last executing test programs:

53.964736702s ago: executing program 2 (id=228):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x28, r1, 0x483, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x16}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0xc080)

48.380267488s ago: executing program 2 (id=228):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x28, r1, 0x483, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x16}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0xc080)

42.591649452s ago: executing program 2 (id=228):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x28, r1, 0x483, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x16}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0xc080)

36.150571972s ago: executing program 2 (id=228):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x28, r1, 0x483, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x16}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0xc080)

29.835556127s ago: executing program 2 (id=228):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x28, r1, 0x483, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x16}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0xc080)

23.620403988s ago: executing program 2 (id=228):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x28, r1, 0x483, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x16}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0xc080)

719.463175ms ago: executing program 0 (id=1440):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
unshare(0x22020600)
tee(r2, r1, 0x80000001, 0x0)
vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x1)

637.532712ms ago: executing program 0 (id=1444):
pipe(0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000002300)={0x1f, 0x0, @any, 0x804}, 0xe)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x4003, 0xff, 0xc, 0x3, 0x0, 0x0, 0x40}, 0xc)
listen(r0, 0xffffffff)

569.718007ms ago: executing program 0 (id=1446):
unshare(0x22020400)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, 0x0, 0x0)

507.00116ms ago: executing program 0 (id=1448):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10)

506.693794ms ago: executing program 0 (id=1450):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0x11, 0x148, 0x0, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@ip={@local, @private=0x1a010100, 0xffffff00, 0xffffffff, 'hsr0\x00', 'wlan0\x00', {}, {}, 0x6c, 0x1, 0x40}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x5, 0x2, 0x24, 0x6], 0x4, 0x5}, {0xffffffffffffffff, [0x56, 0x2], 0x0, 0x4}}}}, {{@ip={@rand_addr=0x64010101, @multicast2, 0xffffff00, 0xffffff00, 'rose0\x00', 'gretap0\x00', {0xff}, {}, 0x6, 0x2, 0xc}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x81, 0x2, 0x7fff, 'snmp\x00', {0x400000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

427.618758ms ago: executing program 0 (id=1452):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000100), 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @remote}], 0x10)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000002c0))

269.447976ms ago: executing program 1 (id=1456):
unshare(0x24020400)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

198.368236ms ago: executing program 1 (id=1457):
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x28, 0x81, 0x0, 0xfffff03c}, {0x6, 0x3a, 0x6, 0x9}]}, 0x10)

198.235838ms ago: executing program 1 (id=1458):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101c02, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000240)={0x2, &(0x7f0000000180)=[{0x48, 0x0, 0x20, 0x2}, {0x6, 0x3, 0xd9, 0x1}]})
write$ppp(r0, &(0x7f0000000200)="7489", 0x2)

70.133747ms ago: executing program 1 (id=1459):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000400000071106d000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

69.998551ms ago: executing program 1 (id=1460):
openat$tun(0xffffffffffffff9c, &(0x7f0000001580), 0x4001, 0x0)

0s ago: executing program 1 (id=1461):
r0 = socket$kcm(0x10, 0x2, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x44, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x44}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NLBL_MGMT_C_ADD(r1, 0x0, 0x400c000)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'wlan0\x00', {0x1}, 0x10})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:30164' (ED25519) to the list of known hosts.
syzkaller login: [   50.163188][ T5827] cgroup: Unknown subsys name 'net'
[   50.304699][ T5827] cgroup: Unknown subsys name 'cpuset'
[   50.311728][ T5827] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.756751][ T5827] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.839036][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.842740][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.845850][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.848938][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.853084][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.937038][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.945673][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.949080][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.954411][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.957534][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.962046][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.966587][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.970489][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.989471][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.012464][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.092598][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   56.224042][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.228417][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.232102][ T5836] bridge_slave_0: entered allmulticast mode
[   56.236072][ T5836] bridge_slave_0: entered promiscuous mode
[   56.246378][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.250342][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.253778][ T5836] bridge_slave_1: entered allmulticast mode
[   56.257857][ T5836] bridge_slave_1: entered promiscuous mode
[   56.304317][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.311968][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.340990][ T5836] team0: Port device team_slave_0 added
[   56.344816][ T5836] team0: Port device team_slave_1 added
[   56.370056][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.373069][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.385130][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.396133][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.399012][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.411134][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.542473][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   56.557626][ T5836] hsr_slave_0: entered promiscuous mode
[   56.562037][ T5836] hsr_slave_1: entered promiscuous mode
[   56.596522][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   56.772107][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.775166][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.778132][ T5841] bridge_slave_0: entered allmulticast mode
[   56.782615][ T5841] bridge_slave_0: entered promiscuous mode
[   56.816017][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.819902][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.823101][ T5841] bridge_slave_1: entered allmulticast mode
[   56.827040][ T5841] bridge_slave_1: entered promiscuous mode
[   56.883430][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.886586][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.890033][ T5842] bridge_slave_0: entered allmulticast mode
[   56.893914][ T5842] bridge_slave_0: entered promiscuous mode
[   56.899110][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.902624][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.905778][ T5842] bridge_slave_1: entered allmulticast mode
[   56.910655][ T5842] bridge_slave_1: entered promiscuous mode
[   56.917178][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.943271][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.982565][ T5841] team0: Port device team_slave_0 added
[   56.987634][ T5841] team0: Port device team_slave_1 added
[   56.992290][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.010768][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.023389][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.025692][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.035302][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.060207][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.063115][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.073923][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.101249][ T5842] team0: Port device team_slave_0 added
[   57.112611][ T5842] team0: Port device team_slave_1 added
[   57.168071][ T5841] hsr_slave_0: entered promiscuous mode
[   57.172687][ T5841] hsr_slave_1: entered promiscuous mode
[   57.175524][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.178763][ T5841] Cannot create hsr debugfs directory
[   57.181402][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.188962][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.197239][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.210745][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.216952][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.220718][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.232995][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.237859][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.244089][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.274013][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.349137][ T5842] hsr_slave_0: entered promiscuous mode
[   57.353314][ T5842] hsr_slave_1: entered promiscuous mode
[   57.356445][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.360423][ T5842] Cannot create hsr debugfs directory
[   57.580725][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.586767][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.595943][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.603345][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.662985][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.702271][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   57.728266][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.731123][ T4337] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.739120][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.756101][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.759504][ T4337] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.766149][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.782210][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.789003][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.862584][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.897065][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   57.909895][ T5846] Bluetooth: hci0: command tx timeout
[   57.931367][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.934392][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.954354][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.958227][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.027043][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.069122][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   58.072746][ T5846] Bluetooth: hci2: command tx timeout
[   58.072793][ T5220] Bluetooth: hci1: command tx timeout
[   58.078633][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.096443][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.099416][ T4337] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.112754][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.115182][ T4337] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.196950][ T5836] veth0_vlan: entered promiscuous mode
[   58.215418][ T5836] veth1_vlan: entered promiscuous mode
[   58.233326][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.273574][ T5836] veth0_macvtap: entered promiscuous mode
[   58.282410][ T5836] veth1_macvtap: entered promiscuous mode
[   58.298897][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.331318][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.336059][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.340657][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.343410][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.346177][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.375226][ T5841] veth0_vlan: entered promiscuous mode
[   58.407206][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.426832][ T5841] veth1_vlan: entered promiscuous mode
[   58.479854][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.483249][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.513367][ T5842] veth0_vlan: entered promiscuous mode
[   58.532819][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.533908][ T5841] veth0_macvtap: entered promiscuous mode
[   58.536603][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.549623][ T5842] veth1_vlan: entered promiscuous mode
[   58.563410][ T5841] veth1_macvtap: entered promiscuous mode
[   58.602348][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.606104][ T5842] veth0_macvtap: entered promiscuous mode
[   58.610627][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.615285][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.628960][ T5841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.634942][ T5841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.638583][ T5841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.643230][ T5841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.652642][ T5842] veth1_macvtap: entered promiscuous mode
[   58.716628][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.736399][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.760570][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.764339][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.768202][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.775793][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.794131][ T5903] tipc: Can't bind to reserved service type 0
[   58.820355][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.823794][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.877216][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.888338][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.934639][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.937902][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.973144][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.976237][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.245262][ T5925] syz_tun: entered allmulticast mode
[   59.263140][ T5924] syz_tun: left allmulticast mode
[   59.943163][ T5970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.30'.
[   59.990851][ T5220] Bluetooth: hci0: command tx timeout
[   60.153592][ T5220] Bluetooth: hci2: command tx timeout
[   60.153626][ T5846] Bluetooth: hci1: command tx timeout
[   61.197479][ T6033] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   61.420371][ T6044] warning: `syz.0.65' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.445752][ T6046] Zero length message leads to an empty skb
[   61.480996][ T6048] syz.2.66 uses obsolete (PF_INET,SOCK_PACKET)
[   61.821919][ T6074] netlink: 168 bytes leftover after parsing attributes in process `syz.1.76'.
[   62.070730][ T5846] Bluetooth: hci0: command tx timeout
[   62.145773][ T6096] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.169136][ T6098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.86'.
[   62.230325][ T5846] Bluetooth: hci2: command tx timeout
[   62.232108][ T5220] Bluetooth: hci1: command tx timeout
[   62.718631][ T6140] netlink: 24 bytes leftover after parsing attributes in process `syz.2.107'.
[   62.786551][ T6144] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[   62.793742][ T6144] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[   62.797306][ T6144] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[   63.061746][ T6163] netlink: 'syz.2.119': attribute type 2 has an invalid length.
[   64.312027][ T5220] Bluetooth: hci1: command tx timeout
[   64.312061][ T5846] Bluetooth: hci2: command tx timeout
[   64.386046][ T6191] af_packet: tpacket_rcv: packet too big, clamped from 240 to 4294967272. macoff=96
[   64.394027][ T6193] netlink: 32 bytes leftover after parsing attributes in process `syz.1.130'.
[   64.567416][ T6204] netlink: 28 bytes leftover after parsing attributes in process `syz.0.137'.
[   64.662995][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.139'.
[   64.858198][ T6219] lo speed is unknown, defaulting to 1000
[   64.863488][ T6219] lo speed is unknown, defaulting to 1000
[   64.876241][ T6219] lo speed is unknown, defaulting to 1000
[   65.006409][ T6229] netlink: 'syz.2.149': attribute type 1 has an invalid length.
[   65.117868][ T6219] infiniband syz0: set active
[   65.120057][ T6219] infiniband syz0: added lo
[   65.132621][ T5899] lo speed is unknown, defaulting to 1000
[   65.181077][ T6219] RDS/IB: syz0: added
[   65.182798][ T6219] smc: adding ib device syz0 with port count 1
[   65.185059][ T6219] smc:    ib device syz0 port 1 has pnetid 
[   65.192355][  T973] lo speed is unknown, defaulting to 1000
[   65.197462][ T6219] lo speed is unknown, defaulting to 1000
[   65.527723][ T6219] lo speed is unknown, defaulting to 1000
[   65.681591][ T6219] lo speed is unknown, defaulting to 1000
[   66.336491][ T6286] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.340882][ T6286] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.497024][ T6286] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.508533][ T6286] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.592599][ T6286] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.596687][ T6286] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.600600][ T6286] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.604509][ T6286] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.711819][ T6295] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.179'.
[   67.090220][ T6309] netlink: 'syz.2.186': attribute type 2 has an invalid length.
[   67.974188][ T6313] netlink: 'syz.2.188': attribute type 4 has an invalid length.
[   68.115951][   T24] lo speed is unknown, defaulting to 1000
[   68.227528][ T6332] netlink: 28 bytes leftover after parsing attributes in process `syz.2.196'.
[   68.232392][ T6332] netlink: 32 bytes leftover after parsing attributes in process `syz.2.196'.
[   68.245677][ T6334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.197'.
[   68.251658][ T6332] netlink: 28 bytes leftover after parsing attributes in process `syz.2.196'.
[   68.256191][ T6332] netlink: 32 bytes leftover after parsing attributes in process `syz.2.196'.
[   68.735017][ T6364] syz_tun: entered allmulticast mode
[   68.745526][ T6363] syz_tun: left allmulticast mode
[   68.878205][ T6375] bridge0: entered promiscuous mode
[   70.367727][ T5866] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.435845][ T5866] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.495668][ T5866] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.542282][ T5866] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.651714][ T5220] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.655566][ T5220] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.659015][ T5220] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.663961][ T5220] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.668536][ T5866] bridge_slave_1: left allmulticast mode
[   70.669024][ T5220] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.685542][ T5866] bridge_slave_1: left promiscuous mode
[   70.692419][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.704426][ T5866] bridge_slave_0: left allmulticast mode
[   70.715616][ T5866] bridge_slave_0: left promiscuous mode
[   70.723030][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.746272][ T6405] netlink: 276 bytes leftover after parsing attributes in process `syz.0.229'.
[   70.755167][ T6405] netlink: 276 bytes leftover after parsing attributes in process `syz.0.229'.
[   70.875156][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.878148][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.043937][ T5866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   71.048934][ T5866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   71.053348][ T5866] bond0 (unregistering): Released all slaves
[   71.067483][ T6412] batadv_slave_1: entered promiscuous mode
[   71.077624][ T6411] batadv_slave_1: left promiscuous mode
[   71.096611][ T6402] lo speed is unknown, defaulting to 1000
[   71.297149][ T6422] netlink: 'syz.1.235': attribute type 1 has an invalid length.
[   71.797464][ T5866] hsr_slave_0: left promiscuous mode
[   71.801622][ T5866] hsr_slave_1: left promiscuous mode
[   71.803856][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.806430][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.810044][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.812523][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.837072][ T5866] veth1_macvtap: left promiscuous mode
[   71.839077][ T5866] veth0_macvtap: left promiscuous mode
[   71.844674][ T5866] veth1_vlan: left promiscuous mode
[   71.846482][ T5866] veth0_vlan: left promiscuous mode
[   72.075178][ T6477] netlink: 24 bytes leftover after parsing attributes in process `syz.0.252'.
[   72.121638][ T6479] netlink: 28 bytes leftover after parsing attributes in process `syz.1.247'.
[   72.234482][ T5866] team0 (unregistering): Port device team_slave_1 removed
[   72.254614][ T5866] team0 (unregistering): Port device team_slave_0 removed
[   72.497788][ T6402] chnl_net:caif_netlink_parms(): no params data found
[   72.568133][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'.
[   72.571963][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'.
[   72.713441][ T5220] Bluetooth: hci0: command tx timeout
[   72.791134][ T6402] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.793422][ T6402] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.795701][ T6402] bridge_slave_0: entered allmulticast mode
[   72.798274][ T6402] bridge_slave_0: entered promiscuous mode
[   72.828230][ T6402] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.831076][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.839508][ T6402] bridge_slave_1: entered allmulticast mode
[   72.844598][ T6402] bridge_slave_1: entered promiscuous mode
[   72.883756][ T6402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.896368][ T6402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.946698][ T6402] team0: Port device team_slave_0 added
[   72.961227][ T6402] team0: Port device team_slave_1 added
[   73.024248][ T6402] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.027171][ T6402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.051430][   T13] nci: nci_ntf_packet: unknown ntf opcode 0x206
[   73.055554][ T6402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.061771][ T6402] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.065211][ T6402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.069715][ T6504] netlink: 'syz.0.258': attribute type 1 has an invalid length.
[   73.082658][ T6402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.133695][ T6402] hsr_slave_0: entered promiscuous mode
[   73.136165][ T6402] hsr_slave_1: entered promiscuous mode
[   73.789337][ T6402] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.804109][ T6402] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.835588][ T6402] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.842070][ T6402] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   74.020450][ T6402] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.062302][ T6402] 8021q: adding VLAN 0 to HW filter on device team0
[   74.068897][ T6540] bond0: option arp_validate: invalid value (18446744073491447809)
[   74.082382][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.085344][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.125974][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.129088][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.161349][ T6543] netlink: 'syz.0.268': attribute type 1 has an invalid length.
[   74.166253][ T6543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.268'.
[   74.334100][ T6557] netlink: 'syz.1.272': attribute type 83 has an invalid length.
[   74.407478][ T6402] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.490655][ T6402] veth0_vlan: entered promiscuous mode
[   74.510082][ T6402] veth1_vlan: entered promiscuous mode
[   74.612212][ T6402] veth0_macvtap: entered promiscuous mode
[   74.635193][ T6402] veth1_macvtap: entered promiscuous mode
[   74.731474][ T6402] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.772560][ T6402] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.787284][ T6402] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.793454][ T6402] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.797408][ T6402] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.799433][ T5220] Bluetooth: hci0: command tx timeout
[   74.806412][ T6402] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.964090][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.971295][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.031109][ T4608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.039413][ T4608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.045003][ T6590] Illegal XDP return value 4294967274 on prog  (id 49) dev N/A, expect packet loss!
[   75.059854][ T6590] netlink: 'syz.1.277': attribute type 13 has an invalid length.
[   75.063310][ T6590] netlink: 'syz.1.277': attribute type 17 has an invalid length.
[   75.185685][ T5693] bond0: (slave bond_slave_0): interface is now down
[   75.191805][ T5693] bond0: (slave bond_slave_1): interface is now down
[   75.192556][ T6590] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.198845][ T6590] 8021q: adding VLAN 0 to HW filter on device team0
[   75.208302][ T6590] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   75.220067][ T5693] bond0: (slave bond_slave_0): interface is now down
[   75.222670][ T5693] bond0: (slave bond_slave_1): interface is now down
[   75.228735][ T6590] syz.1.277 (6590) used greatest stack depth: 19736 bytes left
[   75.239574][ T5865] bond0: (slave bond_slave_0): interface is now down
[   75.242047][ T5865] bond0: (slave bond_slave_1): interface is now down
[   75.259825][ T5693] bond0: (slave bond_slave_0): interface is now down
[   75.267457][ T5693] bond0: (slave bond_slave_1): interface is now down
[   75.294160][ T5693] bond0: now running without any active interface!
[   75.376434][ T6603] tipc: Started in network mode
[   75.378163][ T6603] tipc: Node identity 8aebd3499f46, cluster identity 4711
[   75.381806][ T6603] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.384693][ T6603] syzkaller0: entered promiscuous mode
[   75.386460][ T6603] syzkaller0: entered allmulticast mode
[   75.402859][ T6603] tipc: Resetting bearer <eth:syzkaller0>
[   75.412227][ T6602] tipc: Resetting bearer <eth:syzkaller0>
[   75.437268][ T6602] tipc: Disabling bearer <eth:syzkaller0>
[   75.476988][ T6608] netlink: 'syz.0.282': attribute type 4 has an invalid length.
[   75.483945][   T10] lo speed is unknown, defaulting to 1000
[   75.486461][   T10] syz0: Port: 1 Link DOWN
[   75.488757][   T10] lo speed is unknown, defaulting to 1000
[   75.490931][ T6608] netlink: 'syz.0.282': attribute type 4 has an invalid length.
[   75.497166][ T1860] lo speed is unknown, defaulting to 1000
[   75.501979][ T1860] syz0: Port: 1 Link ACTIVE
[   75.504381][  T973] lo speed is unknown, defaulting to 1000
[   75.771331][ T6624] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   76.200140][ T5865] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.353132][ T6642] netlink: 24 bytes leftover after parsing attributes in process `syz.0.298'.
[   76.357045][ T6642] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   76.480733][ T6646] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.485332][ T6646] batadv_slave_0: entered promiscuous mode
[   76.625608][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   76.630611][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   76.634112][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   76.638402][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   76.641574][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   76.666957][ T6649] lo speed is unknown, defaulting to 1000
[   76.694335][ T6652] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   76.697949][ T6652] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   76.702049][ T6652] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   76.705948][ T6652] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   76.968011][ T6649] chnl_net:caif_netlink_parms(): no params data found
[   77.167282][ T6649] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.174130][ T6649] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.177265][ T6649] bridge_slave_0: entered allmulticast mode
[   77.183623][ T6649] bridge_slave_0: entered promiscuous mode
[   77.190689][ T6649] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.193979][ T6649] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.197549][ T6649] bridge_slave_1: entered allmulticast mode
[   77.209899][ T6649] bridge_slave_1: entered promiscuous mode
[   77.253384][ T5865] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.296166][ T6649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.315543][ T6649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.399485][ T6696] netlink: 'syz.1.321': attribute type 11 has an invalid length.
[   77.414523][ T6649] team0: Port device team_slave_0 added
[   77.422150][ T6649] team0: Port device team_slave_1 added
[   77.504442][ T6649] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.507718][ T6649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.527802][ T6649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.534608][ T6649] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.537358][ T6649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.547074][ T6649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.595659][ T6704] netlink: 40 bytes leftover after parsing attributes in process `syz.1.325'.
[   77.609894][ T5865] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.656109][ T6649] hsr_slave_0: entered promiscuous mode
[   77.658673][ T6649] hsr_slave_1: entered promiscuous mode
[   77.662327][ T6649] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   77.666312][ T6649] Cannot create hsr debugfs directory
[   78.166110][ T5865] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.389008][ T6717] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.398641][ T6717] batadv_slave_1: entered promiscuous mode
[   78.504560][ T5865] bridge_slave_1: left allmulticast mode
[   78.507109][ T5865] bridge_slave_1: left promiscuous mode
[   78.511913][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.531361][ T5865] bridge_slave_0: left allmulticast mode
[   78.533362][ T5865] bridge_slave_0: left promiscuous mode
[   78.535462][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.710164][ T5846] Bluetooth: hci0: command tx timeout
[   78.738827][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.333'.
[   78.840284][ T5865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   78.844827][ T5865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   78.850569][ T5865] bond0 (unregistering): Released all slaves
[   79.223429][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.338'.
[   79.226978][ T6755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.338'.
[   79.231338][ T6755] netlink: 'syz.0.338': attribute type 18 has an invalid length.
[   79.333530][  T790] cfg80211: failed to load regulatory.db
[   79.356016][ T5865] hsr_slave_0: left promiscuous mode
[   79.364414][ T5865] hsr_slave_1: left promiscuous mode
[   79.376918][ T5865] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.379932][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.383148][ T5865] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.385769][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.405276][ T5865] veth1_macvtap: left promiscuous mode
[   79.407370][ T5865] veth0_macvtap: left promiscuous mode
[   79.411315][ T5865] veth1_vlan: left promiscuous mode
[   79.413385][ T5865] veth0_vlan: left promiscuous mode
[   79.672435][   T33] audit: type=1800 audit(1752490633.171:2): pid=6761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.340" name="cgroup.controllers" dev="tmpfs" ino=583 res=0 errno=0
[   79.824847][ T5865] team0 (unregistering): Port device team_slave_1 removed
[   79.851337][ T5865] team0 (unregistering): Port device team_slave_0 removed
[   80.172110][ T6649] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   80.176383][ T6649] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   80.187485][ T6766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.343'.
[   80.203262][ T6766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.343'.
[   80.245703][ T6649] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   80.275438][ T6649] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   80.477167][ T6649] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.532746][ T6649] 8021q: adding VLAN 0 to HW filter on device team0
[   80.554534][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.557511][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.580803][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.583894][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.791295][ T5846] Bluetooth: hci0: command tx timeout
[   80.902679][ T6649] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.981931][ T6649] veth0_vlan: entered promiscuous mode
[   80.998317][ T6649] veth1_vlan: entered promiscuous mode
[   81.058773][ T6649] veth0_macvtap: entered promiscuous mode
[   81.082286][ T6649] veth1_macvtap: entered promiscuous mode
[   81.118596][ T6649] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.133552][ T6649] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.138505][ T6649] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.153709][ T6649] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.156940][ T6649] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.171210][ T6649] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.352881][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.358139][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.381713][ T6833] netlink: 'syz.1.356': attribute type 16 has an invalid length.
[   81.384999][ T6833] netlink: 'syz.1.356': attribute type 17 has an invalid length.
[   81.410321][ T6833] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   81.427356][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.432689][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.237298][ T6845] netlink: 136 bytes leftover after parsing attributes in process `syz.1.361'.
[   82.787669][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.384'.
[   82.923582][ T5693] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.181703][ T6907] netlink: 159784 bytes leftover after parsing attributes in process `syz.1.390'.
[   83.330085][ T5220] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   83.335868][ T5220] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   83.343579][ T5220] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   83.348473][ T5220] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   83.353376][ T5220] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   83.387660][ T6917] lo speed is unknown, defaulting to 1000
[   83.557914][ T6917] chnl_net:caif_netlink_parms(): no params data found
[   83.635661][ T6917] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.638713][ T6917] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.643525][ T6917] bridge_slave_0: entered allmulticast mode
[   83.648026][ T6917] bridge_slave_0: entered promiscuous mode
[   83.653357][ T6917] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.656422][ T6917] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.660456][ T6917] bridge_slave_1: entered allmulticast mode
[   83.664695][ T6917] bridge_slave_1: entered promiscuous mode
[   83.697186][ T6917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.705608][ T6917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.738882][ T6917] team0: Port device team_slave_0 added
[   83.744199][ T6917] team0: Port device team_slave_1 added
[   83.773687][ T6917] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.776874][ T6917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.788404][ T6917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.793499][ T6917] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.795789][ T6917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.804460][ T6917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.834419][ T6917] hsr_slave_0: entered promiscuous mode
[   83.836779][ T6917] hsr_slave_1: entered promiscuous mode
[   83.981973][ T6932] netlink: 76 bytes leftover after parsing attributes in process `syz.0.397'.
[   83.985379][ T6932] netlink: 76 bytes leftover after parsing attributes in process `syz.0.397'.
[   84.362537][ T6958] netlink: 204 bytes leftover after parsing attributes in process `syz.1.410'.
[   84.365456][ T6958] netlink: 16 bytes leftover after parsing attributes in process `syz.1.410'.
[   84.374632][ T6960] netlink: 28 bytes leftover after parsing attributes in process `syz.0.411'.
[   84.377984][ T6960] netlink: 'syz.0.411': attribute type 7 has an invalid length.
[   84.391006][ T6960] netlink: 'syz.0.411': attribute type 8 has an invalid length.
[   84.393856][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.411'.
[   84.411884][ T6960] erspan0: entered promiscuous mode
[   84.414396][ T6960] gretap0: entered promiscuous mode
[   84.425344][ T6960] erspan0: left promiscuous mode
[   84.428287][ T6960] gretap0: left promiscuous mode
[   84.520295][ T6969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.414'.
[   84.523611][ T6969] netlink: 'syz.1.414': attribute type 7 has an invalid length.
[   84.526352][ T6969] netlink: 'syz.1.414': attribute type 8 has an invalid length.
[   84.530389][ T6969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.414'.
[   84.651829][ T5693] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.729917][ T5693] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.792935][ T5693] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.987225][ T5693] bridge_slave_1: left allmulticast mode
[   84.994780][ T5693] bridge_slave_1: left promiscuous mode
[   84.998769][ T5693] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.009870][ T5693] bridge_slave_0: left allmulticast mode
[   85.019409][ T5693] bridge_slave_0: left promiscuous mode
[   85.021909][ T5693] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.423898][ T5693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   85.428454][ T5693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   85.431990][ T5220] Bluetooth: hci0: command tx timeout
[   85.436615][ T5693] bond0 (unregistering): Released all slaves
[   86.070157][ T6917] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   86.083351][ T6917] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   86.092632][ T6917] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   86.104482][ T6917] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   86.153018][ T5693] hsr_slave_0: left promiscuous mode
[   86.155992][ T5693] hsr_slave_1: left promiscuous mode
[   86.158852][ T5693] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.166095][ T5693] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.170543][ T5693] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.179310][ T5693] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.206385][ T5693] veth1_macvtap: left promiscuous mode
[   86.208903][ T5693] veth0_macvtap: left promiscuous mode
[   86.213815][ T5693] veth1_vlan: left promiscuous mode
[   86.216336][ T5693] veth0_vlan: left promiscuous mode
[   86.603075][ T5693] team0 (unregistering): Port device team_slave_1 removed
[   86.624352][ T5693] team0 (unregistering): Port device team_slave_0 removed
[   86.997216][ T6917] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.023683][ T6917] 8021q: adding VLAN 0 to HW filter on device team0
[   87.032736][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.035231][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.052900][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.055386][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.087478][ T7077] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.090522][ T7077] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.150515][ T7077] batadv_slave_0: left promiscuous mode
[   87.153721][ T7077] batadv_slave_1: left promiscuous mode
[   87.193072][ T7077] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.196111][ T7077] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.199043][ T7077] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.205436][ T7077] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.234384][ T7077] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   87.237462][ T7077] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   87.240776][ T7077] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   87.244167][ T7077] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   87.258274][ T5879] lo speed is unknown, defaulting to 1000
[   87.261710][ T5879] syz0: Port: 1 Link DOWN
[   87.277882][ T5879] lo speed is unknown, defaulting to 1000
[   87.279057][ T6917] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   87.377767][ T7089] netlink: 'syz.0.450': attribute type 11 has an invalid length.
[   87.384374][ T7089] netlink: 'syz.0.450': attribute type 4 has an invalid length.
[   87.475483][ T6917] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.510133][ T5220] Bluetooth: hci0: command tx timeout
[   87.527763][ T6917] veth0_vlan: entered promiscuous mode
[   87.546214][ T6917] veth1_vlan: entered promiscuous mode
[   87.562832][ T6917] veth0_macvtap: entered promiscuous mode
[   87.570799][ T6917] veth1_macvtap: entered promiscuous mode
[   87.591634][ T5693] nci: nci_rsp_packet: unknown rsp opcode 0x204
[   87.644651][ T6917] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.653209][ T6917] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.661457][ T6917] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.664373][ T6917] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.667325][ T6917] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.673521][ T6917] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.799073][ T7115] __nla_validate_parse: 5 callbacks suppressed
[   87.799125][ T7115] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.460'.
[   88.364320][ T4608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.366977][ T4608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.394344][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.400018][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.529400][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.472'.
[   88.783414][ T7155] lo speed is unknown, defaulting to 1000
[   88.998438][ T7171] dummy0: entered promiscuous mode
[   89.002027][ T7171] dummy0: left promiscuous mode
[   89.130879][ T7176] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   89.209734][ T7155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.477'.
[   89.214015][ T7155] smc: removing ib device syz0
[   89.353540][ T7173] netlink: 'syz.0.477': attribute type 12 has an invalid length.
[   89.673384][ T5693] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.270412][ T7196] netlink: 'syz.1.487': attribute type 10 has an invalid length.
[   90.273940][ T7196] netlink: 40 bytes leftover after parsing attributes in process `syz.1.487'.
[   90.279660][ T7196] veth0_vlan: left promiscuous mode
[   90.281970][ T7196] veth0_vlan: entered promiscuous mode
[   90.289684][ T7196] veth0_vlan: entered allmulticast mode
[   90.293631][ T7196] bridge0: port 3(veth0_vlan) entered blocking state
[   90.296316][ T7196] bridge0: port 3(veth0_vlan) entered disabled state
[   90.303930][ T7196] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[   90.396467][ T7200] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   90.479583][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'.
[   90.511319][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   90.515238][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   90.519135][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   90.525498][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   90.529120][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   90.645442][ T7220] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.495'.
[   90.674992][ T7225] netlink: 'syz.1.497': attribute type 1 has an invalid length.
[   90.677580][ T7225] netlink: 172 bytes leftover after parsing attributes in process `syz.1.497'.
[   90.682074][ T7225] netlink: 'syz.1.497': attribute type 1 has an invalid length.
[   90.691372][ T7209] chnl_net:caif_netlink_parms(): no params data found
[   90.774548][ T7209] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.777155][ T7209] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.781177][ T7209] bridge_slave_0: entered allmulticast mode
[   90.790649][ T7209] bridge_slave_0: entered promiscuous mode
[   90.800761][ T7209] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.803169][ T7209] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.805602][ T7209] bridge_slave_1: entered allmulticast mode
[   90.809816][ T7209] bridge_slave_1: entered promiscuous mode
[   90.835666][ T7209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.841454][ T7209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.868025][ T7245] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.877219][ T7209] team0: Port device team_slave_0 added
[   90.882402][ T7209] team0: Port device team_slave_1 added
[   90.940429][ T7209] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.943316][ T7209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.954928][ T7209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.961526][ T7209] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.965124][ T7209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.978712][ T7209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.048269][ T7209] hsr_slave_0: entered promiscuous mode
[   91.058534][ T7209] hsr_slave_1: entered promiscuous mode
[   91.062330][ T7209] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.065515][ T7209] Cannot create hsr debugfs directory
[   91.155358][ T5693] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.226354][ T5693] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.274078][ T5693] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.398923][ T5693] bridge_slave_1: left allmulticast mode
[   91.401734][ T5693] bridge_slave_1: left promiscuous mode
[   91.404173][ T5693] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.409126][ T5693] bridge_slave_0: left allmulticast mode
[   91.411474][ T5693] bridge_slave_0: left promiscuous mode
[   91.413388][ T5693] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.617456][ T5693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   91.622584][ T5693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   91.626777][ T5693] bond0 (unregistering): Released all slaves
[   91.921728][ T5693] hsr_slave_0: left promiscuous mode
[   91.924637][ T5693] hsr_slave_1: left promiscuous mode
[   91.927416][ T5693] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.931019][ T5693] batman_adv: batadv0: Removing interface: batadv_slave_0
[   91.934810][ T5693] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.937910][ T5693] batman_adv: batadv0: Removing interface: batadv_slave_1
[   91.971517][ T5693] veth1_macvtap: left promiscuous mode
[   91.973992][ T5693] veth0_macvtap: left promiscuous mode
[   91.976455][ T5693] veth1_vlan: left promiscuous mode
[   91.978775][ T5693] veth0_vlan: left promiscuous mode
[   92.323121][ T5693] team0 (unregistering): Port device team_slave_1 removed
[   92.347010][ T5693] team0 (unregistering): Port device team_slave_0 removed
[   92.549383][ T5846] Bluetooth: hci0: command tx timeout
[   92.623132][ T7209] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   92.632230][ T7209] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   92.651050][ T7209] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   92.677783][ T7209] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   92.811043][ T7209] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.828317][ T7209] 8021q: adding VLAN 0 to HW filter on device team0
[   92.853497][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.855868][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.864304][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.866641][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.905671][ T7314] netlink: 20 bytes leftover after parsing attributes in process `syz.0.530'.
[   93.103402][ T7209] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.164349][ T7209] veth0_vlan: entered promiscuous mode
[   93.173417][ T7209] veth1_vlan: entered promiscuous mode
[   93.201466][ T7209] veth0_macvtap: entered promiscuous mode
[   93.208561][ T7209] veth1_macvtap: entered promiscuous mode
[   93.281203][ T7209] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.292079][ T7209] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.300305][ T7209] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.306406][ T7209] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.312608][ T7209] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.318706][ T7209] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.428094][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.434693][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.464995][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.468244][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.087152][ T7356] netlink: 'syz.0.547': attribute type 4 has an invalid length.
[   94.266082][ T7370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.553'.
[   94.514830][ T7390] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.607821][ T7395] : entered promiscuous mode
[   95.243925][ T5866] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.500473][ T7421] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   95.994529][ T5220] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   95.997408][ T5220] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   96.002422][ T5220] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   96.005802][ T5220] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   96.008971][ T5220] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   96.140866][ T7461] chnl_net:caif_netlink_parms(): no params data found
[   96.208941][ T7461] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.213952][ T7461] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.217018][ T7461] bridge_slave_0: entered allmulticast mode
[   96.221752][ T7461] bridge_slave_0: entered promiscuous mode
[   96.230824][ T7461] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.235409][ T7461] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.238518][ T7461] bridge_slave_1: entered allmulticast mode
[   96.250597][ T7461] bridge_slave_1: entered promiscuous mode
[   96.295899][ T7461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.303661][ T7461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.338214][ T7461] team0: Port device team_slave_0 added
[   96.351580][ T7461] team0: Port device team_slave_1 added
[   96.376687][ T7461] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.379871][ T7461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.388992][ T7461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.399699][ T7461] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.404268][ T7461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.416663][ T7461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.464783][ T7461] hsr_slave_0: entered promiscuous mode
[   96.467479][ T7461] hsr_slave_1: entered promiscuous mode
[   96.594410][ T5866] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.660205][ T5866] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.701344][ T5866] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.816251][ T5866] bridge_slave_1: left allmulticast mode
[   96.818124][ T5866] bridge_slave_1: left promiscuous mode
[   96.821841][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.831262][ T5866] bridge_slave_0: left allmulticast mode
[   96.837283][ T5866] bridge_slave_0: left promiscuous mode
[   96.842053][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.195519][ T5866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   97.202138][ T5866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   97.207063][ T5866] bond0 (unregistering): Released all slaves
[   97.242287][ T7518] netlink: 28 bytes leftover after parsing attributes in process `syz.1.606'.
[   97.246203][ T7518] netlink: 28 bytes leftover after parsing attributes in process `syz.1.606'.
[   97.251066][ T7518] netlink: 28 bytes leftover after parsing attributes in process `syz.1.606'.
[   97.254471][ T7518] netlink: 28 bytes leftover after parsing attributes in process `syz.1.606'.
[   97.341489][ T7521] netlink: 24 bytes leftover after parsing attributes in process `syz.0.607'.
[   97.525440][ T5866] hsr_slave_0: left promiscuous mode
[   97.535333][ T5866] hsr_slave_1: left promiscuous mode
[   97.538238][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.552365][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.557206][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.563543][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.577916][ T5866] veth1_macvtap: left promiscuous mode
[   97.580909][ T5866] veth0_macvtap: left promiscuous mode
[   97.582766][ T5866] veth1_vlan: left promiscuous mode
[   97.584734][ T5866] veth0_vlan: left promiscuous mode
[   97.915059][ T5866] team0 (unregistering): Port device team_slave_1 removed
[   97.937081][ T5866] team0 (unregistering): Port device team_slave_0 removed
[   98.072052][ T5846] Bluetooth: hci0: command tx timeout
[   98.267647][ T7461] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   98.288524][ T7461] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   98.304491][ T7461] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   98.344996][ T7461] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   98.464626][ T7461] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.476147][ T7461] 8021q: adding VLAN 0 to HW filter on device team0
[   98.483108][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.485509][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.503492][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.506422][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.564513][ T7571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.622'.
[   98.657913][ T7461] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.683540][ T7461] veth0_vlan: entered promiscuous mode
[   98.697683][ T7461] veth1_vlan: entered promiscuous mode
[   98.728064][ T7461] veth0_macvtap: entered promiscuous mode
[   98.737456][ T7461] veth1_macvtap: entered promiscuous mode
[   98.753967][ T7461] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.766148][ T7461] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.778063][ T7461] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.796826][ T7461] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.801353][ T7461] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.804322][ T7461] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.873127][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.876007][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.905999][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.918241][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.326484][ T7620] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  100.346898][ T7685] netlink: 'syz.1.675': attribute type 7 has an invalid length.
[  100.431189][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.677'.
[  100.842331][ T7726] Bluetooth: MGMT ver 1.23
[  101.182802][ T5693] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.810088][ T7748] netlink: 'syz.1.701': attribute type 1 has an invalid length.
[  101.815835][ T7750] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  101.968146][ T7760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.706'.
[  101.972147][ T7760] syz_tun: entered allmulticast mode
[  102.031090][ T7764] tap0: tun_chr_ioctl cmd 1074025675
[  102.033730][ T7764] tap0: persist disabled
[  102.055023][ T5220] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  102.059150][ T5220] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  102.063940][ T5220] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  102.068108][ T5220] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  102.073343][ T5220] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  102.291618][ T7765] chnl_net:caif_netlink_parms(): no params data found
[  102.405537][ T7765] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.407951][ T7765] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.411644][ T7765] bridge_slave_0: entered allmulticast mode
[  102.414693][ T7765] bridge_slave_0: entered promiscuous mode
[  102.419000][ T7765] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.421665][ T7765] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.424067][ T7765] bridge_slave_1: entered allmulticast mode
[  102.426699][ T7765] bridge_slave_1: entered promiscuous mode
[  102.464950][ T7765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  102.472073][ T7765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.507695][ T7805] vlan0: entered promiscuous mode
[  102.514928][ T7765] team0: Port device team_slave_0 added
[  102.518470][ T7765] team0: Port device team_slave_1 added
[  102.578246][ T7765] batman_adv: batadv0: Adding interface: batadv_slave_0
[  102.584864][ T7765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.596387][ T7765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  102.673218][ T7765] batman_adv: batadv0: Adding interface: batadv_slave_1
[  102.675513][ T7765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.694123][ T7765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.732663][ T5693] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.788445][ T5693] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.793503][ T7821] netlink: 'syz.0.731': attribute type 39 has an invalid length.
[  102.800394][ T7765] hsr_slave_0: entered promiscuous mode
[  102.802775][ T7765] hsr_slave_1: entered promiscuous mode
[  102.804973][ T7765] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  102.807366][ T7765] Cannot create hsr debugfs directory
[  102.873671][ T5693] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.013497][ T5693] bridge_slave_1: left allmulticast mode
[  103.015337][ T5693] bridge_slave_1: left promiscuous mode
[  103.017486][ T5693] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.027117][ T5693] bridge_slave_0: left allmulticast mode
[  103.030181][ T5693] bridge_slave_0: left promiscuous mode
[  103.032647][ T5693] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.333461][ T5693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  103.338117][ T5693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  103.342626][ T5693] bond0 (unregistering): Released all slaves
[  103.372985][ T7839] netlink: 'syz.0.739': attribute type 4 has an invalid length.
[  103.640027][ T7856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.745'.
[  103.686108][ T5693] hsr_slave_0: left promiscuous mode
[  103.688640][ T5693] hsr_slave_1: left promiscuous mode
[  103.693333][ T5693] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.696622][ T5693] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.700710][ T5693] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.703640][ T5693] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.725168][ T5693] veth1_macvtap: left promiscuous mode
[  103.728032][ T5693] veth0_macvtap: left promiscuous mode
[  103.730136][ T5693] veth1_vlan: left promiscuous mode
[  103.731937][ T5693] veth0_vlan: left promiscuous mode
[  103.950176][ T7868] xt_hashlimit: size too large, truncated to 1048576
[  103.952373][ T7868] xt_hashlimit: overflow, try lower: 3/0
[  104.036426][ T5693] team0 (unregistering): Port device team_slave_1 removed
[  104.072247][ T5693] team0 (unregistering): Port device team_slave_0 removed
[  104.159353][ T5846] Bluetooth: hci0: command tx timeout
[  104.527433][ T7874] netlink: 52 bytes leftover after parsing attributes in process `syz.0.751'.
[  104.551351][ T7765] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  104.562029][ T7765] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  104.588831][ T7765] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  104.610389][ T7765] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  104.648256][ T7881] netlink: 'syz.1.753': attribute type 3 has an invalid length.
[  104.784057][ T7765] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.792326][ T7893] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.755'.
[  104.813977][ T7765] 8021q: adding VLAN 0 to HW filter on device team0
[  104.846326][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.849364][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.861451][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.864728][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.073447][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.761'.
[  105.142555][ T7765] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.174442][ T7765] veth0_vlan: entered promiscuous mode
[  105.184903][ T7765] veth1_vlan: entered promiscuous mode
[  105.206736][ T7765] veth0_macvtap: entered promiscuous mode
[  105.221764][ T7765] veth1_macvtap: entered promiscuous mode
[  105.233239][ T7765] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.248701][ T7765] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.255916][ T7765] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.259688][ T7765] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.262368][ T7765] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.265154][ T7765] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.281651][ T7926] netlink: 'syz.0.767': attribute type 11 has an invalid length.
[  105.342348][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.344955][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.373168][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.375752][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.407054][ T7936] netlink: 'syz.0.771': attribute type 4 has an invalid length.
[  105.735041][ T7952] netlink: 'syz.0.779': attribute type 23 has an invalid length.
[  106.217025][ T7986] netlink: 'syz.1.795': attribute type 1 has an invalid length.
[  106.219789][ T7986] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.795'.
[  106.353169][ T8001] netlink: 32 bytes leftover after parsing attributes in process `syz.1.802'.
[  106.439387][ T8007] netlink: 60 bytes leftover after parsing attributes in process `syz.0.805'.
[  106.442372][ T8007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.805'.
[  106.978796][ T8055] netlink: 164 bytes leftover after parsing attributes in process `syz.0.828'.
[  107.036329][ T8059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.830'.
[  107.119162][ T8064] ipvlan3: entered promiscuous mode
[  107.125399][ T8064] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  107.456088][ T7081] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.574733][ T8111] netlink: 'syz.0.848': attribute type 1 has an invalid length.
[  108.584370][ T8112] veth0: entered promiscuous mode
[  108.601686][ T8112] veth0 (unregistering): left promiscuous mode
[  108.633604][ T5220] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  108.637276][ T5220] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  108.643073][ T5220] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  108.648251][ T5220] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  108.651686][ T5220] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  108.971852][ T8115] chnl_net:caif_netlink_parms(): no params data found
[  109.085998][ T8115] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.091638][ T8115] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.094159][ T8115] bridge_slave_0: entered allmulticast mode
[  109.112297][ T8115] bridge_slave_0: entered promiscuous mode
[  109.130977][ T7081] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.137201][ T8115] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.140536][ T8115] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.143029][ T8115] bridge_slave_1: entered allmulticast mode
[  109.146034][ T8115] bridge_slave_1: entered promiscuous mode
[  109.194321][ T7081] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.205404][ T8115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.208343][ T8168] tipc: Enabling of bearer <5dp:s> rejected, media not registered
[  109.222683][ T8115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.271609][ T7081] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.282526][ T8115] team0: Port device team_slave_0 added
[  109.291266][ T8115] team0: Port device team_slave_1 added
[  109.304778][ T8174] Bluetooth: MGMT ver 1.23
[  109.328686][ T8115] batman_adv: batadv0: Adding interface: batadv_slave_0
[  109.337886][ T8115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.351622][ T8115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  109.363886][ T8178] netlink: 'syz.0.854': attribute type 1 has an invalid length.
[  109.376129][ T8115] batman_adv: batadv0: Adding interface: batadv_slave_1
[  109.378446][ T8115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.396825][ T8115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  109.444974][ T7081] bridge_slave_1: left allmulticast mode
[  109.447079][ T7081] bridge_slave_1: left promiscuous mode
[  109.449493][ T7081] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.454203][ T7081] bridge_slave_0: left allmulticast mode
[  109.456021][ T7081] bridge_slave_0: left promiscuous mode
[  109.457860][ T7081] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.707421][ T7081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  109.716025][ T7081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  109.720689][ T7081] bond0 (unregistering): Released all slaves
[  109.747899][ T8115] hsr_slave_0: entered promiscuous mode
[  109.753497][ T8115] hsr_slave_1: entered promiscuous mode
[  110.072118][ T7081] hsr_slave_0: left promiscuous mode
[  110.098294][ T7081] hsr_slave_1: left promiscuous mode
[  110.101549][ T7081] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  110.103927][ T7081] batman_adv: batadv0: Removing interface: batadv_slave_0
[  110.115652][ T7081] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.118151][ T7081] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.154542][ T7081] veth1_macvtap: left promiscuous mode
[  110.157069][ T7081] veth0_macvtap: left promiscuous mode
[  110.163355][ T7081] veth1_vlan: left promiscuous mode
[  110.166262][ T7081] veth0_vlan: left promiscuous mode
[  110.517076][ T7081] team0 (unregistering): Port device team_slave_1 removed
[  110.538648][ T7081] team0 (unregistering): Port device team_slave_0 removed
[  110.723540][ T5846] Bluetooth: hci0: command tx timeout
[  110.834160][ T8264] __nla_validate_parse: 3 callbacks suppressed
[  110.838328][ T8264] netlink: 24 bytes leftover after parsing attributes in process `syz.1.863'.
[  111.075925][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.867'.
[  111.108046][ T8283] sctp: [Deprecated]: syz.1.869 (pid 8283) Use of struct sctp_assoc_value in delayed_ack socket option.
[  111.108046][ T8283] Use struct sctp_sack_info instead
[  111.400244][ T8115] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  111.445407][ T8115] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  111.524372][ T8115] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  111.538081][ T8115] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  111.681484][ T8115] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.712111][ T8115] 8021q: adding VLAN 0 to HW filter on device team0
[  111.740687][ T4608] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.743254][ T4608] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.746674][ T4608] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.748881][ T4608] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.920745][ T8333] netlink: 'syz.1.879': attribute type 1 has an invalid length.
[  111.948305][ T8115] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.002479][ T8115] veth0_vlan: entered promiscuous mode
[  112.019612][ T8115] veth1_vlan: entered promiscuous mode
[  112.033799][ T8342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.881'.
[  112.062557][ T8115] veth0_macvtap: entered promiscuous mode
[  112.067718][ T8115] veth1_macvtap: entered promiscuous mode
[  112.091806][ T8115] batman_adv: batadv0: Interface activated: batadv_slave_0
[  112.099823][ T8115] batman_adv: batadv0: Interface activated: batadv_slave_1
[  112.105314][ T8115] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.108884][ T8115] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.114499][ T8115] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.118105][ T8115] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.205872][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.208751][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.248908][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.254538][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.296761][ T8351] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.883'.
[  112.476697][ T8363] tipc: Started in network mode
[  112.478807][ T8363] tipc: Node identity 8eea086126a, cluster identity 4711
[  112.484522][ T8363] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  112.519950][ T8363] tipc: Resetting bearer <eth:syzkaller0>
[  112.533805][ T8362] tipc: Resetting bearer <eth:syzkaller0>
[  113.327287][ T8362] tipc: Disabling bearer <eth:syzkaller0>
[  113.531852][ T8384] netlink: 88 bytes leftover after parsing attributes in process `syz.1.901'.
[  113.632389][ T8391] syzkaller0: entered promiscuous mode
[  113.634240][ T8391] syzkaller0: entered allmulticast mode
[  114.482489][ T8393] pimreg: entered allmulticast mode
[  114.486004][ T8395] pimreg: left allmulticast mode
[  114.509616][ T5693] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.694012][ T5693] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.703378][ T8401] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  114.708614][ T8399] netlink: 'syz.0.905': attribute type 4 has an invalid length.
[  114.713319][ T8401] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  114.722841][ T8399] netlink: 'syz.0.905': attribute type 4 has an invalid length.
[  114.785579][ T8403] netlink: 'syz.0.908': attribute type 64 has an invalid length.
[  114.792269][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.908'.
[  114.929701][ T5220] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  114.935142][ T5220] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  114.938676][ T5220] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  114.943847][ T5220] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  114.947497][ T5220] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  115.078356][ T8414] netlink: 'syz.0.911': attribute type 6 has an invalid length.
[  115.086240][ T8416] netlink: 20 bytes leftover after parsing attributes in process `syz.1.910'.
[  115.101814][ T8416] netlink: 20 bytes leftover after parsing attributes in process `syz.1.910'.
[  115.248832][ T8409] chnl_net:caif_netlink_parms(): no params data found
[  115.325320][ T8434] xt_l2tp: missing protocol rule (udp|l2tpip)
[  115.388967][ T8409] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.399467][ T8409] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.409940][ T8409] bridge_slave_0: entered allmulticast mode
[  115.412917][ T8409] bridge_slave_0: entered promiscuous mode
[  115.419490][ T8409] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.422100][ T8409] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.424486][ T8409] bridge_slave_1: entered allmulticast mode
[  115.427305][ T8409] bridge_slave_1: entered promiscuous mode
[  115.448440][ T8444] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  115.473607][ T8409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  115.477172][ T8444] bridge_slave_0: left allmulticast mode
[  115.479784][ T8444] bridge_slave_0: left promiscuous mode
[  115.482710][ T8444] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.492954][ T8444] bridge_slave_1: left allmulticast mode
[  115.494699][ T8444] bridge_slave_1: left promiscuous mode
[  115.496606][ T8444] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.507167][ T8444] bond0: (slave bond_slave_0): Releasing backup interface
[  115.527419][ T8444] bond0: (slave bond_slave_1): Releasing backup interface
[  115.534574][ T8444] team0: Port device team_slave_0 removed
[  115.537444][ T8444] team0: Port device team_slave_1 removed
[  115.540356][ T8444] batman_adv: batadv0: Removing interface: batadv_slave_0
[  115.543392][ T8444] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.553037][ T8409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.571098][ T5693] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.580596][ T8444] netlink: 'syz.0.922': attribute type 10 has an invalid length.
[  115.585456][ T8444] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  115.588153][ T8444] bond0: (slave wlan1): refused to change device type
[  115.611010][ T8444] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  115.612962][ T8409] team0: Port device team_slave_0 added
[  115.624844][ T8409] team0: Port device team_slave_1 added
[  115.624917][ T8453] netlink: zone id is out of range
[  115.629381][ T8444] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  115.632305][ T8453] netlink: zone id is out of range
[  115.635557][ T8453] netlink: zone id is out of range
[  115.638006][ T8453] netlink: zone id is out of range
[  115.642443][ T8453] netlink: zone id is out of range
[  115.644681][ T8453] netlink: zone id is out of range
[  115.646930][ T8453] netlink: zone id is out of range
[  115.656561][ T8453] netlink: zone id is out of range
[  115.662882][ T8453] netlink: zone id is out of range
[  115.676196][ T5693] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.692543][ T8409] batman_adv: batadv0: Adding interface: batadv_slave_0
[  115.695550][ T8409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.716629][ T8409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  115.722781][ T8409] batman_adv: batadv0: Adding interface: batadv_slave_1
[  115.725068][ T8409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.733809][ T8409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  115.792426][ T8409] hsr_slave_0: entered promiscuous mode
[  115.795257][ T8409] hsr_slave_1: entered promiscuous mode
[  115.798585][ T8409] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  115.801695][ T8409] Cannot create hsr debugfs directory
[  115.815909][ T8457] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  115.903936][ T5693] bridge_slave_1: left allmulticast mode
[  115.906098][ T5693] bridge_slave_1: left promiscuous mode
[  115.908273][ T5693] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.911678][ T8459] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.928'.
[  115.917660][ T5693] bridge_slave_0: left allmulticast mode
[  115.920505][ T5693] bridge_slave_0: left promiscuous mode
[  115.923023][ T5693] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.149084][ T5693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  116.154210][ T5693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  116.158136][ T5693] bond0 (unregistering): Released all slaves
[  116.454752][ T5693] hsr_slave_0: left promiscuous mode
[  116.457106][ T5693] hsr_slave_1: left promiscuous mode
[  116.465168][ T5693] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  116.467132][ T8481] netlink: 16 bytes leftover after parsing attributes in process `syz.1.935'.
[  116.467552][ T5693] batman_adv: batadv0: Removing interface: batadv_slave_0
[  116.473963][ T5693] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.476298][ T5693] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.486864][ T5693] veth1_macvtap: left promiscuous mode
[  116.488702][ T5693] veth0_macvtap: left promiscuous mode
[  116.491836][ T5693] veth1_vlan: left promiscuous mode
[  116.493783][ T5693] veth0_vlan: left promiscuous mode
[  116.847127][ T5693] team0 (unregistering): Port device team_slave_1 removed
[  116.878272][ T5693] team0 (unregistering): Port device team_slave_0 removed
[  117.029746][ T5846] Bluetooth: hci0: command tx timeout
[  117.132274][ T8479] vxcan1: entered allmulticast mode
[  117.139157][ T8483] vxcan1: left allmulticast mode
[  117.227398][ T8499] syzkaller1: entered promiscuous mode
[  117.233600][ T8499] syzkaller1: entered allmulticast mode
[  117.360543][ T8409] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  117.388285][ T8409] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  117.397572][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.945'.
[  117.415514][ T8409] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  117.445345][ T8409] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  117.573427][ T8409] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.593125][ T8409] 8021q: adding VLAN 0 to HW filter on device team0
[  117.621883][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.624220][ T4337] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.633848][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.636346][ T4337] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.830137][ T8552] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.841656][ T8552] syzkaller0: entered promiscuous mode
[  117.843563][ T8552] syzkaller0: entered allmulticast mode
[  117.878976][ T8552] tipc: Resetting bearer <eth:syzkaller0>
[  117.885552][ T8409] 8021q: adding VLAN 0 to HW filter on device batadv0
[  117.892317][ T8551] tipc: Resetting bearer <eth:syzkaller0>
[  117.905381][ T8551] tipc: Disabling bearer <eth:syzkaller0>
[  117.919012][ T8557] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  117.950117][ T8409] veth0_vlan: entered promiscuous mode
[  117.954996][ T8409] veth1_vlan: entered promiscuous mode
[  117.983864][ T8409] veth0_macvtap: entered promiscuous mode
[  117.992070][ T8409] veth1_macvtap: entered promiscuous mode
[  118.001977][ T8409] batman_adv: batadv0: Interface activated: batadv_slave_0
[  118.013189][ T8409] batman_adv: batadv0: Interface activated: batadv_slave_1
[  118.018120][ T8409] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.021435][ T8409] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.024345][ T8409] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.027157][ T8409] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.105883][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.108346][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.135364][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.137905][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.393018][ T8585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.971'.
[  118.419721][ T8587] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  118.646141][ T8608] netlink: 36 bytes leftover after parsing attributes in process `syz.1.981'.
[  118.650200][ T8608] netlink: 16 bytes leftover after parsing attributes in process `syz.1.981'.
[  118.654499][ T8608] netlink: 36 bytes leftover after parsing attributes in process `syz.1.981'.
[  118.658189][ T8608] netlink: 36 bytes leftover after parsing attributes in process `syz.1.981'.
[  118.760916][ T8612] netlink: 277 bytes leftover after parsing attributes in process `syz.0.984'.
[  119.651407][ T8671] netlink: 'syz.1.1009': attribute type 21 has an invalid length.
[  119.797115][ T8689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1018'.
[  120.032827][ T7081] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.138342][ T8712] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1029'.
[  121.249022][ T5220] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  121.253274][ T5220] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  121.257505][ T5220] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  121.272291][ T5220] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  121.276728][ T5220] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  121.478994][ T8729] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1035'.
[  121.556265][ T8717] chnl_net:caif_netlink_parms(): no params data found
[  121.595796][ T8736] syzkaller0: entered promiscuous mode
[  121.598152][ T8736] syzkaller0: entered allmulticast mode
[  122.571675][ T8762] syzkaller0: entered allmulticast mode
[  122.601038][ T7081] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.667701][ T7081] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.673270][ T8717] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.675711][ T8717] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.678122][ T8717] bridge_slave_0: entered allmulticast mode
[  122.685654][ T8717] bridge_slave_0: entered promiscuous mode
[  122.700712][ T8717] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.705888][ T8717] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.709095][ T8717] bridge_slave_1: entered allmulticast mode
[  122.720410][ T8717] bridge_slave_1: entered promiscuous mode
[  122.781542][ T7081] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.852827][ T8717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  122.860267][ T8717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  122.936760][ T8717] team0: Port device team_slave_0 added
[  122.953388][ T8717] team0: Port device team_slave_1 added
[  123.045571][ T8717] batman_adv: batadv0: Adding interface: batadv_slave_0
[  123.047805][ T8717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.063478][ T8717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  123.069988][ T8717] batman_adv: batadv0: Adding interface: batadv_slave_1
[  123.073740][ T8717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.084420][ T8717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  123.150199][ T8717] hsr_slave_0: entered promiscuous mode
[  123.152607][ T8717] hsr_slave_1: entered promiscuous mode
[  123.197260][ T7081] bridge_slave_1: left allmulticast mode
[  123.199153][ T7081] bridge_slave_1: left promiscuous mode
[  123.204223][ T7081] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.209750][ T7081] bridge_slave_0: left allmulticast mode
[  123.211547][ T7081] bridge_slave_0: left promiscuous mode
[  123.213484][ T7081] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.360681][ T5220] Bluetooth: hci0: command tx timeout
[  123.544378][ T7081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  123.548820][ T7081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  123.553475][ T7081] bond0 (unregistering): Released all slaves
[  123.855801][ T7081] hsr_slave_0: left promiscuous mode
[  123.866442][ T7081] hsr_slave_1: left promiscuous mode
[  123.870239][ T7081] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.876133][ T7081] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.883042][ T7081] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.887909][ T7081] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.902880][ T7081] veth1_macvtap: left promiscuous mode
[  123.905500][ T7081] veth0_macvtap: left promiscuous mode
[  123.908188][ T7081] veth1_vlan: left promiscuous mode
[  123.910591][ T7081] veth0_vlan: left promiscuous mode
[  124.184496][ T7081] team0 (unregistering): Port device team_slave_1 removed
[  124.206394][ T7081] team0 (unregistering): Port device team_slave_0 removed
[  124.353989][ T8827] xt_limit: Overflow, try lower: 0/0
[  124.489476][ T8831] netlink: 'syz.0.1069': attribute type 8 has an invalid length.
[  124.926462][ T8717] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  124.964055][ T8717] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  124.979900][ T8717] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  125.008532][ T8717] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  125.400097][ T8717] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.432446][ T8717] 8021q: adding VLAN 0 to HW filter on device team0
[  125.433228][ T5220] Bluetooth: hci0: command tx timeout
[  125.443355][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.445791][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.460921][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.463732][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.476801][ T8907] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1089'.
[  125.605805][ T8917] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  125.667277][ T8922] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1094'.
[  125.733153][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1096'.
[  125.736708][ T8926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1096'.
[  125.738854][ T8717] 8021q: adding VLAN 0 to HW filter on device batadv0
[  125.769303][ T8926] netlink: 'syz.1.1096': attribute type 12 has an invalid length.
[  125.796088][ T8929] netlink: 'syz.0.1098': attribute type 1 has an invalid length.
[  125.802860][ T8717] veth0_vlan: entered promiscuous mode
[  125.840313][ T8929] 8021q: adding VLAN 0 to HW filter on device bond1
[  125.860070][ T8929] bond1: (slave gretap1): making interface the new active one
[  125.864970][ T8929] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  125.871968][ T8717] veth1_vlan: entered promiscuous mode
[  125.904030][ T8717] veth0_macvtap: entered promiscuous mode
[  125.915057][ T8717] veth1_macvtap: entered promiscuous mode
[  125.932461][ T8717] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.944051][ T8717] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.951630][ T8717] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.956816][ T8717] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.961537][ T8717] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.965709][ T8717] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.054131][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.060064][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.101168][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.104500][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.334291][ T8950] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1108'.
[  126.404682][ T8950] wireguard0: entered promiscuous mode
[  126.407044][ T8950] wireguard0: entered allmulticast mode
[  126.802412][ T8968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1115'.
[  127.048056][ T8948] Bluetooth: hci1: Opcode 0x080f failed: -4
[  127.513081][ T5846] Bluetooth: hci0: command tx timeout
[  128.199632][ T9024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'.
[  128.202879][ T9024] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1141'.
[  128.229314][ T5846] Bluetooth: hci1: command 0x080f tx timeout
[  128.332704][ T5693] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  128.737935][ T9034] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1144'.
[  128.741914][ T9034] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1144'.
[  129.222400][ T9043] ipt_ECN: cannot use operation on non-tcp rule
[  129.297914][ T9050] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  129.340176][ T9052] syzkaller0: entered allmulticast mode
[  129.350502][ T9052] syzkaller0 (unregistering): left allmulticast mode
[  129.576470][ T9073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1162'.
[  129.584889][ T9073] bond0: invalid ARP target 0.0.0.0 specified for addition
[  129.587196][ T9073] bond0: option arp_ip_target: invalid value (0)
[  129.600166][ T9073] bond0: Removing last arp target with arp_interval on
[  129.607070][ T9075] net_ratelimit: 4 callbacks suppressed
[  129.607085][ T9075] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.693886][ T9084] netlink: 'syz.1.1168': attribute type 5 has an invalid length.
[  129.901158][ T9105] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1178'.
[  130.067630][   T33] audit: type=1804 audit(1752490683.561:3): pid=9114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1182" name="memory.events" dev="tmpfs" ino=2656 res=1 errno=0
[  130.082042][   T33] audit: type=1800 audit(1752490683.571:4): pid=9114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1182" name="memory.events" dev="tmpfs" ino=2656 res=0 errno=0
[  130.333235][ T9137] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1193'.
[  130.993698][ T9192] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  130.997667][ T9192] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  131.002251][ T9192] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[  131.086011][ T9199] nbd: couldn't find device at index 536870912
[  131.247132][ T9214] tipc: New replicast peer: 255.255.255.255
[  131.250704][ T9214] tipc: Enabled bearer <udp:syz2>, priority 10
[  131.902352][ T9242] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  131.907608][ T9242] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  132.089759][ T9255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1247'.
[  132.311864][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.314563][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.381025][   T10] tipc: Node number set to 363713353
[  132.832872][ T9271] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1254'.
[  132.835987][ T9271] netem: unknown loss type 13
[  132.837632][ T9271] netem: change failed
[  133.931912][ T9314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1273'.
[  134.164670][ T9331] bridge_slave_0: left allmulticast mode
[  134.166932][ T9331] bridge_slave_0: left promiscuous mode
[  134.168972][ T9331] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.174394][ T9331] bridge_slave_1: left allmulticast mode
[  134.176656][ T9331] bridge_slave_1: left promiscuous mode
[  134.179314][ T9331] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.188267][ T9331] bond0: (slave bond_slave_0): Releasing backup interface
[  134.192039][ T9331] bond0: (slave bond_slave_1): Releasing backup interface
[  134.197086][ T9331] team0: Port device team_slave_0 removed
[  134.201699][ T9331] team0: Port device team_slave_1 removed
[  134.203729][ T9331] batman_adv: batadv0: Removing interface: batadv_slave_0
[  134.206420][ T9331] batman_adv: batadv0: Removing interface: batadv_slave_1
[  134.417064][ T9348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1287'.
[  135.625749][ T9393] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1308'.
[  135.630996][ T9393] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1308'.
[  136.769109][ T9426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1322'.
[  136.826321][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1324'.
[  137.202304][ T9465] bridge0: entered allmulticast mode
[  137.205411][ T9465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1341'.
[  137.217777][ T9465] bridge0 (unregistering): left allmulticast mode
[  137.889699][   T10] IPVS: starting estimator thread 0...
[  137.989359][ T9474] IPVS: using max 77 ests per chain, 184800 per kthread
[  138.086282][ T9482] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1347'.
[  138.154506][ T7081] IPVS: stop unused estimator thread 0...
[  138.856886][ T9528] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1369'.
[  139.041721][ T9541] netlink: 'syz.1.1375': attribute type 1 has an invalid length.
[  139.045074][ T9541] netlink: 'syz.1.1375': attribute type 10 has an invalid length.
[  139.048266][ T9541] netlink: 'syz.1.1375': attribute type 4 has an invalid length.
[  139.053994][ T9541] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1375'.
[  139.128076][ T9547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1378'.
[  139.313307][ T9560] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  139.316931][ T9560] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  139.320842][ T9560] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  139.324337][ T9560] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  139.328056][ T9560] geneve2: entered promiscuous mode
[  139.376071][ T9562] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1385'.
[  139.438798][ T9566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1387'.
[  139.543271][ T9570] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1389'.
[  139.724115][ T9580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1394'.
[  139.787617][   T10] hid-generic 0005:0C45:1012.0001: item fetching failed at offset 0/1
[  139.794790][   T10] hid-generic 0005:0C45:1012.0001: probe with driver hid-generic failed with error -22
[  139.978773][ T9591] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1399'.
[  140.174717][ T9591] wireguard0: entered promiscuous mode
[  140.182090][ T9591] wireguard0: entered allmulticast mode
[  141.344118][ T9609] xt_TPROXY: Can be used only with -p tcp or -p udp
[  142.574064][ T9664] netlink: 'syz.0.1432': attribute type 10 has an invalid length.
[  142.590155][ T9664] batman_adv: batadv0: Adding interface: netdevsim0
[  142.592898][ T9664] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.602570][ T9664] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  142.843269][ T9677] gretap1: entered promiscuous mode
[  142.845052][ T9677] gretap1: entered allmulticast mode
[  143.088031][ T9701] SET target dimension over the limit!
[  143.611069][ T9728] 
[  143.612149][ T9728] ======================================================
[  143.615065][ T9728] WARNING: possible circular locking dependency detected
[  143.617941][ T9728] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  143.622035][ T9728] ------------------------------------------------------
[  143.624992][ T9728] syz.1.1461/9728 is trying to acquire lock:
[  143.627455][ T9728] ffff88802018f988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  143.631917][ T9728] 
[  143.631917][ T9728] but task is already holding lock:
[  143.634858][ T9728] ffff88802018fa30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x94f/0x1930
[  143.638819][ T9728] 
[  143.638819][ T9728] which lock already depends on the new lock.
[  143.638819][ T9728] 
[  143.643024][ T9728] 
[  143.643024][ T9728] the existing dependency chain (in reverse order) is:
[  143.646730][ T9728] 
[  143.646730][ T9728] -> #2 (&nbd->config_lock){+.+.}-{4:4}:
[  143.649948][ T9728]        lock_acquire+0x120/0x360
[  143.652022][ T9728]        __mutex_lock+0x182/0xe80
[  143.654066][ T9728]        refcount_dec_and_mutex_lock+0x30/0xa0
[  143.656572][ T9728]        nbd_config_put+0x2c/0x790
[  143.658669][ T9728]        nbd_release+0xfe/0x140
[  143.660659][ T9728]        bdev_release+0x536/0x650
[  143.662708][ T9728]        blkdev_release+0x15/0x20
[  143.664512][ T9728]        __fput+0x44c/0xa70
[  143.666406][ T9728]        fput_close_sync+0x119/0x200
[  143.668376][ T9728]        __x64_sys_close+0x7f/0x110
[  143.670009][ T9728]        do_syscall_64+0xfa/0x3b0
[  143.672035][ T9728]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.674637][ T9728] 
[  143.674637][ T9728] -> #1 (&disk->open_mutex){+.+.}-{4:4}:
[  143.677787][ T9728]        lock_acquire+0x120/0x360
[  143.679841][ T9728]        __mutex_lock+0x182/0xe80
[  143.681957][ T9728]        __del_gendisk+0x129/0x9e0
[  143.684135][ T9728]        del_gendisk+0xe8/0x160
[  143.686162][ T9728]        nbd_dev_remove_work+0x47/0xe0
[  143.688476][ T9728]        process_scheduled_works+0xae1/0x17b0
[  143.690985][ T9728]        worker_thread+0x8a0/0xda0
[  143.693058][ T9728]        kthread+0x711/0x8a0
[  143.694942][ T9728]        ret_from_fork+0x3fc/0x770
[  143.697087][ T9728]        ret_from_fork_asm+0x1a/0x30
[  143.699262][ T9728] 
[  143.699262][ T9728] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  143.702675][ T9728]        validate_chain+0xb9b/0x2140
[  143.704865][ T9728]        __lock_acquire+0xab9/0xd20
[  143.707030][ T9728]        lock_acquire+0x120/0x360
[  143.709196][ T9728]        down_write+0x96/0x1f0
[  143.711192][ T9728]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  143.713846][ T9728]        nbd_start_device+0x16c/0xac0
[  143.716061][ T9728]        nbd_genl_connect+0x1250/0x1930
[  143.718403][ T9728]        genl_family_rcv_msg_doit+0x215/0x300
[  143.720960][ T9728]        genl_rcv_msg+0x60e/0x790
[  143.723096][ T9728]        netlink_rcv_skb+0x208/0x470
[  143.725280][ T9728]        genl_rcv+0x28/0x40
[  143.727129][ T9728]        netlink_unicast+0x75c/0x8e0
[  143.729305][ T9728]        netlink_sendmsg+0x805/0xb30
[  143.731514][ T9728]        __sock_sendmsg+0x21c/0x270
[  143.733716][ T9728]        ____sys_sendmsg+0x505/0x830
[  143.735903][ T9728]        ___sys_sendmsg+0x21f/0x2a0
[  143.738093][ T9728]        __x64_sys_sendmsg+0x19b/0x260
[  143.740275][ T9728]        do_syscall_64+0xfa/0x3b0
[  143.742320][ T9728]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.744519][ T9728] 
[  143.744519][ T9728] other info that might help us debug this:
[  143.744519][ T9728] 
[  143.748009][ T9728] Chain exists of:
[  143.748009][ T9728]   &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock
[  143.748009][ T9728] 
[  143.752975][ T9728]  Possible unsafe locking scenario:
[  143.752975][ T9728] 
[  143.755982][ T9728]        CPU0                    CPU1
[  143.758150][ T9728]        ----                    ----
[  143.760452][ T9728]   lock(&nbd->config_lock);
[  143.762417][ T9728]                                lock(&disk->open_mutex);
[  143.765285][ T9728]                                lock(&nbd->config_lock);
[  143.768126][ T9728]   lock(&set->update_nr_hwq_lock);
[  143.770312][ T9728] 
[  143.770312][ T9728]  *** DEADLOCK ***
[  143.770312][ T9728] 
[  143.773603][ T9728] 3 locks held by syz.1.1461/9728:
[  143.775732][ T9728]  #0: ffffffff8f583bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  143.779097][ T9728]  #1: ffffffff8f5839c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  143.782733][ T9728]  #2: ffff88802018fa30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x94f/0x1930
[  143.786791][ T9728] 
[  143.786791][ T9728] stack backtrace:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  143.789170][ T9728] CPU: 0 UID: 0 PID: 9728 Comm: syz.1.1461 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  143.789187][ T9728] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  143.789195][ T9728] Call Trace:
[  143.789202][ T9728]  <TASK>
[  143.789209][ T9728]  dump_stack_lvl+0x189/0x250
[  143.789228][ T9728]  ? __pfx_dump_stack_lvl+0x10/0x10
[  143.789243][ T9728]  ? __pfx__printk+0x10/0x10
[  143.789260][ T9728]  ? print_lock_name+0xde/0x100
[  143.789276][ T9728]  print_circular_bug+0x2ee/0x310
[  143.789291][ T9728]  check_noncircular+0x134/0x160
[  143.789307][ T9728]  validate_chain+0xb9b/0x2140
[  143.789326][ T9728]  __lock_acquire+0xab9/0xd20
[  143.789339][ T9728]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  143.789351][ T9728]  lock_acquire+0x120/0x360
[  143.789392][ T9728]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  143.789406][ T9728]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  143.789419][ T9728]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  143.789438][ T9728]  down_write+0x96/0x1f0
[  143.789451][ T9728]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  143.789463][ T9728]  ? __pfx_down_write+0x10/0x10
[  143.789487][ T9728]  blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  143.789500][ T9728]  ? nbd_add_socket+0x688/0x9a0
[  143.789514][ T9728]  ? nbd_add_socket+0x688/0x9a0
[  143.789528][ T9728]  nbd_start_device+0x16c/0xac0
[  143.789542][ T9728]  ? __nla_parse+0x40/0x60
[  143.789555][ T9728]  nbd_genl_connect+0x1250/0x1930
[  143.789571][ T9728]  ? __pfx_nbd_genl_connect+0x10/0x10
[  143.789587][ T9728]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  143.789606][ T9728]  genl_family_rcv_msg_doit+0x215/0x300
[  143.789626][ T9728]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  143.789648][ T9728]  genl_rcv_msg+0x60e/0x790
[  143.789666][ T9728]  ? __pfx_genl_rcv_msg+0x10/0x10
[  143.789682][ T9728]  ? __pfx_nbd_genl_connect+0x10/0x10
[  143.789695][ T9728]  netlink_rcv_skb+0x208/0x470
[  143.789708][ T9728]  ? __pfx_genl_rcv_msg+0x10/0x10
[  143.789725][ T9728]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  143.789741][ T9728]  ? down_read+0x1ad/0x2e0
[  143.789754][ T9728]  genl_rcv+0x28/0x40
[  143.789770][ T9728]  netlink_unicast+0x75c/0x8e0
[  143.789785][ T9728]  netlink_sendmsg+0x805/0xb30
[  143.789802][ T9728]  ? __pfx_netlink_sendmsg+0x10/0x10
[  143.789816][ T9728]  ? aa_sock_msg_perm+0x94/0x160
[  143.789834][ T9728]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  143.789850][ T9728]  ? __pfx_netlink_sendmsg+0x10/0x10
[  143.789863][ T9728]  __sock_sendmsg+0x21c/0x270
[  143.789874][ T9728]  ____sys_sendmsg+0x505/0x830
[  143.789889][ T9728]  ? __pfx_____sys_sendmsg+0x10/0x10
[  143.789904][ T9728]  ? import_iovec+0x74/0xa0
[  143.789917][ T9728]  ___sys_sendmsg+0x21f/0x2a0
[  143.789932][ T9728]  ? __pfx____sys_sendmsg+0x10/0x10
[  143.789953][ T9728]  ? __fget_files+0x2a/0x420
[  143.789968][ T9728]  ? __fget_files+0x3a0/0x420
[  143.789985][ T9728]  __x64_sys_sendmsg+0x19b/0x260
[  143.790000][ T9728]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  143.790019][ T9728]  ? __sys_socketpair+0x4a9/0x560
[  143.790032][ T9728]  ? do_syscall_64+0xbe/0x3b0
[  143.790045][ T9728]  do_syscall_64+0xfa/0x3b0
[  143.790057][ T9728]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.790068][ T9728]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  143.790082][ T9728]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.790094][ T9728] RIP: 0033:0x7fa2dc58e929
[  143.790106][ T9728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  143.790117][ T9728] RSP: 002b:00007fa2dd4ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  143.790131][ T9728] RAX: ffffffffffffffda RBX: 00007fa2dc7b5fa0 RCX: 00007fa2dc58e929
[  143.790139][ T9728] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000007
[  143.790147][ T9728] RBP: 00007fa2dc610b39 R08: 0000000000000000 R09: 0000000000000000
[  143.790154][ T9728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  143.790161][ T9728] R13: 0000000000000000 R14: 00007fa2dc7b5fa0 R15: 00007ffef97e2e78
[  143.790175][ T9728]  </TASK>
[  144.090173][ T9728] nbd1: detected capacity change from 0 to 63
[  144.240319][   T55] block nbd1: Receive control failed (result -104)

VM DIAGNOSIS:
10:58:17  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000027e5 RDI=00000000000027e6 RBP=00000000000003f8 RSP=ffffc90007266710
R8 =ffff888108c78237 R9 =1ffff1102118f046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98ac R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa2dd4ce6c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa2dc574980 CR3=00000000273ae000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f61b7f85478 00007f61b7f85450 XMM03=00007f61b7f85488 00007f61b7f85480
XMM04=00007f61b8aed100 00007f61b7f85440 XMM05=00007f61b7f85458 00007f61b7f854a0
XMM06=00007f61b7f85498 00007f61b7f85490 XMM07=00007f61b7f85488 00007f61b7f85480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f61b7e11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b4c210 RBX=ffff88813663b1c0 RCX=ffff88810a62d640 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900033cf700 RSP=ffffc900033cf5a0
R8 =ffffffff8fa1f3f7 R9 =1ffffffff1f43e7e R10=dffffc0000000000 R11=fffffbfff1f43e7f
R12=1ffff11009608385 R13=dffffc0000000000 R14=0000000000000000 R15=ffff88804b041c28
RIP=ffffffff81b4c1f9 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f42ce0e7d60 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f42cd5856a3 00007f42cd5856a3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=000055557129f790 000055557129f2e0
XMM06=0000555571291824 0000555571291820 XMM07=0000000000000000 0000000000000000
XMM08=0000306e616c7701 ffffffffffffffff XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
