last executing test programs:

1.100674341s ago: executing program 0 (id=1264):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x10, 0x4, 0x8, 0x9}, 0x50)

1.049529862s ago: executing program 0 (id=1267):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c000000170a01080000000000000000000000030900020073797a32000000000900010073797a30ef"], 0x2c}, 0x1, 0x0, 0x0, 0xc4}, 0x4)

1.002472848s ago: executing program 0 (id=1271):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000007000000050000000000000f07000000000000006161"], 0x0, 0x2b, 0x0, 0x9}, 0x28)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0)

999.791525ms ago: executing program 0 (id=1273):
socket(0x1d, 0x1, 0xfffffffb)

930.448089ms ago: executing program 0 (id=1275):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x9d741df904aad753, 0x0, 0x0, {{@in6=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

881.726343ms ago: executing program 0 (id=1278):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18)
sendmsg$can_j1939(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r1, 0x0, {0x1, 0xf0, 0x4}, 0x1}, 0x18, &(0x7f0000000140)={&(0x7f0000000800)="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", 0xa2e}, 0x1, 0x0, 0x0, 0x10}, 0x800)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)

720.971442ms ago: executing program 2 (id=1286):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0x20000000, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000080)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x10, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c}], @echo_reply}}}}}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x24000050)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)

671.50128ms ago: executing program 2 (id=1288):
unshare(0x400)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x31, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

670.817217ms ago: executing program 2 (id=1290):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48)

611.58901ms ago: executing program 2 (id=1292):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000100000001800000000000000000000000000000095000000000000008d9062820b805b34b78cd182a01ecb91883b0a35102f01324235980ad30eec31c3ef5aa5f388d90180b341fe855c2dd81ed8f08c8d0a5e7e73f550d9461d75cb56882bcd494988742cec70bccbc32951d3f9d772b8a3d31048f518"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket(0x2a, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
unshare(0x28000600)
recvmmsg(r0, 0x0, 0x0, 0x2002, 0x0)
socket$netlink(0x10, 0x3, 0x4)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0)

501.432767ms ago: executing program 2 (id=1294):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0)

501.134287ms ago: executing program 2 (id=1295):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001580)=""/179, 0xb3}, {0x0}, {0x0}, {0x0, 0x18}, {&(0x7f0000001880)=""/193, 0xc1}], 0x5}, 0x7}], 0x1, 0x100, &(0x7f0000002040)={0x0, 0x989680})
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)

221.455095ms ago: executing program 1 (id=1297):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x890b, &(0x7f0000001480)={{0x0, 0x100000000000002, 0xa, 0xfffffffffffffffd, 0x0, 0x2000000000000, 0x0, 0x0, 0xffff, 0x0, 0x9, 0x20000000000001, 0x0, 0x3, 0x5}})

221.246416ms ago: executing program 1 (id=1298):
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000001080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @remote}]}, 0x0)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f00000001c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0)

131.219938ms ago: executing program 1 (id=1299):
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x17, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x6202}}, [], {{0x4, 0x1, 0xb, 0x1, 0x9, 0x10}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = socket$inet(0x2, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x4, 0x4, 0xf4, 0xffffffff, 0x4, 0x9}, 0x1c)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d", @ANYRESDEC=0x0, @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
getsockopt$inet6_opts(r3, 0x29, 0x37, 0x0, &(0x7f00000001c0))
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x3}}]}, {0xfffffffffffffeb7}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

71.528421ms ago: executing program 1 (id=1300):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2c}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x14}, 0x94)

71.154249ms ago: executing program 1 (id=1301):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

0s ago: executing program 1 (id=1302):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x44, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x44}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000001640)={0x0, 'veth0_to_hsr\x00', {0x3}, 0x4})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYBLOB="a769ed16d431d963eff6c2d0f9113babb7ce9c9a317adc5c255123c8c3280fb83d7ef6e4571bc229479c5d4ca1cdbc9823e0e294d603260f4c32ea85c3a4dd6ec71e005b8576568eeb12745cf1951e0e6186"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x58, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004010}, 0x400c000)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'wlan0\x00', {0x1}, 0x10})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:9731' (ED25519) to the list of known hosts.
syzkaller login: [   48.855539][ T5760] cgroup: Unknown subsys name 'net'
[   49.029378][ T5760] cgroup: Unknown subsys name 'cpuset'
[   49.033957][ T5760] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.649397][ T5760] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.097926][ T5816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.103307][ T5816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.106010][ T5816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.108758][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.112651][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.113772][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.119189][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.121873][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.124933][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.128398][ T5816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.134246][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.137361][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.140036][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.147870][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.150910][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.322510][ T5812] chnl_net:caif_netlink_parms(): no params data found
[   55.423044][ T5821] chnl_net:caif_netlink_parms(): no params data found
[   55.442290][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.446326][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.449351][ T5812] bridge_slave_0: entered allmulticast mode
[   55.453016][ T5812] bridge_slave_0: entered promiscuous mode
[   55.462504][ T5814] chnl_net:caif_netlink_parms(): no params data found
[   55.471116][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.473532][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.476205][ T5812] bridge_slave_1: entered allmulticast mode
[   55.478975][ T5812] bridge_slave_1: entered promiscuous mode
[   55.543082][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.571010][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.646094][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.649111][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.652217][ T5814] bridge_slave_0: entered allmulticast mode
[   55.656739][ T5814] bridge_slave_0: entered promiscuous mode
[   55.661097][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.664072][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.667909][ T5814] bridge_slave_1: entered allmulticast mode
[   55.671646][ T5814] bridge_slave_1: entered promiscuous mode
[   55.675350][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.678191][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.680507][ T5821] bridge_slave_0: entered allmulticast mode
[   55.683181][ T5821] bridge_slave_0: entered promiscuous mode
[   55.688162][ T5812] team0: Port device team_slave_0 added
[   55.700273][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.703210][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.706378][ T5821] bridge_slave_1: entered allmulticast mode
[   55.710228][ T5821] bridge_slave_1: entered promiscuous mode
[   55.715252][ T5812] team0: Port device team_slave_1 added
[   55.760001][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.779276][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.783738][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.787289][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.798249][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.805720][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.812443][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.817184][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.820080][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.830704][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.867807][ T5814] team0: Port device team_slave_0 added
[   55.880127][ T5821] team0: Port device team_slave_0 added
[   55.883138][ T5814] team0: Port device team_slave_1 added
[   55.913912][ T5821] team0: Port device team_slave_1 added
[   55.943175][ T5812] hsr_slave_0: entered promiscuous mode
[   55.947229][ T5812] hsr_slave_1: entered promiscuous mode
[   55.974516][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.977315][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.988628][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.995021][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.998005][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.008996][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.028458][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.031314][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.042823][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.061924][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.065629][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.077589][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.131451][ T5814] hsr_slave_0: entered promiscuous mode
[   56.135314][ T5814] hsr_slave_1: entered promiscuous mode
[   56.138506][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.141902][ T5814] Cannot create hsr debugfs directory
[   56.258681][ T5821] hsr_slave_0: entered promiscuous mode
[   56.261816][ T5821] hsr_slave_1: entered promiscuous mode
[   56.266518][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.269734][ T5821] Cannot create hsr debugfs directory
[   56.478680][ T5812] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.493600][ T5812] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.505658][ T5812] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.526886][ T5812] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.585679][ T5814] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.598288][ T5814] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.612278][ T5814] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.624089][ T5814] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.683811][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.691059][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.697690][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.708680][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.803005][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.842875][ T5812] 8021q: adding VLAN 0 to HW filter on device team0
[   56.866554][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.869725][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.879302][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.890708][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.893921][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.914928][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.926962][ T5814] 8021q: adding VLAN 0 to HW filter on device team0
[   56.941729][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.944148][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.962273][ T5821] 8021q: adding VLAN 0 to HW filter on device team0
[   56.967141][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.969626][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.981311][ T5812] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.986773][ T5812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.998143][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.000946][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.006571][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.009641][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.177304][ T5816] Bluetooth: hci2: command tx timeout
[   57.179867][ T5816] Bluetooth: hci0: command tx timeout
[   57.187017][   T54] Bluetooth: hci1: command tx timeout
[   57.211310][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.270349][ T5812] veth0_vlan: entered promiscuous mode
[   57.288649][ T5812] veth1_vlan: entered promiscuous mode
[   57.293839][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.351945][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.361907][ T5821] veth0_vlan: entered promiscuous mode
[   57.378359][ T5812] veth0_macvtap: entered promiscuous mode
[   57.389518][ T5812] veth1_macvtap: entered promiscuous mode
[   57.396471][ T5821] veth1_vlan: entered promiscuous mode
[   57.423442][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.436511][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.453315][ T5812] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.459542][ T5812] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.463088][ T5812] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.467667][ T5812] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.483327][ T5814] veth0_vlan: entered promiscuous mode
[   57.491085][ T5821] veth0_macvtap: entered promiscuous mode
[   57.513327][ T5821] veth1_macvtap: entered promiscuous mode
[   57.527037][ T5814] veth1_vlan: entered promiscuous mode
[   57.536758][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.555919][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.583790][ T5821] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.588578][ T5821] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.591509][ T5821] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.596220][ T5821] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.605357][ T3952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.608680][ T3952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.617417][ T5814] veth0_macvtap: entered promiscuous mode
[   57.637143][ T5814] veth1_macvtap: entered promiscuous mode
[   57.686988][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.697960][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.701645][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.713134][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.745602][ T5814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.748402][ T5814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.751396][ T5814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.756919][ T5814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.769888][ T5812] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.770845][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.788414][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.880252][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.883875][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.943247][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.946830][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.000255][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.003569][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.161610][ T5883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4'.
[   58.165758][ T5883] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.168872][ T5883] batman_adv: batadv0: Removing interface: batadv_slave_0
[   58.173539][ T5883] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.180113][ T5883] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.254844][ T5816] Bluetooth: hci1: command tx timeout
[   59.255470][ T5204] Bluetooth: hci0: command tx timeout
[   59.256710][ T5816] Bluetooth: hci2: command tx timeout
[   59.370303][ T5924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   59.526271][ T5935] syz.2.24 uses obsolete (PF_INET,SOCK_PACKET)
[   59.628798][ T5938] netlink: 'syz.2.27': attribute type 29 has an invalid length.
[   59.640572][ T5938] netlink: 'syz.2.27': attribute type 29 has an invalid length.
[   59.647417][ T5938] netlink: 'syz.2.27': attribute type 29 has an invalid length.
[   59.654088][ T5938] netlink: 'syz.2.27': attribute type 29 has an invalid length.
[   59.673857][ T5938] netlink: 'syz.2.27': attribute type 29 has an invalid length.
[   59.678515][ T5938] netlink: 'syz.2.27': attribute type 29 has an invalid length.
[   59.691286][ T5938] netlink: 'syz.2.27': attribute type 29 has an invalid length.
[   59.699956][ T5938] netlink: 'syz.2.27': attribute type 29 has an invalid length.
[   59.703665][ T5938] netlink: 'syz.2.27': attribute type 29 has an invalid length.
[   59.735752][ T5938] netlink: 'syz.2.27': attribute type 29 has an invalid length.
[   59.787927][ T5948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'.
[   60.181159][ T5963] netlink: 20 bytes leftover after parsing attributes in process `syz.0.36'.
[   60.209817][ T5963] nbd: socks must be embedded in a SOCK_ITEM attr
[   60.218455][ T5815] block nbd64: NBD_DISCONNECT
[   60.243780][ T5966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37'.
[   60.320418][ T5969] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   60.324191][ T5969] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   60.328302][ T5969] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   60.332108][ T5969] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   60.353175][ T5969] Zero length message leads to an empty skb
[   60.391636][ T5971] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   60.398953][ T5971] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.485089][ T5977] raw_sendmsg: syz.2.41 forgot to set AF_INET. Fix it!
[   60.579465][ T5981] NCSI netlink: No device for ifindex 0
[   60.716027][ T5971] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   60.720130][ T5971] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.759443][ T5971] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   60.762825][ T5971] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.837232][ T5971] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   60.841797][ T5971] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.027828][ T5971] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   61.031393][ T5971] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.067889][ T5971] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   61.071441][ T5971] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.097640][ T5971] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   61.101188][ T5971] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.187816][ T5971] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   61.203693][ T5971] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.335510][ T5816] Bluetooth: hci0: command tx timeout
[   61.338024][ T5816] Bluetooth: hci1: command tx timeout
[   61.344446][ T5204] Bluetooth: hci2: command 0x040f tx timeout
[   61.858010][ T6062] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.862525][ T6064] netlink: 16 bytes leftover after parsing attributes in process `syz.0.70'.
[   62.091928][ T6074] Driver unsupported XDP return value 0 on prog  (id 18) dev N/A, expect packet loss!
[   62.270332][ T6082] netlink: 156 bytes leftover after parsing attributes in process `syz.1.78'.
[   62.412400][ T6092] openvswitch: netlink: IP tunnel TTL not specified.
[   62.813839][ T6122] x_tables: duplicate underflow at hook 4
[   62.872826][ T6126] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   63.006641][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.106'.
[   63.009548][ T6137] netlink: 20 bytes leftover after parsing attributes in process `syz.1.106'.
[   63.017463][ T6137] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   63.020348][ T6137] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   63.023049][ T6137] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   63.030947][ T6137] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   63.033929][ T6137] geneve3: entered promiscuous mode
[   63.035917][ T6137] geneve3: entered allmulticast mode
[   63.108568][ T6144] warning: `syz.1.107' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   63.387861][ T6151] ip6gre1: entered promiscuous mode
[   63.414889][   T54] Bluetooth: hci1: command tx timeout
[   63.416678][   T54] Bluetooth: hci0: command tx timeout
[   63.418729][ T5204] Bluetooth: hci2: command 0x040f tx timeout
[   63.566578][ T6157] netlink: 40 bytes leftover after parsing attributes in process `syz.1.114'.
[   64.004824][ T6190] openvswitch: netlink: nsh attribute has 65438 unknown bytes.
[   64.008030][ T6190] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.312687][ T6214] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.139'.
[   64.318402][ T6209] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.139'.
[   64.326467][ T5879] IPVS: starting estimator thread 0...
[   64.332278][ T6209] tap0: tun_chr_ioctl cmd 1074025677
[   64.334108][ T6209] tap0: linktype set to 823
[   64.425174][ T6217] IPVS: using max 79 ests per chain, 189600 per kthread
[   64.543522][ T6230] syz_tun: entered promiscuous mode
[   64.545371][ T6230] syz_tun: entered allmulticast mode
[   64.869633][ T6247] dummy0: entered promiscuous mode
[   64.886570][ T6246] dummy0: left promiscuous mode
[   65.045855][ T6265] IPVS: length: 209 != 24
[   65.212799][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.171'.
[   65.496860][ T5204] Bluetooth: hci2: command 0x040f tx timeout
[   65.681660][ T6320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.178'.
[   66.118883][ T6368] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.360809][ T6389] x_tables: duplicate underflow at hook 1
[   66.471426][ T6398] macvlan1: entered promiscuous mode
[   66.474058][ T6398] ipvlan0: entered promiscuous mode
[   66.476722][ T6398] ipvlan0: left promiscuous mode
[   66.478625][ T6398] macvlan1: left promiscuous mode
[   66.649641][ T6411] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 1, id = 0
[   66.735871][ T6417] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   66.932619][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.207'.
[   67.310670][ T6467] netlink: 20 bytes leftover after parsing attributes in process `syz.0.220'.
[   67.333627][ T6469] validate_nla: 18 callbacks suppressed
[   67.333637][ T6469] netlink: 'syz.2.221': attribute type 39 has an invalid length.
[   67.509146][ T6490] tipc: Started in network mode
[   67.511336][ T6490] tipc: Node identity 662685cae088, cluster identity 4711
[   67.514085][ T6490] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.522856][ T6483] bpq0: entered promiscuous mode
[   67.525236][ T6483] bpq0: entered allmulticast mode
[   67.527865][ T6490] syzkaller0: entered promiscuous mode
[   67.529624][ T6490] syzkaller0: entered allmulticast mode
[   67.540197][ T6483] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   67.550863][ T6490] tipc: Resetting bearer <eth:syzkaller0>
[   67.556094][ T6489] tipc: Resetting bearer <eth:syzkaller0>
[   67.567589][ T6489] tipc: Disabling bearer <eth:syzkaller0>
[   67.722965][ T6503] syzkaller1: entered promiscuous mode
[   67.727824][ T6503] syzkaller1: entered allmulticast mode
[   67.836149][ T6513] netlink: 72 bytes leftover after parsing attributes in process `syz.0.243'.
[   67.840399][ T6513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.243'.
[   67.857447][ T6513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.243'.
[   67.954969][ T6520] netlink: 'syz.0.246': attribute type 1 has an invalid length.
[   68.068372][ T6533] netlink: 'syz.0.250': attribute type 1 has an invalid length.
[   68.095901][ T6533] bond2: (slave gretap1): making interface the new active one
[   68.099987][ T6533] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   68.121732][ T6533] syz.0.250 (6533) used greatest stack depth: 20040 bytes left
[   68.318670][ T6558] batadv0: entered promiscuous mode
[   68.321015][ T6558] macsec1: entered allmulticast mode
[   68.323171][ T6558] batadv0: entered allmulticast mode
[   68.328312][ T6558] batadv0: left allmulticast mode
[   68.330366][ T6558] batadv0: left promiscuous mode
[   68.600924][ T6576] __nla_validate_parse: 3 callbacks suppressed
[   68.600934][ T6576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.265'.
[   68.752092][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.269'.
[   69.086965][ T6601] netlink: 'syz.0.274': attribute type 303 has an invalid length.
[   69.092985][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.274'.
[   69.334595][ T6611] sctp: [Deprecated]: syz.2.281 (pid 6611) Use of struct sctp_assoc_value in delayed_ack socket option.
[   69.334595][ T6611] Use struct sctp_sack_info instead
[   69.539717][ T6623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.285'.
[   69.675687][ T6630] ip6tnl1: entered promiscuous mode
[   69.678160][ T6630] ip6tnl1: entered allmulticast mode
[   69.680606][ T6630] team0: Device ip6tnl1 is of different type
[   69.795140][  T973] cfg80211: failed to load regulatory.db
[   69.871795][ T6638] netlink: 'syz.0.292': attribute type 5 has an invalid length.
[   69.986143][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.294'.
[   70.202580][ T6669] syzkaller0: entered promiscuous mode
[   70.204459][ T6669] syzkaller0: entered allmulticast mode
[   70.858738][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.860984][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.591522][ T6703] netlink: 'syz.1.319': attribute type 1 has an invalid length.
[   71.654280][ T6703] 8021q: adding VLAN 0 to HW filter on device bond2
[   71.662940][ T6703] bond1: (slave bond2): making interface the new active one
[   71.667235][ T6703] bond1: (slave bond2): Enslaving as an active interface with an up link
[   71.676440][ T6709] netlink: 28 bytes leftover after parsing attributes in process `syz.2.321'.
[   71.807153][ T6717] netlink: 'syz.1.325': attribute type 21 has an invalid length.
[   71.810431][ T6717] netlink: 'syz.1.325': attribute type 1 has an invalid length.
[   71.948031][ T6728] sctp: [Deprecated]: syz.1.329 (pid 6728) Use of struct sctp_assoc_value in delayed_ack socket option.
[   71.948031][ T6728] Use struct sctp_sack_info instead
[   72.267162][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'.
[   72.321805][ T6749] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.356307][ T6751] netlink: 'syz.1.340': attribute type 21 has an invalid length.
[   72.359152][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.340'.
[   72.501964][ T6760] netlink: 52 bytes leftover after parsing attributes in process `syz.0.344'.
[   72.520675][ T6760] netlink: 52 bytes leftover after parsing attributes in process `syz.0.344'.
[   72.861230][ T6785] netlink: 'syz.2.356': attribute type 1 has an invalid length.
[   72.865064][ T6785] netlink: 'syz.2.356': attribute type 1 has an invalid length.
[   72.868682][ T6785] netlink: 'syz.2.356': attribute type 2 has an invalid length.
[   73.398651][ T6824] netlink: 'syz.0.371': attribute type 10 has an invalid length.
[   73.986757][ T6864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.019102][ T6868] __nla_validate_parse: 4 callbacks suppressed
[   74.019111][ T6868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.391'.
[   74.123747][ T6874] tc_dump_action: action bad kind
[   74.545920][ T6899] tipc: Started in network mode
[   74.547734][ T6899] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[   74.550000][ T6899] tipc: Enabled bearer <eth:ipvlan1>, priority 14
[   74.987591][ T6920] netlink: 'syz.2.413': attribute type 3 has an invalid length.
[   74.990522][ T6920] netlink: 24 bytes leftover after parsing attributes in process `syz.2.413'.
[   75.118837][ T6924] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[   75.198439][ T6926] netlink: 32 bytes leftover after parsing attributes in process `syz.2.416'.
[   75.546429][ T5823] tipc: Node number set to 10136234
[   75.572837][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'.
[   75.748885][ T6972] netlink: 28 bytes leftover after parsing attributes in process `syz.0.436'.
[   76.921710][    C0] af_packet: tpacket_rcv: packet too big, clamped from 3954 to 3710. macoff=82
[   77.129093][ T7030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.461'.
[   77.460427][ T7063] netlink: 'syz.1.475': attribute type 1 has an invalid length.
[   77.537707][ T7067] syzkaller0: entered promiscuous mode
[   77.539839][ T7067] syzkaller0: entered allmulticast mode
[   78.321238][ T7073] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.324886][ T7073] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   78.401003][ T7073] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.407219][ T7073] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   78.460376][ T7073] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.463863][ T7073] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   78.526644][ T7073] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.530044][ T7073] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   78.533528][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.486'.
[   78.641179][ T7073] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   78.645121][ T7073] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   78.655560][ T7073] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   78.658777][ T7073] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   78.668830][ T7073] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   78.671849][ T7073] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   78.683344][ T7073] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   78.687197][ T7073] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   78.696421][ T7096] netlink: 'syz.0.492': attribute type 39 has an invalid length.
[   79.420521][ T7151] netlink: 'syz.2.518': attribute type 1 has an invalid length.
[   79.436637][ T7151] bond1: entered promiscuous mode
[   79.438914][ T7151] 8021q: adding VLAN 0 to HW filter on device bond1
[   79.455093][ T7151] bond1: (slave bridge1): making interface the new active one
[   79.458098][ T7151] bridge1: entered promiscuous mode
[   79.460948][ T7151] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   79.635248][ T7160] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   79.683708][ T7162] netlink: 232 bytes leftover after parsing attributes in process `syz.2.523'.
[   79.778361][ T7164] netlink: 'syz.1.524': attribute type 1 has an invalid length.
[   79.781432][ T7164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.524'.
[   80.070661][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.529'.
[   80.709111][ T7179] xt_TCPMSS: Only works on TCP SYN packets
[   81.009993][ T7174] syz.1.528: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_RETRY_MAYFAIL), nodemask=(null),cpuset=/,mems_allowed=0-1
[   81.018198][ T7174] CPU: 1 UID: 0 PID: 7174 Comm: syz.1.528 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   81.018209][ T7174] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   81.018214][ T7174] Call Trace:
[   81.018217][ T7174]  <TASK>
[   81.018221][ T7174]  dump_stack_lvl+0x189/0x250
[   81.018239][ T7174]  ? __pfx_dump_stack_lvl+0x10/0x10
[   81.018250][ T7174]  ? __pfx__printk+0x10/0x10
[   81.018259][ T7174]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   81.018268][ T7174]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   81.018276][ T7174]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   81.018285][ T7174]  warn_alloc+0x214/0x310
[   81.018296][ T7174]  ? __pfx_warn_alloc+0x10/0x10
[   81.018308][ T7174]  ? __get_vm_area_node+0x28f/0x300
[   81.018316][ T7174]  ? veth_dev_init+0x363/0x570
[   81.018327][ T7174]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   81.018347][ T7174]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   81.018354][ T7174]  ? __kasan_kmalloc_large+0x1c/0xa0
[   81.018362][ T7174]  ? rcu_is_watching+0x15/0xb0
[   81.018374][ T7174]  ? veth_dev_init+0x363/0x570
[   81.018382][ T7174]  ? veth_dev_init+0x363/0x570
[   81.018390][ T7174]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   81.018397][ T7174]  ? veth_dev_init+0x363/0x570
[   81.018409][ T7174]  veth_dev_init+0x363/0x570
[   81.018420][ T7174]  register_netdevice+0x6bf/0x1ae0
[   81.018441][ T7174]  ? snprintf+0xda/0x120
[   81.018452][ T7174]  ? __pfx_register_netdevice+0x10/0x10
[   81.018461][ T7174]  ? __pfx_snprintf+0x10/0x10
[   81.018470][ T7174]  ? __asan_memset+0x22/0x50
[   81.018507][ T7174]  ? dev_addr_mod+0x2ce/0x3d0
[   81.018519][ T7174]  veth_newlink+0x5cc/0xa50
[   81.018529][ T7174]  ? __pfx_veth_newlink+0x10/0x10
[   81.018538][ T7174]  ? __pfx_css_rstat_updated+0x10/0x10
[   81.018573][ T7174]  ? validate_linkmsg+0x765/0x950
[   81.018588][ T7174]  ? __pfx_veth_newlink+0x10/0x10
[   81.018597][ T7174]  rtnl_newlink_create+0x310/0xb00
[   81.018608][ T7174]  ? __pfx_aa_get_newest_label+0x10/0x10
[   81.018620][ T7174]  ? __pfx_rtnl_newlink_create+0x10/0x10
[   81.018627][ T7174]  ? rtnl_newlink+0x8db/0x1c70
[   81.018635][ T7174]  ? __pfx___mutex_lock+0x10/0x10
[   81.018650][ T7174]  ? ns_capable+0x8a/0xf0
[   81.018664][ T7174]  rtnl_newlink+0x16d6/0x1c70
[   81.018671][ T7174]  ? netlink_sendmsg+0x805/0xb30
[   81.018685][ T7174]  ? __pfx_rtnl_newlink+0x10/0x10
[   81.018721][ T7174]  ? __lock_acquire+0xab9/0xd20
[   81.018742][ T7174]  ? __pfx_rtnl_newlink+0x10/0x10
[   81.018749][ T7174]  rtnetlink_rcv_msg+0x7cf/0xb70
[   81.018757][ T7174]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[   81.018764][ T7174]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   81.018770][ T7174]  ? ref_tracker_free+0x63a/0x7d0
[   81.018780][ T7174]  ? __copy_skb_header+0xa7/0x550
[   81.018790][ T7174]  ? __pfx_ref_tracker_free+0x10/0x10
[   81.018799][ T7174]  ? __skb_clone+0x63/0x7a0
[   81.018811][ T7174]  netlink_rcv_skb+0x208/0x470
[   81.018819][ T7174]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   81.018827][ T7174]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   81.018840][ T7174]  ? netlink_deliver_tap+0x2e/0x1b0
[   81.018847][ T7174]  ? netlink_deliver_tap+0x2e/0x1b0
[   81.018857][ T7174]  netlink_unicast+0x75b/0x8d0
[   81.018868][ T7174]  netlink_sendmsg+0x805/0xb30
[   81.018880][ T7174]  ? __pfx_netlink_sendmsg+0x10/0x10
[   81.018890][ T7174]  ? aa_sock_msg_perm+0x94/0x160
[   81.018899][ T7174]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   81.018908][ T7174]  ? __pfx_netlink_sendmsg+0x10/0x10
[   81.018917][ T7174]  __sock_sendmsg+0x21c/0x270
[   81.018930][ T7174]  ____sys_sendmsg+0x505/0x830
[   81.018941][ T7174]  ? __pfx_____sys_sendmsg+0x10/0x10
[   81.018953][ T7174]  ? import_iovec+0x74/0xa0
[   81.018962][ T7174]  ___sys_sendmsg+0x21f/0x2a0
[   81.018972][ T7174]  ? __pfx____sys_sendmsg+0x10/0x10
[   81.018994][ T7174]  ? __fget_files+0x2a/0x420
[   81.019002][ T7174]  ? __fget_files+0x3a0/0x420
[   81.019014][ T7174]  __x64_sys_sendmsg+0x19b/0x260
[   81.019024][ T7174]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   81.019039][ T7174]  ? do_syscall_64+0xbe/0x3b0
[   81.019047][ T7174]  do_syscall_64+0xfa/0x3b0
[   81.019053][ T7174]  ? lockdep_hardirqs_on+0x9c/0x150
[   81.019063][ T7174]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.019070][ T7174]  ? exc_page_fault+0x9f/0xf0
[   81.019081][ T7174]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.019088][ T7174] RIP: 0033:0x7f0a15b8e929
[   81.019096][ T7174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   81.019102][ T7174] RSP: 002b:00007f0a1698d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   81.019111][ T7174] RAX: ffffffffffffffda RBX: 00007f0a15db5fa0 RCX: 00007f0a15b8e929
[   81.019116][ T7174] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000003
[   81.019121][ T7174] RBP: 00007f0a15c10b39 R08: 0000000000000000 R09: 0000000000000000
[   81.019125][ T7174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   81.019129][ T7174] R13: 0000000000000000 R14: 00007f0a15db5fa0 R15: 00007ffd66150e48
[   81.019141][ T7174]  </TASK>
[   81.019144][ T7174] Mem-Info:
[   81.178592][ T7174] active_anon:5748 inactive_anon:0 isolated_anon:0
[   81.178592][ T7174]  active_file:942 inactive_file:38210 isolated_file:0
[   81.178592][ T7174]  unevictable:1768 dirty:158 writeback:0
[   81.178592][ T7174]  slab_reclaimable:9032 slab_unreclaimable:56424
[   81.178592][ T7174]  mapped:18267 shmem:2440 pagetables:940
[   81.178592][ T7174]  sec_pagetables:0 bounce:0
[   81.178592][ T7174]  kernel_misc_reclaimable:0
[   81.178592][ T7174]  free:289998 free_pcp:25024 free_cma:0
[   81.199546][ T7174] Node 0 active_anon:12500kB inactive_anon:0kB active_file:2480kB inactive_file:13048kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38388kB dirty:244kB writeback:0kB shmem:4868kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6032kB pagetables:1852kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   81.214057][ T7174] Node 1 active_anon:10492kB inactive_anon:0kB active_file:1288kB inactive_file:139792kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34680kB dirty:388kB writeback:0kB shmem:4892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6048kB pagetables:1908kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   81.229266][ T7174] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   81.241548][ T7174] lowmem_reserve[]: 0 815 815 815 815
[   81.243976][ T7174] Node 0 DMA32 free:367356kB boost:0kB min:33716kB low:42144kB high:50572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12500kB inactive_anon:0kB active_file:2480kB inactive_file:13048kB unevictable:3536kB writepending:244kB present:1556484kB managed:834740kB mlocked:0kB bounce:0kB free_pcp:51556kB local_pcp:30940kB free_cma:0kB
[   81.260775][ T7174] lowmem_reserve[]: 0 0 0 0 0
[   81.262959][ T7174] Node 1 DMA32 free:458616kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   81.276468][ T7174] lowmem_reserve[]: 0 0 854 854 854
[   81.278857][ T7174] Node 1 Normal free:318660kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10492kB inactive_anon:0kB active_file:1288kB inactive_file:139792kB unevictable:3536kB writepending:388kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:48544kB local_pcp:20808kB free_cma:0kB
[   81.290952][ T7174] lowmem_reserve[]: 0 0 0 0 0
[   81.292727][ T7174] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   81.297893][ T7174] Node 0 DMA32: 1*4kB (U) 1*8kB (E) 1*16kB (U) 1*32kB (U) 5*64kB (UE) 11*128kB (UM) 6*256kB (UM) 7*512kB (ME) 6*1024kB (ME) 3*2048kB (UM) 85*4096kB (M) = 367356kB
[   81.303288][ T7174] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   81.309111][ T7174] Node 1 Normal: 211*4kB (UME) 352*8kB (UME) 383*16kB (UM) 286*32kB (UM) 129*64kB (UME) 51*128kB (UME) 7*256kB (UME) 7*512kB (UM) 13*1024kB (UME) 6*2048kB (UM) 62*4096kB (M) = 318652kB
[   81.315956][ T7174] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   81.318952][ T7174] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   81.321860][ T7174] 41595 total pagecache pages
[   81.323593][ T7174] 0 pages in swap cache
[   81.325304][ T7174] Free swap  = 124996kB
[   81.327198][ T7174] Total swap = 124996kB
[   81.328572][ T7174] 786301 pages RAM
[   81.329809][ T7174] 0 pages HighMem/MovableOnly
[   81.331350][ T7174] 240368 pages reserved
[   81.332689][ T7174] 0 pages cma reserved
[   81.929177][ T7191] netlink: 92 bytes leftover after parsing attributes in process `syz.2.535'.
[   82.323572][ T7207] syzkaller1: tun_chr_ioctl cmd 1074025677
[   82.326447][ T7207] syzkaller1: linktype set to 270
[   83.230589][ T7255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.564'.
[   83.316402][ T7261] syzkaller1: tun_chr_ioctl cmd 1074025677
[   83.318603][ T7261] syzkaller1: Linktype set failed because interface is up
[   83.518933][ T7278] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[   83.565296][ T7278] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[   83.956392][ T7298] ipt_REJECT: ECHOREPLY no longer supported.
[   84.518663][ T7334] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[   84.697507][ T7348] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.851069][ T7336] infiniband syz!: set active
[   84.853762][ T7336] infiniband syz!: added team_slave_0
[   84.888685][ T7336] RDS/IB: syz!: added
[   84.895060][ T7336] smc: adding ib device syz! with port count 1
[   84.897396][ T7336] smc:    ib device syz! port 1 has pnetid 
[   84.963394][ T7366] xt_addrtype: ipv6 BLACKHOLE matching not supported
[   85.112171][ T7377] tipc: New replicast peer: 255.255.255.255
[   85.117069][ T7377] tipc: Enabled bearer <udp:syz2>, priority 10
[   85.125032][ T7377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.622'.
[   85.135164][ T7377] tipc: Disabling bearer <udp:syz2>
[   85.597625][ T7410] netlink: 'syz.2.638': attribute type 1 has an invalid length.
[   85.660051][ T7410] bond2: (slave gretap1): making interface the new active one
[   85.675565][ T7410] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   85.733533][ T7410] syz.2.638 (7410) used greatest stack depth: 19696 bytes left
[   86.105695][ T7435] netlink: 'syz.1.649': attribute type 1 has an invalid length.
[   86.134005][ T7438] netlink: 224 bytes leftover after parsing attributes in process `syz.2.650'.
[   86.180106][ T7435] bond3: (slave gretap1): making interface the new active one
[   86.190525][ T7435] bond3: (slave gretap1): Enslaving as an active interface with an up link
[   86.373642][ T7448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.656'.
[   86.407004][ T7452] netlink: 'syz.1.658': attribute type 4 has an invalid length.
[   86.414089][ T7452] netlink: 17 bytes leftover after parsing attributes in process `syz.1.658'.
[   86.538153][ T7468] netlink: 16 bytes leftover after parsing attributes in process `syz.2.666'.
[   86.544466][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.666'.
[   86.582440][ T7472] Bluetooth: MGMT ver 1.23
[   86.682313][ T7482] netlink: 'syz.2.673': attribute type 3 has an invalid length.
[   86.686784][ T7482] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.673'.
[   86.758776][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.676'.
[   87.980400][ T7548] netlink: 'syz.0.702': attribute type 4 has an invalid length.
[   88.001872][ T7548] netlink: 'syz.0.702': attribute type 4 has an invalid length.
[   88.148939][ T7561] lo: entered allmulticast mode
[   88.156009][ T7561] dvmrp8: entered allmulticast mode
[   88.160260][ T7560] lo: left allmulticast mode
[   88.391748][ T7575] syzkaller1: entered promiscuous mode
[   88.394047][ T7575] syzkaller1: entered allmulticast mode
[   88.423238][ T7577] netlink: 'syz.1.716': attribute type 11 has an invalid length.
[   88.427824][ T7577] netlink: 224 bytes leftover after parsing attributes in process `syz.1.716'.
[   88.667781][ T7593] netlink: 'syz.1.722': attribute type 13 has an invalid length.
[   88.671005][ T7593] netlink: 'syz.1.722': attribute type 17 has an invalid length.
[   88.730536][ T7593] gretap0: refused to change device tx_queue_len
[   88.739722][ T7593] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   89.336589][ T7640] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[   89.732046][ T7680] netlink: 732 bytes leftover after parsing attributes in process `syz.1.763'.
[   90.655807][ T7713] netlink: 'syz.1.779': attribute type 4 has an invalid length.
[   90.661652][ T7713] netlink: 'syz.1.779': attribute type 4 has an invalid length.
[   90.757853][ T7715] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   90.898342][ T7739] xt_addrtype: ipv6 BLACKHOLE matching not supported
[   91.084267][ T7745] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   91.176499][ T7765] __nla_validate_parse: 1 callbacks suppressed
[   91.176516][ T7765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.809'.
[   91.272431][ T7774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.805'.
[   91.475801][ T7803] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.570953][ T7820] ipt_REJECT: ECHOREPLY no longer supported.
[   91.930521][ T7848] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.839'.
[   91.936220][ T7847] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.839'.
[   91.957455][ T5822] IPVS: starting estimator thread 0...
[   91.975359][ T7847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.044773][ T7850] IPVS: using max 40 ests per chain, 96000 per kthread
[   92.679639][ T7869] netlink: 'syz.2.847': attribute type 13 has an invalid length.
[   92.682875][ T7869] netlink: 'syz.2.847': attribute type 17 has an invalid length.
[   92.749177][ T7869] gretap0: refused to change device tx_queue_len
[   92.751838][ T7869] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   93.537584][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.868'.
[   93.540662][ T7913] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.543085][ T7913] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.554618][ T7913] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.557077][ T7913] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.582916][ T7917] netlink: 'syz.2.878': attribute type 1 has an invalid length.
[   93.613691][ T7917] 8021q: adding VLAN 0 to HW filter on device bond4
[   93.617003][ T7917] bond3: (slave bond4): making interface the new active one
[   93.619621][ T7917] bond3: (slave bond4): Enslaving as an active interface with an up link
[   93.676414][ T7926] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[   93.678776][ T7926] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[   93.847357][ T7938] netlink: 28 bytes leftover after parsing attributes in process `syz.0.879'.
[   94.222159][ T7971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.897'.
[   94.257017][ T7974] tipc: Started in network mode
[   94.258968][ T7974] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[   94.261447][ T7974] tipc: Enabled bearer <eth:ipvlan1>, priority 14
[   94.316465][ T7978] netlink: 32 bytes leftover after parsing attributes in process `syz.1.900'.
[   94.409258][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.902'.
[   94.696605][ T7995] netlink: 'syz.2.907': attribute type 1 has an invalid length.
[   95.310616][ T8024] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[   95.375175][ T5823] tipc: Node number set to 10136234
[   95.750598][ T8040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.925'.
[   96.337109][ T8074] sctp: [Deprecated]: syz.2.941 (pid 8074) Use of struct sctp_assoc_value in delayed_ack socket option.
[   96.337109][ T8074] Use struct sctp_sack_info instead
[   97.297302][ T8091] netlink: 52 bytes leftover after parsing attributes in process `syz.2.953'.
[   97.306704][ T8091] netlink: 52 bytes leftover after parsing attributes in process `syz.2.953'.
[   97.314719][ T8091] netlink: 52 bytes leftover after parsing attributes in process `syz.2.953'.
[   97.356339][ T8091] netlink: 16 bytes leftover after parsing attributes in process `syz.2.953'.
[   97.816907][ T8127] netlink: 52 bytes leftover after parsing attributes in process `syz.1.963'.
[   97.820899][ T8127] netlink: 52 bytes leftover after parsing attributes in process `syz.1.963'.
[   97.825295][ T8127] netlink: 52 bytes leftover after parsing attributes in process `syz.1.963'.
[   97.831962][ T8127] netlink: 16 bytes leftover after parsing attributes in process `syz.1.963'.
[   97.992991][ T8137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.967'.
[   97.996215][ T8137] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.999233][ T8137] batman_adv: batadv0: Removing interface: batadv_slave_0
[   98.007967][ T8137] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.011109][ T8137] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.189910][ T8147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.199807][ T8148] netlink: 92 bytes leftover after parsing attributes in process `syz.1.972'.
[   98.630531][ T8156] syzkaller1: tun_chr_ioctl cmd 1074025677
[   98.632805][ T8156] syzkaller1: linktype set to 270
[   98.783943][ T8163] tipc: Disabling bearer <eth:ipvlan1>
[   99.344536][ T8210] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[   99.513459][ T8225] tipc: New replicast peer: 255.255.255.255
[   99.522193][ T8225] tipc: Enabled bearer <udp:syz2>, priority 10
[   99.528548][ T8225] tipc: Disabling bearer <udp:syz2>
[   99.819610][ T8239] netlink: 'syz.0.1014': attribute type 4 has an invalid length.
[  100.373929][ T8264] syzkaller1: tun_chr_ioctl cmd 1074025677
[  100.378028][ T8264] syzkaller1: Linktype set failed because interface is up
[  100.472214][ T8272] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  100.727433][ T8291] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  100.919533][ T8309] syzkaller1: entered promiscuous mode
[  100.921813][ T8309] syzkaller1: entered allmulticast mode
[  101.002628][ T8312] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  101.088440][ T8323] netlink: 'syz.1.1055': attribute type 3 has an invalid length.
[  101.295208][ T8353] syzkaller1: entered promiscuous mode
[  101.297032][ T8353] syzkaller1: entered allmulticast mode
[  102.360509][ T8389] syzkaller0: entered promiscuous mode
[  102.362466][ T8389] syzkaller0: entered allmulticast mode
[  103.128200][ T8395] __nla_validate_parse: 8 callbacks suppressed
[  103.128215][ T8395] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1088'.
[  103.134496][ T8395] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1088'.
[  103.220707][ T8404] dvmrp8: entered allmulticast mode
[  103.402297][ T8423] syzkaller1: entered promiscuous mode
[  103.404999][ T8423] syzkaller1: entered allmulticast mode
[  104.018098][ T8456] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1116'.
[  104.061570][ T8458] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1117'.
[  104.396535][ T8476] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  104.401100][  T973] IPVS: starting estimator thread 0...
[  104.484422][ T8478] IPVS: using max 45 ests per chain, 108000 per kthread
[  104.527776][ T8482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1128'.
[  104.562688][ T8482] bridge0: entered promiscuous mode
[  104.565619][ T8482] macvtap1: entered promiscuous mode
[  104.568038][ T8482] macvtap1: entered allmulticast mode
[  104.570304][ T8482] bridge0: entered allmulticast mode
[  104.583524][ T8482] bridge0: left allmulticast mode
[  104.586025][ T8482] bridge0: left promiscuous mode
[  104.694528][ T8494] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1133'.
[  104.914005][ T8506] tc_dump_action: action bad kind
[  105.113201][ T8522] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1146'.
[  105.485704][ T8537] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1151'.
[  105.688041][ T8549] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1157'.
[  105.729881][ T8554] netlink: 'syz.0.1159': attribute type 4 has an invalid length.
[  105.831246][ T8562] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1162'.
[  106.228967][ T8597] xt_l2tp: missing protocol rule (udp|l2tpip)
[  106.245935][ T8599] netlink: 'syz.0.1180': attribute type 25 has an invalid length.
[  106.391544][ T8616] netlink: 'syz.2.1189': attribute type 25 has an invalid length.
[  106.428588][  T790] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[  106.433720][  T790] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[  106.441587][  T790] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[  106.446818][  T790] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[  106.451260][  T790] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[  106.455147][  T790] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[  106.458324][  T790] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x3
[  106.465794][  T790] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  106.523833][  T973] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  106.530740][  T973] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  106.747253][ T8648] atomic_op ffff888030cc4198 conn xmit_atomic 0000000000000000
[  107.033303][ T8662] xt_CT: You must specify a L4 protocol and not use inversions on it
[  107.113050][ T8666] netlink: 'syz.2.1211': attribute type 20 has an invalid length.
[  107.297986][ T8678] : entered promiscuous mode
[  107.798437][ T8723] netlink: zone id is out of range
[  107.992443][ T8743] ip6t_srh: unknown srh invflags 4000
[  108.139192][ T8761] __nla_validate_parse: 4 callbacks suppressed
[  108.139201][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1257'.
[  108.150811][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1257'.
[  108.153759][ T8761] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1257'.
[  108.238458][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1258'.
[  108.610406][ T8806] pim6reg: entered allmulticast mode
[  108.709271][ T8825] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1286'.
[  108.738843][ T8829] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1288'.
[  108.794074][ T8837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1292'.
[  108.801575][ T8837] vlan4: entered promiscuous mode
[  108.803290][ T8837] dummy0: entered promiscuous mode
[  109.096240][ T8852] syz.1.1296 uses old SIOCAX25GETINFO
[  109.153950][ T8852] ip6t_srh: unknown srh invflags 4449
[  109.289153][ T8860] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1299'.
[  109.292973][ T8860] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1299'.
[  109.299181][ T8860] netlink: 'syz.1.1299': attribute type 4 has an invalid length.
[  109.438105][ T8866] 
[  109.439166][ T8866] ======================================================
[  109.442055][ T8866] WARNING: possible circular locking dependency detected
[  109.444903][ T8866] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[  109.449028][ T8866] ------------------------------------------------------
[  109.451927][ T8866] syz.1.1302/8866 is trying to acquire lock:
[  109.454318][ T8866] ffff8880230ba188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  109.458686][ T8866] 
[  109.458686][ T8866] but task is already holding lock:
[  109.461751][ T8866] ffff8880230ba230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x94f/0x1930
[  109.465642][ T8866] 
[  109.465642][ T8866] which lock already depends on the new lock.
[  109.465642][ T8866] 
[  109.469892][ T8866] 
[  109.469892][ T8866] the existing dependency chain (in reverse order) is:
[  109.473517][ T8866] 
[  109.473517][ T8866] -> #2 (&nbd->config_lock){+.+.}-{4:4}:
[  109.476760][ T8866]        lock_acquire+0x120/0x360
[  109.478881][ T8866]        __mutex_lock+0x182/0xe80
[  109.480926][ T8866]        refcount_dec_and_mutex_lock+0x30/0xa0
[  109.483467][ T8866]        nbd_config_put+0x2c/0x790
[  109.485590][ T8866]        nbd_release+0xfe/0x140
[  109.487625][ T8866]        bdev_release+0x536/0x650
[  109.489778][ T8866]        blkdev_release+0x15/0x20
[  109.491846][ T8866]        __fput+0x44c/0xa70
[  109.493722][ T8866]        fput_close_sync+0x119/0x200
[  109.495960][ T8866]        __x64_sys_close+0x7f/0x110
[  109.498156][ T8866]        do_syscall_64+0xfa/0x3b0
[  109.500188][ T8866]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.502864][ T8866] 
[  109.502864][ T8866] -> #1 (&disk->open_mutex){+.+.}-{4:4}:
[  109.506019][ T8866]        lock_acquire+0x120/0x360
[  109.508180][ T8866]        __mutex_lock+0x182/0xe80
[  109.510337][ T8866]        __del_gendisk+0x129/0x9e0
[  109.512466][ T8866]        del_gendisk+0xe8/0x160
[  109.514537][ T8866]        nbd_dev_remove_work+0x47/0xe0
[  109.516795][ T8866]        process_scheduled_works+0xae1/0x17b0
[  109.519310][ T8866]        worker_thread+0x8a0/0xda0
[  109.521412][ T8866]        kthread+0x711/0x8a0
[  109.523410][ T8866]        ret_from_fork+0x3fc/0x770
[  109.525532][ T8866]        ret_from_fork_asm+0x1a/0x30
[  109.527713][ T8866] 
[  109.527713][ T8866] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  109.531216][ T8866]        validate_chain+0xb9b/0x2140
[  109.533410][ T8866]        __lock_acquire+0xab9/0xd20
[  109.535593][ T8866]        lock_acquire+0x120/0x360
[  109.537647][ T8866]        down_write+0x96/0x1f0
[  109.539585][ T8866]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  109.542256][ T8866]        nbd_start_device+0x16c/0xac0
[  109.544586][ T8866]        nbd_genl_connect+0x1250/0x1930
[  109.546925][ T8866]        genl_family_rcv_msg_doit+0x215/0x300
[  109.549432][ T8866]        genl_rcv_msg+0x60e/0x790
[  109.551598][ T8866]        netlink_rcv_skb+0x208/0x470
[  109.553867][ T8866]        genl_rcv+0x28/0x40
[  109.555831][ T8866]        netlink_unicast+0x75b/0x8d0
[  109.558099][ T8866]        netlink_sendmsg+0x805/0xb30
[  109.560368][ T8866]        __sock_sendmsg+0x21c/0x270
[  109.562622][ T8866]        ____sys_sendmsg+0x505/0x830
[  109.564870][ T8866]        ___sys_sendmsg+0x21f/0x2a0
[  109.567120][ T8866]        __x64_sys_sendmsg+0x19b/0x260
[  109.569517][ T8866]        do_syscall_64+0xfa/0x3b0
[  109.571695][ T8866]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.574341][ T8866] 
[  109.574341][ T8866] other info that might help us debug this:
[  109.574341][ T8866] 
[  109.578503][ T8866] Chain exists of:
[  109.578503][ T8866]   &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock
[  109.578503][ T8866] 
[  109.584151][ T8866]  Possible unsafe locking scenario:
[  109.584151][ T8866] 
[  109.587163][ T8866]        CPU0                    CPU1
[  109.589391][ T8866]        ----                    ----
[  109.591655][ T8866]   lock(&nbd->config_lock);
[  109.593561][ T8866]                                lock(&disk->open_mutex);
[  109.596456][ T8866]                                lock(&nbd->config_lock);
[  109.599425][ T8866]   lock(&set->update_nr_hwq_lock);
[  109.601624][ T8866] 
[  109.601624][ T8866]  *** DEADLOCK ***
[  109.601624][ T8866] 
[  109.604918][ T8866] 3 locks held by syz.1.1302/8866:
[  109.607036][ T8866]  #0: ffffffff8f576170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  109.610371][ T8866]  #1: ffffffff8f575f88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  109.613988][ T8866]  #2: ffff8880230ba230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x94f/0x1930
[  109.617997][ T8866] 
[  109.617997][ T8866] stack backtrace:
[  109.620339][ T8866] CPU: 0 UID: 0 PID: 8866 Comm: syz.1.1302 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  109.620355][ T8866] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  109.620363][ T8866] Call Trace:
[  109.620368][ T8866]  <TASK>
[  109.620376][ T8866]  dump_stack_lvl+0x189/0x250
[  109.620397][ T8866]  ? __pfx_dump_stack_lvl+0x10/0x10
[  109.620416][ T8866]  ? __pfx__printk+0x10/0x10
[  109.620430][ T8866]  ? print_lock_name+0xde/0x100
[  109.620444][ T8866]  print_circular_bug+0x2ee/0x310
[  109.620457][ T8866]  check_noncircular+0x134/0x160
[  109.620471][ T8866]  validate_chain+0xb9b/0x2140
[  109.620517][ T8866]  __lock_acquire+0xab9/0xd20
[  109.620536][ T8866]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  109.620555][ T8866]  lock_acquire+0x120/0x360
[  109.620572][ T8866]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  109.620592][ T8866]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  109.620613][ T8866]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  109.620631][ T8866]  down_write+0x96/0x1f0
[  109.620642][ T8866]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  109.620660][ T8866]  ? __pfx_down_write+0x10/0x10
[  109.620674][ T8866]  blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  109.620692][ T8866]  ? nbd_add_socket+0x688/0x9a0
[  109.620710][ T8866]  ? nbd_add_socket+0x688/0x9a0
[  109.620728][ T8866]  nbd_start_device+0x16c/0xac0
[  109.620752][ T8866]  ? __nla_parse+0x40/0x60
[  109.620770][ T8866]  nbd_genl_connect+0x1250/0x1930
[  109.620788][ T8866]  ? __pfx_nbd_genl_connect+0x10/0x10
[  109.620811][ T8866]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  109.620834][ T8866]  genl_family_rcv_msg_doit+0x215/0x300
[  109.620854][ T8866]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  109.620878][ T8866]  genl_rcv_msg+0x60e/0x790
[  109.620895][ T8866]  ? __pfx_genl_rcv_msg+0x10/0x10
[  109.620910][ T8866]  ? __pfx_nbd_genl_connect+0x10/0x10
[  109.620930][ T8866]  netlink_rcv_skb+0x208/0x470
[  109.620943][ T8866]  ? __pfx_genl_rcv_msg+0x10/0x10
[  109.620958][ T8866]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  109.620976][ T8866]  ? down_read+0x1ad/0x2e0
[  109.620988][ T8866]  genl_rcv+0x28/0x40
[  109.621003][ T8866]  netlink_unicast+0x75b/0x8d0
[  109.621018][ T8866]  netlink_sendmsg+0x805/0xb30
[  109.621034][ T8866]  ? __pfx_netlink_sendmsg+0x10/0x10
[  109.621048][ T8866]  ? aa_sock_msg_perm+0x94/0x160
[  109.621061][ T8866]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  109.621077][ T8866]  ? __pfx_netlink_sendmsg+0x10/0x10
[  109.621088][ T8866]  __sock_sendmsg+0x21c/0x270
[  109.621107][ T8866]  ____sys_sendmsg+0x505/0x830
[  109.621121][ T8866]  ? __pfx_____sys_sendmsg+0x10/0x10
[  109.621137][ T8866]  ? import_iovec+0x74/0xa0
[  109.621149][ T8866]  ___sys_sendmsg+0x21f/0x2a0
[  109.621163][ T8866]  ? __pfx____sys_sendmsg+0x10/0x10
[  109.621188][ T8866]  ? __fget_files+0x2a/0x420
[  109.621201][ T8866]  ? __fget_files+0x3a0/0x420
[  109.621215][ T8866]  __x64_sys_sendmsg+0x19b/0x260
[  109.621230][ T8866]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  109.621246][ T8866]  ? __sys_socketpair+0x4a9/0x560
[  109.621258][ T8866]  ? do_syscall_64+0xbe/0x3b0
[  109.621270][ T8866]  do_syscall_64+0xfa/0x3b0
[  109.621280][ T8866]  ? lockdep_hardirqs_on+0x9c/0x150
[  109.621295][ T8866]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.621308][ T8866]  ? exc_page_fault+0x9f/0xf0
[  109.621324][ T8866]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.621336][ T8866] RIP: 0033:0x7f0a15b8e929
[  109.621348][ T8866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  109.621358][ T8866] RSP: 002b:00007f0a1698d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  109.621371][ T8866] RAX: ffffffffffffffda RBX: 00007f0a15db5fa0 RCX: 00007f0a15b8e929
[  109.621380][ T8866] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000007
[  109.621388][ T8866] RBP: 00007f0a15c10b39 R08: 0000000000000000 R09: 0000000000000000
[  109.621395][ T8866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  109.621402][ T8866] R13: 0000000000000000 R14: 00007f0a15db5fa0 R15: 00007ffd66150e48
[  109.621415][ T8866]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  109.786174][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881101aa000: rx timeout, send abort
[  109.941594][ T8866] nbd1: detected capacity change from 0 to 63
[  109.964416][ T8867] block nbd1: NBD_DISCONNECT
[  109.984502][ T8867] block nbd1: Disconnected due to user request.
[  109.990223][ T8867] block nbd1: shutting down sockets
[  109.991373][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.006734][    C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  110.010440][    C1] Buffer I/O error on dev nbd1, logical block 0, async page read
[  110.014388][    C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  110.018229][    C1] Buffer I/O error on dev nbd1, logical block 1, async page read
[  110.021549][    C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  110.025329][    C1] Buffer I/O error on dev nbd1, logical block 2, async page read
[  110.028626][    C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  110.032292][    C1] Buffer I/O error on dev nbd1, logical block 3, async page read
[  110.035875][ T8623] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  110.039567][ T8623] Buffer I/O error on dev nbd1, logical block 0, async page read
[  110.042818][ T8623] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  110.046710][ T8623] Buffer I/O error on dev nbd1, logical block 1, async page read
[  110.049961][ T8623] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  110.053674][ T8623] Buffer I/O error on dev nbd1, logical block 2, async page read
[  110.057319][ T8623] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  110.061262][ T8623] Buffer I/O error on dev nbd1, logical block 3, async page read
[  110.064906][ T8623] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  110.065771][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.068617][ T8623] Buffer I/O error on dev nbd1, logical block 0, async page read
[  110.076334][ T8623] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  110.080144][ T8623] Buffer I/O error on dev nbd1, logical block 1, async page read
[  110.084710][ T8623] ldm_validate_partition_table(): Disk read failed.
[  110.088279][ T8623] Dev nbd1: unable to read RDB block 0
[  110.091519][ T8623]  nbd1: unable to read partition table
[  110.097379][ T8623] ldm_validate_partition_table(): Disk read failed.
[  110.100978][ T8623] Dev nbd1: unable to read RDB block 0
[  110.104177][ T8623]  nbd1: unable to read partition table
[  110.138316][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.193269][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.262660][   T12] bridge_slave_1: left allmulticast mode
[  110.264735][   T12] bridge_slave_1: left promiscuous mode
[  110.268168][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.271736][   T12] bridge_slave_0: left allmulticast mode
[  110.273506][   T12] bridge_slave_0: left promiscuous mode
[  110.275520][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.308887][   T12] bond2 (unregistering): (slave gretap1): Releasing active interface
[  110.322580][   T12] dvmrp8 (unregistering): left allmulticast mode
[  110.374899][   T12] bond1 (unregistering): (slave bridge1): Releasing backup interface
[  110.378376][   T12] bridge1 (unregistering): left promiscuous mode
[  110.428130][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  110.432930][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  110.437334][   T12] bond0 (unregistering): Released all slaves
[  110.443115][   T12] bond1 (unregistering): Released all slaves
[  110.447273][   T12] bond2 (unregistering): Released all slaves
[  110.452562][   T12] bond3 (unregistering): (slave bond4): Releasing backup interface
[  110.455711][   T12] bond3 (unregistering): Released all slaves
[  110.504435][   T12] bond4 (unregistering): Released all slaves
[  110.559509][   T12] : left promiscuous mode
[  110.610664][   T12] tipc: Disabling bearer <eth:ipvlan1>
[  110.617154][   T12] tipc: Left network mode
[  110.847958][   T12] hsr_slave_0: left promiscuous mode
[  110.850780][   T12] hsr_slave_1: left promiscuous mode
[  110.858124][   T12] veth1_macvtap: left promiscuous mode
[  110.860511][   T12] veth0_macvtap: left promiscuous mode
[  110.862782][   T12] veth1_vlan: left promiscuous mode
[  110.865304][   T12] veth0_vlan: left promiscuous mode
[  110.917894][   T12] pim6reg (unregistering): left allmulticast mode
[  111.007934][   T12] team0 (unregistering): Port device team_slave_1 removed
[  111.022106][   T12] team0 (unregistering): Port device team_slave_0 removed
[  111.030271][ T1087] smc: removing ib device syz!
[  111.305594][   T12] IPVS: stop unused estimator thread 0...
[  111.946770][   T12] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  111.949933][   T12] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  111.995983][   T12] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  111.999805][   T12] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  112.047918][   T12] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  112.051916][   T12] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  112.097103][   T12] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  112.100709][   T12] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  112.167627][   T12] bridge_slave_1: left allmulticast mode
[  112.169534][   T12] bridge_slave_1: left promiscuous mode
[  112.171454][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.177060][   T12] bridge_slave_0: left allmulticast mode
[  112.179263][   T12] bridge_slave_0: left promiscuous mode
[  112.181170][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.222344][   T12] bond3 (unregistering): (slave gretap1): Releasing active interface
[  112.332658][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  112.337205][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  112.341535][   T12] bond0 (unregistering): Released all slaves
[  112.347777][   T12] bond1 (unregistering): (slave bond2): Releasing backup interface
[  112.351576][   T12] bond1 (unregistering): Released all slaves
[  112.408433][   T12] bond2 (unregistering): Released all slaves
[  112.414742][   T12] bond3 (unregistering): Released all slaves
[  112.473690][   T12] tipc: Left network mode
[  112.623266][   T12] hsr_slave_0: left promiscuous mode
[  112.627046][   T12] hsr_slave_1: left promiscuous mode
[  112.630572][   T12] veth1_macvtap: left promiscuous mode
[  112.632394][   T12] veth0_macvtap: left promiscuous mode
[  112.700762][   T12] team0 (unregistering): Port device team_slave_1 removed
[  112.711654][   T12] team0 (unregistering): Port device team_slave_0 removed
[  112.933310][   T12] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
22:17:50  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000061 RBX=0000000000000061 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000133e RDI=000000000000133f RBP=00000000000003f8 RSP=ffffc90007556710
R8 =ffff888021bd0237 R9 =1ffff1100437a046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48e7 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0a1698d6c0 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0a15b74980 CR3=000000002a970000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 0000000000000000
XMM02=000055558956ba0b 000055558956b7a0 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00005555895614a0 XMM05=0102800404a68408 0001000000080606
XMM06=013af820040002e8 0302080002b80300 XMM07=0000000000000000 0000000000000000
XMM08=0000306e616c7701 ffffffffffffffff XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=61b4d94d02d1e300 RBX=ffffffff81974d58 RCX=61b4d94d02d1e300 RDX=0000000000000001
RSI=ffffffff8be28d20 RDI=ffffffff81974d58 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa10cf0 R13=0000000000000001 R14=0000000000000001 R15=1ffff11020018000
RIP=ffffffff8b66b4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005563a388e7e8 CR3=0000000032024000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f3802384478 00007f3802384450 XMM03=00007f3802384488 00007f3802384480
XMM04=00007f3802eed100 00007f3802384440 XMM05=00007f3802384458 00007f38023844a0
XMM06=00007f3802384498 00007f3802384490 XMM07=00007f3802384488 00007f3802384480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f3802211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
