last executing test programs:

999.792115ms ago: executing program 0 (id=2721):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x9, 0x14, 0x0, 0x70bd2b, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x9b56f0b53039426e, 0x0, 0x0, 0x0, {0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, @in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x0, @empty}}, @sadb_address={0x5, 0x6, 0x0, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}]}, 0xa0}}, 0x0)

940.004961ms ago: executing program 0 (id=2722):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0xffff0000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0)

938.788041ms ago: executing program 0 (id=2724):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={<r1=>0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000040)=0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={r1, 0x48, 0x30}, 0xc)

860.816364ms ago: executing program 0 (id=2725):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x20, 0x25, 0x109, 0x870bd22, 0xfffffffc, {0x2}, [@typed={0xc, 0x15b, 0x0, 0x0, @u64=0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0)

860.469417ms ago: executing program 0 (id=2726):
poll(&(0x7f00000000c0)=[{}], 0x1, 0xc0000000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x91d5c78542c436e8, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0)

327.194913ms ago: executing program 1 (id=2741):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef)

261.106569ms ago: executing program 2 (id=2744):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10)
sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000000a80)="0cf2e153a074a59ae15c1863473bbce6798a60e9000000000000000000", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)

212.035657ms ago: executing program 1 (id=2745):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x36}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x23}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}}, 0x0)

198.196878ms ago: executing program 2 (id=2746):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='c *:* rg'], 0xa)

131.876532ms ago: executing program 1 (id=2747):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x10, 0x3, "709c897c82b1095a67232d63"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0x9, 0x1, 'mark\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x855}, 0x24000840)

131.615108ms ago: executing program 2 (id=2748):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001900)=ANY=[@ANYBLOB="7802000016000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00$\x00\t\x00\b\x00'], 0x278}}, 0x0)

81.558678ms ago: executing program 1 (id=2749):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000002280)=[{{&(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}}, {{&(0x7f0000001f80)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000021c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0x63}]}}}], 0x18}}], 0x2, 0xf00)

80.96871ms ago: executing program 2 (id=2750):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)

80.101148ms ago: executing program 1 (id=2751):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x128, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xbfa6c1dfb8cc9f2d], 'wg2\x00', 'veth0_virt_wifi\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x8}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff000000, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff, 0xffffffff, 0xff], 'ip6gre0\x00', '\x00', {0xff}, {}, 0x0, 0x2, 0x4}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x8000002, 0x6, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c0001060e305900ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="80007f0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)

1.336277ms ago: executing program 2 (id=2752):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='net_prio.prioidx\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0)

863.247µs ago: executing program 1 (id=2753):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a0000000000000004000400"], 0x1c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100003040000", @ANYRES32=0x0, @ANYBLOB="000000008b2f00001c00128009000100626f6e64000000000c00028008"], 0x44}}, 0x0)

555.839µs ago: executing program 2 (id=2754):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}}, 0x0)

0s ago: executing program 0 (id=2755):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x7}, {}, {0x5, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x4000)
r2 = socket(0xa, 0x3, 0x87)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'gretap0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r6, 0x0, 0x8000000008010004, 0x2)
sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x170bd27, 0x0, {0xa, 0x0, 0x80, 0x1, 0x0, 0x0, 0xfd, 0xb, 0x2100}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x24}}, 0x200048d4)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa}, 0x78, r3})
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f0000000000))
r7 = socket(0x1, 0x803, 0x0)
sendmmsg(r7, &(0x7f0000008fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x101, 0x1}, {0x10, 0x1, 0x2}], 0x20}}], 0x1, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)={0x34, r9, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}]}, 0x34}}, 0x4c8d0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041)
close(0xffffffffffffffff)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="8001000010000100feffffbf000100000000000000000000000000000000000000000000000000000000ffffac1414bb000103944e230004000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d56c000000fe8000000000000000000000000000aa00000000000000000100000000000000020000000000000001000100000000001c25080000000000fffffffffffffffff8fffffffffffbff0100000000000000060000000000000006000000000000001f00000000000000ff0100000000000000000000fcffffff000100002abd7000043500000a0000c25f00000000000000480003006c7a6a6800000000000000000000003d0b0000000000000000000000000000000000000036000000000000000000000000000000000000000000000000000000006c7361323000"/293], 0x180}, 0x1, 0x0, 0x0, 0x4001}, 0x10)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0x24004040)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:25375' (ED25519) to the list of known hosts.
syzkaller login: [   56.777092][ T5565] cgroup: Unknown subsys name 'net'
[   56.843183][ T5565] cgroup: Unknown subsys name 'cpuset'
[   56.846968][ T5565] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.457816][ T5565] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   68.406266][ T5649] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   68.409791][ T5649] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   68.413332][ T5649] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   68.416856][ T5649] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   68.419585][ T5649] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   68.563375][ T5648] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   70.465950][ T5649] Bluetooth: hci0: command tx timeout
[   70.628448][   T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.634609][   T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.639973][   T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.645396][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.654256][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.705630][ T5649] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.710901][ T5649] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.715914][ T5649] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.721724][ T5649] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.725387][ T5649] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.784926][   T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.792691][   T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.796480][   T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.801260][   T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.807811][   T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.651369][ T5659] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.655140][ T5659] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.657774][ T5659] bridge_slave_0: entered allmulticast mode
[   71.660729][ T5659] bridge_slave_0: entered promiscuous mode
[   71.687456][ T5659] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.689761][ T5659] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.692135][ T5659] bridge_slave_1: entered allmulticast mode
[   71.695592][ T5659] bridge_slave_1: entered promiscuous mode
[   71.748926][ T5662] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.751878][ T5662] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.754083][ T5662] bridge_slave_0: entered allmulticast mode
[   71.756656][ T5662] bridge_slave_0: entered promiscuous mode
[   71.772993][ T5662] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.775884][ T5662] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.778370][ T5662] bridge_slave_1: entered allmulticast mode
[   71.782676][ T5662] bridge_slave_1: entered promiscuous mode
[   71.789101][ T5659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.813874][ T5659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.859671][ T5667] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.864050][ T5667] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.866866][ T5667] bridge_slave_0: entered allmulticast mode
[   71.870634][ T5667] bridge_slave_0: entered promiscuous mode
[   71.877696][ T5662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.884225][ T5659] team0: Port device team_slave_0 added
[   71.888201][ T5659] team0: Port device team_slave_1 added
[   71.890683][ T5667] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.893556][ T5667] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.896306][ T5667] bridge_slave_1: entered allmulticast mode
[   71.901302][ T5667] bridge_slave_1: entered promiscuous mode
[   71.915074][ T5662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.967350][ T5667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.982615][ T5659] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.985450][ T5659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.994960][ T5659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.004079][ T5667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.008538][ T5662] team0: Port device team_slave_0 added
[   72.011772][ T5659] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.014518][ T5659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.023827][ T5659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.037679][ T5662] team0: Port device team_slave_1 added
[   72.075143][ T5667] team0: Port device team_slave_0 added
[   72.080344][ T5667] team0: Port device team_slave_1 added
[   72.082897][ T5662] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.085335][ T5662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.093891][ T5662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.116285][ T5662] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.118963][ T5662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.127226][ T5662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.161092][ T5659] hsr_slave_0: entered promiscuous mode
[   72.163893][ T5659] hsr_slave_1: entered promiscuous mode
[   72.168586][ T5667] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.171629][ T5667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.181389][ T5667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.209208][ T5667] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.212289][ T5667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.222120][ T5667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.230846][ T5662] hsr_slave_0: entered promiscuous mode
[   72.233565][ T5662] hsr_slave_1: entered promiscuous mode
[   72.236189][ T5662] debugfs: 'hsr0' already exists in 'hsr'
[   72.238433][ T5662] Cannot create hsr debugfs directory
[   72.304413][ T5667] hsr_slave_0: entered promiscuous mode
[   72.307540][ T5667] hsr_slave_1: entered promiscuous mode
[   72.310200][ T5667] debugfs: 'hsr0' already exists in 'hsr'
[   72.312604][ T5667] Cannot create hsr debugfs directory
[   72.622999][ T5662] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   72.636458][ T5662] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   72.639398][ T5662] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   72.644976][ T5662] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   72.648523][ T5662] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.653579][ T5662] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   72.657111][ T5662] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.663537][ T5662] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   72.701361][   T53] Bluetooth: hci1: command tx timeout
[   72.750883][ T5659] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.756394][ T5659] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   72.760219][ T5659] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.767808][ T5659] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   72.776843][ T5659] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.782662][   T53] Bluetooth: hci0: command tx timeout
[   72.789784][ T5659] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   72.793747][ T5659] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.799495][ T5659] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   72.860823][   T53] Bluetooth: hci2: command tx timeout
[   72.892440][ T5667] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.898511][ T5667] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   72.901541][ T5667] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.908113][ T5667] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   72.912061][ T5667] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.918065][ T5667] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   72.928350][ T5667] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.935499][ T5667] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   72.975939][ T5662] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.015290][ T5662] 8021q: adding VLAN 0 to HW filter on device team0
[   73.029885][ T3354] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.032873][ T3354] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.053389][ T3354] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.056242][ T3354] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.074466][ T5659] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.124988][ T5659] 8021q: adding VLAN 0 to HW filter on device team0
[   73.142614][ T3354] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.144840][ T3354] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.156677][ T5667] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.164866][ T3354] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.167523][ T3354] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.225491][ T5667] 8021q: adding VLAN 0 to HW filter on device team0
[   73.246182][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.248399][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.254870][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.257722][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.654866][ T5662] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.747797][ T5662] veth0_vlan: entered promiscuous mode
[   73.762210][ T5659] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.767191][ T5662] veth1_vlan: entered promiscuous mode
[   73.818226][ T5659] veth0_vlan: entered promiscuous mode
[   73.829577][ T5659] veth1_vlan: entered promiscuous mode
[   73.840356][ T5662] veth0_macvtap: entered promiscuous mode
[   73.853127][ T5662] veth1_macvtap: entered promiscuous mode
[   73.886669][ T5667] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.910706][ T5659] veth0_macvtap: entered promiscuous mode
[   73.917598][ T5662] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.925903][ T5662] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.938072][ T5659] veth1_macvtap: entered promiscuous mode
[   73.959438][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.964830][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.972322][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.975892][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.043023][ T5659] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.072953][ T5667] veth0_vlan: entered promiscuous mode
[   74.079497][ T5659] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.115812][ T5718] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.117680][   T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.124859][   T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.131148][ T5667] veth1_vlan: entered promiscuous mode
[   74.135439][ T5718] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.139169][ T5718] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.163387][ T5718] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.206537][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.209792][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.283848][ T3354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.288554][ T5667] veth0_macvtap: entered promiscuous mode
[   74.293439][ T3354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.328252][ T5667] veth1_macvtap: entered promiscuous mode
[   74.330902][ T5766] netlink: 40 bytes leftover after parsing attributes in process `syz.1.19'.
[   74.367401][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.376502][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.385905][ T5667] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.406360][ T5667] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.439088][ T5718] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.443653][ T5718] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.447494][ T5718] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.463557][ T5718] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.613745][ T5774] netlink: 176 bytes leftover after parsing attributes in process `syz.1.22'.
[   74.621607][ T3391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.625246][ T3391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.631939][ T5774] netlink: 'syz.1.22': attribute type 1 has an invalid length.
[   74.699254][   T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.706335][   T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.781215][   T53] Bluetooth: hci1: command tx timeout
[   74.861784][   T53] Bluetooth: hci0: command tx timeout
[   74.942248][   T53] Bluetooth: hci2: command tx timeout
[   75.326020][ T5822] ip6gretap1: entered allmulticast mode
[   75.585034][ T5833] syzkaller0: entered promiscuous mode
[   75.590593][ T5833] syzkaller0: entered allmulticast mode
[   75.613870][ T5839] Zero length message leads to an empty skb
[   76.108009][ T5868] warning: `syz.0.63' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   76.860638][ T5649] Bluetooth: hci1: command tx timeout
[   76.944737][ T5649] Bluetooth: hci0: command tx timeout
[   76.948346][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[   76.955097][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[   77.021788][ T5649] Bluetooth: hci2: command tx timeout
[   77.237860][ T5916] syz.1.85 uses obsolete (PF_INET,SOCK_PACKET)
[   77.832721][ T5943] syzkaller0: entered promiscuous mode
[   77.843740][ T5943] syzkaller0: entered allmulticast mode
[   77.955052][ T5953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.105'.
[   78.025178][ T5955] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   78.041499][ T5955] bond1 (unregistering): Released all slaves
[   78.684952][ T5998] Driver unsupported XDP return value 0 on prog  (id 15) dev N/A, expect packet loss!
[   78.776802][ T6005] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048)
[   78.944990][ T5649] Bluetooth: hci1: command tx timeout
[   79.002303][ T6015] netlink: 28 bytes leftover after parsing attributes in process `syz.0.133'.
[   79.020891][ T5649] Bluetooth: hci0: command tx timeout
[   79.101223][ T5649] Bluetooth: hci2: command 0x0419 tx timeout
[   79.359517][ T6029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.139'.
[   79.496393][ T6040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.144'.
[   79.544762][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.145'.
[   81.180843][   T53] Bluetooth: hci2: command 0x0419 tx timeout
[   81.208855][ T6111] syzkaller0: entered promiscuous mode
[   81.215212][ T6111] syzkaller0: entered allmulticast mode
[   82.214757][ T6165] netlink: 'syz.1.201': attribute type 4 has an invalid length.
[   82.344532][ T6167] netlink: 24 bytes leftover after parsing attributes in process `syz.1.202'.
[   82.780841][ T6189] syzkaller0: entered promiscuous mode
[   82.784875][ T6189] syzkaller0: entered allmulticast mode
[   83.010973][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'.
[   83.188677][ T6205] bridge_slave_0: left allmulticast mode
[   83.193449][ T6205] bridge_slave_0: left promiscuous mode
[   83.200034][ T6205] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.497712][ T6205] bridge_slave_1: left allmulticast mode
[   83.499987][ T6205] bridge_slave_1: left promiscuous mode
[   83.512102][ T6205] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.838578][ T6205] bond0: (slave bond_slave_0): Releasing backup interface
[   83.849057][ T6205] bond0: (slave bond_slave_1): Releasing backup interface
[   83.865849][ T6205] team0: Port device team_slave_0 removed
[   83.878447][ T6205] team0: Port device team_slave_1 removed
[   83.883605][ T6205] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.889496][ T6205] batman_adv: batadv0: Removing interface: batadv_slave_0
[   83.912408][ T6205] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.918632][ T6205] batman_adv: batadv0: Removing interface: batadv_slave_1
[   83.931167][ T6205] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   83.967655][ T6223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.223'.
[   84.148765][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'.
[   84.345883][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.232'.
[   84.703516][ T6268] netlink: 36 bytes leftover after parsing attributes in process `syz.1.244'.
[   84.888835][ T6274] netlink: 'syz.0.247': attribute type 9 has an invalid length.
[   84.892738][ T6274] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.247'.
[   85.007419][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'.
[   85.014907][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'.
[   85.523523][ T6302] netlink: 48 bytes leftover after parsing attributes in process `syz.0.261'.
[   85.748360][ T6322] tipc: Started in network mode
[   85.757249][ T6322] tipc: Node identity ac14140f, cluster identity 4711
[   85.760083][ T6322] tipc: New replicast peer: 172.20.20.170
[   85.766042][ T6322] tipc: Enabled bearer <udp:syz2>, priority 10
[   85.910384][ T6335] netlink: 36 bytes leftover after parsing attributes in process `syz.0.273'.
[   85.952890][ T6338] netlink: 'syz.1.274': attribute type 25 has an invalid length.
[   85.955443][ T6338] netlink: 'syz.1.274': attribute type 3 has an invalid length.
[   85.958286][ T6338] netlink: 132 bytes leftover after parsing attributes in process `syz.1.274'.
[   86.003304][ T6343] openvswitch: netlink: Actions may not be safe on all matching packets
[   86.050639][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.277'.
[   86.080714][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.277'.
[   86.091912][ T6345] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   86.212892][ T6359] netlink: 240 bytes leftover after parsing attributes in process `syz.1.284'.
[   86.350160][ T6364] xt_nfacct: accounting object `syz0' does not exist
[   86.762572][ T5764] tipc: Node number set to 2886997007
[   87.179692][ T6382] netlink: 'syz.0.294': attribute type 1 has an invalid length.
[   87.203726][  T798] cfg80211: failed to load regulatory.db
[   88.194184][ T6426] netlink: 'syz.1.313': attribute type 1 has an invalid length.
[   88.216467][ T6426] bond1: entered promiscuous mode
[   88.220130][ T6426] 8021q: adding VLAN 0 to HW filter on device bond1
[   88.240231][ T6426] 8021q: adding VLAN 0 to HW filter on device bond1
[   88.243186][ T6426] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address
[   88.246355][ T6426] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[   88.253362][ T6426] bond1: (slave ip6gre1): making interface the new active one
[   88.255712][ T6426] ip6gre1: entered promiscuous mode
[   88.258421][ T6426] bond1: (slave ip6gre1): Enslaving as an active interface with an up link
[   88.314349][ T6429] The dccp option matching is deprecated and scheduled to be removed in 2027.
[   88.314349][ T6429] Please contact the netfilter-devel mailing list or update your nftables rules.
[   89.031682][ T6465] syzkaller0: entered promiscuous mode
[   89.033399][ T6465] syzkaller0: entered allmulticast mode
[   89.718022][ T6503] syzkaller0: entered promiscuous mode
[   89.725910][ T6503] syzkaller0: entered allmulticast mode
[   90.143165][ T6526] __nla_validate_parse: 4 callbacks suppressed
[   90.143184][ T6526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.360'.
[   90.548709][ T6538] syzkaller1: tun_chr_ioctl cmd 1074025677
[   90.551261][ T6538] syzkaller1: Linktype set failed because interface is up
[   90.996090][ T6569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.376'.
[   91.111128][ T6572] syzkaller0: entered promiscuous mode
[   91.119397][ T6572] syzkaller0: entered allmulticast mode
[   91.356040][ T6589] syzkaller0: entered promiscuous mode
[   91.369547][ T6589] syzkaller0: entered allmulticast mode
[   91.801958][ T6617] netlink: 16 bytes leftover after parsing attributes in process `syz.1.399'.
[   92.655500][ T6619] syz.1.400 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   92.676316][ T6619] CPU: 0 UID: 0 PID: 6619 Comm: syz.1.400 Not tainted syzkaller #0 PREEMPT(full) 
[   92.676332][ T6619] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   92.676339][ T6619] Call Trace:
[   92.676344][ T6619]  <TASK>
[   92.676349][ T6619]  dump_stack_lvl+0xe8/0x150
[   92.676367][ T6619]  dump_header+0xd3/0x4c0
[   92.676382][ T6619]  oom_kill_process+0x3ab/0x970
[   92.676397][ T6619]  out_of_memory+0x106c/0x1410
[   92.676406][ T6619]  ? try_charge_memcg+0xbb9/0x1570
[   92.676423][ T6619]  ? __pfx___mutex_lock+0x10/0x10
[   92.676439][ T6619]  ? __pfx_out_of_memory+0x10/0x10
[   92.676448][ T6619]  ? do_raw_spin_unlock+0x4d/0x210
[   92.676464][ T6619]  try_charge_memcg+0xc77/0x1570
[   92.676483][ T6619]  ? __pfx_try_charge_memcg+0x10/0x10
[   92.676493][ T6619]  ? percpu_ref_tryget+0x15/0x180
[   92.676513][ T6619]  ? charge_memcg+0x23/0x2b0
[   92.676525][ T6619]  charge_memcg+0x1a2/0x2b0
[   92.676537][ T6619]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[   92.676547][ T6619]  mem_cgroup_swapin_charge_folio+0x262/0x390
[   92.676559][ T6619]  __swap_cache_prepare_and_add+0xdc/0x700
[   92.676572][ T6619]  ? page_rmappable_folio+0x9a/0x170
[   92.676589][ T6619]  swap_cache_alloc_folio+0xf1/0x240
[   92.676629][ T6619]  swap_cluster_readahead+0x355/0x670
[   92.676641][ T6619]  ? __pfx_swap_cluster_readahead+0x10/0x10
[   92.676655][ T6619]  ? hrtimer_reprogram+0x2d9/0x460
[   92.676666][ T6619]  ? get_vma_policy+0x27b/0x3c0
[   92.676679][ T6619]  swapin_readahead+0x196/0xc50
[   92.676690][ T6619]  ? swap_table_get+0x1e/0x260
[   92.676701][ T6619]  ? __pfx_swapin_readahead+0x10/0x10
[   92.676711][ T6619]  ? swap_table_get+0x1e/0x260
[   92.676718][ T6619]  ? swap_table_get+0x1e/0x260
[   92.676726][ T6619]  ? swap_table_get+0x1e/0x260
[   92.676734][ T6619]  ? swap_table_get+0x216/0x260
[   92.676743][ T6619]  ? swap_cache_get_folio+0x2e4/0x2f0
[   92.676755][ T6619]  do_swap_page+0x555/0x5120
[   92.676768][ T6619]  ? __pte_offset_map+0x29/0x240
[   92.676778][ T6619]  ? __pte_offset_map+0x29/0x240
[   92.676791][ T6619]  ? do_swap_page+0x128/0x5120
[   92.676799][ T6619]  ? __pfx_do_swap_page+0x10/0x10
[   92.676807][ T6619]  ? __pte_offset_map+0x1ae/0x240
[   92.676817][ T6619]  ? pte_offset_map_rw_nolock+0xea/0x160
[   92.676828][ T6619]  handle_mm_fault+0x12d2/0x3170
[   92.676844][ T6619]  ? handle_mm_fault+0xee/0x3170
[   92.676857][ T6619]  ? __pfx_handle_mm_fault+0x10/0x10
[   92.676865][ T6619]  ? lock_vma_under_rcu+0x45a/0x500
[   92.676886][ T6619]  do_user_addr_fault+0xa73/0x1340
[   92.676900][ T6619]  ? rcu_is_watching+0x15/0xb0
[   92.676909][ T6619]  ? trace_page_fault_user+0x84/0x1e0
[   92.676919][ T6619]  exc_page_fault+0x6a/0xc0
[   92.676930][ T6619]  asm_exc_page_fault+0x26/0x30
[   92.676939][ T6619] RIP: 0033:0x7f3e17b57f14
[   92.676949][ T6619] Code: 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 80 3d ae 67 29 00 00 75 44 a8 01 75 40 a8 10 75 3c <41> 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20
[   92.676956][ T6619] RSP: 002b:00007fff3f57e2f0 EFLAGS: 00010246
[   92.676966][ T6619] RAX: 0000000000000000 RBX: 0000555580605500 RCX: 0000000000000000
[   92.676971][ T6619] RDX: 00007fff3f57e330 RSI: 0000000000000000 RDI: 0000000000000000
[   92.676975][ T6619] RBP: 00007f3e17e17da0 R08: 0000000000000000 R09: 0000000000000000
[   92.676980][ T6619] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000001698e
[   92.676985][ T6619] R13: 00007f3e17e1609c R14: 00000000000166b9 R15: 00007f3e17e16090
[   92.676998][ T6619]  </TASK>
[   92.677001][ T6619] memory: usage 307200kB, limit 307200kB, failcnt 196
[   92.835710][ T6619] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0
[   92.844964][ T6619] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0
[   92.857237][ T6619] Memory cgroup stats for /syz1:
[   92.857534][ T6619] cache 0
[   92.867120][ T6619] rss 0
[   92.869225][ T6619] rss_huge 0
[   92.870213][ T6619] shmem 0
[   92.873338][ T6619] mapped_file 0
[   92.874710][ T6619] dirty 0
[   92.875702][ T6619] writeback 0
[   92.876770][ T6619] workingset_refault_anon 5
[   92.878506][ T6619] workingset_refault_file 0
[   92.880325][ T6619] swap 188416
[   92.882671][ T6619] swapcached 229376
[   92.887340][ T6619] pgpgin 9606
[   92.891784][ T6619] pgpgout 9603
[   92.900668][ T6619] pgfault 26790
[   92.902069][ T6619] pgmajfault 3
[   92.908443][ T6619] inactive_anon 0
[   92.909562][ T6619] active_anon 12288
[   92.914328][ T6619] inactive_file 0
[   92.917684][ T6619] active_file 0
[   92.925633][ T6619] unevictable 0
[   92.926728][ T6619] hierarchical_memory_limit 314572800
[   92.933316][ T6619] hierarchical_memsw_limit 9223372036854771712
[   92.938718][ T6619] total_cache 0
[   92.944419][ T6619] total_rss 0
[   92.945663][ T6619] total_rss_huge 0
[   92.950251][ T6619] total_shmem 0
[   92.953826][ T6619] total_mapped_file 0
[   92.956738][ T6619] total_dirty 0
[   92.957760][ T6619] total_writeback 0
[   92.960880][ T6619] total_workingset_refault_anon 5
[   92.963797][ T6619] total_workingset_refault_file 0
[   92.970630][ T6619] total_swap 188416
[   92.972403][ T6619] total_swapcached 229376
[   92.975854][ T6619] total_pgpgin 9606
[   92.977280][ T6619] total_pgpgout 9603
[   92.982548][ T6619] total_pgfault 26790
[   92.984441][ T6619] total_pgmajfault 3
[   92.985875][ T6619] total_inactive_anon 0
[   92.991142][ T6619] total_active_anon 12288
[   92.993963][ T6619] total_inactive_file 0
[   92.997450][ T6619] total_active_file 0
[   93.001005][ T6619] total_unevictable 0
[   93.002305][ T6619] anon_cost 0
[   93.009747][ T6619] file_cost 0
[   93.013427][ T6619] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.400,pid=6619,uid=0
[   93.030961][ T6619] Memory cgroup out of memory: Killed process 6619 (syz.1.400) total-vm:104340kB, anon-rss:1244kB, file-rss:22292kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[   93.056860][ T6643] netlink: 16 bytes leftover after parsing attributes in process `syz.0.410'.
[   93.215901][ T6647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.412'.
[   93.628920][ T6662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.419'.
[   94.721483][ T6711] netlink: 'syz.0.442': attribute type 3 has an invalid length.
[   94.773556][ T6711] block nbd0: NBD_DISCONNECT
[   94.817844][ T6711] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[   94.826263][ T6711] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[   94.833099][ T6711] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[   94.865318][ T6711] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   94.875176][ T6711] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   95.047968][ T6728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.450'.
[   95.375716][ T6754] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.456'.
[   95.723029][ T6777] netlink: 56 bytes leftover after parsing attributes in process `syz.1.463'.
[   96.177861][ T6809] xt_hashlimit: max too large, truncated to 1048576
[   96.182429][ T6809] xt_hashlimit: overflow, try lower: 2/0
[   96.300036][ T6817] tipc: Started in network mode
[   96.302249][ T6817] tipc: Node identity 8ab80a2fc0b6, cluster identity 4711
[   96.305301][ T6817] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.352461][ T6817] syzkaller0: entered promiscuous mode
[   96.354742][ T6817] syzkaller0: entered allmulticast mode
[   96.357586][ T6817] tipc: Resetting bearer <eth:syzkaller0>
[   96.372887][ T6816] tipc: Resetting bearer <eth:syzkaller0>
[   96.842361][ T6828] openvswitch: netlink: IP tunnel dst address not specified
[   97.353054][ T6844] netlink: 68 bytes leftover after parsing attributes in process `syz.1.482'.
[   97.861137][ T6816] tipc: Disabling bearer <eth:syzkaller0>
[   97.876916][  T812] tipc: Node number set to 1242434095
[   98.023405][ T6848] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.026090][ T6848] syzkaller0: entered promiscuous mode
[   98.027932][ T6848] syzkaller0: entered allmulticast mode
[   98.052462][ T6848] tipc: Resetting bearer <eth:syzkaller0>
[   98.075315][ T6847] tipc: Resetting bearer <eth:syzkaller0>
[   98.101748][ T6847] tipc: Disabling bearer <eth:syzkaller0>
[   98.221823][ T6860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.492'.
[   98.455035][ T6872] syzkaller0: entered promiscuous mode
[   98.456791][ T6872] syzkaller0: entered allmulticast mode
[   98.712463][ T5711] IPVS: starting estimator thread 0...
[   98.748830][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.504'.
[   98.762625][ T6891] netlink: 28 bytes leftover after parsing attributes in process `syz.1.504'.
[   98.773381][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'.
[   98.785242][ T6893] No such timeout policy "syz1"
[   98.810566][ T6889] IPVS: using max 65 ests per chain, 156000 per kthread
[   99.045479][ T6904] syzkaller1: entered promiscuous mode
[   99.048005][ T6904] syzkaller1: entered allmulticast mode
[   99.592908][ T6915] openvswitch: netlink: Message has 1 unknown bytes.
[   99.595615][ T6915] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.924744][ T6930] syzkaller1: entered promiscuous mode
[   99.927117][ T6930] syzkaller1: entered allmulticast mode
[  100.242618][ T6945] netlink: 'syz.2.527': attribute type 4 has an invalid length.
[  100.249733][ T6945] netlink: 'syz.2.527': attribute type 4 has an invalid length.
[  100.428813][ T6953] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.535884][ T6957] batman_adv: batadv0: Adding interface: macvtap1
[  100.541354][ T6957] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  100.562563][ T6957] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  101.108034][ T6996] netlink: 'syz.0.550': attribute type 1 has an invalid length.
[  101.116809][ T6996] sctp: [Deprecated]: syz.0.550 (pid 6996) Use of struct sctp_assoc_value in delayed_ack socket option.
[  101.116809][ T6996] Use struct sctp_sack_info instead
[  101.487694][ T7012] netlink: 24 bytes leftover after parsing attributes in process `syz.1.558'.
[  101.546629][ T7014] syzkaller0: entered promiscuous mode
[  101.548554][ T7014] syzkaller0: entered allmulticast mode
[  101.559745][ T7014] tipc: Started in network mode
[  101.562338][ T7014] tipc: Node identity fabd96a8c1b9, cluster identity 4711
[  101.565296][ T7014] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.572996][ T7013] tipc: Resetting bearer <eth:syzkaller0>
[  101.599095][ T7013] tipc: Disabling bearer <eth:syzkaller0>
[  101.714106][ T7024] netlink: 36 bytes leftover after parsing attributes in process `syz.1.564'.
[  102.246422][ T7060] netlink: 'syz.1.581': attribute type 1 has an invalid length.
[  102.283514][ T7060] 8021q: adding VLAN 0 to HW filter on device bond2
[  102.329328][ T7060] bond2: (slave ip6gretap2): making interface the new active one
[  102.348977][ T7060] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link
[  102.570654][ T7077] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.655951][ T7077] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.726051][ T7086] Bluetooth: MGMT ver 1.23
[  102.750598][ T7077] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.882267][ T7077] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.084905][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.137170][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.189618][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.212735][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.192958][ T7180] netlink: 'syz.2.631': attribute type 21 has an invalid length.
[  104.199933][ T7180] netlink: 'syz.2.631': attribute type 7 has an invalid length.
[  105.017822][ T7223] netlink: 44 bytes leftover after parsing attributes in process `syz.0.651'.
[  105.098670][ T7229] netlink: 'syz.0.653': attribute type 1 has an invalid length.
[  105.111292][ T7229] netlink: 'syz.0.653': attribute type 4 has an invalid length.
[  105.115805][ T7229] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.653'.
[  105.977192][ T7253] netlink: 128 bytes leftover after parsing attributes in process `syz.0.662'.
[  106.489900][ T7243] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  106.838303][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.676'.
[  107.015117][ T7293] netlink: 36 bytes leftover after parsing attributes in process `syz.0.679'.
[  107.066553][ T7295] netlink: 'syz.1.680': attribute type 13 has an invalid length.
[  108.123863][ T7312] netlink: 256 bytes leftover after parsing attributes in process `syz.0.685'.
[  108.130819][ T7312] unsupported nlmsg_type 40
[  108.138050][ T7314] netlink: 'syz.1.686': attribute type 1 has an invalid length.
[  108.150186][ T7314] netlink: 'syz.1.686': attribute type 4 has an invalid length.
[  108.163463][ T7314] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.686'.
[  108.168945][ T7314] netlink: 'syz.1.686': attribute type 1 has an invalid length.
[  108.171481][ T7314] netlink: 'syz.1.686': attribute type 4 has an invalid length.
[  108.173740][ T7314] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.686'.
[  108.178606][ T7316] : renamed from bond_slave_0 (while UP)
[  108.258408][ T7320] netlink: 16 bytes leftover after parsing attributes in process `syz.0.689'.
[  108.478385][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'.
[  108.814251][ T7356] syzkaller0: entered promiscuous mode
[  108.816653][ T7356] syzkaller0: entered allmulticast mode
[  109.399332][ T7360] netlink: 24 bytes leftover after parsing attributes in process `syz.0.708'.
[  110.142025][ T7394] bond2: entered allmulticast mode
[  110.144756][ T7394] 8021q: adding VLAN 0 to HW filter on device bond2
[  111.047590][ T7416] netlink: 76 bytes leftover after parsing attributes in process `syz.1.733'.
[  111.446598][ T7442] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  111.450753][ T7442] IPv6: NLM_F_CREATE should be set when creating new route
[  111.452996][ T7442] IPv6: NLM_F_CREATE should be set when creating new route
[  111.455190][ T7442] IPv6: NLM_F_CREATE should be set when creating new route
[  111.461754][ T7440] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048)
[  111.470404][ T7442] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  111.508454][ T7446] netlink: 16 bytes leftover after parsing attributes in process `syz.1.747'.
[  111.539769][ T7446] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  112.170577][ T7486] syzkaller0: entered promiscuous mode
[  112.174692][ T7486] syzkaller0: entered allmulticast mode
[  112.193623][   T33] audit: type=1804 audit(1778556136.981:2): pid=7488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.764" name="/newroot/302/cgroup.controllers" dev="tmpfs" ino=1535 res=1 errno=0
[  112.201128][   T33] audit: type=1800 audit(1778556136.981:3): pid=7488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.764" name="cgroup.controllers" dev="tmpfs" ino=1535 res=0 errno=0
[  112.335727][ T7481] netlink: 'syz.0.761': attribute type 10 has an invalid length.
[  112.342701][ T7481] ipvlan0: entered allmulticast mode
[  112.344954][ T7481] veth0_vlan: entered allmulticast mode
[  112.358470][ T7481] team0: Device ipvlan0 failed to register rx_handler
[  112.369912][ T7495] netlink: 'syz.1.766': attribute type 1 has an invalid length.
[  112.380752][ T7495] netlink: 224 bytes leftover after parsing attributes in process `syz.1.766'.
[  112.604575][ T7500] sctp: [Deprecated]: syz.1.769 (pid 7500) Use of int in max_burst socket option.
[  112.604575][ T7500] Use struct sctp_assoc_value instead
[  114.366407][ T7571] af_packet: tpacket_rcv: packet too big, clamped from 29 to 4294967272. macoff=96
[  114.515300][ T7583] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.317465][ T7633] netlink: 'syz.1.824': attribute type 6 has an invalid length.
[  115.320382][ T7633] netlink: 3936 bytes leftover after parsing attributes in process `syz.1.824'.
[  115.325473][ T7633] netlink: 'syz.1.824': attribute type 1 has an invalid length.
[  115.328837][ T7633] block nbd0: Unsupported socket: should be TCP or UNIX.
[  115.385158][ T7637] veth0_macvtap: Caught tx_queue_len zero misconfig
[  115.799852][ T7665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.838'.
[  115.808889][ T7665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.838'.
[  116.281316][ T7679] netlink: 16 bytes leftover after parsing attributes in process `syz.1.845'.
[  116.578481][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.852'.
[  116.958396][ T7714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.858'.
[  117.254625][ T7727] netlink: 'syz.2.865': attribute type 1 has an invalid length.
[  117.257930][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.865'.
[  117.266830][ T7727] netlink: 'syz.2.865': attribute type 1 has an invalid length.
[  117.301282][ T7727] syzkaller1: entered promiscuous mode
[  117.303658][ T7727] syzkaller1: entered allmulticast mode
[  117.824626][ T7735] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  118.053433][ T7742] xt_CT: You must specify a L4 protocol and not use inversions on it
[  118.107930][ T7742] netlink: 'syz.2.868': attribute type 21 has an invalid length.
[  118.376452][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.876'.
[  118.380300][ T7764] bond0: Unable to set down delay as MII monitoring is disabled
[  118.411466][ T7768] netlink: 149 bytes leftover after parsing attributes in process `syz.2.878'.
[  118.487114][ T7774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.880'.
[  118.928362][ T7805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  119.847291][ T7852] netlink: 20 bytes leftover after parsing attributes in process `syz.1.912'.
[  119.866633][ T7854] netlink: 24 bytes leftover after parsing attributes in process `syz.0.913'.
[  119.895034][ T7856] netlink: 'syz.2.914': attribute type 12 has an invalid length.
[  120.390660][ T7878] syzkaller0: entered promiscuous mode
[  120.393295][ T7878] syzkaller0: entered allmulticast mode
[  120.426735][ T7882] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.926'.
[  120.753296][ T7898] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  120.991608][ T7915] netlink: 40 bytes leftover after parsing attributes in process `syz.0.941'.
[  121.073290][ T7922] netlink: 'syz.0.945': attribute type 3 has an invalid length.
[  121.075901][ T7922] netlink: 'syz.0.945': attribute type 1 has an invalid length.
[  121.078904][ T7922] netlink: 224 bytes leftover after parsing attributes in process `syz.0.945'.
[  121.083659][ T7922] NCSI netlink: No device for ifindex 36
[  121.364480][ T7942] syzkaller0: entered promiscuous mode
[  121.366794][ T7942] syzkaller0: entered allmulticast mode
[  121.692703][ T7959] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  122.077794][ T7986] netlink: 'syz.0.973': attribute type 3 has an invalid length.
[  123.046534][ T8038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.996'.
[  123.075556][ T8040] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  123.077653][ T8040] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  123.123380][ T8043] syzkaller0: entered promiscuous mode
[  123.125218][ T8043] syzkaller0: entered allmulticast mode
[  123.254519][ T8047] syzkaller0: entered promiscuous mode
[  123.256335][ T8047] syzkaller0: entered allmulticast mode
[  123.315514][ T8053] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1002'.
[  123.938663][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1022'.
[  124.226237][ T8123] xt_addrtype: ipv6 does not support BROADCAST matching
[  124.247550][ T8114] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.382871][ T8114] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.406594][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'.
[  124.479555][ T8114] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.538516][ T8140] lo: Caught tx_queue_len zero misconfig
[  124.546637][ T8140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1041'.
[  124.571401][ T8140] netem: incorrect ge model size
[  124.578049][ T8140] netem: change failed
[  124.609025][ T8114] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.618386][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'.
[  124.707310][ T8135] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.761379][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.796687][ T8135] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.821279][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.844612][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.871809][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.958431][ T8135] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.064635][ T8135] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.157189][ T8157] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[  125.310064][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.383807][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.417740][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.461826][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.567182][ T8178] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1059'.
[  125.804474][ T8182] netlink: 'syz.0.1061': attribute type 10 has an invalid length.
[  125.808735][ T8182] syz_tun: entered promiscuous mode
[  125.849673][ T8182] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  125.860129][ T8187] netlink: 41 bytes leftover after parsing attributes in process `syz.0.1061'.
[  125.868991][ T8187] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1061'.
[  125.873328][ T8187] netlink: 41 bytes leftover after parsing attributes in process `syz.0.1061'.
[  125.889198][ T8182] syz.0.1061 (8182) used greatest stack depth: 19704 bytes left
[  126.159771][ T8215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1076'.
[  126.282159][ T8225] xt_hashlimit: max too large, truncated to 1048576
[  126.285522][ T8225] xt_hashlimit: Unknown mode mask 300, kernel too old?
[  126.429073][ T8240] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  126.467053][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1088'.
[  127.354376][ T8316] xt_TCPMSS: Only works on TCP SYN packets
[  127.435657][ T8316] bridge_slave_1: left allmulticast mode
[  127.437491][ T8316] bridge_slave_1: left promiscuous mode
[  127.439434][ T8316] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.444958][ T8316] bridge_slave_0: left allmulticast mode
[  127.447280][ T8316] bridge_slave_0: left promiscuous mode
[  127.449614][ T8316] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.576156][   T33] audit: type=1800 audit(1778556152.361:4): pid=8325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1124" name=CB dev="tmpfs" ino=2078 res=0 errno=0
[  128.378885][ T8370] syzkaller0: entered promiscuous mode
[  128.390001][ T8370] syzkaller0: entered allmulticast mode
[  128.467047][ T8378] macsec1: entered promiscuous mode
[  128.749073][ T8399] netlink: 'syz.2.1157': attribute type 29 has an invalid length.
[  128.760102][ T8399] netlink: 'syz.2.1157': attribute type 29 has an invalid length.
[  128.990000][ T8421] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048)
[  129.015119][ T8421] __nla_validate_parse: 6 callbacks suppressed
[  129.015131][ T8421] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1163'.
[  129.302706][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1170'.
[  129.307226][ T8452] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1173'.
[  129.357501][ T8458] netlink: 'syz.2.1175': attribute type 3 has an invalid length.
[  129.518088][ T8473] netlink: 'syz.0.1180': attribute type 58 has an invalid length.
[  129.524995][ T8473] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1180'.
[  129.734157][ T8497] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1186'.
[  130.123165][ T8541] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  130.126188][ T8541] IPv6: NLM_F_CREATE should be set when creating new route
[  130.128962][ T8541] IPv6: NLM_F_CREATE should be set when creating new route
[  130.277110][ T8545] RDS: rds_bind could not find a transport for ::20:0, load rds_tcp or rds_rdma?
[  130.656676][ T8585] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1213'.
[  130.701606][ T5479] nci: nci_data_exchange_complete: no rx callback, dropping rx data...
[  131.446669][ T8580] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  132.488111][ T8633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1233'.
[  132.744200][ T8647] m1Ie5n: entered promiscuous mode
[  132.753810][ T8651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1241'.
[  132.799670][ T8656] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  132.804822][ T8656] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.182468][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1259'.
[  133.775053][ T8716] syzkaller0: entered promiscuous mode
[  133.779526][ T8716] syzkaller0: entered allmulticast mode
[  134.157331][ T8740] openvswitch: netlink: Key type 48 is out of range max 32
[  136.257289][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1302'.
[  136.261101][ T8792] netlink: 'syz.0.1302': attribute type 20 has an invalid length.
[  136.264216][ T8792] netlink: 'syz.0.1302': attribute type 21 has an invalid length.
[  136.728053][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.736167][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.741222][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.745173][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.968476][ T8812] ieee802154 phy1 wpan1: encryption failed: -22
[  137.005754][ T8817] netlink: 'syz.2.1314': attribute type 1 has an invalid length.
[  137.043952][ T8817] bond1: entered promiscuous mode
[  137.046457][ T8817] 8021q: adding VLAN 0 to HW filter on device bond1
[  137.060151][ T8817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1314'.
[  137.064031][ T8817] bond1: entered allmulticast mode
[  137.092288][ T8817] bond1: (slave bridge1): making interface the new active one
[  137.094894][ T8817] bridge1: entered promiscuous mode
[  137.097131][ T8817] bridge1: entered allmulticast mode
[  137.106747][ T8817] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  137.118972][ T8826] geneve3: entered promiscuous mode
[  137.123371][   T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 33199 - 0
[  137.130797][   T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 33199 - 0
[  137.143373][   T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 33199 - 0
[  137.150169][   T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 33199 - 0
[  137.872575][ T8859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1334'.
[  137.879668][ T8859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1334'.
[  137.971344][ T8868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1337'.
[  138.018866][ T8870] netlink: 'syz.2.1338': attribute type 4 has an invalid length.
[  138.383929][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  138.694252][ T8923] syzkaller0: entered promiscuous mode
[  138.698082][ T8923] syzkaller0: entered allmulticast mode
[  139.643390][ T8929] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  139.764508][ T8942] netlink: 'syz.0.1366': attribute type 1 has an invalid length.
[  139.788662][ T8942] 8021q: adding VLAN 0 to HW filter on device bond4
[  139.824480][ T8942] vlan2: entered allmulticast mode
[  139.826095][ T8942] bond4: entered allmulticast mode
[  139.841610][ T8949] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1369'.
[  139.845407][ T8949] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1369'.
[  139.998291][ T8959] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  140.099253][ T8971] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1378'.
[  140.138596][   T10] IPVS: starting estimator thread 0...
[  140.227551][ T8981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1382'.
[  140.231756][ T8973] IPVS: using max 65 ests per chain, 156000 per kthread
[  140.374603][ T8991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1387'.
[  140.855646][ T9034] syzkaller0: entered promiscuous mode
[  140.857409][ T9034] syzkaller0: entered allmulticast mode
[  141.041983][ T9040] syzkaller0: entered promiscuous mode
[  141.044259][ T9040] syzkaller0: entered allmulticast mode
[  142.233036][ T9077] netlink: 'syz.0.1425': attribute type 30 has an invalid length.
[  142.294217][ T9079] __nla_validate_parse: 1 callbacks suppressed
[  142.294228][ T9079] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1426'.
[  142.393532][   T33] audit: type=1107 audit(1778556167.181:5): pid=9084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  142.888228][ T9092] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1432'.
[  142.979305][ T9098] netlink: 'syz.1.1435': attribute type 1 has an invalid length.
[  143.288899][ T9115] netlink: 'syz.1.1443': attribute type 1 has an invalid length.
[  143.365042][ T9119] netlink: 'syz.1.1445': attribute type 1 has an invalid length.
[  143.495491][ T9125] syzkaller1: entered promiscuous mode
[  143.497431][ T9125] syzkaller1: entered allmulticast mode
[  143.919191][ T9150] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.1461'.
[  144.956850][ T9186] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1477'.
[  145.625572][ T9225] netlink: 'syz.1.1493': attribute type 3 has an invalid length.
[  145.628850][ T9225] netlink: 'syz.1.1493': attribute type 3 has an invalid length.
[  145.632018][ T9225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1493'.
[  146.744182][ T9265] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1510'.
[  146.747594][ T9265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1510'.
[  146.751098][ T9265] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1510'.
[  147.574292][ T9260] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  147.591019][ T9260] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  147.598705][ T9300] veth1_macvtap: left promiscuous mode
[  147.605035][ T9300] macsec0: entered allmulticast mode
[  147.618000][ T9302] xt_TCPMSS: Only works on TCP SYN packets
[  147.629275][ T9300] veth1_macvtap: entered promiscuous mode
[  147.633649][ T9300] veth1_macvtap: entered allmulticast mode
[  147.649452][ T9300] macsec0: left allmulticast mode
[  147.652410][ T9300] veth1_macvtap: left allmulticast mode
[  147.666117][ T9260] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  147.668721][ T9260] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  147.688787][ T9260] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  147.696392][ T9306] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1533'.
[  147.697053][ T9260] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  147.699342][ T9306] netlink: 'syz.1.1533': attribute type 1 has an invalid length.
[  148.124281][ T9339] netlink: 566 bytes leftover after parsing attributes in process `syz.2.1547'.
[  148.191998][ T9341] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1548'.
[  148.195404][ T9341] ksmbd: Unknown IPC event: 1, ignore.
[  148.365695][ T9355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1555'.
[  148.721802][ T9380] syzkaller0: entered promiscuous mode
[  148.726570][ T9380] syzkaller0: entered allmulticast mode
[  148.832575][ T9386] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.1569'.
[  149.000190][ T9393] netlink: 'syz.0.1572': attribute type 13 has an invalid length.
[  149.013236][ T9393] netlink: 'syz.0.1572': attribute type 17 has an invalid length.
[  149.665596][ T9390] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  149.695385][ T9390] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.477375][ T9393] syz_tun: left promiscuous mode
[  150.488430][ T9393] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.492861][ T9393] 8021q: adding VLAN 0 to HW filter on device team0
[  150.501117][ T9393] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.550666][ T9393] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.558088][ T9393] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.581442][ T9393] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  150.610703][ T5479] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.613373][ T5479] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 33199 - 0
[  150.617231][ T5479] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.625894][ T5479] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 33199 - 0
[  150.655084][ T5479] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.663592][ T5479] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 33199 - 0
[  150.668700][ T5479] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.676916][ T5479] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 33199 - 0
[  150.748809][ T9429] syzkaller0: entered promiscuous mode
[  150.751291][ T9429] syzkaller0: entered allmulticast mode
[  151.630719][ T9398] Set syz1 is full, maxelem 65536 reached
[  151.772993][ T9444] netlink: 'syz.0.1588': attribute type 11 has an invalid length.
[  151.776197][ T9444] netlink: 'syz.0.1588': attribute type 23 has an invalid length.
[  151.779219][ T9444] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1588'.
[  152.671668][ T9442] syz.2.1587 (9442) used obsolete PPPIOCDETACH ioctl
[  152.678210][ T9455] rB: renamed from lo (while UP)
[  152.811664][ T9463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1595'.
[  152.846995][ T9463] bond3: entered promiscuous mode
[  152.849436][ T9463] 8021q: adding VLAN 0 to HW filter on device bond3
[  152.903616][ T9463] 8021q: adding VLAN 0 to HW filter on device bond4
[  152.907441][ T9463] bond4: entered promiscuous mode
[  152.921632][ T9463] bond3: (slave bond4): Enslaving as an active interface with an up link
[  152.948512][ T9470] syzkaller0: entered promiscuous mode
[  152.951767][ T9470] syzkaller0: entered allmulticast mode
[  153.009558][ T9475] xt_hashlimit: size too large, truncated to 1048576
[  153.298361][ T9503] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1612'.
[  153.303209][ T9503] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1612'.
[  153.305933][ T9503] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1612'.
[  153.314611][ T9503] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1612'.
[  153.318454][ T9503] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1612'.
[  153.328820][ T9503] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1612'.
[  153.697588][ T9536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1626'.
[  153.816615][ T9544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1630'.
[  154.057352][ T9564] ip6gre0: Caught tx_queue_len zero misconfig
[  154.060201][ T9564] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) !
[  154.112966][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1641'.
[  154.842489][ T5722] IPVS: starting estimator thread 0...
[  154.844774][ T9610] netlink: 'syz.2.1661': attribute type 29 has an invalid length.
[  154.853287][ T9610] netlink: 'syz.2.1661': attribute type 29 has an invalid length.
[  154.859048][ T9610] netlink: 'syz.2.1661': attribute type 29 has an invalid length.
[  154.874730][ T9610] netlink: 'syz.2.1661': attribute type 29 has an invalid length.
[  154.881115][ T9610] netlink: 'syz.2.1661': attribute type 29 has an invalid length.
[  154.887208][ T9610] netlink: 'syz.2.1661': attribute type 29 has an invalid length.
[  154.905269][ T9610] netlink: 'syz.2.1661': attribute type 29 has an invalid length.
[  154.909441][ T9610] netlink: 'syz.2.1661': attribute type 29 has an invalid length.
[  154.919365][ T9610] netlink: 'syz.2.1661': attribute type 29 has an invalid length.
[  154.937403][ T9614] hsr0: entered promiscuous mode
[  154.940530][ T9611] IPVS: using max 65 ests per chain, 156000 per kthread
[  154.943181][ T9610] netlink: 'syz.2.1661': attribute type 29 has an invalid length.
[  154.970316][ T9609] hsr0: left promiscuous mode
[  155.555016][ T9647] ip6erspan0: entered allmulticast mode
[  155.803138][ T9669] ip6tnl0: Caught tx_queue_len zero misconfig
[  155.928690][ T9679] tunl0: Caught tx_queue_len zero misconfig
[  156.223593][ T9701] syzkaller0: entered promiscuous mode
[  156.225412][ T9701] syzkaller0: entered allmulticast mode
[  156.552578][ T9727] bond5: option broadcast_neighbor: invalid value (30)
[  156.557087][ T9727] bond5 (unregistering): Released all slaves
[  156.713273][ T9737] team1: entered promiscuous mode
[  156.716827][ T9737] team1: entered allmulticast mode
[  156.718850][ T9737] 8021q: adding VLAN 0 to HW filter on device team1
[  156.763291][ T9741] 5: entered promiscuous mode
[  157.382626][ T9787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  157.394943][ T9787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  157.976677][ T9799] xt_ecn: cannot match TCP bits for non-tcp packets
[  158.138249][ T9807] __nla_validate_parse: 32 callbacks suppressed
[  158.138270][ T9807] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1749'.
[  158.155834][ T9807] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1749'.
[  158.512641][ T9843] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1766'.
[  158.954715][ T9885] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.285660][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1797'.
[  159.289149][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1797'.
[  160.212558][ T9987] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  160.279743][ T9984] "syz.0.1834" (9984) uses obsolete ecb(arc4) skcipher
[  160.421628][T10005] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1841'.
[  160.424668][T10005] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1841'.
[  160.641848][T10023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1849'.
[  160.648092][T10023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1849'.
[  160.858869][T10038] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1855'.
[  161.217947][T10059] bond2: Invalid ad_actor_system MAC address.
[  161.220867][T10059] bond2: option ad_actor_system: invalid value (7)
[  161.224645][T10059] bond2 (unregistering): Released all slaves
[  161.240612][T10058] pim6reg1: entered promiscuous mode
[  161.242372][T10058] pim6reg1: entered allmulticast mode
[  161.663802][T10080] xfrm0: Caught tx_queue_len zero misconfig
[  162.140171][T10093] validate_nla: 14 callbacks suppressed
[  162.140191][T10093] netlink: 'syz.1.1881': attribute type 1 has an invalid length.
[  162.173014][T10093] 8021q: adding VLAN 0 to HW filter on device bond6
[  162.198160][T10093] bond6: (slave geneve2): making interface the new active one
[  162.204390][T10093] bond6: (slave geneve2): Enslaving as an active interface with an up link
[  162.762607][T10141] netlink: 'syz.2.1901': attribute type 12 has an invalid length.
[  162.766921][T10141] netlink: 'syz.2.1901': attribute type 11 has an invalid length.
[  163.223198][T10168] __nla_validate_parse: 8 callbacks suppressed
[  163.223210][T10168] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1914'.
[  163.382497][T10180] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  163.449635][T10184] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1920'.
[  163.589141][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1925'.
[  163.592644][T10194] unsupported nla_type 216
[  163.648452][T10198] Bluetooth: MGMT ver 1.23
[  164.036469][T10223] netlink: 62967 bytes leftover after parsing attributes in process `syz.0.1938'.
[  164.115392][T10229] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1942'.
[  164.119185][T10229] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1942'.
[  164.129199][T10229] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1942'.
[  164.330676][T10246] netlink: 'syz.0.1949': attribute type 1 has an invalid length.
[  164.366540][T10246] 8021q: adding VLAN 0 to HW filter on device bond5
[  164.385079][T10246] vlan3: entered allmulticast mode
[  164.387931][T10246] bond5: entered allmulticast mode
[  164.426722][T10246] bond5: (slave geneve4): making interface the new active one
[  164.429267][T10246] geneve4: entered allmulticast mode
[  164.434650][T10246] bond5: (slave geneve4): Enslaving as an active interface with an up link
[  164.439770][ T8916] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  164.448033][ T8916] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  164.457944][ T8916] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  164.465055][ T8916] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  164.468218][T10246] syz.0.1949 (10246) used greatest stack depth: 19296 bytes left
[  164.705945][T10274] netlink: 'syz.2.1960': attribute type 1 has an invalid length.
[  164.776556][T10280] batadv1: entered promiscuous mode
[  164.779907][T10280] batadv1: entered allmulticast mode
[  165.286168][T10315] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1979'.
[  165.887135][T10342] xt_connbytes: Forcing CT accounting to be enabled
[  165.895707][T10340] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1989'.
[  166.325577][T10377] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2006'.
[  166.596933][T10402] netlink: 'syz.1.2019': attribute type 1 has an invalid length.
[  166.910620][T10423] netlink: 'syz.1.2026': attribute type 1 has an invalid length.
[  167.608023][T10454] vlan1: entered promiscuous mode
[  167.610156][T10454] syz_tun: entered promiscuous mode
[  168.053463][T10460] nbd0: detected capacity change from 0 to 63
[  168.071473][T10464] block nbd0: Receive control failed (result -104)
[  168.074902][   T55] block nbd0: Receive control failed (result -32)
[  168.084076][T10319] block nbd0: Send control failed (result -32)
[  168.096765][T10319] block nbd0: Request send failed, requeueing
[  168.107927][T10319] block nbd0: Dead connection, failed to find a fallback
[  168.129490][   T97] block nbd0: Dead connection, failed to find a fallback
[  168.133608][   T97] block nbd0: shutting down sockets
[  168.138610][   T97] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  168.145212][   T97] Buffer I/O error on dev nbd0, logical block 2, async page read
[  168.149889][T10319] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  168.155699][T10319] Buffer I/O error on dev nbd0, logical block 3, async page read
[  168.513073][T10487] __nla_validate_parse: 5 callbacks suppressed
[  168.513085][T10487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2053'.
[  168.621991][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2055'.
[  168.625501][T10491] netlink: 'syz.2.2055': attribute type 21 has an invalid length.
[  168.778543][T10499] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.949962][T10505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2062'.
[  169.366873][T10516] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2067'.
[  169.384381][T10516] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2067'.
[  169.387927][T10516] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2067'.
[  170.613397][T10584] netlink: 'syz.1.2095': attribute type 4 has an invalid length.
[  170.615774][T10584] netlink: 'syz.1.2095': attribute type 8 has an invalid length.
[  170.618056][T10584] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2095'.
[  171.190855][T10626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2113'.
[  171.303161][T10635] netlink: 'syz.0.2117': attribute type 2 has an invalid length.
[  171.406933][T10646] netlink: 'syz.0.2122': attribute type 1 has an invalid length.
[  171.409539][T10646] netlink: 'syz.0.2122': attribute type 1 has an invalid length.
[  171.444971][T10650] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2124'.
[  171.474087][T10653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2126'.
[  171.888566][T10680] netlink: 'syz.1.2138': attribute type 4 has an invalid length.
[  172.461802][T10713] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check.
[  172.704157][T10731] syzkaller0: entered promiscuous mode
[  172.705865][T10731] syzkaller0: entered allmulticast mode
[  172.878900][T10733] 8021q: adding VLAN 0 to HW filter on device bond6
[  172.932337][T10733] vlan4: entered promiscuous mode
[  172.934081][T10733] bond6: entered promiscuous mode
[  172.935712][T10733] vlan4: entered allmulticast mode
[  172.937227][T10733] bond6: entered allmulticast mode
[  172.963566][T10733] 8021q: adding VLAN 0 to HW filter on device batadv2
[  172.969046][T10733] batadv2: entered promiscuous mode
[  172.972956][T10733] batadv2: entered allmulticast mode
[  172.975820][T10733] bond6: (slave batadv2): Enslaving as an active interface with an up link
[  173.130711][T10754] tipc: Enabled bearer <eth:macvlan1>, priority 10
[  173.164309][T10758] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  173.635086][T10805] __nla_validate_parse: 3 callbacks suppressed
[  173.635099][T10805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2196'.
[  173.867444][T10830] netlink: 'syz.0.2208': attribute type 11 has an invalid length.
[  173.902194][T10834] trusted_key: syz.1.2207 sent an empty control message without MSG_MORE.
[  174.145287][T10864] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2224'.
[  174.241590][ T9415] tipc: Node number set to 990156456
[  174.322267][T10885] IPVS: Error connecting to the multicast addr
[  174.764912][T10908] xt_CT: No such helper "syz0"
[  175.201857][T10889] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  175.407322][T10959] SET target dimension over the limit!
[  176.322831][ T8916] tipc: Subscription rejected, illegal request
[  176.527741][T11016] netlink: 'syz.0.2295': attribute type 2 has an invalid length.
[  176.612639][T11024] geneve3: entered promiscuous mode
[  176.641034][ T5479] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 40510 - 0
[  176.645952][ T5479] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 40510 - 0
[  176.676611][ T5479] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 40510 - 0
[  176.679778][ T5479] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 40510 - 0
[  176.848536][T11037] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2304'.
[  176.899048][T11041] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2306'.
[  177.097386][T11054] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2312'.
[  177.100163][T11054] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2312'.
[  177.105160][T11054] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2312'.
[  177.316888][T11065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2317'.
[  177.320357][T11065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2317'.
[  177.324992][T11065] netlink: 'syz.1.2317': attribute type 13 has an invalid length.
[  177.328211][T11065] netlink: 'syz.1.2317': attribute type 11 has an invalid length.
[  177.473638][T11079] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.480875][T11079] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 40510 - 0
[  177.487790][T11083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2326'.
[  177.558771][T11079] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.563855][T11079] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 40510 - 0
[  177.607049][T11079] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.610209][T11079] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 40510 - 0
[  177.647704][T11079] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.657879][T11079] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 40510 - 0
[  177.694219][T11100] xt_CT: You must specify a L4 protocol and not use inversions on it
[  177.761723][ T8918] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 40510 - 0
[  177.769301][ T8918] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  177.776373][T11104] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  177.787175][ T8918] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 40510 - 0
[  177.795451][ T8918] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  177.846417][ T5479] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 40510 - 0
[  177.851722][ T5479] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  177.864537][ T5479] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 40510 - 0
[  177.867280][ T5479] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  177.959861][T11118] netlink: 'syz.0.2342': attribute type 5 has an invalid length.
[  178.418090][T11153] : entered promiscuous mode
[  178.475617][T11157] netlink: 'syz.0.2362': attribute type 2 has an invalid length.
[  178.678815][T11167] __nla_validate_parse: 3 callbacks suppressed
[  178.678835][T11167] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2366'.
[  178.687225][T11167] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2366'.
[  179.008101][T11185] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2375'.
[  179.073048][T11189] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2377'.
[  179.126555][T11191] netem: change failed
[  179.198446][T11197] netlink: 'syz.2.2381': attribute type 1 has an invalid length.
[  179.237416][T11195] netlink: 'syz.1.2380': attribute type 1 has an invalid length.
[  179.243714][T11195] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2380'.
[  179.405777][T11213] openvswitch: netlink: IP tunnel dst address not specified
[  179.425516][T11202] vlan1: entered promiscuous mode
[  179.428724][T11202] gretap0: entered promiscuous mode
[  179.489421][T11215] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2389'.
[  180.175408][T11273] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2416'.
[  180.209106][T11276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2417'.
[  180.364730][T11286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2422'.
[  180.414883][T10464] block nbd1: Receive control failed (result -1)
[  181.092866][T11298] netlink: 'syz.2.2426': attribute type 10 has an invalid length.
[  181.102868][T11298] 8021q: adding VLAN 0 to HW filter on device team0
[  181.404825][T11315] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  181.454766][T11315] team0: entered promiscuous mode
[  181.459566][T11315] team_slave_0: entered promiscuous mode
[  181.461751][T11315] team_slave_1: entered promiscuous mode
[  181.479159][T11315] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  181.639471][T11327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2437'.
[  183.063782][T11380] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  183.066704][T11380] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  183.494736][T11410] xt_TCPMSS: Only works on TCP SYN packets
[  183.777525][T11429] __nla_validate_parse: 1 callbacks suppressed
[  183.777544][T11429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2484'.
[  183.811436][T11429] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2484'.
[  183.814406][T11432] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  184.173777][T11441] 8021q: adding VLAN 0 to HW filter on device team0
[  184.189797][T11441] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  184.254666][T11450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2491'.
[  184.284839][T11452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2492'.
[  184.783719][T11480] syzkaller0: entered promiscuous mode
[  184.785996][T11480] syzkaller0: entered allmulticast mode
[  185.094949][T11499] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2512'.
[  185.269529][T11507] openvswitch: netlink: Tunnel attr 333 out of range max 16
[  185.362614][T11515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2518'.
[  185.416029][T11519] netlink: 'syz.1.2520': attribute type 1 has an invalid length.
[  185.481751][T11519] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  185.491351][T11519] bond7: (slave vxcan3): Error -95 calling set_mac_address
[  185.546656][T11526] bond7: (slave gretap1): making interface the new active one
[  185.556411][T11526] bond7: (slave gretap1): Enslaving as an active interface with an up link
[  185.600331][T11519] macvlan3: entered promiscuous mode
[  185.606289][T11519] macvlan3: entered allmulticast mode
[  185.608991][T11519] bond7: entered promiscuous mode
[  185.613663][T11519] gretap1: entered promiscuous mode
[  185.619613][T11519] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  185.626813][T11519] bond7: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  185.630936][T11519] bond7: left promiscuous mode
[  185.632492][T11519] gretap1: left promiscuous mode
[  185.649845][T11535] netlink: 'syz.2.2527': attribute type 4 has an invalid length.
[  185.654852][T11535] netlink: 'syz.2.2527': attribute type 4 has an invalid length.
[  185.736933][T11526] syz.1.2520 (11526) used greatest stack depth: 19096 bytes left
[  185.813350][T11540] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  185.823988][T11540] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  185.954622][T11553] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  186.436732][T11589] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  186.465815][T11590] RDS: rds_bind could not find a transport for 0:b3::, load rds_tcp or rds_rdma?
[  186.804883][T11620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2567'.
[  186.814320][T11601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2558'.
[  186.840123][T11622] ip6erspan0: entered allmulticast mode
[  186.909431][T11632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2573'.
[  186.912689][T11632] openvswitch: netlink: Message has 40 unknown bytes.
[  187.007853][T11642] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  187.366160][T11667] netlink: 'syz.0.2589': attribute type 1 has an invalid length.
[  187.414337][T11667] 8021q: adding VLAN 0 to HW filter on device bond8
[  187.426526][T11667] bond7: (slave bond8): making interface the new active one
[  187.429366][T11667] bond7: (slave bond8): Enslaving as an active interface with an up link
[  187.451469][T11667] bond7: (slave gretap1): Enslaving as a backup interface with an up link
[  187.757372][T11700] tipc: Failed to remove unknown binding: 66,0,0/1242434095:4058373162/4058373164
[  187.765917][T11700] tipc: Failed to remove unknown binding: 66,0,0/1242434095:4058373162/4058373163
[  187.774515][T11700] tipc: Failed to remove unknown binding: 66,0,0/1242434095:4058373162/4058373164
[  187.780917][T11700] tipc: Failed to remove unknown binding: 66,0,0/1242434095:4058373162/4058373163
[  187.928107][T11707] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2607'.
[  188.009819][T11712] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  188.041563][T11714] netlink: 'syz.0.2610': attribute type 3 has an invalid length.
[  188.730154][T11737] syzkaller0: entered promiscuous mode
[  188.733593][T11737] syzkaller0: entered allmulticast mode
[  188.902623][T11749] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2627'.
[  189.115117][T11767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2636'.
[  189.644127][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2657'.
[  189.906758][T11843] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2668'.
[  189.915591][T11843] bond0: entered promiscuous mode
[  189.917564][T11843] bond_slave_0: entered promiscuous mode
[  189.919556][T11843] bond_slave_1: entered promiscuous mode
[  189.928366][T11843] bond0: left promiscuous mode
[  189.930049][T11843] bond_slave_0: left promiscuous mode
[  189.933654][T11843] bond_slave_1: left promiscuous mode
[  190.029077][T11852] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2671'.
[  190.093136][T11858] bond0: entered promiscuous mode
[  190.095326][T11858] : entered promiscuous mode
[  190.097254][T11858] bond_slave_1: entered promiscuous mode
[  190.101166][T11858] syz_tun: entered promiscuous mode
[  190.105790][T11858] batadv_slave_0: entered promiscuous mode
[  190.110661][T11858] batadv_slave_0: left promiscuous mode
[  190.115622][T11858] bond0: left promiscuous mode
[  190.118868][T11858] : left promiscuous mode
[  190.122015][T11858] bond_slave_1: left promiscuous mode
[  190.124206][T11858] syz_tun: left promiscuous mode
[  190.467670][T11877] syzkaller0: entered promiscuous mode
[  190.469319][T11877] syzkaller0: entered allmulticast mode
[  190.607603][T11879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2685'.
[  190.747318][T11887] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[  190.879717][T11895] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  190.882157][T11895] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  191.245721][T11919] netlink: 'syz.2.2705': attribute type 1 has an invalid length.
[  191.372619][T11931] netlink: 'syz.0.2710': attribute type 8 has an invalid length.
[  191.392455][T11929] tap0: tun_chr_ioctl cmd 2148553947
[  191.669976][T11954] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  191.675224][T11954] syzkaller0: entered promiscuous mode
[  191.677333][T11954] syzkaller0: entered allmulticast mode
[  191.688438][T11954] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  191.694768][T11953] tipc: Resetting bearer <eth:syzkaller0>
[  191.728436][T11953] tipc: Disabling bearer <eth:syzkaller0>
[  192.149712][T11991] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2736'.
[  192.160271][T11991] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2736'.
[  192.521058][T12011] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2748'.
[  192.652814][T12021] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2753'.
[  192.657846][T12023] 
[  192.658681][T12023] ======================================================
[  192.660765][T12023] WARNING: possible circular locking dependency detected
[  192.662777][T12023] syzkaller #0 Not tainted
[  192.664230][T12023] ------------------------------------------------------
[  192.666235][T12023] syz.2.2754/12023 is trying to acquire lock:
[  192.667983][T12023] ffff8881012b4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4ed/0x5c0
[  192.671441][T12023] 
[  192.671441][T12023] but task is already holding lock:
[  192.674282][T12023] ffff8881012b4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0
[  192.677901][T12023] 
[  192.677901][T12023] which lock already depends on the new lock.
[  192.677901][T12023] 
[  192.682043][T12023] 
[  192.682043][T12023] the existing dependency chain (in reverse order) is:
[  192.685556][T12023] 
[  192.685556][T12023] -> #10 (&root->kernfs_rwsem){++++}-{4:4}:
[  192.688810][T12023]        down_write+0x96/0x200
[  192.690728][T12023]        kernfs_add_one+0x41/0x5c0
[  192.692639][T12023]        kernfs_create_dir_ns+0xde/0x130
[  192.694728][T12023]        internal_create_group+0x425/0x1180
[  192.697019][T12023]        cpuhp_invoke_callback+0x445/0x860
[  192.699296][T12023]        cpuhp_issue_call+0x430/0x7a0
[  192.701414][T12023]        __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0
[  192.703827][T12023]        __cpuhp_setup_state+0x3f/0x60
[  192.705874][T12023]        do_one_initcall+0x250/0x870
[  192.707885][T12023]        do_initcall_level+0x104/0x190
[  192.709976][T12023]        do_initcalls+0x59/0xa0
[  192.712072][T12023]        kernel_init_freeable+0x2a6/0x3e0
[  192.714334][T12023]        kernel_init+0x1d/0x1d0
[  192.716187][T12023]        ret_from_fork+0x514/0xb70
[  192.718212][T12023]        ret_from_fork_asm+0x1a/0x30
[  192.720246][T12023] 
[  192.720246][T12023] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}:
[  192.723483][T12023] 
[  192.723483][T12023] -> #8 (cpu_hotplug_lock){++++}-{0:0}:
[  192.726507][T12023]        cpus_read_lock+0x42/0x160
[  192.728509][T12023]        static_key_slow_inc+0x12/0x30
[  192.730548][T12023]        setup_udp_tunnel_sock+0x2fd/0x510
[  192.732842][T12023]        l2tp_tunnel_register+0xde2/0x1490
[  192.735105][T12023]        pppol2tp_connect+0x8b7/0x17c0
[  192.737105][T12023]        __sys_connect+0x312/0x450
[  192.739209][T12023]        __x64_sys_connect+0x7a/0x90
[  192.741320][T12023]        do_syscall_64+0x15f/0xf80
[  192.743373][T12023]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.745942][T12023] 
[  192.745942][T12023] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  192.749026][T12023]        lock_sock_nested+0x41/0x100
[  192.751124][T12023]        inet_shutdown+0x6a/0x390
[  192.753076][T12023]        nbd_mark_nsock_dead+0x2e9/0x560
[  192.755220][T12023]        recv_work+0x1c2e/0x1d40
[  192.757161][T12023]        process_scheduled_works+0xb5d/0x1860
[  192.759516][T12023]        worker_thread+0xa53/0xfc0
[  192.761557][T12023]        kthread+0x388/0x470
[  192.763440][T12023]        ret_from_fork+0x514/0xb70
[  192.765508][T12023]        ret_from_fork_asm+0x1a/0x30
[  192.767559][T12023] 
[  192.767559][T12023] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  192.770511][T12023]        __mutex_lock+0x1a3/0x1550
[  192.772566][T12023]        nbd_queue_rq+0x37b/0x1100
[  192.774543][T12023]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  192.776875][T12023]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  192.779457][T12023]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  192.782004][T12023]        blk_mq_run_hw_queue+0x348/0x4f0
[  192.784239][T12023]        blk_mq_dispatch_list+0xd16/0xe10
[  192.786470][T12023]        blk_mq_flush_plug_list+0x48d/0x570
[  192.788824][T12023]        __blk_flush_plug+0x3ed/0x4d0
[  192.790896][T12023]        __submit_bio+0x28d/0x580
[  192.792903][T12023]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  192.795309][T12023]        block_read_full_folio+0x599/0x830
[  192.797623][T12023]        filemap_read_folio+0x137/0x3b0
[  192.799936][T12023]        do_read_cache_folio+0x358/0x590
[  192.801999][T12023]        read_part_sector+0xb6/0x2b0
[  192.803915][T12023]        adfspart_check_ICS+0xb1/0x960
[  192.805788][T12023]        bdev_disk_changed+0x817/0x1770
[  192.807442][T12023]        blkdev_get_whole+0x380/0x510
[  192.809187][T12023]        bdev_open+0x31e/0xd30
[  192.810724][T12023]        blkdev_open+0x470/0x610
[  192.812336][T12023]        do_dentry_open+0x785/0x14e0
[  192.814028][T12023]        vfs_open+0x3b/0x340
[  192.815428][T12023]        path_openat+0x2e08/0x3860
[  192.817212][T12023]        do_file_open+0x23e/0x4a0
[  192.818891][T12023]        do_sys_openat2+0x113/0x200
[  192.820406][T12023]        __x64_sys_openat+0x138/0x170
[  192.821981][T12023]        do_syscall_64+0x15f/0xf80
[  192.823499][T12023]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.825322][T12023] 
[  192.825322][T12023] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  192.827401][T12023]        __mutex_lock+0x1a3/0x1550
[  192.828915][T12023]        nbd_queue_rq+0xc6/0x1100
[  192.830399][T12023]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  192.832145][T12023]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  192.834119][T12023]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  192.835988][T12023]        blk_mq_run_hw_queue+0x348/0x4f0
[  192.837627][T12023]        blk_mq_dispatch_list+0xd16/0xe10
[  192.839278][T12023]        blk_mq_flush_plug_list+0x48d/0x570
[  192.840999][T12023]        __blk_flush_plug+0x3ed/0x4d0
[  192.842604][T12023]        __submit_bio+0x28d/0x580
[  192.844094][T12023]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  192.846410][T12023]        block_read_full_folio+0x599/0x830
[  192.848617][T12023]        filemap_read_folio+0x137/0x3b0
[  192.850707][T12023]        do_read_cache_folio+0x358/0x590
[  192.852823][T12023]        read_part_sector+0xb6/0x2b0
[  192.854656][T12023]        adfspart_check_ICS+0xb1/0x960
[  192.856391][T12023]        bdev_disk_changed+0x817/0x1770
[  192.857995][T12023]        blkdev_get_whole+0x380/0x510
[  192.859559][T12023]        bdev_open+0x31e/0xd30
[  192.860971][T12023]        blkdev_open+0x470/0x610
[  192.862410][T12023]        do_dentry_open+0x785/0x14e0
[  192.863954][T12023]        vfs_open+0x3b/0x340
[  192.865319][T12023]        path_openat+0x2e08/0x3860
[  192.866868][T12023]        do_file_open+0x23e/0x4a0
[  192.868474][T12023]        do_sys_openat2+0x113/0x200
[  192.870250][T12023]        __x64_sys_openat+0x138/0x170
[  192.872056][T12023]        do_syscall_64+0x15f/0xf80
[  192.873849][T12023]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.875922][T12023] 
[  192.875922][T12023] -> #4 (set->srcu){.+.+}-{0:0}:
[  192.878503][T12023]        __synchronize_srcu+0xca/0x300
[  192.880153][T12023]        elevator_switch+0x1e8/0x7a0
[  192.881902][T12023]        elevator_change+0x2cc/0x450
[  192.883639][T12023]        elevator_set_default+0x36c/0x430
[  192.885732][T12023]        blk_register_queue+0x3e9/0x4e0
[  192.887706][T12023]        __add_disk+0x677/0xd50
[  192.889427][T12023]        add_disk_fwnode+0xfb/0x480
[  192.891309][T12023]        nbd_dev_add+0x72c/0xb50
[  192.893102][T12023]        nbd_init+0x168/0x1f0
[  192.894776][T12023]        do_one_initcall+0x250/0x870
[  192.896674][T12023]        do_initcall_level+0x104/0x190
[  192.898653][T12023]        do_initcalls+0x59/0xa0
[  192.900450][T12023]        kernel_init_freeable+0x2a6/0x3e0
[  192.902507][T12023]        kernel_init+0x1d/0x1d0
[  192.904312][T12023]        ret_from_fork+0x514/0xb70
[  192.906135][T12023]        ret_from_fork_asm+0x1a/0x30
[  192.908039][T12023] 
[  192.908039][T12023] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  192.910842][T12023]        __mutex_lock+0x1a3/0x1550
[  192.912737][T12023]        elevator_change+0x1b3/0x450
[  192.914637][T12023]        elevator_set_none+0xb5/0x140
[  192.916626][T12023]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  192.918898][T12023]        nbd_start_device+0x17f/0xb10
[  192.920855][T12023]        nbd_genl_connect+0x165b/0x1cf0
[  192.922847][T12023]        genl_family_rcv_msg_doit+0x22a/0x330
[  192.924766][T12023]        genl_rcv_msg+0x61c/0x7a0
[  192.926497][T12023]        netlink_rcv_skb+0x232/0x4b0
[  192.928462][T12023]        genl_rcv+0x28/0x40
[  192.929947][T12023]        netlink_unicast+0x75c/0x8e0
[  192.931438][T12023]        netlink_sendmsg+0x813/0xb40
[  192.933273][T12023]        ____sys_sendmsg+0x972/0x9f0
[  192.934988][T12023]        ___sys_sendmsg+0x2a5/0x360
[  192.936518][T12023]        __x64_sys_sendmsg+0x1bd/0x2a0
[  192.938195][T12023]        do_syscall_64+0x15f/0xf80
[  192.939718][T12023]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.941750][T12023] 
[  192.941750][T12023] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  192.944406][T12023]        blk_alloc_queue+0x546/0x680
[  192.946081][T12023]        __blk_mq_alloc_disk+0x197/0x390
[  192.947840][T12023]        nbd_dev_add+0x499/0xb50
[  192.949334][T12023]        nbd_init+0x168/0x1f0
[  192.950722][T12023]        do_one_initcall+0x250/0x870
[  192.952462][T12023]        do_initcall_level+0x104/0x190
[  192.954280][T12023]        do_initcalls+0x59/0xa0
[  192.955858][T12023]        kernel_init_freeable+0x2a6/0x3e0
[  192.957768][T12023]        kernel_init+0x1d/0x1d0
[  192.959164][T12023]        ret_from_fork+0x514/0xb70
[  192.960623][T12023]        ret_from_fork_asm+0x1a/0x30
[  192.962115][T12023] 
[  192.962115][T12023] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  192.964208][T12023]        fs_reclaim_acquire+0x71/0x100
[  192.965769][T12023]        kmem_cache_alloc_noprof+0x40/0x650
[  192.967396][T12023]        __kernfs_iattrs+0xdf/0x320
[  192.968828][T12023]        kernfs_iop_setattr+0xea/0x3f0
[  192.970361][T12023]        notify_change+0xc1a/0xf40
[  192.971928][T12023]        do_truncate+0x1c2/0x250
[  192.973382][T12023]        path_openat+0x2f89/0x3860
[  192.974848][T12023]        do_file_open+0x23e/0x4a0
[  192.976294][T12023]        do_sys_openat2+0x113/0x200
[  192.977814][T12023]        __x64_sys_openat+0x138/0x170
[  192.979446][T12023]        do_syscall_64+0x15f/0xf80
[  192.981109][T12023]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.983269][T12023] 
[  192.983269][T12023] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[  192.985761][T12023]        __lock_acquire+0x15a5/0x2cf0
[  192.987292][T12023]        lock_acquire+0x106/0x350
[  192.988708][T12023]        down_write+0x96/0x200
[  192.990206][T12023]        kernfs_link_sibling+0x4ed/0x5c0
[  192.991924][T12023]        kernfs_add_one+0x1ca/0x5c0
[  192.993599][T12023]        kernfs_create_dir_ns+0xde/0x130
[  192.995188][T12023]        sysfs_create_dir_ns+0x12f/0x2a0
[  192.996794][T12023]        kobject_add_internal+0x62b/0xd00
[  192.998446][T12023]        kobject_add+0x163/0x240
[  192.999892][T12023]        device_add+0x408/0xbb0
[  193.001393][T12023]        netdev_register_kobject+0x178/0x310
[  193.003280][T12023]        register_netdevice+0x1456/0x1ec0
[  193.005208][T12023]        ppp_dev_configure+0x8a4/0xb10
[  193.007093][T12023]        ppp_nl_newlink+0x252/0x2f0
[  193.008915][T12023]        rtnl_newlink_create+0x329/0xb70
[  193.010814][T12023]        rtnl_newlink+0x166a/0x1bb0
[  193.012505][T12023]        rtnetlink_rcv_msg+0x7d5/0xbe0
[  193.014281][T12023]        netlink_rcv_skb+0x232/0x4b0
[  193.016032][T12023]        netlink_unicast+0x75c/0x8e0
[  193.017828][T12023]        netlink_sendmsg+0x813/0xb40
[  193.019557][T12023]        ____sys_sendmsg+0x972/0x9f0
[  193.021292][T12023]        ___sys_sendmsg+0x2a5/0x360
[  193.023022][T12023]        __x64_sys_sendmsg+0x1bd/0x2a0
[  193.024850][T12023]        do_syscall_64+0x15f/0xf80
[  193.026525][T12023]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.028688][T12023] 
[  193.028688][T12023] other info that might help us debug this:
[  193.028688][T12023] 
[  193.032049][T12023] Chain exists of:
[  193.032049][T12023]   &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem
[  193.032049][T12023] 
[  193.036820][T12023]  Possible unsafe locking scenario:
[  193.036820][T12023] 
[  193.039360][T12023]        CPU0                    CPU1
[  193.041178][T12023]        ----                    ----
[  193.043002][T12023]   lock(&root->kernfs_rwsem);
[  193.044646][T12023]                                lock(cpuhp_state_mutex);
[  193.046996][T12023]                                lock(&root->kernfs_rwsem);
[  193.049439][T12023]   lock(&root->kernfs_iattr_rwsem);
[  193.051257][T12023] 
[  193.051257][T12023]  *** DEADLOCK ***
[  193.051257][T12023] 
[  193.053961][T12023] 4 locks held by syz.2.2754/12023:
[  193.055730][T12023]  #0: ffffffff9030fff8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  193.058937][T12023]  #1: ffffffff8fdcf900 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0
[  193.062262][T12023]  #2: ffffffff8f5905e0 (ppp_mutex){+.+.}-{4:4}, at: ppp_nl_newlink+0x118/0x2f0
[  193.065253][T12023]  #3: ffff8881012b4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0
[  193.068670][T12023] 
[  193.068670][T12023] stack backtrace:
[  193.070443][T12023] CPU: 1 UID: 0 PID: 12023 Comm: syz.2.2754 Not tainted syzkaller #0 PREEMPT(full) 
[  193.070455][T12023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  193.070463][T12023] Call Trace:
[  193.070471][T12023]  <TASK>
[  193.070478][T12023]  dump_stack_lvl+0xe8/0x150
[  193.070493][T12023]  print_circular_bug+0x2e1/0x300
[  193.070507][T12023]  check_noncircular+0x12e/0x150
[  193.070520][T12023]  __lock_acquire+0x15a5/0x2cf0
[  193.070531][T12023]  ? __lock_acquire+0x6b5/0x2cf0
[  193.070541][T12023]  ? kernfs_link_sibling+0x4ed/0x5c0
[  193.070557][T12023]  lock_acquire+0x106/0x350
[  193.070592][T12023]  ? kernfs_link_sibling+0x4ed/0x5c0
[  193.070617][T12023]  down_write+0x96/0x200
[  193.070627][T12023]  ? kernfs_link_sibling+0x4ed/0x5c0
[  193.070638][T12023]  ? __pfx_down_write+0x10/0x10
[  193.070645][T12023]  ? kernfs_root+0x1c/0x230
[  193.070656][T12023]  ? kernfs_root+0x1c/0x230
[  193.070666][T12023]  ? kernfs_root+0x1ea/0x230
[  193.070678][T12023]  kernfs_link_sibling+0x4ed/0x5c0
[  193.070699][T12023]  kernfs_add_one+0x1ca/0x5c0
[  193.070719][T12023]  kernfs_create_dir_ns+0xde/0x130
[  193.070733][T12023]  sysfs_create_dir_ns+0x12f/0x2a0
[  193.070743][T12023]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  193.070752][T12023]  ? do_raw_spin_unlock+0x4d/0x210
[  193.070764][T12023]  kobject_add_internal+0x62b/0xd00
[  193.070774][T12023]  kobject_add+0x163/0x240
[  193.070787][T12023]  ? __pfx_kobject_add+0x10/0x10
[  193.070799][T12023]  ? get_device_parent+0x366/0x3a0
[  193.070809][T12023]  device_add+0x408/0xbb0
[  193.070817][T12023]  ? device_initialize+0x26a/0x460
[  193.070826][T12023]  netdev_register_kobject+0x178/0x310
[  193.070836][T12023]  register_netdevice+0x1456/0x1ec0
[  193.070851][T12023]  ? __pfx_register_netdevice+0x10/0x10
[  193.070862][T12023]  ? __pfx_snprintf+0x10/0x10
[  193.070870][T12023]  ? net_generic+0x1e/0x240
[  193.070883][T12023]  ppp_dev_configure+0x8a4/0xb10
[  193.070897][T12023]  ppp_nl_newlink+0x252/0x2f0
[  193.070908][T12023]  ? __pfx_ppp_nl_newlink+0x10/0x10
[  193.070919][T12023]  rtnl_newlink_create+0x329/0xb70
[  193.070930][T12023]  ? __pfx___nla_validate_parse+0x10/0x10
[  193.070945][T12023]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  193.070955][T12023]  ? __pfx___mutex_lock+0x10/0x10
[  193.070968][T12023]  ? ns_capable+0x89/0xe0
[  193.070977][T12023]  rtnl_newlink+0x166a/0x1bb0
[  193.070990][T12023]  ? __pfx_rtnl_newlink+0x10/0x10
[  193.071000][T12023]  ? __lock_acquire+0x6b5/0x2cf0
[  193.071009][T12023]  ? __lock_acquire+0x6b5/0x2cf0
[  193.071018][T12023]  ? unwind_next_frame+0xa6/0x2550
[  193.071030][T12023]  ? unwind_next_frame+0xa6/0x2550
[  193.071039][T12023]  ? is_bpf_text_address+0x26/0x2b0
[  193.071049][T12023]  ? is_bpf_text_address+0x26/0x2b0
[  193.071058][T12023]  ? __lock_acquire+0x6b5/0x2cf0
[  193.071066][T12023]  ? kernel_text_address+0xa5/0xe0
[  193.071077][T12023]  ? __kernel_text_address+0xd/0x30
[  193.071087][T12023]  ? unwind_get_return_address+0x4d/0x90
[  193.071096][T12023]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  193.071108][T12023]  ? arch_stack_walk+0xfb/0x150
[  193.071120][T12023]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  193.071132][T12023]  ? __pfx_rtnl_newlink+0x10/0x10
[  193.071141][T12023]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  193.071150][T12023]  ? kmem_cache_alloc_node_noprof+0x384/0x690
[  193.071161][T12023]  ? netlink_sendmsg+0x5d4/0xb40
[  193.071183][T12023]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  193.071193][T12023]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  193.071204][T12023]  ? __lock_acquire+0x6b5/0x2cf0
[  193.071215][T12023]  netlink_rcv_skb+0x232/0x4b0
[  193.071227][T12023]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  193.071238][T12023]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  193.071250][T12023]  ? netlink_deliver_tap+0x2e/0x1b0
[  193.071260][T12023]  ? netlink_deliver_tap+0x2e/0x1b0
[  193.071270][T12023]  netlink_unicast+0x75c/0x8e0
[  193.071282][T12023]  netlink_sendmsg+0x813/0xb40
[  193.071294][T12023]  ? __pfx_netlink_sendmsg+0x10/0x10
[  193.071305][T12023]  ? aa_sock_msg_perm+0xf1/0x1b0
[  193.071316][T12023]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  193.071327][T12023]  ____sys_sendmsg+0x972/0x9f0
[  193.071339][T12023]  ? __might_fault+0xaf/0x130
[  193.071350][T12023]  ? __pfx_____sys_sendmsg+0x10/0x10
[  193.071362][T12023]  ? import_iovec+0x73/0xa0
[  193.071373][T12023]  ___sys_sendmsg+0x2a5/0x360
[  193.071384][T12023]  ? __lock_acquire+0x6b5/0x2cf0
[  193.071392][T12023]  ? __pfx____sys_sendmsg+0x10/0x10
[  193.071404][T12023]  ? futex_wake+0x4ac/0x580
[  193.071420][T12023]  ? __fget_files+0x2a/0x420
[  193.071429][T12023]  ? __fget_files+0x3a0/0x420
[  193.071439][T12023]  __x64_sys_sendmsg+0x1bd/0x2a0
[  193.071450][T12023]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  193.071462][T12023]  ? rcu_is_watching+0x15/0xb0
[  193.071473][T12023]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.071482][T12023]  do_syscall_64+0x15f/0xf80
[  193.071493][T12023]  ? trace_irq_disable+0x3b/0x140
[  193.071506][T12023]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.071514][T12023] RIP: 0033:0x7fb4dbd9cdd9
[  193.071525][T12023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  193.071534][T12023] RSP: 002b:00007fb4dcc64028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  193.071544][T12023] RAX: ffffffffffffffda RBX: 00007fb4dc015fa0 RCX: 00007fb4dbd9cdd9
[  193.071551][T12023] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  193.071557][T12023] RBP: 00007fb4dbe32d69 R08: 0000000000000000 R09: 0000000000000000
[  193.071563][T12023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  193.071569][T12023] R13: 00007fb4dc016038 R14: 00007fb4dc015fa0 R15: 00007fff71794598
[  193.071609][T12023]  </TASK>
[  198.550783][   T97] block nbd0: Connection timed out, retrying (0/2 alive)
[  198.553555][   T97] block nbd0: Connection timed out, retrying (0/2 alive)
[  198.556322][   T97] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.559630][   T97] Buffer I/O error on dev nbd0, logical block 1, async page read
[  198.563246][   T97] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.566709][   T97] Buffer I/O error on dev nbd0, logical block 0, async page read
[  198.569657][T10319] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.573100][T10319] Buffer I/O error on dev nbd0, logical block 0, async page read
[  198.575591][T10319] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.578613][T10319] Buffer I/O error on dev nbd0, logical block 1, async page read
[  198.581944][T10319] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.585399][T10319] Buffer I/O error on dev nbd0, logical block 2, async page read
[  198.588390][T10319] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.592219][T10319] Buffer I/O error on dev nbd0, logical block 3, async page read
[  198.595310][T10319] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.598607][T10319] Buffer I/O error on dev nbd0, logical block 0, async page read
[  198.602096][T10319] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.605531][T10319] Buffer I/O error on dev nbd0, logical block 1, async page read
[  198.608391][T10319] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.612094][T10319] Buffer I/O error on dev nbd0, logical block 2, async page read
[  198.615124][T10319] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.618432][T10319] Buffer I/O error on dev nbd0, logical block 3, async page read
[  198.623085][T10319] ldm_validate_partition_table(): Disk read failed.
[  198.626534][T10319] Dev nbd0: unable to read RDB block 0
[  198.629615][T10319]  nbd0: unable to read partition table
[  198.635347][T10319] ldm_validate_partition_table(): Disk read failed.
[  198.638805][T10319] Dev nbd0: unable to read RDB block 0
[  198.642328][T10319]  nbd0: unable to read partition table
[  199.822295][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
