last executing test programs:

638.436023ms ago: executing program 0 (id=3117):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f00000000c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f1, &(0x7f0000000000))
sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004011}, 0x24008000)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', <r4=>0x0})
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r4}, 0xc)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0xfc, r4}, 0xc)
write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)

517.983361ms ago: executing program 2 (id=3120):
syz_emit_ethernet(0xbc, &(0x7f00000004c0)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x86, 0x2f, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x6000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x8, 0xb, 0xe]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "abac7538fec1d578c4b2b88ffe8c9804211547df53a26b26b9ddcb9380dd3dc3f67c1ee65b296b05c3bcb0c2b92a748153cffce60bcc17e3c1a8883a"}, {0xa888, 0x88be, 0x8000000}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}}, 0x0)

459.338032ms ago: executing program 2 (id=3122):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000010000000000000000000000711216000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)

458.357178ms ago: executing program 2 (id=3124):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x43}, 0x40)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}, {0xfff2}, {0xfff1, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_FD, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', <r8=>0x0})
bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400004}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x4000000)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newsa={0xffffff16, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xeb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x32}, @in=@remote, {0x0, 0x0, 0xfffffffffffeffff, 0x4, 0x4, 0x6}, {0xfffffffffffff461, 0x3, 0x0, 0x10000}, {0x0, 0x2}, 0x70bd2d, 0x0, 0x2, 0x5}, [@algo_crypt={0x48, 0x2, {{'cbc-twofish-3way\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x24000010}, 0x800)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f00000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000000d0003"], 0xac}}, 0x0)

427.00606ms ago: executing program 0 (id=3126):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000200), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)

367.106491ms ago: executing program 1 (id=3127):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r2 = accept(r0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r2}, 0x47)
shutdown(r2, 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

366.367827ms ago: executing program 1 (id=3128):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200090f000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000004d20000020300000020050005002f8000000a00000000000000ff0100000000000000000000000000010000000000000000010018"], 0x78}}, 0x0)

312.153432ms ago: executing program 2 (id=3129):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=<r2=>0x0)
bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
close(r1)

250.018665ms ago: executing program 1 (id=3130):
r0 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000e40))

249.616624ms ago: executing program 1 (id=3131):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$inet(r0, &(0x7f0000006600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="10007d"], 0x10}}], 0x1, 0x0)

249.435586ms ago: executing program 0 (id=3132):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="1500000010000000081f"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f00000006c0), 0x0}, 0x20)

179.134467ms ago: executing program 1 (id=3133):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

178.800637ms ago: executing program 0 (id=3134):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xfffffffffffffff8}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37)

178.322519ms ago: executing program 1 (id=3135):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
unshare(0x6a040000)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8=<r1=>0xffffffffffffffff], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f086dd", 0x0, 0xfc, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000100000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000100)=0x7105, 0x4)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000002040)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c850000007a000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc", @ANYRES64=r1, @ANYRESOCT=r5], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
sendmmsg(r5, &(0x7f0000007fc0), 0x2d, 0x0)
recvmmsg(r5, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40010)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0xffff, 0x0, 0x0, {0xa, 0x4e22, 0x5, @private1, 0xab}}}, 0x32)
unshare(0x20000400)
r7 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r7, &(0x7f0000000c80)={0xa, 0x0, 0x0, @remote, 0xa872}, 0x1c)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="9feb010018000000000000001000f8001000000000000000010000000000000e4500000000000000005f2e00"], 0x0, 0x2c, 0x0, 0x0, 0x5}, 0x28)

174.956712ms ago: executing program 2 (id=3136):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)

60.309837ms ago: executing program 0 (id=3137):
r0 = socket$inet(0x2b, 0x801, 0x0)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000640)=@get={0x1, 0x0, 0x8001})

59.723685ms ago: executing program 2 (id=3138):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)

0s ago: executing program 0 (id=3139):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:31348' (ED25519) to the list of known hosts.
syzkaller login: [   56.249927][ T5816] cgroup: Unknown subsys name 'net'
[   56.380340][ T5816] cgroup: Unknown subsys name 'cpuset'
[   56.384914][ T5816] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.386196][ T5816] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.406974][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.427000][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.430598][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.434344][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.445346][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.478615][ T5222] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.482699][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.482951][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.490631][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.491061][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.496620][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.497232][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.502778][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.503945][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.514923][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.887271][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   63.966502][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   64.033354][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   64.159462][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.163167][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.166881][ T5840] bridge_slave_0: entered allmulticast mode
[   64.170841][ T5840] bridge_slave_0: entered promiscuous mode
[   64.197545][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.200454][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.203399][ T5836] bridge_slave_0: entered allmulticast mode
[   64.208012][ T5836] bridge_slave_0: entered promiscuous mode
[   64.213337][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.218018][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.220867][ T5836] bridge_slave_1: entered allmulticast mode
[   64.224592][ T5836] bridge_slave_1: entered promiscuous mode
[   64.229649][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.232064][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.234409][ T5840] bridge_slave_1: entered allmulticast mode
[   64.237458][ T5840] bridge_slave_1: entered promiscuous mode
[   64.300044][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.305617][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.350209][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.352616][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.356814][ T5832] bridge_slave_0: entered allmulticast mode
[   64.359569][ T5832] bridge_slave_0: entered promiscuous mode
[   64.366523][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.371690][ T5840] team0: Port device team_slave_0 added
[   64.376803][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.380643][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.382939][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.385930][ T5832] bridge_slave_1: entered allmulticast mode
[   64.388710][ T5832] bridge_slave_1: entered promiscuous mode
[   64.392260][ T5840] team0: Port device team_slave_1 added
[   64.451169][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.467025][ T5836] team0: Port device team_slave_0 added
[   64.471524][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.475740][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.477828][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.486614][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.492734][ T5836] team0: Port device team_slave_1 added
[   64.495329][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.497519][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.505675][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.563439][ T5832] team0: Port device team_slave_0 added
[   64.567478][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.570448][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.581407][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.587988][ T5832] team0: Port device team_slave_1 added
[   64.590587][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.593361][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.603579][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.659201][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.661476][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.671809][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.678201][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.680898][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.691654][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.701036][ T5840] hsr_slave_0: entered promiscuous mode
[   64.704244][ T5840] hsr_slave_1: entered promiscuous mode
[   64.786356][ T5836] hsr_slave_0: entered promiscuous mode
[   64.788569][ T5836] hsr_slave_1: entered promiscuous mode
[   64.790640][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.793001][ T5836] Cannot create hsr debugfs directory
[   64.805723][ T5832] hsr_slave_0: entered promiscuous mode
[   64.807935][ T5832] hsr_slave_1: entered promiscuous mode
[   64.809928][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.812113][ T5832] Cannot create hsr debugfs directory
[   65.114179][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.127551][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.134472][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.149893][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.198664][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.207177][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.217479][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.238538][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.310581][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.317968][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.326174][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.339989][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.433082][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.477380][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   65.497734][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.500634][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.522588][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.525609][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.539828][ T5835] Bluetooth: hci2: command tx timeout
[   65.542103][ T5843] Bluetooth: hci1: command tx timeout
[   65.544501][ T5843] Bluetooth: hci0: command tx timeout
[   65.575935][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.595475][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.620408][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   65.653009][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   65.658993][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.662010][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.681846][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.684205][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.711290][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.714190][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.725872][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.728679][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.780188][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.917813][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.003720][ T5840] veth0_vlan: entered promiscuous mode
[   66.023173][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.038566][ T5840] veth1_vlan: entered promiscuous mode
[   66.050358][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.099601][ T5840] veth0_macvtap: entered promiscuous mode
[   66.104579][ T5836] veth0_vlan: entered promiscuous mode
[   66.121451][ T5840] veth1_macvtap: entered promiscuous mode
[   66.130753][ T5836] veth1_vlan: entered promiscuous mode
[   66.152807][ T5832] veth0_vlan: entered promiscuous mode
[   66.159504][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.165744][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.183906][ T5840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.189927][ T5840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.193144][ T5840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.197034][ T5840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.206298][ T5832] veth1_vlan: entered promiscuous mode
[   66.246675][ T5836] veth0_macvtap: entered promiscuous mode
[   66.264100][ T5836] veth1_macvtap: entered promiscuous mode
[   66.317498][ T5832] veth0_macvtap: entered promiscuous mode
[   66.328462][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.356781][ T5832] veth1_macvtap: entered promiscuous mode
[   66.365292][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.372477][  T741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.377451][  T741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.379389][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.383082][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.391690][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.397363][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.433459][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.439527][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.445394][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.460641][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.489023][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.492235][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.498048][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.501045][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.529551][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.601064][  T981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.603511][  T981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.694400][  T741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.700395][  T741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.705973][  T981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.708339][  T981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.748767][  T741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.751423][  T741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.845418][ T5904] tipc: Started in network mode
[   66.847274][ T5904] tipc: Node identity ac14142a, cluster identity 4711
[   66.850787][ T5904] tipc: Enabled bearer <udp:syz2>, priority 10
[   66.910576][ T5908] netlink: 'syz.1.2': attribute type 1 has an invalid length.
[   66.980861][ T5911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   66.991694][ T5911] netlink: 'syz.0.1': attribute type 21 has an invalid length.
[   66.994346][ T5911] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1'.
[   67.002217][ T5911] netlink: 'syz.0.1': attribute type 13 has an invalid length.
[   67.010714][ T5911] netlink: 'syz.0.1': attribute type 17 has an invalid length.
[   67.492898][  T790] IPVS: starting estimator thread 0...
[   67.615381][ T5931] IPVS: using max 62 ests per chain, 148800 per kthread
[   67.617771][ T5843] Bluetooth: hci0: command tx timeout
[   67.619611][ T5843] Bluetooth: hci2: command tx timeout
[   67.621386][ T5843] Bluetooth: hci1: command tx timeout
[   67.659620][ T5938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17'.
[   67.681109][ T5940] syz_tun: entered allmulticast mode
[   67.688399][ T5939] syz_tun: left allmulticast mode
[   67.965442][   T10] tipc: Node number set to 2886997034
[   68.077767][ T5963] netlink: 24 bytes leftover after parsing attributes in process `syz.1.28'.
[   68.080662][ T5963] bond0: invalid ARP target 0.0.0.0 specified for addition
[   68.083054][ T5963] bond0: option arp_ip_target: invalid value (0)
[   68.137985][ T5965] batman_adv: batadv0: Adding interface: ip6gretap1
[   68.140568][ T5965] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.150388][ T5965] batman_adv: batadv0: Interface activated: ip6gretap1
[   68.162426][ T5966] Bluetooth: MGMT ver 1.23
[   68.275997][ T5970] netlink: 168 bytes leftover after parsing attributes in process `syz.1.32'.
[   68.376477][ T5974] netlink: 'syz.1.34': attribute type 11 has an invalid length.
[   68.379331][ T5974] netlink: 224 bytes leftover after parsing attributes in process `syz.1.34'.
[   68.726324][ T5986] netlink: 104 bytes leftover after parsing attributes in process `syz.1.40'.
[   68.974259][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'.
[   69.038991][ T6003] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.046514][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.095292][ T6008] Illegal XDP return value 4294967289 on prog  (id 7) dev N/A, expect packet loss!
[   69.498886][ T6026] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.556727][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'.
[   69.601133][ T6029] bridge_slave_1: left allmulticast mode
[   69.603429][ T6029] bridge_slave_1: left promiscuous mode
[   69.606567][ T6029] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.637996][ T6029] bridge_slave_0: left allmulticast mode
[   69.665021][ T6029] bridge_slave_0: left promiscuous mode
[   69.667474][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.695943][ T5843] Bluetooth: hci2: command tx timeout
[   69.697767][ T5843] Bluetooth: hci0: command tx timeout
[   69.699741][ T5835] Bluetooth: hci1: command tx timeout
[   69.882285][ T6034] netlink: 164 bytes leftover after parsing attributes in process `syz.0.61'.
[   70.014974][ T6040] netlink: 'syz.0.64': attribute type 5 has an invalid length.
[   70.223888][ T6056] warning: `syz.2.71' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   70.814049][ T6097] netlink: 'syz.1.90': attribute type 5 has an invalid length.
[   70.820910][ T6097] netlink: 'syz.1.90': attribute type 6 has an invalid length.
[   70.847420][ T6100] syz.2.92 uses obsolete (PF_INET,SOCK_PACKET)
[   70.979733][ T6102] Zero length message leads to an empty skb
[   71.133877][ T6102] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.247078][ T6102] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.303087][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[   71.307765][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[   71.358373][ T6102] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.418591][ T6102] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.504362][ T6102] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.513427][ T6102] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.527371][ T6102] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.539960][ T6102] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.705730][ T6135] netlink: 'syz.1.105': attribute type 11 has an invalid length.
[   71.781474][ T5843] Bluetooth: hci0: command tx timeout
[   71.781688][   T54] Bluetooth: hci2: command tx timeout
[   71.783655][ T5838] Bluetooth: hci1: command tx timeout
[   71.867583][ T6147] bridge0: port 3(ipvlan2) entered blocking state
[   71.869933][ T6147] bridge0: port 3(ipvlan2) entered disabled state
[   71.872600][ T6147] ipvlan2: entered allmulticast mode
[   71.877438][ T6147] bridge0: entered allmulticast mode
[   71.881123][ T6147] ipvlan2: left allmulticast mode
[   71.883736][ T6147] bridge0: left allmulticast mode
[   72.741983][ T6213] __nla_validate_parse: 8 callbacks suppressed
[   72.741994][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.136'.
[   72.747036][ T6213] netlink: 'syz.0.136': attribute type 30 has an invalid length.
[   72.749454][ T6213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.136'.
[   72.833171][ T6217] netlink: 24 bytes leftover after parsing attributes in process `syz.0.138'.
[   72.854440][ T6217] netlink: 24 bytes leftover after parsing attributes in process `syz.0.138'.
[   73.040247][ T6235] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   73.302301][ T6248] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   73.391851][ T6256] netlink: 'syz.2.155': attribute type 62 has an invalid length.
[   73.433473][ T6260] netlink: 'syz.1.159': attribute type 1 has an invalid length.
[   73.446954][ T6260] netlink: 224 bytes leftover after parsing attributes in process `syz.1.159'.
[   74.024222][ T6307] dvmrp0: entered allmulticast mode
[   74.356675][ T6325] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   74.860142][ T6342] xt_CT: No such helper "snmp"
[   74.974367][ T6344] delete_channel: no stack
[   75.193763][ T6369] batman_adv: batadv0: Adding interface: ip6gretap1
[   75.202099][ T6369] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.211895][ T6369] batman_adv: batadv0: Interface activated: ip6gretap1
[   75.346042][ T6377] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   75.354290][ T6377] netlink: 44 bytes leftover after parsing attributes in process `syz.2.209'.
[   76.194124][ T6425] syzkaller1: entered promiscuous mode
[   76.206831][ T6425] syzkaller1: entered allmulticast mode
[   76.330118][ T6437] tls_set_device_offload: netdev not found
[   76.430956][ T6446] netlink: 'syz.1.242': attribute type 1 has an invalid length.
[   76.437098][ T6443] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.487783][ T6446] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.513650][ T6443] veth5: entered promiscuous mode
[   76.522508][ T6443] bond1: (slave veth5): Enslaving as an active interface with an up link
[   76.528372][ T6450] bond0: (slave bond_slave_1): Releasing backup interface
[   76.537675][ T6450] bond1: (slave bond_slave_1): making interface the new active one
[   76.541552][ T6450] bond1: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.551014][ T6450] syz.1.242 (6450) used greatest stack depth: 20184 bytes left
[   76.947264][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.262'.
[   76.964829][ T6490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.262'.
[   76.974389][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'.
[   77.057670][ T6496] pimreg: entered allmulticast mode
[   77.146288][ T6499] netlink: 'syz.2.266': attribute type 11 has an invalid length.
[   77.194270][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'.
[   77.312068][ T5842] IPVS: starting estimator thread 0...
[   77.314366][ T6510] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   77.404063][ T6515] IPVS: using max 47 ests per chain, 112800 per kthread
[   78.762659][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.298'.
[   79.247752][ T6601] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   79.533338][ T6620] delete_channel: no stack
[   79.600554][ T6626] ip6erspan0: entered allmulticast mode
[   79.765488][ T6641] Set syz0 is full, maxelem 0 reached
[   80.658442][ T6680] lo speed is unknown, defaulting to 1000
[   80.662955][ T6680] lo speed is unknown, defaulting to 1000
[   80.668437][ T6680] lo speed is unknown, defaulting to 1000
[   80.931475][ T6680] infiniband syz0: set active
[   80.933607][ T6680] infiniband syz0: added lo
[   80.942247][  T790] lo speed is unknown, defaulting to 1000
[   80.990674][ T6680] RDS/IB: syz0: added
[   80.992871][ T6680] smc: adding ib device syz0 with port count 1
[   80.996102][ T6680] smc:    ib device syz0 port 1 has pnetid 
[   81.001437][  T790] lo speed is unknown, defaulting to 1000
[   81.005723][ T6680] lo speed is unknown, defaulting to 1000
[   81.169531][ T6680] lo speed is unknown, defaulting to 1000
[   81.299311][ T6680] lo speed is unknown, defaulting to 1000
[   81.680593][ T6728] netlink: 'syz.2.362': attribute type 12 has an invalid length.
[   81.887286][ T6745] smc: net device bond0 applied user defined pnetid SYZ2
[   81.890604][ T6745] netlink: 14 bytes leftover after parsing attributes in process `syz.0.371'.
[   81.973698][ T6745] smc: removing net device bond0 with user defined pnetid SYZ2
[   81.980455][ T6745] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   82.001992][ T6745] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   82.009227][ T6745] bond0 (unregistering): Released all slaves
[   82.303841][ T6775] netlink: 16 bytes leftover after parsing attributes in process `syz.0.383'.
[   82.318638][ T6777] netlink: 'syz.2.384': attribute type 11 has an invalid length.
[   82.580532][ T6800] netlink: 168 bytes leftover after parsing attributes in process `syz.1.393'.
[   82.679497][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.392'.
[   82.875913][ T6814] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   82.878153][ T5842] IPVS: starting estimator thread 0...
[   82.964935][ T6816] IPVS: using max 62 ests per chain, 148800 per kthread
[   83.373876][   T47] cfg80211: failed to load regulatory.db
[   83.704873][ T5835] Bluetooth: hci2: command 0x0405 tx timeout
[   83.770452][ T6870] netlink: 28 bytes leftover after parsing attributes in process `syz.0.422'.
[   83.829113][ T6876] netlink: 20 bytes leftover after parsing attributes in process `syz.2.426'.
[   83.870833][ T6880] netlink: 164 bytes leftover after parsing attributes in process `syz.1.427'.
[   84.040125][ T6894] pim6reg1: entered promiscuous mode
[   84.042502][ T6894] pim6reg1: entered allmulticast mode
[   84.091049][ T6897] lo speed is unknown, defaulting to 1000
[   85.333999][ T6965] syzkaller1: entered promiscuous mode
[   85.340734][ T6965] syzkaller1: entered allmulticast mode
[   85.388528][ T6968] lo speed is unknown, defaulting to 1000
[   85.580895][ T6986] netlink: 332 bytes leftover after parsing attributes in process `syz.0.470'.
[   85.591042][ T6986] netlink: 'syz.0.470': attribute type 2 has an invalid length.
[   85.594038][ T6986] netlink: 'syz.0.470': attribute type 5 has an invalid length.
[   85.656584][ T6988] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[   85.753109][ T6998] netlink: 'syz.2.473': attribute type 3 has an invalid length.
[   85.756124][ T6998] netlink: 'syz.2.473': attribute type 1 has an invalid length.
[   85.850173][ T7006] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   86.241380][ T7036] netlink: 32 bytes leftover after parsing attributes in process `syz.0.492'.
[   86.244247][ T7036] netlink: 32 bytes leftover after parsing attributes in process `syz.0.492'.
[   86.340930][ T7044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'.
[   86.354197][ T7047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.494'.
[   86.358401][ T7047] bridge_slave_1: left allmulticast mode
[   86.360692][ T7047] bridge_slave_1: left promiscuous mode
[   86.363489][ T7047] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.370746][ T7047] bridge_slave_0: left allmulticast mode
[   86.373009][ T7047] bridge_slave_0: left promiscuous mode
[   86.378118][ T7047] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.082262][ T7093] netlink: 28 bytes leftover after parsing attributes in process `syz.1.519'.
[   87.090528][ T7093] netlink: 28 bytes leftover after parsing attributes in process `syz.1.519'.
[   87.100825][ T7093] gretap0: entered promiscuous mode
[   87.105093][ T7093] gretap0: left promiscuous mode
[   87.783077][ T7141] x_tables: unsorted underflow at hook 3
[   88.334920][ T7180] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[   88.542391][ T7192] RDS: rds_bind could not find a transport for fe80::18, load rds_tcp or rds_rdma?
[   89.490621][ T7245] __nla_validate_parse: 6 callbacks suppressed
[   89.490631][ T7245] netlink: 28 bytes leftover after parsing attributes in process `syz.1.585'.
[   89.499004][ T7245] netlink: 28 bytes leftover after parsing attributes in process `syz.1.585'.
[   89.588050][ T7251] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[   89.598768][ T7251] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[   89.951246][ T7279] netlink: 52 bytes leftover after parsing attributes in process `syz.2.602'.
[   89.960723][ T7279] netlink: 52 bytes leftover after parsing attributes in process `syz.2.602'.
[   89.964048][ T7279] netlink: 52 bytes leftover after parsing attributes in process `syz.2.602'.
[   89.977862][ T7279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.602'.
[   90.043991][ T7284] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   90.049644][ T7284] macvtap1: entered allmulticast mode
[   90.051624][ T7284] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[   90.065371][ T7284] batman_adv: batadv0: Adding interface: macvtap1
[   90.067369][ T7284] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.088671][ T7284] batman_adv: batadv0: Interface activated: macvtap1
[   90.331161][ T7314] netlink: 596 bytes leftover after parsing attributes in process `syz.1.615'.
[   90.332877][ T7311] tipc: Can't bind to reserved service type 2
[   91.661914][ T7401] lo speed is unknown, defaulting to 1000
[   92.197490][ T7434] bridge0: entered promiscuous mode
[   92.222241][ T7438] netlink: 16 bytes leftover after parsing attributes in process `syz.0.675'.
[   92.470513][ T7456] netlink: 'syz.2.684': attribute type 1 has an invalid length.
[   92.495095][ T7456] 8021q: adding VLAN 0 to HW filter on device bond1
[   92.512612][ T7456] ipvlan2: entered allmulticast mode
[   92.514571][ T7456] bond1: entered allmulticast mode
[   92.528197][ T7456] bond1: (slave gretap1): making interface the new active one
[   92.531210][ T7456] gretap1: entered allmulticast mode
[   92.534507][ T7456] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   92.735476][ T7474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.692'.
[   93.048048][ T7495] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.050572][ T7495] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.146955][ T7495] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.153433][ T7495] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.249502][ T7495] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.264863][ T7495] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.271883][ T7495] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.277012][ T7495] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.332426][ T7495] batman_adv: batadv0: Interface deactivated: macvtap1
[   93.338365][ T7495] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[   93.419324][  T840] hid-generic 0005:0458:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   93.436019][ T7506] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536
[   93.552911][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.711'.
[   93.852779][ T7535] netlink: 'syz.0.721': attribute type 21 has an invalid length.
[   93.857116][ T7535] netlink: 'syz.0.721': attribute type 4 has an invalid length.
[   93.859442][ T7535] netlink: 'syz.0.721': attribute type 5 has an invalid length.
[   94.121926][ T7561] set match dimension is over the limit!
[   94.662644][ T7607] syzkaller1: entered promiscuous mode
[   94.665096][ T7607] syzkaller1: entered allmulticast mode
[   94.667162][ T7609] __nla_validate_parse: 2 callbacks suppressed
[   94.667170][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.756'.
[   95.057587][ T7623] netlink: 28 bytes leftover after parsing attributes in process `syz.1.763'.
[   95.378231][ T7652] netlink: 'syz.2.772': attribute type 1 has an invalid length.
[   95.562474][ T7667] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.779'.
[   95.657428][ T7673] vlan2: entered promiscuous mode
[   95.659518][ T7673] bond0: entered promiscuous mode
[   95.667970][ T7673] bond_slave_0: entered promiscuous mode
[   95.670435][ T7673] bond_slave_1: entered promiscuous mode
[   95.850666][ T7687] xt_ecn: cannot match TCP bits for non-tcp packets
[   96.180966][ T7708] netlink: 'syz.2.799': attribute type 4 has an invalid length.
[   96.200778][ T7708] netlink: 'syz.2.799': attribute type 4 has an invalid length.
[   96.403967][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.803'.
[   96.748980][ T7750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.816'.
[   96.822935][ T7752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.819'.
[   96.842400][ T7754] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   97.368741][ T7792] netlink: 'syz.0.837': attribute type 3 has an invalid length.
[   97.612565][ T7807] netlink: 16 bytes leftover after parsing attributes in process `syz.2.844'.
[   97.799034][ T7822] netlink: 'syz.0.852': attribute type 3 has an invalid length.
[   97.856138][ T7824] tun0: tun_chr_ioctl cmd 1074025677
[   97.858012][ T7824] tun0: linktype set to 768
[   97.887302][ T7828] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   97.894836][ T7830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   98.248524][ T7858] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[   98.508530][ T7873] lo speed is unknown, defaulting to 1000
[   98.566786][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.877'.
[   98.577405][ T7877] hsr_slave_0: left promiscuous mode
[   98.584873][ T7877] hsr_slave_1: left promiscuous mode
[   98.728757][ T7879] lo speed is unknown, defaulting to 1000
[   99.224620][ T7899] netlink: 24 bytes leftover after parsing attributes in process `syz.1.886'.
[   99.605192][ T7919] netlink: 16 bytes leftover after parsing attributes in process `syz.2.895'.
[   99.700232][ T7925] netlink: 'syz.1.898': attribute type 1 has an invalid length.
[   99.906573][ T7937] lo speed is unknown, defaulting to 1000
[  100.081352][ T7954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.911'.
[  100.086729][ T7954] netlink: 64 bytes leftover after parsing attributes in process `syz.1.911'.
[  100.090441][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'.
[  100.875237][ T8008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.933'.
[  101.119722][ T8029] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  102.412278][ T8154] netlink: 16 bytes leftover after parsing attributes in process `syz.1.967'.
[  102.425814][ T8154] netlink: 16 bytes leftover after parsing attributes in process `syz.1.967'.
[  102.684867][ T8172] IPVS: persistence engine module ip_vs_pe_ not found
[  102.837092][ T8193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.985'.
[  102.839955][ T8193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.985'.
[  103.209685][ T8234] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1005'.
[  103.213292][ T8234] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1005'.
[  103.318058][    C0] Unknown status report in ack skb
[  103.921253][ T8295] lo speed is unknown, defaulting to 1000
[  103.959448][ T8300] netlink: 'syz.2.1037': attribute type 14 has an invalid length.
[  103.963616][ T8300] netlink: 'syz.2.1037': attribute type 13 has an invalid length.
[  104.768168][ T8332] netlink: 'syz.1.1050': attribute type 2 has an invalid length.
[  104.781023][ T8332] netlink: 'syz.1.1050': attribute type 8 has an invalid length.
[  104.807109][ T8334] bpf setsockopt: ignoring program buffer with optlen=65458 (max_optlen=4096)
[  105.043808][ T8359] erspan0: entered promiscuous mode
[  105.400644][ T8389] lo speed is unknown, defaulting to 1000
[  105.969399][ T8418] bond2: entered promiscuous mode
[  105.971154][ T8418] bond2: entered allmulticast mode
[  105.973004][ T8418] 8021q: adding VLAN 0 to HW filter on device bond2
[  106.079009][ T8423] netlink: 'syz.0.1087': attribute type 1 has an invalid length.
[  106.081454][ T8423] netlink: 'syz.0.1087': attribute type 4 has an invalid length.
[  106.107154][ T8425] __nla_validate_parse: 7 callbacks suppressed
[  106.107177][ T8425] netlink: 364 bytes leftover after parsing attributes in process `syz.1.1089'.
[  106.113244][ T8425] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  106.115776][ T8423] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1087'.
[  106.329772][ T8442] netlink: 'syz.0.1095': attribute type 3 has an invalid length.
[  106.698466][ T8449] lo speed is unknown, defaulting to 1000
[  107.373521][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1104'.
[  107.378688][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1104'.
[  107.477612][ T8477] syzkaller0: entered promiscuous mode
[  107.479702][ T8477] syzkaller0: entered allmulticast mode
[  107.718917][ T8502] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1121'.
[  107.987417][ T8533] netlink: 'syz.0.1133': attribute type 1 has an invalid length.
[  108.104611][ T8543] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.363792][ T8567] netlink: 'syz.0.1150': attribute type 11 has an invalid length.
[  108.418657][ T8569] netlink: 'syz.1.1151': attribute type 1 has an invalid length.
[  108.423097][ T8571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1152'.
[  108.453080][ T8569] bond3: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  108.458167][ T5709] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  108.458926][ T8569] 8021q: adding VLAN 0 to HW filter on device bond3
[  108.493066][ T8569] veth5: entered promiscuous mode
[  108.498644][ T8569] bond3: (slave veth5): Enslaving as a backup interface with a down link
[  108.559001][ T8576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1154'.
[  108.596260][ T5709] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  108.877020][ T8593] bond4: (slave gretap1): making interface the new active one
[  108.880800][ T8593] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  108.899547][ T8593] syz.1.1162 (8593) used greatest stack depth: 20136 bytes left
[  109.473637][ T8630] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1179'.
[  109.513704][ T8632] bridge2: entered promiscuous mode
[  109.515534][ T8632] bridge2: entered allmulticast mode
[  109.521521][ T8632] team0: Port device bridge2 added
[  109.525345][ T8632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1180'.
[  109.564351][ T8636] netlink: zone id is out of range
[  109.571124][ T8636] netlink: zone id is out of range
[  109.573060][ T8636] netlink: set zone limit has 4 unknown bytes
[  109.611769][ T8632] team0 (unregistering): Port device team_slave_0 removed
[  109.615619][ T8632] team0 (unregistering): Port device team_slave_1 removed
[  109.622220][ T8632] team0 (unregistering): Port device bridge2 removed
[  109.699941][ T8644] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1186'.
[  109.726778][ T8646] xt_bpf: check failed: parse error
[  110.010699][ T8667] lo speed is unknown, defaulting to 1000
[  110.013163][ T8667] lo speed is unknown, defaulting to 1000
[  110.018572][ T8667] lo speed is unknown, defaulting to 1000
[  110.026175][ T8667] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  110.047036][ T8667] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  110.074268][ T8667] lo speed is unknown, defaulting to 1000
[  110.080221][ T8667] lo speed is unknown, defaulting to 1000
[  110.084032][ T8667] lo speed is unknown, defaulting to 1000
[  111.188344][ T8736] __nla_validate_parse: 3 callbacks suppressed
[  111.188357][ T8736] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1224'.
[  111.215280][ T5838] Bluetooth: hci2: command 0x0405 tx timeout
[  111.233870][ T8739] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.1225'.
[  111.887238][ T8785] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.943691][ T8789] ipt_ECN: cannot use operation on non-tcp rule
[  112.123514][ T8789] syzkaller0: entered allmulticast mode
[  112.155752][ T8789] syzkaller0 (unregistering): left allmulticast mode
[  112.284391][ T8801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1248'.
[  112.330495][ T8801] bridge3: port 1(ip6gretap1) entered blocking state
[  112.337046][ T8801] bridge3: port 1(ip6gretap1) entered disabled state
[  112.339339][ T8801] ip6gretap1: entered allmulticast mode
[  112.342101][ T8801] ip6gretap1: entered promiscuous mode
[  112.349049][ T8806] validate_nla: 1 callbacks suppressed
[  112.349112][ T8806] netlink: 'syz.2.1250': attribute type 64 has an invalid length.
[  112.354829][ T8806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1250'.
[  112.518837][ T8813] veth7: entered promiscuous mode
[  112.521188][ T8813] bridge3: port 2(veth7) entered blocking state
[  112.523686][ T8813] bridge3: port 2(veth7) entered disabled state
[  112.533477][ T8813] veth7: entered allmulticast mode
[  112.739351][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1260'.
[  112.750561][ T8830] dummy0: entered promiscuous mode
[  112.753153][ T8830] macvtap1: entered promiscuous mode
[  112.756148][ T8830] macvtap1: entered allmulticast mode
[  112.758395][ T8830] dummy0: entered allmulticast mode
[  113.452892][ T8830] dummy0: left allmulticast mode
[  113.462525][ T8830] dummy0: left promiscuous mode
[  113.785350][ T8863] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1276'.
[  114.034218][ T8890] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  114.123534][ T8896] block nbd1: not configured, cannot reconfigure
[  114.129345][ T8896] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1292'.
[  114.132164][ T8896] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1292'.
[  114.241693][ T8912] netlink: 'syz.1.1300': attribute type 2 has an invalid length.
[  114.279774][ T8918] netlink: 'syz.1.1303': attribute type 1 has an invalid length.
[  114.745950][ T8970] rdma_rxe: rxe_newlink: failed to add syzkaller0
[  114.865222][ T8980] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1332'.
[  115.001720][ T8994] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1339'.
[  115.026159][ T8998] netlink: 'syz.2.1340': attribute type 11 has an invalid length.
[  115.091084][ T9004] erspan0: entered promiscuous mode
[  115.097802][ T9004] batman_adv: batadv0: Adding interface: macvlan0
[  115.105056][ T9004] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.126358][ T9004] batman_adv: batadv0: Interface activated: macvlan0
[  115.556613][ T9032] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  115.619796][ T9032] bond0: (slave bond_slave_0): Releasing backup interface
[  115.638304][ T9032] bond_slave_0: left promiscuous mode
[  115.641760][ T9038] netlink: 'syz.2.1355': attribute type 10 has an invalid length.
[  115.649392][ T9032] bond0: (slave bond_slave_1): Releasing backup interface
[  115.653343][ T9032] bond_slave_1: left promiscuous mode
[  115.664262][ T9032] team0: Port device team_slave_0 removed
[  115.671994][ T9032] team0: Port device team_slave_1 removed
[  115.677432][ T9032] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.680066][ T9032] batman_adv: batadv0: Removing interface: batadv_slave_0
[  115.683644][ T9032] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.686708][ T9032] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.694271][ T9032] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  115.698260][ T9032] batman_adv: batadv0: Removing interface: ip6gretap1
[  115.702534][ T9032] bond1: (slave gretap1): Releasing active interface
[  115.705565][ T9032] gretap1: left allmulticast mode
[  115.710485][ T9032] batman_adv: batadv0: Interface deactivated: macvlan0
[  115.712543][ T9032] batman_adv: batadv0: Removing interface: macvlan0
[  115.722721][ T9038] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  115.729259][ T9038] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.733999][ T9038] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  115.738098][ T9038] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  115.843066][ T9050] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  116.669324][ T9098] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  116.673233][ T9098] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  116.782474][ T9110] __nla_validate_parse: 6 callbacks suppressed
[  116.782499][ T9110] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1389'.
[  116.790309][ T9110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1389'.
[  116.946386][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1397'.
[  117.049508][ T9139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1403'.
[  117.456316][ T9171] tun0: tun_chr_ioctl cmd 1074025681
[  117.743607][ T9195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1425'.
[  117.748216][ T9195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1425'.
[  118.498404][ T9233] netlink: 'syz.2.1445': attribute type 1 has an invalid length.
[  118.501382][ T9233] netlink: 'syz.2.1445': attribute type 4 has an invalid length.
[  118.504374][ T9233] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1445'.
[  118.567565][ T9235] ieee802154 phy0 wpan0: encryption failed: -90
[  118.672499][ T9247] netlink: 'syz.2.1451': attribute type 2 has an invalid length.
[  118.675353][ T9247] netlink: 'syz.2.1451': attribute type 8 has an invalid length.
[  118.678498][ T9247] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1451'.
[  118.712939][ T9251] ksmbd: Unknown IPC event: 3, ignore.
[  118.865719][ T9265] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1459'.
[  118.869344][ T9265] openvswitch: netlink: Flow key attr not present in new flow.
[  118.904186][ T9266] lo speed is unknown, defaulting to 1000
[  119.094022][ T9266] lo speed is unknown, defaulting to 1000
[  119.568040][ T9299] v: renamed from ip6_vti0 (while UP)
[  119.648961][ T9308] bond0: Unable to set up delay as MII monitoring is disabled
[  120.564648][ T9340] tipc: Failed to remove unknown binding: 66,1,1/2886997034:176111953/176111955
[  120.577660][ T9340] tipc: Failed to remove unknown binding: 66,1,1/2886997034:176111953/176111955
[  120.580881][ T9340] tipc: Failed to remove unknown binding: 66,1,1/2886997034:176111953/176111955
[  120.621342][ T9342] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1493'.
[  120.626974][ T9342] netlink: 'syz.2.1493': attribute type 1 has an invalid length.
[  121.281468][ T9375] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.301455][ T9375] bond0: (slave rose0): Enslaving as an active interface with an up link
[  121.306017][ T5835] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  121.309230][ T9322] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  122.227805][ T9436] netlink: 'syz.0.1526': attribute type 11 has an invalid length.
[  122.689486][ T9452] netlink: 'syz.0.1540': attribute type 11 has an invalid length.
[  122.692676][ T9452] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1540'.
[  123.010665][ T9461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1537'.
[  123.059151][ T9467] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.062698][ T9467] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.066070][ T9467] batman_adv: batadv0: Removing interface: macvtap1
[  123.525624][ T9487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1544'.
[  123.529299][ T9487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1544'.
[  123.532700][ T9487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1544'.
[  123.555668][ T9487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1544'.
[  123.559070][ T9487] netlink: 'syz.1.1544': attribute type 6 has an invalid length.
[  123.707539][ T9497] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1548'.
[  124.467696][ T9549] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1570'.
[  124.573005][ T9557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1574'.
[  124.621588][ T9557] 8021q: adding VLAN 0 to HW filter on device bond3
[  124.653600][ T9557] 8021q: adding VLAN 0 to HW filter on device bond3
[  124.657990][ T9557] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address
[  124.663548][ T9557] bond3: (slave vxcan1): Error -95 calling set_mac_address
[  124.718725][ T9564] tc_dump_action: action bad kind
[  124.735633][ T9557] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1574'.
[  124.835183][ T5864] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[  126.110140][ T9638] sock: sock_timestamping_bind_phc: sock not bind to device
[  126.654121][ T9668] veth0_to_team: entered promiscuous mode
[  126.656613][ T9668] veth0_to_team: entered allmulticast mode
[  126.751146][ T9672] netlink: 'syz.2.1626': attribute type 5 has an invalid length.
[  126.967039][ T9686] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  127.003650][ T9686] bond0: (slave bond_slave_0): Releasing backup interface
[  127.009512][ T9686] bond1: (slave bond_slave_1): Releasing active interface
[  127.021859][ T9686] team0: Port device team_slave_0 removed
[  127.032123][ T9686] team0: Port device team_slave_1 removed
[  127.037242][ T9686] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.040482][ T9686] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.040561][ T9689] netlink: 'syz.1.1632': attribute type 10 has an invalid length.
[  127.047881][ T9686] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  127.050656][ T9686] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.061809][ T9686] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  127.064545][ T9686] batman_adv: batadv0: Removing interface: ip6gretap1
[  127.071471][ T9686] bond3: (slave ip6gretap2): Removing an active aggregator
[  127.076285][ T9686] bond3: (slave ip6gretap2): Releasing backup interface
[  127.078720][ T9686] bond3: (slave ip6gretap2): the permanent HWaddr of slave - 32:4b:e7:6d:e7:f8 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  127.099800][ T9686] bond3: (slave veth5): Releasing backup interface
[  127.107454][ T9686] bond4: (slave gretap1): Releasing active interface
[  127.120152][ T5897] lo speed is unknown, defaulting to 1000
[  127.136206][ T9689] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  127.153535][ T9689] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.417022][ T9709] netlink: 'syz.0.1644': attribute type 3 has an invalid length.
[  127.731075][ T9736] openvswitch: netlink: IP tunnel dst address not specified
[  127.909460][ T9747] __nla_validate_parse: 8 callbacks suppressed
[  127.909473][ T9747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1661'.
[  128.041432][ T9751] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1663'.
[  128.247831][ T9770] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1671'.
[  128.250943][ T9770] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1671'.
[  128.283673][ T9772] !: renamed from dummy0 (while UP)
[  128.371033][ T9779] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  128.505000][ T9779] lo speed is unknown, defaulting to 1000
[  128.690019][ T9796] block nbd2: not configured, cannot reconfigure
[  128.693092][ T9796] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1674'.
[  128.696098][ T9796] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1674'.
[  128.752758][ T9779] lo speed is unknown, defaulting to 1000
[  128.810352][ T9807] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1677'.
[  128.923964][ T9821] smc: net device bond0 applied user defined pnetid SYZ2
[  129.124893][ T9844] netlink: 'syz.2.1689': attribute type 8 has an invalid length.
[  129.394934][ T9866] netlink: 'syz.0.1692': attribute type 1 has an invalid length.
[  129.436382][ T9869] netlink: 'syz.0.1692': attribute type 1 has an invalid length.
[  129.440360][ T5864] nci: nci_ntf_packet: unknown ntf opcode 0x206
[  129.454156][ T9866] smc: adding net device bond0 with user defined pnetid SYZ2
[  129.541858][ T9875] netlink: 'syz.0.1695': attribute type 4 has an invalid length.
[  129.549455][ T9875] netlink: 'syz.0.1695': attribute type 4 has an invalid length.
[  129.558113][   T47] lo speed is unknown, defaulting to 1000
[  129.563362][   T47] syz2: Port: 1 Link ACTIVE
[  130.317712][ T9913] sctp: [Deprecated]: syz.1.1703 (pid 9913) Use of int in max_burst socket option.
[  130.317712][ T9913] Use struct sctp_assoc_value instead
[  130.378823][ T9918] xt_CT: You must specify a L4 protocol and not use inversions on it
[  130.439186][ T9922] IPv6: sit2: Disabled Multicast RS
[  130.519030][ T9927] xt_TCPMSS: Only works on TCP SYN packets
[  130.563030][ T9930] pim6reg: entered allmulticast mode
[  130.582323][ T9930] pim6reg: left allmulticast mode
[  130.607679][ T9924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1709'.
[  130.862110][ T9957] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1721'.
[  130.973172][   T33] audit: type=1800 audit(1752677597.070:2): pid=9967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1727" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=2930 res=0 errno=0
[  130.990726][   T33] audit: type=1804 audit(1752677597.090:3): pid=9967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1727" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=2930 res=1 errno=0
[  131.321813][ T9994] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1740'.
[  131.659450][T10010] tipc: Started in network mode
[  131.661212][T10010] tipc: Node identity 080211000001, cluster identity 4711
[  131.663960][T10010] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.671948][T10010] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  131.676800][T10010] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  132.022972][T10035] tipc: Started in network mode
[  132.027182][T10035] tipc: Node identity 080211000001, cluster identity 4711
[  132.029759][T10035] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.034500][T10035] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  132.037612][T10035] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  132.055256][T10035] tipc: Resetting bearer <eth:syzkaller0>
[  132.748231][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  132.753027][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  132.786378][  T840] tipc: Node number set to 134418688
[  132.795849][T10078] syz_tun: entered allmulticast mode
[  132.810279][T10078] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  133.019684][T10094] __nla_validate_parse: 10 callbacks suppressed
[  133.019700][T10094] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1786'.
[  133.035387][T10094] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1786'.
[  133.045838][   T47] tipc: Node number set to 134418688
[  133.418700][T10113] lo speed is unknown, defaulting to 1000
[  133.635185][T10113] lo speed is unknown, defaulting to 1000
[  133.861636][T10099] lo speed is unknown, defaulting to 1000
[  134.080715][T10099] lo speed is unknown, defaulting to 1000
[  134.139480][T10136] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1797'.
[  134.145807][T10136] openvswitch: netlink: Flow key attr not present in new flow.
[  134.364153][T10139] netlink: 'syz.2.1799': attribute type 10 has an invalid length.
[  134.599578][T10155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1802'.
[  134.818640][T10166] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  134.869691][T10170] lo speed is unknown, defaulting to 1000
[  135.025854][T10170] lo speed is unknown, defaulting to 1000
[  135.178036][T10192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1819'.
[  135.268487][T10201] Bluetooth: MGMT ver 1.23
[  135.417538][T10201] ip6gretap0: entered promiscuous mode
[  135.421962][T10201] ip6gretap0: left promiscuous mode
[  135.431344][T10211] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1826'.
[  135.856748][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1838'.
[  135.927330][T10252] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1843'.
[  135.931104][T10252] netlink: 'syz.0.1843': attribute type 1 has an invalid length.
[  136.097741][T10265] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1849'.
[  136.332488][T10281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1856'.
[  136.369991][T10283] xt_cgroup: path and classid specified
[  136.630759][T10297] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  136.732945][T10305] ieee802154 phy0 wpan0: encryption failed: -22
[  136.792832][T10309] netlink: 'syz.2.1870': attribute type 13 has an invalid length.
[  136.796958][T10309] netlink: 'syz.2.1870': attribute type 17 has an invalid length.
[  136.799582][T10309] netlink: 'syz.2.1870': attribute type 27 has an invalid length.
[  136.844277][T10309] lo speed is unknown, defaulting to 1000
[  136.892678][T10312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  136.952068][T10312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  136.973044][T10309] lo speed is unknown, defaulting to 1000
[  137.011076][T10314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.666569][T10360] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  137.749337][T10368] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  138.137809][T10388] __nla_validate_parse: 5 callbacks suppressed
[  138.137829][T10388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1903'.
[  138.187538][T10388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1903'.
[  138.243160][T10390] netlink: 'syz.2.1904': attribute type 11 has an invalid length.
[  138.247397][T10390] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1904'.
[  138.374416][T10395] netlink: 'syz.1.1906': attribute type 1 has an invalid length.
[  138.434625][T10404] bond5: entered promiscuous mode
[  138.440843][T10404] bond5: entered allmulticast mode
[  138.447614][T10404] 8021q: adding VLAN 0 to HW filter on device bond5
[  138.488766][T10395] bridge0: entered promiscuous mode
[  138.504895][T10395] bridge0: entered allmulticast mode
[  138.507866][T10395] bond5: (slave bridge0): Enslaving as a backup interface with an up link
[  138.545022][ T5925] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  138.654978][ T5709] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  138.880388][T10395] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.883074][T10395] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.886131][T10395] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.888822][T10395] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.948119][T10395] tipc: Resetting bearer <eth:syzkaller0>
[  138.962521][  T840] lo speed is unknown, defaulting to 1000
[  138.965138][  T840] syz0: Port: 1 Link DOWN
[  139.012720][  T840] lo speed is unknown, defaulting to 1000
[  140.135431][T10500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1945'.
[  140.163494][T10500] 8021q: adding VLAN 0 to HW filter on device bond4
[  140.178739][T10500] macvlan1: entered promiscuous mode
[  140.180480][T10500] macvlan1: entered allmulticast mode
[  140.183046][T10500] bond4: (slave macvlan1): Opening slave failed
[  140.464432][T10523] No such timeout policy "syz0"
[  140.752295][T10547] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1967'.
[  140.849134][T10554] tc_dump_action: action bad kind
[  141.415176][T10615] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2000'.
[  141.422817][T10616] IPVS: Error connecting to the multicast addr
[  141.480893][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2003'.
[  142.106643][T10647] lo speed is unknown, defaulting to 1000
[  142.156284][T10652] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  142.243155][T10647] lo speed is unknown, defaulting to 1000
[  142.394269][T10667] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  142.533312][T10679] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2030'.
[  142.565772][T10679] bond0 (unregistering): Released all slaves
[  143.029529][T10707] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2043'.
[  143.062396][T10709] netlink: 'syz.2.2044': attribute type 7 has an invalid length.
[  143.403781][T10717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2047'.
[  143.409013][T10717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2047'.
[  143.420303][T10717] veth0_to_team: entered promiscuous mode
[  143.422713][T10717] veth0_to_team: entered allmulticast mode
[  143.426042][T10717] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2047'.
[  143.498414][T10722] tipc: Enabling of bearer <5dp:s> rejected, media not registered
[  143.504855][T10723] netlink: 'syz.1.2051': attribute type 1 has an invalid length.
[  143.743331][T10747] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2064'.
[  144.353611][T10794] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  144.486402][T10802] xt_socket: unknown flags 0xd0
[  144.929486][T10843] netlink: 'syz.1.2110': attribute type 1 has an invalid length.
[  145.087655][T10860] netlink: 'syz.1.2116': attribute type 64 has an invalid length.
[  145.090832][T10860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2116'.
[  145.211658][T10870] netlink: 'syz.2.2120': attribute type 3 has an invalid length.
[  145.407731][T10887] netlink: 'syz.2.2128': attribute type 21 has an invalid length.
[  145.411914][T10887] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2128'.
[  145.415244][T10887] netlink: 'syz.2.2128': attribute type 5 has an invalid length.
[  145.417807][T10887] netlink: 'syz.2.2128': attribute type 6 has an invalid length.
[  145.420464][T10887] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2128'.
[  146.928410][T10983] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2171'.
[  146.981191][T10990] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2174'.
[  146.995301][T10990] netlink: 'syz.1.2174': attribute type 7 has an invalid length.
[  146.998474][T10990] netlink: 'syz.1.2174': attribute type 8 has an invalid length.
[  147.007315][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2174'.
[  147.016772][T10990] gretap0: entered promiscuous mode
[  147.020113][T10990] batadv_slave_1: entered promiscuous mode
[  147.023576][T10990] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  147.029020][T10990] Cannot create hsr debugfs directory
[  147.031512][T10990] hsr0: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network
[  147.037517][T10990] hsr0: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[  147.167369][T10996] lo speed is unknown, defaulting to 1000
[  147.492636][T10996] lo speed is unknown, defaulting to 1000
[  148.107634][T11043] validate_nla: 4 callbacks suppressed
[  148.107649][T11043] netlink: 'syz.1.2195': attribute type 1 has an invalid length.
[  148.200847][T11047] netlink: 'syz.2.2200': attribute type 1 has an invalid length.
[  148.314410][T11047] 8021q: adding VLAN 0 to HW filter on device bond5
[  148.341601][T11052] bond5: (slave gretap2): making interface the new active one
[  148.349380][T11052] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  148.382985][T11052] syz.2.2200 (11052) used greatest stack depth: 18992 bytes left
[  148.633821][T11076] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  148.684350][T11083] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  148.809455][T11094] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  148.833670][T11094] tipc: Resetting bearer <eth:syzkaller0>
[  148.884589][T11100] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[  148.992767][T11109] __nla_validate_parse: 3 callbacks suppressed
[  148.992788][T11109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2230'.
[  149.211455][T11127] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2238'.
[  149.333487][T11141] pim6reg: entered allmulticast mode
[  149.338524][T11141] pim6reg: left allmulticast mode
[  149.411779][T11148] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2249'.
[  149.428435][T11148] tc_dump_action: action bad kind
[  149.711540][T11177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2260'.
[  150.497309][T11191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2268'.
[  150.559429][T11195] netlink: 324 bytes leftover after parsing attributes in process `syz.1.2270'.
[  150.930613][T11211] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2278'.
[  150.933393][T11211] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2278'.
[  151.106380][T11228] veth1_to_bond: entered allmulticast mode
[  151.110725][T11225] xt_CT: No such helper "pptp"
[  151.117605][T11225] --map-set only usable from mangle table
[  151.119598][T11228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2285'.
[  151.175834][T11228] veth1_to_bond (unregistering): left allmulticast mode
[  151.278821][T11237] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  151.717187][T11270] pimreg: entered allmulticast mode
[  151.724537][T11270] pimreg: left allmulticast mode
[  151.758396][T11273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2301'.
[  152.739773][   T12] bond0: (slave wlan1): interface is now down
[  152.887365][   T12] bond0: (slave wlan1): interface is now down
[  152.891928][T11353] netlink: 'syz.2.2338': attribute type 3 has an invalid length.
[  152.894012][   T12] bond0: now running without any active interface!
[  153.383413][T11392] !: renamed from dummy0
[  153.448084][T11397] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  153.467710][T11397] lo speed is unknown, defaulting to 1000
[  153.795394][T11397] lo speed is unknown, defaulting to 1000
[  154.186682][T11440] __nla_validate_parse: 5 callbacks suppressed
[  154.186694][T11440] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2367'.
[  154.361186][T11456] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2374'.
[  154.373376][T11456] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2374'.
[  154.391399][T11456] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2374'.
[  154.394394][T11456] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2374'.
[  154.400149][T11456] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2374'.
[  154.405763][T11456] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2374'.
[  154.408724][T11456] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2374'.
[  154.411665][T11456] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2374'.
[  154.416055][T11456] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2374'.
[  154.463830][T11464] raw_sendmsg: syz.0.2379 forgot to set AF_INET. Fix it!
[  154.694628][T11488] netlink: 'syz.0.2391': attribute type 30 has an invalid length.
[  154.703734][T11488] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  154.708004][T11488] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  154.710863][T11488] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  154.713538][T11488] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  154.722421][T11488] netlink: 'syz.0.2391': attribute type 30 has an invalid length.
[  154.759132][T11490] team0: Mode "" not found
[  154.938236][T11506] netlink: 'syz.1.2399': attribute type 2 has an invalid length.
[  155.504296][T11547] bond5: (slave bridge0): Removing an active aggregator
[  155.508928][T11547] bond5: (slave bridge0): Releasing backup interface
[  155.512657][T11547] bridge0 (unregistering): left promiscuous mode
[  155.516155][T11547] bridge0 (unregistering): left allmulticast mode
[  155.790999][T11572] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  156.054206][T11599] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.075983][T11599] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  156.085999][T11599] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  156.107676][T11599] tipc: Resetting bearer <eth:syzkaller0>
[  156.254525][T11622] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  156.308672][T11626] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  156.635950][T11658] nbd2: detected capacity change from 0 to 63
[  156.646772][T11668] block nbd2: NBD_DISCONNECT
[  156.650626][T11668] block nbd2: Disconnected due to user request.
[  156.653892][T11668] block nbd2: shutting down sockets
[  156.664280][T11662] netlink: 'syz.0.2465': attribute type 13 has an invalid length.
[  156.667315][T11662] netlink: 'syz.0.2465': attribute type 17 has an invalid length.
[  156.670057][    C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  156.670141][    C1] Buffer I/O error on dev nbd2, logical block 0, async page read
[  156.670198][    C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  156.670208][    C1] Buffer I/O error on dev nbd2, logical block 1, async page read
[  156.670274][    C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  156.670284][    C1] Buffer I/O error on dev nbd2, logical block 2, async page read
[  156.670323][    C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  156.670333][    C1] Buffer I/O error on dev nbd2, logical block 3, async page read
[  156.675674][T11263] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  156.684446][T11662] gretap0: entered promiscuous mode
[  156.707811][T11263] Buffer I/O error on dev nbd2, logical block 0, async page read
[  156.711044][T11263] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  156.724168][T11263] Buffer I/O error on dev nbd2, logical block 1, async page read
[  156.728359][T11263] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  156.731965][T11670] xt_CT: No such helper "snmp"
[  156.748284][T11263] Buffer I/O error on dev nbd2, logical block 2, async page read
[  156.751741][T11263] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  156.758824][T11263] Buffer I/O error on dev nbd2, logical block 3, async page read
[  156.761820][T11662] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  156.762649][T11263] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  156.786539][T11263] Buffer I/O error on dev nbd2, logical block 0, async page read
[  156.791753][T11263] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  156.804983][T11263] Buffer I/O error on dev nbd2, logical block 1, async page read
[  156.810837][T11263] ldm_validate_partition_table(): Disk read failed.
[  156.826523][T11263] Dev nbd2: unable to read RDB block 0
[  156.830107][T11263]  nbd2: unable to read partition table
[  156.849988][T11263] ldm_validate_partition_table(): Disk read failed.
[  156.877666][T11263] Dev nbd2: unable to read RDB block 0
[  156.881160][T11263]  nbd2: unable to read partition table
[  157.310123][T11722] netlink: 'syz.0.2492': attribute type 4 has an invalid length.
[  157.339576][T11715] lo speed is unknown, defaulting to 1000
[  157.483210][T11715] lo speed is unknown, defaulting to 1000
[  157.674548][T11754] netlink: 'syz.1.2507': attribute type 1 has an invalid length.
[  157.728861][T11754] 8021q: adding VLAN 0 to HW filter on device bond6
[  157.793841][T11760] bond6: (slave gretap2): making interface the new active one
[  157.809155][T11760] bond6: (slave gretap2): Enslaving as an active interface with an up link
[  158.604132][T11826] xt_cgroup: path and classid specified
[  158.725592][T11834] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.747148][T11841] 8021q: adding VLAN 0 to HW filter on device batadv1
[  158.751289][T11841] team0: Port device batadv1 added
[  158.821644][T11834] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.892708][T11834] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.979055][T11834] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.010950][T11861] xt_hashlimit: size too large, truncated to 1048576
[  159.013204][T11861] xt_hashlimit: max too large, truncated to 1048576
[  159.045947][T11834] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.058848][T11834] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.070078][T11834] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.080407][T11834] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.185727][T11871] netlink: 'syz.0.2560': attribute type 11 has an invalid length.
[  159.332282][T11883] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  159.367815][T11884] __nla_validate_parse: 26 callbacks suppressed
[  159.367830][T11884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2564'.
[  159.649710][T11898] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2574'.
[  160.601217][T11955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2599'.
[  161.279639][T11999] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.638943][T12017] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.951140][T12033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2635'.
[  162.237714][T12043] syzkaller1: entered promiscuous mode
[  162.239901][T12043] syzkaller1: entered allmulticast mode
[  162.347942][T12049] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.380146][T12053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2645'.
[  162.398998][T12053] 8021q: adding VLAN 0 to HW filter on device bond7
[  162.412025][T12053] macvlan0: entered promiscuous mode
[  162.414096][T12053] macvlan0: entered allmulticast mode
[  162.416764][T12053] bond7: (slave macvlan0): Opening slave failed
[  163.601862][T12117] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2676'.
[  163.701455][T12126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2681'.
[  163.753998][T12130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2683'.
[  163.757348][T12130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2683'.
[  163.760251][T12130] netlink: 'syz.0.2683': attribute type 11 has an invalid length.
[  164.346389][T12152] netlink: 'syz.1.2691': attribute type 10 has an invalid length.
[  164.949944][T12180] netlink: 'syz.0.2708': attribute type 7 has an invalid length.
[  165.070243][T12191] No such timeout policy "syz0"
[  165.297271][T12214] ip6t_srh: unknown srh invflags 4449
[  165.492066][T12221] netlink: 'syz.1.2723': attribute type 1 has an invalid length.
[  165.495288][T12221] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2723'.
[  165.594210][T12224] xt_CT: No such helper "snmp"
[  165.632080][T12228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2724'.
[  165.708489][T12232] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2726'.
[  166.079599][T12237] netlink: 'syz.2.2728': attribute type 12 has an invalid length.
[  166.280698][T12245] veth0_to_bridge: entered promiscuous mode
[  166.284595][T12244] veth0_to_bridge: left promiscuous mode
[  166.803427][T12279] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2747'.
[  166.946119][T12289] nbd: must specify an index to disconnect
[  166.971139][T12293] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  167.051905][T12297] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  167.058620][T12299] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2757'.
[  167.063287][T12297] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  167.072040][T12301] tipc: Enabling of bearer <5dp:s> rejected, media not registered
[  167.429223][T12335] bridge0: entered promiscuous mode
[  167.744230][T12364] x_tables: unsorted entry at hook 1
[  168.117010][T12374] xt_socket: unknown flags 0xd0
[  168.460519][T12397] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2803'.
[  168.464591][T12397] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2803'.
[  168.643812][T12409] netlink: 'syz.2.2809': attribute type 4 has an invalid length.
[  168.651643][T12409] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2809'.
[  168.694077][T12416] ieee802154 phy1 wpan1: encryption failed: -22
[  168.887412][T12435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2821'.
[  169.263878][T12475] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  169.280207][T12475] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  169.359070][T12488] vlan0: entered promiscuous mode
[  169.361510][T12488] bond0: entered promiscuous mode
[  169.363719][T12488] vlan0: entered allmulticast mode
[  169.367989][T12488] bond0: entered allmulticast mode
[  169.400872][T12491] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2847'.
[  169.561015][T12508] netlink: 'syz.2.2856': attribute type 1 has an invalid length.
[  169.563684][T12508] netlink: 'syz.2.2856': attribute type 10 has an invalid length.
[  169.602750][T12512] netlink: 'syz.2.2857': attribute type 1 has an invalid length.
[  170.078416][T12560] lo: entered promiscuous mode
[  170.080768][T12560] lo: entered allmulticast mode
[  170.091365][   T47] lo speed is unknown, defaulting to 1000
[  170.093630][   T47] syz1: Port: 1 Link ACTIVE
[  170.096254][   T47] lo speed is unknown, defaulting to 1000
[  170.284547][T12581] xt_CT: You must specify a L4 protocol and not use inversions on it
[  170.462761][T12601] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  170.759963][T12638] __nla_validate_parse: 4 callbacks suppressed
[  170.760012][T12638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2918'.
[  171.090260][T12665] lo speed is unknown, defaulting to 1000
[  171.235427][T12665] lo speed is unknown, defaulting to 1000
[  171.334047][T12672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2932'.
[  171.337520][T12672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2932'.
[  171.517488][T12685] netlink: 'syz.0.2938': attribute type 8 has an invalid length.
[  171.593412][T12687] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2939'.
[  171.693776][T12697] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  172.293247][T12759] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2974'.
[  172.758255][T12788] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2986'.
[  173.900583][T12867] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  173.903233][T12867] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  174.093192][T12884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3029'.
[  174.131989][T12884] batadv0: entered promiscuous mode
[  174.138458][T12884] macvtap2: entered promiscuous mode
[  174.143429][T12884] macvtap2: entered allmulticast mode
[  174.160324][T12884] batadv0: entered allmulticast mode
[  174.164077][T12884] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  174.185993][T12889] batadv0: left allmulticast mode
[  174.198283][T12889] batadv0: left promiscuous mode
[  174.220360][T12891] netlink: 'syz.0.3035': attribute type 1 has an invalid length.
[  174.453743][T12907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3043'.
[  174.459970][T12907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3043'.
[  174.463473][T12907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3043'.
[  174.603538][T12913] lo speed is unknown, defaulting to 1000
[  174.899708][T12913] lo speed is unknown, defaulting to 1000
[  175.610382][T12953] Cannot find del_set index 2 as target
[  176.130471][T12984] __nla_validate_parse: 1 callbacks suppressed
[  176.130488][T12984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3071'.
[  176.758991][T13033] netlink: 'syz.0.3087': attribute type 4 has an invalid length.
[  177.152509][T13064] netlink: 'syz.0.3100': attribute type 12 has an invalid length.
[  177.261925][T13076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3105'.
[  177.267591][T13076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3105'.
[  177.271117][T13076] netlink: 'syz.0.3105': attribute type 12 has an invalid length.
[  177.281592][T13076] netlink: 'syz.0.3105': attribute type 11 has an invalid length.
[  177.573836][T13101] bridge0: entered allmulticast mode
[  177.592346][T13101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3117'.
[  177.596814][T13101] bridge_slave_1: left allmulticast mode
[  177.598959][T13101] bridge_slave_1: left promiscuous mode
[  177.602175][T13101] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.620974][T13101] bridge_slave_0: left allmulticast mode
[  177.623358][T13101] bridge_slave_0: left promiscuous mode
[  177.635080][T13101] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.664824][T13108] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:0000:0001 with DS=0x1
[  177.672745][T13101] bridge0 (unregistering): left allmulticast mode
[  177.788399][T13118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3124'.
[  177.842575][T13118] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3124'.
[  177.852658][T13118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3124'.
[  177.856411][T13118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3124'.
[  178.073908][T13144] lo speed is unknown, defaulting to 1000
[  178.136674][T13150] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3138'.
[  178.191460][ T5835] Bluetooth: hci2: link tx timeout
[  178.194179][ T5835] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  178.200446][ T5835] Bluetooth: hci2: link tx timeout
[  178.202642][ T5835] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  178.216020][T13144] lo speed is unknown, defaulting to 1000
[  178.243224][  T981] 
[  178.244078][  T981] ======================================================
[  178.246850][  T981] WARNING: possible circular locking dependency detected
[  178.249723][  T981] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  178.254346][  T981] ------------------------------------------------------
[  178.256881][  T981] kworker/u9:3/981 is trying to acquire lock:
[  178.259232][  T981] ffff888120c4e358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0
[  178.262581][  T981] 
[  178.262581][  T981] but task is already holding lock:
[  178.265683][  T981] ffff88802f707988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  178.269542][  T981] 
[  178.269542][  T981] which lock already depends on the new lock.
[  178.269542][  T981] 
[  178.273538][  T981] 
[  178.273538][  T981] the existing dependency chain (in reverse order) is:
[  178.277148][  T981] 
[  178.277148][  T981] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  178.280514][  T981]        lock_acquire+0x120/0x360
[  178.282515][  T981]        down_write+0x96/0x1f0
[  178.284593][  T981]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  178.287249][  T981]        nbd_start_device+0x16c/0xac0
[  178.289531][  T981]        nbd_genl_connect+0x1250/0x1930
[  178.291861][  T981]        genl_family_rcv_msg_doit+0x215/0x300
[  178.294331][  T981]        genl_rcv_msg+0x60e/0x790
[  178.296428][  T981]        netlink_rcv_skb+0x208/0x470
[  178.298565][  T981]        genl_rcv+0x28/0x40
[  178.300554][  T981]        netlink_unicast+0x75c/0x8e0
[  178.302868][  T981]        netlink_sendmsg+0x805/0xb30
[  178.305062][  T981]        __sock_sendmsg+0x21c/0x270
[  178.307218][  T981]        ____sys_sendmsg+0x505/0x830
[  178.309628][  T981]        ___sys_sendmsg+0x21f/0x2a0
[  178.311819][  T981]        __x64_sys_sendmsg+0x19b/0x260
[  178.314099][  T981]        do_syscall_64+0xfa/0x3b0
[  178.316196][  T981]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.318830][  T981] 
[  178.318830][  T981] -> #1 (&nbd->config_lock){+.+.}-{4:4}:
[  178.322348][  T981]        lock_acquire+0x120/0x360
[  178.324538][  T981]        __mutex_lock+0x182/0xe80
[  178.326698][  T981]        refcount_dec_and_mutex_lock+0x30/0xa0
[  178.329284][  T981]        nbd_config_put+0x2c/0x790
[  178.331525][  T981]        nbd_release+0xfe/0x140
[  178.333657][  T981]        bdev_release+0x536/0x650
[  178.335867][  T981]        blkdev_release+0x15/0x20
[  178.338013][  T981]        __fput+0x44c/0xa70
[  178.339925][  T981]        fput_close_sync+0x119/0x200
[  178.342071][  T981]        __x64_sys_close+0x7f/0x110
[  178.344185][  T981]        do_syscall_64+0xfa/0x3b0
[  178.346327][  T981]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.348584][  T981] 
[  178.348584][  T981] -> #0 (&disk->open_mutex){+.+.}-{4:4}:
[  178.351817][  T981]        validate_chain+0xb9b/0x2140
[  178.354153][  T981]        __lock_acquire+0xab9/0xd20
[  178.356427][  T981]        lock_acquire+0x120/0x360
[  178.358560][  T981]        __mutex_lock+0x182/0xe80
[  178.360643][  T981]        __del_gendisk+0x129/0x9e0
[  178.362748][  T981]        del_gendisk+0xe8/0x160
[  178.364804][  T981]        nbd_dev_remove_work+0x47/0xe0
[  178.367115][  T981]        process_scheduled_works+0xae1/0x17b0
[  178.369830][  T981]        worker_thread+0x8a0/0xda0
[  178.372007][  T981]        kthread+0x711/0x8a0
[  178.374272][  T981]        ret_from_fork+0x3fc/0x770
[  178.376420][  T981]        ret_from_fork_asm+0x1a/0x30
[  178.378614][  T981] 
[  178.378614][  T981] other info that might help us debug this:
[  178.378614][  T981] 
[  178.382911][  T981] Chain exists of:
[  178.382911][  T981]   &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock
[  178.382911][  T981] 
[  178.388652][  T981]  Possible unsafe locking scenario:
[  178.388652][  T981] 
[  178.391707][  T981]        CPU0                    CPU1
[  178.393941][  T981]        ----                    ----
[  178.396163][  T981]   rlock(&set->update_nr_hwq_lock);
[  178.398387][  T981]                                lock(&nbd->config_lock);
[  178.401241][  T981]                                lock(&set->update_nr_hwq_lock);
[  178.404396][  T981]   lock(&disk->open_mutex);
[  178.406341][  T981] 
[  178.406341][  T981]  *** DEADLOCK ***
[  178.406341][  T981] 
[  178.409715][  T981] 3 locks held by kworker/u9:3/981:
[  178.411910][  T981]  #0: ffff8880203b9148 ((wq_completion)nbd-del){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  178.416518][  T981]  #1: ffffc90006bf7bc0 ((work_completion)(&nbd->remove_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  178.421495][  T981]  #2: ffff88802f707988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  178.426000][  T981] 
[  178.426000][  T981] stack backtrace:
[  178.428635][  T981] CPU: 0 UID: 0 PID: 981 Comm: kworker/u9:3 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  178.428653][  T981] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  178.428664][  T981] Workqueue: nbd-del nbd_dev_remove_work
[  178.428683][  T981] Call Trace:
[  178.428690][  T981]  <TASK>
[  178.428699][  T981]  dump_stack_lvl+0x189/0x250
[  178.428718][  T981]  ? __pfx_dump_stack_lvl+0x10/0x10
[  178.428733][  T981]  ? __pfx__printk+0x10/0x10
[  178.428750][  T981]  ? print_lock_name+0xde/0x100
[  178.428767][  T981]  print_circular_bug+0x2ee/0x310
[  178.428786][  T981]  check_noncircular+0x134/0x160
[  178.428804][  T981]  validate_chain+0xb9b/0x2140
[  178.428831][  T981]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  178.428851][  T981]  ? arch_stack_walk+0x11c/0x150
[  178.428870][  T981]  __lock_acquire+0xab9/0xd20
[  178.428885][  T981]  ? __del_gendisk+0x129/0x9e0
[  178.428899][  T981]  lock_acquire+0x120/0x360
[  178.428912][  T981]  ? __del_gendisk+0x129/0x9e0
[  178.428927][  T981]  ? check_path+0x21/0x40
[  178.428942][  T981]  __mutex_lock+0x182/0xe80
[  178.428955][  T981]  ? __del_gendisk+0x129/0x9e0
[  178.428969][  T981]  ? __del_gendisk+0x129/0x9e0
[  178.428983][  T981]  ? __pfx___mutex_lock+0x10/0x10
[  178.428995][  T981]  ? __pfx___might_resched+0x10/0x10
[  178.429012][  T981]  ? __lock_acquire+0xab9/0xd20
[  178.429042][  T981]  ? disk_del_events+0xb5/0x210
[  178.429056][  T981]  ? __del_gendisk+0xc1/0x9e0
[  178.429068][  T981]  __del_gendisk+0x129/0x9e0
[  178.429081][  T981]  ? del_gendisk+0xe0/0x160
[  178.429095][  T981]  ? __pfx___del_gendisk+0x10/0x10
[  178.429108][  T981]  ? down_read+0x1ad/0x2e0
[  178.429120][  T981]  del_gendisk+0xe8/0x160
[  178.429135][  T981]  nbd_dev_remove_work+0x47/0xe0
[  178.429148][  T981]  ? process_scheduled_works+0x9ef/0x17b0
[  178.429163][  T981]  process_scheduled_works+0xae1/0x17b0
[  178.429184][  T981]  ? __pfx_process_scheduled_works+0x10/0x10
[  178.429204][  T981]  worker_thread+0x8a0/0xda0
[  178.429219][  T981]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  178.429240][  T981]  ? __kthread_parkme+0x7b/0x200
[  178.429259][  T981]  kthread+0x711/0x8a0
[  178.429276][  T981]  ? __pfx_worker_thread+0x10/0x10
[  178.429290][  T981]  ? __pfx_kthread+0x10/0x10
[  178.429337][  T981]  ? _raw_spin_unlock_irq+0x23/0x50
[  178.429356][  T981]  ? lockdep_hardirqs_on+0x9c/0x150
[  178.429374][  T981]  ? __pfx_kthread+0x10/0x10
[  178.429391][  T981]  ret_from_fork+0x3fc/0x770
[  178.429405][  T981]  ? __pfx_ret_from_fork+0x10/0x10
[  178.429419][  T981]  ? __switch_to_asm+0x39/0x70
[  178.429436][  T981]  ? __switch_to_asm+0x33/0x70
[  178.429451][  T981]  ? __pfx_kthread+0x10/0x10
[  178.429468][  T981]  ret_from_fork_asm+0x1a/0x30
[  178.429491][  T981]  </TASK>
[  178.544474][T13155] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3135'.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  178.978325][ T5925] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  179.051038][ T5925] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  179.108967][ T5925] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  179.147530][ T5925] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  179.245442][ T5925] veth7: left allmulticast mode
[  179.247608][ T5925] bridge3: port 2(veth7) entered disabled state
[  179.251210][ T5925] ip6gretap1: left allmulticast mode
[  179.253427][ T5925] ip6gretap1: left promiscuous mode
[  179.255809][ T5925] bridge3: port 1(ip6gretap1) entered disabled state
[  179.738280][ T5925] bond1 (unregistering): (slave veth5): Releasing backup interface
[  179.742416][ T5925] bond1 (unregistering): Released all slaves
[  179.749222][ T5925] smc: removing net device bond0 with user defined pnetid SYZ2
[  179.752642][ T5925] bond0 (unregistering): Released all slaves
[  179.813816][ T5925] tipc: Disabling bearer <eth:syzkaller0>
[  179.827613][ T5925] tipc: Left network mode
[  180.102200][ T5925] hsr_slave_0: left promiscuous mode
[  180.115308][ T5925] hsr_slave_1: left promiscuous mode
[  180.265024][ T5835] Bluetooth: hci2: command 0x0405 tx timeout
[  180.751647][  T840] lo speed is unknown, defaulting to 1000
[  180.754128][  T840] infiniband syz2: ib_query_port failed (-19)
[  180.933870][ T5925] IPVS: stop unused estimator thread 0...
[  182.529228][ T5925] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.580421][ T5925] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.638649][ T5925] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.678625][ T5925] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.885582][ T5925] bond5 (unregistering): (slave gretap2): Releasing active interface
[  183.078431][ T5925] smc: removing net device bond0 with user defined pnetid SYZ2
[  183.082306][ T5925] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  183.086388][ T5925] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  183.089401][ T5925] bond0 (unregistering): Released all slaves
[  183.202015][ T5925] bond1 (unregistering): Released all slaves
[  183.317928][ T5925] bond2 (unregistering): Released all slaves
[  183.436724][ T5925] bond3 (unregistering): Released all slaves
[  183.540683][ T5925] bond4 (unregistering): Released all slaves
[  183.550325][ T5925] bond5 (unregistering): Released all slaves
[  183.607815][ T5925] tipc: Disabling bearer <udp:syz2>
[  183.615027][ T5925] tipc: Disabling bearer <eth:syzkaller0>
[  183.618693][ T5925] tipc: Left network mode
[  183.845218][ T5925] hsr_slave_0: left promiscuous mode
[  183.847963][ T5925] hsr_slave_1: left promiscuous mode
[  183.852923][ T5925] veth1_macvtap: left promiscuous mode
[  183.866544][ T5925] veth0_macvtap: left promiscuous mode
[  183.903771][ T5925] team0 (unregistering): Port device batadv1 removed
[  186.027870][ T5925] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
14:54:04  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90006bf6e10
R8 =ffff888108b28237 R9 =1ffff11021165046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98c0 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa5ea387095 CR3=00000001291ea000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f59f1011c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b4c210 RBX=ffff88813663b1c0 RCX=ffff8881242b3980 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000690f700 RSP=ffffc9000690f5a0
R8 =ffffffff8fa1f3f7 R9 =1ffffffff1f43e7e R10=dffffc0000000000 R11=fffffbfff1f43e7f
R12=1ffff11009608385 R13=dffffc0000000000 R14=0000000000000000 R15=ffff88804b041c28
RIP=ffffffff81b4c1f9 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9009073440 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=7269642065676e61 68632074276e6163 XMM01=2e36312e3627206f 742079726f746365
XMM02=2d72656c6c616b7a 79732d3563722d30 XMM03=6337393934386337 34672d3935313030
XMM04=2779747269642d36 3836633739393438 XMM05=633734672d393531 30302d72656c6c61
XMM06=6b7a79732d356372 2d302e36312e3627 XMM07=206f742079726f74 6365726964206567
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
