last executing test programs:

2.191506816s ago: executing program 0 (id=1608):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000300)={0x7c9, 0x7, 0x19, 0x2, 0xfffffff0})
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d", 0xd8}, {&(0x7f0000000140)="89a713c2ca38d36f526284d93c6628738a19795b93d3094bc466d4aeef8fd28b41a1bae573446d2c98031cfb", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)='B', 0x1}], 0x1}}], 0x2, 0x2090)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="6800000010001fff00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000088520300400012800b000100697036746e6c00003000028014000300fe8000000000000000000000000000aa08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="050009"], 0x68}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4000080)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0x14, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@srh={0x3a, 0x0, 0x2}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x1000803c, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x828}, 0xc, &(0x7f0000000400)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELCHAIN={0x5c, 0x5, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_COUNTERS={0x4}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x108, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x7b, 0x6, "ad4e2b216695bd10b8faea07433da99dba841bea50f7ca2ee32c444c202c986d9c8a17367e8d07ee65124416462d3e261b48d9d9cd83216aa8cd162c5ad7001db504dbe635df3998a3ad63a38897ee1435b625045fc5d100c8f4d17ad6039c22b15437fde89fc9040c81046f26970ce2b17f0cdcd3a69b"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x2f, 0x6, "2cafb0dceaea0ce3021998515ea197f49fbcbc489458a235f3ff7e5015a23eb50afdba2dc0d02bd7849d46"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x9c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x5c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'macsec0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x9}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x2b0}, 0x1, 0x0, 0x0, 0x8800}, 0x811)

1.225872918s ago: executing program 0 (id=1616):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@newtaction={0x68, 0x30, 0x48b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'nat\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6f8, 0x2, 0x1, 0x6, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0)

1.014354888s ago: executing program 1 (id=1621):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r1, 0x7}, 0x14}}, 0x0)

964.30587ms ago: executing program 1 (id=1622):
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
connect$llc(r0, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd00"}, 0x10)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
close(r1)

909.61042ms ago: executing program 1 (id=1623):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000003c00010325bd7000fcffff040a000000040003"], 0x18}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0)

909.281494ms ago: executing program 1 (id=1624):
r0 = socket(0x2a, 0x2, 0x0)
bind$bt_sco(r0, 0x0, 0x0)

752.227659ms ago: executing program 1 (id=1628):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x106}, 0x1c)

751.928635ms ago: executing program 1 (id=1629):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
r2 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r3 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, r4, 0x25, 0x0, @val=@netkit={@void, @value=r1}}, 0x1c)
getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100003052bbd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000001000001c00128009000100626f6e64000000000c000280050001000500000008000a00", @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)

657.915909ms ago: executing program 0 (id=1630):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @private1, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)=ANY=[], 0xa)

657.062959ms ago: executing program 0 (id=1631):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x20, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0xc, 0xa, 0x0, 0x0, @u64=0x9}]}, 0x20}}, 0x0)

531.869601ms ago: executing program 2 (id=1635):
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0xb, &(0x7f0000005000)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

454.145668ms ago: executing program 2 (id=1636):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f0000000080)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20)

453.693161ms ago: executing program 0 (id=1637):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x403, 0x3, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xd}]}}}, @IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x50}}, 0x0)

383.551922ms ago: executing program 2 (id=1638):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x5}}}, 0x24}}, 0x4000000)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r2, @ANYBLOB="100001800400048008"], 0x28}}, 0x0)

240.316923ms ago: executing program 2 (id=1639):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e22, @private=0xa010100}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e80)={@in={{0x2, 0x0, @private=0xa010100}}, 0x0, 0x0, 0x22, 0x0, "70a59b8ef73b52114bf0854b6d184de8fb2add2d24b9149a8c978af6d76f933c1709770146847b0c6c4698efb8d42bed462e33eef5219090f01c40a3103cf5a30f2c0cdc339b7665ca4fe3c1d75e3fda"}, 0xd8)

145.269781ms ago: executing program 2 (id=1640):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xfffffffffffffeca, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x6, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0x1003, 0x0, 0x8ba, 0xa3, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x8000, 0x8, 0x255, 0x6, 0xa, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0x1, 0x5, 0xb97, 0x7, 0x0, 0xffffffff, 0x200, 0x23, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0x5, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x7fffffff, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x9e, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x1, 0x203, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x6, 0x5, 0x6cdf13a3, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x2, 0xfffffffa, 0x2, 0x18d1, 0x0, 0x3, 0x9486, 0x80, 0x2, 0x7ffffffc, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x5, 0x7, 0x1, 0x2, 0x8, 0x6, 0x0, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0x3, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x3d, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eb7, 0xfffd, 0xcbf, 0x4010000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0x2, 0x8dc3, 0x20000005, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x2, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x105, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x7, 0x400, 0xffffffff, 0x1, 0x800, 0x6000, 0xfe000000, 0x7]}]}}]}, 0x468}}, 0x0)

144.945522ms ago: executing program 0 (id=1641):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000210029bd700000000000030000001400018011"], 0x28}}, 0x4)

0s ago: executing program 2 (id=1642):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x24, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000)
sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x5, 0xe12, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "645b6048a2e4931133f6d9919fd48557d76811cd874f3c107bbfc1c8831026d40798a2be4cc414e02216198977dc3d41ed0880c64c39e5f4059bae641ed15112"}}, 0x80}}, 0x4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:42583' (ED25519) to the list of known hosts.
syzkaller login: [   56.249028][ T5556] cgroup: Unknown subsys name 'net'
[   56.363463][ T5556] cgroup: Unknown subsys name 'cpuset'
[   56.370133][ T5556] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.588706][ T5556] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   67.395778][ T5639] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.670326][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.672980][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.675134][ T5643] bridge_slave_0: entered allmulticast mode
[   67.677737][ T5643] bridge_slave_0: entered promiscuous mode
[   67.687221][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.689384][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.691588][ T5643] bridge_slave_1: entered allmulticast mode
[   67.694125][ T5643] bridge_slave_1: entered promiscuous mode
[   67.710451][ T5643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.714666][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.732071][ T5643] team0: Port device team_slave_0 added
[   67.736894][ T5643] team0: Port device team_slave_1 added
[   67.751358][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.753389][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.760950][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.765204][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.767248][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.774753][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.800101][ T5643] hsr_slave_0: entered promiscuous mode
[   67.802550][ T5643] hsr_slave_1: entered promiscuous mode
[   67.905733][ T5643] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   67.913105][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   67.915879][ T5643] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   67.921089][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   67.923747][ T5643] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   67.927865][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   67.930821][ T5643] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   67.935352][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   67.954528][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.956839][ T5643] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.959205][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.961253][ T5643] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.997818][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.007541][   T29] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.012307][   T29] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.022763][ T5643] 8021q: adding VLAN 0 to HW filter on device team0
[   68.028023][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.030151][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.035797][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.037857][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.229056][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.257030][ T5643] veth0_vlan: entered promiscuous mode
[   68.263558][ T5643] veth1_vlan: entered promiscuous mode
[   68.280648][ T5643] veth0_macvtap: entered promiscuous mode
[   68.285023][ T5643] veth1_macvtap: entered promiscuous mode
[   68.295295][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.302096][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.310182][ T5461] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.313239][ T5461] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.315958][ T5461] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.318488][ T5461] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.894066][ T5694] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   68.896542][ T5694] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   68.904340][ T5694] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   68.912827][ T5694] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   68.915491][ T5697] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   68.919458][ T5694] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   68.921761][ T5694] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   68.924501][ T5697] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   68.935915][ T5697] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   68.946204][ T5694] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   68.950023][ T5002] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   68.961248][ T5002] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   68.981499][   T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   68.996452][   T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   69.002849][   T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   69.184906][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.290451][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.348650][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.716019][ T5691] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.718871][ T5691] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.721147][ T5691] bridge_slave_0: entered allmulticast mode
[   69.724325][ T5691] bridge_slave_0: entered promiscuous mode
[   69.740512][ T5691] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.742986][ T5691] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.745526][ T5691] bridge_slave_1: entered allmulticast mode
[   69.748308][ T5691] bridge_slave_1: entered promiscuous mode
[   69.823393][ T5691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.830872][ T5691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.834261][ T5692] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.837286][ T5692] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.840694][ T5692] bridge_slave_0: entered allmulticast mode
[   69.844204][ T5692] bridge_slave_0: entered promiscuous mode
[   69.877240][ T5698] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.880235][ T5698] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.882621][ T5698] bridge_slave_0: entered allmulticast mode
[   69.885786][ T5698] bridge_slave_0: entered promiscuous mode
[   69.888550][ T5692] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.890746][ T5692] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.895389][ T5692] bridge_slave_1: entered allmulticast mode
[   69.897816][ T5692] bridge_slave_1: entered promiscuous mode
[   69.918811][ T5698] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.921826][ T5698] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.924123][ T5698] bridge_slave_1: entered allmulticast mode
[   69.927123][ T5698] bridge_slave_1: entered promiscuous mode
[   69.944837][ T5691] team0: Port device team_slave_0 added
[   69.972968][ T5692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.979213][ T5691] team0: Port device team_slave_1 added
[   69.989044][ T5698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.993692][ T5692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.016922][ T5698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.035884][ T5691] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.038214][ T5691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.045878][ T5691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.064378][ T5692] team0: Port device team_slave_0 added
[   70.068736][ T5692] team0: Port device team_slave_1 added
[   70.070845][ T5691] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.073006][ T5691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.081767][ T5691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.092804][ T5698] team0: Port device team_slave_0 added
[   70.115856][ T5698] team0: Port device team_slave_1 added
[   70.130615][ T5692] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.133073][ T5692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.140752][ T5692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.179853][ T5692] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.182694][ T5692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.193234][ T5692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.205808][ T5691] hsr_slave_0: entered promiscuous mode
[   70.209401][ T5691] hsr_slave_1: entered promiscuous mode
[   70.211865][ T5691] debugfs: 'hsr0' already exists in 'hsr'
[   70.213938][ T5691] Cannot create hsr debugfs directory
[   70.216193][ T5698] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.219071][ T5698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.226642][ T5698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.231252][ T5698] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.233228][ T5698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.240628][ T5698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.319359][ T5692] hsr_slave_0: entered promiscuous mode
[   70.321607][ T5692] hsr_slave_1: entered promiscuous mode
[   70.323462][ T5692] debugfs: 'hsr0' already exists in 'hsr'
[   70.325015][ T5692] Cannot create hsr debugfs directory
[   70.336760][ T5698] hsr_slave_0: entered promiscuous mode
[   70.340292][ T5698] hsr_slave_1: entered promiscuous mode
[   70.342306][ T5698] debugfs: 'hsr0' already exists in 'hsr'
[   70.343904][ T5698] Cannot create hsr debugfs directory
[   70.371992][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.650340][ T5691] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   70.667179][ T5691] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   70.672213][ T5691] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   70.681819][ T5691] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   70.684989][ T5691] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   70.692627][ T5691] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   70.706312][ T5691] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   70.711183][ T5691] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   70.748832][ T5692] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   70.755780][ T5692] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   70.760958][ T5692] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   70.765911][ T5692] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   70.768448][ T5692] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   70.777087][ T5692] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   70.783993][ T5692] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   70.787688][ T5692] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   70.873322][ T5691] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.880203][ T5692] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.897627][ T5691] 8021q: adding VLAN 0 to HW filter on device team0
[   70.909006][ T5692] 8021q: adding VLAN 0 to HW filter on device team0
[   70.913407][  T217] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.915617][  T217] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.926410][ T3382] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.928494][ T3382] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.937596][  T217] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.939829][  T217] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.945868][  T217] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.948533][  T217] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.969568][   T53] Bluetooth: hci1: command tx timeout
[   71.050128][   T53] Bluetooth: hci2: command tx timeout
[   71.050214][ T5697] Bluetooth: hci0: command tx timeout
[   71.324554][ T5692] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.340777][ T5691] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.383307][ T5691] veth0_vlan: entered promiscuous mode
[   71.402146][ T5691] veth1_vlan: entered promiscuous mode
[   71.414912][ T5692] veth0_vlan: entered promiscuous mode
[   71.433401][ T5692] veth1_vlan: entered promiscuous mode
[   71.455120][ T5691] veth0_macvtap: entered promiscuous mode
[   71.465523][ T5691] veth1_macvtap: entered promiscuous mode
[   71.482895][ T5692] veth0_macvtap: entered promiscuous mode
[   71.492105][ T5692] veth1_macvtap: entered promiscuous mode
[   71.497584][ T5691] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.512465][ T5691] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.522947][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.534224][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.537465][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.545223][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.551577][ T5692] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.570133][ T5692] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.602449][ T5461] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.609953][ T5461] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.623155][ T5461] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.635921][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.674437][  T217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.694251][  T217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.730276][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.733593][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.815695][ T3355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.832262][ T3355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.925030][ T3355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.930868][ T3355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.941797][   T12] bridge_slave_1: left allmulticast mode
[   71.948812][   T12] bridge_slave_1: left promiscuous mode
[   71.952578][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.969621][   T12] bridge_slave_0: left allmulticast mode
[   71.977092][   T12] bridge_slave_0: left promiscuous mode
[   71.981919][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.294065][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   72.299825][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   72.304270][   T12] bond0 (unregistering): Released all slaves
[   72.316549][ T5347] 8021q: adding VLAN 0 to HW filter on device eth1
[   72.426617][   T12] hsr_slave_0: left promiscuous mode
[   72.455817][   T12] hsr_slave_1: left promiscuous mode
[   72.459580][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.468234][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.474974][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.480038][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.504856][   T12] veth1_macvtap: left promiscuous mode
[   72.509362][   T12] veth0_macvtap: left promiscuous mode
[   72.514115][   T12] veth1_vlan: left promiscuous mode
[   72.518802][   T12] veth0_vlan: left promiscuous mode
[   72.866785][   T12] team0 (unregistering): Port device team_slave_1 removed
[   72.883564][   T12] team0 (unregistering): Port device team_slave_0 removed
[   73.048742][ T5697] Bluetooth: hci1: command tx timeout
[   73.056388][ T5347] 8021q: adding VLAN 0 to HW filter on device eth2
[   73.128708][ T5697] Bluetooth: hci2: command tx timeout
[   73.139012][ T5697] Bluetooth: hci0: command tx timeout
[   73.798259][ T5698] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   73.811454][ T5698] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   73.833568][ T5850] syz.0.47 uses obsolete (PF_INET,SOCK_PACKET)
[   73.833574][ T5698] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   73.856120][ T5698] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   73.862674][ T5698] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   73.876860][ T5698] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   73.899417][ T5854] raw_sendmsg: syz.2.48 forgot to set AF_INET. Fix it!
[   73.913876][ T5698] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   73.937722][ T5698] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   73.952283][ T5859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.49'.
[   73.955770][ T5859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.49'.
[   73.966488][ T5859] batadv1: entered promiscuous mode
[   73.968413][ T5859] batadv1: entered allmulticast mode
[   73.971625][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv1
[   74.092004][ T5869] netlink: 128 bytes leftover after parsing attributes in process `syz.0.52'.
[   74.096032][ T5869] netlink: 20 bytes leftover after parsing attributes in process `syz.0.52'.
[   74.140069][ T5873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.54'.
[   74.184025][ T5698] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.234228][ T5698] 8021q: adding VLAN 0 to HW filter on device team0
[   74.263962][ T3382] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.266681][ T3382] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.297790][ T3382] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.300518][ T3382] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.577530][ T5903] netlink: 41 bytes leftover after parsing attributes in process `syz.2.67'.
[   74.588784][ T5903] netlink: 140 bytes leftover after parsing attributes in process `syz.2.67'.
[   74.598437][ T5903] netlink: 41 bytes leftover after parsing attributes in process `syz.2.67'.
[   74.760445][ T5698] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.793014][ T5698] veth0_vlan: entered promiscuous mode
[   74.800246][ T5698] veth1_vlan: entered promiscuous mode
[   74.817960][ T5698] veth0_macvtap: entered promiscuous mode
[   74.824381][ T5698] veth1_macvtap: entered promiscuous mode
[   74.837363][ T5698] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.846749][ T5698] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.859288][ T5689] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.872698][ T5689] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.907026][ T5689] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.915319][ T5689] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.043338][ T3355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.052261][ T3355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.106583][ T3355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.115579][ T3355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.128756][ T5697] Bluetooth: hci1: command tx timeout
[   75.220282][ T5697] Bluetooth: hci0: command tx timeout
[   75.220328][   T53] Bluetooth: hci2: command tx timeout
[   75.476319][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'.
[   75.494245][ T5942] bond0: entered promiscuous mode
[   75.496010][ T5942] bond_slave_0: entered promiscuous mode
[   75.509330][ T5942] bond_slave_1: entered promiscuous mode
[   75.516681][ T5942] batadv_slave_0: entered promiscuous mode
[   75.519620][ T5942] batadv_slave_0: left promiscuous mode
[   75.525285][ T5942] bond0: left promiscuous mode
[   75.527045][ T5942] bond_slave_0: left promiscuous mode
[   75.529696][ T5942] bond_slave_1: left promiscuous mode
[   75.684096][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.85'.
[   76.110093][ T5746] IPVS: starting estimator thread 0...
[   76.122883][ T5972] IPVS: sh: FWM 3 0x00000003 - no destination available
[   76.129046][ T5971] Zero length message leads to an empty skb
[   76.130604][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[   76.200408][ T5973] IPVS: using max 70 ests per chain, 168000 per kthread
[   76.901499][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[   76.906434][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[   76.975264][ T5989] hsr0: entered promiscuous mode
[   77.218760][   T53] Bluetooth: hci1: command tx timeout
[   77.288924][   T53] Bluetooth: hci0: command tx timeout
[   77.289548][ T5697] Bluetooth: hci2: command tx timeout
[   78.183973][ T6046] netem: change failed
[   78.542503][ T6057] syzkaller0: entered promiscuous mode
[   78.547523][ T6057] syzkaller0: entered allmulticast mode
[   78.983517][ T6079] netdevsim0: mtu less than device minimum
[   79.049962][ T6082] syzkaller0: entered promiscuous mode
[   79.061951][ T6082] syzkaller0: entered allmulticast mode
[   79.079498][ T6082] tipc: Started in network mode
[   79.081738][ T6082] tipc: Node identity , cluster identity 4711
[   79.088878][ T6082] tipc: Failed to obtain node identity
[   79.090741][ T6082] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   79.258671][ T6092] Driver unsupported XDP return value 0 on prog  (id 9) dev N/A, expect packet loss!
[   79.276550][ T6096] __nla_validate_parse: 4 callbacks suppressed
[   79.276565][ T6096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.149'.
[   79.498374][ T6109] netlink: 20 bytes leftover after parsing attributes in process `syz.1.155'.
[   79.744206][ T6122] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[   79.894675][ T6132] netlink: 'syz.2.167': attribute type 1 has an invalid length.
[   79.940887][ T6132] 8021q: adding VLAN 0 to HW filter on device bond1
[   79.970786][ T6135] netlink: 28 bytes leftover after parsing attributes in process `syz.0.168'.
[   79.971886][ T6137] netlink: 'syz.1.169': attribute type 1 has an invalid length.
[   79.981026][ T6132] bond1: (slave veth3): Enslaving as an active interface with a down link
[   80.003641][ T6132] 8021q: adding VLAN 0 to HW filter on device batadv2
[   80.007266][ T6132] bond1: (slave batadv2): making interface the new active one
[   80.011805][ T6132] batadv2: entered promiscuous mode
[   80.013643][ T6132] bond1: (slave batadv2): Enslaving as an active interface with an up link
[   80.047684][ T6137] vlan2: entered allmulticast mode
[   80.058790][ T6137] macvtap0: entered allmulticast mode
[   80.060848][ T6137] veth0_macvtap: entered allmulticast mode
[   80.683533][ T6173] xt_l2tp: v2 sid > 0xffff: 8388608
[   80.720015][ T6177] netlink: 16158 bytes leftover after parsing attributes in process `syz.1.188'.
[   80.812228][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.191'.
[   81.017170][ T6193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.197'.
[   81.107562][ T6197] netlink: 104 bytes leftover after parsing attributes in process `syz.1.199'.
[   81.125526][   T33] audit: type=1800 audit(1778594310.486:2): pid=6201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.201" name="blkio.bfq.time_recursive" dev="tmpfs" ino=265 res=0 errno=0
[   81.174595][ T6203] syzkaller0: entered promiscuous mode
[   81.176276][ T6203] syzkaller0: entered allmulticast mode
[   81.188017][ T6203] netlink: 28 bytes leftover after parsing attributes in process `syz.0.204'.
[   81.193424][ T6203] netlink: 28 bytes leftover after parsing attributes in process `syz.0.204'.
[   81.203591][ T6203] 0: reclassify loop, rule prio 0, protocol 800
[   81.262208][ T6207] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.264898][ T6207] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.275769][ T6210] netlink: 'syz.1.202': attribute type 13 has an invalid length.
[   81.281091][ T6210] netlink: 'syz.1.202': attribute type 17 has an invalid length.
[   81.338210][ T6207] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.346306][ T6207] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.400190][ T6207] veth0_macvtap: left allmulticast mode
[   81.568521][ T6210] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.573479][ T6210] 8021q: adding VLAN 0 to HW filter on device team0
[   81.586945][ T6210] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.624139][ T6210] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.626559][ T6210] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.642208][ T6210] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.645157][ T6210] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.686862][ T6210] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.696078][ T6210] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.717709][ T6210] veth1_vlan: left promiscuous mode
[   81.721817][ T6210] veth0_vlan: left promiscuous mode
[   81.725392][ T6210] veth0_vlan: entered promiscuous mode
[   81.733374][ T6210] veth1_vlan: entered promiscuous mode
[   81.747009][ T6210] veth1_macvtap: left promiscuous mode
[   81.749947][ T6210] veth0_macvtap: left promiscuous mode
[   81.754097][ T6210] veth0_macvtap: entered promiscuous mode
[   81.756057][ T6210] veth0_macvtap: entered allmulticast mode
[   81.768105][ T6210] veth1_macvtap: entered promiscuous mode
[   81.774676][ T6210] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   81.785930][ T6210] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   81.796309][ T6210] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   81.811715][ T6210] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   81.831181][ T6210] vlan2: left allmulticast mode
[   81.834421][ T6210] macvtap0: left allmulticast mode
[   81.838094][ T6210] veth0_macvtap: left allmulticast mode
[   83.371579][ T6306] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.373783][ T6306] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.396421][ T6309] netlink: 'syz.1.246': attribute type 13 has an invalid length.
[   83.403709][ T6309] netlink: 'syz.1.246': attribute type 17 has an invalid length.
[   83.494635][ T6306] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.502244][ T6306] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.598302][ T6309] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.605045][ T6309] 8021q: adding VLAN 0 to HW filter on device team0
[   83.614041][ T6309] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.634898][ T6309] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.637571][ T6309] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.644827][ T6309] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.647559][ T6309] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.663312][ T6309] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.671155][ T6309] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.685209][ T6309] veth1_vlan: left promiscuous mode
[   83.687971][ T6309] veth0_vlan: left promiscuous mode
[   83.694301][ T6309] veth0_vlan: entered promiscuous mode
[   83.701594][ T6309] veth1_vlan: entered promiscuous mode
[   83.709690][ T6309] veth1_macvtap: left promiscuous mode
[   83.712672][ T6309] veth0_macvtap: left promiscuous mode
[   83.716134][ T6309] veth0_macvtap: entered promiscuous mode
[   83.721633][ T6309] veth1_macvtap: entered promiscuous mode
[   83.729666][ T6309] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   83.733572][ T6309] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   83.737021][ T6309] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   83.741845][ T6309] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   83.773158][ T6313] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.777744][ T6319] warning: `syz.2.250' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   84.101978][ T6337] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   84.281327][ T6346] netlink: 180 bytes leftover after parsing attributes in process `syz.1.263'.
[   84.502500][ T6365] bridge_slave_0: left allmulticast mode
[   84.504411][ T6365] bridge_slave_0: left promiscuous mode
[   84.507774][ T6365] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.515004][ T6365] bridge_slave_1: left allmulticast mode
[   84.520747][ T6365] bridge_slave_1: left promiscuous mode
[   84.522497][ T6365] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.542893][ T6365] bond0: (slave bond_slave_0): Releasing backup interface
[   84.581777][ T6365] bond0: (slave bond_slave_1): Releasing backup interface
[   84.604335][ T6365] team0: Port device team_slave_0 removed
[   84.620202][ T6365] team0: Port device team_slave_1 removed
[   84.625833][ T6365] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.633781][ T6365] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.644010][ T6365] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.651399][ T6365] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.664093][ T6365] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   84.718498][ T6366] ip6gre1: entered allmulticast mode
[   84.738697][ T6366] team0: Port device ip6gre1 added
[   84.746678][ T6374] netlink: zone id is out of range
[   84.752324][ T6374] netlink: get zone limit has 4 unknown bytes
[   84.920552][ T6382] xt_CT: You must specify a L4 protocol and not use inversions on it
[   85.482731][ T6421] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   85.494559][ T6421] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   85.501885][ T6421] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   85.532177][ T6423] netlink: 'syz.2.298': attribute type 1 has an invalid length.
[   85.538122][ T6423] netlink: 'syz.2.298': attribute type 4 has an invalid length.
[   85.546723][ T6423] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.298'.
[   85.551593][ T6423] netlink: 'syz.2.298': attribute type 1 has an invalid length.
[   85.554492][ T6423] netlink: 'syz.2.298': attribute type 4 has an invalid length.
[   85.556729][ T6423] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.298'.
[   85.625179][ T6431] syzkaller0: entered promiscuous mode
[   85.628951][ T6431] syzkaller0: entered allmulticast mode
[   85.636811][ T6433] netlink: 16 bytes leftover after parsing attributes in process `syz.0.303'.
[   86.090556][ T6451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.311'.
[   86.097590][ T6451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.311'.
[   86.580702][ T5461] tipc: Subscription rejected, illegal request
[   86.776251][ T6478] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.324'.
[   86.780001][ T6478] netlink: Conntrack attr has 3 unknown bytes
[   86.855257][ T6482] syzkaller0: entered promiscuous mode
[   86.857655][ T6482] syzkaller0: entered allmulticast mode
[   87.053850][ T6490] netlink: 164 bytes leftover after parsing attributes in process `syz.2.329'.
[   87.135535][  T813] cfg80211: failed to load regulatory.db
[   87.642485][ T6506] tc_dump_action: action bad kind
[   87.696619][ T6508] netlink: 128 bytes leftover after parsing attributes in process `syz.0.337'.
[   87.700625][ T6508] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   87.952941][ T6520] syzkaller0: entered promiscuous mode
[   87.954613][ T6520] syzkaller0: entered allmulticast mode
[   88.441508][ T6546] gre2: entered allmulticast mode
[   89.045093][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.372'.
[   89.276819][   T33] audit: type=1800 audit(1778594318.636:3): pid=6598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.378" name=CB dev="tmpfs" ino=803 res=0 errno=0
[   89.483233][ T6613] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.733399][ T6631] netlink: 16 bytes leftover after parsing attributes in process `syz.0.393'.
[   89.747663][ T6629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.392'.
[   89.751696][ T6629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.392'.
[   91.908841][ T5461] batadv2: left promiscuous mode
[   92.231046][ T6672] netlink: 'syz.1.410': attribute type 1 has an invalid length.
[   92.272663][ T6672] netlink: 28 bytes leftover after parsing attributes in process `syz.1.410'.
[   92.280822][ T6672] 8021q: adding VLAN 0 to HW filter on device bond1
[   92.307566][ T6672] macvlan2: entered promiscuous mode
[   92.310552][ T6672] macvlan2: entered allmulticast mode
[   92.313634][ T6672] bond1: entered promiscuous mode
[   92.321337][ T6672] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   92.329927][ T6672] bond1: left promiscuous mode
[   92.577652][ T6692] netlink: 28 bytes leftover after parsing attributes in process `syz.2.418'.
[   92.582384][ T6692] netlink: 28 bytes leftover after parsing attributes in process `syz.2.418'.
[   92.768105][ T6633] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   93.522161][ T6718] syzkaller1: entered promiscuous mode
[   93.524164][ T6718] syzkaller1: entered allmulticast mode
[   94.052376][ T6741] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.063148][ T6739] syz_tun: entered allmulticast mode
[   94.087873][ T6739] dvmrp8: entered allmulticast mode
[   94.102755][ T6737] syz_tun: left allmulticast mode
[   94.205856][ T6752] netlink: 'syz.0.445': attribute type 13 has an invalid length.
[   94.459520][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.466938][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.474526][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.479016][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.510495][ T6757] x_tables: duplicate underflow at hook 3
[   94.921017][ T6771] netlink: 32 bytes leftover after parsing attributes in process `syz.2.454'.
[   95.788126][ T6793] netlink: 64 bytes leftover after parsing attributes in process `syz.2.463'.
[   95.797344][ T6793] netlink: 64 bytes leftover after parsing attributes in process `syz.2.463'.
[   97.032960][ T6868] netlink: 'syz.1.497': attribute type 4 has an invalid length.
[   97.044330][ T6868] netlink: 'syz.1.497': attribute type 8 has an invalid length.
[   97.060341][ T6868] netlink: 'syz.1.497': attribute type 1 has an invalid length.
[   97.064152][ T6868] netlink: 164 bytes leftover after parsing attributes in process `syz.1.497'.
[   97.067431][ T6868] NCSI netlink: No device for ifindex 0
[   97.242428][ T6877] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.501'.
[   97.418104][ T6881] netlink: 'syz.1.503': attribute type 1 has an invalid length.
[   97.423171][ T6881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.503'.
[   97.485046][ T6887] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   97.496154][ T6890] netlink: 'syz.1.507': attribute type 13 has an invalid length.
[   97.683308][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.510'.
[   97.708470][ T6896] netlink: 'syz.1.510': attribute type 15 has an invalid length.
[   97.722771][ T6896] netlink: 'syz.1.510': attribute type 25 has an invalid length.
[   97.735979][ T6896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.510'.
[   98.186116][ T6927] dvmrp6: entered allmulticast mode
[   98.234858][ T6927] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.238031][ T6927] 8021q: adding VLAN 0 to HW filter on device team0
[   98.253530][ T6931] xt_connbytes: Forcing CT accounting to be enabled
[   98.254451][ T6927] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.316600][ T6927] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   98.320120][ T6927] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   98.335652][ T6927] veth1_vlan: left promiscuous mode
[   98.338253][ T6927] veth0_vlan: left promiscuous mode
[   98.340823][ T6927] veth0_vlan: entered promiscuous mode
[   98.345354][ T6927] veth1_vlan: entered promiscuous mode
[   98.351687][ T6927] veth1_macvtap: left promiscuous mode
[   98.354697][ T6927] veth0_macvtap: left promiscuous mode
[   98.357248][ T6927] veth0_macvtap: entered promiscuous mode
[   98.360124][ T6927] veth1_macvtap: entered promiscuous mode
[   98.365620][ T6927] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   98.368426][ T6927] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   98.372035][ T6927] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   98.374969][ T6927] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   98.377639][ T6927] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[   98.380585][ T6927] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[   98.383632][ T6927] veth0_to_team: entered promiscuous mode
[   98.385887][ T6927] ip6gre1: left allmulticast mode
[   98.388379][ T6927] A link change request failed with some changes committed already. Interface ip6gre1 may have been left with an inconsistent configuration, please check.
[   98.467880][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.479012][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.483552][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.496093][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.834831][ T6967] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.540'.
[   98.908173][ T6970] netlink: 268 bytes leftover after parsing attributes in process `syz.1.542'.
[   98.912614][ T6971] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   98.916043][ T6971] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   98.977514][ T6975] Bluetooth: MGMT ver 1.23
[   99.113318][ T6983] syzkaller0: entered promiscuous mode
[   99.115475][ T6983] syzkaller0: entered allmulticast mode
[  100.644739][ T7033] __nla_validate_parse: 2 callbacks suppressed
[  100.644758][ T7033] netlink: 36 bytes leftover after parsing attributes in process `syz.2.570'.
[  100.857085][ T7051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.578'.
[  100.889764][ T5673] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  101.008782][ T7059] netlink: zone id is out of range
[  101.119227][ T5673] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  101.615780][ T7043] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  102.172157][ T7093] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  102.175988][ T7093] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  102.437494][ T7113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.605'.
[  102.590552][ T7118] syzkaller0: entered promiscuous mode
[  102.592298][ T7118] syzkaller0: entered allmulticast mode
[  102.756207][ T7126] netlink: 132 bytes leftover after parsing attributes in process `syz.1.608'.
[  103.090543][ T7133] "syz.2.611" (7133) uses obsolete ecb(arc4) skcipher
[  103.226959][ T7150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.617'.
[  103.233229][ T7150] nbd: illegal input index -1113835520
[  103.417306][ T7174] netlink: 5 bytes leftover after parsing attributes in process `syz.0.626'.
[  103.430843][ T7174] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  103.499026][ T7182] netlink: 'syz.2.630': attribute type 1 has an invalid length.
[  103.707133][ T7192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.634'.
[  103.818080][ T7192] veth7: entered allmulticast mode
[  103.831301][ T7192] bond2: (slave veth7): Enslaving as an active interface with an up link
[  103.849308][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  103.897801][ T7192] bond2 (unregistering): (slave veth7): Releasing backup interface
[  103.920682][ T7192] bond2 (unregistering): Released all slaves
[  105.729612][ T7258] netlink: 132 bytes leftover after parsing attributes in process `syz.0.661'.
[  105.853473][ T7266] netlink: 'syz.1.665': attribute type 1 has an invalid length.
[  105.962595][ T7272] tipc: MTU too low for tipc bearer
[  106.174070][ T7280] 8021q: adding VLAN 0 to HW filter on device bond1
[  106.204277][ T7286] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  106.269646][ T5689] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  106.400440][   T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  106.725798][ T7325] netlink: 364 bytes leftover after parsing attributes in process `syz.0.691'.
[  106.757248][ T7327] netlink: 'syz.1.692': attribute type 1 has an invalid length.
[  107.673401][ T7350] netlink: 20 bytes leftover after parsing attributes in process `syz.0.700'.
[  107.674655][ T7352] netlink: 36 bytes leftover after parsing attributes in process `syz.2.701'.
[  107.678800][ T7350] netlink: 20 bytes leftover after parsing attributes in process `syz.0.700'.
[  107.902587][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.707'.
[  108.067841][ T7377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.711'.
[  108.481103][ T7403] syzkaller0: entered promiscuous mode
[  108.486643][ T7403] syzkaller0: entered allmulticast mode
[  108.495277][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.724'.
[  108.506933][ T7405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.724'.
[  108.516874][ T7405] netlink: 'syz.1.724': attribute type 11 has an invalid length.
[  109.183314][ T7432] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[  109.200214][ T7437] syzkaller0: entered promiscuous mode
[  109.204912][ T7437] syzkaller0: entered allmulticast mode
[  109.409418][ T7443] syzkaller0: entered promiscuous mode
[  109.413747][ T7443] syzkaller0: entered allmulticast mode
[  109.490686][ T7447] syzkaller0: entered promiscuous mode
[  109.492548][ T7447] syzkaller0: entered allmulticast mode
[  109.746028][ T7457] syzkaller0: entered promiscuous mode
[  109.747764][ T7457] syzkaller0: entered allmulticast mode
[  110.143295][ T7478] netlink: 'syz.0.755': attribute type 8 has an invalid length.
[  110.145680][ T7478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.755'.
[  111.096852][ T7470] pimreg: entered allmulticast mode
[  111.102727][ T7478] veth1_to_team: entered promiscuous mode
[  111.105720][ T7478] gretap0: entered promiscuous mode
[  111.111170][ T7478] veth1_to_team: left promiscuous mode
[  111.113320][ T7478] gretap0: left promiscuous mode
[  111.438029][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.764'.
[  111.444403][ T7499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.764'.
[  111.457535][ T7499] geneve2: entered promiscuous mode
[  111.459762][ T7499] geneve2: entered allmulticast mode
[  111.652387][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.770'.
[  111.684424][ T5781] IPVS: starting estimator thread 0...
[  111.788866][ T7519] IPVS: using max 49 ests per chain, 117600 per kthread
[  112.730945][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  114.567798][ T7509] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  114.573430][ T7542] netlink: 'syz.0.781': attribute type 2 has an invalid length.
[  114.583796][ T7542] netlink: 'syz.0.781': attribute type 2 has an invalid length.
[  114.983621][ T7570] netlink: 28 bytes leftover after parsing attributes in process `syz.2.795'.
[  114.987756][ T7570] netlink: 28 bytes leftover after parsing attributes in process `syz.2.795'.
[  114.997258][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.795'.
[  115.043829][ T7578] netlink: 132 bytes leftover after parsing attributes in process `syz.0.798'.
[  115.192777][ T7589] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.803'.
[  115.233617][ T7591] pimreg9: entered allmulticast mode
[  115.369551][ T7602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.808'.
[  115.416219][ T7607] IPv6: NLM_F_CREATE should be specified when creating new route
[  115.468832][ T7612] netlink: 28 bytes leftover after parsing attributes in process `syz.2.813'.
[  115.572471][ T7620] netlink: 'syz.1.817': attribute type 3 has an invalid length.
[  115.664887][ T7627] IPVS: sh: FWM 3 0x00000003 - no destination available
[  115.668298][    C1] IPVS: sh: FWM 3 0x00000003 - no destination available
[  115.718053][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.722955][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.726126][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.737910][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.133698][ T7646] netlink: 'syz.1.828': attribute type 13 has an invalid length.
[  116.602068][ T7666] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  116.612090][ T7670] netlink: 'syz.1.836': attribute type 8 has an invalid length.
[  116.620339][ T7666] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  117.137641][ T7704] netlink: 'syz.1.851': attribute type 1 has an invalid length.
[  117.142376][ T7704] __nla_validate_parse: 2 callbacks suppressed
[  117.142385][ T7704] netlink: 228 bytes leftover after parsing attributes in process `syz.1.851'.
[  117.173820][ T7706] netlink: 'syz.1.852': attribute type 3 has an invalid length.
[  117.176703][ T7706] netlink: 132 bytes leftover after parsing attributes in process `syz.1.852'.
[  117.528751][   T53] Bluetooth: hci2: command 0x0405 tx timeout
[  117.662569][ T7725] netlink: 'syz.0.860': attribute type 1 has an invalid length.
[  117.668377][ T7725] netlink: 'syz.0.860': attribute type 2 has an invalid length.
[  117.677449][ T7725] netlink: 'syz.0.860': attribute type 1 has an invalid length.
[  118.147885][ T7745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.869'.
[  118.158778][ T7745] netlink: 84 bytes leftover after parsing attributes in process `syz.0.869'.
[  118.225010][ T7750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.873'.
[  118.229060][ T7750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.873'.
[  118.804956][ T7785] team0: Failed to send options change via netlink (err -105)
[  118.816401][ T7785] team0: Port device dummy0 added
[  118.825290][ T7785] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  118.850589][ T7785] team0: Failed to send options change via netlink (err -105)
[  118.853464][ T7785] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  118.856781][ T7785] team0: Port device dummy0 removed
[  118.862452][ T7785] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  119.609759][ T7835] syzkaller0: entered promiscuous mode
[  119.611638][ T7835] syzkaller0: entered allmulticast mode
[  119.786512][ T7849] netlink: 24 bytes leftover after parsing attributes in process `syz.1.901'.
[  120.367866][   T53] Bluetooth: hci2: link tx timeout
[  120.372280][   T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  120.381677][   T53] Bluetooth: hci2: link tx timeout
[  120.384391][   T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  120.452988][   T53] Bluetooth: hci2: link tx timeout
[  120.454906][   T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  120.479221][   T53] Bluetooth: hci2: link tx timeout
[  120.481194][   T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  120.531525][ T7894] validate_nla: 3 callbacks suppressed
[  120.531535][ T7894] netlink: 'syz.0.917': attribute type 1 has an invalid length.
[  120.536093][ T7894] netlink: 'syz.0.917': attribute type 2 has an invalid length.
[  120.539569][ T7894] netlink: 'syz.0.917': attribute type 1 has an invalid length.
[  120.541784][ T7894] netlink: 16 bytes leftover after parsing attributes in process `syz.0.917'.
[  120.871240][   T53] Bluetooth: hci2: link tx timeout
[  120.872691][   T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  120.880591][   T53] Bluetooth: hci2: link tx timeout
[  120.882710][   T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  121.107107][ T7919] netlink: 'syz.0.926': attribute type 11 has an invalid length.
[  121.437376][ T7935] netlink: 28 bytes leftover after parsing attributes in process `syz.1.933'.
[  121.591067][ T7946] netdevsim netdevsim2: Direct firmware load for . failed with error -2
[  121.594457][ T7946] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  121.791271][   T53] Bluetooth: hci2: link tx timeout
[  121.796236][   T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  121.863974][ T7961] tunl0: Caught tx_queue_len zero misconfig
[  121.931178][   T53] Bluetooth: hci2: link tx timeout
[  121.933052][   T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  121.940323][   T53] Bluetooth: hci2: link tx timeout
[  121.942313][   T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  121.963442][ T7965] netlink: 28 bytes leftover after parsing attributes in process `syz.1.944'.
[  122.035134][   T53] Bluetooth: hci2: link tx timeout
[  122.037813][   T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  122.184120][ T7975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.949'.
[  122.251560][ T7981] netlink: 28 bytes leftover after parsing attributes in process `syz.2.952'.
[  122.258165][ T7981] netlink: 28 bytes leftover after parsing attributes in process `syz.2.952'.
[  122.285131][ T7985] openvswitch: netlink: Tunnel attr 333 out of range max 16
[  122.325934][ T7991] netlink: 'syz.1.957': attribute type 1 has an invalid length.
[  122.408919][   T53] Bluetooth: hci2: command 0x0405 tx timeout
[  122.415226][ T7998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.960'.
[  122.421220][ T7998] veth1_macvtap: left promiscuous mode
[  122.647950][ T8013] Bluetooth: MGMT ver 1.23
[  122.709019][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.969'.
[  122.906320][ T8030] xt_CT: No such helper "snmp_trap"
[  123.052469][ T8040] netlink: 16 bytes leftover after parsing attributes in process `syz.0.979'.
[  123.151113][ T8046] netlink: 'syz.2.980': attribute type 32 has an invalid length.
[  123.303428][ T8054] netlink: 'syz.1.982': attribute type 3 has an invalid length.
[  123.306007][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.982'.
[  123.544386][ T8046] netlink: 76 bytes leftover after parsing attributes in process `syz.2.980'.
[  123.629064][ T8067] lo: entered allmulticast mode
[  123.634834][ T8067] lo: left allmulticast mode
[  123.878809][ T8078] netlink: 'syz.2.990': attribute type 1 has an invalid length.
[  123.990096][ T8084] netlink: 'syz.0.993': attribute type 3 has an invalid length.
[  124.520561][ T8092] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.598255][ T8092] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.608478][ T8092] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.615793][ T8115] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1003'.
[  124.964066][ T8092] geneve2: left promiscuous mode
[  124.966041][ T8092] geneve2: left allmulticast mode
[  124.978263][ T5461] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.981422][ T5461] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.984645][ T5461] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.987590][ T5461] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.678125][ T8139] bond0: (slave dummy0): Releasing backup interface
[  125.712633][ T8139] bridge_slave_0: left allmulticast mode
[  125.714530][ T8139] bridge_slave_0: left promiscuous mode
[  125.716898][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.723983][ T8139] bridge_slave_1: left allmulticast mode
[  125.725658][ T8139] bridge_slave_1: left promiscuous mode
[  125.727762][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.734953][ T8139] bond0: (slave bond_slave_0): Releasing backup interface
[  125.743852][ T8139] bond0: (slave bond_slave_1): Releasing backup interface
[  125.755967][ T8139] team0: Port device team_slave_0 removed
[  125.784291][ T8139] team0: Port device team_slave_1 removed
[  125.790023][ T8139] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  125.793445][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_0
[  125.797755][ T8139] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  125.801233][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_1
[  125.810152][ T8139] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  125.815021][ T8142] team0: Mode changed to "broadcast"
[  126.482810][ T8178] IPv6: Can't replace route, no match found
[  126.948482][ T8206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1035'.
[  127.029153][ T8209] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  127.106961][ T8206] hsr_slave_1 (unregistering): left promiscuous mode
[  127.195148][ T8216] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  127.203707][ T8216] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  127.355784][ T8224] netlink: 'syz.2.1042': attribute type 1 has an invalid length.
[  127.674212][ T8237] netlink: 492 bytes leftover after parsing attributes in process `syz.2.1047'.
[  127.836599][ T8243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1050'.
[  127.840378][ T8243] netlink: 'syz.2.1050': attribute type 1 has an invalid length.
[  127.843387][ T8243] netlink: 568 bytes leftover after parsing attributes in process `syz.2.1050'.
[  128.425792][ T8263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1059'.
[  128.429137][ T8263] netlink: 94 bytes leftover after parsing attributes in process `syz.2.1059'.
[  128.432376][ T8263] netlink: 580 bytes leftover after parsing attributes in process `syz.2.1059'.
[  128.784415][ T8267] xt_l2tp: invalid flags combination: 0
[  129.107065][ T8271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1063'.
[  129.339650][ T8273] syzkaller0: entered promiscuous mode
[  129.345211][ T8273] syzkaller0: entered allmulticast mode
[  129.601145][ T8275] ip6tnl0: Caught tx_queue_len zero misconfig
[  129.732516][ T8282] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  129.741641][ T8282] netlink: 'syz.0.1067': attribute type 1 has an invalid length.
[  129.776084][ T8282] syzkaller0: entered promiscuous mode
[  129.781070][ T8282] syzkaller0: entered allmulticast mode
[  130.296874][ T8295] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1073'.
[  130.341637][ T8284] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  130.349043][ T8284] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  130.425737][ T8297] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  130.966721][ T8310] openvswitch: netlink: nsh attr 1647 is out of range max 3
[  131.255686][ T8314] netlink: 'syz.1.1081': attribute type 4 has an invalid length.
[  131.261512][ T8314] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1081'.
[  131.566133][ T8331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1088'.
[  131.886607][ T8347] bond2: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6)
[  131.901198][ T8347] bond2 (unregistering): Released all slaves
[  132.420635][ T8364] netlink: 'syz.0.1098': attribute type 7 has an invalid length.
[  132.426939][ T8364] netlink: 'syz.0.1098': attribute type 8 has an invalid length.
[  132.447345][ T8364] gretap0: entered promiscuous mode
[  132.485643][ T8364] gretap0: left promiscuous mode
[  133.363515][ T8404] pim6reg99999991: entered allmulticast mode
[  133.444172][ T8412] __nla_validate_parse: 2 callbacks suppressed
[  133.444183][ T8412] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1119'.
[  133.454612][ T8412] 0: renamed from hsr0 (while UP)
[  133.467964][ T8412] 0: entered allmulticast mode
[  133.471490][ T8412] hsr_slave_0: entered allmulticast mode
[  133.480606][ T8412] hsr_slave_1: entered allmulticast mode
[  133.488146][ T8412] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  133.503173][ T8412] 0: left promiscuous mode
[  134.717204][ T8456] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1137'.
[  134.787003][ T8451] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  134.814729][ T8461] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  136.133259][ T8484] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1148'.
[  136.316511][ T8490] xt_TPROXY: Can be used only with -p tcp or -p udp
[  136.497376][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1154'.
[  136.704411][ T8507] nbd: must specify a size in bytes for the device
[  137.091064][ T8526] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1167'.
[  137.149064][ T8529] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1168'.
[  137.152709][ T8529] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1168'.
[  137.155327][ T8529] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  137.361297][ T8536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1170'.
[  137.511909][ T8546] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.515634][ T8546] 8021q: adding VLAN 0 to HW filter on device team0
[  137.522347][ T8546] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.556940][ T8546] batman_adv: batadv0: Interface activated: batadv_slave_0
[  137.560736][ T8546] batman_adv: batadv0: Interface activated: batadv_slave_1
[  137.571627][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.573848][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  137.585534][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.587593][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  137.843070][ T8552] netlink: 'syz.2.1179': attribute type 7 has an invalid length.
[  137.855394][ T5461] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  137.858072][ T5461] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  137.860840][ T8552] netlink: 'syz.2.1179': attribute type 7 has an invalid length.
[  137.864036][ T5461] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  137.871155][ T5461] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  137.919527][ T8554] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1180'.
[  138.323432][ T8571] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  138.337855][ T8571] ipt_ECN: cannot use operation on non-tcp rule
[  138.343055][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  138.345774][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  138.516007][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1190'.
[  138.589030][ T8581] netlink: 'syz.0.1191': attribute type 3 has an invalid length.
[  138.817977][ T8589] tipc: Started in network mode
[  138.823692][ T8589] tipc: Node identity e2a56cb0d448, cluster identity 4711
[  138.828038][ T8589] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.834783][ T8589] syzkaller0: entered promiscuous mode
[  138.839223][ T8589] syzkaller0: entered allmulticast mode
[  139.125488][ T8595] tipc: Resetting bearer <eth:syzkaller0>
[  139.154490][ T8588] tipc: Resetting bearer <eth:syzkaller0>
[  139.219846][ T8588] tipc: Disabling bearer <eth:syzkaller0>
[  139.378015][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1199'.
[  139.473570][ T8604] openvswitch: netlink: Message has 1 unknown bytes.
[  139.478772][ T8604] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.609498][ T8626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1212'.
[  141.239539][ T8630] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1214'.
[  141.477822][ T8637] netlink: 'syz.0.1217': attribute type 6 has an invalid length.
[  141.488473][ T8639] netlink: 'syz.2.1218': attribute type 1 has an invalid length.
[  141.619904][ T8641] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  141.628290][ T8641] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  141.692444][ T8639] bond2: (slave gretap1): making interface the new active one
[  141.712076][ T8639] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  141.749767][ T8646] macvlan2: entered promiscuous mode
[  141.758507][ T8646] macvlan2: entered allmulticast mode
[  141.772143][ T8646] bond2: entered promiscuous mode
[  141.778279][ T8646] gretap1: entered promiscuous mode
[  141.785645][ T8646] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  141.796965][ T8646] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  141.882472][ T8646] bond2: left promiscuous mode
[  141.884019][ T8646] gretap1: left promiscuous mode
[  142.006142][ T8646] syz.2.1218 (8646) used greatest stack depth: 19992 bytes left
[  142.153705][ T8665] netlink: 'syz.0.1227': attribute type 2 has an invalid length.
[  142.156476][ T8665] netlink: 'syz.0.1227': attribute type 2 has an invalid length.
[  142.465605][ T8677] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1233'.
[  153.959056][ T8757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1264'.
[  154.033077][ T8757] xt_TCPMSS: Only works on TCP SYN packets
[  169.543827][ T8796] xt_CT: You must specify a L4 protocol and not use inversions on it
[  169.722781][ T8798] netlink: 34 bytes leftover after parsing attributes in process `syz.0.1279'.
[  169.931259][ T8798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1279'.
[  173.947821][ T8809] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1282'.
[  179.132757][ T8823] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1288'.
[  179.593097][ T8826] netlink: 'syz.2.1287': attribute type 13 has an invalid length.
[  179.609909][ T8826] netlink: 'syz.2.1287': attribute type 17 has an invalid length.
[  180.690305][ T8836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1289'.
[  182.659484][ T5697] Bluetooth: hci2: link tx timeout
[  182.662425][ T5697] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  184.735339][   T53] Bluetooth: hci2: command 0x0405 tx timeout
[  187.323752][ T8826] 8021q: adding VLAN 0 to HW filter on device bond0
[  187.339434][ T8826] 8021q: adding VLAN 0 to HW filter on device team0
[  187.345769][ T8826] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.683972][ T8826] 0: left allmulticast mode
[  187.685572][ T8826] hsr_slave_0: left allmulticast mode
[  187.687250][ T8826] hsr_slave_1: left allmulticast mode
[  187.703661][ T8826] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  188.318484][ T8834] IPVS: starting estimator thread 0...
[  188.418751][ T8873] IPVS: using max 70 ests per chain, 168000 per kthread
[  189.028488][ T5689] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  189.032110][ T5689] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.097333][ T5689] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  190.102837][ T5689] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.111327][ T5689] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  190.119704][ T5689] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.152384][ T5689] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  190.160862][ T5689] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.547840][ T8912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1304'.
[  190.854442][ T8918] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  191.253907][ T8926] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.260822][ T8926] 8021q: adding VLAN 0 to HW filter on device team0
[  191.299443][ T8854] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  191.614643][ T5700] Bluetooth: hci1: command 0x0406 tx timeout
[  191.616564][ T5697] Bluetooth: hci0: command 0x0406 tx timeout
[  191.769214][ T5461] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  191.929087][ T8937] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1313'.
[  192.203640][ T8833] Set syz1 is full, maxelem 65536 reached
[  192.328858][ T8854] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  192.621468][ T8958] IPv6: sit1: Disabled Multicast RS
[  192.812310][ T5461] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  192.833170][ T5461] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  193.257277][ T8989] bridge1: entered allmulticast mode
[  193.530120][ T8854] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  194.544918][ T9061] netlink: 'syz.0.1344': attribute type 1 has an invalid length.
[  194.686831][ T9061] 8021q: adding VLAN 0 to HW filter on device bond3
[  194.734653][ T9061] bond3: (slave ip6gretap2): making interface the new active one
[  194.741271][ T9061] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link
[  195.291109][ T9096] geneve2: entered promiscuous mode
[  195.294335][ T5461] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.299535][ T5461] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.302960][ T5461] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.305846][ T5461] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.731367][ T9110] syzkaller0: entered promiscuous mode
[  195.735012][ T9110] syzkaller0: entered allmulticast mode
[  195.846457][ T9113] netlink: 'syz.1.1366': attribute type 1 has an invalid length.
[  196.351601][ T9124] netlink: 428 bytes leftover after parsing attributes in process `syz.1.1371'.
[  196.358817][ T9124] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1371'.
[  196.765787][ T9132] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1375'.
[  196.842699][   T33] audit: type=1804 audit(1778594426.206:4): pid=9134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1377" name="/newroot/386/cgroup.controllers" dev="tmpfs" ino=1964 res=1 errno=0
[  196.858061][   T33] audit: type=1800 audit(1778594426.216:5): pid=9134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1377" name="cgroup.controllers" dev="tmpfs" ino=1964 res=0 errno=0
[  196.993706][ T9144] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  197.048757][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  197.130904][ T9150] rdma_op ffff8881bcb8e9f0 conn xmit_rdma 0000000000000000
[  197.334960][ T9162] bond0: Caught tx_queue_len zero misconfig
[  197.517541][ T9168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1392'.
[  198.141493][ T9179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1397'.
[  198.197816][   T54] block nbd0: Receive control failed (result -1)
[  198.881219][ T9198] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1403'.
[  199.027579][ T9207] bond0: (slave wlan0): Opening slave failed
[  199.298103][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1417'.
[  199.725590][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1425'.
[  199.784656][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  199.787463][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  200.156759][ T9251] syzkaller0: entered promiscuous mode
[  200.166600][ T9251] syzkaller0: entered allmulticast mode
[  200.390085][ T9260] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1434'.
[  200.632799][ T9266] netdevsim netdevsim0: Direct firmware load for . failed with error -2
[  200.642652][ T9266] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  202.551349][ T9309] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma?
[  202.917804][ T9320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1458'.
[  203.097977][ T9326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1460'.
[  204.769309][ T9377] netlink: 'syz.0.1482': attribute type 2 has an invalid length.
[  206.168825][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  208.319988][ T9454] netlink: 460 bytes leftover after parsing attributes in process `syz.2.1515'.
[  209.055999][ T9454] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  210.408885][   T53] Bluetooth: hci0: command 0x0406 tx timeout
[  210.909239][ T9440] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  214.219971][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1555'.
[  214.344820][ T9570] netlink: 'syz.1.1562': attribute type 11 has an invalid length.
[  214.347909][ T9570] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1562'.
[  214.403094][ T9572] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1559'.
[  215.837904][ T9589] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1569'.
[  216.088037][ T9601] syzkaller0: entered promiscuous mode
[  216.091560][ T9601] syzkaller0: entered allmulticast mode
[  216.123480][ T9603] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  216.300568][ T9612] netlink: zone id is out of range
[  216.302235][ T9612] netlink: zone id is out of range
[  216.303838][ T9612] netlink: zone id is out of range
[  216.306653][ T9612] netlink: zone id is out of range
[  216.308423][ T9612] netlink: zone id is out of range
[  216.311050][ T9612] netlink: zone id is out of range
[  216.312938][ T9612] netlink: zone id is out of range
[  216.314692][ T9612] netlink: zone id is out of range
[  216.316427][ T9612] netlink: zone id is out of range
[  216.317994][ T9612] netlink: zone id is out of range
[  216.681839][ T9635] bond4 (unregistering): Released all slaves
[  216.923409][ T9644] netlink: 'syz.0.1596': attribute type 13 has an invalid length.
[  216.977182][ T9647] netlink: 'syz.0.1599': attribute type 30 has an invalid length.
[  217.085592][ T9654] syzkaller1: entered promiscuous mode
[  217.087499][ T9654] syzkaller1: entered allmulticast mode
[  218.077328][ T9664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1605'.
[  218.208293][ T9672] netlink: 'syz.1.1609': attribute type 10 has an invalid length.
[  218.246015][ T9672] team0: Port device dummy0 added
[  218.248439][ T9673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1608'.
[  218.320759][ T9676] netlink: 'syz.1.1609': attribute type 10 has an invalid length.
[  218.353934][ T9676] team0: Port device dummy0 removed
[  218.378478][ T9676] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  218.601256][ T9672] nbd1: detected capacity change from 0 to 63
[  218.643692][   T54] block nbd1: Receive control failed (result -104)
[  218.647724][ T9181] block nbd1: Receive control failed (result -32)
[  219.298817][ T9700] syzkaller0: entered promiscuous mode
[  219.304690][ T9700] syzkaller0: entered allmulticast mode
[  219.576669][ T9719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1629'.
[  219.809222][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1631'.
[  219.929867][ T9724] 8021q: adding VLAN 0 to HW filter on device bond3
[  219.968487][ T9724] bond3 (unregistering): Released all slaves
[  220.212904][ T9746] netlink: 1084 bytes leftover after parsing attributes in process `syz.2.1640'.
[  220.328311][ T9745] netlink: 'syz.0.1641': attribute type 1 has an invalid length.
[  220.392573][ T9748] 
[  220.393719][ T9748] ======================================================
[  220.396555][ T9748] WARNING: possible circular locking dependency detected
[  220.399412][ T9748] syzkaller #0 Not tainted
[  220.401393][ T9748] ------------------------------------------------------
[  220.404222][ T9748] syz.0.1641/9748 is trying to acquire lock:
[  220.406628][ T9748] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650
[  220.410341][ T9748] 
[  220.410341][ T9748] but task is already holding lock:
[  220.413236][ T9748] ffffffff8ea5f8c0 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x261/0x19c0
[  220.417092][ T9748] 
[  220.417092][ T9748] which lock already depends on the new lock.
[  220.417092][ T9748] 
[  220.421501][ T9748] 
[  220.421501][ T9748] the existing dependency chain (in reverse order) is:
[  220.425336][ T9748] 
[  220.425336][ T9748] -> #8 (pcpu_alloc_mutex){+.+.}-{4:4}:
[  220.428551][ T9748]        __mutex_lock+0x1a3/0x1550
[  220.430673][ T9748]        pcpu_alloc_noprof+0x261/0x19c0
[  220.432978][ T9748]        smpcfd_prepare_cpu+0xce/0x120
[  220.435286][ T9748]        cpuhp_invoke_callback+0x445/0x860
[  220.437722][ T9748]        _cpu_up+0x2ce/0x5b0
[  220.439636][ T9748]        cpu_up+0x1d2/0x220
[  220.441507][ T9748]        cpuhp_bringup_mask+0xb2/0x1a0
[  220.443735][ T9748]        cpuhp_bringup_cpus_parallel+0x109/0x120
[  220.446338][ T9748]        bringup_nonboot_cpus+0x17/0x30
[  220.448663][ T9748]        smp_init+0x32/0x110
[  220.450485][ T9748]        kernel_init_freeable+0x288/0x3e0
[  220.452827][ T9748]        kernel_init+0x1d/0x1d0
[  220.454920][ T9748]        ret_from_fork+0x514/0xb70
[  220.457150][ T9748]        ret_from_fork_asm+0x1a/0x30
[  220.459439][ T9748] 
[  220.459439][ T9748] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  220.462822][ T9748]        cpus_read_lock+0x42/0x160
[  220.464936][ T9748]        static_key_slow_inc+0x12/0x30
[  220.467200][ T9748]        tcp_md5_do_add+0x1d4/0x390
[  220.469322][ T9748]        tcp_v6_parse_md5_keys+0x562/0x680
[  220.471681][ T9748]        do_tcp_setsockopt+0x12ec/0x2060
[  220.473938][ T9748]        do_sock_setsockopt+0x17c/0x1b0
[  220.476225][ T9748]        __x64_sys_setsockopt+0x13d/0x1b0
[  220.478593][ T9748]        do_syscall_64+0x15f/0xf80
[  220.480749][ T9748]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.483377][ T9748] 
[  220.483377][ T9748] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  220.486465][ T9748]        lock_sock_nested+0x41/0x100
[  220.488657][ T9748]        inet_shutdown+0x6a/0x390
[  220.490773][ T9748]        nbd_mark_nsock_dead+0x2e9/0x560
[  220.493057][ T9748]        recv_work+0x1c2e/0x1d40
[  220.495171][ T9748]        process_scheduled_works+0xb5d/0x1860
[  220.497591][ T9748]        worker_thread+0xa53/0xfc0
[  220.499607][ T9748]        kthread+0x388/0x470
[  220.501479][ T9748]        ret_from_fork+0x514/0xb70
[  220.503620][ T9748]        ret_from_fork_asm+0x1a/0x30
[  220.505783][ T9748] 
[  220.505783][ T9748] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  220.509079][ T9748]        __mutex_lock+0x1a3/0x1550
[  220.511399][ T9748]        nbd_queue_rq+0x37b/0x1100
[  220.513547][ T9748]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  220.516102][ T9748]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  220.519016][ T9748]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  220.521801][ T9748]        blk_mq_run_hw_queue+0x348/0x4f0
[  220.524252][ T9748]        blk_mq_dispatch_list+0xd16/0xe10
[  220.526667][ T9748]        blk_mq_flush_plug_list+0x48d/0x570
[  220.529067][ T9748]        __blk_flush_plug+0x3ed/0x4d0
[  220.531191][ T9748]        __submit_bio+0x28d/0x580
[  220.533351][ T9748]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  220.536028][ T9748]        block_read_full_folio+0x599/0x830
[  220.538538][ T9748]        filemap_read_folio+0x137/0x3b0
[  220.540943][ T9748]        do_read_cache_folio+0x358/0x590
[  220.543306][ T9748]        read_part_sector+0xb6/0x2b0
[  220.545397][ T9748]        adfspart_check_ICS+0xb1/0x960
[  220.547550][ T9748]        bdev_disk_changed+0x817/0x1770
[  220.550040][ T9748]        blkdev_get_whole+0x380/0x510
[  220.552370][ T9748]        bdev_open+0x31e/0xd30
[  220.554378][ T9748]        blkdev_open+0x470/0x610
[  220.556263][ T9748]        do_dentry_open+0x785/0x14e0
[  220.558263][ T9748]        vfs_open+0x3b/0x340
[  220.560125][ T9748]        path_openat+0x2e08/0x3860
[  220.562187][ T9748]        do_file_open+0x23e/0x4a0
[  220.564276][ T9748]        do_sys_openat2+0x113/0x200
[  220.566449][ T9748]        __x64_sys_openat+0x138/0x170
[  220.568704][ T9748]        do_syscall_64+0x15f/0xf80
[  220.570841][ T9748]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.573425][ T9748] 
[  220.573425][ T9748] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  220.576126][ T9748]        __mutex_lock+0x1a3/0x1550
[  220.578268][ T9748]        nbd_queue_rq+0xc6/0x1100
[  220.580386][ T9748]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  220.583064][ T9748]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  220.585795][ T9748]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  220.588430][ T9748]        blk_mq_run_hw_queue+0x348/0x4f0
[  220.590536][ T9748]        blk_mq_dispatch_list+0xd16/0xe10
[  220.592829][ T9748]        blk_mq_flush_plug_list+0x48d/0x570
[  220.595311][ T9748]        __blk_flush_plug+0x3ed/0x4d0
[  220.597641][ T9748]        __submit_bio+0x28d/0x580
[  220.599783][ T9748]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  220.602368][ T9748]        block_read_full_folio+0x599/0x830
[  220.604696][ T9748]        filemap_read_folio+0x137/0x3b0
[  220.606869][ T9748]        do_read_cache_folio+0x358/0x590
[  220.609170][ T9748]        read_part_sector+0xb6/0x2b0
[  220.611400][ T9748]        adfspart_check_ICS+0xb1/0x960
[  220.613711][ T9748]        bdev_disk_changed+0x817/0x1770
[  220.616051][ T9748]        blkdev_get_whole+0x380/0x510
[  220.618284][ T9748]        bdev_open+0x31e/0xd30
[  220.620273][ T9748]        blkdev_open+0x470/0x610
[  220.622332][ T9748]        do_dentry_open+0x785/0x14e0
[  220.624526][ T9748]        vfs_open+0x3b/0x340
[  220.626484][ T9748]        path_openat+0x2e08/0x3860
[  220.628637][ T9748]        do_file_open+0x23e/0x4a0
[  220.630717][ T9748]        do_sys_openat2+0x113/0x200
[  220.632836][ T9748]        __x64_sys_openat+0x138/0x170
[  220.635009][ T9748]        do_syscall_64+0x15f/0xf80
[  220.637116][ T9748]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.639670][ T9748] 
[  220.639670][ T9748] -> #3 (set->srcu){.+.+}-{0:0}:
[  220.642809][ T9748]        __synchronize_srcu+0xca/0x300
[  220.645450][ T9748]        elevator_switch+0x1e8/0x7a0
[  220.647663][ T9748]        elevator_change+0x2cc/0x450
[  220.649867][ T9748]        elevator_set_default+0x36c/0x430
[  220.652240][ T9748]        blk_register_queue+0x3e9/0x4e0
[  220.654563][ T9748]        __add_disk+0x677/0xd50
[  220.656513][ T9748]        add_disk_fwnode+0xfb/0x480
[  220.658751][ T9748]        nbd_dev_add+0x72c/0xb50
[  220.660921][ T9748]        nbd_init+0x168/0x1f0
[  220.662975][ T9748]        do_one_initcall+0x250/0x870
[  220.665712][ T9748]        do_initcall_level+0x104/0x190
[  220.668204][ T9748]        do_initcalls+0x59/0xa0
[  220.670258][ T9748]        kernel_init_freeable+0x2a6/0x3e0
[  220.672621][ T9748]        kernel_init+0x1d/0x1d0
[  220.674672][ T9748]        ret_from_fork+0x514/0xb70
[  220.676800][ T9748]        ret_from_fork_asm+0x1a/0x30
[  220.679024][ T9748] 
[  220.679024][ T9748] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  220.682294][ T9748]        __mutex_lock+0x1a3/0x1550
[  220.684453][ T9748]        elevator_change+0x1b3/0x450
[  220.686625][ T9748]        elevator_set_none+0xb5/0x140
[  220.688759][ T9748]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  220.691332][ T9748]        nbd_start_device+0x17f/0xb10
[  220.693529][ T9748]        nbd_genl_connect+0x165b/0x1cf0
[  220.695852][ T9748]        genl_family_rcv_msg_doit+0x22a/0x330
[  220.698356][ T9748]        genl_rcv_msg+0x61c/0x7a0
[  220.700472][ T9748]        netlink_rcv_skb+0x232/0x4b0
[  220.702641][ T9748]        genl_rcv+0x28/0x40
[  220.704539][ T9748]        netlink_unicast+0x75c/0x8e0
[  220.706946][ T9748]        netlink_sendmsg+0x813/0xb40
[  220.709183][ T9748]        ____sys_sendmsg+0x972/0x9f0
[  220.711317][ T9748]        ___sys_sendmsg+0x2a5/0x360
[  220.713357][ T9748]        __x64_sys_sendmsg+0x1bd/0x2a0
[  220.715596][ T9748]        do_syscall_64+0x15f/0xf80
[  220.717714][ T9748]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.720380][ T9748] 
[  220.720380][ T9748] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  220.724044][ T9748]        blk_alloc_queue+0x546/0x680
[  220.726225][ T9748]        __blk_mq_alloc_disk+0x197/0x390
[  220.728628][ T9748]        nbd_dev_add+0x499/0xb50
[  220.730830][ T9748]        nbd_init+0x168/0x1f0
[  220.732915][ T9748]        do_one_initcall+0x250/0x870
[  220.735151][ T9748]        do_initcall_level+0x104/0x190
[  220.737365][ T9748]        do_initcalls+0x59/0xa0
[  220.739257][ T9748]        kernel_init_freeable+0x2a6/0x3e0
[  220.741631][ T9748]        kernel_init+0x1d/0x1d0
[  220.743896][ T9748]        ret_from_fork+0x514/0xb70
[  220.745962][ T9748]        ret_from_fork_asm+0x1a/0x30
[  220.748700][ T9748] 
[  220.748700][ T9748] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  220.751725][ T9748]        __lock_acquire+0x15a5/0x2cf0
[  220.754003][ T9748]        lock_acquire+0x106/0x350
[  220.756226][ T9748]        fs_reclaim_acquire+0x71/0x100
[  220.758632][ T9748]        prepare_alloc_pages+0x152/0x650
[  220.761279][ T9748]        __alloc_frozen_pages_noprof+0x12f/0x380
[  220.764010][ T9748]        __alloc_pages_noprof+0x10/0x100
[  220.766455][ T9748]        pcpu_populate_chunk+0x182/0xb30
[  220.768601][ T9748]        pcpu_alloc_noprof+0xcc2/0x19c0
[  220.770818][ T9748]        ipv6_add_dev+0x536/0x13a0
[  220.773017][ T9748]        addrconf_notify+0x771/0x1050
[  220.775366][ T9748]        notifier_call_chain+0x1ad/0x3d0
[  220.777724][ T9748]        register_netdevice+0x18c9/0x1ec0
[  220.779959][ T9748]        register_netdev+0x40/0x60
[  220.782087][ T9748]        ip6_tnl_init_net+0x259/0x3b0
[  220.784279][ T9748]        ops_init+0x35c/0x5c0
[  220.786343][ T9748]        setup_net+0x118/0x340
[  220.788565][ T9748]        copy_net_ns+0x50e/0x730
[  220.790772][ T9748]        create_new_namespaces+0x3e7/0x6a0
[  220.793547][ T9748]        unshare_nsproxy_namespaces+0x149/0x190
[  220.796086][ T9748]        ksys_unshare+0x57d/0x9f0
[  220.798207][ T9748]        __x64_sys_unshare+0x38/0x50
[  220.800402][ T9748]        do_syscall_64+0x15f/0xf80
[  220.802565][ T9748]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.805409][ T9748] 
[  220.805409][ T9748] other info that might help us debug this:
[  220.805409][ T9748] 
[  220.809862][ T9748] Chain exists of:
[  220.809862][ T9748]   fs_reclaim --> cpu_hotplug_lock --> pcpu_alloc_mutex
[  220.809862][ T9748] 
[  220.815101][ T9748]  Possible unsafe locking scenario:
[  220.815101][ T9748] 
[  220.818219][ T9748]        CPU0                    CPU1
[  220.820419][ T9748]        ----                    ----
[  220.822758][ T9748]   lock(pcpu_alloc_mutex);
[  220.824532][ T9748]                                lock(cpu_hotplug_lock);
[  220.827326][ T9748]                                lock(pcpu_alloc_mutex);
[  220.830688][ T9748]   lock(fs_reclaim);
[  220.832412][ T9748] 
[  220.832412][ T9748]  *** DEADLOCK ***
[  220.832412][ T9748] 
[  220.835676][ T9748] 3 locks held by syz.0.1641/9748:
[  220.837843][ T9748]  #0: ffffffff8fdc0c28 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  220.841719][ T9748]  #1: ffffffff8fdcf900 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60
[  220.845623][ T9748]  #2: ffffffff8ea5f8c0 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x261/0x19c0
[  220.849730][ T9748] 
[  220.849730][ T9748] stack backtrace:
[  220.852290][ T9748] CPU: 0 UID: 0 PID: 9748 Comm: syz.0.1641 Not tainted syzkaller #0 PREEMPT(full) 
[  220.852314][ T9748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  220.852327][ T9748] Call Trace:
[  220.852338][ T9748]  <TASK>
[  220.852347][ T9748]  dump_stack_lvl+0xe8/0x150
[  220.852374][ T9748]  print_circular_bug+0x2e1/0x300
[  220.852400][ T9748]  check_noncircular+0x12e/0x150
[  220.852425][ T9748]  __lock_acquire+0x15a5/0x2cf0
[  220.852445][ T9748]  ? __lock_acquire+0x6b5/0x2cf0
[  220.852464][ T9748]  ? __lock_acquire+0x6b5/0x2cf0
[  220.852484][ T9748]  ? prepare_alloc_pages+0x152/0x650
[  220.852509][ T9748]  lock_acquire+0x106/0x350
[  220.852527][ T9748]  ? prepare_alloc_pages+0x152/0x650
[  220.852555][ T9748]  fs_reclaim_acquire+0x71/0x100
[  220.852579][ T9748]  ? prepare_alloc_pages+0x152/0x650
[  220.852602][ T9748]  prepare_alloc_pages+0x152/0x650
[  220.852628][ T9748]  __alloc_frozen_pages_noprof+0x12f/0x380
[  220.852654][ T9748]  ? pcpu_block_update+0x437/0x8d0
[  220.852679][ T9748]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  220.852707][ T9748]  ? pcpu_chunk_refresh_hint+0x80b/0x950
[  220.852736][ T9748]  __alloc_pages_noprof+0x10/0x100
[  220.852762][ T9748]  pcpu_populate_chunk+0x182/0xb30
[  220.852789][ T9748]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  220.852816][ T9748]  pcpu_alloc_noprof+0xcc2/0x19c0
[  220.852845][ T9748]  ipv6_add_dev+0x536/0x13a0
[  220.852869][ T9748]  addrconf_notify+0x771/0x1050
[  220.852894][ T9748]  notifier_call_chain+0x1ad/0x3d0
[  220.852920][ T9748]  register_netdevice+0x18c9/0x1ec0
[  220.852953][ T9748]  ? __pfx_register_netdevice+0x10/0x10
[  220.853010][ T9748]  ? net_generic+0x1e/0x240
[  220.853027][ T9748]  ? net_generic+0x1e/0x240
[  220.853041][ T9748]  ? net_generic+0x1e/0x240
[  220.853057][ T9748]  register_netdev+0x40/0x60
[  220.853083][ T9748]  ip6_tnl_init_net+0x259/0x3b0
[  220.853100][ T9748]  ops_init+0x35c/0x5c0
[  220.853118][ T9748]  setup_net+0x118/0x340
[  220.853134][ T9748]  ? __pfx_setup_net+0x10/0x10
[  220.853154][ T9748]  ? preinit_net+0x492/0x7b0
[  220.853172][ T9748]  copy_net_ns+0x50e/0x730
[  220.853192][ T9748]  create_new_namespaces+0x3e7/0x6a0
[  220.853212][ T9748]  ? security_capable+0x7e/0x2c0
[  220.853236][ T9748]  unshare_nsproxy_namespaces+0x149/0x190
[  220.853255][ T9748]  ksys_unshare+0x57d/0x9f0
[  220.853277][ T9748]  ? __se_sys_futex+0x3a8/0x450
[  220.853297][ T9748]  ? __pfx_ksys_unshare+0x10/0x10
[  220.853317][ T9748]  ? rcu_is_watching+0x15/0xb0
[  220.853342][ T9748]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.853359][ T9748]  __x64_sys_unshare+0x38/0x50
[  220.853380][ T9748]  do_syscall_64+0x15f/0xf80
[  220.853407][ T9748]  ? trace_irq_disable+0x3b/0x140
[  220.853432][ T9748]  ? clear_bhb_loop+0x40/0x90
[  220.853452][ T9748]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.853468][ T9748] RIP: 0033:0x7f36f4d9cdd9
[  220.853486][ T9748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  220.853500][ T9748] RSP: 002b:00007f36f5c8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  220.853519][ T9748] RAX: ffffffffffffffda RBX: 00007f36f5016090 RCX: 00007f36f4d9cdd9
[  220.853533][ T9748] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000
[  220.853544][ T9748] RBP: 00007f36f4e32d69 R08: 0000000000000000 R09: 0000000000000000
[  220.853554][ T9748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  220.853564][ T9748] R13: 00007f36f5016128 R14: 00007f36f5016090 R15: 00007ffd94df9cd8
[  220.853583][ T9748]  </TASK>
[  224.089035][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
