last executing test programs:

1.343517413s ago: executing program 2 (id=406):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0xa60d, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e2b, @local}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000804)
sendmmsg$inet(r1, 0x0, 0x0, 0x2090)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
r3 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0)
recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0xb}, 0x0)
sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0)

483.995519ms ago: executing program 2 (id=431):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
bind$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e)

413.059542ms ago: executing program 2 (id=433):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f0000000280)=""/70, 0x46}], 0x2}, 0x7}], 0x2, 0x10, 0x0)

350.421613ms ago: executing program 1 (id=436):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb8}}, 0x0)
close(0x4)

293.820602ms ago: executing program 2 (id=437):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)=@migrate={0xa8, 0x21, 0x1, 0x70bd26, 0x25dfdbfb, {{@in=@rand_addr=0x64010102, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x0, 0x4e21, 0xffff, 0x2, 0xa0, 0xa0, 0x3a}, 0x6e6bb3, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @migrate={0x50, 0x11, [{@in=@empty, @in=@local, @in=@remote, @in6=@empty, 0x32, 0x1, 0x0, 0x3502, 0xa, 0x2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x90)

293.609139ms ago: executing program 1 (id=438):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x50, 0x2c, 0xd3f, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6, 0x1b}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @remote}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x200400d4)

234.457831ms ago: executing program 0 (id=439):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x50)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r2=>0x0}, 0x8)
close(0x4)
r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r3, 0x4)

234.135416ms ago: executing program 2 (id=440):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x27dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xd1fda22cac0fecec}, @TCA_NETEM_RATE={0x14, 0x6, {0x5, 0x9, 0x0, 0x66adc453}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)

183.008672ms ago: executing program 0 (id=441):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00')
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xcc0, 0xfffffffffffffde6, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

179.764836ms ago: executing program 1 (id=442):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)

174.471287ms ago: executing program 0 (id=443):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x34, r1, 0x7, 0x2, 0xfffffffe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0)

172.159707ms ago: executing program 1 (id=444):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x120}}, 0x0)

123.24401ms ago: executing program 1 (id=445):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000001240)=""/181, &(0x7f0000001340)=0xb5)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$cgroup_int(r2, &(0x7f0000000140), 0xfffffdef)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x18, r3, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x4004004)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x98}, 0x1, 0x0, 0x0, 0x801}, 0x60000090)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
close(0x4)
close(r1)

120.358848ms ago: executing program 2 (id=446):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x1}, 0x1c)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10)
recvfrom(r2, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)

118.059412ms ago: executing program 0 (id=447):
r0 = socket$inet6(0xa, 0x3, 0x38)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x21}, [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffff00, 0xff000000], 'syz_tun\x00', 'veth1\x00', {0xff}, {0xff}, 0x32, 0x4, 0x2, 0x12}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0xdf77782b65c3a720}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000, 0xffffffff], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x87, 0x0, 0x0, 0x21}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0xffff], 0x6, 0x5, 0x1}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328)

45.094173ms ago: executing program 0 (id=448):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fcffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a0850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

3.585372ms ago: executing program 0 (id=449):
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x2, 'dvmrp0\x00', {}, 0x8})
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000040a01010000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10)
listen(0xffffffffffffffff, 0x3)
r5 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000380)="d6", 0x1}], 0x1)
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e22590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)
sendfile(r0, r3, 0x0, 0x20000000002)

0s ago: executing program 1 (id=450):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x2c}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:43757' (ED25519) to the list of known hosts.
syzkaller login: [   56.505634][ T5597] cgroup: Unknown subsys name 'net'
[   56.619746][ T5597] cgroup: Unknown subsys name 'cpuset'
[   56.623206][ T5597] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.920438][ T5597] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   66.644825][ T5650] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   66.648795][ T5650] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   66.651622][ T5650] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   66.655210][ T5650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   66.660297][ T5650] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   66.718307][ T5001] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   66.724908][ T5001] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   66.731501][ T5001] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   66.743863][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   66.748928][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   66.751359][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   66.754980][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   66.757938][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   66.770163][ T5657] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   66.775183][ T5657] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   67.281524][ T5648] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.285143][ T5648] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.288261][ T5648] bridge_slave_0: entered allmulticast mode
[   67.292434][ T5648] bridge_slave_0: entered promiscuous mode
[   67.303759][ T5648] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.306900][ T5648] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.310275][ T5648] bridge_slave_1: entered allmulticast mode
[   67.313961][ T5648] bridge_slave_1: entered promiscuous mode
[   67.365115][ T5648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.384314][ T5648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.447374][ T5648] team0: Port device team_slave_0 added
[   67.465340][ T5648] team0: Port device team_slave_1 added
[   67.506975][ T5648] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.509558][ T5648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.520096][ T5648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.535011][ T5648] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.544896][ T5648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.555051][ T5648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.650052][ T5648] hsr_slave_0: entered promiscuous mode
[   67.652879][ T5648] hsr_slave_1: entered promiscuous mode
[   67.682211][ T5653] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.684876][ T5653] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.687360][ T5653] bridge_slave_0: entered allmulticast mode
[   67.690282][ T5653] bridge_slave_0: entered promiscuous mode
[   67.710920][ T5653] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.714121][ T5653] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.716568][ T5653] bridge_slave_1: entered allmulticast mode
[   67.720924][ T5653] bridge_slave_1: entered promiscuous mode
[   67.740785][ T5651] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.743677][ T5651] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.746295][ T5651] bridge_slave_0: entered allmulticast mode
[   67.749568][ T5651] bridge_slave_0: entered promiscuous mode
[   67.753599][ T5651] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.756440][ T5651] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.760200][ T5651] bridge_slave_1: entered allmulticast mode
[   67.762937][ T5651] bridge_slave_1: entered promiscuous mode
[   67.797029][ T5653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.808051][ T5651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.812066][ T5653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.821134][ T5651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.863064][ T5651] team0: Port device team_slave_0 added
[   67.868657][ T5653] team0: Port device team_slave_0 added
[   67.884048][ T5651] team0: Port device team_slave_1 added
[   67.887059][ T5653] team0: Port device team_slave_1 added
[   67.937451][ T5653] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.939685][ T5653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.947494][ T5653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.955556][ T5651] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.957897][ T5651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.966348][ T5651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.970965][ T5653] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.973269][ T5653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.982119][ T5653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.998346][ T5651] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.002337][ T5651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   68.011066][ T5651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.066233][ T5651] hsr_slave_0: entered promiscuous mode
[   68.068556][ T5651] hsr_slave_1: entered promiscuous mode
[   68.070814][ T5651] debugfs: 'hsr0' already exists in 'hsr'
[   68.072621][ T5651] Cannot create hsr debugfs directory
[   68.077683][ T5653] hsr_slave_0: entered promiscuous mode
[   68.079829][ T5653] hsr_slave_1: entered promiscuous mode
[   68.082237][ T5653] debugfs: 'hsr0' already exists in 'hsr'
[   68.084215][ T5653] Cannot create hsr debugfs directory
[   68.174466][ T5648] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   68.184878][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   68.199217][ T5648] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   68.206823][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   68.221434][ T5648] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   68.229944][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   68.255054][ T5648] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   68.259515][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   68.387030][ T5651] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   68.397047][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   68.400693][ T5651] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   68.405871][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   68.413164][ T5651] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   68.418913][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   68.421876][ T5651] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   68.426237][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   68.489180][ T5653] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   68.494007][ T5653] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   68.500668][ T5648] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.505326][ T5653] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   68.510509][ T5653] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   68.513210][ T5653] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   68.516611][ T5653] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   68.519956][ T5653] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   68.524277][ T5653] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   68.550126][ T5648] 8021q: adding VLAN 0 to HW filter on device team0
[   68.564176][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.567042][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.576964][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.579867][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.659084][ T5651] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.683621][ T5651] 8021q: adding VLAN 0 to HW filter on device team0
[   68.688456][ T5653] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.697005][   T87] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.699639][   T87] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.711588][   T87] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.714072][   T87] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.725313][ T5653] 8021q: adding VLAN 0 to HW filter on device team0
[   68.740100][   T87] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.742480][   T87] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.758051][ T5001] Bluetooth: hci0: command tx timeout
[   68.760556][   T87] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.762931][   T87] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.838722][ T5001] Bluetooth: hci2: command tx timeout
[   68.841083][ T5001] Bluetooth: hci1: command tx timeout
[   69.026029][ T5648] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.052040][ T5653] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.064744][ T5648] veth0_vlan: entered promiscuous mode
[   69.070596][ T5651] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.087077][ T5648] veth1_vlan: entered promiscuous mode
[   69.099142][ T5653] veth0_vlan: entered promiscuous mode
[   69.110793][ T5653] veth1_vlan: entered promiscuous mode
[   69.138235][ T5648] veth0_macvtap: entered promiscuous mode
[   69.149851][ T5648] veth1_macvtap: entered promiscuous mode
[   69.154019][ T5653] veth0_macvtap: entered promiscuous mode
[   69.158798][ T5651] veth0_vlan: entered promiscuous mode
[   69.164802][ T5653] veth1_macvtap: entered promiscuous mode
[   69.176846][ T5651] veth1_vlan: entered promiscuous mode
[   69.183644][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.192355][ T5653] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.198250][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.213122][ T5653] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.219823][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.224469][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.235997][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.240766][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.243433][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.246735][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.252810][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.257870][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.298878][ T5651] veth0_macvtap: entered promiscuous mode
[   69.338161][ T5651] veth1_macvtap: entered promiscuous mode
[   69.383419][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.390862][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.400436][ T5651] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.417035][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.420392][ T5651] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.423500][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.455299][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.455597][   T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.462752][   T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.463334][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.475922][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.485746][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.492390][   T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.496577][   T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.581565][ T5653] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   69.601517][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.612593][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.635715][   T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.638910][   T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.165300][ T5788] syz.2.36 uses obsolete (PF_INET,SOCK_PACKET)
[   70.626993][ T5816] Zero length message leads to an empty skb
[   70.837315][ T5001] Bluetooth: hci0: command tx timeout
[   70.918462][ T5001] Bluetooth: hci1: command tx timeout
[   70.919716][ T5657] Bluetooth: hci2: command tx timeout
[   70.958761][ T5837] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.56'.
[   70.961819][ T5837] veth0_to_bond: default FDB implementation only supports local addresses
[   71.561848][ T5873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.73'.
[   71.597890][ T5875] Illegal XDP return value 397007872 on prog  (id 7) dev N/A, expect packet loss!
[   71.920589][ T5899] Bluetooth: MGMT ver 1.23
[   72.536191][ T5940] tipc: Started in network mode
[   72.542289][ T5940] tipc: Node identity b25b5923b9f9, cluster identity 4711
[   72.552317][ T5940] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.565860][ T5940] syzkaller0: entered promiscuous mode
[   72.568259][ T5940] syzkaller0: entered allmulticast mode
[   72.610472][ T5940] tipc: Resetting bearer <eth:syzkaller0>
[   72.625723][ T5939] tipc: Resetting bearer <eth:syzkaller0>
[   72.662157][ T5939] tipc: Disabling bearer <eth:syzkaller0>
[   72.816286][ T5957] netlink: 'syz.0.113': attribute type 4 has an invalid length.
[   72.819802][ T5957] netlink: 17 bytes leftover after parsing attributes in process `syz.0.113'.
[   72.876519][ T5959] geneve2: entered promiscuous mode
[   72.918165][ T5657] Bluetooth: hci0: command tx timeout
[   72.999023][ T5657] Bluetooth: hci2: command tx timeout
[   72.999065][ T5001] Bluetooth: hci1: command tx timeout
[   73.199002][ T5981] netlink: 28 bytes leftover after parsing attributes in process `syz.2.124'.
[   73.203552][ T5981] netlink: 28 bytes leftover after parsing attributes in process `syz.2.124'.
[   73.212016][ T5981] netlink: 28 bytes leftover after parsing attributes in process `syz.2.124'.
[   73.218662][ T5981] netlink: 28 bytes leftover after parsing attributes in process `syz.2.124'.
[   73.366602][ T5994] netlink: 'syz.2.130': attribute type 1 has an invalid length.
[   73.386669][ T5994] netlink: 224 bytes leftover after parsing attributes in process `syz.2.130'.
[   73.421046][ T5998] vlan0: entered promiscuous mode
[   73.453968][ T6001] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.601883][ T6011] netlink: 244 bytes leftover after parsing attributes in process `syz.0.138'.
[   73.631489][ T6017] netlink: 164 bytes leftover after parsing attributes in process `syz.2.140'.
[   74.044122][ T6053] ipvlan2: entered allmulticast mode
[   74.049777][ T6053] gretap0: entered allmulticast mode
[   74.063090][ T6057] openvswitch: netlink: Message has 4 unknown bytes.
[   74.081760][ T6056] dummy0: entered promiscuous mode
[   74.085163][ T6056] batadv0: entered promiscuous mode
[   74.420772][ T6079] IPVS: Error connecting to the multicast addr
[   74.997342][ T5001] Bluetooth: hci0: command tx timeout
[   75.077422][ T5001] Bluetooth: hci2: command tx timeout
[   75.077683][ T5657] Bluetooth: hci1: command tx timeout
[   75.437554][ T6121] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[   75.443620][  T797] IPVS: starting estimator thread 0...
[   75.577220][ T6123] IPVS: using max 86 ests per chain, 206400 per kthread
[   76.062260][ T6155] __nla_validate_parse: 9 callbacks suppressed
[   76.062271][ T6155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.203'.
[   76.079875][ T6155] netlink: 20 bytes leftover after parsing attributes in process `syz.2.203'.
[   76.920244][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[   76.923413][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[   77.273501][ T6213] netlink: 'syz.2.227': attribute type 12 has an invalid length.
[   77.687437][ T6232] netlink: 'syz.2.234': attribute type 12 has an invalid length.
[   77.766026][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.234'.
[   77.778665][ T6233] macsec0: entered promiscuous mode
[   77.784333][ T6233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.234'.
[   77.790387][ T6233] veth1_macvtap: left promiscuous mode
[   77.797709][ T6233] macsec0 (unregistering): left promiscuous mode
[   78.862227][ T6244] netlink: 24 bytes leftover after parsing attributes in process `syz.2.239'.
[   78.882949][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'.
[   78.942236][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'.
[   79.390257][ T6189] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   80.454884][ T6290] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   81.089335][ T6313] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.206691][ T6321] netlink: 'syz.1.272': attribute type 1 has an invalid length.
[   81.209376][ T6321] netlink: 248 bytes leftover after parsing attributes in process `syz.1.272'.
[   81.309352][ T6328] syzkaller1: entered promiscuous mode
[   81.316476][ T6328] syzkaller1: entered allmulticast mode
[   81.357290][ T6332] tipc: Started in network mode
[   81.359160][ T6332] tipc: Node identity , cluster identity 4711
[   81.361566][ T6332] tipc: Failed to set node id, please configure manually
[   81.364406][ T6332] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   81.404741][ T6335] netlink: 84 bytes leftover after parsing attributes in process `syz.0.277'.
[   81.594904][ T6355] netlink: 'syz.2.286': attribute type 11 has an invalid length.
[   81.598022][ T6355] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.286'.
[   82.097972][ T6372] syzkaller1: entered promiscuous mode
[   82.099833][ T6372] syzkaller1: entered allmulticast mode
[   82.345999][ T6391] bridge1: entered promiscuous mode
[   82.348120][ T6391] bridge1: entered allmulticast mode
[   82.579162][ T6410] ip6erspan0: entered allmulticast mode
[   82.594648][ T6413] netlink: 'syz.1.308': attribute type 1 has an invalid length.
[   82.627763][ T6413] 8021q: adding VLAN 0 to HW filter on device bond1
[   82.825351][ T6433] smc: net device hsr0 applied user defined pnetid SYZ2
[   82.920424][ T6443] netlink: 'syz.0.320': attribute type 2 has an invalid length.
[   83.085046][   T31] IPVS: starting estimator thread 0...
[   83.177242][ T6454] IPVS: using max 85 ests per chain, 204000 per kthread
[   84.136617][ T6474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.332'.
[   84.154005][ T6474] netlink: 64 bytes leftover after parsing attributes in process `syz.1.332'.
[   84.164571][ T6474] tipc: Invalid UDP bearer configuration
[   84.164605][ T6474] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[   84.492282][ T6509] netlink: 20 bytes leftover after parsing attributes in process `syz.0.349'.
[   84.545948][ T6515] netlink: 28 bytes leftover after parsing attributes in process `syz.0.352'.
[   84.548497][ T6517] netlink: 220 bytes leftover after parsing attributes in process `syz.2.353'.
[   84.549074][ T6515] netlink: 28 bytes leftover after parsing attributes in process `syz.0.352'.
[   84.552321][ T6517] netlink: 'syz.2.353': attribute type 2 has an invalid length.
[   84.555728][ T6515] netlink: 'syz.0.352': attribute type 4 has an invalid length.
[   84.666100][ T6524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.356'.
[   84.667634][ T6526] syzkaller0: entered promiscuous mode
[   84.670918][ T6526] syzkaller0: entered allmulticast mode
[   84.691150][ T5702] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   84.696928][ T5702] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   84.701095][ T5702] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   84.704353][ T5702] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   84.763343][ T6530] IPVS: sh: FWM 3 0x00000003 - no destination available
[   84.765770][    C1] IPVS: sh: FWM 3 0x00000003 - no destination available
[   84.783725][ T6526] IPVS: sh: FWM 3 0x00000003 - no destination available
[   84.786064][    C1] IPVS: sh: FWM 3 0x00000003 - no destination available
[   85.568196][ T6533] The dccp option matching is deprecated and scheduled to be removed in 2027.
[   85.568196][ T6533] Please contact the netfilter-devel mailing list or update your nftables rules.
[   85.689528][   T55] block nbd0: Receive control failed (result -32)
[   85.696398][   T55] block nbd0: Receive control failed (result -32)
[   85.717812][ T6543] veth0: entered promiscuous mode
[   85.725384][ T6543] veth0: left promiscuous mode
[   85.742826][ T6524] nbd0: detected capacity change from 0 to 63
[   85.755155][ T5622] block nbd0: Dead connection, failed to find a fallback
[   85.773968][ T5622] block nbd0: shutting down sockets
[   85.791923][ T5622] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   85.809524][ T5622] Buffer I/O error on dev nbd0, logical block 0, async page read
[   85.829086][ T5622] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   85.832119][ T5622] Buffer I/O error on dev nbd0, logical block 1, async page read
[   85.834754][ T5622] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   85.837887][ T5622] Buffer I/O error on dev nbd0, logical block 2, async page read
[   85.842266][ T5622] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   85.848604][ T5622] Buffer I/O error on dev nbd0, logical block 3, async page read
[   85.851347][ T5622] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   85.854398][ T5622] Buffer I/O error on dev nbd0, logical block 0, async page read
[   85.863291][ T5622] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   85.873944][ T5622] Buffer I/O error on dev nbd0, logical block 1, async page read
[   85.877044][ T5622] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   85.880174][ T5622] Buffer I/O error on dev nbd0, logical block 2, async page read
[   85.882985][ T5622] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   85.884827][ T6552] netlink: 'syz.2.368': attribute type 2 has an invalid length.
[   85.886495][ T5622] Buffer I/O error on dev nbd0, logical block 3, async page read
[   85.893419][ T5622] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   85.897008][ T5622] Buffer I/O error on dev nbd0, logical block 0, async page read
[   85.900343][ T5622] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   85.903843][ T5622] Buffer I/O error on dev nbd0, logical block 1, async page read
[   85.910446][ T5622] ldm_validate_partition_table(): Disk read failed.
[   85.913627][ T5622] Dev nbd0: unable to read RDB block 0
[   85.920165][ T5622]  nbd0: unable to read partition table
[   85.930988][ T5622] ldm_validate_partition_table(): Disk read failed.
[   85.934202][ T5622] Dev nbd0: unable to read RDB block 0
[   85.936950][ T5622]  nbd0: unable to read partition table
[   86.493592][ T6582] netlink: 'syz.2.378': attribute type 1 has an invalid length.
[   86.590629][ T6588] netlink: 'syz.2.381': attribute type 1 has an invalid length.
[   86.624115][ T6590] netlink: 'syz.2.382': attribute type 1 has an invalid length.
[   87.123446][ T6620] warning: `syz.0.396' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   87.162038][   T24] cfg80211: failed to load regulatory.db
[   88.363405][ T6653] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   88.369939][ T6653] bond2 (unregistering): Released all slaves
[   88.396321][ T6656] __nla_validate_parse: 2 callbacks suppressed
[   88.396336][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.411'.
[   88.403716][ T6656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.411'.
[   88.893510][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.424'.
[   88.946587][ T6687] veth0: entered promiscuous mode
[   88.950721][ T6687] bond0: entered promiscuous mode
[   88.953058][ T6687] bond_slave_0: entered promiscuous mode
[   88.955476][ T6687] bond_slave_1: entered promiscuous mode
[   88.960626][ T6686] bond0: left promiscuous mode
[   88.963564][ T6686] bond_slave_0: left promiscuous mode
[   88.965910][ T6686] bond_slave_1: left promiscuous mode
[   88.971183][ T6686] veth0: left promiscuous mode
[   89.073210][ T6695] ip6_tunnel: non-ECT from fe80:e800:0000:0000:0000:0000:0000:0021 with DS=0x7
[   89.498459][ T6733] xt_AUDIT: Audit type out of range (valid range: 0..2)
[   89.594070][ T6740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.449'.
[   89.614820][   T56] block nbd1: Receive control failed (result -1)
[   89.660640][ T6746] 
[   89.661458][ T6746] ======================================================
[   89.663590][ T6746] WARNING: possible circular locking dependency detected
[   89.665751][ T6746] syzkaller #0 Not tainted
[   89.667184][ T6746] ------------------------------------------------------
[   89.669352][ T6746] syz.0.449/6746 is trying to acquire lock:
[   89.671181][ T6746] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650
[   89.674044][ T6746] 
[   89.674044][ T6746] but task is already holding lock:
[   89.676565][ T6746] ffff88816a044cb8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340
[   89.679567][ T6746] 
[   89.679567][ T6746] which lock already depends on the new lock.
[   89.679567][ T6746] 
[   89.682848][ T6746] 
[   89.682848][ T6746] the existing dependency chain (in reverse order) is:
[   89.685568][ T6746] 
[   89.685568][ T6746] -> #7 (&mm->mmap_lock){++++}-{4:4}:
[   89.687911][ T6746]        __might_fault+0xcb/0x130
[   89.689466][ T6746]        _copy_from_user+0x28/0xb0
[   89.691044][ T6746]        csum_and_copy_from_iter_full+0x1e7/0x1f00
[   89.693452][ T6746]        ip_generic_getfrag+0x149/0x2d0
[   89.695581][ T6746]        __ip6_append_data+0x39cd/0x3f60
[   89.697534][ T6746]        ip6_append_data+0x10f/0x280
[   89.699310][ T6746]        rawv6_sendmsg+0x12d3/0x18e0
[   89.701035][ T6746]        ____sys_sendmsg+0x80a/0x9f0
[   89.702710][ T6746]        ___sys_sendmsg+0x2a5/0x360
[   89.704418][ T6746]        __x64_sys_sendmsg+0x1bd/0x2a0
[   89.706245][ T6746]        do_syscall_64+0x15f/0xf80
[   89.708168][ T6746]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.710313][ T6746] 
[   89.710313][ T6746] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[   89.712806][ T6746]        lock_sock_nested+0x41/0x100
[   89.714490][ T6746]        inet_shutdown+0x6a/0x390
[   89.716095][ T6746]        nbd_mark_nsock_dead+0x2e9/0x560
[   89.717839][ T6746]        recv_work+0x1c2e/0x1d40
[   89.719372][ T6746]        process_scheduled_works+0xb5d/0x1860
[   89.721667][ T6746]        worker_thread+0xa53/0xfc0
[   89.723664][ T6746]        kthread+0x389/0x470
[   89.725485][ T6746]        ret_from_fork+0x514/0xb70
[   89.727350][ T6746]        ret_from_fork_asm+0x1a/0x30
[   89.728978][ T6746] 
[   89.728978][ T6746] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[   89.731310][ T6746]        __mutex_lock+0x1a3/0x1550
[   89.732960][ T6746]        nbd_queue_rq+0x37b/0x1100
[   89.734597][ T6746]        blk_mq_dispatch_rq_list+0xa70/0x1910
[   89.736860][ T6746]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[   89.739434][ T6746]        blk_mq_sched_dispatch_requests+0xd7/0x190
[   89.741460][ T6746]        blk_mq_run_hw_queue+0x348/0x4f0
[   89.743461][ T6746]        blk_mq_dispatch_list+0xd16/0xe10
[   89.745315][ T6746]        blk_mq_flush_plug_list+0x48d/0x570
[   89.747535][ T6746]        __blk_flush_plug+0x3ed/0x4d0
[   89.749640][ T6746]        __submit_bio+0x28d/0x580
[   89.751605][ T6746]        submit_bio_noacct_nocheck+0x2f4/0xa40
[   89.753993][ T6746]        block_read_full_folio+0x599/0x830
[   89.756227][ T6746]        filemap_read_folio+0x137/0x3b0
[   89.758372][ T6746]        do_read_cache_folio+0x358/0x590
[   89.760234][ T6746]        read_part_sector+0xb6/0x2b0
[   89.761939][ T6746]        adfspart_check_ICS+0xb1/0x960
[   89.763617][ T6746]        bdev_disk_changed+0x817/0x1770
[   89.765325][ T6746]        blkdev_get_whole+0x380/0x510
[   89.766977][ T6746]        bdev_open+0x31e/0xd30
[   89.768455][ T6746]        blkdev_open+0x470/0x610
[   89.769984][ T6746]        do_dentry_open+0x785/0x14e0
[   89.771613][ T6746]        vfs_open+0x3b/0x340
[   89.773043][ T6746]        path_openat+0x2e08/0x3860
[   89.774546][ T6746]        do_file_open+0x23e/0x4a0
[   89.776124][ T6746]        do_sys_openat2+0x113/0x200
[   89.777825][ T6746]        __x64_sys_openat+0x138/0x170
[   89.779748][ T6746]        do_syscall_64+0x15f/0xf80
[   89.781747][ T6746]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.784213][ T6746] 
[   89.784213][ T6746] -> #4 (&cmd->lock){+.+.}-{4:4}:
[   89.786987][ T6746]        __mutex_lock+0x1a3/0x1550
[   89.788646][ T6746]        nbd_queue_rq+0xc6/0x1100
[   89.790410][ T6746]        blk_mq_dispatch_rq_list+0xa70/0x1910
[   89.792482][ T6746]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[   89.794596][ T6746]        blk_mq_sched_dispatch_requests+0xd7/0x190
[   89.796605][ T6746]        blk_mq_run_hw_queue+0x348/0x4f0
[   89.798360][ T6746]        blk_mq_dispatch_list+0xd16/0xe10
[   89.800145][ T6746]        blk_mq_flush_plug_list+0x48d/0x570
[   89.802007][ T6746]        __blk_flush_plug+0x3ed/0x4d0
[   89.803658][ T6746]        __submit_bio+0x28d/0x580
[   89.805212][ T6746]        submit_bio_noacct_nocheck+0x2f4/0xa40
[   89.807098][ T6746]        block_read_full_folio+0x599/0x830
[   89.808901][ T6746]        filemap_read_folio+0x137/0x3b0
[   89.810589][ T6746]        do_read_cache_folio+0x358/0x590
[   89.812358][ T6746]        read_part_sector+0xb6/0x2b0
[   89.814023][ T6746]        adfspart_check_ICS+0xb1/0x960
[   89.815698][ T6746]        bdev_disk_changed+0x817/0x1770
[   89.817370][ T6746]        blkdev_get_whole+0x380/0x510
[   89.819198][ T6746]        bdev_open+0x31e/0xd30
[   89.820959][ T6746]        blkdev_open+0x470/0x610
[   89.822537][ T6746]        do_dentry_open+0x785/0x14e0
[   89.824560][ T6746]        vfs_open+0x3b/0x340
[   89.826365][ T6746]        path_openat+0x2e08/0x3860
[   89.828388][ T6746]        do_file_open+0x23e/0x4a0
[   89.830338][ T6746]        do_sys_openat2+0x113/0x200
[   89.832173][ T6746]        __x64_sys_openat+0x138/0x170
[   89.833853][ T6746]        do_syscall_64+0x15f/0xf80
[   89.835428][ T6746]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.837676][ T6746] 
[   89.837676][ T6746] -> #3 (set->srcu){.+.+}-{0:0}:
[   89.840434][ T6746]        __synchronize_srcu+0xca/0x300
[   89.842287][ T6746]        elevator_switch+0x1e8/0x7a0
[   89.844250][ T6746]        elevator_change+0x2cc/0x450
[   89.846294][ T6746]        elevator_set_default+0x36c/0x430
[   89.848510][ T6746]        blk_register_queue+0x3e9/0x4e0
[   89.850524][ T6746]        __add_disk+0x677/0xd50
[   89.852091][ T6746]        add_disk_fwnode+0xfb/0x480
[   89.853738][ T6746]        nbd_dev_add+0x72c/0xb50
[   89.855253][ T6746]        nbd_init+0x168/0x1f0
[   89.856704][ T6746]        do_one_initcall+0x250/0x870
[   89.858320][ T6746]        do_initcall_level+0x104/0x190
[   89.860001][ T6746]        do_initcalls+0x59/0xa0
[   89.861563][ T6746]        kernel_init_freeable+0x2a6/0x3e0
[   89.863442][ T6746]        kernel_init+0x1d/0x1d0
[   89.864978][ T6746]        ret_from_fork+0x514/0xb70
[   89.866598][ T6746]        ret_from_fork_asm+0x1a/0x30
[   89.868247][ T6746] 
[   89.868247][ T6746] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[   89.870642][ T6746]        __mutex_lock+0x1a3/0x1550
[   89.872250][ T6746]        elevator_change+0x1b3/0x450
[   89.874053][ T6746]        elevator_set_none+0xb5/0x140
[   89.875707][ T6746]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[   89.877675][ T6746]        nbd_start_device+0x17f/0xb10
[   89.879332][ T6746]        nbd_genl_connect+0x165b/0x1cf0
[   89.881039][ T6746]        genl_family_rcv_msg_doit+0x22a/0x330
[   89.882913][ T6746]        genl_rcv_msg+0x61c/0x7a0
[   89.884434][ T6746]        netlink_rcv_skb+0x232/0x4b0
[   89.886061][ T6746]        genl_rcv+0x28/0x40
[   89.887451][ T6746]        netlink_unicast+0x75c/0x8e0
[   89.889087][ T6746]        netlink_sendmsg+0x813/0xb40
[   89.890743][ T6746]        ____sys_sendmsg+0x972/0x9f0
[   89.892316][ T6746]        ___sys_sendmsg+0x2a5/0x360
[   89.893931][ T6746]        __x64_sys_sendmsg+0x1bd/0x2a0
[   89.895598][ T6746]        do_syscall_64+0x15f/0xf80
[   89.897224][ T6746]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.899247][ T6746] 
[   89.899247][ T6746] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[   89.901927][ T6746]        blk_alloc_queue+0x546/0x680
[   89.903558][ T6746]        __blk_mq_alloc_disk+0x197/0x390
[   89.905403][ T6746]        nbd_dev_add+0x499/0xb50
[   89.907014][ T6746]        nbd_init+0x168/0x1f0
[   89.908473][ T6746]        do_one_initcall+0x250/0x870
[   89.910162][ T6746]        do_initcall_level+0x104/0x190
[   89.911907][ T6746]        do_initcalls+0x59/0xa0
[   89.913408][ T6746]        kernel_init_freeable+0x2a6/0x3e0
[   89.915159][ T6746]        kernel_init+0x1d/0x1d0
[   89.916647][ T6746]        ret_from_fork+0x514/0xb70
[   89.918221][ T6746]        ret_from_fork_asm+0x1a/0x30
[   89.919852][ T6746] 
[   89.919852][ T6746] -> #0 (fs_reclaim){+.+.}-{0:0}:
[   89.922028][ T6746]        __lock_acquire+0x15a5/0x2cf0
[   89.923691][ T6746]        lock_acquire+0x106/0x350
[   89.925295][ T6746]        fs_reclaim_acquire+0x71/0x100
[   89.927019][ T6746]        prepare_alloc_pages+0x152/0x650
[   89.929076][ T6746]        __alloc_frozen_pages_noprof+0x12f/0x380
[   89.931550][ T6746]        alloc_pages_mpol+0x235/0x490
[   89.933653][ T6746]        alloc_pages_noprof+0xac/0x2a0
[   89.935658][ T6746]        pte_alloc_one+0x22/0x370
[   89.937245][ T6746]        __pte_alloc+0x25/0x1a0
[   89.938779][ T6746]        do_pte_missing+0x2cd2/0x33f0
[   89.940467][ T6746]        handle_mm_fault+0x1bd9/0x3170
[   89.942155][ T6746]        do_user_addr_fault+0x75b/0x1340
[   89.943900][ T6746]        exc_page_fault+0x6a/0xc0
[   89.945503][ T6746]        asm_exc_page_fault+0x26/0x30
[   89.947199][ T6746]        fault_in_readable+0x8e/0x130
[   89.948917][ T6746]        fault_in_iov_iter_readable+0x1b4/0x2f0
[   89.950874][ T6746]        generic_perform_write+0x7af/0x8f0
[   89.952650][ T6746]        shmem_file_write_iter+0xf8/0x120
[   89.954383][ T6746]        vfs_write+0x61d/0xb90
[   89.955876][ T6746]        ksys_write+0x150/0x270
[   89.957446][ T6746]        do_syscall_64+0x15f/0xf80
[   89.959383][ T6746]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.961453][ T6746] 
[   89.961453][ T6746] other info that might help us debug this:
[   89.961453][ T6746] 
[   89.965067][ T6746] Chain exists of:
[   89.965067][ T6746]   fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock
[   89.965067][ T6746] 
[   89.969180][ T6746]  Possible unsafe locking scenario:
[   89.969180][ T6746] 
[   89.971992][ T6746]        CPU0                    CPU1
[   89.973654][ T6746]        ----                    ----
[   89.975376][ T6746]   rlock(&mm->mmap_lock);
[   89.976799][ T6746]                                lock(sk_lock-AF_INET6);
[   89.979040][ T6746]                                lock(&mm->mmap_lock);
[   89.981640][ T6746]   lock(fs_reclaim);
[   89.983212][ T6746] 
[   89.983212][ T6746]  *** DEADLOCK ***
[   89.983212][ T6746] 
[   89.986349][ T6746] 4 locks held by syz.0.449/6746:
[   89.988326][ T6746]  #0: ffff888110b7a0f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[   89.991575][ T6746]  #1: ffff88816c172410 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x227/0xb90
[   89.995007][ T6746]  #2: ffff8881047820a8 (&sb->s_type->i_mutex_key#15){+.+.}-{4:4}, at: shmem_file_write_iter+0x7f/0x120
[   89.998660][ T6746]  #3: ffff88816a044cb8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340
[   90.001663][ T6746] 
[   90.001663][ T6746] stack backtrace:
[   90.003489][ T6746] CPU: 0 UID: 0 PID: 6746 Comm: syz.0.449 Not tainted syzkaller #0 PREEMPT(full) 
[   90.003498][ T6746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   90.003503][ T6746] Call Trace:
[   90.003509][ T6746]  <TASK>
[   90.003513][ T6746]  dump_stack_lvl+0xe8/0x150
[   90.003522][ T6746]  print_circular_bug+0x2e1/0x300
[   90.003531][ T6746]  check_noncircular+0x12e/0x150
[   90.003540][ T6746]  __lock_acquire+0x15a5/0x2cf0
[   90.003549][ T6746]  ? __lock_acquire+0x6b5/0x2cf0
[   90.003556][ T6746]  ? stack_depot_save_flags+0x33/0x810
[   90.003566][ T6746]  ? prepare_alloc_pages+0x152/0x650
[   90.003575][ T6746]  lock_acquire+0x106/0x350
[   90.003586][ T6746]  ? prepare_alloc_pages+0x152/0x650
[   90.003596][ T6746]  ? percpu_ref_get_many+0x19/0x140
[   90.003606][ T6746]  ? lock_acquire+0x106/0x350
[   90.003612][ T6746]  fs_reclaim_acquire+0x71/0x100
[   90.003620][ T6746]  ? prepare_alloc_pages+0x152/0x650
[   90.003629][ T6746]  prepare_alloc_pages+0x152/0x650
[   90.003638][ T6746]  __alloc_frozen_pages_noprof+0x12f/0x380
[   90.003649][ T6746]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   90.003658][ T6746]  ? __pfx_policy_nodemask+0x10/0x10
[   90.003668][ T6746]  ? __lock_acquire+0x6b5/0x2cf0
[   90.003675][ T6746]  alloc_pages_mpol+0x235/0x490
[   90.003684][ T6746]  alloc_pages_noprof+0xac/0x2a0
[   90.003694][ T6746]  pte_alloc_one+0x22/0x370
[   90.003703][ T6746]  __pte_alloc+0x25/0x1a0
[   90.003712][ T6746]  ? bsearch+0x95/0xc0
[   90.003717][ T6746]  ? __pfx_cmp_ex_search+0x10/0x10
[   90.003752][ T6746]  do_pte_missing+0x2cd2/0x33f0
[   90.003764][ T6746]  handle_mm_fault+0x1bd9/0x3170
[   90.003773][ T6746]  ? handle_mm_fault+0xee/0x3170
[   90.003781][ T6746]  ? __pfx_handle_mm_fault+0x10/0x10
[   90.003790][ T6746]  ? lock_mm_and_find_vma+0xa7/0x340
[   90.003799][ T6746]  do_user_addr_fault+0x75b/0x1340
[   90.003807][ T6746]  exc_page_fault+0x6a/0xc0
[   90.003817][ T6746]  asm_exc_page_fault+0x26/0x30
[   90.003824][ T6746] RIP: 0010:fault_in_readable+0x8e/0x130
[   90.003832][ T6746] Code: a9 00 00 00 0f 1f 00 0f ae e8 4d 85 f6 40 0f 95 c5 4c 89 ff 4c 89 f6 e8 60 ee b0 ff 4d 39 f7 0f 97 c0 40 84 c5 74 43 4d 89 f5 <41> 8a 45 00 88 44 24 07 49 81 e5 00 f0 ff ff 4d 8d a5 00 10 00 00
[   90.003838][ T6746] RSP: 0018:ffffc9000398faa8 EFLAGS: 00010202
[   90.003844][ T6746] RAX: ffffffff8214d801 RBX: 0000000000001000 RCX: ffff88816826bb00
[   90.003849][ T6746] RDX: 0000000000000002 RSI: 0000200000200000 RDI: 0000200000201000
[   90.003853][ T6746] RBP: dffffc0000000001 R08: ffff88816826bb00 R09: 0000000000000002
[   90.003857][ T6746] R10: 0000000000000001 R11: 0000000000000002 R12: 00007ffffffff000
[   90.003861][ T6746] R13: 0000200000200000 R14: 0000200000200000 R15: 0000200000201000
[   90.003867][ T6746]  ? fault_in_readable+0x21/0x130
[   90.003874][ T6746]  ? fault_in_readable+0x80/0x130
[   90.003881][ T6746]  fault_in_iov_iter_readable+0x1b4/0x2f0
[   90.003889][ T6746]  generic_perform_write+0x7af/0x8f0
[   90.003901][ T6746]  ? __pfx_generic_perform_write+0x10/0x10
[   90.003909][ T6746]  ? down_write+0x16d/0x200
[   90.003916][ T6746]  ? file_update_time_flags+0x3b3/0x4a0
[   90.003926][ T6746]  shmem_file_write_iter+0xf8/0x120
[   90.003935][ T6746]  vfs_write+0x61d/0xb90
[   90.003944][ T6746]  ? __pfx_vfs_write+0x10/0x10
[   90.003954][ T6746]  ? __fget_files+0x2a/0x420
[   90.003962][ T6746]  ksys_write+0x150/0x270
[   90.003970][ T6746]  ? __pfx_ksys_write+0x10/0x10
[   90.003979][ T6746]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.003985][ T6746]  do_syscall_64+0x15f/0xf80
[   90.003994][ T6746]  ? trace_irq_disable+0x3b/0x140
[   90.004004][ T6746]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.004011][ T6746] RIP: 0033:0x7feb0df9ce59
[   90.004018][ T6746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   90.004023][ T6746] RSP: 002b:00007feb0ef20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   90.004030][ T6746] RAX: ffffffffffffffda RBX: 00007feb0e216090 RCX: 00007feb0df9ce59
[   90.004034][ T6746] RDX: 00000000ffffff6a RSI: 0000200000000000 RDI: 0000000000000005
[   90.004038][ T6746] RBP: 00007feb0e032d6f R08: 0000000000000000 R09: 0000000000000000
[   90.004042][ T6746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   90.004046][ T6746] R13: 00007feb0e216128 R14: 00007feb0e216090 R15: 00007ffd59925788
[   90.004052][ T6746]  </TASK>
[   90.150199][ T6745] netlink: 'syz.1.451': attribute type 1 has an invalid length.
[   90.154450][ T6745] netlink: 224 bytes leftover after parsing attributes in process `syz.1.451'.
