last executing test programs:

2.159222708s ago: executing program 2 (id=2189):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r1, @ANYBLOB="140001"], 0x34}}, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000000500000000040000", @ANYRES32, @ANYBLOB="00001d0000000000000000000000000000e18e29717013063dc0a25e19dae083601139593170", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000180000000001a00e63500001811000061c535d29c0a49525cb3271c8414479daa444728b8d8afc1b21f9c4df449b1c91a10ba07e846ffcb66450908532a7049f917", @ANYRES32=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r4, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x3, 0x2, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="17", 0x1}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000a40)='~', 0x1}], 0x1}}], 0x2, 0x4040000)
getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x9}, &(0x7f0000000180)=0x8)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r6, &(0x7f0000000000)="2d000000010001", 0x7)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x33fe0}, 0x33fe0}}, 0x0)
sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xfdf6}}, 0x0)
sendmmsg$inet(r9, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x4e23, @private=0xa011101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x46054)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r10, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x9303, 0x30, 0x7, 0x4}, &(0x7f0000000500)=0x18)
setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8)
close(r9)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r7, @ANYRESOCT=r5], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)

2.08751406s ago: executing program 2 (id=2191):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x38, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0xc000)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010080000000fedbdf250f002d001800078008000200070000000c0003e3316b000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2805}, 0x0)

2.018569059s ago: executing program 2 (id=2193):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000003040)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084)
syz_init_net_socket$ax25(0x3, 0x5, 0xcc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r5, &(0x7f0000000100), 0x0, 0x2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202020c31af8ffa1000000bfa10020000000000701008000feffffb702000008000000b70300000000000085000000760000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.017706483s ago: executing program 2 (id=2195):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000500000a20000000000a05000000000000000000010000000900010073797a300000000054000000090a010400000000000000000100000008000a40000000010900020073797a32000000000900010073797a300000000008000540000000020c00098008000140000020800800084000000001"], 0x9c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)

1.679854449s ago: executing program 2 (id=2198):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000180)={0x8}, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000380)="451d", 0x2, 0x20008800, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c)

1.199882943s ago: executing program 1 (id=2209):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x19, &(0x7f0000000240)=[@in6={0xa, 0x2, 0x0, @local, 0x2}]}, &(0x7f00000002c0)=0x10)

1.199654769s ago: executing program 1 (id=2210):
unshare(0x26020480)
unshare(0x22020600)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(0x3)

1.11874836s ago: executing program 1 (id=2211):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb1}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.118175493s ago: executing program 1 (id=2212):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$rds(0x15, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x4}, {0xfff1, 0xffff}, {0x10, 0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xf}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}, 0x1, 0xfdff}, 0x84)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c)
sendto$inet6(r0, &(0x7f0000000100)="a6", 0x1, 0x40840, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000008000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\b\x00\x00\x00\x00\x00'], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0)

759.806673ms ago: executing program 2 (id=2213):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'xfrm0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
getsockopt$sock_int(r1, 0x1, 0x24, 0xfffffffffffffffe, 0x0)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={<r4=>0x0, 0x1c, &(0x7f0000002ac0)=[@in6={0xa, 0x4e24, 0xa, @local, 0x9}]}, &(0x7f0000000080)=0x10)
getpeername$packet(r3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000a46f80000085000000610020009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r6, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x4010)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000400)={r4, @in6={{0xa, 0x4e24, 0x9, @loopback}}, 0x1, 0x5}, 0x90)
shutdown(r6, 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000240)={0x5, 0x2, 0x5, 0x1b}, 0x10)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4028055}, 0x0)

308.506018ms ago: executing program 0 (id=2223):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1000000}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40040)

240.128549ms ago: executing program 0 (id=2224):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="1805000000000000000000000000000018010000646c6c2500000000002020207b1af0ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020696c2500000000002020207b0af8ff00000000bd000000000000000700000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)

239.95318ms ago: executing program 0 (id=2225):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000002c0)=""/4082, 0xff2}, {&(0x7f0000001480)=""/144, 0x90}], 0x2}, 0x5}], 0x1, 0x0, 0x0)

213.467038ms ago: executing program 1 (id=2226):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008090)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast})
write$tun(r0, &(0x7f0000001780)=ANY=[@ANYBLOB="00000019000002"], 0x16e)

199.82106ms ago: executing program 0 (id=2227):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffe, @loopback, 0xd7}, 0x1c)
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0xb2f00, @empty, 0xfffffffe}, 0x1c)

118.844563ms ago: executing program 0 (id=2228):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0xfd45}}, 0x0)
write$nci(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="7105040902020766cb440484b907eb0101f8"], 0x12)
close(0x3)
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
listen(0xffffffffffffffff, 0x80)

49.312605ms ago: executing program 1 (id=2229):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf250100000007000700e0000001080002000500000008000800001e01010c0001"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x80)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000"], 0x48)
r6 = socket(0x2c, 0x3, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0xb8, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0x0, 0xffe0}, {0xfff1, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x88, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0xb}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x401}, @TCA_FLOW_EMATCHES={0x4}, @TCA_FLOW_PERTURB={0x8, 0xc, 0xfff}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xd, 0xf}}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xa}, @TCA_FLOW_EMATCHES={0x58, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_META={0x3c, 0x1, 0x0, 0x0, {{0x4, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x0, 0x1}, {0x73e, 0x5, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8}, {0x8, 0x8, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x48a, 0x3, 0x1}, {0x1, 0x80, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xf, 0x9}, {0x800, 0xd, 0x1}}}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0xfc}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}}}]}]}]}}]}, 0xb8}}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r7, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r6}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp=r6}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r5, &(0x7f0000000540)}, 0x20)
sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1d930000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf25090000000800010001000000080003", @ANYRESDEC=r3, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000005a554f7cf994ce39e4991000010000000000d70600000300000a20000000000a03000000000000000000070000000900e10073797a300000000078000000090a0104000000000000000007000000f7000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3400128010000180090001006c61737400000000670001800a00010071756f7461000000100002800c000140000000000000000b0800034000000110140000001000010000000000000000000a84000a"], 0xc0}, 0x1, 0x0, 0x0, 0xc041}, 0x2005c081)
r10 = socket$kcm(0x2, 0xa, 0x2)
r11 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r11, 0x8983, &(0x7f0000000040)={0x0, 'syzkaller1\x00'})
r12 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$IP_VS_SO_SET_EDITDEST(r12, 0x0, 0x489, &(0x7f0000000100)={{0x89, @remote, 0x4e24, 0x2, 'lc\x00', 0x11, 0xa, 0x2f}, {@remote, 0x4e21, 0x3, 0x9, 0x9}}, 0x44)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r13, &(0x7f0000001ac0)={0x0, 0x7f00, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, r14, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x3c}}, 0x20000000)
write$tun(r2, &(0x7f0000000e00)=ANY=[@ANYBLOB="000088f80180c2000001aaaaaaaaaaaa88a8a00081"], 0x72)
ioctl$sock_TIOCINQ(r10, 0x541b, &(0x7f0000000080))

0s ago: executing program 0 (id=2230):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000000340))

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:61311' (ED25519) to the list of known hosts.
syzkaller login: [   57.154152][ T5815] cgroup: Unknown subsys name 'net'
[   57.323187][ T5815] cgroup: Unknown subsys name 'cpuset'
[   57.327480][ T5815] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.296021][ T5815] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.760996][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.767523][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.771222][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.774547][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.778952][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.783198][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.786472][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.791408][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.796083][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.800170][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.889069][ T5219] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.893381][ T5219] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.897054][ T5219] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.901645][ T5219] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.905295][ T5219] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.151795][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   64.192889][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   64.276767][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   64.315366][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.318682][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.321852][ T5829] bridge_slave_0: entered allmulticast mode
[   64.325141][ T5829] bridge_slave_0: entered promiscuous mode
[   64.369643][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.372533][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.374861][ T5829] bridge_slave_1: entered allmulticast mode
[   64.377559][ T5829] bridge_slave_1: entered promiscuous mode
[   64.387380][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.389694][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.392567][ T5833] bridge_slave_0: entered allmulticast mode
[   64.396026][ T5833] bridge_slave_0: entered promiscuous mode
[   64.399376][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.402098][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.404551][ T5833] bridge_slave_1: entered allmulticast mode
[   64.408300][ T5833] bridge_slave_1: entered promiscuous mode
[   64.457909][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.463826][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.469505][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.481791][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.548622][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.551572][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.554454][ T5839] bridge_slave_0: entered allmulticast mode
[   64.558408][ T5839] bridge_slave_0: entered promiscuous mode
[   64.577528][ T5829] team0: Port device team_slave_0 added
[   64.582955][ T5833] team0: Port device team_slave_0 added
[   64.585969][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.588732][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.591626][ T5839] bridge_slave_1: entered allmulticast mode
[   64.595708][ T5839] bridge_slave_1: entered promiscuous mode
[   64.601392][ T5829] team0: Port device team_slave_1 added
[   64.618271][ T5833] team0: Port device team_slave_1 added
[   64.686374][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.689215][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.702546][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.709355][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.712468][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.724212][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.730798][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.734745][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.737559][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.749417][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.762888][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.765701][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.776671][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.792215][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.854753][ T5829] hsr_slave_0: entered promiscuous mode
[   64.857387][ T5829] hsr_slave_1: entered promiscuous mode
[   64.862983][ T5839] team0: Port device team_slave_0 added
[   64.870852][ T5833] hsr_slave_0: entered promiscuous mode
[   64.873300][ T5833] hsr_slave_1: entered promiscuous mode
[   64.875602][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.878171][ T5833] Cannot create hsr debugfs directory
[   64.892930][ T5839] team0: Port device team_slave_1 added
[   64.970837][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.973394][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.983078][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.005866][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.008640][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.020346][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.094779][ T5839] hsr_slave_0: entered promiscuous mode
[   65.097203][ T5839] hsr_slave_1: entered promiscuous mode
[   65.099594][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.102786][ T5839] Cannot create hsr debugfs directory
[   65.252929][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.259865][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.271138][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.293188][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.354443][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.372677][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.396420][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.413047][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.462767][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.475860][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.482841][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.491224][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.608090][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.655301][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   65.674075][   T79] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.677308][   T79] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.687034][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.696160][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.711353][   T79] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.714546][   T79] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.734399][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   65.748332][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   65.755766][ T4046] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.758227][ T4046] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.784450][   T79] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.787454][   T79] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.800199][   T79] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.803361][   T79] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.823389][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.826399][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.858215][ T5219] Bluetooth: hci1: command tx timeout
[   65.860343][   T54] Bluetooth: hci0: command tx timeout
[   65.895041][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.930919][ T5219] Bluetooth: hci2: command tx timeout
[   66.039082][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.104558][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.109529][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.115004][ T5839] veth0_vlan: entered promiscuous mode
[   66.133319][ T5839] veth1_vlan: entered promiscuous mode
[   66.184075][ T5833] veth0_vlan: entered promiscuous mode
[   66.187882][ T5829] veth0_vlan: entered promiscuous mode
[   66.199463][ T5839] veth0_macvtap: entered promiscuous mode
[   66.209006][ T5839] veth1_macvtap: entered promiscuous mode
[   66.215050][ T5829] veth1_vlan: entered promiscuous mode
[   66.218887][ T5833] veth1_vlan: entered promiscuous mode
[   66.249320][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.269914][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.275044][ T5829] veth0_macvtap: entered promiscuous mode
[   66.292657][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.296328][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.301845][ T5861] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.305399][ T5861] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.310891][ T5829] veth1_macvtap: entered promiscuous mode
[   66.314367][ T5833] veth0_macvtap: entered promiscuous mode
[   66.326982][ T5833] veth1_macvtap: entered promiscuous mode
[   66.359364][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.373172][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.389128][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.396439][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.414726][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.427494][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.433841][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.437567][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.468851][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.474553][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.477477][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.492213][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.507830][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.517516][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.596081][ T4046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.603045][ T4046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.609267][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.612359][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.653609][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.656403][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.677119][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.684282][   T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.687546][   T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.729724][ T4046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.735915][ T4046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.877763][ T5905] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'.
[   66.882636][ T5905] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1'.
[   66.892731][ T5905] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'.
[   66.907732][ T5905] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1'.
[   67.071579][ T5916] lo speed is unknown, defaulting to 1000
[   67.075107][ T5916] lo speed is unknown, defaulting to 1000
[   67.079044][ T5916] lo speed is unknown, defaulting to 1000
[   67.183705][ T5923] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13'.
[   67.196945][ T5923] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13'.
[   67.219057][ T5923] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13'.
[   67.225414][ T5923] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13'.
[   67.266419][ T5934] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7'.
[   67.272389][ T5924] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   67.301800][ T5934] vlan2: entered promiscuous mode
[   67.303539][ T5934] dummy0: entered promiscuous mode
[   67.382761][ T5916] infiniband syz0: set active
[   67.385557][ T5916] infiniband syz0: added lo
[   67.387774][ T5895] lo speed is unknown, defaulting to 1000
[   67.428696][ T5916] RDS/IB: syz0: added
[   67.430965][ T5916] smc: adding ib device syz0 with port count 1
[   67.433642][ T5916] smc:    ib device syz0 port 1 has pnetid 
[   67.439205][ T5916] lo speed is unknown, defaulting to 1000
[   67.444613][ T5939] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[   67.507435][ T5945] netlink: 104 bytes leftover after parsing attributes in process `syz.0.16'.
[   67.611551][ T5916] lo speed is unknown, defaulting to 1000
[   67.673147][ T5895] lo speed is unknown, defaulting to 1000
[   67.697592][ T5950] erspan0: entered promiscuous mode
[   67.709637][ T5950] erspan0: left promiscuous mode
[   67.847766][ T5954] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[   67.882745][ T5956] netlink: 'syz.1.21': attribute type 1 has an invalid length.
[   67.884335][ T5916] lo speed is unknown, defaulting to 1000
[   67.931235][ T5219] Bluetooth: hci1: command tx timeout
[   67.933620][ T5219] Bluetooth: hci0: command tx timeout
[   68.005090][ T5960] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   68.027104][   T54] Bluetooth: hci2: command tx timeout
[   68.079157][ T5964] warning: `syz.1.25' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   68.419317][ T5984] netlink: 'syz.2.34': attribute type 1 has an invalid length.
[   68.641674][ T5996] netlink: 'syz.1.33': attribute type 3 has an invalid length.
[   69.434995][ T6040] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.471870][ T6040] tipc: Started in network mode
[   69.479377][ T6040] tipc: Node identity 4, cluster identity 4711
[   69.482197][ T6040] tipc: Node number set to 4
[   69.637728][ T6054] tipc: Started in network mode
[   69.639657][ T6054] tipc: Node identity 8ac08dca8cea, cluster identity 4711
[   69.643651][ T6054] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.648148][ T6054] syzkaller0: entered promiscuous mode
[   69.650029][ T6054] syzkaller0: entered allmulticast mode
[   69.678599][ T6054] tipc: Resetting bearer <eth:syzkaller0>
[   69.699226][ T6053] tipc: Resetting bearer <eth:syzkaller0>
[   69.730609][ T6053] tipc: Disabling bearer <eth:syzkaller0>
[   69.859149][ T6075] bridge0: port 3(vlan2) entered blocking state
[   69.861804][ T6075] bridge0: port 3(vlan2) entered disabled state
[   69.864471][ T6075] vlan2: entered allmulticast mode
[   69.866277][ T6075] bridge0: entered allmulticast mode
[   69.870807][ T6075] vlan2: left allmulticast mode
[   69.872965][ T6075] bridge0: left allmulticast mode
[   69.994716][ T6083] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.999641][ T6083] syzkaller0: entered promiscuous mode
[   70.004095][ T6083] syzkaller0: entered allmulticast mode
[   70.011018][   T54] Bluetooth: hci0: command tx timeout
[   70.012180][ T5219] Bluetooth: hci1: command tx timeout
[   70.040057][ T6089] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.040538][ T6083] tipc: Resetting bearer <eth:syzkaller0>
[   70.061218][ T6082] tipc: Resetting bearer <eth:syzkaller0>
[   70.083296][ T6082] tipc: Disabling bearer <eth:syzkaller0>
[   70.090286][ T5219] Bluetooth: hci2: command tx timeout
[   70.546513][ T6132] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[   70.579488][ T6132] bridge_slave_0: left allmulticast mode
[   70.581706][ T6132] bridge_slave_0: left promiscuous mode
[   70.586195][ T6132] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.607547][ T6132] bridge_slave_1: left allmulticast mode
[   70.609778][ T6132] bridge_slave_1: left promiscuous mode
[   70.616514][ T6132] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.637939][ T6132] bond0: (slave bond_slave_0): Releasing backup interface
[   70.646997][ T6132] bond0: (slave bond_slave_1): Releasing backup interface
[   70.679987][ T6132] team0: Port device team_slave_0 removed
[   70.692145][ T6139] Zero length message leads to an empty skb
[   70.711869][ T6132] team0: Port device team_slave_1 removed
[   70.715311][ T6132] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.718315][ T6132] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.734219][ T6132] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.743994][ T6132] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.884641][ T6145] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   70.895229][ T6145] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   71.148207][ T6164] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.155410][ T6164] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.364093][  T124] cfg80211: failed to load regulatory.db
[   71.374907][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.377329][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.385403][ T6164] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.392988][ T6164] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.548507][ T6177] netlink: 'syz.1.117': attribute type 7 has an invalid length.
[   71.554645][ T6177] netlink: 'syz.1.117': attribute type 8 has an invalid length.
[   71.558929][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.577902][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.581893][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.585268][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.889500][ T6216] __nla_validate_parse: 13 callbacks suppressed
[   71.889531][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'.
[   71.898867][ T6216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.134'.
[   71.949739][ T6222] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   72.048411][ T6232] netlink: 'syz.0.143': attribute type 1 has an invalid length.
[   72.057389][ T6232] netlink: 'syz.0.143': attribute type 2 has an invalid length.
[   72.090721][   T54] Bluetooth: hci1: command tx timeout
[   72.092337][ T6238] tipc: Failed to remove unknown binding: 66,1,1/4:4255763458/4255763460
[   72.092743][ T5219] Bluetooth: hci0: command tx timeout
[   72.095741][ T6238] tipc: Failed to remove unknown binding: 66,1,1/4:4255763458/4255763460
[   72.171974][ T5219] Bluetooth: hci2: command tx timeout
[   72.197473][ T6245] syz.1.146 uses obsolete (PF_INET,SOCK_PACKET)
[   72.235899][ T6248] ip6gre1: entered promiscuous mode
[   72.454940][ T6265] netlink: 16 bytes leftover after parsing attributes in process `syz.2.157'.
[   72.562002][ T6273] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.565899][ T6273] syzkaller0: entered promiscuous mode
[   72.568020][ T6273] syzkaller0: entered allmulticast mode
[   72.591919][ T6273] tipc: Resetting bearer <eth:syzkaller0>
[   72.597555][ T6272] tipc: Resetting bearer <eth:syzkaller0>
[   72.609057][ T6272] tipc: Disabling bearer <eth:syzkaller0>
[   73.151461][ T6297] Illegal XDP return value 4294967262 on prog  (id 38) dev N/A, expect packet loss!
[   73.405033][ T6324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.186'.
[   73.408906][ T6324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.186'.
[   73.427131][ T6326] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   73.512558][ T6334] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   73.566223][ T6339] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.193'.
[   73.892389][ T6363] netlink: 'syz.2.205': attribute type 1 has an invalid length.
[   73.897533][ T6363] netlink: 'syz.2.205': attribute type 3 has an invalid length.
[   73.903653][ T6363] netlink: 224 bytes leftover after parsing attributes in process `syz.2.205'.
[   74.638303][ T6375] netlink: 'syz.2.211': attribute type 1 has an invalid length.
[   74.722097][ T6378] syzkaller1: entered promiscuous mode
[   74.729105][ T6378] syzkaller1: entered allmulticast mode
[   74.765028][ T6386] netlink: 'syz.2.215': attribute type 1 has an invalid length.
[   74.812630][ T6384] ipvlan2: entered promiscuous mode
[   74.814834][ T6384] ipvlan2: entered allmulticast mode
[   74.816883][ T6384] batadv0: entered allmulticast mode
[   74.819694][ T6384] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   76.159819][ T6447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.238'.
[   76.259376][ T6455] netlink: 32 bytes leftover after parsing attributes in process `syz.1.242'.
[   76.339479][ T5868] IPVS: starting estimator thread 0...
[   76.430462][ T6464] IPVS: using max 49 ests per chain, 117600 per kthread
[   76.459313][ T6472] netlink: 'syz.0.250': attribute type 4 has an invalid length.
[   76.556737][ T6481] netlink: 24 bytes leftover after parsing attributes in process `syz.0.254'.
[   76.666197][ T6492] C: renamed from lo
[   76.673670][ T6492] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   76.898868][ T6507] netlink: 28 bytes leftover after parsing attributes in process `syz.2.265'.
[   77.464664][ T6495] netlink: 'syz.0.259': attribute type 1 has an invalid length.
[   77.467604][ T6495] netlink: 224 bytes leftover after parsing attributes in process `syz.0.259'.
[   77.902898][ T6554] netlink: 24 bytes leftover after parsing attributes in process `syz.0.285'.
[   78.057882][ T6566] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.292'.
[   78.719082][ T6590] netlink: 24 bytes leftover after parsing attributes in process `syz.1.304'.
[   78.722352][ T6590] netlink: 84 bytes leftover after parsing attributes in process `syz.1.304'.
[   79.037293][ T6604] Set syz1 is full, maxelem 0 reached
[   79.306420][ T6633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'.
[   79.366389][ T6640] vlan0: entered promiscuous mode
[   79.885946][ T6686] netlink: 'syz.1.351': attribute type 39 has an invalid length.
[   79.924013][ T6690] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[   79.928014][ T6690] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[   79.936872][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.353'.
[   80.917228][ T6768] vlan3: entered promiscuous mode
[   80.919133][ T6768] gretap0: entered promiscuous mode
[   81.817409][ T6792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.397'.
[   81.845960][ T6795] netlink: 'syz.2.399': attribute type 14 has an invalid length.
[   81.848787][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.399'.
[   81.853485][ T6795] netlink: 'syz.2.399': attribute type 14 has an invalid length.
[   82.125803][ T6823] Bluetooth: MGMT ver 1.23
[   83.009619][ T6868] __nla_validate_parse: 1 callbacks suppressed
[   83.009640][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.427'.
[   83.092891][ T6872] netlink: 'syz.1.430': attribute type 1 has an invalid length.
[   83.131785][ T6872] bond1: entered promiscuous mode
[   83.134031][ T6872] bond1: entered allmulticast mode
[   83.136828][ T6872] 8021q: adding VLAN 0 to HW filter on device bond1
[   83.155575][ T6872] bridge2: entered promiscuous mode
[   83.157984][ T6872] bridge2: entered allmulticast mode
[   83.161595][ T6872] bond1: (slave bridge2): Enslaving as a backup interface with an up link
[   83.251961][ T5844] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   83.370763][ T5844] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   83.484891][ T5844] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.520531][ T6880] vlan4: entered promiscuous mode
[   83.522416][ T6880] bridge0: entered promiscuous mode
[   83.525181][ T5844] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.531580][ T5844] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.547585][ T5844] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.646611][ T6888] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   83.785500][ T6901] netlink: 24 bytes leftover after parsing attributes in process `syz.1.442'.
[   83.907626][ T6910] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[   83.915844][ T6910] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[   83.946291][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.447'.
[   83.978794][ T6914] netlink: 'syz.1.448': attribute type 11 has an invalid length.
[   84.151569][ T6927] syzkaller1: entered promiscuous mode
[   84.153845][ T6927] syzkaller1: entered allmulticast mode
[   84.347658][ T6937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.460'.
[   84.618396][ T6952] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   84.624361][ T6952] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   84.632388][ T6956] netem: incorrect ge model size
[   84.634458][ T6956] netem: change failed
[   84.798224][ T6972] netlink: 'syz.0.476': attribute type 1 has an invalid length.
[   84.830047][ T6972] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   84.836345][ T6972] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   84.863860][ T6979] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xee
[   84.892577][ T6980] gretap1: entered promiscuous mode
[   84.898956][ T6980] bond2: (slave gretap1): making interface the new active one
[   84.904524][ T6980] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   85.316486][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.486'.
[   85.327944][ T6994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.486'.
[   85.356149][ T6994] netlink: 156 bytes leftover after parsing attributes in process `syz.0.486'.
[   85.906075][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.498'.
[   85.988061][ T7023] netlink: 24 bytes leftover after parsing attributes in process `syz.1.500'.
[   86.024917][ T7023] netlink: 24 bytes leftover after parsing attributes in process `syz.1.500'.
[   86.153512][ T7029] bond1: (slave bridge2): Removing an active aggregator
[   86.162015][ T7029] bond1: (slave bridge2): Releasing backup interface
[   86.168856][ T7029] bridge2: left promiscuous mode
[   86.178117][ T7029] bridge2: left allmulticast mode
[   86.194935][ T7029] team0: Mode changed to "activebackup"
[   86.200821][ T7029] vlan0: entered promiscuous mode
[   86.204704][ T7029] tipc: Started in network mode
[   86.206926][ T7029] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   86.210608][ T7029] tipc: Enabled bearer <eth:team0>, priority 0
[   86.215525][ T7031] netlink: 'syz.0.504': attribute type 2 has an invalid length.
[   86.252459][ T7033] xfrm1: entered allmulticast mode
[   86.461483][ T7054] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.473488][ T7054] syzkaller0: entered promiscuous mode
[   86.475404][ T7054] syzkaller0: entered allmulticast mode
[   86.496791][ T7054] tipc: Resetting bearer <eth:syzkaller0>
[   86.503761][ T7053] tipc: Resetting bearer <eth:syzkaller0>
[   86.513078][ T7053] tipc: Disabling bearer <eth:syzkaller0>
[   86.686538][ T7073] batadv_slave_1: entered promiscuous mode
[   86.945578][ T7096] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   86.951092][ T7096] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   86.956984][ T7096] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   87.331605][   T10] tipc: Node number set to 11578026
[   87.443384][ T7063] batadv_slave_1: left promiscuous mode
[   87.759910][ T7159] syzkaller0: entered promiscuous mode
[   87.768878][ T7159] syzkaller0: entered allmulticast mode
[   88.874945][ T7180] __nla_validate_parse: 4 callbacks suppressed
[   88.874962][ T7180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.567'.
[   89.333678][ T7220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'.
[   89.754146][ T7236] netlink: 'syz.0.591': attribute type 1 has an invalid length.
[   89.757379][ T7236] netlink: 184 bytes leftover after parsing attributes in process `syz.0.591'.
[   89.763483][ T7236] netlink: 40 bytes leftover after parsing attributes in process `syz.0.591'.
[   90.058127][ T7255] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   90.325537][ T7276] sctp: [Deprecated]: syz.1.611 (pid 7276) Use of int in max_burst socket option.
[   90.325537][ T7276] Use struct sctp_assoc_value instead
[   90.504536][ T7290] netlink: 36 bytes leftover after parsing attributes in process `syz.1.617'.
[   90.779403][ T7321] netlink: 'syz.0.628': attribute type 11 has an invalid length.
[   90.911411][ T7333] lo speed is unknown, defaulting to 1000
[   91.473252][ T7344] veth1_macvtap: left promiscuous mode
[   91.627173][ T7354] netlink: 24 bytes leftover after parsing attributes in process `syz.2.639'.
[   91.709465][ T7358] batman_adv: batadv0: Adding interface: dummy0
[   91.715987][ T7358] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.727185][ T7358] batman_adv: batadv0: Interface activated: dummy0
[   91.805004][ T7362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.643'.
[   91.886029][ T7362] geneve2: entered promiscuous mode
[   91.888317][ T7362] geneve2: entered allmulticast mode
[   92.218004][ T7389] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.225121][ T7389] syzkaller0: entered promiscuous mode
[   92.227492][ T7389] syzkaller0: entered allmulticast mode
[   92.237340][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'.
[   92.251774][ T7389] tipc: Resetting bearer <eth:syzkaller0>
[   92.259783][ T7388] tipc: Resetting bearer <eth:syzkaller0>
[   92.271711][ T7388] tipc: Disabling bearer <eth:syzkaller0>
[   92.282749][ T7393] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   92.363013][ T7393] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.365992][ T7393] batadv_slave_0: entered promiscuous mode
[   92.375541][ T7393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.658'.
[   92.382319][ T7393] netlink: 428 bytes leftover after parsing attributes in process `syz.2.658'.
[   92.769058][ T7433] netlink: 'syz.2.676': attribute type 83 has an invalid length.
[   92.900340][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[   93.268114][ T7482] netlink: 'syz.1.699': attribute type 7 has an invalid length.
[   93.270975][ T7482] netlink: 'syz.1.699': attribute type 8 has an invalid length.
[   93.273629][ T7482] netlink: 'syz.1.699': attribute type 4 has an invalid length.
[   93.458270][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.468726][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.473108][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.476896][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.129658][ T7592] tipc: New replicast peer: 255.255.255.255
[   95.136972][ T7592] tipc: Enabled bearer <udp:syz2>, priority 10
[   95.144827][ T7592] __nla_validate_parse: 4 callbacks suppressed
[   95.144847][ T7592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.748'.
[   95.152246][ T7592] tipc: Disabling bearer <udp:syz2>
[   95.398525][ T7610] tap0: tun_chr_ioctl cmd 1074025678
[   95.401346][ T7610] tap0: group set to 0
[   95.459309][ T7614] netlink: 164 bytes leftover after parsing attributes in process `syz.0.759'.
[   95.571768][ T7624] netlink: 56 bytes leftover after parsing attributes in process `syz.2.764'.
[   95.575865][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.764'.
[   95.820931][ T7650] netlink: 'syz.1.768': attribute type 1 has an invalid length.
[   96.721959][ T7683] bridge_slave_1: entered promiscuous mode
[   96.727845][ T7683] bridge_slave_1: left promiscuous mode
[   96.745802][ T7685] netlink: 16 bytes leftover after parsing attributes in process `syz.2.791'.
[   96.936542][ T7700] vlan0: entered promiscuous mode
[   97.032160][ T7706] netlink: 'syz.2.800': attribute type 10 has an invalid length.
[   97.043718][ T7706] 8021q: adding VLAN 0 to HW filter on device team0
[   97.053371][ T7706] bond0: (slave team0): Enslaving as an active interface with an up link
[   97.239170][ T7718] netlink: 256 bytes leftover after parsing attributes in process `syz.2.806'.
[   97.244167][ T7718] unsupported nlmsg_type 40
[   97.643184][ T7742] netlink: 20 bytes leftover after parsing attributes in process `syz.2.817'.
[   97.649131][ T7744] netlink: 116 bytes leftover after parsing attributes in process `syz.0.818'.
[   97.850521][  T124] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   97.893393][ T5844] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   98.011856][ T7778] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   98.062200][ T7786] netlink: 16 bytes leftover after parsing attributes in process `syz.2.839'.
[   98.116522][ T7792] netlink: 16 bytes leftover after parsing attributes in process `syz.1.841'.
[   98.454025][  T124] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   98.941737][ T7859] netlink: 'syz.2.865': attribute type 1 has an invalid length.
[   98.971568][   T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   98.975412][   T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   99.337943][ T7903] netlink: 'syz.2.885': attribute type 29 has an invalid length.
[   99.388180][ T7906] netlink: 'syz.2.886': attribute type 11 has an invalid length.
[   99.524024][   T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   99.532034][ T7917] vlan5: entered promiscuous mode
[   99.534655][ T7917] vlan5: entered allmulticast mode
[   99.537035][ T7917] bridge0: entered allmulticast mode
[   99.989695][ T7941] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  100.031696][ T7943] raw_sendmsg: syz.2.904 forgot to set AF_INET. Fix it!
[  100.568903][ T7972] __nla_validate_parse: 12 callbacks suppressed
[  100.568922][ T7972] netlink: 248 bytes leftover after parsing attributes in process `syz.0.913'.
[  100.633160][ T7976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.915'.
[  100.644341][ T7976] netlink: 'syz.2.915': attribute type 18 has an invalid length.
[  100.659186][ T7976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.915'.
[  100.660252][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  100.664482][ T7976] netlink: 'syz.2.915': attribute type 18 has an invalid length.
[  100.667045][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  100.680887][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  100.684591][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  101.333152][ T8016] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.336447][ T8016] syzkaller0: entered promiscuous mode
[  101.338851][ T8016] syzkaller0: entered allmulticast mode
[  101.356894][ T8016] tipc: Resetting bearer <eth:syzkaller0>
[  101.361417][ T8014] tipc: Resetting bearer <eth:syzkaller0>
[  101.372209][ T8014] tipc: Disabling bearer <eth:syzkaller0>
[  101.751917][ T8036] netlink: 410 bytes leftover after parsing attributes in process `syz.0.943'.
[  101.801136][ T8041] netlink: 14 bytes leftover after parsing attributes in process `syz.2.945'.
[  101.805360][ T8041] batman_adv: batadv0: Interface deactivated: dummy0
[  101.848284][ T8041] batman_adv: batadv0: Removing interface: dummy0
[  101.965454][ T8048] macsec1: entered promiscuous mode
[  102.080929][ T8054] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  102.558999][ T8078] netlink: 48 bytes leftover after parsing attributes in process `syz.0.962'.
[  102.574529][ T8080] netlink: 16 bytes leftover after parsing attributes in process `syz.1.963'.
[  102.862470][ T8110] netlink: 'syz.0.978': attribute type 7 has an invalid length.
[  102.866092][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.978'.
[  102.890542][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  102.946986][ T8114] netlink: 256 bytes leftover after parsing attributes in process `syz.2.980'.
[  102.952400][ T8114] netlink: 48 bytes leftover after parsing attributes in process `syz.2.980'.
[  102.978427][ T8114] syz0: rxe_newlink: already configured on lo
[  103.041507][ T8114] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  103.048159][ T5868] lo speed is unknown, defaulting to 1000
[  103.818334][ T8190] netlink: 'syz.1.1015': attribute type 10 has an invalid length.
[  103.823937][ T8190] team0: Port device dummy0 added
[  103.833183][ T8190] syz.1.1015 (8190) used greatest stack depth: 19768 bytes left
[  103.897687][ T8194] tun0: tun_chr_ioctl cmd 2147767520
[  105.142586][ T8239] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[  105.478058][ T8269] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.482189][ T8269] syzkaller0: entered promiscuous mode
[  105.484616][ T8269] syzkaller0: entered allmulticast mode
[  105.506028][ T8269] tipc: Resetting bearer <eth:syzkaller0>
[  105.511630][ T8268] tipc: Resetting bearer <eth:syzkaller0>
[  105.532085][ T8268] tipc: Disabling bearer <eth:syzkaller0>
[  105.797627][ T8290] syzkaller1: entered promiscuous mode
[  105.801033][ T8290] syzkaller1: entered allmulticast mode
[  105.809926][ T8290] netlink: 'syz.2.1061': attribute type 15 has an invalid length.
[  105.830332][ T8290] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  106.034994][ T8296] tipc: Enabled bearer <eth:gre0>, priority 10
[  106.339954][ T8316] __nla_validate_parse: 3 callbacks suppressed
[  106.339971][ T8316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1074'.
[  106.350476][ T8316] netlink: 'syz.1.1074': attribute type 7 has an invalid length.
[  106.354045][ T8316] netlink: 'syz.1.1074': attribute type 8 has an invalid length.
[  106.359844][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1074'.
[  106.467506][ T8325] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1078'.
[  106.962337][ T8357] batman_adv: batadv0: Removing interface: batadv_slave_0
[  106.967650][ T8357] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.132601][ T8370] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1098'.
[  107.161661][  T124] tipc: Node number set to 103452106
[  107.438048][ T8402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1113'.
[  107.441415][ T8402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1113'.
[  107.487598][ T8408] gtp0: entered promiscuous mode
[  107.489764][ T8408] gtp0: entered allmulticast mode
[  107.661777][ T8424] netlink: 'syz.2.1124': attribute type 32 has an invalid length.
[  107.859463][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1129'.
[  107.959939][ T8456] netlink: 'syz.1.1134': attribute type 8 has an invalid length.
[  107.994111][ T8460] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1137'.
[  108.365054][ T8495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1152'.
[  108.382507][ T8497] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  108.493862][ T8509] sctp: [Deprecated]: syz.0.1160 (pid 8509) Use of int in maxseg socket option.
[  108.493862][ T8509] Use struct sctp_assoc_value instead
[  109.122962][ T8557] netlink: 'syz.0.1183': attribute type 1 has an invalid length.
[  109.248053][ T8568] sock: sock_set_timeout: `syz.0.1186' (pid 8568) tries to set negative timeout
[  109.274663][ T8567] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.283874][ T8567] syzkaller0: entered promiscuous mode
[  109.286187][ T8567] syzkaller0: entered allmulticast mode
[  109.321830][ T8567] tipc: Resetting bearer <eth:syzkaller0>
[  109.327024][ T8563] tipc: Resetting bearer <eth:syzkaller0>
[  109.346860][ T8563] tipc: Disabling bearer <eth:syzkaller0>
[  109.502997][ T8592] netlink: 'syz.2.1196': attribute type 10 has an invalid length.
[  109.516335][ T8592] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.524895][ T8592] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  109.995703][ T8605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1203'.
[  110.811915][ T5219] Bluetooth: hci2: command 0x0405 tx timeout
[  111.022440][ T8680] netlink: 'syz.1.1240': attribute type 1 has an invalid length.
[  111.060293][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  111.148059][ T8690] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  111.522833][ T8707] netlink: 'syz.1.1251': attribute type 3 has an invalid length.
[  111.549614][ T8709] netlink: 87 bytes leftover after parsing attributes in process `syz.1.1252'.
[  111.586894][ T8711] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  111.928963][ T8731] vlan2: entered promiscuous mode
[  111.933605][ T8731] vlan2: entered allmulticast mode
[  111.936055][ T8731] hsr_slave_1: entered allmulticast mode
[  112.169735][ T8743] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  112.182750][ T8743] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  112.223601][ T8747] tipc: New replicast peer: 255.255.255.255
[  112.226619][ T8747] tipc: Enabled bearer <udp:syz2>, priority 6
[  112.272457][ T8752] netlink: 'syz.0.1271': attribute type 2 has an invalid length.
[  112.378152][ T8768] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1277'.
[  112.390812][ T8768] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1277'.
[  112.398481][ T8768] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[  112.540950][ T8789] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1284'.
[  112.649803][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1292'.
[  112.654827][ T8798] openvswitch: netlink: nsh attr 2560 is out of range max 3
[  112.658113][ T8798] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.834999][ T8816] netlink: 'syz.0.1299': attribute type 1 has an invalid length.
[  112.855389][ T8816] bond3: entered promiscuous mode
[  112.857531][ T8816] bond3: entered allmulticast mode
[  112.868468][ T8816] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1299'.
[  114.204594][ T8856] netlink: 'syz.0.1306': attribute type 12 has an invalid length.
[  114.207984][ T8856] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1306'.
[  115.036435][ T8925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  115.045857][ T8925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  115.050984][ T8925] bond0 (unregistering): Released all slaves
[  115.063018][ T8948] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  115.131530][ T8952] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1327'.
[  115.208429][ T8962] tipc: Resetting bearer <eth:gre0>
[  115.279343][ T8962] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.284490][ T8962] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.381791][ T8962] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.516738][  T790] lo speed is unknown, defaulting to 1000
[  115.518695][  T790] syz0: Port: 1 Link DOWN
[  115.521630][ T5861] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.524637][ T5861] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.527532][ T5861] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.534635][ T5861] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.537590][ T5861] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.540618][ T5861] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.544636][  T790] lo speed is unknown, defaulting to 1000
[  115.546723][ T5861] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.549873][ T5861] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.649935][ T8992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1345'.
[  115.702143][ T4468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.705492][ T4468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.975515][ T9009] IPVS: Scheduler module ip_vs_sip not found
[  115.978480][ T9013] IPVS: length: 8 != 446622349272
[  116.258031][ T9037] syz.2.1363 uses old SIOCAX25GETINFO
[  116.296394][ T9041] netlink: 'syz.1.1366': attribute type 1 has an invalid length.
[  116.518522][ T9070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1378'.
[  116.570797][ T9076] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.1380'.
[  116.575030][ T9076] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  116.719459][ T9096] tun0: tun_chr_ioctl cmd 2147767507
[  118.076556][ T9156] netdevsim netdevsim2 : renamed from netdevsim0
[  118.123699][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1418'.
[  118.548318][ T9180] tap0: tun_chr_ioctl cmd 1074812118
[  118.679775][ T9200] IPv6: Can't replace route, no match found
[  118.780987][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1443'.
[  119.094307][ T9238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1455'.
[  119.113487][ T9240] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.157256][ T9245] netlink: 'syz.0.1459': attribute type 1 has an invalid length.
[  119.160499][ T9245] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1459'.
[  119.212733][ T9248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1460'.
[  119.216054][ T9248] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1460'.
[  119.229396][ T9248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1460'.
[  119.306313][ T9252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1462'.
[  119.612161][  T124] IPVS: starting estimator thread 0...
[  119.701411][ T9260] IPVS: using max 76 ests per chain, 182400 per kthread
[  120.488618][ T9282] netlink: 'syz.1.1474': attribute type 16 has an invalid length.
[  120.494443][ T9282] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1474'.
[  120.964134][ T9314] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.985653][ T9314] macvlan2: entered promiscuous mode
[  120.987800][ T9314] macvlan2: entered allmulticast mode
[  121.001142][ T9314] bond0: (slave macvlan2): Opening slave failed
[  121.109066][ T9317] lo speed is unknown, defaulting to 1000
[  121.744530][ T9345] lo speed is unknown, defaulting to 1000
[  122.220299][ T9368] __nla_validate_parse: 1 callbacks suppressed
[  122.220311][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1506'.
[  122.453864][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1508'.
[  122.556801][ T9381] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.647885][ T9381] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.652107][ T9389] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1513'.
[  122.659290][ T9389] netlink: 'syz.0.1513': attribute type 1 has an invalid length.
[  122.663712][ T9389] netlink: 'syz.0.1513': attribute type 2 has an invalid length.
[  122.674058][ T9389] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1513'.
[  122.774230][ T9381] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.832158][ T9395] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1516'.
[  122.872811][ T9381] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.965784][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.978944][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.007277][ T5861] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.016271][ T5861] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.116244][ T9415] netlink: 'syz.1.1526': attribute type 10 has an invalid length.
[  123.146352][ T9419] trusted_key: syz.2.1528 sent an empty control message without MSG_MORE.
[  124.349231][ T9478] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1554'.
[  124.485979][ T9486] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.602574][ T9496] tipc: Resetting bearer <eth:gre0>
[  124.831901][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1572'.
[  124.979943][ T9527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1578'.
[  125.466076][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1602'.
[  125.473651][ T9579] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[  125.477007][ T9579] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.555346][ T5844] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[  125.647931][ T9595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1608'.
[  125.664354][ T9595] macsec1: entered promiscuous mode
[  125.666284][ T9595] bond0: entered promiscuous mode
[  125.668291][ T9595] bond_slave_0: entered promiscuous mode
[  125.671727][ T9595] bond_slave_1: entered promiscuous mode
[  125.673714][ T9595] team0: entered promiscuous mode
[  125.675313][ T9595] team_slave_0: entered promiscuous mode
[  125.677146][ T9595] team_slave_1: entered promiscuous mode
[  125.679108][ T9595] batadv0: entered promiscuous mode
[  125.681696][ T9595] macsec1: entered allmulticast mode
[  125.683353][ T9595] bond0: entered allmulticast mode
[  125.685066][ T9595] bond_slave_0: entered allmulticast mode
[  125.686849][ T9595] bond_slave_1: entered allmulticast mode
[  125.688649][ T9595] team0: entered allmulticast mode
[  125.690417][ T9595] team_slave_0: entered allmulticast mode
[  125.692273][ T9595] team_slave_1: entered allmulticast mode
[  125.694094][ T9595] batadv0: entered allmulticast mode
[  125.699519][ T9595] bond0: left allmulticast mode
[  125.701371][ T9595] bond_slave_0: left allmulticast mode
[  125.703228][ T9595] bond_slave_1: left allmulticast mode
[  125.704992][ T9595] team0: left allmulticast mode
[  125.706677][ T9595] team_slave_0: left allmulticast mode
[  125.708517][ T9595] team_slave_1: left allmulticast mode
[  125.711111][ T9595] batadv0: left allmulticast mode
[  125.712859][ T9595] bond0: left promiscuous mode
[  125.714620][ T9595] bond_slave_0: left promiscuous mode
[  125.716688][ T9595] bond_slave_1: left promiscuous mode
[  125.718567][ T9595] team0: left promiscuous mode
[  125.720618][ T9595] team_slave_0: left promiscuous mode
[  125.722477][ T9595] team_slave_1: left promiscuous mode
[  125.725004][ T9595] batadv0: left promiscuous mode
[  125.958023][ T9612] netlink: 'syz.2.1616': attribute type 1 has an invalid length.
[  125.996415][ T9612] bond1: entered promiscuous mode
[  126.000831][ T9612] 8021q: adding VLAN 0 to HW filter on device bond1
[  126.016724][ T9612] 8021q: adding VLAN 0 to HW filter on device bond1
[  126.019915][ T9612] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[  126.024475][ T9612] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  126.034266][ T9612] bond1: (slave wireguard0): making interface the new active one
[  126.037402][ T9612] wireguard0: entered promiscuous mode
[  126.040553][ T9612] bond1: (slave wireguard0): Enslaving as an active interface with an up link
[  126.048380][ T9612] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.050825][ T9612] IPv6: NLM_F_CREATE should be set when creating new route
[  126.053277][ T9612] IPv6: NLM_F_CREATE should be set when creating new route
[  126.057117][ T9612] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.079337][ T9612] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address
[  126.087712][ T9612] bond1: (slave wireguard1): Enslaving as a backup interface with an up link
[  126.585412][ T9652] netlink: 'syz.0.1634': attribute type 1 has an invalid length.
[  126.597854][ T9652] bond4: entered promiscuous mode
[  126.600530][ T9652] 8021q: adding VLAN 0 to HW filter on device bond4
[  127.100462][ T9685] netlink: 'syz.0.1647': attribute type 1 has an invalid length.
[  127.325317][ T9708] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  127.443747][ T9724] __nla_validate_parse: 2 callbacks suppressed
[  127.443766][ T9724] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1663'.
[  127.500332][   T33] audit: type=1800 audit(1753725495.568:2): pid=9731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1666" name=33FFFF dev="tmpfs" ino=3187 res=0 errno=0
[  127.729416][ T9764] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1682'.
[  127.776929][ T9770] netlink: 'syz.2.1686': attribute type 4 has an invalid length.
[  127.998122][ T9798] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.000729][ T9798] syzkaller0: entered promiscuous mode
[  128.005016][ T9798] syzkaller0: entered allmulticast mode
[  128.026059][ T9798] tipc: Resetting bearer <eth:syzkaller0>
[  128.031695][ T9797] tipc: Resetting bearer <eth:syzkaller0>
[  128.054556][ T9797] tipc: Disabling bearer <eth:syzkaller0>
[  128.150776][ T9808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1703'.
[  128.521966][ T9830] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1713'.
[  128.526267][ T9830] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1713'.
[  128.744945][ T9844] netlink: 'syz.2.1720': attribute type 1 has an invalid length.
[  128.748247][ T9844] netlink: 'syz.2.1720': attribute type 1 has an invalid length.
[  128.860876][ T9857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1727'.
[  128.865710][ T9857] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1727'.
[  128.869553][ T9857] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1727'.
[  128.924421][ T9862] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1729'.
[  129.082951][ T9879] netlink: 'syz.0.1737': attribute type 1 has an invalid length.
[  129.228291][ T9890] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1742'.
[  129.620165][ T5219] Bluetooth: hci2: command 0x0405 tx timeout
[  129.912992][ T9919] : renamed from batadv_slave_1
[  130.137925][  T124] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  130.584862][ T9967] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  130.690626][ T9982] sctp: [Deprecated]: syz.0.1780 (pid 9982) Use of int in max_burst socket option deprecated.
[  130.690626][ T9982] Use struct sctp_assoc_value instead
[  130.752654][ T9987] vlan0: left promiscuous mode
[  130.755308][ T9987] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  130.761799][ T9987] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  130.767069][ T9987] bond1: left promiscuous mode
[  130.768896][ T9987] bond1: left allmulticast mode
[  130.772897][ T9987] xfrm1: left allmulticast mode
[  130.783784][ T9987] vlan2: left promiscuous mode
[  130.785674][ T9987] vlan2: left allmulticast mode
[  130.787393][ T9987] hsr_slave_1: left allmulticast mode
[  130.791844][ T5861] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.795952][ T5861] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.800761][ T5861] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.808777][ T5861] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.645063][T10017] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.725617][T10020] bond0: (slave rose0): Enslaving as an active interface with an up link
[  132.204720][T10050] netlink: 'syz.1.1814': attribute type 3 has an invalid length.
[  132.813865][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.816300][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  133.861846][T10141] netlink: 'syz.0.1852': attribute type 29 has an invalid length.
[  133.866426][T10141] netlink: 'syz.0.1852': attribute type 29 has an invalid length.
[  134.431319][T10171] __nla_validate_parse: 6 callbacks suppressed
[  134.431335][T10171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1866'.
[  134.647473][T10189] lo speed is unknown, defaulting to 1000
[  134.653681][T10187] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.660629][T10187] syzkaller0: entered promiscuous mode
[  134.667322][T10187] syzkaller0: entered allmulticast mode
[  134.734435][T10187] tipc: Resetting bearer <eth:syzkaller0>
[  134.738509][T10186] tipc: Resetting bearer <eth:syzkaller0>
[  134.790904][T10186] tipc: Disabling bearer <eth:syzkaller0>
[  135.261466][ T5861] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  135.264233][ T5861] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  135.268866][ T5861] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  135.272619][ T5861] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  135.949115][ T5868] hid-generic 0005:16C0:5505.0002: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  136.011987][T10235] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  136.184804][T10248] netlink: 'syz.2.1898': attribute type 10 has an invalid length.
[  136.823999][T10304] lo speed is unknown, defaulting to 1000
[  137.744476][T10344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1942'.
[  137.870759][  T124] IPVS: starting estimator thread 0...
[  137.972218][T10355] IPVS: using max 39 ests per chain, 93600 per kthread
[  138.080371][T10365] xfrm2: entered promiscuous mode
[  138.082721][T10365] xfrm2: entered allmulticast mode
[  138.726745][T10378] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1960'.
[  138.731873][T10378] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1960'.
[  138.773296][T10382] netlink: 'syz.1.1955': attribute type 2 has an invalid length.
[  138.939601][T10388] batadv_slave_0: left promiscuous mode
[  138.948104][T10388] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  138.951892][T10388] vlan3: left promiscuous mode
[  138.954064][T10388] gretap0: left promiscuous mode
[  138.957282][T10388] vlan4: left promiscuous mode
[  138.959639][T10388] geneve2: left promiscuous mode
[  138.974533][T10388] geneve2: left allmulticast mode
[  138.977007][T10388] vlan5: left promiscuous mode
[  138.978916][T10388] bridge0: left promiscuous mode
[  138.987123][T10388] vlan5: left allmulticast mode
[  138.989154][T10388] bridge0: left allmulticast mode
[  139.016677][T10388] bond1: left promiscuous mode
[  139.020308][T10388] wireguard0: left promiscuous mode
[  139.267445][T10420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1974'.
[  139.273114][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1974'.
[  139.276580][T10420] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  139.489540][T10437] vlan0: left promiscuous mode
[  139.493651][T10437] ip6gre1: left promiscuous mode
[  139.502100][T10437] gretap1: left promiscuous mode
[  139.512418][T10437] gtp0: left promiscuous mode
[  139.514261][T10437] gtp0: left allmulticast mode
[  139.519976][T10437] bond3: left promiscuous mode
[  139.522090][T10437] bond3: left allmulticast mode
[  139.527647][T10437] bond4: left promiscuous mode
[  139.599006][T10446] netlink: 'syz.2.1984': attribute type 13 has an invalid length.
[  139.608536][T10446] netlink: 'syz.2.1984': attribute type 17 has an invalid length.
[  139.727889][T10446] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.738052][T10446] 8021q: adding VLAN 0 to HW filter on device team0
[  139.743175][T10446] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  139.761535][  T124] lo speed is unknown, defaulting to 1000
[  139.763931][  T124] syz0: Port: 1 Link ACTIVE
[  139.770394][  T124] lo speed is unknown, defaulting to 1000
[  139.782641][T10446] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1984'.
[  139.787919][T10446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  139.797395][T10442] lo speed is unknown, defaulting to 1000
[  139.849314][T10446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  139.913119][T10449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.046904][T10454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1986'.
[  140.585140][T10446] syz.2.1984 (10446) used greatest stack depth: 19544 bytes left
[  140.947638][T10482] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.953780][T10482] syzkaller0: entered promiscuous mode
[  140.956033][T10482] syzkaller0: entered allmulticast mode
[  140.984109][T10482] tipc: Resetting bearer <eth:syzkaller0>
[  141.001609][T10481] tipc: Resetting bearer <eth:syzkaller0>
[  141.023239][T10481] tipc: Disabling bearer <eth:syzkaller0>
[  141.130025][T10494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2011'.
[  141.191761][T10496] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.196812][T10496] syzkaller0: entered promiscuous mode
[  141.210465][T10496] syzkaller0: entered allmulticast mode
[  141.236077][T10496] tipc: Resetting bearer <eth:syzkaller0>
[  141.245728][T10495] tipc: Resetting bearer <eth:syzkaller0>
[  141.261298][T10495] tipc: Disabling bearer <eth:syzkaller0>
[  141.568067][T10524] netlink: 'syz.1.2021': attribute type 11 has an invalid length.
[  141.599749][T10524] netlink: 308 bytes leftover after parsing attributes in process `syz.1.2021'.
[  141.610942][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2021'.
[  141.614688][T10524] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  141.758499][T10549] netlink: zone id is out of range
[  141.771714][T10549] netlink: zone id is out of range
[  141.794263][T10549] netlink: zone id is out of range
[  141.796530][T10549] netlink: zone id is out of range
[  141.798336][T10549] netlink: zone id is out of range
[  141.801161][T10549] netlink: zone id is out of range
[  141.808484][T10549] netlink: zone id is out of range
[  141.832926][T10549] : entered promiscuous mode
[  143.508806][T10638] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2074'.
[  143.513750][T10638] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2074'.
[  143.545897][T10641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2076'.
[  143.550815][T10641] nbd: illegal input index -381222912
[  143.567034][T10642] netlink: 'syz.0.2075': attribute type 13 has an invalid length.
[  143.569618][T10642] netlink: 'syz.0.2075': attribute type 17 has an invalid length.
[  143.633061][T10642] 8021q: adding VLAN 0 to HW filter on device team0
[  143.646313][T10647] netlink: 'syz.1.2083': attribute type 1 has an invalid length.
[  143.649396][T10647] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2083'.
[  143.662614][T10647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2083'.
[  143.690897][T10645] lo speed is unknown, defaulting to 1000
[  143.715803][T10642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  143.800451][T10652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  143.857879][T10642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  143.965904][T10663] syzkaller0: entered promiscuous mode
[  143.968421][T10663] syzkaller0: entered allmulticast mode
[  145.236931][T10672] netlink: 'syz.2.2089': attribute type 1 has an invalid length.
[  145.318250][T10672] bond2: (slave gretap1): making interface the new active one
[  145.348819][T10672] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  145.379280][T10672] vlan0: entered allmulticast mode
[  145.419418][T10672] bond2: entered allmulticast mode
[  145.427771][T10672] gretap1: entered allmulticast mode
[  145.432545][T10672] bond2: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  145.558173][T10683] __nla_validate_parse: 1 callbacks suppressed
[  145.558227][T10683] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.2093'.
[  145.633584][T10687] netlink: 'syz.1.2094': attribute type 13 has an invalid length.
[  145.636728][T10687] netlink: 'syz.1.2094': attribute type 17 has an invalid length.
[  145.691348][T10687] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.696459][T10687] 8021q: adding VLAN 0 to HW filter on device team0
[  145.699475][T10687] tipc: Resetting bearer <eth:team0>
[  145.703225][T10687] tipc: Resetting bearer <eth:team0>
[  145.715933][T10687] net_ratelimit: 271 callbacks suppressed
[  145.715942][T10687] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  145.750570][T10693] lo speed is unknown, defaulting to 1000
[  145.807558][T10687] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2094'.
[  145.816727][T10687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  145.904998][T10703] netlink: 'syz.0.2102': attribute type 6 has an invalid length.
[  145.908881][T10704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  145.913257][T10703] netlink: 'syz.0.2102': attribute type 6 has an invalid length.
[  145.972287][T10687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  146.186096][T10725] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2112'.
[  146.216356][T10729] netlink: 'syz.2.2115': attribute type 1 has an invalid length.
[  146.324548][T10743] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2121'.
[  146.346334][T10743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2121'.
[  146.586856][T10687] syz.1.2094 (10687) used greatest stack depth: 18336 bytes left
[  146.962590][T10779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2138'.
[  146.966342][T10779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2138'.
[  146.972388][T10779] netlink: 'syz.1.2138': attribute type 1 has an invalid length.
[  146.976140][T10779] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2138'.
[  147.002928][T10779] nbd: socks must be embedded in a SOCK_ITEM attr
[  147.006096][T10779] block nbd2: shutting down sockets
[  147.226338][T10804] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  147.275430][T10812] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  147.392603][T10826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2159'.
[  147.514009][T10834] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2163'.
[  148.002316][T10860] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  148.020037][T10860] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  148.048426][T10877] erspan0: entered promiscuous mode
[  148.053942][T10877] erspan0: left promiscuous mode
[  148.232594][T10891] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  148.735389][T10911] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  149.036049][T10933] syzkaller1: entered promiscuous mode
[  149.038441][T10933] syzkaller1: entered allmulticast mode
[  149.394023][T10943] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  150.198943][T10973] syzkaller1: entered promiscuous mode
[  150.205393][T10973] syzkaller1: entered allmulticast mode
[  150.296003][ T5861] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  150.352599][T10982] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[  150.410411][T10982] 
[  150.411270][T10982] ======================================================
[  150.413692][T10982] WARNING: possible circular locking dependency detected
[  150.416232][T10982] 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 Not tainted
[  150.419944][T10982] ------------------------------------------------------
[  150.422699][T10982] syz.1.2229/10982 is trying to acquire lock:
[  150.425258][T10982] ffff8880226ac188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  150.429724][T10982] 
[  150.429724][T10982] but task is already holding lock:
[  150.432654][T10982] ffff8880226ac230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x93e/0x18f0
[  150.436439][T10982] 
[  150.436439][T10982] which lock already depends on the new lock.
[  150.436439][T10982] 
[  150.440521][T10982] 
[  150.440521][T10982] the existing dependency chain (in reverse order) is:
[  150.443640][T10982] 
[  150.443640][T10982] -> #2 (&nbd->config_lock){+.+.}-{4:4}:
[  150.446420][T10982]        lock_acquire+0x120/0x360
[  150.448131][T10982]        __mutex_lock+0x182/0xe80
[  150.449845][T10982]        refcount_dec_and_mutex_lock+0x30/0xa0
[  150.451927][T10982]        nbd_config_put+0x2c/0x790
[  150.453615][T10982]        nbd_release+0xfe/0x140
[  150.455522][T10982]        bdev_release+0x536/0x650
[  150.457564][T10982]        blkdev_release+0x15/0x20
[  150.459585][T10982]        __fput+0x44c/0xa70
[  150.461523][T10982]        fput_close_sync+0x119/0x200
[  150.463698][T10982]        __x64_sys_close+0x7f/0x110
[  150.465803][T10982]        do_syscall_64+0xfa/0x3b0
[  150.467860][T10982]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.470443][T10982] 
[  150.470443][T10982] -> #1 (&disk->open_mutex){+.+.}-{4:4}:
[  150.473585][T10982]        lock_acquire+0x120/0x360
[  150.475576][T10982]        __mutex_lock+0x182/0xe80
[  150.477600][T10982]        __del_gendisk+0x129/0x9e0
[  150.479695][T10982]        del_gendisk+0xe8/0x160
[  150.481661][T10982]        nbd_dev_remove_work+0x47/0xe0
[  150.483859][T10982]        process_scheduled_works+0xae1/0x17b0
[  150.486285][T10982]        worker_thread+0x8a0/0xda0
[  150.488450][T10982]        kthread+0x711/0x8a0
[  150.490361][T10982]        ret_from_fork+0x3fc/0x770
[  150.492475][T10982]        ret_from_fork_asm+0x1a/0x30
[  150.494594][T10982] 
[  150.494594][T10982] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  150.497968][T10982]        validate_chain+0xb9b/0x2140
[  150.500119][T10982]        __lock_acquire+0xab9/0xd20
[  150.502243][T10982]        lock_acquire+0x120/0x360
[  150.504280][T10982]        down_write+0x96/0x1f0
[  150.506235][T10982]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  150.508792][T10982]        nbd_start_device+0x16c/0xac0
[  150.511023][T10982]        nbd_genl_connect+0x135b/0x18f0
[  150.513252][T10982]        genl_family_rcv_msg_doit+0x215/0x300
[  150.515665][T10982]        genl_rcv_msg+0x60e/0x790
[  150.517698][T10982]        netlink_rcv_skb+0x208/0x470
[  150.519830][T10982]        genl_rcv+0x28/0x40
[  150.521668][T10982]        netlink_unicast+0x82f/0x9e0
[  150.523862][T10982]        netlink_sendmsg+0x805/0xb30
[  150.526059][T10982]        __sock_sendmsg+0x21c/0x270
[  150.528355][T10982]        ____sys_sendmsg+0x505/0x830
[  150.530590][T10982]        ___sys_sendmsg+0x21f/0x2a0
[  150.532769][T10982]        __x64_sys_sendmsg+0x19b/0x260
[  150.535025][T10982]        do_syscall_64+0xfa/0x3b0
[  150.537113][T10982]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.539744][T10982] 
[  150.539744][T10982] other info that might help us debug this:
[  150.539744][T10982] 
[  150.543831][T10982] Chain exists of:
[  150.543831][T10982]   &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock
[  150.543831][T10982] 
[  150.549535][T10982]  Possible unsafe locking scenario:
[  150.549535][T10982] 
[  150.552509][T10982]        CPU0                    CPU1
[  150.554461][T10982]        ----                    ----
[  150.556581][T10982]   lock(&nbd->config_lock);
[  150.558437][T10982]                                lock(&disk->open_mutex);
[  150.561381][T10982]                                lock(&nbd->config_lock);
[  150.564264][T10982]   lock(&set->update_nr_hwq_lock);
[  150.566504][T10982] 
[  150.566504][T10982]  *** DEADLOCK ***
[  150.566504][T10982] 
[  150.569855][T10982] 3 locks held by syz.1.2229/10982:
[  150.572007][T10982]  #0: ffffffff8f584b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  150.575287][T10982]  #1: ffffffff8f584988 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  150.578871][T10982]  #2: ffff8880226ac230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x93e/0x18f0
[  150.582698][T10982] 
[  150.582698][T10982] stack backtrace:
[  150.584905][T10982] CPU: 1 UID: 0 PID: 10982 Comm: syz.1.2229 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[  150.584925][T10982] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  150.584933][T10982] Call Trace:
[  150.584941][T10982]  <TASK>
[  150.584948][T10982]  dump_stack_lvl+0x189/0x250
[  150.584968][T10982]  ? __pfx_dump_stack_lvl+0x10/0x10
[  150.584983][T10982]  ? __pfx__printk+0x10/0x10
[  150.584999][T10982]  ? print_lock_name+0xde/0x100
[  150.585013][T10982]  print_circular_bug+0x2ee/0x310
[  150.585026][T10982]  check_noncircular+0x134/0x160
[  150.585040][T10982]  validate_chain+0xb9b/0x2140
[  150.585059][T10982]  __lock_acquire+0xab9/0xd20
[  150.585071][T10982]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  150.585086][T10982]  lock_acquire+0x120/0x360
[  150.585096][T10982]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  150.585111][T10982]  ? kernfs_add_one+0xf0/0x520
[  150.585125][T10982]  down_write+0x96/0x1f0
[  150.585136][T10982]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  150.585150][T10982]  ? __pfx_down_write+0x10/0x10
[  150.585164][T10982]  ? kernfs_add_one+0xf0/0x520
[  150.585203][T10982]  blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  150.585221][T10982]  ? sysfs_add_file_mode_ns+0x238/0x300
[  150.585235][T10982]  ? sysfs_add_file_mode_ns+0x259/0x300
[  150.585251][T10982]  nbd_start_device+0x16c/0xac0
[  150.585268][T10982]  ? __nla_parse+0x40/0x60
[  150.585280][T10982]  ? device_create_file+0xf4/0x1c0
[  150.585297][T10982]  nbd_genl_connect+0x135b/0x18f0
[  150.585314][T10982]  ? __pfx_nbd_genl_connect+0x10/0x10
[  150.585329][T10982]  ? __nla_parse+0x40/0x60
[  150.585341][T10982]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  150.585358][T10982]  genl_family_rcv_msg_doit+0x215/0x300
[  150.585374][T10982]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  150.585394][T10982]  ? stack_trace_save+0x9c/0xe0
[  150.585409][T10982]  genl_rcv_msg+0x60e/0x790
[  150.585424][T10982]  ? __pfx_genl_rcv_msg+0x10/0x10
[  150.585438][T10982]  ? __pfx_nbd_genl_connect+0x10/0x10
[  150.585453][T10982]  netlink_rcv_skb+0x208/0x470
[  150.585462][T10982]  ? __lock_acquire+0xab9/0xd20
[  150.585472][T10982]  ? __pfx_genl_rcv_msg+0x10/0x10
[  150.585485][T10982]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  150.585499][T10982]  ? down_read+0x1ad/0x2e0
[  150.585511][T10982]  genl_rcv+0x28/0x40
[  150.585522][T10982]  netlink_unicast+0x82f/0x9e0
[  150.585548][T10982]  ? __pfx_netlink_unicast+0x10/0x10
[  150.585566][T10982]  ? netlink_sendmsg+0x642/0xb30
[  150.585578][T10982]  ? skb_put+0x11b/0x210
[  150.585591][T10982]  netlink_sendmsg+0x805/0xb30
[  150.585606][T10982]  ? __pfx_netlink_sendmsg+0x10/0x10
[  150.585619][T10982]  ? aa_sock_msg_perm+0x94/0x160
[  150.585631][T10982]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  150.585642][T10982]  ? __pfx_netlink_sendmsg+0x10/0x10
[  150.585653][T10982]  __sock_sendmsg+0x21c/0x270
[  150.585670][T10982]  ____sys_sendmsg+0x505/0x830
[  150.585684][T10982]  ? __pfx_____sys_sendmsg+0x10/0x10
[  150.585698][T10982]  ? import_iovec+0x74/0xa0
[  150.585714][T10982]  ___sys_sendmsg+0x21f/0x2a0
[  150.585727][T10982]  ? __pfx____sys_sendmsg+0x10/0x10
[  150.585751][T10982]  ? __fget_files+0x2a/0x420
[  150.585767][T10982]  ? __fget_files+0x3a0/0x420
[  150.585784][T10982]  __x64_sys_sendmsg+0x19b/0x260
[  150.585798][T10982]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  150.585811][T10982]  ? __sys_socketpair+0x4a9/0x560
[  150.585823][T10982]  ? do_syscall_64+0xbe/0x3b0
[  150.585837][T10982]  do_syscall_64+0xfa/0x3b0
[  150.585848][T10982]  ? lockdep_hardirqs_on+0x9c/0x150
[  150.585859][T10982]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.585872][T10982]  ? exc_page_fault+0x9f/0xf0
[  150.585884][T10982]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.585897][T10982] RIP: 0033:0x7f643b98e9a9
[  150.585910][T10982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  150.585921][T10982] RSP: 002b:00007f643c75d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  150.585937][T10982] RAX: ffffffffffffffda RBX: 00007f643bbb5fa0 RCX: 00007f643b98e9a9
[  150.585946][T10982] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 000000000000000d
[  150.585955][T10982] RBP: 00007f643ba10d69 R08: 0000000000000000 R09: 0000000000000000
[  150.585963][T10982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  150.585971][T10982] R13: 0000000000000000 R14: 00007f643bbb5fa0 R15: 00007fffb887adc8
[  150.585985][T10982]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  150.781553][T10982] nbd2: detected capacity change from 0 to 127
[  150.786390][   T56] block nbd2: Receive control failed (result -32)
[  151.233609][ T5844] bridge_slave_1: left allmulticast mode
[  151.235627][ T5844] bridge_slave_1: left promiscuous mode
[  151.237479][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.240729][ T5844] bridge_slave_0: left allmulticast mode
[  151.242729][ T5844] bridge_slave_0: left promiscuous mode
[  151.244562][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.249082][ T5844] tipc: Resetting bearer <eth:gre0>
[  151.321853][ T5844] bond2 (unregistering): (slave gretap1): Releasing active interface
[  151.324568][ T5844] gretap1 (unregistering): left allmulticast mode
[  151.332610][ T5844] tipc: Disabling bearer <eth:gre0>
[  151.647237][ T5844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  151.651156][ T5844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  151.655494][ T5844] bond0 (unregistering): (slave team0): Releasing backup interface
[  151.661344][ T5844] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  151.665547][ T5844] bond0 (unregistering): Released all slaves
[  151.731602][ T5844] bond1 (unregistering): (slave wireguard0): Releasing backup interface
[  151.735506][ T5844] bond1 (unregistering): (slave wireguard1): Releasing backup interface
[  151.739057][ T5844] bond1 (unregistering): Released all slaves
[  151.745248][ T5844] bond2 (unregistering): Released all slaves
[  151.801459][ T5844] tipc: Disabling bearer <udp:syz2>
[  151.803330][ T5844] tipc: Left network mode
[  151.986597][ T5844] hsr_slave_0: left promiscuous mode
[  151.989048][ T5844] hsr_slave_1: left promiscuous mode
[  152.005542][ T5844] batman_adv: batadv0: Removing interface: batadv_slave_0
[  152.011576][ T5844] batman_adv: batadv0: Removing interface: 26
[  152.213487][ T5844] team0 (unregistering): Port device team_slave_1 removed
[  152.237684][ T5844] team0 (unregistering): Port device team_slave_0 removed
[  152.464500][ T4046] smc: removing ib device syz0
[  152.466768][   T10] lo speed is unknown, defaulting to 1000
[  152.469102][   T10] syz0: Port: 1 Link DOWN

VM DIAGNOSIS:
17:58:38  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b4be10 RBX=ffff88804b03b180 RCX=ffff8881079a5640 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90006a07600 RSP=ffffc90006a074a0
R8 =ffffffff8fa1f8f7 R9 =1ffffffff1f43f1e R10=dffffc0000000000 R11=fffffbfff1f43f1f
R12=1ffff11026cc7f55 R13=dffffc0000000000 R14=0000000000000001 R15=ffff88813663faa8
RIP=ffffffff81b4bdf9 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd50a1676c0 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000002972e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f643ba11d4f
XMM06=0000000000000000 00007f643ba11d49 XMM07=0000000000000000 00007f643ba11d5d
XMM08=0000000000000000 00007f643ba11de3 XMM09=0000000000000000 00007f643ba11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000061 RBX=0000000000000061 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001109 RDI=000000000000110a RBP=00000000000003f8 RSP=ffffc900077c6690
R8 =ffff888021298237 R9 =1ffff11004253046 R10=dffffc0000000000 R11=ffffffff85464660
R12=dffffc0000000000 R13=ffffffff99af18cf R14=ffffffff99df64c0 R15=0000000000000000
RIP=ffffffff854646dc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f643c75d6c0 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3041eff8 CR3=0000000106888000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f03b0386478 00007f03b0386450 XMM03=00007f03b0386488 00007f03b0386480
XMM04=00007f03b0eed100 00007f03b0386440 XMM05=00007f03b0386458 00007f03b03864a0
XMM06=00007f03b0386498 00007f03b0386490 XMM07=00007f03b0386488 00007f03b0386480
XMM08=0000000000000000 00007f03b0211de3 XMM09=0000000000000000 00007f03b0211ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
