last executing test programs:

427.84346ms ago: executing program 2 (id=1627):
r0 = socket(0x40000000015, 0x5, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000020}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)

427.492789ms ago: executing program 1 (id=1629):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000), 0x4)

427.309044ms ago: executing program 2 (id=1630):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/147, 0x93}, {&(0x7f00000027c0)=""/4130, 0x1022}, {&(0x7f0000000840)=""/207, 0xcf}, {&(0x7f0000000040)=""/121, 0x79}, {&(0x7f0000000a40)=""/4107, 0x100b}, {&(0x7f00000002c0)=""/76, 0x4c}], 0x6}, 0xc}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x58, 0x0}, 0x38000000}, {{0x0, 0x0, 0x0}, 0x9}], 0x4, 0x0, 0x0)

416.282363ms ago: executing program 0 (id=1631):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6, 0xc8, 0x6, 0x7}]})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})

331.452348ms ago: executing program 1 (id=1632):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000280)=0x4, 0x4)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26)
recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0)

331.193455ms ago: executing program 2 (id=1633):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', <r2=>0x0})
r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r2, 0x25, 0x4, @void}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r3, r0, 0x4, r0}, 0x10)

271.147332ms ago: executing program 2 (id=1634):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
listen(r0, 0x8000)

270.942636ms ago: executing program 1 (id=1635):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x3f)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0xc3ff, {0x0, 0x0, 0x74, r2, {}, {0xffff, 0x1}, {0xa, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084)

270.852382ms ago: executing program 0 (id=1636):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000047000701ec560dbbffffffff017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x80)

181.097198ms ago: executing program 1 (id=1637):
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b2b, 0x0)

180.903703ms ago: executing program 0 (id=1638):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4)
setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000080)=0x4, 0x4)
recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/41, 0xc}, 0xffffff81}], 0x3d5, 0x45833af92e4b38ff, 0x0)

180.492887ms ago: executing program 2 (id=1639):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x0, 0x400001, 0x0, 0x0, 0xaa0}, [@TCA_NETEM_RATE={0x14, 0xd, {0x10000000, 0x2}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1000, 0x3, 0x9, 0x7, 0xfffffffffffffffe, 0x52}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x11}, 0x0)

131.691134ms ago: executing program 0 (id=1640):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffffe}, 0x1c)

131.57141ms ago: executing program 1 (id=1641):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000400)={'ipvs\x00'}, &(0x7f0000000440)=0x1e)

71.008333ms ago: executing program 0 (id=1642):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4)
sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800)
recvfrom$packet(r0, &(0x7f0000000680)=""/204, 0xcc, 0x10000, 0x0, 0x0)

70.836889ms ago: executing program 1 (id=1643):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000002000)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x800c054}, 0x0)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84)

70.452436ms ago: executing program 2 (id=1644):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8, 0x400000}, 0x20)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r3, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r9 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[], 0x101d0)
sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x1458}, 0x20048811)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008666dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xd9}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000", @ANYRES32=r12], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

0s ago: executing program 0 (id=1645):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016400002100000000100000000000016"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0))
ioctl$SIOCSIFHWADDR(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0500"})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:28804' (ED25519) to the list of known hosts.
syzkaller login: [   48.728417][ T5580] cgroup: Unknown subsys name 'net'
[   48.856911][ T5580] cgroup: Unknown subsys name 'cpuset'
[   48.867451][ T5580] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.250364][ T5580] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.099822][ T5597] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.100554][ T5597] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.101509][ T5597] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.102266][ T5597] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.102661][ T5597] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.102844][ T5597] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.102961][ T5597] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.103088][ T5597] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.103921][ T5597] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.105222][ T5597] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.105283][ T5597] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.105336][ T5597] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.106696][ T5597] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.106749][ T5597] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.106801][ T5597] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.587716][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.588075][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.588239][ T5590] bridge_slave_0: entered allmulticast mode
[   55.596284][ T5590] bridge_slave_0: entered promiscuous mode
[   55.613186][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.613269][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.613427][ T5590] bridge_slave_1: entered allmulticast mode
[   55.614495][ T5590] bridge_slave_1: entered promiscuous mode
[   55.684307][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.687304][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.717043][ T5590] team0: Port device team_slave_0 added
[   55.718529][ T5590] team0: Port device team_slave_1 added
[   55.737161][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.737170][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.737179][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.753721][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.753730][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.753740][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.841023][ T5590] hsr_slave_0: entered promiscuous mode
[   55.841881][ T5590] hsr_slave_1: entered promiscuous mode
[   55.930451][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.930599][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.930694][ T5589] bridge_slave_0: entered allmulticast mode
[   55.932121][ T5589] bridge_slave_0: entered promiscuous mode
[   55.940068][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.940110][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.940588][ T5591] bridge_slave_0: entered allmulticast mode
[   55.941335][ T5591] bridge_slave_0: entered promiscuous mode
[   55.943505][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.943544][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.943633][ T5591] bridge_slave_1: entered allmulticast mode
[   55.944551][ T5591] bridge_slave_1: entered promiscuous mode
[   55.961844][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.961914][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.962009][ T5589] bridge_slave_1: entered allmulticast mode
[   55.963307][ T5589] bridge_slave_1: entered promiscuous mode
[   56.000671][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.002809][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.017169][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.019905][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.071888][ T5589] team0: Port device team_slave_0 added
[   56.073415][ T5591] team0: Port device team_slave_0 added
[   56.091829][ T5591] team0: Port device team_slave_1 added
[   56.093663][ T5589] team0: Port device team_slave_1 added
[   56.153596][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.153611][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.153626][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.162477][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.162488][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.162503][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.193334][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.193344][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.193354][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.198642][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.198649][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.198658][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.225488][ T5590] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.234469][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   56.237496][ T5590] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.241504][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   56.242123][ T5590] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.246005][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   56.265356][ T5590] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.267638][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   56.273554][ T5589] hsr_slave_0: entered promiscuous mode
[   56.274032][ T5589] hsr_slave_1: entered promiscuous mode
[   56.274366][ T5589] debugfs: 'hsr0' already exists in 'hsr'
[   56.274403][ T5589] Cannot create hsr debugfs directory
[   56.298751][ T5591] hsr_slave_0: entered promiscuous mode
[   56.299727][ T5591] hsr_slave_1: entered promiscuous mode
[   56.300036][ T5591] debugfs: 'hsr0' already exists in 'hsr'
[   56.300045][ T5591] Cannot create hsr debugfs directory
[   56.371631][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.371685][ T5590] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.372072][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.372119][ T5590] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.468599][   T66] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.471950][   T66] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.517870][ T5589] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.525859][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   56.527216][ T5589] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.537499][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   56.545027][ T5589] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.548337][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   56.557064][ T5589] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.562237][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   56.587975][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.625383][ T5591] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.628420][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   56.632773][ T5590] 8021q: adding VLAN 0 to HW filter on device team0
[   56.640128][ T5591] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.642942][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   56.646283][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.646325][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.647445][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.647723][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.650124][ T5591] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.653876][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   56.654200][ T5591] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.657156][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   56.807365][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.836076][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.847892][ T5589] 8021q: adding VLAN 0 to HW filter on device team0
[   56.853414][ T5591] 8021q: adding VLAN 0 to HW filter on device team0
[   56.865438][   T66] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.865505][   T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.879731][   T66] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.879772][   T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.892544][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.892609][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.904845][   T66] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.904884][   T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.172302][   T56] Bluetooth: hci2: command tx timeout
[   57.172383][   T56] Bluetooth: hci0: command tx timeout
[   57.172422][   T56] Bluetooth: hci1: command tx timeout
[   57.224266][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.293378][ T5590] veth0_vlan: entered promiscuous mode
[   57.304908][ T5590] veth1_vlan: entered promiscuous mode
[   57.332830][ T5590] veth0_macvtap: entered promiscuous mode
[   57.336365][ T5590] veth1_macvtap: entered promiscuous mode
[   57.363892][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.372380][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.389007][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.410083][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.410416][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.410795][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.432896][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.445491][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.486839][ T5589] veth0_vlan: entered promiscuous mode
[   57.509995][ T5589] veth1_vlan: entered promiscuous mode
[   57.547434][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.547450][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.587629][ T5591] veth0_vlan: entered promiscuous mode
[   57.591227][ T5589] veth0_macvtap: entered promiscuous mode
[   57.602284][ T5589] veth1_macvtap: entered promiscuous mode
[   57.605739][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.605751][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.606034][ T5591] veth1_vlan: entered promiscuous mode
[   57.638444][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.653198][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.685463][ T5590] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.704015][ T5591] veth0_macvtap: entered promiscuous mode
[   57.713064][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.713092][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.713113][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.713136][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.716516][ T5591] veth1_macvtap: entered promiscuous mode
[   57.773981][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.786524][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.864734][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.864752][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.879349][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.956750][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.956764][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.975327][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.975338][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.025840][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.025856][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.039989][   T14] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.040019][   T14] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.040040][   T14] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.414679][ T5723] trusted_key: syz.0.11 sent an empty control message without MSG_MORE.
[   58.674805][ T5739] Zero length message leads to an empty skb
[   58.961341][ T5755] xt_IDLETIMER: label is empty or not nul-terminated
[   59.150508][ T5769] netlink: 67 bytes leftover after parsing attributes in process `syz.1.32'.
[   59.249607][   T56] Bluetooth: hci0: command tx timeout
[   59.249634][   T56] Bluetooth: hci2: command tx timeout
[   59.249712][ T5600] Bluetooth: hci1: command tx timeout
[   59.455920][ T5785] Illegal XDP return value 8 on prog  (id 8) dev N/A, expect packet loss!
[   59.476796][ T5787] syz.2.44 uses obsolete (PF_INET,SOCK_PACKET)
[   59.648425][ T5798] netlink: 564 bytes leftover after parsing attributes in process `syz.1.46'.
[   59.692730][ T5798] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   60.161013][ T5835] syz.0.65: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   60.161723][ T5835] CPU: 1 UID: 0 PID: 5835 Comm: syz.0.65 Not tainted syzkaller #0 PREEMPT(full) 
[   60.161733][ T5835] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   60.161738][ T5835] Call Trace:
[   60.161741][ T5835]  <TASK>
[   60.161745][ T5835]  dump_stack_lvl+0xe8/0x150
[   60.161761][ T5835]  warn_alloc+0x24d/0x270
[   60.161770][ T5835]  ? kasan_save_track+0x4f/0x80
[   60.161778][ T5835]  ? kasan_save_track+0x3e/0x80
[   60.161787][ T5835]  ? __pfx_warn_alloc+0x10/0x10
[   60.161793][ T5835]  ? __x64_sys_setsockopt+0x13d/0x1b0
[   60.161804][ T5835]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.161820][ T5835]  __vmalloc_node_range_noprof+0x127/0x1540
[   60.161839][ T5835]  ? rcu_is_watching+0x16/0xb0
[   60.161850][ T5835]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   60.161861][ T5835]  ? __kmalloc_cache_noprof+0x321/0x600
[   60.161869][ T5835]  ? __kmalloc_cache_noprof+0x14d/0x600
[   60.161875][ T5835]  ? xskq_create+0x56/0x220
[   60.161885][ T5835]  xskq_create+0x148/0x220
[   60.161892][ T5835]  ? xsk_init_queue+0x8a/0xe0
[   60.161904][ T5835]  xsk_init_queue+0x8a/0xe0
[   60.161917][ T5835]  xsk_setsockopt+0x52a/0x960
[   60.161929][ T5835]  ? __pfx_xsk_setsockopt+0x10/0x10
[   60.161940][ T5835]  ? __pfx_aa_sk_perm+0x10/0x10
[   60.161953][ T5835]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   60.161962][ T5835]  ? __pfx_xsk_setsockopt+0x10/0x10
[   60.161973][ T5835]  do_sock_setsockopt+0x17c/0x1b0
[   60.161984][ T5835]  __x64_sys_setsockopt+0x13d/0x1b0
[   60.161994][ T5835]  do_syscall_64+0x166/0x520
[   60.162003][ T5835]  ? trace_irq_disable+0x3b/0x140
[   60.162010][ T5835]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.162019][ T5835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.162027][ T5835] RIP: 0033:0x7fc01439e159
[   60.162035][ T5835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   60.162042][ T5835] RSP: 002b:00007fc0151f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   60.162050][ T5835] RAX: ffffffffffffffda RBX: 00007fc014625fa0 RCX: 00007fc01439e159
[   60.162056][ T5835] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[   60.162060][ T5835] RBP: 00007fc01443503b R08: 0000000000000004 R09: 0000000000000000
[   60.162065][ T5835] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   60.162069][ T5835] R13: 00007fc014626038 R14: 00007fc014625fa0 R15: 00007ffd23c852f8
[   60.162080][ T5835]  </TASK>
[   60.162083][ T5835] Mem-Info:
[   60.162088][ T5835] active_anon:5412 inactive_anon:0 isolated_anon:0
[   60.162088][ T5835]  active_file:0 inactive_file:49593 isolated_file:0
[   60.162088][ T5835]  unevictable:1000 dirty:1487 writeback:0
[   60.162088][ T5835]  slab_reclaimable:9627 slab_unreclaimable:78484
[   60.162088][ T5835]  mapped:18173 shmem:1591 pagetables:930
[   60.162088][ T5835]  sec_pagetables:0 bounce:0
[   60.162088][ T5835]  kernel_misc_reclaimable:0
[   60.162088][ T5835]  free:1144092 free_pcp:17802 free_cma:0
[   60.162106][ T5835] Node 0 active_anon:9048kB inactive_anon:0kB active_file:0kB inactive_file:167004kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:28576kB dirty:2368kB writeback:0kB shmem:3208kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6624kB pagetables:2196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   60.162126][ T5835] Node 1 active_anon:12600kB inactive_anon:0kB active_file:0kB inactive_file:31368kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:44116kB dirty:3580kB writeback:0kB shmem:3156kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4928kB pagetables:1524kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   60.162146][ T5835] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   60.162168][ T5835] lowmem_reserve[]: 0 1581 2111 2111 2111
[   60.162182][ T5835] Node 0 DMA32 free:1520300kB boost:0kB min:24948kB low:31184kB high:37420kB reserved_highatomic:0kB free_highatomic:0kB active_anon:248kB inactive_anon:0kB active_file:0kB inactive_file:62356kB unevictable:0kB writepending:100kB zspages:0kB present:2080636kB managed:1619388kB mlocked:0kB bounce:0kB free_pcp:4048kB local_pcp:1728kB free_cma:0kB
[   60.162203][ T5835] lowmem_reserve[]: 0 0 529 529 529
[   60.162217][ T5835] Node 0 Normal free:25800kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0kB free_highatomic:0kB active_anon:8800kB inactive_anon:0kB active_file:0kB inactive_file:104648kB unevictable:2000kB writepending:2268kB zspages:0kB present:1572868kB managed:542440kB mlocked:0kB bounce:0kB free_pcp:7324kB local_pcp:72kB free_cma:0kB
[   60.162239][ T5835] lowmem_reserve[]: 0 0 0 0 0
[   60.162254][ T5835] Node 1 Normal free:3014908kB boost:0kB min:56408kB low:70508kB high:84608kB reserved_highatomic:0kB free_highatomic:0kB active_anon:12600kB inactive_anon:0kB active_file:0kB inactive_file:31368kB unevictable:2000kB writepending:3580kB zspages:0kB present:3670012kB managed:3594688kB mlocked:0kB bounce:0kB free_pcp:59832kB local_pcp:31528kB free_cma:0kB
[   60.162276][ T5835] lowmem_reserve[]: 0 0 0 0 0
[   60.162291][ T5835] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   60.162340][ T5835] Node 0 DMA32: 1*4kB (U) 1*8kB (E) 2*16kB (UM) 0*32kB 2*64kB (ME) 2*128kB (UM) 1*256kB (M) 0*512kB 2*1024kB (UE) 3*2048kB (UME) 369*4096kB (M) = 1520300kB
[   60.162395][ T5835] Node 0 Normal: 398*4kB (UME) 624*8kB (UM) 311*16kB (UM) 118*32kB (UM) 36*64kB (UE) 16*128kB (UME) 8*256kB (UM) 4*512kB (UE) 0*1024kB 1*2048kB (U) 0*4096kB = 25832kB
[   60.162463][ T5835] Node 1 Normal: 433*4kB (UM) 565*8kB (UME) 123*16kB (UME) 10*32kB (ME) 4*64kB (UM) 3*128kB (UM) 3*256kB (UME) 1*512kB (U) 4*1024kB (UME) 5*2048kB (UME) 730*4096kB (M) = 3014876kB
[   60.163502][ T5835] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   60.163509][ T5835] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   60.163516][ T5835] 51184 total pagecache pages
[   60.163519][ T5835] 0 pages in swap cache
[   60.163522][ T5835] Free swap  = 124996kB
[   60.163526][ T5835] Total swap = 124996kB
[   60.163529][ T5835] 1834877 pages RAM
[   60.163533][ T5835] 0 pages HighMem/MovableOnly
[   60.163535][ T5835] 391908 pages reserved
[   60.163565][ T5835] 0 pages cma reserved
[   61.330818][ T5600] Bluetooth: hci1: command tx timeout
[   61.330847][ T5600] Bluetooth: hci2: command tx timeout
[   61.330863][ T5600] Bluetooth: hci0: command tx timeout
[   61.402289][ T5910] pim6reg99999999: entered allmulticast mode
[   62.049700][ T5941] virtio_blk virtio1: 1/0/0 default/read/poll queues
[   62.054805][ T5941] virtio_blk virtio1: [vda] 262144 512-byte logical blocks (134 MB/128 MiB)
[   62.119307][ T5941] syz.2.110 (5941) used greatest stack depth: 20064 bytes left
[   62.402083][ T5979] syzkaller0: entered promiscuous mode
[   62.402104][ T5979] syzkaller0: entered allmulticast mode
[   62.605107][ T5994] block nbd0: Unsupported socket: should be TCP or UNIX.
[   62.722187][ T6002] Bluetooth: MGMT ver 1.23
[   63.302806][ T6013] netlink: 'syz.0.140': attribute type 3 has an invalid length.
[   63.409225][   T56] Bluetooth: hci1: command tx timeout
[   63.409261][ T5600] Bluetooth: hci2: command tx timeout
[   63.409276][ T4991] Bluetooth: hci0: command tx timeout
[   63.455880][ T6018] xt_hashlimit: max too large, truncated to 1048576
[   63.455914][ T6018] xt_hashlimit: overflow, try lower: 0/0
[   63.533353][ T6021] netlink: 60 bytes leftover after parsing attributes in process `syz.0.143'.
[   63.533469][ T6021] unsupported nlmsg_type 40
[   63.633435][ T6006] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   63.722283][ T6029] nbd: socks must be embedded in a SOCK_ITEM attr
[   63.801224][ T6033] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[   63.833446][ T6039] netlink: 'syz.0.152': attribute type 6 has an invalid length.
[   63.977299][ T6042] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.977764][ T6042] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.169326][ T6042] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.185140][ T6042] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.369214][   T14] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.369246][   T14] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.369267][   T14] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.369287][   T14] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.775963][ T6101] netlink: 'syz.2.172': attribute type 4 has an invalid length.
[   64.820800][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.173'.
[   64.827696][ T6105] IPv6: NLM_F_CREATE should be specified when creating new route
[   64.827824][ T6105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   64.827829][ T6105] IPv6: NLM_F_CREATE should be set when creating new route
[   64.827903][ T6105] IPv6: NLM_F_CREATE should be set when creating new route
[   64.827913][ T6105] IPv6: NLM_F_CREATE should be set when creating new route
[   64.840754][ T6105] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.174'.
[   64.953664][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'.
[   65.149782][ T6123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.180'.
[   65.149808][ T6123] netlink: 14 bytes leftover after parsing attributes in process `syz.0.180'.
[   65.235684][ T6127] smc: net device vlan1 applied user defined pnetid SYZ2
[   65.473784][ T6136] netlink: 22 bytes leftover after parsing attributes in process `syz.2.186'.
[   65.707090][ T6149] tun0: tun_chr_ioctl cmd 2148553947
[   66.042444][ T6167] bond1: option fail_over_mac: invalid value (127)
[   66.049499][ T6167] bond1 (unregistering): Released all slaves
[   66.154131][ T6172] macsec1: entered allmulticast mode
[   66.154149][ T6172] veth1_macvtap: entered allmulticast mode
[   66.156334][ T6172] veth1_macvtap: left allmulticast mode
[   66.185678][ T6176] syz_tun: entered allmulticast mode
[   66.197603][ T6175] syz_tun: left allmulticast mode
[   66.357407][ T6190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.210'.
[   66.509852][ T6203] netlink: 'syz.0.216': attribute type 2 has an invalid length.
[   66.509869][ T6203] netlink: 'syz.0.216': attribute type 1 has an invalid length.
[   66.744937][ T6178] block nbd0: Receive control failed (result -32)
[   66.745245][   T57] block nbd0: Receive control failed (result -32)
[   67.606588][ T6279] netlink: 'syz.0.249': attribute type 1 has an invalid length.
[   67.864610][ T6293] netlink: 55 bytes leftover after parsing attributes in process `syz.0.256'.
[   68.128019][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'.
[   68.156369][ T6310] netlink: 244 bytes leftover after parsing attributes in process `syz.2.264'.
[   68.157637][ T6309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.414565][ T6312] sctp: [Deprecated]: syz.1.265 (pid 6312) Use of int in max_burst socket option.
[   68.414565][ T6312] Use struct sctp_assoc_value instead
[   69.030700][ T6341] tipc: Started in network mode
[   69.030724][ T6341] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[   69.032028][ T6341] tipc: Enabled bearer <eth:vlan0>, priority 30
[   69.155736][ T6351] netlink: 'syz.2.284': attribute type 2 has an invalid length.
[   69.356667][ T6372] warning: `syz.2.293' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.476298][ T6380] vlan2: entered promiscuous mode
[   69.476311][ T6380] hsr0: entered promiscuous mode
[   69.476464][ T6380] vlan2: entered allmulticast mode
[   69.476470][ T6380] hsr0: entered allmulticast mode
[   69.476474][ T6380] hsr_slave_0: entered allmulticast mode
[   69.476480][ T6380] hsr_slave_1: entered allmulticast mode
[   69.494121][ T6380] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[   69.522470][ T6386] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   70.150651][  T995] tipc: Node number set to 10005162
[   71.652167][ T4991] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   71.661620][ T4991] Bluetooth: hci0: command 0x0c1a tx timeout
[   71.662226][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[   71.662261][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[   72.851803][ T6411] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   73.039806][ T6437] __nla_validate_parse: 3 callbacks suppressed
[   73.039816][ T6437] netlink: 104 bytes leftover after parsing attributes in process `syz.0.321'.
[   73.240594][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.328'.
[   73.293641][ T6452] netlink: 132 bytes leftover after parsing attributes in process `syz.0.328'.
[   73.534932][ T6476] netlink: 88 bytes leftover after parsing attributes in process `syz.1.339'.
[   73.594148][ T6483] syzkaller0: entered promiscuous mode
[   73.594159][ T6483] syzkaller0: entered allmulticast mode
[   73.826264][ T6505] netlink: 'syz.2.347': attribute type 4 has an invalid length.
[   74.143609][ T6518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.351'.
[   74.424450][ T6548] netlink: 'syz.1.364': attribute type 1 has an invalid length.
[   74.476940][ T6552] netlink: 44 bytes leftover after parsing attributes in process `syz.1.366'.
[   74.477168][ T6552] netlink: 24 bytes leftover after parsing attributes in process `syz.1.366'.
[   74.495313][ T6551] Bluetooth: MGMT ver 1.23
[   74.495337][ T6551] Bluetooth: hci1: too big key_count value 29096
[   77.558740][ T6556] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   77.861539][ T6594] netlink: 164 bytes leftover after parsing attributes in process `syz.0.377'.
[   77.912623][ T6600] netlink: 'syz.1.384': attribute type 3 has an invalid length.
[   78.119072][ T6608] netlink: 24 bytes leftover after parsing attributes in process `syz.1.387'.
[   78.125193][ T6608] netlink: 'syz.1.387': attribute type 4 has an invalid length.
[   78.125203][ T6608] netlink: 152 bytes leftover after parsing attributes in process `syz.1.387'.
[   78.127860][ T6608] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.878105][ T6620] vcan0: tx drop: invalid da for name 0x0000000000000002
[   79.038898][ T6627] lo: entered allmulticast mode
[   79.190499][ T6627] lo: left allmulticast mode
[   79.349620][ T6637] netlink: 104 bytes leftover after parsing attributes in process `syz.2.400'.
[   79.454167][ T6645] netlink: 24 bytes leftover after parsing attributes in process `syz.1.404'.
[   79.656654][ T6665] syzkaller0: entered promiscuous mode
[   79.656670][ T6665] syzkaller0: entered allmulticast mode
[   79.726002][ T6668] Unknown options in mask 6
[   79.726295][ T6668] netlink: 28 bytes leftover after parsing attributes in process `syz.0.414'.
[   79.726316][ T6668] netlink: 36 bytes leftover after parsing attributes in process `syz.0.414'.
[   79.727903][ T6668] netlink: 'syz.0.414': attribute type 1 has an invalid length.
[   79.727915][ T6668] netlink: 224 bytes leftover after parsing attributes in process `syz.0.414'.
[   79.839883][ T6673] bridge_slave_0: left allmulticast mode
[   79.839904][ T6673] bridge_slave_0: left promiscuous mode
[   79.840065][ T6673] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.844566][ T6673] bridge_slave_1: left allmulticast mode
[   79.844584][ T6673] bridge_slave_1: left promiscuous mode
[   79.844827][ T6673] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.877646][ T6673] bond0: (slave bond_slave_0): Releasing backup interface
[   79.884296][ T6673] bond0: (slave bond_slave_1): Releasing backup interface
[   79.895355][ T6673] team0: Port device team_slave_0 removed
[   79.896915][ T6673] team0: Port device team_slave_1 removed
[   79.897178][ T6673] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.898085][ T6673] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.910869][ T6673] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   80.027304][ T6683] netlink: 40 bytes leftover after parsing attributes in process `syz.1.420'.
[   80.574390][ T6699] netlink: 104 bytes leftover after parsing attributes in process `syz.2.427'.
[   81.272167][ T6726] xt_recent: hitcount (268435462) is larger than allowed maximum (65535)
[   81.391132][ T6729] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.392285][ T6729] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.454963][ T6729] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.461411][ T6729] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.507380][ T6729] tipc: Resetting bearer <eth:vlan0>
[   81.595102][ T6729] vlan2: left promiscuous mode
[   81.595120][ T6729] hsr0: left promiscuous mode
[   81.595210][ T6729] vlan2: left allmulticast mode
[   81.595215][ T6729] hsr0: left allmulticast mode
[   81.595220][ T6729] hsr_slave_0: left allmulticast mode
[   81.595227][ T6729] hsr_slave_1: left allmulticast mode
[   81.605949][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.605982][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.606003][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.606024][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.627654][ T6735] 8021q: adding VLAN 0 to HW filter on device macsec1
[   81.633032][ T6047] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   81.875583][ T6752] netlink: 284 bytes leftover after parsing attributes in process `syz.1.454'.
[   81.900809][    T9] cfg80211: failed to load regulatory.db
[   83.016461][ T6781] netlink: 'syz.2.467': attribute type 1 has an invalid length.
[   83.943656][ T6789] No such timeout policy "s"
[   83.943665][ T6789] netlink: Failed to associated timeout policy 's'
[   84.167851][ T6807] netlink: 'syz.1.480': attribute type 2 has an invalid length.
[   84.183941][ T6810] netlink: 'syz.2.481': attribute type 25 has an invalid length.
[   85.614798][ T6863] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   85.614813][ T6863] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   86.662278][ T6882] netlink: 'syz.1.503': attribute type 30 has an invalid length.
[   86.916132][ T6890] sctp: [Deprecated]: syz.2.507 (pid 6890) Use of struct sctp_assoc_value in delayed_ack socket option.
[   86.916132][ T6890] Use struct sctp_sack_info instead
[   87.000761][ T6897] __nla_validate_parse: 4 callbacks suppressed
[   87.000778][ T6897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.511'.
[   87.100242][ T6904] x_tables: ip6_tables: conntrack.2 match: invalid size 160 (kernel) != (user) 168
[   87.192782][ T6911] syzkaller0: entered promiscuous mode
[   87.192799][ T6911] syzkaller0: entered allmulticast mode
[   87.451731][   T57] block nbd1: Receive control failed (result -32)
[   87.452298][ T6178] block nbd1: Receive control failed (result -32)
[   87.467553][ T6927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.519'.
[   87.755631][ T6947] netlink: 3568 bytes leftover after parsing attributes in process `syz.2.532'.
[   87.814974][ T6947] syzkaller0: entered promiscuous mode
[   87.814990][ T6947] syzkaller0: entered allmulticast mode
[   87.831854][    T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   88.609117][ T5657] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   88.609330][   T14] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   88.646087][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.551'.
[   88.646118][ T6996] netlink: 1 bytes leftover after parsing attributes in process `syz.2.551'.
[   88.827620][ T7010] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.832574][ T7012] netlink: NAT attribute has 4 unknown bytes
[   88.832591][ T7012] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.127629][ T7033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.569'.
[   89.144141][ T7033] vlan3: entered promiscuous mode
[   89.144153][ T7033] gretap0: entered promiscuous mode
[   89.622607][ T7060] netlink: 'syz.0.581': attribute type 1 has an invalid length.
[   89.655104][   T14] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   89.655297][   T14] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   89.720265][ T5657] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   89.866310][ T7073] xt_cgroup: path and classid specified
[   91.156840][ T7109] netlink: 28 bytes leftover after parsing attributes in process `syz.2.604'.
[   91.158357][ T7109] netlink: 28 bytes leftover after parsing attributes in process `syz.2.604'.
[   91.515285][ T7139] netlink: 'syz.1.616': attribute type 1 has an invalid length.
[   91.545243][ T7141] netlink: 'syz.2.618': attribute type 32 has an invalid length.
[   91.545255][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.618'.
[   91.578351][ T7141] bond1: option coupled_control: invalid value (10)
[   91.585292][ T7141] bond1 (unregistering): Released all slaves
[   91.601674][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.619'.
[   91.601686][ T7146] netlink: 'syz.1.619': attribute type 5 has an invalid length.
[   92.023734][ T7180] __nla_validate_parse: 6 callbacks suppressed
[   92.023753][ T7180] netlink: 136 bytes leftover after parsing attributes in process `syz.0.636'.
[   92.023765][ T7180] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[   92.114212][ T7185] --map-set only usable from mangle table
[   92.457905][ T7209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.649'.
[   92.832985][ T7235] netlink: 68 bytes leftover after parsing attributes in process `syz.1.659'.
[   92.842523][ T7235] netlink: 16 bytes leftover after parsing attributes in process `syz.1.659'.
[   93.180564][ T7250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.664'.
[   93.206031][ T7250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.664'.
[   93.413746][ T7258] bond1: option ad_select: invalid value (34)
[   93.428619][ T7258] bond1 (unregistering): Released all slaves
[   93.710747][ T7281] netlink: 'syz.1.679': attribute type 12 has an invalid length.
[   93.716102][ T7281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.679'.
[   93.787666][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.681'.
[   93.845891][ T7285] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.846643][ T7285] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.889040][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   93.898720][ T7285] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.917891][ T7285] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.998115][ T7298] netlink: 80 bytes leftover after parsing attributes in process `syz.1.683'.
[   94.120298][ T5633] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.120337][ T5633] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.120360][ T5633] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.120414][ T5633] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.685290][ T7348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.731623][ T7350] xt_hashlimit: size too large, truncated to 1048576
[   94.979037][ T7358] veth0: entered promiscuous mode
[   95.076213][ T7357] veth0: left promiscuous mode
[   95.191968][ T7362] ip_tables: iptables: counters copy to user failed while replacing table
[   95.483272][ T7378] Bluetooth: hci0: invalid length 0, exp 2 for type 15
[   95.757971][ T7401] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.727'.
[   96.079431][   T65] IPVS: starting estimator thread 0...
[   96.170393][ T7412] IPVS: using max 52 ests per chain, 124800 per kthread
[   96.209564][ T7415] netlink: 'syz.0.732': attribute type 39 has an invalid length.
[   97.234865][ T7462] __nla_validate_parse: 3 callbacks suppressed
[   97.234883][ T7462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.753'.
[   97.234899][ T7462] netlink: 'syz.2.753': attribute type 1 has an invalid length.
[   97.275487][ T7465] openvswitch: netlink: Tunnel attr 68 out of range max 16
[   97.366461][ T7473] netlink: 'syz.2.758': attribute type 2 has an invalid length.
[   97.423590][ T7476] netlink: 'syz.2.760': attribute type 1 has an invalid length.
[   97.612206][ T7494] netlink: 36 bytes leftover after parsing attributes in process `syz.0.770'.
[   97.756437][ T7506] raw_sendmsg: syz.2.774 forgot to set AF_INET. Fix it!
[   97.813196][ T7509] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[   97.844695][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.777'.
[   97.844713][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.777'.
[   97.844734][ T7511] netlink: 'syz.2.777': attribute type 14 has an invalid length.
[   97.844743][ T7511] netlink: 'syz.2.777': attribute type 13 has an invalid length.
[   98.207584][ T7526] openvswitch: netlink: IPv6 tunnel dst address is zero
[   98.324890][ T4991] Bluetooth: hci0: unexpected event 0x0f length: 124 > 4
[   98.325295][ T4991] Bluetooth: hci0: unexpected event for opcode 0x0000
[   98.417526][ T7534] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.453459][ T7536] netlink: 28 bytes leftover after parsing attributes in process `syz.1.788'.
[   99.090718][ T7567] xt_l2tp: missing protocol rule (udp|l2tpip)
[   99.127507][ T7571] netlink: 180 bytes leftover after parsing attributes in process `syz.0.804'.
[   99.152592][ T7573] netlink: 'syz.0.805': attribute type 2 has an invalid length.
[   99.228584][   T27] IPVS: starting estimator thread 0...
[   99.330614][ T7580] IPVS: using max 81 ests per chain, 194400 per kthread
[   99.392797][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.813'.
[   99.553142][ T7611] xt_hashlimit: size too large, truncated to 1048576
[   99.716020][ T7620] tipc: Started in network mode
[   99.716044][ T7620] tipc: Node identity 2e0307fd127f, cluster identity 4711
[   99.716228][ T7620] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.784536][ T7620] syzkaller0: entered promiscuous mode
[   99.784561][ T7620] syzkaller0: entered allmulticast mode
[   99.785000][ T7620] tipc: Resetting bearer <eth:syzkaller0>
[   99.840606][ T7619] tipc: Resetting bearer <eth:syzkaller0>
[  100.062199][ T7637] netlink: 44 bytes leftover after parsing attributes in process `syz.2.832'.
[  100.079588][ T7637] sctp: [Deprecated]: syz.2.832 (pid 7637) Use of struct sctp_assoc_value in delayed_ack socket option.
[  100.079588][ T7637] Use struct sctp_sack_info instead
[  101.061419][ T7619] tipc: Disabling bearer <eth:syzkaller0>
[  101.072380][ T5657] tipc: Node number set to 1014761469
[  101.150826][ T7667] netlink: 'syz.0.847': attribute type 1 has an invalid length.
[  101.150840][ T7667] netlink: 32 bytes leftover after parsing attributes in process `syz.0.847'.
[  101.281595][ T7681] ip_tables: iptables: counters copy to user failed while replacing table
[  101.428751][ T7693] bridge2: entered promiscuous mode
[  101.894231][ T7728] netlink: 28 bytes leftover after parsing attributes in process `syz.0.875'.
[  102.370488][ T4991] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  102.370543][ T4991] Bluetooth: hci0: Injecting HCI hardware error event
[  102.371254][ T4991] Bluetooth: hci0: hardware error 0x00
[  103.435113][ T7806] netlink: 52 bytes leftover after parsing attributes in process `syz.2.901'.
[  103.529303][ T7810] syzkaller0: entered promiscuous mode
[  103.529313][ T7810] syzkaller0: entered allmulticast mode
[  103.728947][ T7826] syzkaller0: entered promiscuous mode
[  103.729012][ T7826] syzkaller0: entered allmulticast mode
[  103.904249][ T7842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.921'.
[  103.968434][ T7847] bond1: option all_slaves_active: invalid value (255)
[  103.972787][ T7847] bond1 (unregistering): Released all slaves
[  103.983996][ T7851] netlink: 20 bytes leftover after parsing attributes in process `syz.0.925'.
[  104.078746][ T7842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.921'.
[  104.121193][ T7862] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  104.146974][ T7862] block nbd0: reconnected socket
[  104.148425][ T6178] block nbd0: Receive control failed (result -32)
[  104.305471][ T7877] syzkaller0: entered promiscuous mode
[  104.305488][ T7877] syzkaller0: entered allmulticast mode
[  104.461093][ T4991] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  104.466183][ T7874] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma?
[  105.663251][ T7915] openvswitch: netlink: Missing key (keys=50, expected=80)
[  105.833151][ T7936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.956'.
[  106.189462][ T7960] syzkaller0: entered promiscuous mode
[  106.189480][ T7960] syzkaller0: entered allmulticast mode
[  106.428171][ T7974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.974'.
[  106.532383][ T7979] netlink: 'syz.0.977': attribute type 1 has an invalid length.
[  106.532401][ T7979] netlink: 248 bytes leftover after parsing attributes in process `syz.0.977'.
[  106.534242][ T7980] syzkaller0: entered promiscuous mode
[  106.534261][ T7980] syzkaller0: entered allmulticast mode
[  106.767903][ T8000] netlink: 'syz.1.987': attribute type 15 has an invalid length.
[  106.803752][ T8004] netlink: 60 bytes leftover after parsing attributes in process `syz.1.989'.
[  106.852101][ T8010] bridge0: entered allmulticast mode
[  107.113018][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1004'.
[  107.307005][ T8054] syzkaller0: entered promiscuous mode
[  107.307019][ T8054] syzkaller0: entered allmulticast mode
[  107.356612][ T8058] batadv_slave_1: entered promiscuous mode
[  107.356926][ T8057] batadv_slave_1: left promiscuous mode
[  107.721440][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1032'.
[  108.428550][ T8103] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  108.792334][ T8129] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  108.792450][ T8129] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  108.864384][ T8135] syzkaller1: entered promiscuous mode
[  108.864402][ T8135] syzkaller1: entered allmulticast mode
[  109.038006][ T8145] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  109.112974][ T8154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1062'.
[  109.263295][ T8165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1068'.
[  109.346946][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1072'.
[  109.525389][ T8184] netlink: 564 bytes leftover after parsing attributes in process `syz.2.1076'.
[  109.579497][ T8184] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  109.645797][ T8190] syzkaller0: entered promiscuous mode
[  109.645819][ T8190] syzkaller0: entered allmulticast mode
[  109.990147][ T8205] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1086'.
[  110.092970][ T8213] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  110.761751][    T9] hid-generic 0005:15C2:0003.0001: item fetching failed at offset 0/1
[  110.763527][    T9] hid-generic 0005:15C2:0003.0001: probe with driver hid-generic failed with error -22
[  110.812874][ T8251] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.923422][ T8257] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1108'.
[  111.132412][ T8271] netlink: 480 bytes leftover after parsing attributes in process `syz.0.1114'.
[  111.132446][ T8271] netlink: 480 bytes leftover after parsing attributes in process `syz.0.1114'.
[  111.258610][ T8279] netlink: 'syz.1.1120': attribute type 2 has an invalid length.
[  111.258677][ T8279] netlink: 'syz.1.1120': attribute type 11 has an invalid length.
[  111.258687][ T8279] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1120'.
[  111.657111][ T8307] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  111.657131][ T8307] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  111.901192][ T8321] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1138'.
[  113.261338][ T8422] xt_CONNSECMARK: invalid mode: 254
[  113.543365][ T8442] TCP: TCP_TX_DELAY enabled
[  114.317799][ T8483] team_slave_0: entered allmulticast mode
[  114.381472][ T8485] __nla_validate_parse: 5 callbacks suppressed
[  114.381486][ T8485] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1210'.
[  114.381497][ T8485] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1210'.
[  114.580516][ T8497] syzkaller1: entered promiscuous mode
[  114.580533][ T8497] syzkaller1: entered allmulticast mode
[  114.833615][ T8512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1223'.
[  115.079921][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1232'.
[  115.079938][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1232'.
[  115.184666][ T8542] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.1239'.
[  115.238506][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1241'.
[  115.405523][ T8558] netlink: 'syz.2.1246': attribute type 4 has an invalid length.
[  115.405544][ T8558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1246'.
[  115.568660][ T8572] netlink: 'syz.1.1251': attribute type 4 has an invalid length.
[  115.584137][ T8572] netlink: 'syz.1.1251': attribute type 4 has an invalid length.
[  115.715735][ T8580] atomic_op ffff8881bcddf1e0 conn xmit_atomic 0000000000000000
[  115.796239][ T8588] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1259'.
[  116.351154][ T8613] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1271'.
[  117.632915][ T8663] Unsupported ieee802154 address type: 0
[  117.642394][ T8665] netlink: 'syz.0.1293': attribute type 11 has an invalid length.
[  117.672559][ T8666] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  117.733045][ T8673] lo: entered promiscuous mode
[  117.733196][ T8673] tunl0: entered promiscuous mode
[  117.733349][ T8673] gre0: entered promiscuous mode
[  117.733548][ T8673] erspan0: entered promiscuous mode
[  117.733632][ T8673] ip_vti0: entered promiscuous mode
[  117.733737][ T8673] ip6_vti0: entered promiscuous mode
[  117.733825][ T8673] sit0: entered promiscuous mode
[  117.733926][ T8673] ip6tnl0: entered promiscuous mode
[  117.734060][ T8673] ip6gre0: entered promiscuous mode
[  117.734146][ T8673] syz_tun: entered promiscuous mode
[  117.734251][ T8673] ip6gretap0: entered promiscuous mode
[  117.734391][ T8673] bridge0: entered promiscuous mode
[  117.739061][ T8673] vcan0: entered promiscuous mode
[  117.739191][ T8673] bond0: entered promiscuous mode
[  117.739203][ T8673] bond_slave_0: entered promiscuous mode
[  117.739381][ T8673] bond_slave_1: entered promiscuous mode
[  117.739593][ T8673] team0: entered promiscuous mode
[  117.739604][ T8673] team_slave_0: entered promiscuous mode
[  117.739717][ T8673] team_slave_1: entered promiscuous mode
[  117.739932][ T8673] dummy0: entered promiscuous mode
[  117.740039][ T8673] nlmon0: entered promiscuous mode
[  117.740144][ T8673] batadv0: entered promiscuous mode
[  117.740251][ T8673] vxcan0: entered promiscuous mode
[  117.740476][ T8673] vxcan1: entered promiscuous mode
[  117.745754][ T8673] veth0: entered promiscuous mode
[  117.745879][ T8673] veth1: entered promiscuous mode
[  117.745986][ T8673] wg0: entered promiscuous mode
[  117.746095][ T8673] wg2: entered promiscuous mode
[  117.746194][ T8673] veth0_to_bridge: entered promiscuous mode
[  117.746447][ T8673] veth1_to_bridge: entered promiscuous mode
[  117.746631][ T8673] veth0_to_bond: entered promiscuous mode
[  117.746835][ T8673] veth1_to_bond: entered promiscuous mode
[  117.747027][ T8673] veth0_to_team: entered promiscuous mode
[  117.753619][ T8673] veth1_to_team: entered promiscuous mode
[  117.753840][ T8673] veth0_to_batadv: entered promiscuous mode
[  117.753950][ T8673] batadv_slave_0: entered promiscuous mode
[  117.754060][ T8673] veth1_to_batadv: entered promiscuous mode
[  117.754163][ T8673] batadv_slave_1: entered promiscuous mode
[  117.754295][ T8673] xfrm0: entered promiscuous mode
[  117.754406][ T8673] veth0_to_hsr: entered promiscuous mode
[  117.754613][ T8673] veth1_to_hsr: entered promiscuous mode
[  117.754806][ T8673] hsr0: entered promiscuous mode
[  117.754917][ T8673] veth1_virt_wifi: entered promiscuous mode
[  117.758161][ T8673] veth0_virt_wifi: entered promiscuous mode
[  117.758299][ T8673] virt_wifi0: entered promiscuous mode
[  117.758628][ T8673] vlan0: entered promiscuous mode
[  117.759117][ T8673] vlan1: entered promiscuous mode
[  117.759375][ T8673] macvlan0: entered promiscuous mode
[  117.759508][ T8673] macvlan1: entered promiscuous mode
[  117.759654][ T8673] ipvlan0: entered promiscuous mode
[  117.762851][ T8673] ipvlan1: entered promiscuous mode
[  117.763164][ T8673] macvtap0: entered promiscuous mode
[  117.763307][ T8673] macsec0: entered promiscuous mode
[  117.763399][ T8673] geneve0: entered promiscuous mode
[  117.763524][ T8673] geneve1: entered promiscuous mode
[  117.763698][ T8673] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  117.763800][ T8673] netdevsim netdevsim0 netdevsim1: entered promiscuous mode
[  117.763896][ T8673] netdevsim netdevsim0 netdevsim2: entered promiscuous mode
[  117.764002][ T8673] netdevsim netdevsim0 netdevsim3: entered promiscuous mode
[  117.764093][ T8673] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  117.765825][ T8673] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  117.765946][ T8673] sit1: entered promiscuous mode
[  117.766056][ T8673] syztnl2: entered promiscuous mode
[  117.766143][ T8673] vlan2: entered promiscuous mode
[  117.766394][ T8673] gtp0: entered promiscuous mode
[  117.766520][ T8673] ipip0: entered promiscuous mode
[  117.766628][ T8673] ipip1: entered promiscuous mode
[  117.766726][ T8673] bond1: entered promiscuous mode
[  117.766844][ T8673] geneve2: entered promiscuous mode
[  118.545823][ T8715] openvswitch: netlink: Duplicate or invalid key (type 0).
[  118.664499][ T8727] gtp1: entered promiscuous mode
[  118.664515][ T8727] gtp1: entered allmulticast mode
[  118.669489][ T8727] team0: Device gtp1 is of different type
[  118.727179][ T8732] netlink: 'syz.1.1321': attribute type 1 has an invalid length.
[  118.727194][ T8732] netlink: 'syz.1.1321': attribute type 1 has an invalid length.
[  118.832770][ T8740] netlink: 'syz.2.1325': attribute type 8 has an invalid length.
[  118.879574][ T8744] netlink: 'syz.0.1326': attribute type 29 has an invalid length.
[  118.999247][ T1110] IPVS: starting estimator thread 0...
[  119.089019][ T8755] IPVS: using max 46 ests per chain, 110400 per kthread
[  119.458617][ T8779] netlink: 'syz.0.1340': attribute type 11 has an invalid length.
[  119.458640][ T8779] __nla_validate_parse: 6 callbacks suppressed
[  119.458647][ T8779] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1340'.
[  119.814679][ T8789] bond2: option primary_reselect: invalid value (6)
[  119.824772][ T8789] bond2 (unregistering): Released all slaves
[  120.022143][ T8803] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1353'.
[  120.027864][ T8803] syzkaller1: entered promiscuous mode
[  120.027882][ T8803] syzkaller1: entered allmulticast mode
[  120.696604][ T8828] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  120.748473][ T8831] ieee802154 phy0 wpan0: encryption failed: -22
[  120.907873][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1368'.
[  120.996548][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1368'.
[  121.005843][ T8838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1368'.
[  121.607755][ T8878] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1388'.
[  121.670907][ T8882] GUP no longer grows the stack in syz.2.1390 (8882): 200000003000-20000000a000 (200000001000)
[  121.670936][ T8882] CPU: 1 UID: 0 PID: 8882 Comm: syz.2.1390 Not tainted syzkaller #0 PREEMPT(full) 
[  121.670952][ T8882] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  121.670960][ T8882] Call Trace:
[  121.670966][ T8882]  <TASK>
[  121.670973][ T8882]  dump_stack_lvl+0xe8/0x150
[  121.671000][ T8882]  __get_user_pages+0x23b6/0x2750
[  121.671021][ T8882]  ? lock_acquire+0x115/0x350
[  121.671047][ T8882]  ? __gup_longterm_locked+0xc3b/0x15c0
[  121.671070][ T8882]  __gup_longterm_locked+0xd52/0x15c0
[  121.671089][ T8882]  ? lock_acquire+0x115/0x350
[  121.671114][ T8882]  gup_fast_fallback+0x1d92/0x20e0
[  121.671152][ T8882]  ? __pfx_gup_fast_fallback+0x10/0x10
[  121.671171][ T8882]  ? futex_unqueue+0x22/0x240
[  121.671186][ T8882]  ? is_valid_gup_args+0x11f/0x200
[  121.671203][ T8882]  ? get_user_pages_fast+0x4d/0xb0
[  121.671221][ T8882]  __iov_iter_get_pages_alloc+0x378/0xa40
[  121.671272][ T8882]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  121.671293][ T8882]  iov_iter_get_pages2+0x5e/0xa0
[  121.671312][ T8882]  __se_sys_vmsplice+0x7b5/0x1660
[  121.671347][ T8882]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  121.671368][ T8882]  ? __pfx_futex_wait+0x10/0x10
[  121.671406][ T8882]  ? 0xffffffffff600000
[  121.671445][ T8882]  do_syscall_64+0x166/0x520
[  121.671460][ T8882]  ? trace_irq_disable+0x3b/0x140
[  121.671475][ T8882]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.671494][ T8882]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.671508][ T8882] RIP: 0033:0x7f133f99e159
[  121.671521][ T8882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  121.671532][ T8882] RSP: 002b:00007f134090b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  121.671549][ T8882] RAX: ffffffffffffffda RBX: 00007f133fc25fa0 RCX: 00007f133f99e159
[  121.671560][ T8882] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008
[  121.671570][ T8882] RBP: 00007f133fa3503b R08: 0000000000000000 R09: 0000000000000000
[  121.671579][ T8882] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  121.671607][ T8882] R13: 00007f133fc26038 R14: 00007f133fc25fa0 R15: 00007ffe142524f8
[  121.671630][ T8882]  </TASK>
[  122.273735][ T8897] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1397'.
[  122.273749][ T8897] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1397'.
[  122.519499][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1408'.
[  122.627829][ T8931] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1415'.
[  122.657088][ T8933] netlink: 'syz.1.1414': attribute type 1 has an invalid length.
[  123.243418][ T8982] bond1: entered promiscuous mode
[  123.243465][ T8982] bond1: entered allmulticast mode
[  123.243787][ T8982] 8021q: adding VLAN 0 to HW filter on device bond1
[  123.349350][ T8986] netlink: 'syz.1.1437': attribute type 4 has an invalid length.
[  123.517461][ T8999] bond2: option ad_user_port_key: invalid value (65535)
[  123.517478][ T8999] bond2: option ad_user_port_key: allowed values 0 - 1023
[  123.521566][ T8999] bond2 (unregistering): Released all slaves
[  123.674030][ T9011] bond0: Unable to set peer notification delay as MII monitoring is disabled
[  123.722900][ T9013] syzkaller0: entered promiscuous mode
[  123.722913][ T9013] syzkaller0: entered allmulticast mode
[  124.434324][ T9059] bond2: entered promiscuous mode
[  124.515958][ T9067] netlink: 'syz.2.1473': attribute type 4 has an invalid length.
[  124.516374][ T9067] netlink: 'syz.2.1473': attribute type 4 has an invalid length.
[  124.592486][ T9075] __nla_validate_parse: 7 callbacks suppressed
[  124.592499][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1477'.
[  124.634095][ T9079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1478'.
[  124.634117][ T9079] netlink: 'syz.0.1478': attribute type 32 has an invalid length.
[  124.634174][ T9079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1478'.
[  124.634181][ T9079] netlink: 'syz.0.1478': attribute type 32 has an invalid length.
[  124.712980][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1478'.
[  124.713001][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1478'.
[  125.434464][ T9131] syzkaller1: entered promiscuous mode
[  125.434479][ T9131] syzkaller1: entered allmulticast mode
[  125.752922][ T9150] netlink: 'syz.2.1510': attribute type 2 has an invalid length.
[  126.159812][ T9174] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1522'.
[  127.093607][ T9258] ip6erspan0: entered allmulticast mode
[  127.104437][ T9260] team0: entered allmulticast mode
[  127.104455][ T9260] team_slave_0: entered allmulticast mode
[  127.104468][ T9260] team_slave_1: entered allmulticast mode
[  127.105409][ T9260] 8021q: adding VLAN 0 to HW filter on device team0
[  127.105732][ T9260] team0: Cannot enslave team device to itself
[  127.130353][ T9258] x_tables: duplicate underflow at hook 3
[  127.160260][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1559'.
[  127.246526][ T9268] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) !
[  127.802893][ T9246] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  128.067392][ T9300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1577'.
[  128.067647][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1577'.
[  128.133981][ T9304] caif0: tun_chr_ioctl cmd 2147767507
[  128.548422][ T4991] Bluetooth: hci2: link tx timeout
[  128.548735][ T4991] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  128.551605][ T4991] Bluetooth: hci2: link tx timeout
[  128.551616][ T4991] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  128.553630][ T5600] Bluetooth: hci2: link tx timeout
[  128.553639][ T5600] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  128.553645][ T5600] Bluetooth: hci2: link tx timeout
[  128.553649][ T5600] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  128.567825][ T5600] Bluetooth: hci2: link tx timeout
[  128.567836][ T5600] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  128.567844][ T5600] Bluetooth: hci2: link tx timeout
[  128.567849][ T5600] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  128.568037][ T5600] Bluetooth: hci2: link tx timeout
[  128.568043][ T5600] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  128.568048][ T5600] Bluetooth: hci2: link tx timeout
[  128.568051][ T5600] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  128.568087][ T5600] Bluetooth: hci2: link tx timeout
[  128.568092][ T5600] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  128.568097][ T5600] Bluetooth: hci2: link tx timeout
[  128.568102][ T5600] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  128.568110][ T9339] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  128.568131][ T9339] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  128.568154][ T5600] Bluetooth: hci2: link tx timeout
[  128.568159][ T5600] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  128.568164][ T5600] Bluetooth: hci2: link tx timeout
[  128.568167][ T5600] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  128.568202][ T5600] Bluetooth: hci2: link tx timeout
[  128.568239][ T5600] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  128.568247][ T5600] Bluetooth: hci2: link tx timeout
[  128.569631][ T5600] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  128.574482][ T9339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1596'.
[  128.613696][ T9344] ieee802154 phy0 wpan0: encryption failed: -22
[  128.907722][ T9359] 8021q: adding VLAN 0 to HW filter on device team0
[  128.914292][ T9359] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.998479][ T9359] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  128.998504][ T9359] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  129.014589][ T9359] veth1_vlan: left promiscuous mode
[  129.017294][ T9359] veth0_vlan: left promiscuous mode
[  129.025834][ T9359] veth0_vlan: entered promiscuous mode
[  129.031464][ T9359] veth1_vlan: entered promiscuous mode
[  129.034992][ T9359] veth1_macvtap: left promiscuous mode
[  129.035823][ T9359] veth0_macvtap: left promiscuous mode
[  129.036463][ T9359] veth0_macvtap: entered promiscuous mode
[  129.037128][ T9359] veth1_macvtap: entered promiscuous mode
[  129.052957][ T9359] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  129.053963][ T9359] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  129.056522][ T9359] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  129.058154][ T9359] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  129.093101][ T9359] 8021q: adding VLAN 0 to HW filter on device bond1
[  129.094062][ T9359] bridge2: left promiscuous mode
[  129.098613][ T9359] bond2: left promiscuous mode
[  129.098767][ T9359] 8021q: adding VLAN 0 to HW filter on device bond2
[  129.199842][ T5633] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.208408][ T9369] lo: Caught tx_queue_len zero misconfig
[  129.229732][ T5633] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.229768][ T5633] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.229790][ T5633] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.303523][ T9371] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  129.664268][ T9387] __nla_validate_parse: 6 callbacks suppressed
[  129.664288][ T9387] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1615'.
[  129.816484][ T9395] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.936942][ T9407] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1625'.
[  130.155906][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1635'.
[  130.165484][ T9425] erspan0: entered promiscuous mode
[  130.170929][ T9425] macvtap1: entered promiscuous mode
[  130.171065][ T9425] macvtap1: entered allmulticast mode
[  130.171075][ T9425] erspan0: entered allmulticast mode
[  130.183081][ T9425] erspan0: left allmulticast mode
[  130.183152][ T9425] erspan0: left promiscuous mode
[  130.192011][ T9425] macvtap1: left promiscuous mode
[  130.192024][ T9425] macvtap1: left allmulticast mode
[  130.405515][ T9448] nbd2: detected capacity change from 0 to 63
[  130.406369][ T9448] block nbd2: NBD_DISCONNECT
[  130.407289][ T9448] block nbd2: Disconnected due to user request.
[  130.408999][ T9448] block nbd2: shutting down sockets
[  130.422626][   T54] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  130.422691][   T54] Buffer I/O error on dev nbd2, logical block 0, async page read
[  130.423452][   T54] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  130.423465][   T54] Buffer I/O error on dev nbd2, logical block 1, async page read
[  130.424084][   T54] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2
[  130.424101][   T54] Buffer I/O error on dev nbd2, logical block 2, async page read
[  130.424111][   T54] Buffer I/O error on dev nbd2, logical block 3, async page read
[  130.425108][   T54] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  130.425120][   T54] Buffer I/O error on dev nbd2, logical block 0, async page read
[  130.425126][   T54] Buffer I/O error on dev nbd2, logical block 1, async page read
[  130.425132][   T54] Buffer I/O error on dev nbd2, logical block 2, async page read
[  130.425138][   T54] Buffer I/O error on dev nbd2, logical block 3, async page read
[  130.425228][   T54] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  130.425249][   T54] Buffer I/O error on dev n
** replaying previous printk message **
[  130.425249][   T54] Buffer I/O error on dev nbd2, logical block 0, async page read
[  130.425313][   T54] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  130.425324][   T54] Buffer I/O error on dev nbd2, logical block 1, async page read
[  130.425362][   T54] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  130.425756][   T54] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  130.425874][   T54] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  130.425972][   T54] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  130.429173][ T5595] ldm_validate_partition_table(): Disk read failed.
[  130.429460][ T5595] Dev nbd2: unable to read RDB block 0
[  130.429851][ T5595]  nbd2: unable to read partition table
[  130.447033][ T5595] ldm_validate_partition_table(): Disk read failed.
[  130.450940][ T5595] Dev nbd2: unable to read RDB block 0
[  130.452506][ T5595]  nbd2: unable to read partition table
[  130.473580][ T5595] 
[  130.509690][ T5595] ======================================================
[  130.511896][ T5595] WARNING: possible circular locking dependency detected
[  130.514279][ T5595] syzkaller #0 Not tainted
[  130.515951][ T5595] ------------------------------------------------------
[  130.518610][ T5595] udevd/5595 is trying to acquire lock:
[  130.520744][ T5595] ffffffff8ee900e0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x5f/0x610
[  130.523831][ T5595] 
[  130.523831][ T5595] but task is already holding lock:
[  130.526306][ T5595] ffffffff905fc200 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560
[  130.530272][ T5595] 
[  130.530272][ T5595] which lock already depends on the new lock.
[  130.530272][ T5595] 
[  130.533892][ T5595] 
[  130.533892][ T5595] the existing dependency chain (in reverse order) is:
[  130.536861][ T5595] 
[  130.536861][ T5595] -> #8 (uevent_sock_mutex){+.+.}-{4:4}:
[  130.539349][ T5595]        __mutex_lock+0x19d/0x1550
[  130.540952][ T5595]        kobject_uevent_net_broadcast+0x27e/0x560
[  130.543099][ T5595]        kobject_uevent_env+0x566/0x9e0
[  130.544991][ T5595]        device_add+0x544/0xb80
[  130.546501][ T5595]        device_create+0x269/0x300
[  130.548046][ T5595]        msr_device_create+0x33/0x50
[  130.549776][ T5595]        cpuhp_invoke_callback+0x434/0x810
[  130.551575][ T5595]        cpuhp_thread_fun+0x362/0x780
[  130.553219][ T5595]        smpboot_thread_fn+0x565/0xa70
[  130.554874][ T5595]        kthread+0x38b/0x480
[  130.556301][ T5595]        ret_from_fork+0x514/0xb70
[  130.558034][ T5595]        ret_from_fork_asm+0x1a/0x30
[  130.560037][ T5595] 
[  130.560037][ T5595] -> #7 (cpuhp_state-up){+.+.}-{0:0}:
[  130.562782][ T5595]        cpuhp_thread_fun+0x127/0x780
[  130.564519][ T5595]        smpboot_thread_fn+0x565/0xa70
[  130.566174][ T5595]        kthread+0x38b/0x480
[  130.567608][ T5595]        ret_from_fork+0x514/0xb70
[  130.569493][ T5595]        ret_from_fork_asm+0x1a/0x30
[  130.571491][ T5595] 
[  130.571491][ T5595] -> #6 (cpu_hotplug_lock){++++}-{0:0}:
[  130.574427][ T5595]        cpus_read_lock+0x42/0x160
[  130.575999][ T5595]        static_key_slow_inc+0x12/0x30
[  130.577687][ T5595]        nbd_genl_reconnect_sock_cb+0x69a/0xbb0
[  130.579943][ T5595]        nbd_genl_foreach_sock+0x265/0x450
[  130.582128][ T5595]        nbd_genl_reconfigure+0xbbb/0x1040
[  130.584420][ T5595]        genl_family_rcv_msg_doit+0x233/0x340
[  130.586569][ T5595]        genl_rcv_msg+0x614/0x7a0
[  130.588503][ T5595]        netlink_rcv_skb+0x226/0x4a0
[  130.590408][ T5595]        genl_rcv+0x28/0x40
[  130.591804][ T5595]        netlink_unicast+0x7bd/0x940
[  130.593427][ T5595]        netlink_sendmsg+0x813/0xb40
[  130.595062][ T5595]        sock_sendmsg_nosec+0x13a/0x180
[  130.596745][ T5595]        ____sys_sendmsg+0x54e/0x850
[  130.598343][ T5595]        ___sys_sendmsg+0x2a5/0x360
[  130.600186][ T5595]        __x64_sys_sendmsg+0x1b1/0x290
[  130.602062][ T5595]        do_syscall_64+0x166/0x520
[  130.603721][ T5595]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.606101][ T5595] 
[  130.606101][ T5595] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  130.608534][ T5595]        __mutex_lock+0x19d/0x1550
[  130.610263][ T5595]        nbd_queue_rq+0x373/0xff0
[  130.611967][ T5595]        blk_mq_dispatch_rq_list+0x499/0x1990
[  130.614277][ T5595]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  130.616355][ T5595]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  130.618405][ T5595]        blk_mq_run_work_fn+0x16c/0x300
[  130.620435][ T5595]        process_scheduled_works+0xc3d/0x1630
[  130.622566][ T5595]        worker_thread+0xa47/0xfb0
[  130.624452][ T5595]        kthread+0x38b/0x480
[  130.626156][ T5595]        ret_from_fork+0x514/0xb70
[  130.628105][ T5595]        ret_from_fork_asm+0x1a/0x30
[  130.630006][ T5595] 
[  130.630006][ T5595] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  130.632717][ T5595]        __mutex_lock+0x19d/0x1550
[  130.634553][ T5595]        nbd_queue_rq+0xc1/0xff0
[  130.636068][ T5595]        blk_mq_dispatch_rq_list+0x499/0x1990
[  130.637930][ T5595]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  130.640041][ T5595]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  130.642014][ T5595]        blk_mq_run_work_fn+0x16c/0x300
[  130.644040][ T5595]        process_scheduled_works+0xc3d/0x1630
[  130.646248][ T5595]        worker_thread+0xa47/0xfb0
[  130.647825][ T5595]        kthread+0x38b/0x480
[  130.649504][ T5595]        ret_from_fork+0x514/0xb70
[  130.651151][ T5595]        ret_from_fork_asm+0x1a/0x30
[  130.652793][ T5595] 
[  130.652793][ T5595] -> #3 (set->srcu){.+.+}-{0:0}:
[  130.655033][ T5595]        __synchronize_srcu+0xc9/0x2f0
[  130.656737][ T5595]        elevator_switch+0x1e8/0x7b0
[  130.658375][ T5595]        elevator_change+0x2fa/0x480
[  130.659989][ T5595]        elevator_set_default+0x375/0x440
[  130.661746][ T5595]        blk_register_queue+0x3f3/0x4e0
[  130.663431][ T5595]        __add_disk+0x6b8/0xdb0
[  130.664955][ T5595]        add_disk_fwnode+0x100/0x3a0
[  130.666626][ T5595]        nbd_dev_add+0x733/0xb60
[  130.668191][ T5595]        nbd_init+0x168/0x1f0
[  130.669859][ T5595]        do_one_initcall+0x250/0x870
[  130.671581][ T5595]        do_initcall_level+0x10a/0x1a0
[  130.673457][ T5595]        do_initcalls+0x59/0xa0
[  130.675052][ T5595]        kernel_init_freeable+0x29d/0x3e0
[  130.677135][ T5595]        kernel_init+0x22/0x1d0
[  130.678730][ T5595]        ret_from_fork+0x514/0xb70
[  130.680464][ T5595]        ret_from_fork_asm+0x1a/0x30
[  130.682172][ T5595] 
[  130.682172][ T5595] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  130.685012][ T5595]        __mutex_lock+0x19d/0x1550
[  130.687020][ T5595]        elevator_change+0x1af/0x480
[  130.689045][ T5595]        elevator_set_none+0xb5/0x140
[  130.690942][ T5595]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  130.693421][ T5595]        nbd_start_device+0x189/0xb30
[  130.695547][ T5595]        nbd_genl_connect+0x167d/0x1cd0
[  130.697615][ T5595]        genl_family_rcv_msg_doit+0x233/0x340
[  130.699591][ T5595]        genl_rcv_msg+0x614/0x7a0
[  130.701180][ T5595]        netlink_rcv_skb+0x226/0x4a0
[  130.702845][ T5595]        genl_rcv+0x28/0x40
[  130.704235][ T5595]        netlink_unicast+0x7bd/0x940
[  130.705873][ T5595]        netlink_sendmsg+0x813/0xb40
[  130.707806][ T5595]        sock_sendmsg_nosec+0x13a/0x180
[  130.709583][ T5595]        ____sys_sendmsg+0x54e/0x850
[  130.711251][ T5595]        ___sys_sendmsg+0x2a5/0x360
[  130.712903][ T5595]        __x64_sys_sendmsg+0x1b1/0x290
[  130.714709][ T5595]        do_syscall_64+0x166/0x520
[  130.716362][ T5595]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.718902][ T5595] 
[  130.718902][ T5595] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  130.721954][ T5595]        blk_alloc_queue+0x544/0x690
[  130.723705][ T5595]        __blk_mq_alloc_disk+0x194/0x390
[  130.725648][ T5595]        nbd_dev_add+0x494/0xb60
[  130.727386][ T5595]        nbd_init+0x168/0x1f0
[  130.729289][ T5595]        do_one_initcall+0x250/0x870
[  130.731361][ T5595]        do_initcall_level+0x10a/0x1a0
[  130.733383][ T5595]        do_initcalls+0x59/0xa0
[  130.735273][ T5595]        kernel_init_freeable+0x29d/0x3e0
[  130.737357][ T5595]        kernel_init+0x22/0x1d0
[  130.739179][ T5595]        ret_from_fork+0x514/0xb70
[  130.740838][ T5595]        ret_from_fork_asm+0x1a/0x30
[  130.742567][ T5595] 
[  130.742567][ T5595] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  130.745294][ T5595]        __lock_acquire+0x164c/0x2de0
[  130.747221][ T5595]        lock_acquire+0x115/0x350
[  130.748849][ T5595]        fs_reclaim_acquire+0x71/0x100
[  130.750608][ T5595]        kmem_cache_alloc_node_noprof+0x5f/0x610
[  130.752798][ T5595]        __alloc_skb+0x27a/0x7a0
[  130.754468][ T5595]        alloc_uevent_skb+0x7d/0x230
[  130.756174][ T5595]        kobject_uevent_net_broadcast+0x2fa/0x560
[  130.758619][ T5595]        kobject_uevent_env+0x566/0x9e0
[  130.760761][ T5595]        nbd_config_put+0x2c8/0x7e0
[  130.762915][ T5595]        nbd_release+0xfe/0x140
[  130.764952][ T5595]        bdev_release+0x571/0x690
[  130.767021][ T5595]        blkdev_release+0x15/0x20
[  130.769017][ T5595]        __fput+0x418/0xa50
[  130.770844][ T5595]        fput_close_sync+0x11f/0x240
[  130.772891][ T5595]        __x64_sys_close+0x7e/0x110
[  130.774787][ T5595]        do_syscall_64+0x166/0x520
[  130.776562][ T5595]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.778512][ T5595] 
[  130.778512][ T5595] other info that might help us debug this:
[  130.778512][ T5595] 
[  130.782145][ T5595] Chain exists of:
[  130.782145][ T5595]   fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex
[  130.782145][ T5595] 
[  130.786492][ T5595]  Possible unsafe locking scenario:
[  130.786492][ T5595] 
[  130.789153][ T5595]        CPU0                    CPU1
[  130.791247][ T5595]        ----                    ----
[  130.793075][ T5595]   lock(uevent_sock_mutex);
[  130.794793][ T5595]                                lock(cpuhp_state-up);
[  130.797231][ T5595]                                lock(uevent_sock_mutex);
[  130.799753][ T5595]   lock(fs_reclaim);
[  130.801255][ T5595] 
[  130.801255][ T5595]  *** DEADLOCK ***
[  130.801255][ T5595] 
[  130.804267][ T5595] locks held by udevd/5595: 3, last CPU#0:
[  130.806402][ T5595]  #0: ffff888109729350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1b8/0x690
[  130.810082][ T5595]  #1: ffff88810968f260 (&nbd->config_lock){+.+.}-{4:4}, at: refcount_dec_and_mutex_lock+0x30/0xa0
[  130.814273][ T5595]  #2: ffffffff905fc200 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560
[  130.818441][ T5595] 
[  130.818441][ T5595] stack backtrace:
[  130.820679][ T5595] CPU: 0 UID: 0 PID: 5595 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) 
[  130.823657][ T5595] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  130.827412][ T5595] Call Trace:
[  130.828759][ T5595]  <TASK>
[  130.829897][ T5595]  dump_stack_lvl+0xe8/0x150
[  130.831572][ T5595]  print_circular_bug+0x2e2/0x300
[  130.833518][ T5595]  check_noncircular+0x12f/0x150
[  130.835367][ T5595]  __lock_acquire+0x164c/0x2de0
[  130.837279][ T5595]  ? blkdev_release+0x15/0x20
[  130.839003][ T5595]  ? __x64_sys_close+0x7e/0x110
[  130.840882][ T5595]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.843252][ T5595]  lock_acquire+0x115/0x350
[  130.845050][ T5595]  ? kmem_cache_alloc_node_noprof+0x5f/0x610
[  130.847370][ T5595]  ? __alloc_skb+0x27a/0x7a0
[  130.848961][ T5595]  fs_reclaim_acquire+0x71/0x100
[  130.850815][ T5595]  ? kmem_cache_alloc_node_noprof+0x5f/0x610
[  130.853065][ T5595]  kmem_cache_alloc_node_noprof+0x5f/0x610
[  130.855214][ T5595]  ? __alloc_skb+0x18d/0x7a0
[  130.856998][ T5595]  ? __alloc_skb+0x27a/0x7a0
[  130.858759][ T5595]  ? __alloc_skb+0x18d/0x7a0
[  130.860560][ T5595]  __alloc_skb+0x27a/0x7a0
[  130.862320][ T5595]  alloc_uevent_skb+0x7d/0x230
[  130.864110][ T5595]  kobject_uevent_net_broadcast+0x2fa/0x560
[  130.866390][ T5595]  kobject_uevent_env+0x566/0x9e0
[  130.868249][ T5595]  nbd_config_put+0x2c8/0x7e0
[  130.870035][ T5595]  ? __pfx_nbd_config_put+0x10/0x10
[  130.871980][ T5595]  ? do_raw_spin_unlock+0x4d/0x200
[  130.873686][ T5595]  nbd_release+0xfe/0x140
[  130.875355][ T5595]  ? __pfx_nbd_release+0x10/0x10
[  130.877219][ T5595]  bdev_release+0x571/0x690
[  130.878614][ T5595]  ? __pfx_blkdev_release+0x10/0x10
[  130.880482][ T5595]  blkdev_release+0x15/0x20
[  130.881943][ T5595]  __fput+0x418/0xa50
[  130.883176][ T5595]  fput_close_sync+0x11f/0x240
[  130.884983][ T5595]  ? __pfx_fput_close_sync+0x10/0x10
[  130.886816][ T5595]  __x64_sys_close+0x7e/0x110
[  130.888610][ T5595]  do_syscall_64+0x166/0x520
[  130.890331][ T5595]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.892588][ T5595]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.894760][ T5595] RIP: 0033:0x7f151cf170a8
[  130.896418][ T5595] Code: 48 8b 05 83 9d 0d 00 64 c7 00 16 00 00 00 83 c8 ff 48 83 c4 20 5b c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 5b 48 8b 15 51 9d 0d 00 f7 d8 64 89 02 48 83
[  130.903320][ T5595] RSP: 002b:00007ffc7fd78578 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  130.905969][ T5595] RAX: ffffffffffffffda RBX: 00007f151d2afae0 RCX: 00007f151cf170a8
[  130.908475][ T5595] RDX: 0000000003938700 RSI: 000000000aba9500 RDI: 0000000000000008
[  130.911537][ T5595] RBP: 00005648fa4169f0 R08: 0000000000000001 R09: 6c87fc14265f137b
[  130.914355][ T5595] R10: 00000000000001b6 R11: 0000000000000246 R12: 0000000000000005
[  130.917411][ T5595] R13: 00005648fa400aa0 R14: 0000000000000008 R15: 00005648fa3ef910
[  130.920384][ T5595]  </TASK>
[  130.927236][ T5600] Bluetooth: hci2: command 0x0406 tx timeout
[  130.943273][ T9454] netlink: 'syz.2.1644': attribute type 1 has an invalid length.
[  130.948134][ T9454] 8021q: adding VLAN 0 to HW filter on device bond2
[  130.952799][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1644'.
[  130.952808][ T9454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1644'.
[  133.009759][ T5600] Bluetooth: hci2: command 0x0406 tx timeout
[  133.089862][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
