last executing test programs:

1.259669688s ago: executing program 0 (id=1918):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x3, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfe}, [@RTA_IIF={0x8}, @RTA_SRC={0x8, 0x2, @local}]}, 0x2c}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c0011001901010000000000000000000000000020010000000000000000000000000001ac14143e0000000000c8b10000000000ac1414bb00fb0000000000000000000032000001073500000a00020000000000000000000000020000000000ac1e01010000000000000000000000000a010102000000000000000000000000fe80000000000000000000000000002f33"], 0xec}}, 0x20000000)

1.179833998s ago: executing program 0 (id=1920):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x1, 0x3ff, 0x9, 0xb2}, 0x9c)

1.179416166s ago: executing program 0 (id=1921):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0x8000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32)

1.072461176s ago: executing program 1 (id=1923):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x1, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x61, 0x5f, 0x5f]}}, 0x0, 0x2d, 0x0, 0x1, 0xcdd6}, 0x28)

1.072160745s ago: executing program 1 (id=1924):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_batadv\x00', &(0x7f0000000100)=@ethtool_cmd={0x24, 0x2, 0x4, 0xc1, 0xc0, 0x9, 0x2, 0x8, 0x6c, 0xf7, 0x400, 0xfffffc00, 0x3, 0x0, 0x5, 0xfffffffa, [0xc35c, 0x2400]}})

989.34954ms ago: executing program 0 (id=1925):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}}], {0x14}}, 0xa8}}, 0x0)

989.092388ms ago: executing program 1 (id=1926):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc)

930.374212ms ago: executing program 1 (id=1927):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{r0}, &(0x7f0000000980), &(0x7f0000000a00)='%ps    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

930.073131ms ago: executing program 0 (id=1928):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000280), 0x4)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @private=0xa010101}, 0x10)
connect$inet(r0, &(0x7f0000000100), 0x10)

859.163021ms ago: executing program 1 (id=1929):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000300)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
readv(r3, &(0x7f0000000180)=[{&(0x7f0000000e40)=""/234, 0xea}], 0x1)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0xfffffffe, 0x0, 0x100}, 0x1c)
r7 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f00000000c0), 0x12)
pread64(r7, &(0x7f0000001840)=""/4096, 0x1000, 0x1)

323.513746ms ago: executing program 2 (id=1941):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000340)=""/228, &(0x7f0000000180)=0xe4)

229.928964ms ago: executing program 2 (id=1942):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000240)={0x0, 0x0})

225.283912ms ago: executing program 2 (id=1943):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000540)={0x0, 0x9ea}, &(0x7f0000000600)=0x8)

129.582607ms ago: executing program 2 (id=1944):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

129.231212ms ago: executing program 2 (id=1945):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1)

50.081903ms ago: executing program 0 (id=1946):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="e00000001000090500c63703b60000000000d0000000000000f5ffffa80000002b0e13eaa55522fcbd9fe735a3184f123d6da2f1acfac0ee2dd2b184b27d0800000400bf852c8986626691b01b5f44e4ce28715f282818126398454629287f140100"], 0xe0}], 0x1, 0x0, 0x0, 0x4040}, 0x0)

49.855734ms ago: executing program 2 (id=1947):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)

0s ago: executing program 1 (id=1948):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080), 0x8)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, 0x0, 0x0)
recvfrom(r2, 0x0, 0x0, 0x20, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES32], 0x120}], 0x1}, 0x300)
listen(r3, 0x0)
unshare(0x20000400)
pselect6(0x4b, &(0x7f0000000040), &(0x7f00000000c0)={0x9}, 0x0, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:23187' (ED25519) to the list of known hosts.
syzkaller login: [   56.387478][ T5811] cgroup: Unknown subsys name 'net'
[   56.533100][ T5811] cgroup: Unknown subsys name 'cpuset'
[   56.539211][ T5811] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.679329][ T5811] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.852863][ T5223] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.859217][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.862446][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.866712][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.878390][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.894546][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.905563][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.913373][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.916898][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.919662][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.923134][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.925859][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.929186][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.932778][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.936463][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.277001][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   64.319916][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   64.437951][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   64.489189][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.491694][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.494342][ T5830] bridge_slave_0: entered allmulticast mode
[   64.498639][ T5830] bridge_slave_0: entered promiscuous mode
[   64.503609][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.505978][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.508846][ T5830] bridge_slave_1: entered allmulticast mode
[   64.511759][ T5830] bridge_slave_1: entered promiscuous mode
[   64.602215][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.606262][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.609841][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.613006][ T5839] bridge_slave_0: entered allmulticast mode
[   64.616993][ T5839] bridge_slave_0: entered promiscuous mode
[   64.643327][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.647315][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.650805][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.653911][ T5839] bridge_slave_1: entered allmulticast mode
[   64.658556][ T5839] bridge_slave_1: entered promiscuous mode
[   64.694645][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.698020][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.701408][ T5834] bridge_slave_0: entered allmulticast mode
[   64.705412][ T5834] bridge_slave_0: entered promiscuous mode
[   64.757235][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.760584][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.763057][ T5834] bridge_slave_1: entered allmulticast mode
[   64.766042][ T5834] bridge_slave_1: entered promiscuous mode
[   64.772619][ T5830] team0: Port device team_slave_0 added
[   64.788350][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.794064][ T5830] team0: Port device team_slave_1 added
[   64.798403][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.844673][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.851040][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.874135][ T5839] team0: Port device team_slave_0 added
[   64.892785][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.895672][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.906315][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.916085][ T5839] team0: Port device team_slave_1 added
[   64.945217][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.949084][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.962115][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.986663][ T5834] team0: Port device team_slave_0 added
[   64.999450][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.003316][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.013749][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.021897][ T5834] team0: Port device team_slave_1 added
[   65.025211][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.028108][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.038797][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.094278][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.097256][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.108621][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.138821][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.141911][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.153096][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.173088][ T5839] hsr_slave_0: entered promiscuous mode
[   65.175644][ T5839] hsr_slave_1: entered promiscuous mode
[   65.182014][ T5830] hsr_slave_0: entered promiscuous mode
[   65.184449][ T5830] hsr_slave_1: entered promiscuous mode
[   65.186709][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.190121][ T5830] Cannot create hsr debugfs directory
[   65.358295][ T5834] hsr_slave_0: entered promiscuous mode
[   65.361509][ T5834] hsr_slave_1: entered promiscuous mode
[   65.364493][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.367516][ T5834] Cannot create hsr debugfs directory
[   65.624467][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.632984][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.639543][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.652811][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.690284][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.712433][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.719297][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.728898][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.781980][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.795677][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.806299][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.813023][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.893788][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.905293][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.929849][   T54] Bluetooth: hci0: command tx timeout
[   65.942449][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   65.966204][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   65.974211][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.977470][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.994078][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.996931][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.005218][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.008316][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.012469][   T54] Bluetooth: hci1: command tx timeout
[   66.012481][ T5223] Bluetooth: hci2: command tx timeout
[   66.036205][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.039146][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.126237][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.157103][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   66.174403][  T484] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.176694][  T484] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.189394][  T484] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.191788][  T484] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.372648][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.384632][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.392228][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.480634][ T5830] veth0_vlan: entered promiscuous mode
[   66.494621][ T5834] veth0_vlan: entered promiscuous mode
[   66.498650][ T5839] veth0_vlan: entered promiscuous mode
[   66.503871][ T5830] veth1_vlan: entered promiscuous mode
[   66.515665][ T5834] veth1_vlan: entered promiscuous mode
[   66.536202][ T5839] veth1_vlan: entered promiscuous mode
[   66.577320][ T5834] veth0_macvtap: entered promiscuous mode
[   66.585496][ T5830] veth0_macvtap: entered promiscuous mode
[   66.599889][ T5830] veth1_macvtap: entered promiscuous mode
[   66.603213][ T5834] veth1_macvtap: entered promiscuous mode
[   66.636009][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.646398][ T5839] veth0_macvtap: entered promiscuous mode
[   66.662085][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.666941][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.674529][ T5839] veth1_macvtap: entered promiscuous mode
[   66.686150][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.700270][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.703404][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.706550][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.711999][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.720627][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.724085][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.730879][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.734275][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.746866][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.763965][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.795148][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.799333][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.802413][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.805414][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.936862][  T484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.944397][  T484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.005906][ T4375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.016359][ T4375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.024556][  T484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.027377][  T484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.058744][  T484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.066180][  T484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.079477][  T484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.083772][  T484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.121926][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.125913][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.180825][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.323630][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   67.401934][ T5901] tipc: Started in network mode
[   67.404189][ T5901] tipc: Node identity 9e71f9bf4863, cluster identity 4711
[   67.418340][ T5901] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.432423][ T5901] syzkaller0: entered promiscuous mode
[   67.439361][ T5901] syzkaller0: entered allmulticast mode
[   67.522015][ T5901] tipc: Resetting bearer <eth:syzkaller0>
[   67.542314][ T5899] tipc: Resetting bearer <eth:syzkaller0>
[   67.564416][ T5899] tipc: Disabling bearer <eth:syzkaller0>
[   68.010344][   T54] Bluetooth: hci0: command tx timeout
[   68.089356][   T54] Bluetooth: hci2: command tx timeout
[   68.089588][ T5223] Bluetooth: hci1: command tx timeout
[   68.173780][ T5934] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18'.
[   68.332129][ T5942] bpf setsockopt: ignoring program buffer with optlen=65458 (max_optlen=4096)
[   68.399084][ T5948] netlink: 'syz.1.24': attribute type 1 has an invalid length.
[   68.404086][ T5948] netlink: 144 bytes leftover after parsing attributes in process `syz.1.24'.
[   68.407530][ T5948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24'.
[   68.591195][ T5961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.646848][ T5964] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.30'.
[   69.172043][ T5993] ip6gre1: entered promiscuous mode
[   69.209829][ T5996] ieee802154 phy0 wpan0: encryption failed: -90
[   69.311381][   T24] IPVS: starting estimator thread 0...
[   69.341094][ T6007] netlink: 'syz.0.50': attribute type 1 has an invalid length.
[   69.381248][ T6001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.408427][ T6003] IPVS: using max 49 ests per chain, 117600 per kthread
[   70.083411][ T6035] dvmrp8: entered allmulticast mode
[   70.167917][ T5223] Bluetooth: hci2: command tx timeout
[   70.178619][ T5223] Bluetooth: hci1: command tx timeout
[   70.462949][ T6058] xt_nat: multiple ranges no longer supported
[   70.527206][ T6060] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   70.530497][ T6060] IPv6: NLM_F_CREATE should be set when creating new route
[   70.533318][ T6060] IPv6: NLM_F_CREATE should be set when creating new route
[   70.951498][ T6093] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.029807][ T6102] netlink: 224 bytes leftover after parsing attributes in process `syz.0.94'.
[   71.092398][ T6109] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.143959][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.146267][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.156839][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.98'.
[   71.166900][ T6113] gtp0: entered promiscuous mode
[   71.171523][ T6113] gtp0: entered allmulticast mode
[   71.276694][ T6119] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[   71.347527][ T6122] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.352639][ T6122] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address
[   71.360137][ T6122] bond0: (slave ip_vti0): Error -95 calling set_mac_address
[   71.441872][ T6128] netlink: 'syz.0.103': attribute type 1 has an invalid length.
[   71.587493][ T6136] netlink: 128 bytes leftover after parsing attributes in process `syz.0.105'.
[   71.594185][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.105'.
[   72.004419][ T6156] syz.1.110 uses obsolete (PF_INET,SOCK_PACKET)
[   72.251282][   T54] Bluetooth: hci2: command tx timeout
[   72.252392][ T5223] Bluetooth: hci1: command tx timeout
[   72.288173][ T6166] syzkaller0: entered allmulticast mode
[   72.307341][ T6166] syz.2.114 uses old SIOCAX25GETINFO
[   73.782356][ T6182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.121'.
[   73.907294][ T6190] sctp: [Deprecated]: syz.0.126 (pid 6190) Use of int in maxseg socket option.
[   73.907294][ T6190] Use struct sctp_assoc_value instead
[   74.573210][ T6227] netlink: 'syz.0.136': attribute type 4 has an invalid length.
[   74.577738][ T6220] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   74.743537][ T6227] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.747938][ T6227] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.896783][ T6242] netlink: 'syz.2.143': attribute type 21 has an invalid length.
[   74.903975][ T6242] netlink: 128 bytes leftover after parsing attributes in process `syz.2.143'.
[   74.983372][ T6227] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.992089][ T6227] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.075094][ T6227] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.079784][ T6227] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.082997][ T6227] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.086596][ T6227] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.165947][ T6242] netlink: 'syz.2.143': attribute type 4 has an invalid length.
[   75.178367][ T6242] netlink: 'syz.2.143': attribute type 5 has an invalid length.
[   75.181433][ T6242] netlink: 3 bytes leftover after parsing attributes in process `syz.2.143'.
[   75.789030][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.156'.
[   75.876948][ T5847] nci: nci_rx_work: unknown MT 0x1
[   75.992196][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.163'.
[   76.625917][ T6310] netlink: 'syz.2.168': attribute type 1 has an invalid length.
[   76.638361][ T6310] netlink: 232 bytes leftover after parsing attributes in process `syz.2.168'.
[   76.642479][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.168'.
[   76.754444][ T6321] netlink: 'syz.1.173': attribute type 10 has an invalid length.
[   76.783658][ T6321] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.786982][ T6321] team0: Port device bond0 added
[   76.817027][ T5847] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[   76.839113][ T6323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'.
[   77.166239][ T6347] bond1: entered promiscuous mode
[   77.168613][ T6347] 8021q: adding VLAN 0 to HW filter on device bond1
[   77.342088][ T6363] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.191'.
[   77.345718][ T6363] netlink: zone id is out of range
[   77.348201][ T6363] netlink: get zone limit has 8 unknown bytes
[   77.468999][ T6374] netlink: 'syz.2.197': attribute type 1 has an invalid length.
[   77.476003][ T6374] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.598836][ T6387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.202'.
[   77.726585][ T6394] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   77.974080][ T6407] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.998343][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.001046][ T6402] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.193841][ T6402] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.208807][ T6402] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.320740][ T6402] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.323570][ T6402] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.326382][ T6402] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.329689][ T6402] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.546344][ T6430] openvswitch: netlink: IPv4 tunnel dst address is zero
[   78.580181][ T6432] syzkaller0: entered promiscuous mode
[   78.582214][ T6432] syzkaller0: entered allmulticast mode
[   78.931437][ T6448] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   79.191644][ T6455] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.422881][ T6461] Cannot find del_set index 286 as target
[   79.902755][ T6464] macvlan0: entered allmulticast mode
[   79.904650][ T6464] netlink: 'syz.0.235': attribute type 1 has an invalid length.
[   79.907045][ T6464] netlink: 'syz.0.235': attribute type 2 has an invalid length.
[   79.994670][ T6468] __nla_validate_parse: 4 callbacks suppressed
[   79.994685][ T6468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.238'.
[   80.003366][ T6468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.238'.
[   80.069585][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'.
[   80.094773][ T6472] openvswitch: netlink: Invalid MD length 0 for MD type 0
[   80.097024][ T6472] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.688370][ T6524] tipc: Started in network mode
[   80.690319][ T6524] tipc: Node identity 1ac6a1af6c7e, cluster identity 4711
[   80.692872][ T6524] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.695755][ T6524] syzkaller0: entered promiscuous mode
[   80.698190][ T6524] syzkaller0: entered allmulticast mode
[   80.722092][ T6524] tipc: Resetting bearer <eth:syzkaller0>
[   80.731470][ T6523] tipc: Resetting bearer <eth:syzkaller0>
[   80.756992][ T6523] tipc: Disabling bearer <eth:syzkaller0>
[   80.964297][ T6539] trusted_key: syz.2.269 sent an empty control message without MSG_MORE.
[   81.151880][ T6554] netlink: 68 bytes leftover after parsing attributes in process `syz.0.274'.
[   81.303559][ T6567] netlink: 'syz.1.282': attribute type 3 has an invalid length.
[   81.373489][ T1270] cfg80211: failed to load regulatory.db
[   81.475492][ T6579] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   81.532949][ T6583] batadv_slave_1: entered promiscuous mode
[   81.536980][ T6582] batadv_slave_1: left promiscuous mode
[   81.737819][ T6597] bridge0: port 3(gretap0) entered blocking state
[   81.740640][ T6597] bridge0: port 3(gretap0) entered disabled state
[   81.743945][ T6597] gretap0: entered allmulticast mode
[   81.747495][ T6597] gretap0: entered promiscuous mode
[   82.129629][ T6619] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.716270][ T6659] netlink: 'syz.0.326': attribute type 1 has an invalid length.
[   82.719807][ T6659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.326'.
[   82.725945][ T6660] netlink: 'syz.1.325': attribute type 1 has an invalid length.
[   82.741999][ T6660] netlink: 224 bytes leftover after parsing attributes in process `syz.1.325'.
[   83.185879][ T6694] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   83.191274][ T6694] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   83.195114][ T6694] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   83.199486][ T6694] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   83.208434][ T6694] vxlan0: entered promiscuous mode
[   83.211170][ T6694] vxlan0: entered allmulticast mode
[   83.225654][ T6692] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.230127][ T6692] syzkaller0: entered promiscuous mode
[   83.232401][ T6692] syzkaller0: entered allmulticast mode
[   83.250511][ T6692] tipc: Resetting bearer <eth:syzkaller0>
[   83.257911][ T6691] tipc: Resetting bearer <eth:syzkaller0>
[   83.309974][ T6691] tipc: Disabling bearer <eth:syzkaller0>
[   83.500117][ T6715] ip6gre2: entered allmulticast mode
[   83.640625][ T6725] netlink: 'syz.0.357': attribute type 1 has an invalid length.
[   83.643186][ T6725] netlink: 600 bytes leftover after parsing attributes in process `syz.0.357'.
[   84.147365][ T6760] syz_tun: entered allmulticast mode
[   84.153090][ T6760] dvmrp8: left allmulticast mode
[   84.231975][ T6766] netlink: 52 bytes leftover after parsing attributes in process `syz.0.376'.
[   84.235085][ T6766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.376'.
[   84.243408][ T6758] syz_tun: left allmulticast mode
[   84.357161][ T6776] netlink: 'syz.0.381': attribute type 10 has an invalid length.
[   84.368297][ T6776] netlink: 40 bytes leftover after parsing attributes in process `syz.0.381'.
[   84.373041][ T6776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.388087][ T6776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.391564][ T6776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.394901][ T6776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.420810][ T6776] team0: Port device geneve0 added
[   84.557241][ T6787] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   85.249400][ T6806] bridge_slave_0: left allmulticast mode
[   85.252305][ T6806] bridge_slave_0: left promiscuous mode
[   85.254692][ T6806] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.265668][ T6806] bridge_slave_1: left allmulticast mode
[   85.267513][ T6806] bridge_slave_1: left promiscuous mode
[   85.272507][ T6806] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.282171][ T6806] bond0: (slave bond_slave_0): Releasing backup interface
[   85.290062][ T6806] bond0: (slave bond_slave_1): Releasing backup interface
[   85.311360][ T6806] team0: Port device team_slave_0 removed
[   85.321696][ T6806] team0: Port device team_slave_1 removed
[   85.325397][ T6806] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.328791][ T6806] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.332909][ T6806] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.335630][ T6806] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.436945][ T6830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.402'.
[   85.443461][ T6830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.402'.
[   85.474623][ T6830] Zero length message leads to an empty skb
[   85.526542][ T6836] netlink: 24 bytes leftover after parsing attributes in process `syz.0.407'.
[   85.993610][ T6867] netlink: 108 bytes leftover after parsing attributes in process `syz.2.418'.
[   86.110909][ T6875] netlink: 'syz.0.422': attribute type 5 has an invalid length.
[   86.116343][ T6875] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.422'.
[   87.356798][ T6910] netlink: 'syz.2.438': attribute type 1 has an invalid length.
[   87.362706][ T6910] netlink: 224 bytes leftover after parsing attributes in process `syz.2.438'.
[   87.511137][ T6913] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   87.580597][ T6914] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   87.871346][ T6919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.441'.
[   88.112298][ T6938] netlink: 24 bytes leftover after parsing attributes in process `syz.1.450'.
[   88.607884][ T6960] Illegal XDP return value 4294967274 on prog  (id 53) dev N/A, expect packet loss!
[   88.794513][ T6970] tap0: tun_chr_ioctl cmd 1074025675
[   88.796673][ T6970] tap0: persist disabled
[   88.810635][ T6972] netlink: 'syz.0.466': attribute type 6 has an invalid length.
[   88.942310][ T6980] netlink: 'syz.0.471': attribute type 11 has an invalid length.
[   89.066502][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.475'.
[   89.754921][ T7015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.486'.
[   89.879260][ T7022] netlink: 'syz.1.488': attribute type 4 has an invalid length.
[   89.890391][ T7022] netlink: 'syz.1.488': attribute type 4 has an invalid length.
[   90.142453][ T7030] netlink: 'syz.2.491': attribute type 8 has an invalid length.
[   91.342765][ T7106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.524'.
[   91.952112][ T7126] netlink: 'syz.1.535': attribute type 11 has an invalid length.
[   92.806546][ T7166] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.812699][ T7166] syzkaller0: entered promiscuous mode
[   92.814576][ T7166] syzkaller0: entered allmulticast mode
[   92.831739][ T7166] tipc: Resetting bearer <eth:syzkaller0>
[   92.836379][ T7164] tipc: Resetting bearer <eth:syzkaller0>
[   92.847739][ T7164] tipc: Disabling bearer <eth:syzkaller0>
[   93.339031][ T7188] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.803583][ T7213] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[   93.908828][ T7219] netlink: 240 bytes leftover after parsing attributes in process `syz.0.575'.
[   94.323573][ T7245] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   94.649100][ T7267] netlink: 'syz.0.602': attribute type 2 has an invalid length.
[   94.652594][ T7267] netlink: 'syz.0.602': attribute type 1 has an invalid length.
[   94.973633][ T7283] netlink: 'syz.0.610': attribute type 1 has an invalid length.
[   94.977396][ T7283] netlink: 224 bytes leftover after parsing attributes in process `syz.0.610'.
[   96.077832][ T7301] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   96.089371][ T7301] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   96.451328][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.627'.
[   96.553937][ T7332] netlink: 'syz.1.630': attribute type 1 has an invalid length.
[   96.556425][ T7332] netlink: 224 bytes leftover after parsing attributes in process `syz.1.630'.
[   96.661744][ T7337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.632'.
[   96.957260][ T7357] tipc: Started in network mode
[   96.966999][ T7357] tipc: Node identity 12e4d2a5dda9, cluster identity 4711
[   96.974158][ T7357] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.006212][ T7357] syzkaller0: entered promiscuous mode
[   97.008756][ T7357] syzkaller0: entered allmulticast mode
[   97.045294][ T7357] tipc: Resetting bearer <eth:syzkaller0>
[   97.055719][ T7356] tipc: Resetting bearer <eth:syzkaller0>
[   97.079432][ T7356] tipc: Disabling bearer <eth:syzkaller0>
[   97.743473][ T7409] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[   97.790429][ T7411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.669'.
[   97.795531][ T7413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.670'.
[   97.804495][ T7413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.670'.
[   97.923434][ T7421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.674'.
[   98.352565][ T7461] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   98.357003][ T7461] netlink: 'syz.1.693': attribute type 11 has an invalid length.
[   98.361991][ T7461] netlink: 140 bytes leftover after parsing attributes in process `syz.1.693'.
[   98.366483][ T7461] netlink: 'syz.1.693': attribute type 11 has an invalid length.
[   98.369900][ T7461] netlink: 140 bytes leftover after parsing attributes in process `syz.1.693'.
[   98.538810][ T7465] tap0: tun_chr_ioctl cmd 1074025676
[   98.541017][ T7465] tap0: owner set to 0
[   98.622649][ T7469] netlink: 'syz.0.697': attribute type 1 has an invalid length.
[   98.625912][ T7469] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.697'.
[   98.992402][ T7501] nftables ruleset with unbound set
[   99.411075][ T7531] syzkaller1: entered promiscuous mode
[   99.412809][ T7531] syzkaller1: entered allmulticast mode
[   99.505319][ T7537] batadv1: entered allmulticast mode
[   99.508410][ T7537] 8021q: adding VLAN 0 to HW filter on device batadv1
[  100.083601][ T7557] bridge_slave_0: left allmulticast mode
[  100.086137][ T7557] bridge_slave_0: left promiscuous mode
[  100.093255][ T7557] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.100757][ T7557] bridge_slave_1: left allmulticast mode
[  100.103190][ T7557] bridge_slave_1: left promiscuous mode
[  100.105730][ T7557] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.122042][ T7557] bond0: (slave bond_slave_0): Releasing backup interface
[  100.132064][ T7557] bond0: (slave bond_slave_1): Releasing backup interface
[  100.144122][ T7557] team0: Port device team_slave_0 removed
[  100.152697][ T7557] team0: Port device team_slave_1 removed
[  100.156356][ T7557] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.161250][ T7557] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.165655][ T7557] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.171469][ T7557] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.174458][ T7557] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.177274][ T7557] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.193480][ T7557] team0: Port device geneve0 removed
[  101.144371][ T7581] syz.2.749 (7581) used obsolete PPPIOCDETACH ioctl
[  101.394022][ T7602] IPVS: Error connecting to the multicast addr
[  101.458073][ T7608] __nla_validate_parse: 3 callbacks suppressed
[  101.458082][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.760'.
[  101.546291][ T7606] netlink: 20 bytes leftover after parsing attributes in process `syz.0.763'.
[  101.660817][ T7619] openvswitch: netlink: IP tunnel TTL not specified.
[  102.162222][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.787'.
[  102.165164][ T7657] warning: `syz.2.786' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  102.169363][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.787'.
[  102.172107][ T7658] netlink: 'syz.0.787': attribute type 12 has an invalid length.
[  102.174804][ T7658] netlink: 'syz.0.787': attribute type 11 has an invalid length.
[  102.280709][ T7666] netlink: 'syz.2.790': attribute type 10 has an invalid length.
[  102.293541][ T7666] 8021q: adding VLAN 0 to HW filter on device team0
[  102.320275][ T7666] bond0: (slave team0): Enslaving as an active interface with an up link
[  102.326102][ T7672] netlink: 168 bytes leftover after parsing attributes in process `syz.0.793'.
[  102.386660][ T7674] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  102.534526][ T7691] netlink: 32 bytes leftover after parsing attributes in process `syz.0.803'.
[  102.978228][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.816'.
[  103.066509][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.818'.
[  103.071658][ T7733] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.264746][ T7743] netlink: 'syz.2.823': attribute type 1 has an invalid length.
[  103.267534][ T7743] netlink: 244 bytes leftover after parsing attributes in process `syz.2.823'.
[  103.616305][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.833'.
[  103.810494][ T7778] netlink: 'syz.1.838': attribute type 2 has an invalid length.
[  104.942619][ T7836] netlink: 'syz.0.866': attribute type 1 has an invalid length.
[  104.994314][ T7836] bond1: entered promiscuous mode
[  104.996620][ T7836] 8021q: adding VLAN 0 to HW filter on device bond1
[  105.002701][ T7843] netlink: 'syz.1.867': attribute type 20 has an invalid length.
[  105.029319][ T7836] 8021q: adding VLAN 0 to HW filter on device bond1
[  105.032538][ T7836] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[  105.036355][ T7836] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  105.043988][ T7836] bond1: (slave vcan1): making interface the new active one
[  105.046816][ T7836] vcan1: entered promiscuous mode
[  105.050457][ T7836] bond1: (slave vcan1): Enslaving as an active interface with an up link
[  105.181756][ T7853] erspan1: entered promiscuous mode
[  105.183921][ T7853] erspan1: entered allmulticast mode
[  105.920520][ T7890] ip6gretap1: entered allmulticast mode
[  106.363324][ T7908] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  106.367416][ T7908] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  107.476802][ T7966] netlink: 'syz.1.923': attribute type 4 has an invalid length.
[  107.606604][ T1270] IPVS: starting estimator thread 0...
[  107.612170][ T7969] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  107.701610][ T7974] IPVS: using max 62 ests per chain, 148800 per kthread
[  107.921333][ T7991] __nla_validate_parse: 7 callbacks suppressed
[  107.921345][ T7991] netlink: 24 bytes leftover after parsing attributes in process `syz.1.934'.
[  107.984343][ T7995] syzkaller0: entered promiscuous mode
[  107.986646][ T7995] syzkaller0: entered allmulticast mode
[  108.067848][ T7993] nbd2: detected capacity change from 0 to 63
[  108.075465][ T7997] block nbd2: NBD_DISCONNECT
[  108.080275][ T7997] block nbd2: Disconnected due to user request.
[  108.083760][ T7997] block nbd2: shutting down sockets
[  108.089916][    C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  108.093633][    C1] Buffer I/O error on dev nbd2, logical block 0, async page read
[  108.097902][    C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  108.101521][    C1] Buffer I/O error on dev nbd2, logical block 1, async page read
[  108.104537][    C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  108.108114][    C1] Buffer I/O error on dev nbd2, logical block 2, async page read
[  108.111067][    C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  108.114618][    C1] Buffer I/O error on dev nbd2, logical block 3, async page read
[  108.124112][ T5835] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  108.145732][ T5835] Buffer I/O error on dev nbd2, logical block 0, async page read
[  108.151258][ T5835] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  108.155716][ T5835] Buffer I/O error on dev nbd2, logical block 1, async page read
[  108.161864][ T5835] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  108.170826][ T5835] Buffer I/O error on dev nbd2, logical block 2, async page read
[  108.179019][ T5835] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  108.186371][ T5835] Buffer I/O error on dev nbd2, logical block 3, async page read
[  108.190125][ T5835] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  108.195536][ T5835] Buffer I/O error on dev nbd2, logical block 0, async page read
[  108.199025][ T5835] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  108.202734][ T5835] Buffer I/O error on dev nbd2, logical block 1, async page read
[  108.211316][ T5835] ldm_validate_partition_table(): Disk read failed.
[  108.215782][ T5835] Dev nbd2: unable to read RDB block 0
[  108.219411][ T5835]  nbd2: unable to read partition table
[  108.226388][ T5835] ldm_validate_partition_table(): Disk read failed.
[  108.231541][ T5835] Dev nbd2: unable to read RDB block 0
[  108.235275][ T5835]  nbd2: unable to read partition table
[  108.301519][ T8006] dvmrp1: entered allmulticast mode
[  108.305296][ T8006] dvmrp1: left allmulticast mode
[  108.510457][ T8016] SET target dimension over the limit!
[  108.520009][ T8019] vlan0: entered promiscuous mode
[  108.584217][ T8022] Bluetooth: MGMT ver 1.23
[  108.854939][ T8037] vlan0: entered promiscuous mode
[  108.868811][ T8037] bond0: entered promiscuous mode
[  108.992584][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.957'.
[  108.996205][ T8043] netlink: 312 bytes leftover after parsing attributes in process `syz.1.957'.
[  109.000533][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.957'.
[  109.040846][ T8045] netlink: 44 bytes leftover after parsing attributes in process `syz.0.958'.
[  109.046269][ T8045] netlink: 43 bytes leftover after parsing attributes in process `syz.0.958'.
[  109.050939][ T8045] netlink: 'syz.0.958': attribute type 6 has an invalid length.
[  109.053573][ T8045] netlink: 'syz.0.958': attribute type 5 has an invalid length.
[  109.056063][ T8045] netlink: 43 bytes leftover after parsing attributes in process `syz.0.958'.
[  109.208769][ T8057] xt_TCPMSS: Only works on TCP SYN packets
[  109.491697][ T8082] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  109.551468][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'.
[  109.613654][ T8093] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.616435][ T8093] syzkaller0: entered promiscuous mode
[  109.618762][ T8093] syzkaller0: entered allmulticast mode
[  109.635701][ T8093] tipc: Resetting bearer <eth:syzkaller0>
[  109.638978][ T8092] tipc: Resetting bearer <eth:syzkaller0>
[  109.649612][ T8092] tipc: Disabling bearer <eth:syzkaller0>
[  109.942939][ T8116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.991'.
[  109.954250][ T8116] netlink: 16 bytes leftover after parsing attributes in process `syz.2.991'.
[  109.965197][ T8116] gtp0: entered promiscuous mode
[  109.968882][ T8116] gtp0: entered allmulticast mode
[  110.042719][ T8120] bond0: (slave team0): Releasing backup interface
[  110.334486][   T33] audit: type=1800 audit(1752542878.563:2): pid=8133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.999" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1710 res=0 errno=0
[  110.346219][   T33] audit: type=1800 audit(1752542878.573:3): pid=8133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.999" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1710 res=0 errno=0
[  110.656070][ T8154] raw_sendmsg: syz.1.1010 forgot to set AF_INET. Fix it!
[  110.724343][ T8161] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.810740][ T8166] netlink: 'syz.2.1016': attribute type 4 has an invalid length.
[  110.820497][ T8169] IPv6: NLM_F_CREATE should be specified when creating new route
[  111.175566][ T8198] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  111.182163][ T8198] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  111.830269][ T8234] syz_tun: entered promiscuous mode
[  111.834106][ T8234] batadv_slave_0: entered promiscuous mode
[  111.838242][ T8234] hsr1: entered allmulticast mode
[  111.840783][ T8234] syz_tun: entered allmulticast mode
[  111.842971][ T8234] batadv_slave_0: entered allmulticast mode
[  112.058972][ T8248] tipc: Cannot configure node identity twice
[  113.529145][ T8309] netlink: 'syz.1.1079': attribute type 23 has an invalid length.
[  113.569596][ T8311] __nla_validate_parse: 7 callbacks suppressed
[  113.569607][ T8311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1080'.
[  113.905885][ T8337] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1092'.
[  113.912446][ T8335] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1091'.
[  115.020137][ T8409] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  115.246982][ T8430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1135'.
[  115.266248][ T8430] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1135'.
[  115.302101][ T8433] xt_CT: No such helper "syz0"
[  116.189927][ T8465] netlink: 'syz.0.1151': attribute type 3 has an invalid length.
[  116.203046][ T8465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1151'.
[  116.211213][ T8467] Set syz0 is full, maxelem 0 reached
[  116.211820][ T8465] netlink: 'syz.0.1151': attribute type 3 has an invalid length.
[  116.224741][ T8465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1151'.
[  116.360630][ T8475] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1156'.
[  117.894675][ T8526] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  117.902507][ T8526] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  117.948812][ T8523] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1175'.
[  118.229677][ T8545] netlink: 'syz.2.1186': attribute type 1 has an invalid length.
[  118.526327][ T8564] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1194'.
[  119.057306][ T8587] netlink: 'syz.0.1202': attribute type 72 has an invalid length.
[  119.061680][ T8587] netlink: 1016 bytes leftover after parsing attributes in process `syz.0.1202'.
[  119.833563][ T8643] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1231'.
[  119.837007][ T8643] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1231'.
[  119.840969][ T8643] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1231'.
[  119.851045][ T8644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1232'.
[  120.253483][ T8665] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  120.600791][ T8679] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1249'.
[  120.609437][ T8679] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1249'.
[  120.611598][ T8681] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1250'.
[  120.992952][ T8705] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1262'.
[  121.057647][   T33] audit: type=1804 audit(1752542889.283:4): pid=8710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1263" name="/newroot/428/cgroup.controllers" dev="tmpfs" ino=2175 res=1 errno=0
[  121.065022][   T33] audit: type=1800 audit(1752542889.283:5): pid=8710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1263" name="cgroup.controllers" dev="tmpfs" ino=2175 res=0 errno=0
[  121.272888][ T8721] openvswitch: netlink: IPv4 tun info is not correct
[  122.408880][ T8813] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  122.412193][ T8813] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  122.761374][ T8831] 8021q: adding VLAN 0 to HW filter on device bond1
[  122.786715][ T8831] veth5: entered promiscuous mode
[  122.790968][ T8831] bond1: (slave veth5): Enslaving as an active interface with an up link
[  122.801569][ T1347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.804022][ T1347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.834184][ T8836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1324'.
[  123.163167][ T8864] ipt_ECN: cannot use operation on non-tcp rule
[  123.542677][ T8901] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.409453][ T8922] netlink: 'syz.1.1364': attribute type 1 has an invalid length.
[  124.412490][ T8922] __nla_validate_parse: 5 callbacks suppressed
[  124.412497][ T8922] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1364'.
[  124.417529][ T8922] netlink: 'syz.1.1364': attribute type 1 has an invalid length.
[  124.427694][ T8922] netlink: 'syz.1.1364': attribute type 2 has an invalid length.
[  124.459264][ T8924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1365'.
[  125.051720][   T33] audit: type=1800 audit(1752542893.283:6): pid=8956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1378" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=2396 res=0 errno=0
[  125.064234][   T33] audit: type=1804 audit(1752542893.293:7): pid=8956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1378" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=2396 res=1 errno=0
[  125.103112][ T8958] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1379'.
[  126.410036][ T9033] netlink: 'syz.2.1412': attribute type 9 has an invalid length.
[  126.412766][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1412'.
[  126.421516][ T9033] hsr0: entered promiscuous mode
[  126.423707][ T9033] macvlan2: entered promiscuous mode
[  126.426025][ T9033] macvlan2: entered allmulticast mode
[  126.429224][ T9033] hsr0: entered allmulticast mode
[  126.437805][ T9033] hsr_slave_0: entered allmulticast mode
[  126.440096][ T9033] hsr_slave_1: entered allmulticast mode
[  127.233111][ T9097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1441'.
[  127.318445][ T9101] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  127.562274][ T9117] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1449'.
[  127.847301][ T9145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  127.849819][ T9145] IPv6: NLM_F_CREATE should be set when creating new route
[  128.101803][ T9171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1464'.
[  128.239440][ T9184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1468'.
[  128.493873][ T9221] sctp: [Deprecated]: syz.0.1474 (pid 9221) Use of struct sctp_assoc_value in delayed_ack socket option.
[  128.493873][ T9221] Use struct sctp_sack_info instead
[  128.612590][ T9238] xt_socket: unknown flags 0xd0
[  128.911983][ T9264] netlink: 'syz.0.1489': attribute type 12 has an invalid length.
[  128.914457][ T9264] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1489'.
[  128.941247][ T9264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1489'.
[  130.426492][ T9294] __nla_validate_parse: 1 callbacks suppressed
[  130.426510][ T9294] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1502'.
[  130.626607][ T9308] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1509'.
[  130.855414][ T9334] netlink: 'syz.2.1523': attribute type 13 has an invalid length.
[  130.952207][ T9340] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  131.002859][ T9342] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1527'.
[  131.153236][ T9334] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.156847][ T9334] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.161858][ T9334] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.165337][ T9334] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.199078][ T9334] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  131.202645][ T9334] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  131.206107][ T9334] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  131.210058][ T9334] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  131.223688][ T9334] hsr0: left allmulticast mode
[  131.225318][ T9334] hsr_slave_0: left allmulticast mode
[  131.227294][ T9334] hsr_slave_1: left allmulticast mode
[  131.358106][ T9352] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1532'.
[  131.396374][ T9356] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.428578][ T9358] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1535'.
[  131.439541][ T9355] syzkaller0: entered promiscuous mode
[  131.441875][ T9355] syzkaller0: entered allmulticast mode
[  131.753479][ T9367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1538'.
[  131.757300][ T9367] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1538'.
[  132.580408][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.582384][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.750333][ T9388] netlink: 'syz.0.1547': attribute type 1 has an invalid length.
[  132.753093][ T9388] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1547'.
[  132.755761][ T9388] NCSI netlink: No device for ifindex 813332851
[  133.181584][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1557'.
[  133.185145][ T9417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1557'.
[  133.199028][ T9417] netlink: 'syz.0.1557': attribute type 5 has an invalid length.
[  133.525305][ T9445] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  134.404588][ T9494] batman_adv: batadv0: Adding interface: dummy0
[  134.407027][ T9494] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.419261][ T9494] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  134.990258][ T9551] netlink: 'syz.2.1618': attribute type 1 has an invalid length.
[  134.993294][ T9551] netlink: 'syz.2.1618': attribute type 2 has an invalid length.
[  135.517774][ T9596] openvswitch: netlink: Flow key attr not present in new flow.
[  135.609170][ T9608] __nla_validate_parse: 8 callbacks suppressed
[  135.609182][ T9608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1644'.
[  136.931017][ T9674] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1671'.
[  137.149890][ T9685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1677'.
[  137.228696][ T9685] vlan2: entered allmulticast mode
[  137.231404][ T9685] bridge_slave_0: entered allmulticast mode
[  137.252992][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1681'.
[  137.322608][ T9698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1683'.
[  137.532003][ T9716] netlink: 'syz.0.1692': attribute type 4 has an invalid length.
[  137.605537][ T9723] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1695'.
[  137.635218][ T9726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1697'.
[  137.639324][ T9726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1697'.
[  137.830408][ T9744] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.836572][ T9745] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1702'.
[  137.845883][ T9745] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  137.849525][ T9745] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  137.852759][ T9745] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  137.856194][ T9745] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  138.022163][ T9758] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1711'.
[  138.046455][ T9760] netlink: 'syz.2.1712': attribute type 15 has an invalid length.
[  138.057194][ T9760] netlink: 'syz.2.1712': attribute type 7 has an invalid length.
[  138.435752][ T9791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  138.907298][ T9807] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.913184][ T9807] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.916842][ T9807] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.920807][ T9807] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.923667][ T9807] geneve2: entered promiscuous mode
[  139.223783][ T9825] syzkaller1: entered promiscuous mode
[  139.228887][ T9825] syzkaller1: entered allmulticast mode
[  139.767843][ T9878] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  140.228302][ T9900] delete_channel: no stack
[  140.985820][ T9920] xt_CT: No such helper "snmp"
[  141.289995][ T9934] openvswitch: netlink: Flow key attribute not present in set flow.
[  141.414581][ T9942] __nla_validate_parse: 9 callbacks suppressed
[  141.414597][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1798'.
[  141.649443][ T9960] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1807'.
[  141.856826][ T9973] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1812'.
[  141.920188][ T9977] x_tables: duplicate underflow at hook 1
[  142.011856][ T9983] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  142.341359][T10011] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1831'.
[  142.396757][T10017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1832'.
[  142.505462][T10025] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1838'.
[  142.628965][T10035] netlink: 'syz.2.1843': attribute type 1 has an invalid length.
[  142.639582][T10035] netlink: 'syz.2.1843': attribute type 2 has an invalid length.
[  142.649158][T10035] netlink: 'syz.2.1843': attribute type 1 has an invalid length.
[  142.660404][T10035] netlink: 'syz.2.1843': attribute type 2 has an invalid length.
[  143.937343][T10121] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1881'.
[  143.969298][T10121] netlink: 'syz.1.1881': attribute type 1 has an invalid length.
[  144.150213][T10131] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1886'.
[  144.432366][T10147] 8021q: adding VLAN 0 to HW filter on device batadv1
[  144.436963][T10147] team0: Port device batadv1 added
[  144.440371][T10151] netdevsim netdevsim1 : renamed from netdevsim0
[  144.827259][T10160] delete_channel: no stack
[  145.083191][T10180] syzkaller0: entered allmulticast mode
[  145.098940][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1910'.
[  145.984978][T10228] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.051724][T10234] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1932'.
[  146.167465][T10240] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.174317][T10240] tipc: Resetting bearer <eth:syzkaller0>
[  146.608542][T10260] __nla_validate_parse: 1 callbacks suppressed
[  146.608554][T10260] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1945'.
[  146.614840][T10260] gretap0: entered promiscuous mode
[  146.620791][T10260] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1945'.
[  146.624111][T10260] 0XD: renamed from gretap0
[  146.630828][T10260] 0XD: left promiscuous mode
[  146.632539][T10260] 0XD: entered allmulticast mode
[  146.635910][T10260] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check.
[  146.696047][T10266] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1947'.
[  146.751194][   T26] 
[  146.752004][   T26] ======================================================
[  146.752200][T10272] ieee80211 phy11: Selected rate control algorithm 'minstrel_ht'
[  146.754089][   T26] WARNING: possible circular locking dependency detected
[  146.754100][   T26] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  146.762482][   T26] ------------------------------------------------------
[  146.765463][   T26] kworker/u9:0/26 is trying to acquire lock:
[  146.767635][   T26] ffff88802ec9b358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0
[  146.771074][   T26] 
[  146.771074][   T26] but task is already holding lock:
[  146.773605][   T26] ffff88802de5b188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  146.776572][   T26] 
[  146.776572][   T26] which lock already depends on the new lock.
[  146.776572][   T26] 
[  146.780515][   T26] 
[  146.780515][   T26] the existing dependency chain (in reverse order) is:
[  146.784102][   T26] 
[  146.784102][   T26] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  146.787092][   T26]        lock_acquire+0x120/0x360
[  146.789006][   T26]        down_write+0x96/0x1f0
[  146.790804][   T26]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  146.793190][   T26]        nbd_start_device+0x16c/0xac0
[  146.795053][   T26]        nbd_genl_connect+0x1250/0x1930
[  146.796789][   T26]        genl_family_rcv_msg_doit+0x215/0x300
[  146.798874][   T26]        genl_rcv_msg+0x60e/0x790
[  146.800896][   T26]        netlink_rcv_skb+0x208/0x470
[  146.802998][   T26]        genl_rcv+0x28/0x40
[  146.804685][   T26]        netlink_unicast+0x75c/0x8e0
[  146.806618][   T26]        netlink_sendmsg+0x805/0xb30
[  146.808625][   T26]        __sock_sendmsg+0x21c/0x270
[  146.810567][   T26]        ____sys_sendmsg+0x505/0x830
[  146.812454][   T26]        ___sys_sendmsg+0x21f/0x2a0
[  146.814041][   T26]        __x64_sys_sendmsg+0x19b/0x260
[  146.815680][   T26]        do_syscall_64+0xfa/0x3b0
[  146.817266][   T26]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.819251][   T26] 
[  146.819251][   T26] -> #1 (&nbd->config_lock){+.+.}-{4:4}:
[  146.821648][   T26]        lock_acquire+0x120/0x360
[  146.823252][   T26]        __mutex_lock+0x182/0xe80
[  146.825018][   T26]        refcount_dec_and_mutex_lock+0x30/0xa0
[  146.827056][   T26]        nbd_config_put+0x2c/0x790
[  146.828739][   T26]        nbd_release+0xfe/0x140
[  146.830337][   T26]        bdev_release+0x536/0x650
[  146.832083][   T26]        blkdev_release+0x15/0x20
[  146.833684][   T26]        __fput+0x44c/0xa70
[  146.835205][   T26]        fput_close_sync+0x119/0x200
[  146.836952][   T26]        __x64_sys_close+0x7f/0x110
[  146.838632][   T26]        do_syscall_64+0xfa/0x3b0
[  146.840326][   T26]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.842801][   T26] 
[  146.842801][   T26] -> #0 (&disk->open_mutex){+.+.}-{4:4}:
[  146.845539][   T26]        validate_chain+0xb9b/0x2140
[  146.847211][   T26]        __lock_acquire+0xab9/0xd20
[  146.848893][   T26]        lock_acquire+0x120/0x360
[  146.850676][   T26]        __mutex_lock+0x182/0xe80
[  146.852320][   T26]        __del_gendisk+0x129/0x9e0
[  146.853916][   T26]        del_gendisk+0xe8/0x160
[  146.855501][   T26]        nbd_dev_remove_work+0x47/0xe0
[  146.857312][   T26]        process_scheduled_works+0xae1/0x17b0
[  146.859252][   T26]        worker_thread+0x8a0/0xda0
[  146.861078][   T26]        kthread+0x711/0x8a0
[  146.862855][   T26]        ret_from_fork+0x3fc/0x770
[  146.864837][   T26]        ret_from_fork_asm+0x1a/0x30
[  146.866505][   T26] 
[  146.866505][   T26] other info that might help us debug this:
[  146.866505][   T26] 
[  146.869770][   T26] Chain exists of:
[  146.869770][   T26]   &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock
[  146.869770][   T26] 
[  146.874446][   T26]  Possible unsafe locking scenario:
[  146.874446][   T26] 
[  146.876820][   T26]        CPU0                    CPU1
[  146.878564][   T26]        ----                    ----
[  146.880356][   T26]   rlock(&set->update_nr_hwq_lock);
[  146.882380][   T26]                                lock(&nbd->config_lock);
[  146.884988][   T26]                                lock(&set->update_nr_hwq_lock);
[  146.887323][   T26]   lock(&disk->open_mutex);
[  146.888739][   T26] 
[  146.888739][   T26]  *** DEADLOCK ***
[  146.888739][   T26] 
[  146.891485][   T26] 3 locks held by kworker/u9:0/26:
[  146.893111][   T26]  #0: ffff888020859148 ((wq_completion)nbd-del){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  146.896496][   T26]  #1: ffffc900001efbc0 ((work_completion)(&nbd->remove_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  146.900203][   T26]  #2: ffff88802de5b188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  146.904002][   T26] 
[  146.904002][   T26] stack backtrace:
[  146.906008][   T26] CPU: 0 UID: 0 PID: 26 Comm: kworker/u9:0 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  146.906019][   T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  146.906026][   T26] Workqueue: nbd-del nbd_dev_remove_work
[  146.906037][   T26] Call Trace:
[  146.906043][   T26]  <TASK>
[  146.906049][   T26]  dump_stack_lvl+0x189/0x250
[  146.906060][   T26]  ? __pfx_dump_stack_lvl+0x10/0x10
[  146.906069][   T26]  ? __pfx__printk+0x10/0x10
[  146.906080][   T26]  ? print_lock_name+0xde/0x100
[  146.906090][   T26]  print_circular_bug+0x2ee/0x310
[  146.906101][   T26]  check_noncircular+0x134/0x160
[  146.906113][   T26]  validate_chain+0xb9b/0x2140
[  146.906129][   T26]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  146.906147][   T26]  ? arch_stack_walk+0x11c/0x150
[  146.906163][   T26]  __lock_acquire+0xab9/0xd20
[  146.906176][   T26]  ? __del_gendisk+0x129/0x9e0
[  146.906188][   T26]  lock_acquire+0x120/0x360
[  146.906198][   T26]  ? __del_gendisk+0x129/0x9e0
[  146.906211][   T26]  ? check_path+0x21/0x40
[  146.906231][   T26]  __mutex_lock+0x182/0xe80
[  146.906243][   T26]  ? __del_gendisk+0x129/0x9e0
[  146.906258][   T26]  ? __del_gendisk+0x129/0x9e0
[  146.906272][   T26]  ? __pfx___mutex_lock+0x10/0x10
[  146.906284][   T26]  ? __pfx___might_resched+0x10/0x10
[  146.906296][   T26]  ? __lock_acquire+0xab9/0xd20
[  146.906303][   T26]  ? disk_del_events+0xb5/0x210
[  146.906312][   T26]  ? __del_gendisk+0xc1/0x9e0
[  146.906319][   T26]  __del_gendisk+0x129/0x9e0
[  146.906327][   T26]  ? del_gendisk+0xe0/0x160
[  146.906335][   T26]  ? __pfx___del_gendisk+0x10/0x10
[  146.906343][   T26]  ? down_read+0x1ad/0x2e0
[  146.906351][   T26]  del_gendisk+0xe8/0x160
[  146.906359][   T26]  nbd_dev_remove_work+0x47/0xe0
[  146.906367][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  146.906375][   T26]  process_scheduled_works+0xae1/0x17b0
[  146.906389][   T26]  ? __pfx_process_scheduled_works+0x10/0x10
[  146.906400][   T26]  worker_thread+0x8a0/0xda0
[  146.906413][   T26]  kthread+0x711/0x8a0
[  146.906424][   T26]  ? __pfx_worker_thread+0x10/0x10
[  146.906432][   T26]  ? __pfx_kthread+0x10/0x10
[  146.906442][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  146.906452][   T26]  ? lockdep_hardirqs_on+0x9c/0x150
[  146.906463][   T26]  ? __pfx_kthread+0x10/0x10
[  146.906473][   T26]  ret_from_fork+0x3fc/0x770
[  146.906481][   T26]  ? __pfx_ret_from_fork+0x10/0x10
[  146.906490][   T26]  ? __switch_to_asm+0x39/0x70
[  146.906499][   T26]  ? __switch_to_asm+0x33/0x70
[  146.906508][   T26]  ? __pfx_kthread+0x10/0x10
[  146.906517][   T26]  ret_from_fork_asm+0x1a/0x30
[  146.906530][   T26]  </TASK>
[  147.014273][T10271] netlink: 'syz.0.1949': attribute type 5 has an invalid length.
[  147.016768][T10271] netlink: 'syz.0.1949': attribute type 7 has an invalid length.
[  147.022570][T10271] : entered promiscuous mode
[  147.287782][ T5883] tipc: Node number set to 3477983909
[  147.312988][T10273] syz_tun (unregistering): left promiscuous mode
[  147.364274][ T5847] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  147.456930][ T5847] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  147.497545][ T5847] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  147.540803][ T5847] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  147.598263][ T5847] gretap0: left allmulticast mode
[  147.600291][ T5847] gretap0: left promiscuous mode
[  147.602340][ T5847] bridge0: port 3(gretap0) entered disabled state
[  147.606697][ T5847] bridge_slave_1: left allmulticast mode
[  147.612512][ T5847] bridge_slave_1: left promiscuous mode
[  147.614756][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.618738][ T5847] bridge_slave_0: left allmulticast mode
[  147.620935][ T5847] bridge_slave_0: left promiscuous mode
[  147.623111][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.015722][ T5847] team0: Port device bond0 removed
[  148.020627][ T5847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  148.025179][ T5847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  148.029342][ T5847] bond0 (unregistering): Released all slaves
[  148.035241][ T5847] bond1 (unregistering): (slave veth5): Releasing backup interface
[  148.039117][ T5847] bond1 (unregistering): Released all slaves
[  148.091489][ T5847] tipc: Left network mode
[  148.269466][ T5847] hsr_slave_0: left promiscuous mode
[  148.272214][ T5847] hsr_slave_1: left promiscuous mode
[  148.274166][ T5847] batman_adv: batadv0: Removing interface: batadv_slave_0
[  148.277157][ T5847] batman_adv: batadv0: Removing interface: batadv_slave_1
[  148.516012][ T5847] team0 (unregistering): Port device team_slave_1 removed
[  148.552410][ T5847] team0 (unregistering): Port device team_slave_0 removed
[  149.126521][ T5847] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
01:28:35  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000069 RBX=0000000000000069 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001eee10
R8 =ffff888108118237 R9 =1ffff11021023046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98c2 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fabde1b7bac CR3=0000000110504000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=0000000000000000 0000ffffffff0000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffff00000000 XMM09=302d747270782f30 2d6863746977732f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b4c210 RBX=ffff88813663b1c0 RCX=ffff888109d50000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900036af700 RSP=ffffc900036af598
R8 =ffffffff8fa1f3f7 R9 =1ffffffff1f43e7e R10=dffffc0000000000 R11=fffffbfff1f43e7f
R12=1ffff11009608385 R13=dffffc0000000000 R14=0000000000000000 R15=ffff88804b041c28
RIP=ffffffff81c036a7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f72aaae7d60 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f72a9f856a3 00007f72a9f856a3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0104808010000a80 0401000004080606
XMM06=0168900008000ae0 030010000ad00300 XMM07=10000ac003021000 0ab0030188100005
XMM08=9003010000060806 148003000a000800 XMM09=6769726f5f74696e 695f636e5f766461
XMM10=666666666666660a 342e79656b5f5f2e XMM11=6174616220622030 6534633130613966
XMM12=6666666666660a31 342e79656b5f5f2e XMM13=73766f2062203061 6663313061396666
XMM14=2e79656b5f5f2e74 656e5f74696e695f XMM15=6331306139666666 66666666660a3334
