last executing test programs:

1.04196258s ago: executing program 2 (id=3482):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r1], 0x24}}, 0x0)

1.041442536s ago: executing program 2 (id=3484):
socket$packet(0x11, 0x3, 0x300)
socket(0x2, 0xa, 0x300)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)

996.03998ms ago: executing program 2 (id=3486):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r1=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x1}, 0x10, 0x0, 0x4, 0x0, "352bc764aef32890"}, 0x10}, 0x2}, 0x0)

995.219291ms ago: executing program 2 (id=3489):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a3, 0xd5}}, @TCA_U32_ACT={0x58, 0x7, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800)

879.990006ms ago: executing program 2 (id=3494):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x60}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0)
sendmsg$nl_route(r0, 0x0, 0xc800)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r7, 0x4)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f640094000500", 0x2c}], 0x1)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x44c, 0x0, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r2)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001940)={'wpan0\x00'})
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001980)={0x14, r9, 0x809, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x14, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
recvmsg(r10, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x3f01)
sendmsg$tipc(r11, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
r13 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r13, &(0x7f0000000180)="c5", 0x1, 0x40080, &(0x7f00000000c0)={0xa, 0x4e24, 0x40, @local, 0x13}, 0x1c)
getsockopt$inet_sctp6_SCTP_RTOINFO(r13, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x1000, 0x400, 0x3}, &(0x7f0000000140)=0x10)
close(r11)

694.266018ms ago: executing program 1 (id=3504):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r0)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x100}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20}, 0x8080)

694.062011ms ago: executing program 1 (id=3505):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r1, 0x10c, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01012cbd7000fbdbdf2503000000050002000a000000060001004e"], 0x24}, 0x1, 0x0, 0x0, 0x404c045}, 0x40000)
sendmsg$key(r0, 0x0, 0x48010)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0x4e20, @loopback}, {0x1, @multicast}, 0x4a, {0x2, 0x4e20, @empty}})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffffd4f}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x4048015)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})

565.83005ms ago: executing program 1 (id=3506):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f00000000c0)={0x0}, 0x7, 0x0, 0x0, 0x6274a5ca71beadeb}, 0x4000000)

565.687495ms ago: executing program 1 (id=3507):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0)

515.468772ms ago: executing program 1 (id=3508):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x8000, 0x4)
shutdown(r0, 0x1)
recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0)

452.865705ms ago: executing program 1 (id=3509):
r0 = socket(0x22, 0x2, 0x1)
close(r0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851)
recvfrom$l2tp(r0, 0x0, 0x0, 0x1, 0x0, 0x0)

135.495783ms ago: executing program 0 (id=3521):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f0000000000))

85.897774ms ago: executing program 0 (id=3522):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r1, 0xffffe000)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x2000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000})

85.492655ms ago: executing program 0 (id=3523):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
socket$unix(0x1, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0)

22.846673ms ago: executing program 0 (id=3524):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffff7f8b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x15aa2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000)

22.443004ms ago: executing program 0 (id=3525):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x9, 0xe035, 0x0, 0x0, 0x7fffffff, 0x8, 0x3, 0xa879, r1}, &(0x7f0000000240)=0x20)

22.29581ms ago: executing program 0 (id=3526):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)={0x3c, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x3c}}, 0x20000000)

0s ago: executing program 2 (id=3527):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}}}, 0x24}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:55032' (ED25519) to the list of known hosts.
syzkaller login: [   41.600488][ T5754] cgroup: Unknown subsys name 'net'
[   41.707704][ T5754] cgroup: Unknown subsys name 'cpuset'
[   41.712296][ T5754] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   43.098086][ T5754] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.667301][ T5221] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.672946][ T5221] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.675993][ T5221] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.678713][ T5221] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.681254][ T5221] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.686777][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.694946][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.700910][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.703725][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.706305][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.708154][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.714522][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.717374][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.723923][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.727882][ T5221] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.927005][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   46.983460][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   47.020262][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   47.059278][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.062410][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.065221][ T5826] bridge_slave_0: entered allmulticast mode
[   47.068071][ T5826] bridge_slave_0: entered promiscuous mode
[   47.098462][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.100878][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.103253][ T5826] bridge_slave_1: entered allmulticast mode
[   47.106225][ T5826] bridge_slave_1: entered promiscuous mode
[   47.121409][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.123915][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.126542][ T5834] bridge_slave_0: entered allmulticast mode
[   47.129327][ T5834] bridge_slave_0: entered promiscuous mode
[   47.144294][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.146955][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.149312][ T5834] bridge_slave_1: entered allmulticast mode
[   47.151990][ T5834] bridge_slave_1: entered promiscuous mode
[   47.157870][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.182958][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.186568][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.189043][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.191453][ T5829] bridge_slave_0: entered allmulticast mode
[   47.194220][ T5829] bridge_slave_0: entered promiscuous mode
[   47.198719][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.201162][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.203541][ T5829] bridge_slave_1: entered allmulticast mode
[   47.206806][ T5829] bridge_slave_1: entered promiscuous mode
[   47.218639][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.237806][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.271115][ T5826] team0: Port device team_slave_0 added
[   47.274574][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.280134][ T5834] team0: Port device team_slave_0 added
[   47.283150][ T5826] team0: Port device team_slave_1 added
[   47.288276][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.299448][ T5834] team0: Port device team_slave_1 added
[   47.341227][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.343506][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.351981][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.357180][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.359524][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.368205][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.373006][ T5829] team0: Port device team_slave_0 added
[   47.376977][ T5829] team0: Port device team_slave_1 added
[   47.380260][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.382506][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.392107][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.396729][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.399097][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.407747][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.437895][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.440226][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.448944][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.469263][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.471514][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.480341][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.506998][ T5826] hsr_slave_0: entered promiscuous mode
[   47.509352][ T5826] hsr_slave_1: entered promiscuous mode
[   47.515618][ T5834] hsr_slave_0: entered promiscuous mode
[   47.518047][ T5834] hsr_slave_1: entered promiscuous mode
[   47.520321][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.523038][ T5834] Cannot create hsr debugfs directory
[   47.576707][ T5829] hsr_slave_0: entered promiscuous mode
[   47.579026][ T5829] hsr_slave_1: entered promiscuous mode
[   47.581184][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.583649][ T5829] Cannot create hsr debugfs directory
[   47.763660][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.772603][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.777579][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.788723][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.819823][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.827488][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.840536][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.842964][ T5826] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.845841][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.848214][ T5826] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.853448][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.858774][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.891855][   T32] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.895357][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.919427][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.924592][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.933076][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.941800][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.982622][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.006438][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.009810][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   48.028662][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.030977][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.049026][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.051356][ T3567] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.063540][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   48.077848][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.080184][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.086184][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.094243][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.096645][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.138736][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   48.172222][  T146] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.174584][  T146] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.179718][  T146] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.182087][  T146] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.284555][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.296160][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.321122][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.343244][ T5826] veth0_vlan: entered promiscuous mode
[   48.351340][ T5834] veth0_vlan: entered promiscuous mode
[   48.362311][ T5826] veth1_vlan: entered promiscuous mode
[   48.366223][ T5834] veth1_vlan: entered promiscuous mode
[   48.372792][ T5829] veth0_vlan: entered promiscuous mode
[   48.389561][ T5829] veth1_vlan: entered promiscuous mode
[   48.403054][ T5826] veth0_macvtap: entered promiscuous mode
[   48.409533][ T5834] veth0_macvtap: entered promiscuous mode
[   48.416532][ T5826] veth1_macvtap: entered promiscuous mode
[   48.423901][ T5834] veth1_macvtap: entered promiscuous mode
[   48.436261][ T5829] veth0_macvtap: entered promiscuous mode
[   48.441335][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.451495][ T5829] veth1_macvtap: entered promiscuous mode
[   48.458223][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.466346][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.473448][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.478008][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.481602][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.490084][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.497491][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.502949][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.507301][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.514044][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.526118][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.529360][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.553576][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.559272][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.574453][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.585698][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.599678][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.626563][  T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.629096][  T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.667571][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.673156][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.681108][  T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.683677][  T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.716296][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.719540][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.750473][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.751294][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.754546][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.765402][ T5833] Bluetooth: hci1: command tx timeout
[   48.765600][   T54] Bluetooth: hci0: command tx timeout
[   48.776826][   T54] Bluetooth: hci2: command tx timeout
[   48.787259][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.794920][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.913476][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   49.007840][ T5908] netlink: 'syz.0.7': attribute type 4 has an invalid length.
[   49.097966][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.102117][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.251932][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   49.276712][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   49.428670][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.454511][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.475411][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.490029][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.631522][ T5927] netlink: 'syz.1.16': attribute type 10 has an invalid length.
[   49.640248][ T5927] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.643805][ T5927] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   49.656851][ T5927] netlink: 'syz.1.16': attribute type 10 has an invalid length.
[   49.659270][ T5927] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16'.
[   49.662382][ T5927] batadv0: entered promiscuous mode
[   49.664147][ T5927] batadv0: entered allmulticast mode
[   49.669204][ T5927] bond0: (slave batadv0): Releasing backup interface
[   49.679810][ T5927] bridge0: port 3(batadv0) entered blocking state
[   49.681926][ T5927] bridge0: port 3(batadv0) entered disabled state
[   49.723015][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18'.
[   49.744605][ T5933] bond0: entered promiscuous mode
[   49.758015][ T5933] bond_slave_0: entered promiscuous mode
[   49.760071][ T5933] bond_slave_1: entered promiscuous mode
[   49.762048][ T5933] bond0: entered allmulticast mode
[   49.763772][ T5933] bond_slave_0: entered allmulticast mode
[   49.767493][ T5933] bond_slave_1: entered allmulticast mode
[   49.848588][ T5943] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24'.
[   49.908824][ T5950] tipc: Invalid UDP bearer configuration
[   49.908855][ T5950] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   49.980787][ T5957] pimreg: entered allmulticast mode
[   50.000648][ T5959] netlink: 'syz.1.30': attribute type 11 has an invalid length.
[   50.005829][ T5957] pimreg: left allmulticast mode
[   50.008647][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30'.
[   50.016927][ T5961] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   50.038010][ T5842] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   50.040886][ T5842] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   50.043773][ T5959] netlink: 'syz.1.30': attribute type 11 has an invalid length.
[   50.057600][ T5842] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   50.060402][ T5842] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   50.063232][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30'.
[   50.067995][ T5959] Zero length message leads to an empty skb
[   50.078975][ T5963] netlink: 'syz.0.32': attribute type 1 has an invalid length.
[   50.116280][ T5842] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   50.119443][ T5842] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   50.157163][ T5963] veth3: entered promiscuous mode
[   50.197446][ T5969] bridge_slave_0: left allmulticast mode
[   50.199379][ T5969] bridge_slave_0: left promiscuous mode
[   50.201380][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.208660][ T5969] bridge_slave_1: left allmulticast mode
[   50.211547][ T5969] bridge_slave_1: left promiscuous mode
[   50.213750][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.222427][ T5969] bond0: (slave bond_slave_0): Releasing backup interface
[   50.226924][ T5969] bond0: (slave bond_slave_1): Releasing backup interface
[   50.234241][ T5969] team0: Port device team_slave_0 removed
[   50.241310][ T5969] team0: Port device team_slave_1 removed
[   50.245036][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_0
[   50.249431][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_1
[   50.250633][ T5975] netlink: 'syz.1.36': attribute type 9 has an invalid length.
[   50.260705][ T5975] netlink: 'syz.1.36': attribute type 7 has an invalid length.
[   50.263238][ T5975] netlink: 'syz.1.36': attribute type 8 has an invalid length.
[   50.431418][ T5990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   50.750924][ T5994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.45'.
[   50.845911][ T5833] Bluetooth: hci1: command tx timeout
[   50.849035][   T54] Bluetooth: hci2: command tx timeout
[   50.878182][ T6002] netlink: 248 bytes leftover after parsing attributes in process `syz.2.49'.
[   50.881234][ T6002] netlink: 48 bytes leftover after parsing attributes in process `syz.2.49'.
[   50.890524][ T6002] lo speed is unknown, defaulting to 1000
[   50.893920][ T6002] lo speed is unknown, defaulting to 1000
[   50.897890][ T6002] lo speed is unknown, defaulting to 1000
[   50.978308][ T6003] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   50.999409][ T6002] infiniband syz0: set active
[   51.002177][ T6002] infiniband syz0: added lo
[   51.007169][ T6006] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   51.012282][ T5867] lo speed is unknown, defaulting to 1000
[   51.046930][ T6002] RDS/IB: syz0: added
[   51.050911][ T6002] smc: adding ib device syz0 with port count 1
[   51.053076][ T6002] smc:    ib device syz0 port 1 has pnetid 
[   51.057751][ T5867] lo speed is unknown, defaulting to 1000
[   51.064034][ T6002] lo speed is unknown, defaulting to 1000
[   51.198141][ T6002] lo speed is unknown, defaulting to 1000
[   51.355729][ T6002] lo speed is unknown, defaulting to 1000
[   51.448986][ T6033] tipc: Enabling of bearer <et:g> rejected, media not registered
[   51.499430][ T6002] syz.2.49 (6002) used greatest stack depth: 20192 bytes left
[   51.568910][ T6042] netlink: 40 bytes leftover after parsing attributes in process `syz.0.67'.
[   51.723737][ T6061] syzkaller1: entered promiscuous mode
[   51.733296][ T6061] syzkaller1: entered allmulticast mode
[   52.012158][ T6092] sctp: [Deprecated]: syz.1.86 (pid 6092) Use of int in maxseg socket option.
[   52.012158][ T6092] Use struct sctp_assoc_value instead
[   52.073752][ T6099] netlink: 'syz.0.85': attribute type 13 has an invalid length.
[   52.148125][ T6099] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.151511][ T6099] 8021q: adding VLAN 0 to HW filter on device team0
[   52.158538][ T6099] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   52.173999][ T6106] syz.1.90 uses obsolete (PF_INET,SOCK_PACKET)
[   52.178267][ T6090] lo speed is unknown, defaulting to 1000
[   52.237389][ T6099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   52.308213][ T6099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   52.381506][ T6090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   52.486833][ T6125] geneve2: entered promiscuous mode
[   52.866562][ T6166] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   52.870496][ T6166] batadv_slave_1: entered promiscuous mode
[   52.891872][ T6099] syz.0.85 (6099) used greatest stack depth: 19832 bytes left
[   52.898123][ T6168] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   52.924875][ T5833] Bluetooth: hci1: command tx timeout
[   52.926718][   T54] Bluetooth: hci2: command tx timeout
[   53.117518][ T6185] 8021q: adding VLAN 0 to HW filter on device bond1
[   53.152145][ T6185] bond1: (slave gretap1): making interface the new active one
[   53.156800][ T6185] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   53.181110][ T6185] syz.0.127 (6185) used greatest stack depth: 19568 bytes left
[   53.604235][ T6221] lo speed is unknown, defaulting to 1000
[   54.066366][ T6245] __nla_validate_parse: 7 callbacks suppressed
[   54.066379][ T6245] netlink: 24 bytes leftover after parsing attributes in process `syz.0.148'.
[   54.343130][ T6263] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   54.436358][ T6271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.155'.
[   54.442278][ T6271] xfrm1: entered promiscuous mode
[   54.443945][ T6271] xfrm1: entered allmulticast mode
[   54.514538][ T6277] TCP: TCP_TX_DELAY enabled
[   54.552480][ T6279] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   54.596922][ T6282] validate_nla: 3 callbacks suppressed
[   54.596935][ T6282] netlink: 'syz.2.160': attribute type 16 has an invalid length.
[   54.601341][ T6282] netlink: 20 bytes leftover after parsing attributes in process `syz.2.160'.
[   54.827423][ T6300] netlink: 404 bytes leftover after parsing attributes in process `syz.2.168'.
[   54.830452][ T6300] netlink: 88 bytes leftover after parsing attributes in process `syz.2.168'.
[   54.833366][ T6300] netlink: 88 bytes leftover after parsing attributes in process `syz.2.168'.
[   55.005071][   T54] Bluetooth: hci2: command tx timeout
[   55.007107][   T54] Bluetooth: hci1: command tx timeout
[   55.027385][ T6314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.174'.
[   55.035672][ T6314] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   55.067218][ T6316] netlink: 16 bytes leftover after parsing attributes in process `syz.2.177'.
[   55.180521][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'.
[   55.287713][ T6342] veth1_to_team: entered allmulticast mode
[   55.290125][ T6342] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[   55.351085][ T6350] netlink: 'syz.0.191': attribute type 1 has an invalid length.
[   55.368917][ T6354] netlink: 16 bytes leftover after parsing attributes in process `syz.1.194'.
[   55.374107][ T6354] Bluetooth: MGMT ver 1.23
[   56.897566][ T6445] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.972594][ T6445] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.028887][ T6445] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.108904][ T6445] bond0: (slave netdevsim0): Releasing backup interface
[   57.116818][ T6445] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.208007][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.218330][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.229941][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.248654][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.286163][ T6474] Bluetooth: MGMT ver 1.23
[   57.313347][ T6476] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[   57.432736][ T6486] syzkaller0: create flow: hash 3508978873 index 1
[   57.455196][ T6484] syzkaller0: delete flow: hash 3508978873 index 1
[   58.090904][ T6503] syzkaller1: entered promiscuous mode
[   58.092747][ T6503] syzkaller1: entered allmulticast mode
[   58.131527][ T6508] netlink: 'syz.0.264': attribute type 4 has an invalid length.
[   58.148196][ T6508] netlink: 'syz.0.264': attribute type 4 has an invalid length.
[   58.155871][ T6510] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   58.474500][ T6537] netlink: 'syz.1.277': attribute type 1 has an invalid length.
[   58.696003][ T6549] warning: `syz.1.283' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.324872][ T5833] Bluetooth: hci2: command 0x0401 tx timeout
[   59.325915][   T54] Bluetooth: hci2: Opcode 0x0401 failed: -110
[   59.660627][ T6568] __nla_validate_parse: 3 callbacks suppressed
[   59.660639][ T6568] netlink: 224 bytes leftover after parsing attributes in process `syz.1.292'.
[   60.417028][ T6588] dvmrp1: tun_chr_ioctl cmd 1074025677
[   60.419063][ T6588] dvmrp1: linktype set to 805
[   60.634988][ T6595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.305'.
[   60.656926][ T6595] netlink: 'syz.1.305': attribute type 1 has an invalid length.
[   60.660261][ T6595] netlink: 'syz.1.305': attribute type 1 has an invalid length.
[   60.794579][ T6599] infiniband syz1: set down
[   60.797447][ T6599] infiniband syz1: added bond0
[   60.817339][ T6599] RDS/IB: syz1: added
[   60.818739][ T6599] smc: adding ib device syz1 with port count 1
[   60.820709][ T6599] smc:    ib device syz1 port 1 has pnetid 
[   61.391288][ T6626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.320'.
[   61.421596][ T6626] vlan3: entered allmulticast mode
[   61.427764][ T6626] bond1: entered allmulticast mode
[   61.561907][ T6637] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.621509][ T6637] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.649379][ T6652] lo speed is unknown, defaulting to 1000
[   61.680583][ T6637] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.736582][ T6637] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.820358][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.845094][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.847715][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.871990][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.939371][ T6666] netlink: 48 bytes leftover after parsing attributes in process `syz.2.334'.
[   62.071194][ T6670] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   62.078069][ T6670] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   62.086830][ T6674] netlink: 'syz.1.337': attribute type 1 has an invalid length.
[   62.216930][ T6682] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.341'.
[   62.498189][   T33] audit: type=1800 audit(1753624243.623:2): pid=6707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.353" name="blkio.bfq.time_recursive" dev="tmpfs" ino=526 res=0 errno=0
[   62.574082][ T6717] netlink: 596 bytes leftover after parsing attributes in process `syz.1.359'.
[   62.641620][ T6725] netlink: 20 bytes leftover after parsing attributes in process `syz.1.362'.
[   62.674342][ T6728] tipc: Started in network mode
[   62.679742][ T6728] tipc: Node identity 4a3dde859701, cluster identity 4711
[   62.683526][ T6728] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.688036][ T6728] syzkaller0: entered promiscuous mode
[   62.689761][ T6728] syzkaller0: entered allmulticast mode
[   62.726052][ T6728] tipc: Resetting bearer <eth:syzkaller0>
[   62.730549][ T6736] netlink: 40 bytes leftover after parsing attributes in process `syz.1.367'.
[   62.734293][ T6727] tipc: Resetting bearer <eth:syzkaller0>
[   62.756130][ T6727] tipc: Disabling bearer <eth:syzkaller0>
[   62.851428][   T33] audit: type=1800 audit(1753624243.973:3): pid=6745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.371" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=838 res=0 errno=0
[   62.865985][   T33] audit: type=1804 audit(1753624243.993:4): pid=6745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.371" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=838 res=1 errno=0
[   62.949382][ T6753] tipc: Started in network mode
[   62.950998][ T6753] tipc: Node identity 7aea6da60fce, cluster identity 4711
[   62.953493][ T6753] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.957415][ T6753] syzkaller0: entered promiscuous mode
[   62.959171][ T6753] syzkaller0: entered allmulticast mode
[   62.973520][ T6753] tipc: Resetting bearer <eth:syzkaller0>
[   62.979792][ T6752] tipc: Resetting bearer <eth:syzkaller0>
[   62.989628][ T6752] tipc: Disabling bearer <eth:syzkaller0>
[   63.008916][ T6755] nbd: must specify at least one socket
[   63.590406][ T6786] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   63.591299][    T9] IPVS: starting estimator thread 0...
[   63.650135][ T6790] netlink: 16 bytes leftover after parsing attributes in process `syz.1.391'.
[   63.685271][ T6788] IPVS: using max 79 ests per chain, 189600 per kthread
[   63.737941][ T6797] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.394'.
[   63.871215][ T6807] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.210066][ T6834] netlink: zone id is out of range
[   64.211758][ T6834] netlink: zone id is out of range
[   64.213395][ T6834] netlink: zone id is out of range
[   64.216738][ T6834] netlink: zone id is out of range
[   64.218476][ T6834] netlink: zone id is out of range
[   64.220126][ T6834] netlink: zone id is out of range
[   64.221787][ T6834] netlink: zone id is out of range
[   64.223423][ T6834] netlink: zone id is out of range
[   64.225645][ T6834] netlink: zone id is out of range
[   64.496924][ T6852] team0: Device sit1 is of different type
[   64.593254][ T6856] delete_channel: no stack
[   65.007745][ T6871] __nla_validate_parse: 3 callbacks suppressed
[   65.007756][ T6871] netlink: 256 bytes leftover after parsing attributes in process `syz.0.429'.
[   65.099918][ T6877] netlink: 'syz.0.432': attribute type 1 has an invalid length.
[   65.102541][ T6877] netlink: 'syz.0.432': attribute type 2 has an invalid length.
[   65.105739][ T6877] netlink: 1172 bytes leftover after parsing attributes in process `syz.0.432'.
[   65.165145][ T5833] Bluetooth: hci2: command 0x0401 tx timeout
[   65.261665][ T6887] netlink: 'syz.0.437': attribute type 10 has an invalid length.
[   65.265752][ T6887] veth0_vlan: left promiscuous mode
[   65.269376][ T6887] veth0_vlan: entered promiscuous mode
[   65.273368][ T6887] team0: Device veth0_vlan failed to register rx_handler
[   65.326600][ T6889] batadv_slave_1: entered promiscuous mode
[   65.329284][ T6888] batadv_slave_1: left promiscuous mode
[   65.741005][ T6926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.456'.
[   65.924549][ T6952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.469'.
[   65.987848][ T6958] netlink: 24 bytes leftover after parsing attributes in process `syz.0.471'.
[   66.064953][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.475'.
[   66.101067][ T6968] netlink: 'syz.0.476': attribute type 3 has an invalid length.
[   66.103888][ T6968] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.476'.
[   66.144309][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'.
[   66.149476][ T6974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'.
[   66.152910][ T6974] netlink: 'syz.2.480': attribute type 18 has an invalid length.
[   66.641215][ T6999] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.643750][ T6999] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.706661][ T6999] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.718563][ T6999] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.844275][ T5842] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   66.854879][ T5842] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.857985][ T5842] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   66.860863][ T5842] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.866137][ T5842] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   66.869680][ T5842] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.873173][ T5842] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   66.879837][ T5842] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.964017][ T7006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.493'.
[   66.997477][ T7008] netlink: 'syz.1.494': attribute type 1 has an invalid length.
[   67.000064][ T7008] netlink: 'syz.1.494': attribute type 2 has an invalid length.
[   67.167201][ T7026] netlink: 'syz.2.503': attribute type 1 has an invalid length.
[   67.180965][ T7026] bond2: entered promiscuous mode
[   67.185208][ T7026] 8021q: adding VLAN 0 to HW filter on device bond2
[   67.213625][ T7026] 8021q: adding VLAN 0 to HW filter on device bond2
[   67.217750][ T7026] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address
[   67.220999][ T7026] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[   67.244196][ T7026] bond2: (slave wireguard0): making interface the new active one
[   67.249548][ T7034] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   67.252085][ T7034] IPv6: NLM_F_CREATE should be set when creating new route
[   67.254326][ T7034] IPv6: NLM_F_CREATE should be set when creating new route
[   67.257980][ T7026] wireguard0: entered promiscuous mode
[   67.260573][ T7026] bond2: (slave wireguard0): Enslaving as an active interface with an up link
[   67.267193][ T7034] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   67.282078][ T7034] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address
[   68.247935][ T7034] bond2: (slave wireguard1): Enslaving as a backup interface with an up link
[   68.611824][ T7086] macsec1: entered promiscuous mode
[   68.704814][ T7092] net_ratelimit: 168 callbacks suppressed
[   68.704827][ T7092] netlink: set zone limit has 8 unknown bytes
[   68.963912][ T7121] sctp: [Deprecated]: syz.2.543 (pid 7121) Use of struct sctp_assoc_value in delayed_ack socket option.
[   68.963912][ T7121] Use struct sctp_sack_info instead
[   69.130503][ T7141] tipc: Started in network mode
[   69.132430][ T7141] tipc: Node identity 86ad70c78f48, cluster identity 4711
[   69.137857][ T7141] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.141489][ T7141] syzkaller0: entered promiscuous mode
[   69.143715][ T7141] syzkaller0: entered allmulticast mode
[   69.162825][ T7141] tipc: Resetting bearer <eth:syzkaller0>
[   69.165745][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   69.168578][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   69.173200][ T7139] tipc: Resetting bearer <eth:syzkaller0>
[   69.183027][ T7139] tipc: Disabling bearer <eth:syzkaller0>
[   69.262171][ T7149] gtp0: entered promiscuous mode
[   69.263807][ T7149] gtp0: entered allmulticast mode
[   70.035974][ T7198] netlink: 'syz.2.572': attribute type 12 has an invalid length.
[   70.816813][ T7231] __nla_validate_parse: 8 callbacks suppressed
[   70.816826][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.588'.
[   70.848576][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.238000][ T7256] netlink: 48 bytes leftover after parsing attributes in process `syz.2.599'.
[   71.785848][ T7286] lo speed is unknown, defaulting to 1000
[   71.831701][ T7287] netlink: 'syz.0.613': attribute type 21 has an invalid length.
[   71.836134][ T7287] netlink: 'syz.0.613': attribute type 6 has an invalid length.
[   71.838953][ T7287] netlink: 64 bytes leftover after parsing attributes in process `syz.0.613'.
[   71.847239][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.613'.
[   71.852890][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.613'.
[   71.857986][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.613'.
[   72.927738][ T7355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.644'.
[   72.931445][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.644'.
[   73.297286][ T7388] netlink: 'syz.0.660': attribute type 83 has an invalid length.
[   73.301179][ T7389] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   73.432370][ T7407] netlink: 'syz.2.670': attribute type 35 has an invalid length.
[   73.433233][ T7403] tipc: Cannot configure node identity twice
[   73.669260][ T7422] netlink: 'syz.0.673': attribute type 16 has an invalid length.
[   73.671851][ T7422] netlink: 'syz.0.673': attribute type 17 has an invalid length.
[   73.685963][ T7422] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   73.787782][ T7443] lo speed is unknown, defaulting to 1000
[   73.883960][ T7445] lo speed is unknown, defaulting to 1000
[   74.825763][ T7503] netlink: 17 bytes leftover after parsing attributes in process `syz.1.706'.
[   74.859273][ T7502] bridge2: entered allmulticast mode
[   74.880635][ T7507] netlink: 52 bytes leftover after parsing attributes in process `syz.0.708'.
[   74.973545][ T7517] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[   75.263948][ T7534] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[   75.422188][ T7544] bridge0: port 3(batadv0) entered disabled state
[   75.426281][ T7544] bridge_slave_1: left allmulticast mode
[   75.428888][ T7544] bridge_slave_1: left promiscuous mode
[   75.430957][ T7544] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.435062][ T7544] bridge_slave_0: left allmulticast mode
[   75.436930][ T7544] bridge_slave_0: left promiscuous mode
[   75.438893][ T7544] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.698593][ T7559] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.719278][ T7559] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.092621][ T7600] __nla_validate_parse: 8 callbacks suppressed
[   76.092632][ T7600] netlink: 24 bytes leftover after parsing attributes in process `syz.0.740'.
[   76.113559][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.741'.
[   76.142492][ T7602] hsr_slave_1 (unregistering): left promiscuous mode
[   76.329605][ T7625] netlink: 240 bytes leftover after parsing attributes in process `syz.0.746'.
[   76.592295][ T7647] tipc: Cannot configure node identity twice
[   76.644364][ T7653] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.768'.
[   76.650829][ T7655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.764'.
[   76.671081][ T7655] hsr_slave_1 (unregistering): left promiscuous mode
[   76.946378][ T7687] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[   77.076494][ T5894] IPVS: starting estimator thread 0...
[   77.103957][ T7702] netlink: 44 bytes leftover after parsing attributes in process `syz.0.779'.
[   77.109006][ T7702] netlink: 24 bytes leftover after parsing attributes in process `syz.0.779'.
[   77.165649][ T7698] IPVS: using max 79 ests per chain, 189600 per kthread
[   77.432927][ T7737] netlink: 24 bytes leftover after parsing attributes in process `syz.0.794'.
[   77.683546][ T7758] Driver unsupported XDP return value 0 on prog  (id 93) dev N/A, expect packet loss!
[   77.730579][ T7762] netlink: 'syz.0.806': attribute type 1 has an invalid length.
[   77.733033][ T7762] netlink: 224 bytes leftover after parsing attributes in process `syz.0.806'.
[   77.741087][ T7762] netlink: 48 bytes leftover after parsing attributes in process `syz.0.806'.
[   78.272619][ T7781] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   78.548937][ T7809] ieee802154 phy1 wpan1: encryption failed: -22
[   78.879574][ T7850] netlink: 'syz.2.848': attribute type 3 has an invalid length.
[   78.899969][ T5842] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.902888][ T5842] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.907970][ T5842] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.910709][ T5842] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.016081][ T7905] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.023299][ T7905] syzkaller0: entered promiscuous mode
[   80.025293][ T7905] syzkaller0: entered allmulticast mode
[   80.045972][ T7905] tipc: Resetting bearer <eth:syzkaller0>
[   80.051350][ T7903] tipc: Resetting bearer <eth:syzkaller0>
[   80.064034][ T7903] tipc: Disabling bearer <eth:syzkaller0>
[   80.392542][ T7959] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.401950][ T7959] syzkaller0: entered promiscuous mode
[   80.403902][ T7959] syzkaller0: entered allmulticast mode
[   80.422480][ T7959] tipc: Resetting bearer <eth:syzkaller0>
[   80.425332][ T7958] tipc: Resetting bearer <eth:syzkaller0>
[   80.443383][ T7958] tipc: Disabling bearer <eth:syzkaller0>
[   80.574030][ T7972] netlink: 'syz.1.900': attribute type 5 has an invalid length.
[   80.657888][ T7980] netlink: 'syz.1.904': attribute type 3 has an invalid length.
[   80.718142][ T5867] hid-generic 0005:15C2:1010.0001: item fetching failed at offset 0/1
[   80.726306][ T5867] hid-generic 0005:15C2:1010.0001: probe with driver hid-generic failed with error -22
[   80.833935][ T8003] netlink: 'syz.2.915': attribute type 1 has an invalid length.
[   80.853489][ T8003] bond3: entered promiscuous mode
[   80.857670][ T8003] 8021q: adding VLAN 0 to HW filter on device bond3
[   81.087691][   T10] cfg80211: failed to load regulatory.db
[   81.159015][ T8021] lo speed is unknown, defaulting to 1000
[   81.216476][ T8024] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1536) !
[   81.601194][ T8044] __nla_validate_parse: 12 callbacks suppressed
[   81.601205][ T8044] netlink: 16 bytes leftover after parsing attributes in process `syz.2.929'.
[   81.687761][ T8053] netlink: 168 bytes leftover after parsing attributes in process `syz.1.932'.
[   81.740036][ T8057] netlink: 56 bytes leftover after parsing attributes in process `syz.0.934'.
[   81.840895][ T8073] netlink: 'syz.2.940': attribute type 1 has an invalid length.
[   81.869462][ T8077] netlink: 16 bytes leftover after parsing attributes in process `syz.2.943'.
[   81.933679][ T8086] syzkaller1: entered promiscuous mode
[   81.940417][ T8086] syzkaller1: entered allmulticast mode
[   81.943377][ T8087] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.947896][ T8087] syzkaller0: entered promiscuous mode
[   81.949676][ T8087] syzkaller0: entered allmulticast mode
[   81.973208][ T8087] tipc: Resetting bearer <eth:syzkaller0>
[   81.976505][ T8084] tipc: Resetting bearer <eth:syzkaller0>
[   81.984393][ T8084] tipc: Disabling bearer <eth:syzkaller0>
[   82.132830][ T8116] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[   82.137824][ T8114] IPVS: stopping backup sync thread 8116 ...
[   82.156265][ T8114] netlink: 20 bytes leftover after parsing attributes in process `syz.2.961'.
[   82.164990][ T8114] netlink: 32 bytes leftover after parsing attributes in process `syz.2.961'.
[   82.300144][ T8114] netlink: 56 bytes leftover after parsing attributes in process `syz.2.961'.
[   82.312805][ T8135] netlink: 24 bytes leftover after parsing attributes in process `syz.0.970'.
[   82.338459][ T8135] bond3: entered promiscuous mode
[   82.340396][ T8135] 8021q: adding VLAN 0 to HW filter on device bond3
[   82.441891][ T8135] bond3 (unregistering): Released all slaves
[   82.502020][ T8149] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.515794][ T8149] syzkaller0: entered promiscuous mode
[   82.517572][ T8149] syzkaller0: entered allmulticast mode
[   82.538693][ T8149] tipc: Resetting bearer <eth:syzkaller0>
[   82.545426][ T8148] tipc: Resetting bearer <eth:syzkaller0>
[   82.580240][ T8148] tipc: Disabling bearer <eth:syzkaller0>
[   82.594645][ T8155] netlink: 'syz.1.973': attribute type 1 has an invalid length.
[   82.597653][ T8155] netlink: 224 bytes leftover after parsing attributes in process `syz.1.973'.
[   82.606678][ T8155] netlink: 48 bytes leftover after parsing attributes in process `syz.1.973'.
[   82.636540][ T8157] netlink: 'syz.0.978': attribute type 10 has an invalid length.
[   82.648045][ T8157] bond0: (slave wlan1): Enslaving as an active interface with a down link
[   82.686081][ T8157] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   82.885795][ T8165] netlink: 'syz.0.979': attribute type 1 has an invalid length.
[   82.956502][ T8172] bond3: (slave gretap2): making interface the new active one
[   82.965633][ T8172] bond3: (slave gretap2): Enslaving as an active interface with an up link
[   83.030667][ T8177] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.033363][ T8177] syzkaller0: entered promiscuous mode
[   83.038289][ T8177] syzkaller0: entered allmulticast mode
[   83.057755][ T8177] tipc: Resetting bearer <eth:syzkaller0>
[   83.060675][ T8176] tipc: Resetting bearer <eth:syzkaller0>
[   83.085463][ T8176] tipc: Disabling bearer <eth:syzkaller0>
[   83.265995][ T8194] team0: Device gtp2 is of different type
[   84.061592][ T8310] netlink: 'syz.1.1052': attribute type 1 has an invalid length.
[   84.539023][ T8366] netlink: 'syz.0.1079': attribute type 39 has an invalid length.
[   85.167281][  T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.169947][  T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.192119][ T8386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.677444][ T8391] netlink: 'syz.2.1088': attribute type 1 has an invalid length.
[   85.740600][ T8395] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[   85.829737][ T8407] syz.2.1091: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   85.836475][ T8410] netlink: 'syz.1.1097': attribute type 1 has an invalid length.
[   85.840510][ T8407] CPU: 1 UID: 0 PID: 8407 Comm: syz.2.1091 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[   85.840524][ T8407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   85.840529][ T8407] Call Trace:
[   85.840534][ T8407]  <TASK>
[   85.840538][ T8407]  dump_stack_lvl+0x189/0x250
[   85.840554][ T8407]  ? __pfx_dump_stack_lvl+0x10/0x10
[   85.840572][ T8407]  ? __pfx__printk+0x10/0x10
[   85.840583][ T8407]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   85.840594][ T8407]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   85.840605][ T8407]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   85.840617][ T8407]  warn_alloc+0x214/0x310
[   85.840629][ T8407]  ? stack_depot_save_flags+0x40/0x900
[   85.840639][ T8407]  ? __pfx_warn_alloc+0x10/0x10
[   85.840650][ T8407]  ? kasan_save_track+0x4f/0x80
[   85.840659][ T8407]  ? xskq_create+0x56/0x170
[   85.840670][ T8407]  ? xsk_init_queue+0xb0/0x110
[   85.840681][ T8407]  ? xsk_setsockopt+0x4dc/0x8d0
[   85.840691][ T8407]  ? do_sock_setsockopt+0x17c/0x1b0
[   85.840700][ T8407]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   85.840707][ T8407]  ? do_syscall_64+0xfa/0x3b0
[   85.840714][ T8407]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.840725][ T8407]  __vmalloc_node_range_noprof+0x125/0x12f0
[   85.840748][ T8407]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   85.840761][ T8407]  ? __kasan_kmalloc+0x93/0xb0
[   85.840772][ T8407]  vmalloc_user_noprof+0xad/0xf0
[   85.840782][ T8407]  ? xskq_create+0xbf/0x170
[   85.840793][ T8407]  xskq_create+0xbf/0x170
[   85.840805][ T8407]  xsk_init_queue+0xb0/0x110
[   85.840817][ T8407]  xsk_setsockopt+0x4dc/0x8d0
[   85.840829][ T8407]  ? __pfx_xsk_setsockopt+0x10/0x10
[   85.840839][ T8407]  ? __pfx_aa_sk_perm+0x10/0x10
[   85.840852][ T8407]  ? aa_sock_opt_perm+0x74/0x110
[   85.840860][ T8407]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   85.840867][ T8407]  ? __pfx_xsk_setsockopt+0x10/0x10
[   85.840878][ T8407]  do_sock_setsockopt+0x17c/0x1b0
[   85.840888][ T8407]  __x64_sys_setsockopt+0x13f/0x1b0
[   85.840899][ T8407]  do_syscall_64+0xfa/0x3b0
[   85.840906][ T8407]  ? lockdep_hardirqs_on+0x9c/0x150
[   85.840936][ T8407]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.840946][ T8407]  ? exc_page_fault+0x9f/0xf0
[   85.840959][ T8407]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.840967][ T8407] RIP: 0033:0x7fd9efb8e9a9
[   85.840976][ T8407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   85.840983][ T8407] RSP: 002b:00007fd9f0954038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   85.840994][ T8407] RAX: ffffffffffffffda RBX: 00007fd9efdb6080 RCX: 00007fd9efb8e9a9
[   85.841000][ T8407] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[   85.841005][ T8407] RBP: 00007fd9efc10d69 R08: 0000000000000004 R09: 0000000000000000
[   85.841010][ T8407] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   85.841015][ T8407] R13: 0000000000000000 R14: 00007fd9efdb6080 R15: 00007ffd9500bf78
[   85.841028][ T8407]  </TASK>
[   85.841032][ T8407] Mem-Info:
[   85.947973][ T8407] active_anon:5353 inactive_anon:0 isolated_anon:0
[   85.947973][ T8407]  active_file:1058 inactive_file:38219 isolated_file:0
[   85.947973][ T8407]  unevictable:1768 dirty:315 writeback:0
[   85.947973][ T8407]  slab_reclaimable:9684 slab_unreclaimable:67242
[   85.947973][ T8407]  mapped:18326 shmem:2458 pagetables:1052
[   85.947973][ T8407]  sec_pagetables:0 bounce:0
[   85.947973][ T8407]  kernel_misc_reclaimable:0
[   85.947973][ T8407]  free:282329 free_pcp:19502 free_cma:0
[   85.970621][ T8407] Node 0 active_anon:12328kB inactive_anon:0kB active_file:2588kB inactive_file:125404kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32724kB dirty:804kB writeback:0kB shmem:4972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4828kB pagetables:2612kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   85.983531][ T8407] Node 1 active_anon:9084kB inactive_anon:0kB active_file:1644kB inactive_file:27472kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40580kB dirty:456kB writeback:0kB shmem:4860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6840kB pagetables:1664kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   85.994589][ T8407] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   86.004173][ T8407] lowmem_reserve[]: 0 812 812 812 812
[   86.007362][ T8407] Node 0 DMA32 free:293140kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12396kB inactive_anon:0kB active_file:2588kB inactive_file:125404kB unevictable:3536kB writepending:804kB present:1556484kB managed:831988kB mlocked:0kB bounce:0kB free_pcp:39044kB local_pcp:13336kB free_cma:0kB
[   86.021465][ T8407] lowmem_reserve[]: 0 0 0 0 0
[   86.024187][ T8407] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[   86.034969][ T8407] lowmem_reserve[]: 0 0 854 854 854
[   86.036748][ T8407] Node 1 Normal free:361784kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9016kB inactive_anon:0kB active_file:1644kB inactive_file:27472kB unevictable:3536kB writepending:456kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:39820kB local_pcp:24464kB free_cma:0kB
[   86.049243][ T8407] lowmem_reserve[]: 0 0 0 0 0
[   86.050951][ T8407] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   86.055422][ T8407] Node 0 DMA32: 577*4kB (UM) 616*8kB (UME) 341*16kB (UME) 222*32kB (UM) 82*64kB (UME) 27*128kB (M) 8*256kB (ME) 5*512kB (UME) 4*1024kB (UM) 1*2048kB (M) 62*4096kB (UM) = 293204kB
[   86.081804][ T8407] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   86.087493][ T8407] Node 1 Normal: 375*4kB (UM) 590*8kB (UME) 269*16kB (UME) 347*32kB (UME) 123*64kB (UME) 50*128kB (UME) 13*256kB (UME) 6*512kB (UE) 2*1024kB (UM) 5*2048kB (UME) 75*4096kB (UM) = 361788kB
[   86.101160][ T8407] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   86.112709][ T8407] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   86.121604][ T8407] 41735 total pagecache pages
[   86.123205][ T8407] 0 pages in swap cache
[   86.124583][ T8407] Free swap  = 124996kB
[   86.139396][ T8407] Total swap = 124996kB
[   86.140807][ T8407] 786301 pages RAM
[   86.142052][ T8407] 0 pages HighMem/MovableOnly
[   86.143606][ T8407] 241056 pages reserved
[   86.145935][ T8407] 0 pages cma reserved
[   86.373638][ T8474] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.393204][ T8474] syzkaller0: entered promiscuous mode
[   86.395217][ T8474] syzkaller0: entered allmulticast mode
[   86.410057][ T8478] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[   86.413011][ T8478] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   86.435966][ T8474] tipc: Resetting bearer <eth:syzkaller0>
[   86.439574][ T8473] tipc: Resetting bearer <eth:syzkaller0>
[   86.449810][ T8473] tipc: Disabling bearer <eth:syzkaller0>
[   86.525636][ T8486] nbd: illegal input index -381222912
[   86.779935][ T8531] __nla_validate_parse: 12 callbacks suppressed
[   86.779946][ T8531] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1154'.
[   86.879460][ T8543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1160'.
[   86.880169][ T8545] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.887578][ T8545] syzkaller0: entered promiscuous mode
[   86.889634][ T8545] syzkaller0: entered allmulticast mode
[   86.902825][ T8543] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   86.904484][ T8545] tipc: Resetting bearer <eth:syzkaller0>
[   86.910255][ T8543] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   86.916685][ T8544] tipc: Resetting bearer <eth:syzkaller0>
[   86.926951][ T8544] tipc: Disabling bearer <eth:syzkaller0>
[   86.953461][ T8547] 8021q: VLANs not supported on ipvlan1
[   87.038875][ T8560] netlink: 'syz.2.1165': attribute type 4 has an invalid length.
[   87.046294][ T8560] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1165'.
[   87.107085][ T8568] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1169'.
[   88.058201][ T8599] netlink: 'syz.1.1181': attribute type 21 has an invalid length.
[   88.060770][ T8599] netlink: 'syz.1.1181': attribute type 1 has an invalid length.
[   88.188472][ T8608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1185'.
[   88.205407][ T8610] netlink: 'syz.2.1186': attribute type 1 has an invalid length.
[   88.210999][ T8610] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1186'.
[   88.317297][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1193'.
[   88.320299][ T8624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1193'.
[   88.323470][ T8624] netlink: 'syz.1.1193': attribute type 1 has an invalid length.
[   88.326142][ T8624] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1193'.
[   88.414491][ T8632] lo speed is unknown, defaulting to 1000
[   88.463840][ T8635] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   88.483360][ T8637] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.498317][ T8637] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1198'.
[   89.055235][ T8676] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[   89.209319][ T8698] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.253167][ T8701] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.317498][ T8710] nbd: couldn't find a device at index 0
[   89.639960][ T8727] netlink: 'syz.0.1235': attribute type 1 has an invalid length.
[   89.802136][ T8736] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   90.176020][ T5894] tipc: Node number set to 3711753861
[   90.755900][ T8799] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.758402][ T8799] syzkaller0: entered promiscuous mode
[   90.760333][ T8799] syzkaller0: entered allmulticast mode
[   90.777039][ T8799] tipc: Resetting bearer <eth:syzkaller0>
[   90.782741][ T8797] tipc: Resetting bearer <eth:syzkaller0>
[   90.792606][ T8797] tipc: Disabling bearer <eth:syzkaller0>
[   90.868383][ T8810] netlink: 'syz.2.1269': attribute type 39 has an invalid length.
[   90.898446][ T8811] pimreg: entered allmulticast mode
[   90.902112][ T8811] pimreg: left allmulticast mode
[   90.953651][ T8824] netlink: 'syz.0.1276': attribute type 1 has an invalid length.
[   90.982772][ T8821] lo speed is unknown, defaulting to 1000
[   92.297493][ T8906] netlink: 'syz.1.1314': attribute type 1 has an invalid length.
[   92.317763][ T8906] bond2: entered promiscuous mode
[   92.319745][ T8906] 8021q: adding VLAN 0 to HW filter on device bond2
[   92.516232][ T8929] bond0: left promiscuous mode
[   92.518042][ T8929] bond_slave_0: left promiscuous mode
[   92.520147][ T8929] bond_slave_1: left promiscuous mode
[   92.522301][ T8929] bond0: left allmulticast mode
[   92.524036][ T8929] bond_slave_0: left allmulticast mode
[   92.527398][ T8929] bond_slave_1: left allmulticast mode
[   92.529510][ T8929] batadv0: left promiscuous mode
[   92.531243][ T8929] batadv0: left allmulticast mode
[   92.534326][ T8929] batadv_slave_1: left promiscuous mode
[   92.542769][ T8929] geneve2: left promiscuous mode
[   92.555234][ T8929] bond2: left promiscuous mode
[   92.559600][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.562615][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.567271][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.570244][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.610659][ T8936] __nla_validate_parse: 10 callbacks suppressed
[   92.610669][ T8936] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1324'.
[   92.616019][ T8936] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1324'.
[   92.645613][ T8930] netlink: 'syz.0.1320': attribute type 1 has an invalid length.
[   92.881069][ T8961] netlink: 'syz.1.1331': attribute type 58 has an invalid length.
[   93.056432][ T8968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1334'.
[   93.339696][ T8981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1336'.
[   93.600247][ T8986] netlink: 'syz.2.1338': attribute type 10 has an invalid length.
[   93.612256][ T8986] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   93.624053][ T8986] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   93.917077][ T9006] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1347'.
[   94.684315][   T33] audit: type=1800 audit(1753624275.803:5): pid=9021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1354" name=14 dev="tmpfs" ino=2279 res=0 errno=0
[   94.830044][ T9034] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1360'.
[   95.308294][ T9093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1388'.
[   95.583336][ T9118] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   95.629480][ T9123] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1403'.
[   95.639000][ T9123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1403'.
[   95.643057][ T9123] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1403'.
[   95.803044][ T9142] bond0: entered promiscuous mode
[   95.805087][ T9142] bond_slave_0: entered promiscuous mode
[   95.807118][ T9142] bond_slave_1: entered promiscuous mode
[   95.810557][ T9142] batadv0: entered promiscuous mode
[   95.813517][ T9142] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[   95.817085][ T9142] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[   95.820463][ T9142] hsr1: entered allmulticast mode
[   95.822138][ T9142] bond0: entered allmulticast mode
[   95.823818][ T9142] bond_slave_0: entered allmulticast mode
[   95.826536][ T9142] bond_slave_1: entered allmulticast mode
[   95.828600][ T9142] batadv0: entered allmulticast mode
[   95.830678][ T9142] 8021q: adding VLAN 0 to HW filter on device hsr1
[   95.834098][ T9142] bond0: left promiscuous mode
[   95.836404][ T9142] bond_slave_0: left promiscuous mode
[   95.838337][ T9142] bond_slave_1: left promiscuous mode
[   95.841501][ T9142] batadv0: left promiscuous mode
[   96.112578][ T9170] bond0: (slave wlan1): Releasing backup interface
[   96.151036][ T9172] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2
[   96.154014][ T9172] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0
[   96.595997][ T9174] sock: sock_timestamping_bind_phc: sock not bind to device
[   97.711545][ T9204] __nla_validate_parse: 2 callbacks suppressed
[   97.711559][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1438'.
[   98.079220][ T9242] pim6reg: entered allmulticast mode
[   98.103949][ T9245] netlink: 'syz.0.1456': attribute type 15 has an invalid length.
[   98.255220][ T9263] lo speed is unknown, defaulting to 1000
[   98.768926][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1480'.
[   98.793568][ T9307] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1481'.
[   98.860211][ T9311] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[   99.356249][ T9316] netlink: 'syz.1.1485': attribute type 12 has an invalid length.
[   99.810730][ T9329] dvmrp8: entered allmulticast mode
[   99.818567][ T9329] openvswitch: netlink: Flow key attr not present in new flow.
[   99.842676][ T9325] dvmrp8: left allmulticast mode
[   99.981871][ T9337] netlink: 'syz.2.1492': attribute type 1 has an invalid length.
[   99.988082][ T9337] netlink: 'syz.2.1492': attribute type 4 has an invalid length.
[   99.991275][ T9337] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1492'.
[  100.769897][ T9381] netlink: 'syz.0.1514': attribute type 2 has an invalid length.
[  100.831412][ T9390] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1518'.
[  100.907759][ T9399] netlink: 410 bytes leftover after parsing attributes in process `syz.1.1522'.
[  100.944611][ T9403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1524'.
[  101.324931][ T9455] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1547'.
[  101.346675][ T9458] netlink: 'syz.0.1548': attribute type 2 has an invalid length.
[  101.349281][ T9458] netlink: 'syz.0.1548': attribute type 1 has an invalid length.
[  102.196590][ T9477] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1556'.
[  102.267903][ T9486] netlink: 'syz.2.1560': attribute type 1 has an invalid length.
[  102.450243][   T54] Bluetooth: hci2: command 0x0401 tx timeout
[  102.507123][ T9521] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1577'.
[  102.577703][ T9528] netlink: 'syz.2.1580': attribute type 1 has an invalid length.
[  102.786382][ T9557] __nla_validate_parse: 3 callbacks suppressed
[  102.786393][ T9557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1594'.
[  102.838055][ T9561] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ1
[  103.049289][ T9593] netlink: 'syz.0.1611': attribute type 178 has an invalid length.
[  103.076983][ T9598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1613'.
[  103.820627][ T9628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1627'.
[  103.893579][ T9634] netlink: 'syz.1.1630': attribute type 1 has an invalid length.
[  104.081652][ T9658] IPv6: sit2: Disabled Multicast RS
[  104.133262][ T9665] smc: net device bond0 applied user defined pnetid SYZ2
[  104.141840][ T9665] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1645'.
[  104.224582][ T9665] smc: removing net device bond0 with user defined pnetid SYZ2
[  104.230555][  T146] smc: removing ib device syz1
[  104.235584][ T9665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  104.239845][ T9665] bond_slave_0: left allmulticast mode
[  104.243812][ T9665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  104.248559][ T9665] bond_slave_1: left allmulticast mode
[  104.251576][ T9665] bond0 (unregistering): Released all slaves
[  104.659325][ T9698] team_slave_0: entered promiscuous mode
[  104.661270][ T9698] team_slave_1: entered promiscuous mode
[  104.669291][ T9698] vlan2: entered promiscuous mode
[  104.670952][ T9698] team0: entered promiscuous mode
[  104.801387][ T9714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1670'.
[  104.847499][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1675'.
[  104.856088][ T9724] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  104.860176][ T9724] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  104.886937][ T9730] vlan0: entered promiscuous mode
[  104.940267][ T9741] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1683'.
[  104.952326][ T9743] trusted_key: syz.0.1675 sent an empty control message without MSG_MORE.
[  105.036034][ T9757] netlink: 'syz.1.1690': attribute type 1 has an invalid length.
[  105.038517][ T9757] netlink: 'syz.1.1690': attribute type 2 has an invalid length.
[  105.041732][ T9757] netlink: 'syz.1.1690': attribute type 1 has an invalid length.
[  105.044151][ T9757] netlink: 'syz.1.1690': attribute type 2 has an invalid length.
[  105.088973][ T9765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1693'.
[  105.093749][ T9765] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  105.139848][ T9770] lo speed is unknown, defaulting to 1000
[  106.212518][ T5894] tipc: Node number set to 1965321638
[  106.286725][ T9821] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1712'.
[  106.289654][ T9821] openvswitch: netlink: Flow actions attr not present in new flow.
[  107.126493][ T9879] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1741'.
[  107.393192][ T9887] tipc: Resetting bearer <ib:ip6gre0>
[  107.407405][ T9887] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.409971][ T9887] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.511877][ T9887] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.638750][ T9906] netlink: 'syz.1.1753': attribute type 14 has an invalid length.
[  107.641482][ T5842] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.642272][ T5894] lo speed is unknown, defaulting to 1000
[  107.644126][ T5842] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.644154][ T5842] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.648118][ T5894] syz0: Port: 1 Link DOWN
[  107.649073][ T5842] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.658385][ T5894] lo speed is unknown, defaulting to 1000
[  107.659380][ T9906] netlink: 'syz.1.1753': attribute type 14 has an invalid length.
[  107.859318][ T9925] netlink: 'syz.1.1760': attribute type 21 has an invalid length.
[  107.862233][ T9925] __nla_validate_parse: 3 callbacks suppressed
[  107.862241][ T9925] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1760'.
[  107.915408][ T9927] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  107.918301][ T9927] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  107.963170][ T9929] netlink: 'syz.1.1762': attribute type 13 has an invalid length.
[  107.965931][ T9929] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1762'.
[  107.969134][ T9929] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  107.987961][ T9931] netlink: 'syz.2.1763': attribute type 2 has an invalid length.
[  107.990562][ T9931] netlink: 119 bytes leftover after parsing attributes in process `syz.2.1763'.
[  108.148933][ T9954] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  108.154127][ T9954] tipc: Resetting bearer <eth:syzkaller0>
[  108.361820][ T9970] bond0 (unregistering): Released all slaves
[  108.571218][ T9995] lo speed is unknown, defaulting to 1000
[  108.820897][T10025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1803'.
[  108.837507][T10025] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1803'.
[  108.897685][T10031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1806'.
[  108.900590][T10031] veth0_to_bond: entered allmulticast mode
[  108.964696][T10039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1809'.
[  108.969462][T10039] netlink: 'syz.2.1809': attribute type 2 has an invalid length.
[  109.168507][T10042] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  109.782141][T10053] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.888039][T10062] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1818'.
[  109.904668][T10062] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1818'.
[  110.119846][T10008] Set syz1 is full, maxelem 65536 reached
[  110.527818][T10110] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1836'.
[  110.608077][T10118] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  111.842123][T10194] netlink: 'syz.1.1874': attribute type 4 has an invalid length.
[  111.908199][T10196] atomic_op ffff888020eeb998 conn xmit_atomic 0000000000000000
[  111.967445][T10202] netlink: 'syz.1.1877': attribute type 33 has an invalid length.
[  111.970538][T10202] netlink: 'syz.1.1877': attribute type 10 has an invalid length.
[  112.511544][T10245] sctp: [Deprecated]: syz.0.1893 (pid 10245) Use of struct sctp_assoc_value in delayed_ack socket option.
[  112.511544][T10245] Use struct sctp_sack_info instead
[  112.751530][T10274] netlink: 'syz.0.1907': attribute type 39 has an invalid length.
[  113.182501][T10325] __nla_validate_parse: 3 callbacks suppressed
[  113.182512][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1929'.
[  113.188027][T10325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1929'.
[  113.269692][T10335] netlink: 'syz.1.1934': attribute type 1 has an invalid length.
[  113.285371][T10335] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1934'.
[  113.396345][T10336] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1932'.
[  113.460696][T10346] ieee802154 phy1 wpan1: encryption failed: -22
[  113.549856][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1942'.
[  113.559602][T10352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1942'.
[  113.564262][T10352] netlink: 'syz.1.1942': attribute type 18 has an invalid length.
[  113.580507][   T33] audit: type=1800 audit(1753624294.703:6): pid=10331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1932" name="cgroup.controllers" dev="tmpfs" ino=3260 res=0 errno=0
[  113.781228][T10372] netlink: 'syz.1.1951': attribute type 12 has an invalid length.
[  114.096807][T10384] pim6reg1: entered promiscuous mode
[  114.099035][T10384] pim6reg1: entered allmulticast mode
[  114.415946][T10406] lo speed is unknown, defaulting to 1000
[  114.456932][   T54] Bluetooth: hci2: link tx timeout
[  114.459627][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  114.463084][ T5833] Bluetooth: hci2: link tx timeout
[  114.464860][ T5833] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  114.760542][T10415] openvswitch: netlink: Flow key attribute not present in set flow.
[  114.963138][T10427] lo speed is unknown, defaulting to 1000
[  115.488167][T10455] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1989'.
[  115.507191][T10457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1988'.
[  115.644354][T10473] siw: device registration error -23
[  115.658057][T10473] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  115.728072][T10481] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2000'.
[  115.809580][T10483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2001'.
[  115.989982][T10495] netlink: 'syz.2.2007': attribute type 6 has an invalid length.
[  116.063956][T10501] netlink: 'syz.2.2010': attribute type 5 has an invalid length.
[  116.524849][ T5833] Bluetooth: hci2: command 0x0401 tx timeout
[  117.550982][T10563] netlink: 'syz.2.2038': attribute type 8 has an invalid length.
[  117.652037][T10576] lo speed is unknown, defaulting to 1000
[  117.675643][T10583] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  117.678699][T10583] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.187779][T10624] netlink: 'syz.1.2065': attribute type 3 has an invalid length.
[  118.541557][T10655] __nla_validate_parse: 6 callbacks suppressed
[  118.541566][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2080'.
[  118.726355][T10677] DL<Y: renamed from lo (while UP)
[  118.730102][T10679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2092'.
[  118.739825][T10679] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.929618][T10710] netlink: 'syz.0.2103': attribute type 4 has an invalid length.
[  118.937394][T10710] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2103'.
[  119.056410][T10723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2111'.
[  119.059657][T10723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2111'.
[  119.064064][T10723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2111'.
[  119.068100][T10723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2111'.
[  119.071211][T10723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2111'.
[  119.074258][T10723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2111'.
[  119.640021][T10741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2119'.
[  119.643964][T10741] netlink: 'syz.2.2119': attribute type 2 has an invalid length.
[  119.647899][T10741] netlink: 'syz.2.2119': attribute type 1 has an invalid length.
[  120.290445][T10820] netlink: 'syz.2.2152': attribute type 8 has an invalid length.
[  120.821180][T10892] lo speed is unknown, defaulting to 1000
[  120.991280][T10904] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[  120.996133][T10904] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  121.195868][T10920] netlink: 'syz.0.2194': attribute type 46 has an invalid length.
[  121.241471][T10926] raw_sendmsg: syz.2.2197 forgot to set AF_INET. Fix it!
[  121.896926][T10999] netlink: 'syz.1.2230': attribute type 21 has an invalid length.
[  122.268242][T11024] netlink: 'syz.2.2240': attribute type 4 has an invalid length.
[  122.456821][T11049] lo speed is unknown, defaulting to 1000
[  122.458713][T11049] lo speed is unknown, defaulting to 1000
[  122.461240][T11049] lo speed is unknown, defaulting to 1000
[  122.479341][T11049] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  122.489536][T11049] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  122.519380][T11049] lo speed is unknown, defaulting to 1000
[  122.523081][T11049] lo speed is unknown, defaulting to 1000
[  122.541601][T11049] lo speed is unknown, defaulting to 1000
[  123.630031][T11143] IPVS: length: 148 != 24
[  123.755331][T11156] netlink: 'syz.1.2291': attribute type 3 has an invalid length.
[  123.757990][T11156] netlink: 'syz.1.2291': attribute type 1 has an invalid length.
[  123.760586][T11156] __nla_validate_parse: 18 callbacks suppressed
[  123.760593][T11156] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2291'.
[  123.764445][T11158] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2292'.
[  124.220692][T11205] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2314'.
[  124.352778][T11219] lo speed is unknown, defaulting to 1000
[  124.366946][T11227] tipc: New replicast peer: 255.255.255.255
[  124.369280][T11227] tipc: Enabled bearer <udp:syz2>, priority 10
[  124.497750][T11224] lo speed is unknown, defaulting to 1000
[  124.499839][T11219] lo speed is unknown, defaulting to 1000
[  124.657384][T11224] lo speed is unknown, defaulting to 1000
[  124.742432][T11245] netlink: 'syz.0.2332': attribute type 1 has an invalid length.
[  124.745103][T11245] netlink: 'syz.0.2332': attribute type 3 has an invalid length.
[  124.747713][T11245] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2332'.
[  124.850302][T11258] @: renamed from bond_slave_0
[  124.850344][T11259] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2336'.
[  124.886801][T11261] netlink: 'syz.1.2339': attribute type 1 has an invalid length.
[  124.889298][T11261] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2339'.
[  124.892162][T11261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2339'.
[  124.937390][T11269] netlink: 'syz.2.2342': attribute type 2 has an invalid length.
[  125.494825][ T5867] tipc: Node number set to 166031559
[  126.096643][T11320] bond1: (slave gretap1): Releasing active interface
[  126.104464][T11320] bond3: (slave gretap2): Releasing active interface
[  126.218252][   T10] lo speed is unknown, defaulting to 1000
[  126.220332][   T10] syz2: Port: 1 Link ACTIVE
[  126.247253][T11330] 8021q: adding VLAN 0 to HW filter on device batadv1
[  126.250290][T11330] team0: Failed to send port change of device batadv1 via netlink (err -105)
[  126.253402][T11330] team0: Failed to send options change via netlink (err -105)
[  126.256074][T11330] team0: Port device batadv1 added
[  126.319384][T11338] netlink: 'syz.1.2374': attribute type 30 has an invalid length.
[  126.353629][T11341] geneve1: entered promiscuous mode
[  126.356763][T11341] geneve1: entered allmulticast mode
[  126.359847][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.365901][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.372555][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.376514][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.395252][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  126.412029][T11344] team0: Port device team_slave_0 removed
[  126.416064][T11344] team0: Port device team_slave_1 removed
[  126.418358][T11344] batman_adv: batadv0: Removing interface: batadv_slave_0
[  126.421184][T11344] batman_adv: batadv0: Removing interface: batadv_slave_1
[  126.447320][T11344] 8021q: adding VLAN 0 to HW filter on device team0
[  126.451932][T11344] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  126.651234][T11371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2390'.
[  126.884267][T11394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2401'.
[  126.934566][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  126.960834][T11412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2407'.
[  127.327543][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  127.485229][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.977269][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.981397][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  128.245000][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  128.263813][T11475] netlink: 'syz.2.2435': attribute type 3 has an invalid length.
[  128.270848][T11475] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.329267][T11475] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.380822][T11475] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.460987][T11475] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.543032][ T5842] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.566186][ T5842] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.578672][ T5842] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.591968][ T5842] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.866726][T11524] netlink: 'syz.1.2451': attribute type 20 has an invalid length.
[  129.138485][T11550] __nla_validate_parse: 2 callbacks suppressed
[  129.138495][T11550] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2460'.
[  129.269171][T11568] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2467'.
[  129.299002][T11571] dvmrp1: tun_chr_ioctl cmd 1074025677
[  129.301077][T11571] dvmrp1: linktype set to 773
[  129.366996][T11575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2470'.
[  129.540630][T11585] siw: device registration error -23
[  129.567001][T11587] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2474'.
[  129.583825][T11587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2474'.
[  129.724438][T11589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2475'.
[  129.810682][T11603] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2480'.
[  129.818470][T11605] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2481'.
[  129.869706][T11613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2485'.
[  129.872611][T11613] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2485'.
[  130.010799][T11629] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  130.780814][T11695] netlink: 'syz.2.2523': attribute type 1 has an invalid length.
[  131.021355][T11725] lo speed is unknown, defaulting to 1000
[  131.066267][T11728] netlink: 'syz.2.2539': attribute type 12 has an invalid length.
[  131.068870][T11728] netlink: 'syz.2.2539': attribute type 29 has an invalid length.
[  131.169864][T11725] lo speed is unknown, defaulting to 1000
[  131.478182][T11760] bridge_slave_0: entered promiscuous mode
[  131.480589][T11760] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  131.643686][T11773] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  132.202578][T11782] netlink: 'syz.2.2561': attribute type 7 has an invalid length.
[  132.209294][T11782] netlink: 'syz.2.2561': attribute type 8 has an invalid length.
[  132.287741][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.444985][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.947701][T11812] lo speed is unknown, defaulting to 1000
[  133.031162][T11812] lo speed is unknown, defaulting to 1000
[  133.386221][T11828] lo speed is unknown, defaulting to 1000
[  133.468306][T11828] lo speed is unknown, defaulting to 1000
[  134.154213][T11868] __nla_validate_parse: 14 callbacks suppressed
[  134.154224][T11868] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2593'.
[  134.231886][T11875] netlink: 'syz.0.2596': attribute type 29 has an invalid length.
[  134.235412][T11875] netlink: 'syz.0.2596': attribute type 29 has an invalid length.
[  134.238255][T11875] netlink: 604 bytes leftover after parsing attributes in process `syz.0.2596'.
[  134.333808][T11887] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2601'.
[  134.341788][T11887] openvswitch: netlink: Missing key (keys=40, expected=80)
[  134.345937][T11887] netlink: 'syz.0.2601': attribute type 10 has an invalid length.
[  134.348799][T11887] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2601'.
[  134.354611][T11887] dummy0: entered promiscuous mode
[  134.361312][T11887] bridge0: port 1(dummy0) entered blocking state
[  134.363919][T11887] bridge0: port 1(dummy0) entered disabled state
[  134.366472][T11887] dummy0: entered allmulticast mode
[  134.369535][T11887] bridge0: port 1(dummy0) entered blocking state
[  134.371669][T11887] bridge0: port 1(dummy0) entered forwarding state
[  134.389217][T11890] netlink: 'syz.2.2603': attribute type 1 has an invalid length.
[  134.391749][T11890] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2603'.
[  134.486547][T11896] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  134.489601][T11896] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  134.540885][T11908] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2612'.
[  134.548692][T11908] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  135.117090][T11950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2631'.
[  135.388648][T11956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2634'.
[  136.139639][T11969] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2638'.
[  136.139657][T11967] openvswitch: netlink: Multiple metadata blocks provided
[  136.330006][T11994] netlink: 'syz.1.2651': attribute type 11 has an invalid length.
[  136.360289][T11998] netlink: 'syz.1.2653': attribute type 3 has an invalid length.
[  136.413839][T12002] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2655'.
[  136.438349][T12006] netlink: 'syz.1.2657': attribute type 29 has an invalid length.
[  136.441704][T12006] netlink: 'syz.1.2657': attribute type 29 has an invalid length.
[  136.680773][T12038] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  136.890186][T12055] veth0: entered promiscuous mode
[  136.904207][T12055] veth0 (unregistering): left promiscuous mode
[  136.971459][T12059] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  136.973839][T12059] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  137.028545][T12063] IPVS: Error connecting to the multicast addr
[  137.142632][T12078] Bluetooth: MGMT ver 1.23
[  137.281945][T12096] netlink: 'syz.2.2699': attribute type 5 has an invalid length.
[  137.455179][T12110] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  137.862882][T12126] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.262898][T12151] netlink: 'syz.2.2725': attribute type 16 has an invalid length.
[  138.435634][T12177] vlan0: entered promiscuous mode
[  138.538378][T12192] dummy0: left allmulticast mode
[  138.540351][T12192] bridge0: port 1(dummy0) entered disabled state
[  138.550779][T12192] team0: Port device batadv1 removed
[  138.563407][T12192] team0: Mode changed to "activebackup"
[  138.571559][T12197] lo speed is unknown, defaulting to 1000
[  138.571682][T12192] tipc: Enabled bearer <eth:team0>, priority 0
[  138.712127][T12197] lo speed is unknown, defaulting to 1000
[  138.852409][T12233] bridge: RTM_NEWNEIGH with invalid ether address
[  140.006685][T12264] syzkaller1: entered promiscuous mode
[  140.008579][T12264] syzkaller1: entered allmulticast mode
[  140.052097][T12267] validate_nla: 3 callbacks suppressed
[  140.052108][T12267] netlink: 'syz.0.2778': attribute type 1 has an invalid length.
[  140.063348][T12267] __nla_validate_parse: 14 callbacks suppressed
[  140.063358][T12267] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2778'.
[  140.132582][T12273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2780'.
[  140.266797][T12285] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2785'.
[  140.378246][T12297] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0
[  140.529369][T12313] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2798'.
[  140.577079][T12319] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2801'.
[  140.580011][T12319] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2801'.
[  140.587814][T12319] netlink: 'syz.2.2801': attribute type 5 has an invalid length.
[  140.590828][T12319] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2801'.
[  140.745214][T12337] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2810'.
[  140.750350][T12337] IPv6: sit1: Disabled Multicast RS
[  140.752452][T12337] sit1: entered allmulticast mode
[  140.759506][T12339] netlink: 'syz.2.2811': attribute type 13 has an invalid length.
[  140.762146][T12339] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2811'.
[  140.782188][T12339] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len
[  140.936199][T12349] netlink: del zone limit has 4 unknown bytes
[  141.870519][T12374] lo speed is unknown, defaulting to 1000
[  141.884838][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  142.033313][T12374] lo speed is unknown, defaulting to 1000
[  142.319159][T12410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2839'.
[  142.981059][T12465] netlink: 'syz.0.2864': attribute type 6 has an invalid length.
[  143.268160][T12481] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  143.355315][    C0] vcan0: j1939_session_tx_dat: 0xffff88803567a400: queue data error: -100
[  143.358467][    C0] vcan0: j1939_xtp_rx_dpo: no connection found
[  143.360642][    C0] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found
[  143.363142][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.365879][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.368600][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.371190][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.374099][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.376784][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.379405][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.381945][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.384491][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.387099][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.389725][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.392263][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.394924][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.397456][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.400043][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.402623][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.405387][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.407936][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.410542][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.413040][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.415724][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.418267][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.420843][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.423385][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.426083][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.428669][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.431431][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.434010][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.436688][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.439210][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.441815][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.444457][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.447162][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.449769][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.452295][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.454803][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.457389][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.459903][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.462527][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.465063][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.467684][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.470262][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.472802][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.475314][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.477797][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.480356][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.482962][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.485611][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.488116][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.490606][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.493181][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.495802][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.498372][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.500869][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.503472][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.506208][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.508868][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.511400][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.513867][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.516478][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.519019][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.521597][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.524111][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.526722][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.529312][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.531781][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.534268][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.537023][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.539516][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.542077][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.544687][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.547258][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.549742][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.552299][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.554937][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.557430][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.560011][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.562519][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.565036][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.567487][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.569990][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.572515][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.575063][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.577546][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.580156][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.582700][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.585375][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.587966][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.590562][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.593112][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.595769][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.598286][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.600850][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.603402][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.606160][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.608763][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.611365][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.613893][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.616539][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.619079][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.621558][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.624101][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.626771][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.629356][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.631959][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.634510][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.637234][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.639810][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.642363][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.644982][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.647615][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.650169][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.652752][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.655311][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.657801][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.660403][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.662988][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.665771][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.668193][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.670771][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.673359][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.676014][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.678573][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.681079][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.683683][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  143.686159][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  143.853311][T12504] netlink: 'syz.2.2879': attribute type 9 has an invalid length.
[  143.874463][T12510] openvswitch: netlink: IP tunnel dst address not specified
[  143.890338][T12509] netlink: 'syz.0.2882': attribute type 7 has an invalid length.
[  143.891969][T12512] sctp: [Deprecated]: syz.2.2883 (pid 12512) Use of int in max_burst socket option.
[  143.891969][T12512] Use struct sctp_assoc_value instead
[  143.892907][T12509] netlink: 'syz.0.2882': attribute type 8 has an invalid length.
[  143.980424][T12522] smc: adding net device bond0 with user defined pnetid SYZ2
[  143.983721][T12522] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.989921][T12525] bridge_slave_0: left allmulticast mode
[  143.992023][T12525] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.997184][T12525] bridge_slave_1: left allmulticast mode
[  143.998982][T12525] bridge_slave_1: left promiscuous mode
[  144.000872][T12525] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.006548][T12525] bond0: (slave bond_slave_0): Releasing backup interface
[  144.010205][T12525] bond0: (slave bond_slave_1): Releasing backup interface
[  144.013715][T12525] team_slave_0: left promiscuous mode
[  144.016528][T12525] team0: Port device team_slave_0 removed
[  144.018697][T12525] team_slave_1: left promiscuous mode
[  144.021281][T12525] team0: Port device team_slave_1 removed
[  144.023316][T12525] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.028021][T12525] bond0: (slave wlan1): Releasing backup interface
[  144.031292][T12525] bond2: (slave wireguard0): Releasing backup interface
[  144.033520][T12525] wireguard0: left promiscuous mode
[  144.036268][T12525] bond2: (slave wireguard1): making interface the new active one
[  144.038833][T12525] wireguard1: entered promiscuous mode
[  144.042388][T12525] bond2: (slave wireguard1): Releasing backup interface
[  144.045717][T12525] wireguard1: left promiscuous mode
[  144.053270][T12522] macvlan2: entered promiscuous mode
[  144.055451][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  144.058429][T12522] macvlan2: entered allmulticast mode
[  144.060933][T12522] bond0: (slave macvlan2): Opening slave failed
[  144.306091][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  144.424491][T12561] lo speed is unknown, defaulting to 1000
[  144.503019][T12561] lo speed is unknown, defaulting to 1000
[  144.520132][T12563] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  144.949024][T12572] netlink: 'syz.2.2908': attribute type 1 has an invalid length.
[  144.956384][T12572] netlink: 'syz.2.2908': attribute type 1 has an invalid length.
[  144.985436][T12576] sock: sock_timestamping_bind_phc: sock not bind to device
[  145.121300][T12592] delete_channel: no stack
[  145.124334][T12594] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.228722][T12608] netlink: 'syz.2.2926': attribute type 1 has an invalid length.
[  145.231595][T12608] __nla_validate_parse: 10 callbacks suppressed
[  145.231603][T12608] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2926'.
[  145.357790][T12621] : entered promiscuous mode
[  145.360160][T12619] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2931'.
[  145.390385][T12619] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2931'.
[  145.517271][T12640] geneve3: entered allmulticast mode
[  145.610950][T12649] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2945'.
[  145.614077][T12649] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2945'.
[  145.682974][T12655] netlink: 'syz.2.2949': attribute type 3 has an invalid length.
[  145.690740][T12655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2949'.
[  145.843662][T12683] netlink: 'syz.2.2962': attribute type 10 has an invalid length.
[  145.850994][T12683] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  145.858012][T12683] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  145.860984][T12683] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  145.866540][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  145.940002][T12695] netlink: 'syz.0.2967': attribute type 10 has an invalid length.
[  145.942573][T12695] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2967'.
[  145.948983][T12695] team0: Port device geneve0 added
[  145.952666][ T5842] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.958266][ T5842] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.964334][ T5842] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.969435][ T5842] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  146.026542][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  146.323995][T12719] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  146.428237][T12725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2981'.
[  146.432358][T12725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2981'.
[  146.547354][T12731] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2984'.
[  147.612581][T12832] lo speed is unknown, defaulting to 1000
[  147.658394][T12843] netlink: 'syz.1.3033': attribute type 13 has an invalid length.
[  147.661132][T12843] netlink: 'syz.1.3033': attribute type 17 has an invalid length.
[  147.735006][T12843] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  147.751467][T12832] lo speed is unknown, defaulting to 1000
[  147.862267][T12852] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  147.950672][T12859] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  148.952645][T12919] netlink: 'syz.0.3065': attribute type 9 has an invalid length.
[  148.955872][T12919] netlink: 'syz.0.3065': attribute type 9 has an invalid length.
[  149.495678][T12973] netlink: 'syz.0.3089': attribute type 13 has an invalid length.
[  149.498243][T12973] netlink: 'syz.0.3089': attribute type 17 has an invalid length.
[  149.508547][T12973] dummy0: left promiscuous mode
[  149.511139][T12973] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  149.760170][T13000] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  150.196202][  T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.199660][  T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.209256][T13041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  150.245813][T13045] netlink: 'syz.1.3118': attribute type 11 has an invalid length.
[  150.249340][T13045] netlink: 'syz.1.3118': attribute type 11 has an invalid length.
[  150.251961][T13045] __nla_validate_parse: 11 callbacks suppressed
[  150.251969][T13045] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3118'.
[  150.336849][T13055] lo speed is unknown, defaulting to 1000
[  150.427173][T13058] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  150.428531][T13055] lo speed is unknown, defaulting to 1000
[  150.487268][T13060] IPVS: Error connecting to the multicast addr
[  150.522821][T13060] validate_nla: 2 callbacks suppressed
[  150.522833][T13060] netlink: 'syz.0.3122': attribute type 16 has an invalid length.
[  150.527584][T13060] netlink: 'syz.0.3122': attribute type 17 has an invalid length.
[  150.574426][T13060] tipc: Resetting bearer <eth:team0>
[  150.606266][T13064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3122'.
[  150.609262][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.619504][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.622275][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.625205][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.950933][T13085] bond4: entered promiscuous mode
[  150.952830][T13085] bond4: entered allmulticast mode
[  150.956221][T13085] 8021q: adding VLAN 0 to HW filter on device bond4
[  150.986392][T13088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3131'.
[  150.989434][T13088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3131'.
[  150.992444][T13088] netlink: 'syz.2.3131': attribute type 12 has an invalid length.
[  150.995245][T13088] netlink: 'syz.2.3131': attribute type 11 has an invalid length.
[  151.293576][T13109] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.3140'.
[  151.322057][T13113] netlink: 'syz.0.3141': attribute type 4 has an invalid length.
[  151.442449][T13120] lo speed is unknown, defaulting to 1000
[  151.599998][T13120] lo speed is unknown, defaulting to 1000
[  151.602184][T13135] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3151'.
[  151.747962][T13142] lo speed is unknown, defaulting to 1000
[  151.841552][T13142] lo speed is unknown, defaulting to 1000
[  151.862185][T13154] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.106246][T13158] rdma_rxe: rxe_newlink: failed to add veth1_to_bond
[  152.190622][T13164] netlink: 'syz.2.3162': attribute type 11 has an invalid length.
[  152.262374][T13142] netlink: 'syz.1.3154': attribute type 6 has an invalid length.
[  152.537457][T13192] netlink: 'syz.2.3177': attribute type 1 has an invalid length.
[  152.540029][T13192] netlink: 208 bytes leftover after parsing attributes in process `syz.2.3177'.
[  152.699167][T13208] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3184'.
[  152.702160][T13208] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3184'.
[  152.706443][T13208] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3184'.
[  152.712288][T13210] syzkaller1: entered promiscuous mode
[  152.714143][T13210] syzkaller1: entered allmulticast mode
[  152.749330][T13214] openvswitch: netlink: IPv4 tun info is not correct
[  153.315312][T13277] netlink: 'syz.2.3216': attribute type 11 has an invalid length.
[  153.472853][T13304] netlink: 'syz.0.3230': attribute type 142 has an invalid length.
[  153.738324][T13344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  153.776173][T13350] netlink: 'syz.1.3252': attribute type 28 has an invalid length.
[  153.782692][T13352] bridge4: entered promiscuous mode
[  153.827414][T13356] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  153.974718][T13371] netlink: 'syz.1.3260': attribute type 2 has an invalid length.
[  153.984321][T13371] : entered promiscuous mode
[  154.807718][T13430] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma?
[  155.903701][ T5833] Bluetooth: hci2: command 0x0401 tx timeout
[  155.906707][   T54] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  156.195027][T13521] pimreg: tun_chr_ioctl cmd 2147767506
[  156.208972][T13523] __nla_validate_parse: 15 callbacks suppressed
[  156.208981][T13523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3329'.
[  156.280519][T13529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3332'.
[  156.298908][T13529] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.322196][T13529] bond0: (slave gretap4): Enslaving as an active interface with an up link
[  156.399339][T13529] bond0 (unregistering): (slave gretap4): Releasing backup interface
[  156.405478][T13529] bond0 (unregistering): Released all slaves
[  156.625231][T13582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3355'.
[  156.827960][T13615] validate_nla: 6 callbacks suppressed
[  156.827971][T13615] netlink: 'syz.1.3371': attribute type 1 has an invalid length.
[  157.945747][T13659] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3391'.
[  157.967477][ T5833] Bluetooth: hci2: command 0x0401 tx timeout
[  158.803109][T13681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3399'.
[  158.820694][T13681] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3399'.
[  159.019340][T13701] tun0: tun_chr_ioctl cmd 2147767521
[  159.360383][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3421'.
[  159.431286][T13734] syzkaller1: entered promiscuous mode
[  159.434788][T13734] syzkaller1: entered allmulticast mode
[  159.487254][T13739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3426'.
[  159.526809][T13741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3427'.
[  159.535960][T13743] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3428'.
[  159.629591][T13753] netlink: 'syz.1.3433': attribute type 4 has an invalid length.
[  159.633128][ T1269] lo speed is unknown, defaulting to 1000
[  159.636451][ T1269] syz2: Port: 1 Link DOWN
[  159.639190][T13753] netlink: 'syz.1.3433': attribute type 4 has an invalid length.
[  159.643181][ T1269] lo speed is unknown, defaulting to 1000
[  159.649601][   T10] lo speed is unknown, defaulting to 1000
[  159.919392][T13768] netlink: 'syz.0.3440': attribute type 2 has an invalid length.
[  159.924802][T13768] netlink: 'syz.0.3440': attribute type 1 has an invalid length.
[  160.353764][T13790] tc_dump_action: action bad kind
[  160.368625][T13791] syzkaller0: entered promiscuous mode
[  160.370619][T13791] syzkaller0: entered allmulticast mode
[  160.444915][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  161.379799][T13836] pimreg3: entered allmulticast mode
[  161.512204][T13847] __nla_validate_parse: 4 callbacks suppressed
[  161.512213][T13847] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3474'.
[  161.518777][T13847] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3474'.
[  161.521717][T13847] bridge0: port 1(macvlan1) entered blocking state
[  161.523884][T13847] bridge0: port 1(macvlan1) entered disabled state
[  161.528222][T13847] macvlan1: entered allmulticast mode
[  161.530926][T13847] macvlan1: entered promiscuous mode
[  161.533104][T13847] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3474'.
[  161.574169][T13854] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3478'.
[  161.577619][T13854] netlink: 'syz.2.3478': attribute type 3 has an invalid length.
[  161.795793][T13884] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3493'.
[  161.808675][T13886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3494'.
[  162.050251][T13913] lo speed is unknown, defaulting to 1000
[  162.184651][T13913] lo speed is unknown, defaulting to 1000
[  162.616201][T13957] team0: Port device geneve0 removed
[  162.725917][T13963] 
[  162.726933][T13963] ======================================================
[  162.729333][T13963] WARNING: possible circular locking dependency detected
[  162.731567][T13963] 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 Not tainted
[  162.734960][T13963] ------------------------------------------------------
[  162.737216][T13963] syz.0.3526/13963 is trying to acquire lock:
[  162.739216][T13963] ffff888020efc188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  162.742635][T13963] 
[  162.742635][T13963] but task is already holding lock:
[  162.744976][T13963] ffff888020efc230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x93e/0x18f0
[  162.748030][T13963] 
[  162.748030][T13963] which lock already depends on the new lock.
[  162.748030][T13963] 
[  162.751338][T13963] 
[  162.751338][T13963] the existing dependency chain (in reverse order) is:
[  162.754379][T13963] 
[  162.754379][T13963] -> #2 (&nbd->config_lock){+.+.}-{4:4}:
[  162.756844][T13963]        lock_acquire+0x120/0x360
[  162.758458][T13963]        __mutex_lock+0x182/0xe80
[  162.760103][T13963]        refcount_dec_and_mutex_lock+0x30/0xa0
[  162.762051][T13963]        nbd_config_put+0x2c/0x790
[  162.763680][T13963]        nbd_release+0xfe/0x140
[  162.765408][T13963]        bdev_release+0x536/0x650
[  162.767128][T13963]        blkdev_release+0x15/0x20
[  162.768916][T13963]        __fput+0x44c/0xa70
[  162.770607][T13963]        fput_close_sync+0x119/0x200
[  162.772304][T13963]        __x64_sys_close+0x7f/0x110
[  162.773941][T13963]        do_syscall_64+0xfa/0x3b0
[  162.775555][T13963]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.777543][T13963] 
[  162.777543][T13963] -> #1 (&disk->open_mutex){+.+.}-{4:4}:
[  162.780007][T13963]        lock_acquire+0x120/0x360
[  162.781799][T13963]        __mutex_lock+0x182/0xe80
[  162.783449][T13963]        __del_gendisk+0x129/0x9e0
[  162.785108][T13963]        del_gendisk+0xe8/0x160
[  162.786691][T13963]        nbd_dev_remove_work+0x47/0xe0
[  162.788458][T13963]        process_scheduled_works+0xae1/0x17b0
[  162.790549][T13963]        worker_thread+0x8a0/0xda0
[  162.792184][T13963]        kthread+0x711/0x8a0
[  162.793726][T13963]        ret_from_fork+0x3fc/0x770
[  162.795370][T13963]        ret_from_fork_asm+0x1a/0x30
[  162.797070][T13963] 
[  162.797070][T13963] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  162.799702][T13963]        validate_chain+0xb9b/0x2140
[  162.801493][T13963]        __lock_acquire+0xab9/0xd20
[  162.803359][T13963]        lock_acquire+0x120/0x360
[  162.805142][T13963]        down_write+0x96/0x1f0
[  162.806873][T13963]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  162.808850][T13963]        nbd_start_device+0x16c/0xac0
[  162.810582][T13963]        nbd_genl_connect+0x135b/0x18f0
[  162.812377][T13963]        genl_family_rcv_msg_doit+0x215/0x300
[  162.814416][T13963]        genl_rcv_msg+0x60e/0x790
[  162.816166][T13963]        netlink_rcv_skb+0x208/0x470
[  162.818168][T13963]        genl_rcv+0x28/0x40
[  162.819696][T13963]        netlink_unicast+0x82f/0x9e0
[  162.821669][T13963]        netlink_sendmsg+0x805/0xb30
[  162.823532][T13963]        __sock_sendmsg+0x21c/0x270
[  162.825330][T13963]        ____sys_sendmsg+0x505/0x830
[  162.827117][T13963]        ___sys_sendmsg+0x21f/0x2a0
[  162.829034][T13963]        __x64_sys_sendmsg+0x19b/0x260
[  162.830889][T13963]        do_syscall_64+0xfa/0x3b0
[  162.832738][T13963]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.834889][T13963] 
[  162.834889][T13963] other info that might help us debug this:
[  162.834889][T13963] 
[  162.838374][T13963] Chain exists of:
[  162.838374][T13963]   &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock
[  162.838374][T13963] 
[  162.843071][T13963]  Possible unsafe locking scenario:
[  162.843071][T13963] 
[  162.845407][T13963]        CPU0                    CPU1
[  162.847120][T13963]        ----                    ----
[  162.848843][T13963]   lock(&nbd->config_lock);
[  162.850441][T13963]                                lock(&disk->open_mutex);
[  162.852801][T13963]                                lock(&nbd->config_lock);
[  162.855375][T13963]   lock(&set->update_nr_hwq_lock);
[  162.857149][T13963] 
[  162.857149][T13963]  *** DEADLOCK ***
[  162.857149][T13963] 
[  162.860126][T13963] 3 locks held by syz.0.3526/13963:
[  162.861875][T13963]  #0: ffffffff8f584b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  162.864598][T13963]  #1: ffffffff8f584988 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  162.867477][T13963]  #2: ffff888020efc230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x93e/0x18f0
[  162.870846][T13963] 
[  162.870846][T13963] stack backtrace:
[  162.872790][T13963] CPU: 1 UID: 0 PID: 13963 Comm: syz.0.3526 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[  162.872802][T13963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  162.872807][T13963] Call Trace:
[  162.872812][T13963]  <TASK>
[  162.872817][T13963]  dump_stack_lvl+0x189/0x250
[  162.872832][T13963]  ? __pfx_dump_stack_lvl+0x10/0x10
[  162.872842][T13963]  ? __pfx__printk+0x10/0x10
[  162.872854][T13963]  ? print_lock_name+0xde/0x100
[  162.872863][T13963]  print_circular_bug+0x2ee/0x310
[  162.872875][T13963]  check_noncircular+0x134/0x160
[  162.872887][T13963]  validate_chain+0xb9b/0x2140
[  162.872900][T13963]  __lock_acquire+0xab9/0xd20
[  162.872909][T13963]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  162.872919][T13963]  lock_acquire+0x120/0x360
[  162.872928][T13963]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  162.872939][T13963]  ? kernfs_add_one+0xf0/0x520
[  162.872947][T13963]  down_write+0x96/0x1f0
[  162.872956][T13963]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  162.872964][T13963]  ? __pfx_down_write+0x10/0x10
[  162.872972][T13963]  ? kernfs_add_one+0xf0/0x520
[  162.872979][T13963]  blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  162.873012][T13963]  ? sysfs_add_file_mode_ns+0x238/0x300
[  162.873021][T13963]  ? sysfs_add_file_mode_ns+0x259/0x300
[  162.873032][T13963]  nbd_start_device+0x16c/0xac0
[  162.873042][T13963]  ? __nla_parse+0x40/0x60
[  162.873052][T13963]  ? device_create_file+0xf4/0x1c0
[  162.873066][T13963]  nbd_genl_connect+0x135b/0x18f0
[  162.873077][T13963]  ? __pfx_nbd_genl_connect+0x10/0x10
[  162.873090][T13963]  ? __nla_parse+0x40/0x60
[  162.873100][T13963]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  162.873111][T13963]  genl_family_rcv_msg_doit+0x215/0x300
[  162.873122][T13963]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  162.873133][T13963]  ? stack_trace_save+0x9c/0xe0
[  162.873145][T13963]  genl_rcv_msg+0x60e/0x790
[  162.873157][T13963]  ? __pfx_genl_rcv_msg+0x10/0x10
[  162.873166][T13963]  ? __pfx_nbd_genl_connect+0x10/0x10
[  162.873178][T13963]  netlink_rcv_skb+0x208/0x470
[  162.873185][T13963]  ? __lock_acquire+0xab9/0xd20
[  162.873191][T13963]  ? __pfx_genl_rcv_msg+0x10/0x10
[  162.873200][T13963]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  162.873210][T13963]  ? down_read+0x1ad/0x2e0
[  162.873218][T13963]  genl_rcv+0x28/0x40
[  162.873226][T13963]  netlink_unicast+0x82f/0x9e0
[  162.873238][T13963]  ? __pfx_netlink_unicast+0x10/0x10
[  162.873248][T13963]  ? netlink_sendmsg+0x642/0xb30
[  162.873255][T13963]  ? skb_put+0x11b/0x210
[  162.873263][T13963]  netlink_sendmsg+0x805/0xb30
[  162.873272][T13963]  ? __pfx_netlink_sendmsg+0x10/0x10
[  162.873279][T13963]  ? aa_sock_msg_perm+0x94/0x160
[  162.873287][T13963]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  162.873294][T13963]  ? __pfx_netlink_sendmsg+0x10/0x10
[  162.873301][T13963]  __sock_sendmsg+0x21c/0x270
[  162.873312][T13963]  ____sys_sendmsg+0x505/0x830
[  162.873321][T13963]  ? __pfx_____sys_sendmsg+0x10/0x10
[  162.873331][T13963]  ? import_iovec+0x74/0xa0
[  162.873340][T13963]  ___sys_sendmsg+0x21f/0x2a0
[  162.873348][T13963]  ? __pfx____sys_sendmsg+0x10/0x10
[  162.873362][T13963]  ? __fget_files+0x2a/0x420
[  162.873373][T13963]  ? __fget_files+0x3a0/0x420
[  162.873384][T13963]  __x64_sys_sendmsg+0x19b/0x260
[  162.873392][T13963]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  162.873402][T13963]  ? __sys_socketpair+0x4a9/0x560
[  162.873409][T13963]  ? do_syscall_64+0xbe/0x3b0
[  162.873417][T13963]  do_syscall_64+0xfa/0x3b0
[  162.873423][T13963]  ? lockdep_hardirqs_on+0x9c/0x150
[  162.873429][T13963]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.873437][T13963]  ? exc_page_fault+0x9f/0xf0
[  162.873447][T13963]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.873454][T13963] RIP: 0033:0x7f458978e9a9
[  162.873463][T13963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  162.873470][T13963] RSP: 002b:00007f458a58b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  162.873478][T13963] RAX: ffffffffffffffda RBX: 00007f45899b5fa0 RCX: 00007f458978e9a9
[  162.873484][T13963] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004
[  162.873489][T13963] RBP: 00007f4589810d69 R08: 0000000000000000 R09: 0000000000000000
[  162.873493][T13963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  162.873498][T13963] R13: 0000000000000000 R14: 00007f45899b5fa0 R15: 00007ffc4a3eb478
[  162.873506][T13963]  </TASK>
[  163.074922][T13963] nbd2: detected capacity change from 0 to 127
[  163.083110][   T56] block nbd2: Receive control failed (result -104)
[  170.215073][ T5833] Bluetooth: hci1: command 0x0406 tx timeout

VM DIAGNOSIS:
13:52:23  Registers:
info registers vcpu 0

CPU#0
RAX=2e561769281daa00 RBX=ffffffff81976a18 RCX=2e561769281daa00 RDX=0000000000000001
RSI=ffffffff8be28ce0 RDI=ffffffff81976a18 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1f6f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6d24f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd9500afa8 CR3=0000000027030000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fd9efc11d4f
XMM06=0000000000000000 00007fd9efc11d49 XMM07=0000000000000000 00007fd9efc11d5d
XMM08=0000000000000000 00007fd9efc11de3 XMM09=0000000000000000 00007fd9efc11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000072 RBX=0000000000000072 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001131 RDI=0000000000001132 RBP=00000000000003f8 RSP=ffffc9000406e690
R8 =ffff8881077d8237 R9 =1ffff11020efb046 R10=dffffc0000000000 R11=ffffffff85464660
R12=dffffc0000000000 R13=ffffffff99af18c3 R14=ffffffff99df64c0 R15=0000000000000000
RIP=ffffffff854646dc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f458a58b6c0 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000005b80 CR3=000000002796e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8133a4fe ffffffff8133a4fe
XMM02=00007f61c9786478 ffffffff8133a4fe XMM03=00007f61c9786488 00007f61c9786480
XMM04=00007f61ca2ed100 00007f61c9786440 XMM05=00007f61c9786458 00007f61c97864a0
XMM06=00007f61c9786498 00007f61c9786490 XMM07=00007f61c9786488 00007f61c9786480
XMM08=0000000000000000 00007f61c9611de3 XMM09=0000000000000000 00007f61c9611ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
