768645][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   92.774241][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   92.778438][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   92.782157][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   93.022894][ T7991] chnl_net:caif_netlink_parms(): no params data found
[   93.150681][ T7991] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.153459][ T7991] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.159415][ T7991] bridge_slave_0: entered allmulticast mode
[   93.163253][ T7991] bridge_slave_0: entered promiscuous mode
[   93.168384][ T7991] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.171143][ T7991] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.176435][ T7991] bridge_slave_1: entered allmulticast mode
[   93.180797][ T7991] bridge_slave_1: entered promiscuous mode
[   93.217487][ T7991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.225336][ T7991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.279155][ T7991] team0: Port device team_slave_0 added
[   93.295671][ T7991] team0: Port device team_slave_1 added
[   93.360482][ T7991] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.363272][ T7991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.383203][ T7991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.392442][ T7991] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.399688][ T7991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.418253][ T7991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.499789][ T7991] hsr_slave_0: entered promiscuous mode
[   93.502915][ T7991] hsr_slave_1: entered promiscuous mode
[   93.515480][ T7991] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   93.518789][ T7991] Cannot create hsr debugfs directory
[   93.712783][ T7991] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.789543][ T7991] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.832557][ T8041] validate_nla: 72 callbacks suppressed
[   93.832614][ T8041] netlink: 'syz.2.904': attribute type 1 has an invalid length.
[   93.848667][ T8041] netlink: 'syz.2.904': attribute type 3 has an invalid length.
[   93.865460][ T7991] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.876766][ T8041] __nla_validate_parse: 10 callbacks suppressed
[   93.876779][ T8041] netlink: 224 bytes leftover after parsing attributes in process `syz.2.904'.
[   93.883549][ T8041] NCSI netlink: No device for ifindex 246
[   93.980787][ T7991] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.047813][ T8051] netlink: 16 bytes leftover after parsing attributes in process `syz.2.909'.
[   94.051491][ T8051] netlink: 16 bytes leftover after parsing attributes in process `syz.2.909'.
[   94.162622][ T7991] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   94.182323][ T7991] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   94.197755][ T7991] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   94.208685][ T7991] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   94.288732][ T7991] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.304993][ T7991] 8021q: adding VLAN 0 to HW filter on device team0
[   94.311302][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.313718][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.338022][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.340495][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.432272][ T8082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.920'.
[   94.502576][ T7991] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.555395][ T7991] veth0_vlan: entered promiscuous mode
[   94.561208][ T7991] veth1_vlan: entered promiscuous mode
[   94.604181][ T7991] veth0_macvtap: entered promiscuous mode
[   94.610188][ T7991] veth1_macvtap: entered promiscuous mode
[   94.638701][ T7991] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.651297][ T7991] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.671256][ T7991] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.679540][ T7991] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.683121][ T7991] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.689593][ T7991] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.741932][ T8102] netlink: 159784 bytes leftover after parsing attributes in process `syz.0.927'.
[   94.803128][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.806175][   T54] Bluetooth: hci2: command tx timeout
[   94.809992][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.854681][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.858458][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.037612][ T8123] xt_time: invalid argument - start or stop time greater than 23:59:59
[   95.182750][ T8134] netlink: 96 bytes leftover after parsing attributes in process `syz.0.941'.
[   95.286826][ T8141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.945'.
[   95.391637][ T8149] netlink: 'syz.2.949': attribute type 1 has an invalid length.
[   95.405778][ T8149] 8021q: adding VLAN 0 to HW filter on device bond1
[   95.411610][ T8149] erspan0: entered allmulticast mode
[   95.417304][ T8149] bond1: (slave erspan0): making interface the new active one
[   95.421182][ T8149] bond1: (slave erspan0): Enslaving as an active interface with an up link
[   95.461488][ T8156] netlink: 'syz.2.952': attribute type 11 has an invalid length.
[   95.468888][ T8156] netlink: 'syz.2.952': attribute type 11 has an invalid length.
[   95.471378][ T8156] netlink: 224 bytes leftover after parsing attributes in process `syz.2.952'.
[   96.527412][ T8174] tap0: tun_chr_ioctl cmd 1074025677
[   96.530366][ T8174] tap0: linktype set to 0
[   96.678022][ T5838] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.909850][ T8190] netlink: 148 bytes leftover after parsing attributes in process `syz.2.965'.
[   96.992423][ T8192] netlink: 20 bytes leftover after parsing attributes in process `syz.0.966'.
[   97.089718][ T5220] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   97.093118][ T5220] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   97.104860][ T5220] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   97.108534][ T5220] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   97.110910][ T5220] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   97.260710][ T8200] chnl_net:caif_netlink_parms(): no params data found
[   97.301195][ T8204] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[   97.401329][ T8200] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.414334][ T8200] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.417463][ T8200] bridge_slave_0: entered allmulticast mode
[   97.424747][ T8200] bridge_slave_0: entered promiscuous mode
[   97.435083][ T8200] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.437559][ T8200] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.444666][ T8200] bridge_slave_1: entered allmulticast mode
[   97.455031][ T8200] bridge_slave_1: entered promiscuous mode
[   97.499511][ T8200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.504539][ T8200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.554268][ T8200] team0: Port device team_slave_0 added
[   97.560842][ T8200] team0: Port device team_slave_1 added
[   97.595580][ T8200] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.598420][ T8200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.610050][ T8200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.616738][ T8200] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.619563][ T8200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.637088][ T8200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.686770][ T8200] hsr_slave_0: entered promiscuous mode
[   97.689269][ T8200] hsr_slave_1: entered promiscuous mode
[   97.691690][ T8200] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   97.697150][ T8200] Cannot create hsr debugfs directory
[   97.781401][ T8232] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 36160 - 0
[   97.785585][ T8232] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 36160 - 0
[   97.788250][ T8232] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 36160 - 0
[   97.790849][ T8232] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 36160 - 0
[   97.793657][ T8232] geneve2: entered promiscuous mode
[   97.795460][ T8232] geneve2: entered allmulticast mode
[   97.894873][ T8234] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   97.898401][ T8234] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   97.902446][ T8234] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   97.909118][ T8234] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   97.912952][ T8234] geneve3: entered promiscuous mode
[   98.001353][ T8238] netlink: 'syz.2.982': attribute type 32 has an invalid length.
[   98.008525][ T8238] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192)
[   98.150452][ T5838] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.205645][ T5838] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.271662][ T5838] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.484327][ T5838] bridge_slave_1: left allmulticast mode
[   98.487214][ T5838] bridge_slave_1: left promiscuous mode
[   98.489427][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.507188][ T5838] bridge_slave_0: left allmulticast mode
[   98.509486][ T5838] bridge_slave_0: left promiscuous mode
[   98.512687][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.654055][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   98.887218][ T5838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   98.894363][ T5838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   98.897945][ T5838] bond0 (unregistering): Released all slaves
[   99.124047][ T5220] Bluetooth: hci2: command tx timeout
[   99.291151][ T8297] __nla_validate_parse: 4 callbacks suppressed
[   99.291162][ T8297] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1002'.
[   99.304153][ T8297] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1002'.
[   99.328150][ T8294] bridge2: entered promiscuous mode
[   99.329823][ T8294] bridge2: entered allmulticast mode
[   99.336986][ T8294] team0: Port device bridge2 added
[   99.358599][ T8294] rdma_rxe: rxe_newlink: failed to add macvlan1
[   99.410454][ T5838] hsr_slave_0: left promiscuous mode
[   99.412676][ T5838] hsr_slave_1: left promiscuous mode
[   99.421559][ T5838] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.426759][ T5838] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.431042][ T5838] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.433716][ T5838] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.463371][ T5838] veth1_macvtap: left promiscuous mode
[   99.467618][ T5838] veth0_macvtap: left promiscuous mode
[   99.469824][ T5838] veth1_vlan: left promiscuous mode
[   99.471586][ T5838] veth0_vlan: left promiscuous mode
[   99.757810][ T5838] team0 (unregistering): Port device team_slave_1 removed
[   99.783328][ T5838] team0 (unregistering): Port device team_slave_0 removed
[  100.172409][ T8200] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  100.211167][ T8200] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  100.222998][ T8200] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  100.236552][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1007'.
[  100.251510][ T8200] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  100.468606][ T8200] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.518787][ T8200] 8021q: adding VLAN 0 to HW filter on device team0
[  100.528229][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.531086][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.556253][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.559107][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.736037][ T8200] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.791115][ T8200] veth0_vlan: entered promiscuous mode
[  100.803394][ T8200] veth1_vlan: entered promiscuous mode
[  100.860535][ T8200] veth0_macvtap: entered promiscuous mode
[  100.868451][ T8200] veth1_macvtap: entered promiscuous mode
[  100.900546][ T8200] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.912274][ T8200] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.922358][ T8200] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.926668][ T8200] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.930206][ T8200] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.933523][ T8200] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.992871][ T8355] macsec2: entered allmulticast mode
[  100.995658][ T8355] macsec0: entered allmulticast mode
[  101.076415][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.083262][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.126693][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.130838][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.589680][ T8379] netlink: 'syz.0.1028': attribute type 10 has an invalid length.
[  101.592266][ T8379] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1028'.
[  101.598062][ T8379] dummy0: entered promiscuous mode
[  101.599755][ T8379] dummy0: entered allmulticast mode
[  101.602834][ T8379] bridge0: port 2(dummy0) entered blocking state
[  101.605579][ T8379] bridge0: port 2(dummy0) entered disabled state
[  101.608985][ T8379] bridge0: port 2(dummy0) entered blocking state
[  101.611022][ T8379] bridge0: port 2(dummy0) entered forwarding state
[  101.835727][ T8393] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1035'.
[  102.390113][ T8424] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1049'.
[  102.399855][ T8424] dvmrp8: entered allmulticast mode
[  102.434775][ T8421] dvmrp8: left allmulticast mode
[  102.909230][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.310726][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  103.315291][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  103.318872][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  103.322162][ T8457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1064'.
[  103.330503][ T8457] netlink: 34 bytes leftover after parsing attributes in process `syz.0.1064'.
[  103.335592][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  103.339238][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  103.377851][ T8459] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1063'.
[  103.381304][ T8459] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[  103.592852][ T8454] chnl_net:caif_netlink_parms(): no params data found
[  103.723439][ T8454] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.730318][ T8454] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.733426][ T8454] bridge_slave_0: entered allmulticast mode
[  103.738736][ T8454] bridge_slave_0: entered promiscuous mode
[  103.745942][ T8484] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1072'.
[  103.750604][ T8454] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.766170][ T8454] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.768584][ T8454] bridge_slave_1: entered allmulticast mode
[  103.772405][ T8454] bridge_slave_1: entered promiscuous mode
[  103.847887][ T8454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.854607][ T8454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.936159][ T8454] team0: Port device team_slave_0 added
[  103.941207][ T8454] team0: Port device team_slave_1 added
[  104.001460][ T8454] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.005049][ T8454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.027351][ T8454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.033749][ T8454] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.041055][ T8454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.056198][ T8454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.142790][ T8511] netlink: 'syz.0.1085': attribute type 1 has an invalid length.
[  104.145653][ T8454] hsr_slave_0: entered promiscuous mode
[  104.150917][ T8454] hsr_slave_1: entered promiscuous mode
[  104.153744][ T8454] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  104.172114][ T8454] Cannot create hsr debugfs directory
[  104.330738][ T8521] netlink: 'syz.0.1090': attribute type 7 has an invalid length.
[  104.432753][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.545999][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.604911][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.670003][ T8536] bridge0: port 1(vlan2) entered blocking state
[  104.672249][ T8536] bridge0: port 1(vlan2) entered disabled state
[  104.676466][ T8536] vlan2: entered allmulticast mode
[  104.678071][ T8536] bond0: entered allmulticast mode
[  104.679742][ T8536] team0: entered allmulticast mode
[  104.685275][ T8536] vlan2: entered promiscuous mode
[  104.795120][   T13] bridge_slave_1: left allmulticast mode
[  104.798749][   T13] bridge_slave_1: left promiscuous mode
[  104.805295][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.813598][   T13] bridge_slave_0: left allmulticast mode
[  104.818893][   T13] bridge_slave_0: left promiscuous mode
[  104.821346][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.095051][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  105.099677][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  105.103550][   T13] bond0 (unregistering): Released all slaves
[  105.363973][ T5220] Bluetooth: hci2: command tx timeout
[  105.487405][   T13] hsr_slave_0: left promiscuous mode
[  105.490264][   T13] hsr_slave_1: left promiscuous mode
[  105.493013][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.496436][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  105.500090][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.503029][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  105.521338][   T13] veth1_macvtap: left promiscuous mode
[  105.525164][   T13] veth0_macvtap: left promiscuous mode
[  105.527531][   T13] veth1_vlan: left promiscuous mode
[  105.529725][   T13] veth0_vlan: left promiscuous mode
[  106.010990][   T13] team0 (unregistering): Port device team_slave_1 removed
[  106.048660][   T13] team0 (unregistering): Port device team_slave_0 removed
[  106.539290][ T8454] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  106.552836][ T8454] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  106.583203][ T8454] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  106.590189][ T8454] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  106.597142][ T8590] __nla_validate_parse: 2 callbacks suppressed
[  106.597155][ T8590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1108'.
[  106.602821][ T8590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1108'.
[  106.616959][ T8590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1108'.
[  106.620217][ T8590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1108'.
[  106.632865][ T8590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1108'.
[  106.636609][ T8590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1108'.
[  106.719636][ T8454] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.754765][ T8454] 8021q: adding VLAN 0 to HW filter on device team0
[  106.761829][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.764175][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.778854][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.781103][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.952755][ T8454] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.001624][ T8454] veth0_vlan: entered promiscuous mode
[  107.010059][ T8454] veth1_vlan: entered promiscuous mode
[  107.028253][ T8454] veth0_macvtap: entered promiscuous mode
[  107.045837][ T8454] veth1_macvtap: entered promiscuous mode
[  107.066679][ T8454] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.074600][ T8454] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.079537][ T8454] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.082345][ T8454] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.086443][ T8454] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.089014][ T8454] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.174223][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.179542][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.207793][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.210378][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.242127][ T8630] syz_tun: entered promiscuous mode
[  107.263697][ T8630] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  108.510040][ T8708] batadv_slave_0: entered promiscuous mode
[  108.512788][ T8706] batadv_slave_0: left promiscuous mode
[  109.626122][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1170'.
[  109.839196][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.538296][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  110.542309][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  110.549198][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  110.552850][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  110.560757][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  110.585936][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.653196][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.690460][ T8772] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1188'.
[  110.742374][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.748771][ T8775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1190'.
[  110.821787][ T8775] bridge2: port 1(ip6gretap1) entered blocking state
[  110.825445][ T8775] bridge2: port 1(ip6gretap1) entered disabled state
[  110.828026][ T8775] ip6gretap1: entered allmulticast mode
[  110.830659][ T8775] ip6gretap1: entered promiscuous mode
[  110.868553][ T8775] veth3: entered promiscuous mode
[  110.870431][ T8775] bridge2: port 2(veth3) entered blocking state
[  110.872519][ T8775] bridge2: port 2(veth3) entered disabled state
[  110.876145][ T8775] veth3: entered allmulticast mode
[  110.976017][ T8784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1193'.
[  110.983348][ T8762] chnl_net:caif_netlink_parms(): no params data found
[  111.098009][   T13] bridge_slave_1: left allmulticast mode
[  111.100180][   T13] bridge_slave_1: left promiscuous mode
[  111.102179][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.106984][   T13] bridge_slave_0: left allmulticast mode
[  111.108853][   T13] bridge_slave_0: left promiscuous mode
[  111.120288][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.168911][ T8798] netlink: 'syz.0.1198': attribute type 15 has an invalid length.
[  111.303625][ T8806] netlink: 'syz.0.1200': attribute type 1 has an invalid length.
[  111.526439][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  111.532058][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  111.537400][   T13] bond0 (unregistering): Released all slaves
[  111.602339][ T8813] erspan1: entered promiscuous mode
[  111.604242][ T8813] erspan1: entered allmulticast mode
[  111.701046][ T8818] netlink: 'syz.0.1204': attribute type 5 has an invalid length.
[  111.725356][ T8762] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.727892][ T8762] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.730224][ T8762] bridge_slave_0: entered allmulticast mode
[  111.735676][ T8762] bridge_slave_0: entered promiscuous mode
[  111.750086][ T8762] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.752304][ T8762] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.757359][ T8762] bridge_slave_1: entered allmulticast mode
[  111.761120][ T8762] bridge_slave_1: entered promiscuous mode
[  111.905751][ T8762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  111.920847][ T8762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  112.030916][ T8762] team0: Port device team_slave_0 added
[  112.060812][ T8762] team0: Port device team_slave_1 added
[  112.071698][   T13] hsr_slave_0: left promiscuous mode
[  112.076308][   T13] hsr_slave_1: left promiscuous mode
[  112.078908][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  112.081909][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.087111][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  112.089909][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  112.109882][   T13] veth1_macvtap: left promiscuous mode
[  112.112091][   T13] veth0_macvtap: left promiscuous mode
[  112.114853][   T13] veth1_vlan: left promiscuous mode
[  112.116795][   T13] veth0_vlan: left promiscuous mode
[  112.607013][   T13] team0 (unregistering): Port device team_slave_1 removed
[  112.637065][   T13] team0 (unregistering): Port device team_slave_0 removed
[  112.645651][ T5220] Bluetooth: hci2: command tx timeout
[  113.072804][ T8762] batman_adv: batadv0: Adding interface: batadv_slave_0
[  113.075977][ T8762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.089200][ T8762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  113.121339][ T8762] batman_adv: batadv0: Adding interface: batadv_slave_1
[  113.146861][ T8762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.174838][ T8762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  113.202292][ T8845] SET target dimension over the limit!
[  113.248985][ T8847] ipt_REJECT: TCP_RESET invalid for non-tcp
[  113.277536][ T8762] hsr_slave_0: entered promiscuous mode
[  113.289707][ T8762] hsr_slave_1: entered promiscuous mode
[  113.292795][ T8762] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  113.304461][ T8762] Cannot create hsr debugfs directory
[  113.430917][ T8856] netlink: 'syz.0.1215': attribute type 1 has an invalid length.
[  113.539421][ T8866] netlink: 'syz.2.1218': attribute type 21 has an invalid length.
[  113.840337][ T8885] __nla_validate_parse: 1 callbacks suppressed
[  113.840352][ T8885] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1222'.
[  114.004171][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  114.426725][ T8925] syzkaller0: entered promiscuous mode
[  114.428473][ T8925] syzkaller0: entered allmulticast mode
[  114.691093][ T8909] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  114.702132][ T8762] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  114.724197][ T5220] Bluetooth: hci2: command tx timeout
[  114.762844][ T8762] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  114.800819][ T8762] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  114.838136][ T8762] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  114.919552][ T8762] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.940972][ T8762] 8021q: adding VLAN 0 to HW filter on device team0
[  114.950097][ T3607] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.952602][ T3607] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.962798][ T3607] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.965888][ T3607] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.122489][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1242'.
[  115.151108][ T8762] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.183789][ T8762] veth0_vlan: entered promiscuous mode
[  115.190488][ T8762] veth1_vlan: entered promiscuous mode
[  115.225048][ T8762] veth0_macvtap: entered promiscuous mode
[  115.231550][ T8762] veth1_macvtap: entered promiscuous mode
[  115.252374][ T8762] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.270743][ T8762] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.279996][ T8762] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.283637][ T8762] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.291880][ T8762] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.295825][ T8762] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.375792][ T3607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.378848][ T3607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.415981][ T3607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.418973][ T3607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.007980][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1261'.
[  117.172025][ T5838] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.111553][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  118.115230][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  118.119168][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  118.124811][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  118.129587][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  118.436965][ T9026] chnl_net:caif_netlink_parms(): no params data found
[  118.501002][ T9026] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.503764][ T9026] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.508335][ T9026] bridge_slave_0: entered allmulticast mode
[  118.511125][ T9026] bridge_slave_0: entered promiscuous mode
[  118.515056][ T9026] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.517274][ T9026] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.519544][ T9026] bridge_slave_1: entered allmulticast mode
[  118.522275][ T9026] bridge_slave_1: entered promiscuous mode
[  118.546072][ T9026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  118.550690][ T9026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  118.576480][ T9026] team0: Port device team_slave_0 added
[  118.580012][ T9026] team0: Port device team_slave_1 added
[  118.606649][ T9026] batman_adv: batadv0: Adding interface: batadv_slave_0
[  118.609066][ T9026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.618558][ T9026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  118.623776][ T9026] batman_adv: batadv0: Adding interface: batadv_slave_1
[  118.628852][ T9026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.639011][ T9026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  118.700280][ T9026] hsr_slave_0: entered promiscuous mode
[  118.702905][ T9026] hsr_slave_1: entered promiscuous mode
[  118.725362][ T9026] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  118.727824][ T9026] Cannot create hsr debugfs directory
[  119.047172][ T9072] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  119.298563][ T5838] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.351445][ T9095] netlink: 'syz.2.1293': attribute type 11 has an invalid length.
[  119.362825][ T9096] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1291'.
[  119.430226][ T5838] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.503061][ T5838] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.665916][ T5838] bridge_slave_1: left allmulticast mode
[  119.668278][ T5838] bridge_slave_1: left promiscuous mode
[  119.670714][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.690829][ T5838] bridge_slave_0: left allmulticast mode
[  119.692566][ T5838] bridge_slave_0: left promiscuous mode
[  119.695366][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.696323][ T9108] netlink: 'syz.2.1297': attribute type 1 has an invalid length.
[  119.700646][ T9108] netlink: 600 bytes leftover after parsing attributes in process `syz.2.1297'.
[  120.000130][ T5838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  120.008154][ T5838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  120.012515][ T5838] bond0 (unregistering): Released all slaves
[  120.164738][ T5220] Bluetooth: hci2: command tx timeout
[  120.262319][ T9118] 
[  120.263136][ T9118] ======================================================
[  120.265343][ T9118] WARNING: possible circular locking dependency detected
[  120.267495][ T9118] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  120.270808][ T9118] ------------------------------------------------------
[  120.273493][ T9118] syz.2.1300/9118 is trying to acquire lock:
[  120.275370][ T9118] ffff8881075e8988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  120.278719][ T9118] 
[  120.278719][ T9118] but task is already holding lock:
[  120.281010][ T9118] ffff8881075e8a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x94f/0x1930
[  120.283916][ T9118] 
[  120.283916][ T9118] which lock already depends on the new lock.
[  120.283916][ T9118] 
[  120.287120][ T9118] 
[  120.287120][ T9118] the existing dependency chain (in reverse order) is:
[  120.289959][ T9118] 
[  120.289959][ T9118] -> #2 (&nbd->config_lock){+.+.}-{4:4}:
[  120.292952][ T9118]        lock_acquire+0x120/0x360
[  120.294582][ T9118]        __mutex_lock+0x182/0xe80
[  120.296180][ T9118]        refcount_dec_and_mutex_lock+0x30/0xa0
[  120.298220][ T9118]        nbd_config_put+0x2c/0x790
[  120.300265][ T9118]        nbd_release+0xfe/0x140
[  120.302124][ T9118]        bdev_release+0x536/0x650
[  120.303856][ T9118]        blkdev_release+0x15/0x20
[  120.305915][ T9118]        __fput+0x44c/0xa70
[  120.307728][ T9118]        fput_close_sync+0x119/0x200
[  120.309792][ T9118]        __x64_sys_close+0x7f/0x110
[  120.311472][ T9118]        do_syscall_64+0xfa/0x3b0
[  120.313059][ T9118]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.315209][ T9118] 
[  120.315209][ T9118] -> #1 (&disk->open_mutex){+.+.}-{4:4}:
[  120.317714][ T9118]        lock_acquire+0x120/0x360
[  120.319463][ T9118]        __mutex_lock+0x182/0xe80
[  120.321047][ T9118]        __del_gendisk+0x129/0x9e0
[  120.322698][ T9118]        del_gendisk+0xe8/0x160
[  120.324269][ T9118]        nbd_dev_remove_work+0x47/0xe0
[  120.326012][ T9118]        process_scheduled_works+0xae1/0x17b0
[  120.327933][ T9118]        worker_thread+0x8a0/0xda0
[  120.329635][ T9118]        kthread+0x711/0x8a0
[  120.331055][ T9118]        ret_from_fork+0x3fc/0x770
[  120.332621][ T9118]        ret_from_fork_asm+0x1a/0x30
[  120.334215][ T9118] 
[  120.334215][ T9118] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  120.336789][ T9118]        validate_chain+0xb9b/0x2140
[  120.338454][ T9118]        __lock_acquire+0xab9/0xd20
[  120.340115][ T9118]        lock_acquire+0x120/0x360
[  120.341691][ T9118]        down_write+0x96/0x1f0
[  120.343174][ T9118]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  120.345080][ T9118]        nbd_start_device+0x16c/0xac0
[  120.346786][ T9118]        nbd_genl_connect+0x1250/0x1930
[  120.348500][ T9118]        genl_family_rcv_msg_doit+0x215/0x300
[  120.350361][ T9118]        genl_rcv_msg+0x60e/0x790
[  120.351868][ T9118]        netlink_rcv_skb+0x208/0x470
[  120.353523][ T9118]        genl_rcv+0x28/0x40
[  120.354929][ T9118]        netlink_unicast+0x75c/0x8e0
[  120.356580][ T9118]        netlink_sendmsg+0x805/0xb30
[  120.358183][ T9118]        __sock_sendmsg+0x21c/0x270
[  120.359798][ T9118]        ____sys_sendmsg+0x505/0x830
[  120.361427][ T9118]        ___sys_sendmsg+0x21f/0x2a0
[  120.363067][ T9118]        __x64_sys_sendmsg+0x19b/0x260
[  120.364742][ T9118]        do_syscall_64+0xfa/0x3b0
[  120.366309][ T9118]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.368262][ T9118] 
[  120.368262][ T9118] other info that might help us debug this:
[  120.368262][ T9118] 
[  120.371429][ T9118] Chain exists of:
[  120.371429][ T9118]   &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock
[  120.371429][ T9118] 
[  120.375622][ T9118]  Possible unsafe locking scenario:
[  120.375622][ T9118] 
[  120.377874][ T9118]        CPU0                    CPU1
[  120.379760][ T9118]        ----                    ----
[  120.381381][ T9118]   lock(&nbd->config_lock);
[  120.382806][ T9118]                                lock(&disk->open_mutex);
[  120.384967][ T9118]                                lock(&nbd->config_lock);
[  120.387107][ T9118]   lock(&set->update_nr_hwq_lock);
[  120.388762][ T9118] 
[  120.388762][ T9118]  *** DEADLOCK ***
[  120.388762][ T9118] 
[  120.391333][ T9118] 3 locks held by syz.2.1300/9118:
[  120.392923][ T9118]  #0: ffffffff8f583b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  120.395496][ T9118]  #1: ffffffff8f583988 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  120.398333][ T9118]  #2: ffff8881075e8a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x94f/0x1930
[  120.401563][ T9118] 
[  120.401563][ T9118] stack backtrace:
[  120.403457][ T9118] CPU: 0 UID: 0 PID: 9118 Comm: syz.2.1300 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  120.403469][ T9118] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  120.403475][ T9118] Call Trace:
[  120.403480][ T9118]  <TASK>
[  120.403486][ T9118]  dump_stack_lvl+0x189/0x250
[  120.403499][ T9118]  ? __pfx_dump_stack_lvl+0x10/0x10
[  120.403509][ T9118]  ? __pfx__printk+0x10/0x10
[  120.403520][ T9118]  ? print_lock_name+0xde/0x100
[  120.403531][ T9118]  print_circular_bug+0x2ee/0x310
[  120.403542][ T9118]  check_noncircular+0x134/0x160
[  120.403553][ T9118]  validate_chain+0xb9b/0x2140
[  120.403566][ T9118]  __lock_acquire+0xab9/0xd20
[  120.403575][ T9118]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  120.403584][ T9118]  lock_acquire+0x120/0x360
[  120.403591][ T9118]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  120.403599][ T9118]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  120.403609][ T9118]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  120.403620][ T9118]  down_write+0x96/0x1f0
[  120.403628][ T9118]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  120.403637][ T9118]  ? __pfx_down_write+0x10/0x10
[  120.403646][ T9118]  blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  120.403656][ T9118]  ? nbd_add_socket+0x688/0x9a0
[  120.403664][ T9118]  ? nbd_add_socket+0x688/0x9a0
[  120.403673][ T9118]  nbd_start_device+0x16c/0xac0
[  120.403681][ T9118]  ? __nla_parse+0x40/0x60
[  120.403689][ T9118]  nbd_genl_connect+0x1250/0x1930
[  120.403699][ T9118]  ? __pfx_nbd_genl_connect+0x10/0x10
[  120.403709][ T9118]  ? __nla_parse+0x40/0x60
[  120.403718][ T9118]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  120.403731][ T9118]  genl_family_rcv_msg_doit+0x215/0x300
[  120.403744][ T9118]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  120.403759][ T9118]  genl_rcv_msg+0x60e/0x790
[  120.403771][ T9118]  ? __pfx_genl_rcv_msg+0x10/0x10
[  120.403782][ T9118]  ? __pfx_nbd_genl_connect+0x10/0x10
[  120.403791][ T9118]  netlink_rcv_skb+0x208/0x470
[  120.403800][ T9118]  ? __pfx_genl_rcv_msg+0x10/0x10
[  120.403811][ T9118]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  120.403822][ T9118]  ? down_read+0x1ad/0x2e0
[  120.403830][ T9118]  genl_rcv+0x28/0x40
[  120.403840][ T9118]  netlink_unicast+0x75c/0x8e0
[  120.403850][ T9118]  netlink_sendmsg+0x805/0xb30
[  120.403861][ T9118]  ? __pfx_netlink_sendmsg+0x10/0x10
[  120.403870][ T9118]  ? aa_sock_msg_perm+0x94/0x160
[  120.403881][ T9118]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  120.403893][ T9118]  ? __pfx_netlink_sendmsg+0x10/0x10
[  120.403902][ T9118]  __sock_sendmsg+0x21c/0x270
[  120.403910][ T9118]  ____sys_sendmsg+0x505/0x830
[  120.403921][ T9118]  ? __pfx_____sys_sendmsg+0x10/0x10
[  120.403932][ T9118]  ? import_iovec+0x74/0xa0
[  120.403941][ T9118]  ___sys_sendmsg+0x21f/0x2a0
[  120.403950][ T9118]  ? __pfx____sys_sendmsg+0x10/0x10
[  120.403973][ T9118]  ? __fget_files+0x2a/0x420
[  120.403984][ T9118]  ? __fget_files+0x3a0/0x420
[  120.403996][ T9118]  __x64_sys_sendmsg+0x19b/0x260
[  120.404007][ T9118]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  120.404020][ T9118]  ? do_syscall_64+0xbe/0x3b0
[  120.404028][ T9118]  do_syscall_64+0xfa/0x3b0
[  120.404036][ T9118]  ? lockdep_hardirqs_on+0x9c/0x150
[  120.404047][ T9118]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.404055][ T9118]  ? exc_page_fault+0x9f/0xf0
[  120.404066][ T9118]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.404074][ T9118] RIP: 0033:0x7f6c1fb8e929
[  120.404083][ T9118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  120.404091][ T9118] RSP: 002b:00007f6c20a99038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  120.404100][ T9118] RAX: ffffffffffffffda RBX: 00007f6c1fdb5fa0 RCX: 00007f6c1fb8e929
[  120.404105][ T9118] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000007
[  120.404110][ T9118] RBP: 00007f6c1fc10b39 R08: 0000000000000000 R09: 0000000000000000
[  120.404115][ T9118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  120.404120][ T9118] R13: 0000000000000000 R14: 00007f6c1fdb5fa0 R15: 00007fffbb148d48
[  120.404128][ T9118]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
Connection to localhost closed by remote host.
[  120.707089][ T5838] hsr_slave_0: left promiscuous mode
[  120.709649][ T5838] hsr_slave_1: left promiscuous mode
[  120.712043][ T5838] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.715093][ T5838] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.724856][ T5838] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.727727][ T5838] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.757140][ T5838] veth1_macvtap: left promiscuous mode
[  120.759024][ T5838] veth0_macvtap: left promiscuous mode
[  120.760942][ T5838] veth1_vlan: left promiscuous mode
[  120.762813][ T5838] veth0_vlan: left promiscuous mode
[  120.953320][ T5838] team0 (unregistering): Port device team_slave_1 removed
[  120.978551][ T5838] team0 (unregistering): Port device team_slave_0 removed
[  121.109430][ T9121] bond0: (slave syz_tun): Releasing backup interface
[  121.111915][ T9121] syz_tun (unregistering): left promiscuous mode
[  121.411683][ T5838] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.449936][ T5838] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.489381][ T5838] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.530787][ T5838] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.585245][ T5838] bridge0: port 2(dummy0) entered disabled state
[  121.588762][ T5838] veth0_to_bridge: left allmulticast mode
[  121.591001][ T5838] veth0_to_bridge: left promiscuous mode
[  121.593314][ T5838] bridge0: port 1(veth0_to_bridge) entered disabled state
[  121.601053][ T5838] bridge_slave_1: left allmulticast mode
[  121.603166][ T5838] bridge_slave_1: left promiscuous mode
[  121.606809][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.610469][ T5838] bridge_slave_0: left allmulticast mode
[  121.612646][ T5838] bridge_slave_0: left promiscuous mode
[  121.615000][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.642818][ T5838] ip6gretap0 (unregistering): left allmulticast mode
[  121.812049][ T5838] team0: Port device bridge2 removed
[  121.923775][ T5838] bond0 (unregistering): Released all slaves
[  121.974546][ T5838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  121.978799][ T5838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  121.982899][ T5838] bond0 (unregistering): Released all slaves
[  122.057023][ T5838] tipc: Left network mode
[  122.212056][ T5838] mac80211_hwsim hwsim2 wlan0 (unregistering): left allmulticast mode
[  122.275875][ T5838] hsr_slave_0: left promiscuous mode
[  122.278431][ T5838] hsr_slave_1: left promiscuous mode
[  122.283394][ T5838] hsr_slave_0: left promiscuous mode
[  122.286925][ T5838] hsr_slave_1: left promiscuous mode
[  122.289391][ T5838] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.292596][ T5838] batman_adv: batadv0: Removing interface: batadv_slave_1
[  122.298643][ T5838] veth1_macvtap: left promiscuous mode
[  122.300946][ T5838] veth0_macvtap: left promiscuous mode
[  122.303261][ T5838] veth1_vlan: left promiscuous mode
[  122.306365][ T5838] veth0_vlan: left promiscuous mode
[  122.721145][ T5838] team0 (unregistering): Port device team_slave_1 removed
[  122.732953][ T5838] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
11:38:06  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000136b RDI=000000000000136c RBP=00000000000003f8 RSP=ffffc9000756e710
R8 =ffff888021520237 R9 =1ffff110042a4046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98cd R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6c20a996c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2ff1fffc CR3=000000011bc96000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 0000000000000000 XMM01=6f6c2f7261762f00 6469756e69676f6c
XMM02=0000ffffffffff00 0000000000000000 XMM03=0000000000000000 000000000000002f
XMM04=74772f676f6c2f72 61762f00706d7475 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0020202000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b4c210 RBX=ffff88813663b1c0 RCX=0000000000080000 RDX=ffffc900217fb000
RSI=00000000000039a7 RDI=00000000000039a8 RBP=ffffc9000604f740 RSP=ffffc9000604f5e0
R8 =ffffffff8fa1f3f7 R9 =1ffffffff1f43e7e R10=dffffc0000000000 R11=fffffbfff1f43e7f
R12=1ffff11009608385 R13=dffffc0000000000 R14=0000000000000000 R15=ffff88804b041c28
RIP=ffffffff81b4c1f9 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6c20a786c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6c20a77dc0 CR3=000000011bc96000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f6c1fd85478 00007f6c1fd85450 XMM03=00007f6c1fd85488 00007f6c1fd85480
XMM04=00007f6c208ed100 00007f6c1fd85440 XMM05=00007f6c1fd85458 00007f6c1fd854a0
XMM06=00007f6c1fd85498 00007f6c1fd85490 XMM07=00007f6c1fd85488 00007f6c1fd85480
XMM08=119ee24612b3d20b fb667a45d556aa66 XMM09=0000000000000000 00007f6c1fc11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
