last executing test programs:

380.084522ms ago: executing program 2 (id=1611):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440), &(0x7f00000006c0), 0x1, r1}, 0x38)

319.58369ms ago: executing program 2 (id=1612):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)

317.718582ms ago: executing program 1 (id=1615):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000140)=0x1, 0x4)

247.622ms ago: executing program 2 (id=1616):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a64000000060a0b040000000000000000020000003800048034000180090001007866726d000000002400028008000140000000160800044000000004050003000100000008000240000000060900010073797a30000000000900020073797a32"], 0x8c}}, 0x0)

247.258922ms ago: executing program 1 (id=1617):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000008f40000000000000000e6ff851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10)

246.959956ms ago: executing program 0 (id=1618):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1)

246.699624ms ago: executing program 1 (id=1619):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000008240)=[{{&(0x7f0000002940)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, 0xa5e}, 0x1c, 0x0}}, {{&(0x7f0000002d40)={0xa, 0x4e22, 0x0, @remote, 0x7}, 0x1c, 0x0}}], 0x2, 0xc800)

189.428724ms ago: executing program 2 (id=1620):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

189.199337ms ago: executing program 0 (id=1621):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0xf}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc)

189.033994ms ago: executing program 1 (id=1622):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x20, 0xa8f1e416535134e9, 0x1, 0xfd, 0x0, 0xff, 0x0, 0x2d00}}, 0x1c}}, 0x0)

116.750519ms ago: executing program 0 (id=1623):
r0 = socket(0x200000000000011, 0x2, 0x0)
getsockname$packet(r0, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r1, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001440), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x8, 0xfffffffffffffcac, 0xfffffffffffffffd}}, 0x10)

116.505326ms ago: executing program 1 (id=1624):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0xc0, 0x0, @mcast2={0xff, 0x5}}, 0x1c)

116.125561ms ago: executing program 2 (id=1625):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0)
sendmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="73f9c98c", 0x4}, {&(0x7f0000000500)="6cfac4e9341e2c683e900d3c0ab4351aec5a32a15a8275fd9b4fa66d5c9df4c5ac3e768f42b87861f578ed862cd006265c3d5dc76a016f4f1035557c6f771fe707e1e52360bd9de0516a18d5fc81cc73b00dff5c82af1c37267afab20779893d6db4d345fb6a5656db91bacb92ea32418b6b", 0x72}, {&(0x7f0000001b00)="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", 0xf8b}], 0x3}, 0x4)
splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0)

71.4905ms ago: executing program 0 (id=1626):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x6e21, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c)
getpeername$packet(r0, 0x0, &(0x7f00000000c0))

71.091003ms ago: executing program 1 (id=1627):
socket$kcm(0xa, 0x3, 0x87)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
pselect6(0x40, &(0x7f0000000040)={0x6, 0x8, 0xc97, 0x1000000dd41, 0x10000000001, 0x3c, 0x27, 0x2}, 0x0, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)

70.925405ms ago: executing program 0 (id=1628):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

523.293µs ago: executing program 2 (id=1629):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f00000004c0)=0x27)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r2, 0x1}, 0x8)

0s ago: executing program 0 (id=1630):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:14291' (ED25519) to the list of known hosts.
syzkaller login: [   56.217429][ T5560] cgroup: Unknown subsys name 'net'
[   56.325615][ T5560] cgroup: Unknown subsys name 'cpuset'
[   56.329284][ T5560] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.990270][ T5560] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   68.550097][ T5645] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   70.576790][ T5655] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.581556][ T5658] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.584892][ T5658] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.591778][ T5658] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.594855][ T5658] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.596359][ T5657] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.604836][ T5657] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.608795][ T5657] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.616989][ T5657] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.619610][ T5657] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.645600][ T5657] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.650273][ T5657] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.654566][ T5657] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.657067][ T5657] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.659493][ T5657] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.260883][ T5654] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.263881][ T5654] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.266174][ T5654] bridge_slave_0: entered allmulticast mode
[   71.269680][ T5654] bridge_slave_0: entered promiscuous mode
[   71.303922][ T5654] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.306474][ T5654] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.308631][ T5654] bridge_slave_1: entered allmulticast mode
[   71.312419][ T5654] bridge_slave_1: entered promiscuous mode
[   71.375334][ T5654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.395031][ T5654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.402668][ T5661] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.405510][ T5661] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.408326][ T5661] bridge_slave_0: entered allmulticast mode
[   71.412289][ T5661] bridge_slave_0: entered promiscuous mode
[   71.446114][ T5661] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.449721][ T5661] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.452349][ T5661] bridge_slave_1: entered allmulticast mode
[   71.454969][ T5661] bridge_slave_1: entered promiscuous mode
[   71.459017][ T5654] team0: Port device team_slave_0 added
[   71.473041][ T5653] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.475355][ T5653] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.477410][ T5653] bridge_slave_0: entered allmulticast mode
[   71.480311][ T5653] bridge_slave_0: entered promiscuous mode
[   71.485076][ T5654] team0: Port device team_slave_1 added
[   71.495026][ T5653] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.497806][ T5653] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.500490][ T5653] bridge_slave_1: entered allmulticast mode
[   71.504711][ T5653] bridge_slave_1: entered promiscuous mode
[   71.527684][ T5661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.555598][ T5661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.560262][ T5653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.565438][ T5653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.568825][ T5654] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.571338][ T5654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.578581][ T5654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.621706][ T5654] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.624294][ T5654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.633327][ T5654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.639288][ T5661] team0: Port device team_slave_0 added
[   71.645048][ T5653] team0: Port device team_slave_0 added
[   71.655771][ T5661] team0: Port device team_slave_1 added
[   71.668119][ T5653] team0: Port device team_slave_1 added
[   71.706751][ T5653] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.708851][ T5653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.716076][ T5653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.720784][ T5661] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.723812][ T5661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.733225][ T5661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.749954][ T5653] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.752883][ T5653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.761074][ T5653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.765521][ T5661] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.767850][ T5661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.777970][ T5661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.805437][ T5654] hsr_slave_0: entered promiscuous mode
[   71.807728][ T5654] hsr_slave_1: entered promiscuous mode
[   71.872108][ T5653] hsr_slave_0: entered promiscuous mode
[   71.874348][ T5653] hsr_slave_1: entered promiscuous mode
[   71.876360][ T5653] debugfs: 'hsr0' already exists in 'hsr'
[   71.878043][ T5653] Cannot create hsr debugfs directory
[   71.885012][ T5661] hsr_slave_0: entered promiscuous mode
[   71.888455][ T5661] hsr_slave_1: entered promiscuous mode
[   71.891532][ T5661] debugfs: 'hsr0' already exists in 'hsr'
[   71.893706][ T5661] Cannot create hsr debugfs directory
[   72.181798][ T5654] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.190856][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   72.194333][ T5654] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.200534][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   72.203670][ T5654] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.209827][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   72.215998][ T5654] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.223187][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   72.279447][ T5661] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   72.286048][ T5661] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   72.296332][ T5661] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   72.303182][ T5661] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   72.305882][ T5661] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.309605][ T5661] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   72.312696][ T5661] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.317184][ T5661] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   72.382941][ T5653] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.388069][ T5653] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   72.399252][ T5653] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.406398][ T5653] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   72.410921][ T5653] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.415733][ T5653] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   72.419017][ T5653] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.424613][ T5653] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   72.482224][ T5654] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.514517][ T5654] 8021q: adding VLAN 0 to HW filter on device team0
[   72.536713][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.539731][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.554989][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.557594][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.566173][ T5661] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.623404][ T5661] 8021q: adding VLAN 0 to HW filter on device team0
[   72.642687][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.644771][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.659765][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.662015][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.682361][ T5653] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.691878][ T5657] Bluetooth: hci2: command tx timeout
[   72.692068][   T56] Bluetooth: hci0: command tx timeout
[   72.694296][ T5658] Bluetooth: hci1: command tx timeout
[   72.712693][ T5653] 8021q: adding VLAN 0 to HW filter on device team0
[   72.738224][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.740569][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.746877][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.750279][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.029998][ T5654] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.079104][ T5654] veth0_vlan: entered promiscuous mode
[   73.086199][ T5661] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.113987][ T5654] veth1_vlan: entered promiscuous mode
[   73.184133][ T5654] veth0_macvtap: entered promiscuous mode
[   73.198137][ T5661] veth0_vlan: entered promiscuous mode
[   73.215332][ T5654] veth1_macvtap: entered promiscuous mode
[   73.226804][ T5653] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.239102][ T5661] veth1_vlan: entered promiscuous mode
[   73.268136][ T5654] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.295476][ T5654] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.330562][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.335406][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.339378][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.348409][ T5661] veth0_macvtap: entered promiscuous mode
[   73.355380][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.358869][ T5653] veth0_vlan: entered promiscuous mode
[   73.367442][ T5661] veth1_macvtap: entered promiscuous mode
[   73.407795][ T5653] veth1_vlan: entered promiscuous mode
[   73.441981][ T5661] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.465380][ T5661] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.477312][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.480475][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.498863][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.503795][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.538102][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.543110][ T5653] veth0_macvtap: entered promiscuous mode
[   73.545814][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.568664][ T5653] veth1_macvtap: entered promiscuous mode
[   73.607271][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.613259][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.616884][ T5653] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.646677][ T5653] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.662408][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.666111][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.709077][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.719751][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.730238][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.734384][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.740639][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.748448][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.882599][  T501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.885961][  T501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.931912][  T501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.935370][  T501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.014486][ T5770] netlink: 'syz.1.30': attribute type 1 has an invalid length.
[   74.019210][ T5770] netlink: 224 bytes leftover after parsing attributes in process `syz.1.30'.
[   74.213192][ T5776] bond1: entered promiscuous mode
[   74.219957][ T5776] bond1: entered allmulticast mode
[   74.224125][ T5776] 8021q: adding VLAN 0 to HW filter on device bond1
[   74.354681][ T5786] netlink: 'syz.2.36': attribute type 1 has an invalid length.
[   74.377550][ T5786] macvlan2: entered promiscuous mode
[   74.382001][ T5786] macvlan2: entered allmulticast mode
[   74.385720][ T5786] bridge0: port 3(macvlan2) entered blocking state
[   74.390000][ T5786] bridge0: port 3(macvlan2) entered disabled state
[   74.643824][ T5806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.46'.
[   74.660663][ T5807] netlink: 'syz.1.47': attribute type 4 has an invalid length.
[   74.771670][ T5657] Bluetooth: hci1: command tx timeout
[   74.771730][   T56] Bluetooth: hci2: command tx timeout
[   74.773923][ T5658] Bluetooth: hci0: command tx timeout
[   75.088147][ T5831] netlink: 388 bytes leftover after parsing attributes in process `syz.0.59'.
[   75.099747][ T5831] netlink: 104 bytes leftover after parsing attributes in process `syz.0.59'.
[   75.193227][ T5838] netlink: 'syz.0.62': attribute type 5 has an invalid length.
[   75.393805][ T5851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.68'.
[   75.473679][ T5855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.69'.
[   75.479675][ T5859] netlink: 'syz.1.72': attribute type 3 has an invalid length.
[   75.484206][ T5859] netlink: 'syz.1.72': attribute type 3 has an invalid length.
[   75.487560][ T5859] netlink: 16 bytes leftover after parsing attributes in process `syz.1.72'.
[   75.635588][ T5871] Bluetooth: MGMT ver 1.23
[   75.729888][   T58] block nbd0: Receive control failed (result -32)
[   75.745208][ T5635] block nbd0: NBD_DISCONNECT
[   75.747112][ T5635] block nbd0: Send disconnect failed -32
[   75.761698][ T5635] block nbd0: shutting down sockets
[   75.798562][ T5881] netlink: 80 bytes leftover after parsing attributes in process `syz.0.82'.
[   75.987210][ T5892] netlink: 'syz.1.87': attribute type 30 has an invalid length.
[   76.087210][ T5898] netlink: 16 bytes leftover after parsing attributes in process `syz.1.90'.
[   76.438216][ T5923] netlink: 'syz.0.102': attribute type 4 has an invalid length.
[   76.472324][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.103'.
[   76.539568][ T5930] Zero length message leads to an empty skb
[   76.663254][ T5935] syz.2.107 uses obsolete (PF_INET,SOCK_PACKET)
[   76.854050][   T56] Bluetooth: hci2: command tx timeout
[   76.854153][ T5657] Bluetooth: hci0: command tx timeout
[   76.855891][   T56] Bluetooth: hci1: command tx timeout
[   76.936139][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[   77.363803][ T5974] bond2: option ad_user_port_key: invalid value (65535)
[   77.366142][ T5974] bond2: option ad_user_port_key: allowed values 0 - 1023
[   77.373023][ T5974] bond2 (unregistering): Released all slaves
[   77.589779][ T5990] Illegal XDP return value 4294967274 on prog  (id 14) dev syz_tun, expect packet loss!
[   77.654074][ T5658] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   77.814373][ T6009] erspan0: entered promiscuous mode
[   77.817978][ T6008] erspan0: left promiscuous mode
[   77.944393][ T6010] ip6gretap0: entered promiscuous mode
[   77.950381][ T6010] syz_tun: entered promiscuous mode
[   78.140108][ T6030] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   78.144547][ T6030] bond1 (unregistering): Released all slaves
[   78.272492][ T6042] netlink: 'syz.1.153': attribute type 15 has an invalid length.
[   78.340123][ T6048] veth0: entered promiscuous mode
[   78.342413][ T6048] veth0: left promiscuous mode
[   78.931231][ T5658] Bluetooth: hci1: command tx timeout
[   78.944072][ T5658] Bluetooth: hci0: command 0x0419 tx timeout
[   78.946497][   T56] Bluetooth: hci2: command tx timeout
[   79.073342][ T6099] Cannot find add_set index 0 as target
[   79.094712][ T6095] bond1: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[   79.100539][ T6095] bond1 (unregistering): Released all slaves
[   79.347323][ T6114] __nla_validate_parse: 11 callbacks suppressed
[   79.347340][ T6114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.188'.
[   79.350368][ T6112] syzkaller0: entered promiscuous mode
[   79.355645][ T6112] syzkaller0: entered allmulticast mode
[   79.396414][ T6112] tc action pedit offset must be on 32 bit boundaries
[   79.873209][ T6142] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.928025][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.200'.
[   79.937678][ T6144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.200'.
[   80.003654][ T6148] netlink: 16 bytes leftover after parsing attributes in process `syz.0.203'.
[   80.188017][   T13] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2
[   80.310910][ T6166] netlink: 27 bytes leftover after parsing attributes in process `syz.2.208'.
[   80.535197][ T6174] syzkaller0: entered promiscuous mode
[   80.537434][ T6174] syzkaller0: entered allmulticast mode
[   80.874251][ T6193] netlink: 632 bytes leftover after parsing attributes in process `syz.1.221'.
[   81.025251][   T56] Bluetooth: hci0: command 0x0419 tx timeout
[   82.038709][ T6263] netlink: 64 bytes leftover after parsing attributes in process `syz.1.249'.
[   82.087549][ T6257] syzkaller1: entered promiscuous mode
[   82.093480][ T6257] syzkaller1: entered allmulticast mode
[   82.468675][ T6285] tipc: Started in network mode
[   82.485093][ T6285] tipc: Node identity bef139af7b5, cluster identity 4711
[   82.496015][ T6285] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.500852][ T6285] syzkaller0: entered promiscuous mode
[   82.507825][ T6285] syzkaller0: entered allmulticast mode
[   82.565050][ T6285] tipc: Resetting bearer <eth:syzkaller0>
[   82.577568][ T6284] tipc: Resetting bearer <eth:syzkaller0>
[   82.618742][ T6284] tipc: Disabling bearer <eth:syzkaller0>
[   82.763600][ T6305] xt_limit: Overflow, try lower: 324382443/0
[   83.035960][ T6323] warning: `syz.2.276' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   83.290750][ T6336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.282'.
[   83.297383][ T6336] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.462659][ T6399] syzkaller0: entered promiscuous mode
[   84.464551][ T6399] syzkaller0: entered allmulticast mode
[   87.184726][   T31] cfg80211: failed to load regulatory.db
[   87.364845][ T6388] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   87.374473][ T6402] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[   87.540190][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.313'.
[   88.224782][ T6461] netlink: 'syz.2.332': attribute type 3 has an invalid length.
[   88.352427][ T6471] netlink: 'syz.0.335': attribute type 8 has an invalid length.
[   88.988768][ T6476] IPVS: Error connecting to the multicast addr
[   89.282332][ T6493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'.
[   89.471633][ T6512] IPv6: addrconf: prefix option has invalid lifetime
[   89.519768][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.347'.
[   89.523245][ T6515] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.536603][ T6515] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.637806][ T6523] netlink: 76 bytes leftover after parsing attributes in process `syz.0.350'.
[   89.668258][ T6527] netlink: 16 bytes leftover after parsing attributes in process `syz.1.351'.
[   89.750031][ T6534] netlink: 'syz.0.353': attribute type 1 has an invalid length.
[   89.851664][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'.
[   89.860711][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'.
[   89.966347][ T6555] netlink: 'syz.1.362': attribute type 1 has an invalid length.
[   89.973211][ T6555] netlink: 96 bytes leftover after parsing attributes in process `syz.1.362'.
[   89.980144][ T6555] netlink: 'syz.1.362': attribute type 1 has an invalid length.
[   89.987072][ T6555] netlink: 'syz.1.362': attribute type 8 has an invalid length.
[   89.991248][ T6555] netlink: 582 bytes leftover after parsing attributes in process `syz.1.362'.
[   89.997211][ T6555] netlink: 1 bytes leftover after parsing attributes in process `syz.1.362'.
[   90.233868][ T6580] openvswitch: netlink: Duplicate or invalid key (type 0).
[   90.251268][ T6580] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.345948][ T6588] netlink: 'syz.1.372': attribute type 13 has an invalid length.
[   90.351858][ T6588] bond0: option fail_over_mac: unable to set because the bond device has slaves
[   90.812861][ T6628] IPv6: NLM_F_REPLACE set, but no existing node found!
[   90.882804][ T6634] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   91.187642][ T6657] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   91.197707][ T6657] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   91.515601][ T6660] x9: renamed from bridge_slave_0 (while UP)
[   92.119557][ T6716] syzkaller1: entered promiscuous mode
[   92.122084][ T6716] syzkaller1: entered allmulticast mode
[   92.258438][ T6726] sch_tbf: burst 0 is lower than device sit0 mtu (1480) !
[   92.604108][ T6752] __nla_validate_parse: 9 callbacks suppressed
[   92.604120][ T6752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'.
[   92.630050][    T9] IPVS: starting estimator thread 0...
[   92.732100][ T6755] IPVS: using max 45 ests per chain, 108000 per kthread
[   93.885733][ T6813] Bluetooth: MGMT ver 1.23
[   93.936278][ T6815] netlink: 'syz.1.467': attribute type 21 has an invalid length.
[   93.939455][ T6815] netlink: 132 bytes leftover after parsing attributes in process `syz.1.467'.
[   94.361872][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.479'.
[   94.566173][ T6852] sctp: [Deprecated]: syz.1.485 (pid 6852) Use of int in max_burst socket option.
[   94.566173][ T6852] Use struct sctp_assoc_value instead
[   94.980834][ T6877] openvswitch: netlink: Flow key attr not present in new flow.
[   95.214466][ T6891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.504'.
[   95.218031][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.504'.
[   95.294273][ T6895] openvswitch: netlink: VXLAN extension message has 12 unknown bytes.
[   95.822754][ T6927] syzkaller0: entered promiscuous mode
[   95.826591][ T6927] syzkaller0: entered allmulticast mode
[   95.886914][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'.
[   96.274440][ T6955] netlink: 504 bytes leftover after parsing attributes in process `syz.2.529'.
[   96.292404][ T6957] netlink: 'syz.1.531': attribute type 4 has an invalid length.
[   96.776999][ T6988] netlink: 56 bytes leftover after parsing attributes in process `syz.2.546'.
[   97.008869][ T6998] netlink: 24 bytes leftover after parsing attributes in process `syz.2.550'.
[   97.168652][ T7002] dvmrp1: entered allmulticast mode
[   97.792447][ T7022] netlink: 'syz.1.560': attribute type 11 has an invalid length.
[   98.516204][ T7050] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.618491][ T7050] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.642012][ T7050] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.870364][ T5708] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.889349][ T5708] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.899870][ T5708] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.912429][ T7075] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.914943][ T5708] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.995453][ T7079] tipc: Started in network mode
[   99.003262][ T7079] tipc: Node identity be4a52bf1b0b, cluster identity 4711
[   99.007918][ T7079] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.013881][ T7079] syzkaller0: entered promiscuous mode
[   99.015576][ T7079] syzkaller0: entered allmulticast mode
[   99.032613][ T7079] tipc: Resetting bearer <eth:syzkaller0>
[   99.040579][ T7078] tipc: Resetting bearer <eth:syzkaller0>
[   99.056255][ T7078] tipc: Disabling bearer <eth:syzkaller0>
[   99.366169][ T7081] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[   99.372962][ T7092] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   99.375692][ T7092] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   99.645013][ T7109] netlink: 'syz.2.595': attribute type 3 has an invalid length.
[   99.873604][ T7128] netlink: 'syz.2.602': attribute type 10 has an invalid length.
[   99.901606][ T7128] team0: Failed to send options change via netlink (err -105)
[   99.904536][ T7128] team0: Port device dummy0 added
[   99.911995][ T7128] netlink: 'syz.2.602': attribute type 10 has an invalid length.
[   99.916150][ T7128] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   99.926433][ T7128] team0: Failed to send options change via netlink (err -105)
[   99.929458][ T7128] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   99.934326][ T7128] team0: Port device dummy0 removed
[   99.942959][ T7128] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  102.585600][ T7110] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  102.759649][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.610'.
[  102.893398][ T7151] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.614'.
[  102.975790][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.616'.
[  103.116313][ T7159] netlink: 'syz.2.618': attribute type 1 has an invalid length.
[  103.122948][ T7161] netlink: 56 bytes leftover after parsing attributes in process `syz.0.619'.
[  103.128929][ T7161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.619'.
[  103.140049][ T7161] netlink: 31 bytes leftover after parsing attributes in process `syz.0.619'.
[  103.149780][ T7161] netlink: 'syz.0.619': attribute type 2 has an invalid length.
[  103.162095][ T7161] netlink: 31 bytes leftover after parsing attributes in process `syz.0.619'.
[  103.189862][ T7159] 8021q: adding VLAN 0 to HW filter on device bond3
[  103.250754][ T7163] 8021q: adding VLAN 0 to HW filter on device bond3
[  103.255088][ T7163] bond3: (slave vcan1): The slave device specified does not support setting the MAC address
[  103.259660][ T7163] bond3: (slave vcan1): Error -95 calling set_mac_address
[  103.417653][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.624'.
[  104.029994][ T7217] gtp0: entered promiscuous mode
[  104.034423][ T7217] gtp0: entered allmulticast mode
[  106.727260][ T7198] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  106.865001][ T7246] xt_hashlimit: size too large, truncated to 1048576
[  107.655813][ T7298] syzkaller0: entered promiscuous mode
[  107.658049][ T7298] syzkaller0: entered allmulticast mode
[  107.943343][ T7307] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.947638][ T7307] syzkaller0: entered promiscuous mode
[  107.949576][ T7307] syzkaller0: entered allmulticast mode
[  107.958153][ T7307] tipc: Resetting bearer <eth:syzkaller0>
[  108.597163][ T7307] tipc: Resetting bearer <eth:syzkaller0>
[  108.650911][ T7307] tipc: Disabling bearer <eth:syzkaller0>
[  108.874440][ T7318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.683'.
[  109.428886][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.694'.
[  110.079876][ T7337] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  110.726891][ T7391] xt_CT: No such helper "syz0"
[  110.753090][ T7398] netlink: 'syz.0.714': attribute type 3 has an invalid length.
[  110.772234][ T7398] netlink: 132 bytes leftover after parsing attributes in process `syz.0.714'.
[  110.943326][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.711'.
[  111.497816][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.730'.
[  111.844673][ T7456] netlink: 36 bytes leftover after parsing attributes in process `syz.0.740'.
[  111.953133][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.742'.
[  111.982219][ T7452] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  111.986039][ T7462] syzkaller0: entered promiscuous mode
[  111.987774][ T7462] syzkaller0: entered allmulticast mode
[  111.989707][ T7452] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  112.666349][ T7475] netlink: 'syz.0.748': attribute type 2 has an invalid length.
[  112.668731][ T7475] netlink: 'syz.0.748': attribute type 2 has an invalid length.
[  112.682001][ T7475] macsec1: entered promiscuous mode
[  113.808955][ T7516] netlink: 'syz.2.765': attribute type 2 has an invalid length.
[  113.820191][ T7516] netlink: 'syz.2.765': attribute type 8 has an invalid length.
[  113.826596][ T7516] netlink: 132 bytes leftover after parsing attributes in process `syz.2.765'.
[  113.856131][ T7516] netlink: 'syz.2.765': attribute type 2 has an invalid length.
[  113.859320][ T7516] netlink: 'syz.2.765': attribute type 8 has an invalid length.
[  113.863436][ T7516] netlink: 132 bytes leftover after parsing attributes in process `syz.2.765'.
[  113.933574][ T7520] netlink: 64 bytes leftover after parsing attributes in process `syz.2.766'.
[  114.247326][ T7531] netlink: 16 bytes leftover after parsing attributes in process `syz.2.771'.
[  114.340125][ T7535] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  114.438149][ T7538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.773'.
[  114.871329][ T7566] syzkaller0: entered promiscuous mode
[  114.873791][ T7566] syzkaller0: entered allmulticast mode
[  115.585363][ T7599] bond1: (slave bond_slave_1): Device is not our slave
[  115.587948][ T7599] bond1: option active_slave: invalid value (bond_slave_1)
[  115.593975][ T7599] bond1 (unregistering): Released all slaves
[  115.626721][ T7603] netlink: 210640 bytes leftover after parsing attributes in process `syz.1.795'.
[  115.719309][ T7608] netlink: 36 bytes leftover after parsing attributes in process `syz.2.798'.
[  116.013247][ T7617] netlink: 72 bytes leftover after parsing attributes in process `syz.0.802'.
[  116.021341][ T7617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.802'.
[  116.034037][ T7617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.802'.
[  116.079803][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.805'.
[  116.255715][ T7632] netlink: 256 bytes leftover after parsing attributes in process `syz.0.810'.
[  116.491644][ T7649] dvmrp1: left allmulticast mode
[  116.547439][ T7654] netlink: 'syz.1.821': attribute type 4 has an invalid length.
[  116.555714][ T7656] tipc: New replicast peer: 255.255.255.255
[  116.559101][ T7656] tipc: Enabled bearer <udp:syz2>, priority 10
[  116.687710][ T7664] netlink: 'syz.1.821': attribute type 4 has an invalid length.
[  117.003023][ T7681] sctp: [Deprecated]: syz.2.831 (pid 7681) Use of struct sctp_assoc_value in delayed_ack socket option.
[  117.003023][ T7681] Use struct sctp_sack_info instead
[  117.354519][ T7691] nbd1: detected capacity change from 0 to 63
[  117.364258][   T58] block nbd1: Receive control failed (result -104)
[  117.367907][ T5874] block nbd1: Receive control failed (result -32)
[  117.674342][   T33] tipc: Node number set to 3315677615
[  117.892434][ T7706] tc action pedit offset must be on 32 bit boundaries
[  118.419649][ T7723] netlink: 'syz.2.852': attribute type 13 has an invalid length.
[  119.508037][ T7770] xt_connbytes: Forcing CT accounting to be enabled
[  119.517839][ T7770] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  119.869659][ T7786] sctp: [Deprecated]: syz.2.881 (pid 7786) Use of int in max_burst socket option deprecated.
[  119.869659][ T7786] Use struct sctp_assoc_value instead
[  120.159810][ T7801] netlink: 'syz.0.888': attribute type 83 has an invalid length.
[  120.470783][ T7820] netlink: 'syz.1.896': attribute type 11 has an invalid length.
[  121.095449][ T7849] syzkaller1: entered promiscuous mode
[  121.097236][ T7849] syzkaller1: entered allmulticast mode
[  121.325875][ T7861] __nla_validate_parse: 3 callbacks suppressed
[  121.325894][ T7861] netlink: 9 bytes leftover after parsing attributes in process `syz.0.915'.
[  121.362837][ T7861] .70X: renamed from veth1_virt_wifi
[  121.373754][ T7861] .70X: entered allmulticast mode
[  121.380251][ T7861] A link change request failed with some changes committed already. Interface .70X may have been left with an inconsistent configuration, please check.
[  121.587365][ T7876] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.593860][ T7876] syzkaller0: entered promiscuous mode
[  121.597098][ T7876] syzkaller0: entered allmulticast mode
[  121.641568][ T7876] tipc: Resetting bearer <eth:syzkaller0>
[  121.655887][ T7874] tipc: Resetting bearer <eth:syzkaller0>
[  121.688020][ T7874] tipc: Disabling bearer <eth:syzkaller0>
[  121.927996][ T7900] netlink: 80 bytes leftover after parsing attributes in process `syz.0.936'.
[  122.252184][ T7910] lo: Caught tx_queue_len zero misconfig
[  122.256875][ T7910] netlink: 28 bytes leftover after parsing attributes in process `syz.2.939'.
[  122.261903][ T7910] netem: change failed
[  122.439810][ T7930] Bluetooth: MGMT ver 1.23
[  122.865693][ T7961] openvswitch: netlink: ct_state flags 010000e0 unsupported
[  123.332918][ T7990] ip6erspan0: entered promiscuous mode
[  123.335345][ T7990] ip6erspan0: entered allmulticast mode
[  123.520618][ T8003] netlink: 136 bytes leftover after parsing attributes in process `syz.2.981'.
[  123.575110][ T8007] syzkaller1: entered promiscuous mode
[  123.577340][ T8007] syzkaller1: entered allmulticast mode
[  123.965936][ T8029] netlink: 'syz.1.994': attribute type 5 has an invalid length.
[  123.972673][ T8029] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.994'.
[  124.048239][ T8034] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.601833][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1012'.
[  124.679279][ T8079] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.927711][ T8098] geneve2: entered promiscuous mode
[  124.989163][ T8103] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1026'.
[  125.006486][ T8103] veth1_to_team: entered promiscuous mode
[  125.013025][ T8103] dummy0: entered promiscuous mode
[  125.017612][ T8103] debugfs: 'hsr1' already exists in 'hsr'
[  125.019975][ T8103] Cannot create hsr debugfs directory
[  125.023513][ T8103] hsr1: entered promiscuous mode
[  125.133461][ T8109] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1025'.
[  125.136262][ T8109] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1025'.
[  125.495206][ T8118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1031'.
[  126.410688][ T8178] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1056'.
[  126.507890][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1060'.
[  126.516748][ T8187] bond0: entered promiscuous mode
[  126.518693][ T8187] bond_slave_0: entered promiscuous mode
[  126.520629][ T8187] bond_slave_1: entered promiscuous mode
[  126.523885][ T8187] dummy0: entered promiscuous mode
[  126.527487][ T8187] batadv0: entered promiscuous mode
[  126.531348][ T8187] debugfs: 'hsr1' already exists in 'hsr'
[  126.535072][ T8187] Cannot create hsr debugfs directory
[  126.875288][ T8209] netlink: 'syz.2.1068': attribute type 1 has an invalid length.
[  126.912721][ T8211] set match dimension is over the limit!
[  126.986634][ T8217] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1071'.
[  126.990031][ T8217] netlink: 'syz.0.1071': attribute type 1 has an invalid length.
[  127.096330][ T8224] batadv_slave_0: Caught tx_queue_len zero misconfig
[  130.311149][ T8239] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  131.049863][ T8294] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1105'.
[  131.097783][ T8294] bond0 (unregistering): left promiscuous mode
[  131.104161][ T8294] bond_slave_0: left promiscuous mode
[  131.108283][ T8294] bond_slave_1: left promiscuous mode
[  131.114294][ T8294] dummy0: left promiscuous mode
[  131.120054][ T8294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  131.126246][ T8294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  131.136196][ T8294] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  131.152920][ T8294] bond0 (unregistering): Released all slaves
[  131.322351][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1110'.
[  131.329409][ T8304] macvlan2: entered allmulticast mode
[  131.333820][ T8304] veth1_vlan: entered allmulticast mode
[  131.557790][ T8322] vlan0: entered promiscuous mode
[  131.561096][ T8322] bridge0: entered promiscuous mode
[  131.567786][ T8318] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1111'.
[  131.909002][ T8348] bond0: entered promiscuous mode
[  131.910865][ T8348] bond_slave_0: entered promiscuous mode
[  131.928822][ T8348] bond_slave_1: entered promiscuous mode
[  132.112845][ T8364] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1139'.
[  132.434169][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1147'.
[  134.165253][ T8433] tipc: Cannot configure node identity twice
[  134.426157][ T8439] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1172'.
[  134.516790][ T8449] syzkaller0: entered promiscuous mode
[  134.519521][ T8449] syzkaller0: entered allmulticast mode
[  134.981806][ T8372] Set syz1 is full, maxelem 65536 reached
[  135.346830][ T8469] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1180'.
[  135.357108][ T8469] tc action pedit 'at' offset 6 out of bounds
[  135.523222][ T8481] netlink: 34 bytes leftover after parsing attributes in process `syz.0.1185'.
[  135.790087][ T8499] syzkaller0: entered promiscuous mode
[  135.792852][ T8499] syzkaller0: entered allmulticast mode
[  136.039739][ T8515] netlink: 712 bytes leftover after parsing attributes in process `syz.0.1202'.
[  136.042681][ T8515] netlink: 5504 bytes leftover after parsing attributes in process `syz.0.1202'.
[  136.045394][ T8515] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1202'.
[  136.367972][ T8535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1213'.
[  136.719588][ T8567] wg1 speed is unknown, defaulting to 1000
[  136.725578][ T8567] wg1 speed is unknown, defaulting to 1000
[  136.732642][ T8567] wg1 speed is unknown, defaulting to 1000
[  136.740043][ T8567] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  136.747183][ T8567] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  136.752846][ T8567] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  136.763512][ T8567] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  136.776479][ T8567] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  136.804218][ T8567] wg1 speed is unknown, defaulting to 1000
[  136.807841][ T8567] wg1 speed is unknown, defaulting to 1000
[  136.810570][ T8567] wg1 speed is unknown, defaulting to 1000
[  137.034994][ T8598] netlink: 'syz.1.1232': attribute type 6 has an invalid length.
[  137.292549][ T8619] bridge_slave_1: Caught tx_queue_len zero misconfig
[  137.385098][ T8621] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.388385][ T8621] syzkaller0: entered promiscuous mode
[  137.390642][ T8621] syzkaller0: entered allmulticast mode
[  137.424721][ T8621] tipc: Resetting bearer <eth:syzkaller0>
[  137.439715][ T8620] tipc: Resetting bearer <eth:syzkaller0>
[  137.486121][ T8620] tipc: Disabling bearer <eth:syzkaller0>
[  137.522722][ T8627] syzkaller0: entered promiscuous mode
[  137.528044][ T8627] syzkaller0: entered allmulticast mode
[  137.594407][ T8631] netlink: 'syz.0.1246': attribute type 1 has an invalid length.
[  137.598974][ T8631] netlink: 'syz.0.1246': attribute type 2 has an invalid length.
[  137.837190][ T8648] netlink: 'syz.1.1254': attribute type 1 has an invalid length.
[  137.867926][ T8652] __nla_validate_parse: 2 callbacks suppressed
[  137.867947][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1256'.
[  137.948205][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1257'.
[  137.963690][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1257'.
[  137.973671][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1257'.
[  137.983999][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1256'.
[  137.988682][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1257'.
[  137.995049][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1256'.
[  137.999835][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1257'.
[  138.003458][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1256'.
[  138.010526][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1256'.
[  138.374890][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  138.996852][ T8735] syz_tun: entered allmulticast mode
[  139.025335][ T8735] dvmrp8: entered allmulticast mode
[  139.036793][ T8734] syz_tun: left allmulticast mode
[  139.727454][ T8743] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes.
[  139.880999][ T8747] 8021q: adding VLAN 0 to HW filter on device bond1
[  139.943549][ T8747] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  139.985335][ T5708] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  140.130703][ T5708] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  140.394126][ T8769] netlink: 'syz.0.1304': attribute type 5 has an invalid length.
[  140.419218][ T8771] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  140.615886][ T8781] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  140.624567][ T8781] bond2 (unregistering): Released all slaves
[  140.677833][ T8784] SET target dimension over the limit!
[  140.901298][ T8791] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  140.920206][ T8791] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  141.222645][ T5708] bond1: (slave ip6gretap1): link status up again after 0 ms
[  141.234472][ T5708] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  141.351817][ T5708] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  141.403626][ T8821] syzkaller0: entered promiscuous mode
[  141.408750][ T8821] syzkaller0: entered allmulticast mode
[  141.461242][ T5708] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  141.573434][ T5708] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  141.691310][ T5708] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  141.811455][ T5646] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  141.900577][ T8845] syzkaller0: entered promiscuous mode
[  141.903190][ T8845] syzkaller0: entered allmulticast mode
[  141.936434][ T8847] veth0_to_batadv: entered allmulticast mode
[  141.938434][ T8847] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check.
[  142.003162][ T5708] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  142.610510][ T8884] veth1_vlan: left allmulticast mode
[  143.593851][ T8905] __nla_validate_parse: 10 callbacks suppressed
[  143.593871][ T8905] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1363'.
[  143.768115][ T8913] veth0_macvtap: Caught tx_queue_len zero misconfig
[  144.168673][ T8926] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1373'.
[  144.175571][ T8926] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1373'.
[  144.179255][ T8926] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1373'.
[  144.183900][ T8926] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1373'.
[  144.379091][ T8934] ip6gre2: entered allmulticast mode
[  144.382739][ T8934] team0: Device ip6gre2 is of different type
[  145.913702][ T8990] xt_hashlimit: max too large, truncated to 1048576
[  145.916005][ T8990] xt_ecn: cannot match TCP bits for non-tcp packets
[  145.953732][ T8994] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1405'.
[  145.980169][ T8994] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1405'.
[  146.146001][ T8997] net_ratelimit: 6 callbacks suppressed
[  146.146012][ T8997] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check.
[  146.218438][ T9003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1409'.
[  146.236493][ T9003] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1409'.
[  146.454280][ T9021] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.618888][ T9039] netlink: 149 bytes leftover after parsing attributes in process `syz.0.1425'.
[  146.744329][ T9021] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.778994][ T9042] syz_tun: entered allmulticast mode
[  146.789531][ T9040] syz_tun: left allmulticast mode
[  146.856037][ T9021] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.962718][ T9021] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.116655][ T5646] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.158426][ T5646] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.207889][ T5646] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.250344][ T5646] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  147.428962][ T9081] trusted_key: syz.1.1443 sent an empty control message without MSG_MORE.
[  147.526551][ T9087] veth1_macvtap: left promiscuous mode
[  147.529896][ T9087] macsec0: entered promiscuous mode
[  147.696540][ T9103] SET target dimension over the limit!
[  147.878786][ T9124] netlink: 'syz.0.1462': attribute type 7 has an invalid length.
[  147.882789][ T9124] netlink: 'syz.0.1462': attribute type 8 has an invalid length.
[  147.977341][   T11] block nbd1: Connection timed out, retrying (0/2 alive)
[  147.980337][   T11] block nbd1: Connection timed out, retrying (0/2 alive)
[  147.985158][   T11] block nbd1: Connection timed out, retrying (0/2 alive)
[  147.987315][   T11] block nbd1: Connection timed out, retrying (0/2 alive)
[  147.989647][   T11] block nbd1: Dead connection, failed to find a fallback
[  147.992859][   T11] block nbd1: shutting down sockets
[  148.002958][   T11] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.006304][   T11] Buffer I/O error on dev nbd1, logical block 3, async page read
[  148.009010][   T11] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.012237][   T11] Buffer I/O error on dev nbd1, logical block 2, async page read
[  148.015533][   T11] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.018000][   T11] Buffer I/O error on dev nbd1, logical block 1, async page read
[  148.020210][   T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.024248][   T11] Buffer I/O error on dev nbd1, logical block 0, async page read
[  148.029443][ T6529] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.033210][ T6529] Buffer I/O error on dev nbd1, logical block 0, async page read
[  148.036669][ T6529] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.039331][ T6529] Buffer I/O error on dev nbd1, logical block 1, async page read
[  148.042468][ T6529] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.045640][ T6529] Buffer I/O error on dev nbd1, logical block 2, async page read
[  148.048520][ T6529] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.055786][ T6529] Buffer I/O error on dev nbd1, logical block 3, async page read
[  148.062817][ T6529] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.065521][ T6529] Buffer I/O error on dev nbd1, logical block 0, async page read
[  148.068172][ T6529] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.072372][ T6529] Buffer I/O error on dev nbd1, logical block 1, async page read
[  148.079342][ T6529] ldm_validate_partition_table(): Disk read failed.
[  148.083339][ T6529] Dev nbd1: unable to read RDB block 0
[  148.087287][ T6529]  nbd1: unable to read partition table
[  148.101822][ T6529] ldm_validate_partition_table(): Disk read failed.
[  148.105768][ T6529] Dev nbd1: unable to read RDB block 0
[  148.108359][ T6529]  nbd1: unable to read partition table
[  148.161443][ T9146] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048)
[  148.166795][ T9147] tipc: Failed to remove unknown binding: 66,0,0/3315677615:3505597124/3505597126
[  148.180862][ T9147] tipc: Failed to remove unknown binding: 66,0,0/3315677615:3505597124/3505597125
[  148.191558][ T9147] tipc: Failed to remove unknown binding: 66,0,0/3315677615:3505597124/3505597126
[  148.201756][ T9147] tipc: Failed to remove unknown binding: 66,0,0/3315677615:3505597124/3505597125
[  148.406989][ T9162] netlink: 'syz.1.1479': attribute type 2 has an invalid length.
[  148.409926][ T9162] netlink: 'syz.1.1479': attribute type 2 has an invalid length.
[  148.826731][ T9189] __nla_validate_parse: 6 callbacks suppressed
[  148.826745][ T9189] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1492'.
[  149.464742][ T9260] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1511'.
[  149.505349][ T9263] IPv6: NLM_F_CREATE should be specified when creating new route
[  149.762261][ T9268] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1513'.
[  149.985587][ T9301] netlink: 'syz.0.1518': attribute type 4 has an invalid length.
[  150.093389][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1522'.
[  150.096810][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1522'.
[  150.158272][ T9316] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.558651][ T9354] : renamed from dummy0 (while UP)
[  150.896734][ T9386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1558'.
[  150.966728][ T9386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1558'.
[  150.974738][ T9394] xt_hashlimit: size too large, truncated to 1048576
[  151.099967][ T9404] netlink: 'syz.1.1565': attribute type 3 has an invalid length.
[  151.104543][ T9404] netlink: 'syz.1.1565': attribute type 3 has an invalid length.
[  151.208681][ T9413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1570'.
[  151.256087][ T5874] block nbd3: Receive control failed (result -1)
[  151.456739][ T9422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1572'.
[  152.003568][ T9447] xfrm1: entered allmulticast mode
[  152.118877][ T9455] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1588'.
[  152.673798][ T9500] netlink: 'syz.1.1609': attribute type 9 has an invalid length.
[  153.056626][ T9543] netlink: 'syz.0.1630': attribute type 1 has an invalid length.
[  153.082039][ T9543] bond2: entered promiscuous mode
[  153.086688][ T9543] 8021q: adding VLAN 0 to HW filter on device bond2
[  153.104223][ T9543] ipvlan2: entered allmulticast mode
[  153.105970][ T9543] bond2: entered allmulticast mode
[  153.124647][ T9543] bond2: (slave bridge2): making interface the new active one
[  153.127517][ T9543] bridge2: entered promiscuous mode
[  153.129753][ T9543] bridge2: entered allmulticast mode
[  153.134801][ T9543] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  153.166323][ T5646] 
[  153.167287][ T5646] ======================================================
[  153.169373][ T5646] WARNING: possible circular locking dependency detected
[  153.171662][ T5646] syzkaller #0 Not tainted
[  153.173098][ T5646] ------------------------------------------------------
[  153.176169][ T5646] kworker/u8:2/5646 is trying to acquire lock:
[  153.178355][ T5646] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  153.181614][ T5646] 
[  153.181614][ T5646] but task is already holding lock:
[  153.183758][ T5646] ffff8881b7e38530 (&idev->mc_lock){+.+.}-{4:4}, at: ipv6_mc_netdev_event+0xe1/0x5a0
[  153.187576][ T5646] 
[  153.187576][ T5646] which lock already depends on the new lock.
[  153.187576][ T5646] 
[  153.190588][ T5646] 
[  153.190588][ T5646] the existing dependency chain (in reverse order) is:
[  153.193204][ T5646] 
[  153.193204][ T5646] -> #7 (&idev->mc_lock){+.+.}-{4:4}:
[  153.195866][ T5646]        __mutex_lock+0x1a3/0x1550
[  153.197813][ T5646]        __ipv6_dev_mc_inc+0x4e/0xa50
[  153.199791][ T5646]        __ipv6_sock_mc_join+0x503/0x750
[  153.201856][ T5646]        ipv6_mcast_join_leave+0x1a2/0x240
[  153.203990][ T5646]        do_ipv6_setsockopt+0x190e/0x3150
[  153.206125][ T5646]        ipv6_setsockopt+0x59/0x170
[  153.208029][ T5646]        do_sock_setsockopt+0x17c/0x1b0
[  153.210059][ T5646]        __x64_sys_setsockopt+0x13d/0x1b0
[  153.212170][ T5646]        do_syscall_64+0x15f/0xf80
[  153.214034][ T5646]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.216350][ T5646] 
[  153.216350][ T5646] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  153.218969][ T5646]        lock_sock_nested+0x41/0x100
[  153.220541][ T5646]        inet_shutdown+0x6a/0x390
[  153.222010][ T5646]        nbd_mark_nsock_dead+0x2e9/0x560
[  153.223646][ T5646]        recv_work+0x1c2e/0x1d40
[  153.225097][ T5646]        process_scheduled_works+0xb5d/0x1860
[  153.226871][ T5646]        worker_thread+0xa53/0xfc0
[  153.228366][ T5646]        kthread+0x388/0x470
[  153.229874][ T5646]        ret_from_fork+0x514/0xb70
[  153.231490][ T5646]        ret_from_fork_asm+0x1a/0x30
[  153.233067][ T5646] 
[  153.233067][ T5646] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  153.235295][ T5646]        __mutex_lock+0x1a3/0x1550
[  153.237195][ T5646]        nbd_queue_rq+0x37b/0x1100
[  153.239069][ T5646]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  153.241301][ T5646]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  153.243790][ T5646]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  153.246083][ T5646]        blk_mq_run_hw_queue+0x348/0x4f0
[  153.248149][ T5646]        blk_mq_dispatch_list+0xd16/0xe10
[  153.249874][ T5646]        blk_mq_flush_plug_list+0x48d/0x570
[  153.251588][ T5646]        __blk_flush_plug+0x3ed/0x4d0
[  153.253119][ T5646]        __submit_bio+0x28d/0x580
[  153.254566][ T5646]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  153.256347][ T5646]        block_read_full_folio+0x599/0x830
[  153.258130][ T5646]        filemap_read_folio+0x137/0x3b0
[  153.260261][ T5646]        do_read_cache_folio+0x358/0x590
[  153.262337][ T5646]        read_part_sector+0xb6/0x2b0
[  153.264036][ T5646]        adfspart_check_ICS+0xb1/0x960
[  153.265652][ T5646]        bdev_disk_changed+0x817/0x1770
[  153.267278][ T5646]        blkdev_get_whole+0x380/0x510
[  153.268874][ T5646]        bdev_open+0x31e/0xd30
[  153.270334][ T5646]        blkdev_open+0x470/0x610
[  153.271909][ T5646]        do_dentry_open+0x785/0x14e0
[  153.273594][ T5646]        vfs_open+0x3b/0x340
[  153.274953][ T5646]        path_openat+0x2e08/0x3860
[  153.276456][ T5646]        do_file_open+0x23e/0x4a0
[  153.277896][ T5646]        do_sys_openat2+0x113/0x200
[  153.279407][ T5646]        __x64_sys_openat+0x138/0x170
[  153.280965][ T5646]        do_syscall_64+0x15f/0xf80
[  153.282453][ T5646]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.284353][ T5646] 
[  153.284353][ T5646] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  153.286495][ T5646]        __mutex_lock+0x1a3/0x1550
[  153.287964][ T5646]        nbd_queue_rq+0xc6/0x1100
[  153.289411][ T5646]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  153.291331][ T5646]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  153.293357][ T5646]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  153.295220][ T5646]        blk_mq_run_hw_queue+0x348/0x4f0
[  153.296862][ T5646]        blk_mq_dispatch_list+0xd16/0xe10
[  153.298506][ T5646]        blk_mq_flush_plug_list+0x48d/0x570
[  153.300248][ T5646]        __blk_flush_plug+0x3ed/0x4d0
[  153.301798][ T5646]        __submit_bio+0x28d/0x580
[  153.303260][ T5646]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  153.305042][ T5646]        block_read_full_folio+0x599/0x830
[  153.306710][ T5646]        filemap_read_folio+0x137/0x3b0
[  153.308341][ T5646]        do_read_cache_folio+0x358/0x590
[  153.310075][ T5646]        read_part_sector+0xb6/0x2b0
[  153.311607][ T5646]        adfspart_check_ICS+0xb1/0x960
[  153.313204][ T5646]        bdev_disk_changed+0x817/0x1770
[  153.314786][ T5646]        blkdev_get_whole+0x380/0x510
[  153.316344][ T5646]        bdev_open+0x31e/0xd30
[  153.317742][ T5646]        blkdev_open+0x470/0x610
[  153.319168][ T5646]        do_dentry_open+0x785/0x14e0
[  153.320675][ T5646]        vfs_open+0x3b/0x340
[  153.321974][ T5646]        path_openat+0x2e08/0x3860
[  153.323387][ T5646]        do_file_open+0x23e/0x4a0
[  153.324807][ T5646]        do_sys_openat2+0x113/0x200
[  153.326461][ T5646]        __x64_sys_openat+0x138/0x170
[  153.327970][ T5646]        do_syscall_64+0x15f/0xf80
[  153.329395][ T5646]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.331161][ T5646] 
[  153.331161][ T5646] -> #3 (set->srcu){.+.+}-{0:0}:
[  153.333148][ T5646]        __synchronize_srcu+0xca/0x300
[  153.334711][ T5646]        elevator_switch+0x1e8/0x7a0
[  153.336231][ T5646]        elevator_change+0x2cc/0x450
[  153.337837][ T5646]        elevator_set_default+0x36c/0x430
[  153.339509][ T5646]        blk_register_queue+0x3e9/0x4e0
[  153.341133][ T5646]        __add_disk+0x677/0xd50
[  153.342565][ T5646]        add_disk_fwnode+0xfb/0x480
[  153.344049][ T5646]        nbd_dev_add+0x72c/0xb50
[  153.345507][ T5646]        nbd_init+0x168/0x1f0
[  153.346871][ T5646]        do_one_initcall+0x250/0x870
[  153.348417][ T5646]        do_initcall_level+0x104/0x190
[  153.349966][ T5646]        do_initcalls+0x59/0xa0
[  153.351357][ T5646]        kernel_init_freeable+0x2a6/0x3e0
[  153.353017][ T5646]        kernel_init+0x1d/0x1d0
[  153.354419][ T5646]        ret_from_fork+0x514/0xb70
[  153.355875][ T5646]        ret_from_fork_asm+0x1a/0x30
[  153.357400][ T5646] 
[  153.357400][ T5646] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  153.359589][ T5646]        __mutex_lock+0x1a3/0x1550
[  153.361053][ T5646]        elevator_change+0x1b3/0x450
[  153.362622][ T5646]        elevator_set_none+0xb5/0x140
[  153.364210][ T5646]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  153.366011][ T5646]        nbd_start_device+0x17f/0xb10
[  153.367542][ T5646]        nbd_genl_connect+0x165b/0x1cf0
[  153.369118][ T5646]        genl_family_rcv_msg_doit+0x22a/0x330
[  153.370859][ T5646]        genl_rcv_msg+0x61c/0x7a0
[  153.372302][ T5646]        netlink_rcv_skb+0x232/0x4b0
[  153.374154][ T5646]        genl_rcv+0x28/0x40
[  153.375820][ T5646]        netlink_unicast+0x75c/0x8e0
[  153.377744][ T5646]        netlink_sendmsg+0x813/0xb40
[  153.379844][ T5646]        ____sys_sendmsg+0x972/0x9f0
[  153.381655][ T5646]        ___sys_sendmsg+0x2a5/0x360
[  153.383507][ T5646]        __x64_sys_sendmsg+0x1bd/0x2a0
[  153.385154][ T5646]        do_syscall_64+0x15f/0xf80
[  153.386667][ T5646]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.388557][ T5646] 
[  153.388557][ T5646] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  153.391072][ T5646]        blk_alloc_queue+0x546/0x680
[  153.392660][ T5646]        __blk_mq_alloc_disk+0x197/0x390
[  153.394438][ T5646]        nbd_dev_add+0x499/0xb50
[  153.395879][ T5646]        nbd_init+0x168/0x1f0
[  153.397270][ T5646]        do_one_initcall+0x250/0x870
[  153.398943][ T5646]        do_initcall_level+0x104/0x190
[  153.401017][ T5646]        do_initcalls+0x59/0xa0
[  153.402869][ T5646]        kernel_init_freeable+0x2a6/0x3e0
[  153.404623][ T5646]        kernel_init+0x1d/0x1d0
[  153.406212][ T5646]        ret_from_fork+0x514/0xb70
[  153.407678][ T5646]        ret_from_fork_asm+0x1a/0x30
[  153.409236][ T5646] 
[  153.409236][ T5646] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  153.411915][ T5646]        __lock_acquire+0x15a5/0x2cf0
[  153.413950][ T5646]        lock_acquire+0x106/0x350
[  153.415578][ T5646]        fs_reclaim_acquire+0x71/0x100
[  153.417185][ T5646]        __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  153.419294][ T5646]        __alloc_skb+0x2c1/0x7d0
[  153.420719][ T5646]        mld_newpack+0x14c/0xc90
[  153.422330][ T5646]        add_grhead+0x5a/0x2a0
[  153.423741][ T5646]        add_grec+0x1452/0x1740
[  153.425183][ T5646]        mld_send_report+0x1ed/0x380
[  153.426728][ T5646]        ipv6_mc_netdev_event+0x1b7/0x5a0
[  153.428357][ T5646]        notifier_call_chain+0x1ad/0x3d0
[  153.430148][ T5646]        call_netdevice_notifiers+0x90/0xd0
[  153.431813][ T5646]        bond_resend_igmp_join_requests_delayed+0x61/0x170
[  153.433869][ T5646]        process_scheduled_works+0xb5d/0x1860
[  153.435627][ T5646]        worker_thread+0xa53/0xfc0
[  153.437062][ T5646]        kthread+0x388/0x470
[  153.438736][ T5646]        ret_from_fork+0x514/0xb70
[  153.440346][ T5646]        ret_from_fork_asm+0x1a/0x30
[  153.441899][ T5646] 
[  153.441899][ T5646] other info that might help us debug this:
[  153.441899][ T5646] 
[  153.445008][ T5646] Chain exists of:
[  153.445008][ T5646]   fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock
[  153.445008][ T5646] 
[  153.448738][ T5646]  Possible unsafe locking scenario:
[  153.448738][ T5646] 
[  153.451038][ T5646]        CPU0                    CPU1
[  153.452805][ T5646]        ----                    ----
[  153.454769][ T5646]   lock(&idev->mc_lock);
[  153.456258][ T5646]                                lock(sk_lock-AF_INET6);
[  153.458714][ T5646]                                lock(&idev->mc_lock);
[  153.460796][ T5646]   lock(fs_reclaim);
[  153.461996][ T5646] 
[  153.461996][ T5646]  *** DEADLOCK ***
[  153.461996][ T5646] 
[  153.464870][ T5646] 4 locks held by kworker/u8:2/5646:
[  153.466849][ T5646]  #0: ffff8881626b8140 ((wq_completion)bond2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  153.470904][ T5646]  #1: ffffc90006057c40 ((work_completion)(&(&bond->mcast_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  153.475968][ T5646]  #2: ffffffff8fdcf900 (rtnl_mutex){+.+.}-{4:4}, at: bond_resend_igmp_join_requests_delayed+0x23/0x170
[  153.480106][ T5646]  #3: ffff8881b7e38530 (&idev->mc_lock){+.+.}-{4:4}, at: ipv6_mc_netdev_event+0xe1/0x5a0
[  153.483735][ T5646] 
[  153.483735][ T5646] stack backtrace:
[  153.485980][ T5646] CPU: 0 UID: 0 PID: 5646 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  153.485996][ T5646] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  153.486005][ T5646] Workqueue: bond2 bond_resend_igmp_join_requests_delayed
[  153.486021][ T5646] Call Trace:
[  153.486027][ T5646]  <TASK>
[  153.486031][ T5646]  dump_stack_lvl+0xe8/0x150
[  153.486042][ T5646]  print_circular_bug+0x2e1/0x300
[  153.486054][ T5646]  check_noncircular+0x12e/0x150
[  153.486064][ T5646]  __lock_acquire+0x15a5/0x2cf0
[  153.486073][ T5646]  ? kthread+0x388/0x470
[  153.486108][ T5646]  ? ret_from_fork+0x514/0xb70
[  153.486122][ T5646]  ? ret_from_fork_asm+0x1a/0x30
[  153.486142][ T5646]  ? __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  153.486160][ T5646]  lock_acquire+0x106/0x350
[  153.486167][ T5646]  ? __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  153.486180][ T5646]  fs_reclaim_acquire+0x71/0x100
[  153.486190][ T5646]  ? __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  153.486200][ T5646]  __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  153.486210][ T5646]  ? mld_newpack+0x14c/0xc90
[  153.486220][ T5646]  ? __alloc_skb+0x186/0x7d0
[  153.486230][ T5646]  __alloc_skb+0x2c1/0x7d0
[  153.486239][ T5646]  mld_newpack+0x14c/0xc90
[  153.486249][ T5646]  ? __pfx___mutex_trylock_common+0x10/0x10
[  153.486260][ T5646]  ? __pfx_mld_newpack+0x10/0x10
[  153.486268][ T5646]  ? rcu_is_watching+0x15/0xb0
[  153.486277][ T5646]  ? trace_contention_end+0x3d/0x140
[  153.486287][ T5646]  ? __mutex_lock+0x319/0x1550
[  153.486299][ T5646]  add_grhead+0x5a/0x2a0
[  153.486307][ T5646]  ? add_grec+0x1360/0x1740
[  153.486316][ T5646]  add_grec+0x1452/0x1740
[  153.486325][ T5646]  ? __pfx___mutex_lock+0x10/0x10
[  153.486338][ T5646]  mld_send_report+0x1ed/0x380
[  153.486347][ T5646]  ipv6_mc_netdev_event+0x1b7/0x5a0
[  153.486358][ T5646]  notifier_call_chain+0x1ad/0x3d0
[  153.486369][ T5646]  call_netdevice_notifiers+0x90/0xd0
[  153.486377][ T5646]  ? __pfx_call_netdevice_notifiers+0x10/0x10
[  153.486385][ T5646]  ? process_scheduled_works+0xa70/0x1860
[  153.486394][ T5646]  bond_resend_igmp_join_requests_delayed+0x61/0x170
[  153.486404][ T5646]  ? process_scheduled_works+0xa70/0x1860
[  153.486412][ T5646]  process_scheduled_works+0xb5d/0x1860
[  153.486424][ T5646]  ? __pfx_process_scheduled_works+0x10/0x10
[  153.486432][ T5646]  ? assign_work+0x3d5/0x5e0
[  153.486439][ T5646]  worker_thread+0xa53/0xfc0
[  153.486451][ T5646]  kthread+0x388/0x470
[  153.486460][ T5646]  ? __pfx_worker_thread+0x10/0x10
[  153.486467][ T5646]  ? __pfx_kthread+0x10/0x10
[  153.486476][ T5646]  ret_from_fork+0x514/0xb70
[  153.486483][ T5646]  ? __pfx_ret_from_fork+0x10/0x10
[  153.486490][ T5646]  ? __switch_to+0xc79/0x1410
[  153.486501][ T5646]  ? __pfx_kthread+0x10/0x10
[  153.486510][ T5646]  ret_from_fork_asm+0x1a/0x30
[  153.486521][ T5646]  </TASK>
[  157.424148][ T6529] udevd (6529) used greatest stack depth: 18984 bytes left
