last executing test programs:

1.568760742s ago: executing program 1 (id=1567):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a64000000060a0b040000000000000000020000003800048034000180090001007866726d000000002400028008000140000000160800044000000004050003000100000008000240000000060900010073797a30000000000900020073797a32"], 0x8c}}, 0x0)

1.496806212s ago: executing program 1 (id=1571):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x9, 0x0, 0x1, [@nested={0x8, 0xff, 0x0, 0x1, [@nested={0x4, 0x146}]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c0001800600060008"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

1.417733236s ago: executing program 1 (id=1573):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x4bb, 0x0, 0xff, 0xc}, 0x20)

1.357449491s ago: executing program 1 (id=1575):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000001200)={0x60000010})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, 0x0)
r5 = epoll_create1(0x0)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000300)={0x10000000})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000600))
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x49}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r8 = socket$netlink(0x10, 0x3, 0x0)
pipe(&(0x7f0000000440)={<r9=>0xffffffffffffffff})
r10 = socket$inet_udp(0x2, 0x2, 0x0)
close(r10)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0)
splice(r9, 0x0, r10, 0x0, 0x3000, 0x100000000000000d)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x28, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x4, 0x800}, @nested={0xf, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @generic="a1fcd7"]}]}, 0x28}}, 0x0)
read(r1, &(0x7f0000000080)=""/38, 0x26)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0xc, &(0x7f0000000f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xaa99}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000100)=""/236, &(0x7f0000000200)=0xec)

1.297645415s ago: executing program 2 (id=1577):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="70020000", @ANYRES16=r1, @ANYBLOB="0f0700000000000000006700000048000e000c"], 0x270}, 0x1, 0x0, 0x0, 0x44810}, 0x0)

1.297395971s ago: executing program 2 (id=1578):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x7, 0x0, 0x5}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)

1.218827526s ago: executing program 2 (id=1579):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000240)=0xfffffeff, 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e20, 0x4e20, 0x8}}}}}, 0x0)
recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)

506.475226ms ago: executing program 1 (id=1583):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="40000000100039040000000000000000000003e4", @ANYRES32=r2, @ANYBLOB="000000000000000020001280080001007369740014000280080014000f00000008000100d4"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0)

415.559255ms ago: executing program 0 (id=1584):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x4, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x1, 0xdd}]}, @nested={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0x1, 0x0, 0x1, [@nested={0x0, 0x12f, 0x0, 0x1, [@typed={0x0, 0x74, 0x0, 0x0, @pid}, @typed={0x0, 0xfe, 0x0, 0x0, @u32=0x4}, @typed={0x38, 0x4c}, @typed={0x0, 0x148, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x0, 0x8a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}}, @generic="92557b1db244ab351d2a49c5d3353e8ea7c863b7a4e97cf78a6d05ab3f777541105a53fedb265cb159b9b4fff991db173d"]}]}, @generic="c3beb899adffc9c05eb8c1126ae35569f307076b0926b332d3469eb51c22e2ad08d45d9a15c8e07521442eb906e345d5f7f6c5826f5fcaef4b5dd7f7938088ef6434cca8de28558248719d15c75c1e7a98", @generic="6fbf19734b1cdba2c8622e21c82835e31a63b9eda6cd5afcf7d09d6c35db1f3455cea6e21829a8ff488d88ef4d77892be7211d9bbaa724fafb6253858450c6b156518155ecfa7e5d2f00a7394cab8c3dd121484859bc94b7a936aa", @typed={0x0, 0x65, 0x0, 0x0, @uid}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010)

408.762369ms ago: executing program 1 (id=1585):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000002900)=r0, 0x4)
socket(0x2, 0x80805, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
recvmsg(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000980)=""/96, 0x60}], 0x1}, 0x30120)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x102, 0x0)
pipe(0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0)
bind$can_raw(r4, &(0x7f00000001c0), 0x10)
socket$netlink(0x10, 0x3, 0x14)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4)
read(r4, 0x0, 0x0)
ioctl(r3, 0x8b2a, &(0x7f0000000040))

338.17879ms ago: executing program 0 (id=1586):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20)
syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0)
recvfrom(r0, 0x0, 0xc00, 0x40, 0x0, 0x0)

337.808063ms ago: executing program 2 (id=1587):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113a00000000008510000002000000850000004900000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

337.381808ms ago: executing program 0 (id=1588):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xe8, 0xe8, 0xc8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)

288.81893ms ago: executing program 2 (id=1589):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x400})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200})

236.959349ms ago: executing program 0 (id=1590):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="018d00"})

183.292323ms ago: executing program 0 (id=1591):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in=@dev={0xac, 0x14, 0x14, 0x42}}, [@mark={0xc}]}, 0x34}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x6)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast})
close(0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000080), &(0x7f0000000280)=r5}, 0x20)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x20008040)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7}, 0x14)
syz_emit_ethernet(0x4a, &(0x7f0000001b40)={@empty, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x7, 0x6, "acdaea", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x2, 0x0, 0x2}}}}}}}, 0x0)
sendmmsg(r3, 0x0, 0x0, 0x0)

182.748043ms ago: executing program 2 (id=1592):
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

0s ago: executing program 0 (id=1593):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4)
recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000080)=0x55b6, 0x4)
sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:58166' (ED25519) to the list of known hosts.
syzkaller login: [   56.025508][ T5542] cgroup: Unknown subsys name 'net'
[   56.165435][ T5542] cgroup: Unknown subsys name 'cpuset'
[   56.170053][ T5542] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.900769][ T5542] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   68.529554][ T5001] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   68.533137][ T5001] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   68.537145][ T5001] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   68.540565][ T5001] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   68.543357][ T5001] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   68.681891][ T5642] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.797737][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.811170][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.955375][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.962028][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.417011][ T5659] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.419833][ T5659] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.422025][ T5659] bridge_slave_0: entered allmulticast mode
[   69.425392][ T5659] bridge_slave_0: entered promiscuous mode
[   69.430523][ T5659] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.432726][ T5659] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.434993][ T5659] bridge_slave_1: entered allmulticast mode
[   69.437803][ T5659] bridge_slave_1: entered promiscuous mode
[   69.456291][ T5659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.460647][ T5659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.478695][ T5659] team0: Port device team_slave_0 added
[   69.481830][ T5659] team0: Port device team_slave_1 added
[   69.496882][ T5659] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.499004][ T5659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   69.507037][ T5659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.511636][ T5659] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.513743][ T5659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   69.521566][ T5659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.547573][ T5659] hsr_slave_0: entered promiscuous mode
[   69.549885][ T5659] hsr_slave_1: entered promiscuous mode
[   69.652043][ T5659] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   69.659124][ T5659] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   69.662118][ T5659] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   69.666241][ T5659] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   69.668818][ T5659] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   69.673726][ T5659] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   69.676386][ T5659] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   69.682154][ T5659] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   69.703536][ T5659] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.705931][ T5659] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.708405][ T5659] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.710546][ T5659] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.749481][ T5659] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.759259][ T1113] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.762241][ T1113] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.769254][ T5659] 8021q: adding VLAN 0 to HW filter on device team0
[   69.776514][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.778790][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.787521][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.790333][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.985315][ T5659] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.014218][ T5659] veth0_vlan: entered promiscuous mode
[   70.020668][ T5659] veth1_vlan: entered promiscuous mode
[   70.042126][ T5659] veth0_macvtap: entered promiscuous mode
[   70.046307][ T5659] veth1_macvtap: entered promiscuous mode
[   70.057378][ T5659] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.064722][ T5659] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.072910][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.077994][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.081041][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.087554][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.626190][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.685344][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.693193][ T5646] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.698704][ T5706] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.703242][ T5706] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.708908][ T5706] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.712551][ T5706] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.715306][ T5706] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.719990][ T5710] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.723904][ T5710] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.726589][ T5706] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.726983][ T5710] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.731588][ T5706] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.740183][ T5706] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.747260][ T5706] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.750374][ T5706] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.802086][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.877716][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.267742][ T5704] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.270760][ T5704] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.273558][ T5704] bridge_slave_0: entered allmulticast mode
[   71.279254][ T5704] bridge_slave_0: entered promiscuous mode
[   71.282734][ T5704] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.285615][ T5704] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.288470][ T5704] bridge_slave_1: entered allmulticast mode
[   71.291364][ T5704] bridge_slave_1: entered promiscuous mode
[   71.385828][ T5704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.414742][ T5704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.459109][ T5704] team0: Port device team_slave_0 added
[   71.463921][ T5704] team0: Port device team_slave_1 added
[   71.539882][ T5704] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.542276][ T5704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.552201][ T5704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.560836][ T5704] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.563107][ T5704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.574139][ T5704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.649193][ T5702] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.652053][ T5702] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.656233][ T5702] bridge_slave_0: entered allmulticast mode
[   71.659954][ T5702] bridge_slave_0: entered promiscuous mode
[   71.664075][ T5702] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.666729][ T5702] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.669737][ T5702] bridge_slave_1: entered allmulticast mode
[   71.672986][ T5702] bridge_slave_1: entered promiscuous mode
[   71.701234][ T5703] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.703455][ T5703] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.705837][ T5703] bridge_slave_0: entered allmulticast mode
[   71.708329][ T5703] bridge_slave_0: entered promiscuous mode
[   71.722650][ T5704] hsr_slave_0: entered promiscuous mode
[   71.725515][ T5704] hsr_slave_1: entered promiscuous mode
[   71.727854][ T5704] debugfs: 'hsr0' already exists in 'hsr'
[   71.729727][ T5704] Cannot create hsr debugfs directory
[   71.732216][ T5703] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.735077][ T5703] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.737448][ T5703] bridge_slave_1: entered allmulticast mode
[   71.740543][ T5703] bridge_slave_1: entered promiscuous mode
[   71.756438][ T5702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.761911][ T5702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.795034][ T5703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.800840][ T5703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.844229][ T5702] team0: Port device team_slave_0 added
[   71.869927][ T5702] team0: Port device team_slave_1 added
[   71.873933][ T5703] team0: Port device team_slave_0 added
[   71.905585][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.915512][ T5703] team0: Port device team_slave_1 added
[   71.940063][ T5702] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.942621][ T5702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.951045][ T5702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.982937][ T5702] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.985762][ T5702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.993531][ T5702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.998825][ T5703] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.001280][ T5703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.010152][ T5703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.026360][ T5703] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.029466][ T5703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.040446][ T5703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.086825][ T5702] hsr_slave_0: entered promiscuous mode
[   72.089138][ T5702] hsr_slave_1: entered promiscuous mode
[   72.091431][ T5702] debugfs: 'hsr0' already exists in 'hsr'
[   72.093179][ T5702] Cannot create hsr debugfs directory
[   72.149371][ T5703] hsr_slave_0: entered promiscuous mode
[   72.152144][ T5703] hsr_slave_1: entered promiscuous mode
[   72.155460][ T5703] debugfs: 'hsr0' already exists in 'hsr'
[   72.157677][ T5703] Cannot create hsr debugfs directory
[   72.349290][ T5704] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.361100][ T5704] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   72.370219][ T5704] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.376859][ T5704] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   72.398711][ T5704] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.407619][ T5704] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   72.427744][ T5704] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.436593][ T5704] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   72.492519][ T5702] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.500324][ T5702] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   72.509293][ T5702] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.522447][ T5702] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   72.529047][ T5702] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.538826][ T5702] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   72.542784][ T5702] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.549279][ T5702] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   72.629755][ T5704] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.659062][ T5704] 8021q: adding VLAN 0 to HW filter on device team0
[   72.679771][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.682631][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.699192][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.701694][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.709880][ T5702] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.750555][ T5702] 8021q: adding VLAN 0 to HW filter on device team0
[   72.755754][   T54] Bluetooth: hci2: command tx timeout
[   72.771872][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.774311][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.789128][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.791828][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.835920][   T54] Bluetooth: hci1: command tx timeout
[   72.836096][ T5706] Bluetooth: hci0: command tx timeout
[   73.079855][ T5704] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.088819][ T5702] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.137346][ T5704] veth0_vlan: entered promiscuous mode
[   73.153402][ T5704] veth1_vlan: entered promiscuous mode
[   73.158424][ T5702] veth0_vlan: entered promiscuous mode
[   73.178246][ T5702] veth1_vlan: entered promiscuous mode
[   73.247558][   T12] bridge_slave_1: left allmulticast mode
[   73.249799][   T12] bridge_slave_1: left promiscuous mode
[   73.253017][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.261427][   T12] bridge_slave_0: left allmulticast mode
[   73.263154][   T12] bridge_slave_0: left promiscuous mode
[   73.267419][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.477705][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   73.487232][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   73.493533][   T12] bond0 (unregistering): Released all slaves
[   73.625623][   T12] hsr_slave_0: left promiscuous mode
[   73.628327][   T12] hsr_slave_1: left promiscuous mode
[   73.631096][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.638507][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.645460][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.654045][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.669845][   T12] veth1_macvtap: left promiscuous mode
[   73.688539][   T12] veth0_macvtap: left promiscuous mode
[   73.692638][   T12] veth1_vlan: left promiscuous mode
[   73.695120][   T12] veth0_vlan: left promiscuous mode
[   73.933743][   T12] team0 (unregistering): Port device team_slave_1 removed
[   73.947279][   T12] team0 (unregistering): Port device team_slave_0 removed
[   74.056313][ T5704] veth0_macvtap: entered promiscuous mode
[   74.065836][ T5356] 8021q: adding VLAN 0 to HW filter on device eth1
[   74.087178][ T5704] veth1_macvtap: entered promiscuous mode
[   74.102003][ T5702] veth0_macvtap: entered promiscuous mode
[   74.122934][ T5702] veth1_macvtap: entered promiscuous mode
[   74.149027][ T5704] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.210435][ T5704] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.248415][ T5702] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.253914][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.257793][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.275741][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.279446][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.350829][ T5702] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.421196][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.428150][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.479715][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.483548][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.714257][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.723014][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.767484][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.787983][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.834804][ T5706] Bluetooth: hci2: command tx timeout
[   74.911101][ T5703] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   74.915828][ T5706] Bluetooth: hci0: command tx timeout
[   74.924829][ T5706] Bluetooth: hci1: command tx timeout
[   74.929035][ T5703] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   74.932401][ T5703] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   74.939409][ T5703] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   74.947600][ T5703] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   74.959945][ T5703] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   74.969580][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.973544][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.002702][ T5703] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   75.020484][ T5703] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   75.033524][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.037616][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.300627][ T5703] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.333944][ T5703] 8021q: adding VLAN 0 to HW filter on device team0
[   75.341193][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.343391][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.354171][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.356339][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.383349][ T5828] netlink: 'syz.2.22': attribute type 30 has an invalid length.
[   75.629885][ T5843] netlink: 'syz.0.27': attribute type 1 has an invalid length.
[   75.647694][ T5843] macvlan2: entered promiscuous mode
[   75.651086][ T5843] macvlan2: entered allmulticast mode
[   75.868137][ T5854] Illegal XDP return value 4294967274 on prog  (id 4) dev syz_tun, expect packet loss!
[   75.918498][ T5703] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.947054][ T5857] tipc: Can't bind to reserved service type 0
[   75.987248][ T5703] veth0_vlan: entered promiscuous mode
[   75.995682][ T5703] veth1_vlan: entered promiscuous mode
[   76.018039][ T5703] veth0_macvtap: entered promiscuous mode
[   76.022209][ T5703] veth1_macvtap: entered promiscuous mode
[   76.050620][ T5703] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.060633][ T5703] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.078638][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.086541][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.087207][ T5861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'.
[   76.094170][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.099228][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.105809][ T5861] bond0: option min_links: invalid value (18446744072809121575)
[   76.108764][ T5861] bond0: option min_links: allowed values 0 - 2147483647
[   76.273389][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.282495][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.302525][ T5869] netlink: 'syz.0.37': attribute type 3 has an invalid length.
[   76.307332][ T5869] netlink: 'syz.0.37': attribute type 3 has an invalid length.
[   76.314321][ T5869] netlink: 16 bytes leftover after parsing attributes in process `syz.0.37'.
[   76.334312][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.339503][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.432458][ T5872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'.
[   76.436749][ T5872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'.
[   76.694810][ T5885] Bluetooth: MGMT ver 1.23
[   76.869075][ T5895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.48'.
[   76.877021][ T5895] netlink: 'syz.2.48': attribute type 2 has an invalid length.
[   76.884319][ T5895] netlink: 32 bytes leftover after parsing attributes in process `syz.2.48'.
[   76.888837][ T5898] netlink: 'syz.1.50': attribute type 1 has an invalid length.
[   76.917382][ T5706] Bluetooth: hci2: command tx timeout
[   76.921437][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[   76.925941][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[   76.995755][ T5706] Bluetooth: hci1: command tx timeout
[   76.997269][   T54] Bluetooth: hci0: command tx timeout
[   77.659657][ T5941] tipc: Started in network mode
[   77.666294][ T5941] tipc: Node identity fef2d20000000000000000000000001, cluster identity 4711
[   77.680040][ T5941] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   77.925872][ T5951] bond1: option ad_user_port_key: invalid value (65535)
[   77.929729][ T5951] bond1: option ad_user_port_key: allowed values 0 - 1023
[   77.941474][ T5951] bond1 (unregistering): Released all slaves
[   78.005703][ T5958] syzkaller1: entered promiscuous mode
[   78.012059][ T5958] syzkaller1: entered allmulticast mode
[   78.032161][ T5951] Zero length message leads to an empty skb
[   78.291636][ T5971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.81'.
[   78.655194][ T5985] netlink: 'syz.0.87': attribute type 1 has an invalid length.
[   78.717450][ T5988] netlink: 20 bytes leftover after parsing attributes in process `syz.0.87'.
[   78.817532][ T5985] ip6gretap1: entered promiscuous mode
[   78.819684][ T5985] ip6gretap1: entered allmulticast mode
[   78.996136][   T54] Bluetooth: hci2: command tx timeout
[   79.075291][   T54] Bluetooth: hci0: command tx timeout
[   79.075336][ T5706] Bluetooth: hci1: command tx timeout
[   79.271754][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.99'.
[   79.497431][ T6025] bond1: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[   79.503043][ T6025] bond1 (unregistering): Released all slaves
[   79.530649][ T6021] syzkaller0: entered promiscuous mode
[   79.533059][ T6021] syzkaller0: entered allmulticast mode
[   79.745717][ T6037] syz.1.109 uses obsolete (PF_INET,SOCK_PACKET)
[   79.797908][   T13] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2
[   79.884123][ T6042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.112'.
[   80.270845][ T6063] netlink: 'syz.1.122': attribute type 1 has an invalid length.
[   80.852794][ T6090] tipc: Started in network mode
[   80.861129][ T6090] tipc: Node identity e2888693ee7f, cluster identity 4711
[   80.869435][ T6090] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.873445][ T6090] syzkaller0: entered promiscuous mode
[   80.876221][ T6090] syzkaller0: entered allmulticast mode
[   80.904240][ T6090] tipc: Resetting bearer <eth:syzkaller0>
[   80.909072][ T6089] tipc: Resetting bearer <eth:syzkaller0>
[   80.919715][ T6089] tipc: Disabling bearer <eth:syzkaller0>
[   81.047985][ T6098] netlink: 'syz.2.136': attribute type 1 has an invalid length.
[   81.101183][ T6100] __nla_validate_parse: 4 callbacks suppressed
[   81.101204][ T6100] netlink: 27 bytes leftover after parsing attributes in process `syz.1.137'.
[   81.230614][ T6105] netlink: 64 bytes leftover after parsing attributes in process `syz.1.139'.
[   81.240623][ T6105] syzkaller1: entered promiscuous mode
[   81.242470][ T6105] syzkaller1: entered allmulticast mode
[   81.947435][ T6132] syzkaller0: entered promiscuous mode
[   81.949373][ T6132] syzkaller0: entered allmulticast mode
[   82.421471][ T6166] nbd1: detected capacity change from 0 to 63
[   82.474829][ T6168] block nbd1: NBD_DISCONNECT
[   82.482254][ T6168] block nbd1: Disconnected due to user request.
[   82.487923][ T6168] block nbd1: shutting down sockets
[   82.513501][   T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[   82.527021][   T11] Buffer I/O error on dev nbd1, logical block 0, async page read
[   82.529435][   T11] Buffer I/O error on dev nbd1, logical block 1, async page read
[   82.531785][   T11] Buffer I/O error on dev nbd1, logical block 2, async page read
[   82.534322][   T11] Buffer I/O error on dev nbd1, logical block 3, async page read
[   82.540200][ T5621] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.548720][ T5621] Buffer I/O error on dev nbd1, logical block 0, async page read
[   82.551712][ T5621] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.555171][ T5621] Buffer I/O error on dev nbd1, logical block 1, async page read
[   82.559386][ T5621] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.567495][ T5621] Buffer I/O error on dev nbd1, logical block 2, async page read
[   82.570813][ T5621] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.574227][ T5621] Buffer I/O error on dev nbd1, logical block 3, async page read
[   82.586879][ T5621] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.593005][ T5621] Buffer I/O error on dev nbd1, logical block 0, async page read
[   82.597884][ T5621] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.601369][ T5621] Buffer I/O error on dev nbd1, logical block 1, async page read
[   82.609477][ T5621] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.612880][ T5621] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.616341][ T5621] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.624592][ T5621] ldm_validate_partition_table(): Disk read failed.
[   82.628784][ T5621] Dev nbd1: unable to read RDB block 0
[   82.633519][ T5621]  nbd1: unable to read partition table
[   82.700442][ T5621] ldm_validate_partition_table(): Disk read failed.
[   82.709694][ T5621] Dev nbd1: unable to read RDB block 0
[   82.713417][ T5621]  nbd1: unable to read partition table
[   84.018315][ T6190] xt_limit: Overflow, try lower: 324382443/0
[   84.453117][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.179'.
[   84.747434][ T6244] netlink: 56 bytes leftover after parsing attributes in process `syz.0.186'.
[   84.901516][ T6257] netlink: 'syz.1.191': attribute type 3 has an invalid length.
[   85.101219][ T6271] syzkaller0: entered promiscuous mode
[   85.103409][ T6271] syzkaller0: entered allmulticast mode
[   86.114007][ T6322] netlink: 84 bytes leftover after parsing attributes in process `syz.1.223'.
[   86.480715][ T6336] syzkaller0: entered promiscuous mode
[   86.482969][ T6336] syzkaller0: entered allmulticast mode
[   87.258429][    T9] cfg80211: failed to load regulatory.db
[   88.207263][ T6353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.238'.
[   88.227526][   T24] IPVS: starting estimator thread 0...
[   88.338668][ T6354] IPVS: using max 42 ests per chain, 100800 per kthread
[   88.540445][ T6358] IPv6: addrconf: prefix option has invalid lifetime
[   88.830665][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.244'.
[   88.833685][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.244'.
[   89.269382][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.247'.
[   89.415081][ T6376] team0: Port device team_slave_0 removed
[   89.566311][ T6380] trusted_key: syz.2.249 sent an empty control message without MSG_MORE.
[   89.779344][ T6391] bridge0: port 3(erspan0) entered blocking state
[   89.782342][ T6391] bridge0: port 3(erspan0) entered disabled state
[   89.799971][ T6391] erspan0: entered allmulticast mode
[   89.803541][ T6391] erspan0: entered promiscuous mode
[   89.806463][ T6391] bridge0: port 3(erspan0) entered blocking state
[   89.810034][ T6391] bridge0: port 3(erspan0) entered forwarding state
[   89.818017][ T6391] erspan0: left allmulticast mode
[   89.820345][ T6391] erspan0: left promiscuous mode
[   89.824448][ T6391] bridge0: port 3(erspan0) entered disabled state
[   90.015403][ T6403] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   90.602535][ T6434] netlink: 'syz.1.270': attribute type 1 has an invalid length.
[   90.671775][ T6438] openvswitch: netlink: Duplicate or invalid key (type 0).
[   90.674098][ T6438] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.071687][ T6466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.285'.
[   91.083657][ T6466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.285'.
[   91.109165][ T6470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.287'.
[   91.140040][ T6466] netlink: 36 bytes leftover after parsing attributes in process `syz.1.285'.
[   91.170270][ T6474] IPv6: NLM_F_REPLACE set, but no existing node found!
[   91.264186][ T6480] netlink: 16 bytes leftover after parsing attributes in process `syz.0.292'.
[   91.353135][ T6484] netlink: 'syz.1.293': attribute type 3 has an invalid length.
[   91.674687][ T6496] netlink: 'syz.2.299': attribute type 8 has an invalid length.
[   91.739178][ T6497] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 3, id = 0
[   92.071432][ T6510] sch_tbf: burst 0 is lower than device sit0 mtu (1480) !
[   92.717173][ T6540] netlink: 20 bytes leftover after parsing attributes in process `syz.2.319'.
[   92.878029][ T6551] netlink: 'syz.2.324': attribute type 10 has an invalid length.
[   93.471816][ T6592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.345'.
[   93.481273][ T6592] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.501034][ T6592] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.552776][ T6598] netlink: 20 bytes leftover after parsing attributes in process `syz.0.347'.
[   93.603681][ T6600] netlink: 'syz.1.348': attribute type 21 has an invalid length.
[   93.623538][ T6603] Bluetooth: MGMT ver 1.23
[   93.626427][ T6600] netlink: 132 bytes leftover after parsing attributes in process `syz.1.348'.
[   93.831224][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.359'.
[   94.318291][ T6672] sctp: [Deprecated]: syz.2.382 (pid 6672) Use of int in max_burst socket option.
[   94.318291][ T6672] Use struct sctp_assoc_value instead
[   94.362857][ T6674] openvswitch: netlink: Flow key attr not present in new flow.
[   94.676305][ T6688] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.680316][ T6688] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.863234][ T6688] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.870747][ T6688] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.981192][ T6712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.395'.
[   94.986106][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.395'.
[   95.087494][ T6716] openvswitch: netlink: VXLAN extension message has 12 unknown bytes.
[   95.151165][ T5751] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.161259][ T5751] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.180663][ T5751] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.198748][ T5751] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.558611][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.406'.
[   95.844504][ T6760] pimreg: entered allmulticast mode
[   95.851402][ T6760] pimreg: left allmulticast mode
[   96.392964][ T6790] syzkaller0: entered promiscuous mode
[   96.399301][ T6790] syzkaller0: entered allmulticast mode
[   96.679656][ T6798] __nla_validate_parse: 1 callbacks suppressed
[   96.679676][ T6798] netlink: 24 bytes leftover after parsing attributes in process `syz.1.432'.
[   96.811726][ T6802] netlink: 'syz.0.434': attribute type 4 has an invalid length.
[   97.031763][ T6819] netlink: 56 bytes leftover after parsing attributes in process `syz.0.442'.
[   97.548390][ T6835] netlink: 'syz.0.450': attribute type 11 has an invalid length.
[   97.661093][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.453'.
[   97.995347][ T6860] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.024712][ T6871] netlink: 'syz.1.467': attribute type 1 has an invalid length.
[   99.203802][ T6786] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   99.574567][ T6898] netlink: 'syz.2.480': attribute type 10 has an invalid length.
[   99.589512][ T6898] team0: Failed to send options change via netlink (err -105)
[   99.592556][ T6898] team0: Port device dummy0 added
[   99.601460][ T6898] netlink: 'syz.2.480': attribute type 10 has an invalid length.
[   99.605986][ T6898] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   99.625772][ T6898] team0: Failed to send options change via netlink (err -105)
[   99.630586][ T6898] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   99.634313][ T6898] team0: Port device dummy0 removed
[   99.647847][ T6898] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  100.158025][ T6929] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  100.160893][ T6929] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  100.371725][ T6938] netlink: 'syz.1.494': attribute type 1 has an invalid length.
[  100.431562][ T6938] 8021q: adding VLAN 0 to HW filter on device bond2
[  100.475487][ T6944] 8021q: adding VLAN 0 to HW filter on device bond2
[  100.479556][ T6946] netlink: 100 bytes leftover after parsing attributes in process `syz.0.497'.
[  100.503471][ T6944] bond2: (slave vcan1): The slave device specified does not support setting the MAC address
[  100.517830][ T6944] bond2: (slave vcan1): Error -95 calling set_mac_address
[  101.232451][ T7000] xt_ecn: cannot match TCP bits for non-tcp packets
[  101.534553][ T7023] netlink: 'syz.2.519': attribute type 16 has an invalid length.
[  101.866408][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.525'.
[  102.002978][ T6706] IPVS: starting estimator thread 0...
[  102.094486][ T7082] IPVS: using max 65 ests per chain, 156000 per kthread
[  102.307199][ T7099] netlink: 'syz.1.534': attribute type 1 has an invalid length.
[  102.345324][ T7101] nr0: tun_chr_ioctl cmd 1074025677
[  102.347525][ T7101] nr0: linktype set to 774
[  102.577963][ T7118] tipc: Started in network mode
[  102.579749][ T7118] tipc: Node identity a2f7fbd46c04, cluster identity 4711
[  102.582394][ T7118] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.585788][ T7118] syzkaller0: entered promiscuous mode
[  102.587976][ T7118] syzkaller0: entered allmulticast mode
[  102.604048][ T7118] tipc: Resetting bearer <eth:syzkaller0>
[  102.608089][ T7116] tipc: Resetting bearer <eth:syzkaller0>
[  102.623548][ T7116] tipc: Disabling bearer <eth:syzkaller0>
[  102.706984][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.543'.
[  102.780705][ T7124] netlink: 'syz.2.545': attribute type 1 has an invalid length.
[  102.798491][ T7124] 8021q: adding VLAN 0 to HW filter on device bond1
[  102.862256][ T7124] vlan2: entered allmulticast mode
[  102.869877][ T7124] bond1: entered allmulticast mode
[  102.897858][ T7124] bond1: (slave geneve2): making interface the new active one
[  102.904894][ T7124] geneve2: entered allmulticast mode
[  102.919762][ T7124] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  103.161209][ T7144] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  103.569261][ T7178] netlink: 16 bytes leftover after parsing attributes in process `syz.2.570'.
[  103.755811][ T7195] warning: `syz.1.576' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  104.534495][ T7189] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  104.651914][ T7203] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.655577][ T7203] syzkaller0: entered promiscuous mode
[  104.657823][ T7203] syzkaller0: entered allmulticast mode
[  104.671987][ T7203] tipc: Resetting bearer <eth:syzkaller0>
[  104.682660][ T7205] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.579'.
[  104.687312][ T7203] tipc: Resetting bearer <eth:syzkaller0>
[  104.696865][ T7205] openvswitch: netlink: EtherType 0 is less than min 600
[  104.715331][ T7203] tipc: Disabling bearer <eth:syzkaller0>
[  104.889076][ T7216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.583'.
[  106.587780][ T7310] netpci0: tun_chr_ioctl cmd 1074025678
[  106.590075][ T7310] netpci0: group set to 0
[  106.673756][ T7314] xt_CT: You must specify a L4 protocol and not use inversions on it
[  106.848828][ T7332] netlink: 132 bytes leftover after parsing attributes in process `syz.0.624'.
[  107.179619][ T7349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.632'.
[  107.197673][ T7344] netlink: 'syz.2.629': attribute type 5 has an invalid length.
[  107.327701][ T7355] hmac(sha224: entered promiscuous mode
[  107.388520][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.636'.
[  107.405512][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.636'.
[  107.864985][ T7382] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.878330][ T7383] xt_hashlimit: size too large, truncated to 1048576
[  108.650599][ T7442] netlink: 24 bytes leftover after parsing attributes in process `syz.0.675'.
[  109.035809][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.687'.
[  109.230343][ T7495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.696'.
[  109.246198][ T7495] erspan0: entered promiscuous mode
[  109.249517][ T7495] macvtap1: entered promiscuous mode
[  109.254174][ T7495] macvtap1: entered allmulticast mode
[  109.259252][ T7495] erspan0: entered allmulticast mode
[  109.267824][ T7495] erspan0: left allmulticast mode
[  109.269951][ T7495] erspan0: left promiscuous mode
[  109.272292][ T7495] macvtap1: left promiscuous mode
[  109.273824][ T7495] macvtap1: left allmulticast mode
[  109.586896][ T7517] syzkaller0: entered promiscuous mode
[  109.590091][ T7517] syzkaller0: entered allmulticast mode
[  109.755172][ T7529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.711'.
[  109.893837][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.716'.
[  110.189953][ T7552] openvswitch: netlink: Unexpected mask (mask=4400040, allowed=410048)
[  110.510280][ T7571] netlink: 'syz.2.731': attribute type 3 has an invalid length.
[  110.513502][ T7571] netlink: 132 bytes leftover after parsing attributes in process `syz.2.731'.
[  110.741634][ T7585] netlink: 'syz.1.736': attribute type 2 has an invalid length.
[  110.745198][ T7585] netlink: 'syz.1.736': attribute type 2 has an invalid length.
[  110.833499][ T7581] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  110.848998][ T7581] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  111.616513][ T7596] netlink: 36 bytes leftover after parsing attributes in process `syz.2.740'.
[  112.619070][ T7630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.756'.
[  112.683425][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.758'.
[  112.710138][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.760'.
[  114.123674][ T7678] netlink: 36 bytes leftover after parsing attributes in process `syz.2.776'.
[  114.240395][ T7685] netlink: 'syz.1.781': attribute type 1 has an invalid length.
[  114.374775][ T7697] sctp: [Deprecated]: syz.2.784 (pid 7697) Use of struct sctp_assoc_value in delayed_ack socket option.
[  114.374775][ T7697] Use struct sctp_sack_info instead
[  114.626028][ T7722] netlink: 16 bytes leftover after parsing attributes in process `syz.0.793'.
[  114.743518][ T7726] bond1: (slave bond_slave_1): Device is not our slave
[  114.745721][ T7730] netlink: 210640 bytes leftover after parsing attributes in process `syz.0.795'.
[  114.747464][ T7726] bond1: option active_slave: invalid value (bond_slave_1)
[  114.760258][ T7726] bond1 (unregistering): Released all slaves
[  115.199547][ T7750] openvswitch: netlink: Key type 319 is out of range max 32
[  115.318762][ T7754] v: renamed from ip6_vti0
[  115.564189][ T7767] netlink: 16 bytes leftover after parsing attributes in process `syz.2.812'.
[  115.617795][ T7774] netlink: 'syz.1.814': attribute type 4 has an invalid length.
[  115.677101][ T7777] netlink: 40 bytes leftover after parsing attributes in process `syz.1.815'.
[  115.760324][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.817'.
[  116.836027][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.836'.
[  117.266010][ T7860] netlink: 'syz.0.853': attribute type 13 has an invalid length.
[  117.440480][ T7878] tipc: New replicast peer: 255.255.255.255
[  117.442723][ T7878] tipc: Enabled bearer <udp:syz2>, priority 10
[  117.499514][ T7881] SET target dimension over the limit!
[  117.719604][ T7900] netlink: 6188 bytes leftover after parsing attributes in process `syz.2.872'.
[  117.723186][ T7900] netlink: 6188 bytes leftover after parsing attributes in process `syz.2.872'.
[  117.939639][ T7898] nbd0: detected capacity change from 0 to 63
[  117.950599][   T55] block nbd0: Receive control failed (result -104)
[  117.953749][ T7911] block nbd0: Receive control failed (result -32)
[  118.033228][ T7920] pimreg0: tun_chr_ioctl cmd 1074025681
[  118.148304][ T7925] netlink: 104 bytes leftover after parsing attributes in process `syz.1.880'.
[  118.400783][ T7943] netlink: 16 bytes leftover after parsing attributes in process `syz.0.891'.
[  118.409854][ T7943] netlink: 24 bytes leftover after parsing attributes in process `syz.0.891'.
[  118.633235][ T6706] tipc: Node number set to 4277326352
[  118.919481][ T7976] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.922108][ T7976] syzkaller0: entered promiscuous mode
[  118.928743][ T7976] syzkaller0: entered allmulticast mode
[  118.938773][ T7978] xt_connbytes: Forcing CT accounting to be enabled
[  118.940771][ T7978] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  118.947026][ T7976] tipc: Resetting bearer <eth:syzkaller0>
[  118.958303][ T7975] tipc: Resetting bearer <eth:syzkaller0>
[  118.984988][ T7975] tipc: Disabling bearer <eth:syzkaller0>
[  119.050981][ T7986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.912'.
[  119.260560][ T8014] sctp: [Deprecated]: syz.1.925 (pid 8014) Use of int in max_burst socket option deprecated.
[  119.260560][ T8014] Use struct sctp_assoc_value instead
[  119.322124][ T8022] netlink: 'syz.0.929': attribute type 9 has an invalid length.
[  119.331851][ T8022] netlink: 'syz.0.929': attribute type 6 has an invalid length.
[  119.341698][ T8022] netlink: 'syz.0.929': attribute type 7 has an invalid length.
[  119.347427][ T8022] netlink: 'syz.0.929': attribute type 8 has an invalid length.
[  119.802328][ T8059] veth0_macvtap: Caught tx_queue_len zero misconfig
[  119.964917][ T8072] netlink: 'syz.1.952': attribute type 83 has an invalid length.
[  119.975026][ T8070] syzkaller0: entered promiscuous mode
[  119.980967][ T8070] syzkaller0: entered allmulticast mode
[  120.073356][ T8077] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.955'.
[  120.179092][ T8086] netlink: 'syz.1.960': attribute type 11 has an invalid length.
[  120.328687][ T8101] pim6reg: entered allmulticast mode
[  120.338766][ T8101] pim6reg: left allmulticast mode
[  120.440438][ T8109] netlink: 'syz.2.971': attribute type 21 has an invalid length.
[  120.442784][ T8109] netlink: 128 bytes leftover after parsing attributes in process `syz.2.971'.
[  120.447701][ T8109] netlink: 'syz.2.971': attribute type 4 has an invalid length.
[  120.450112][ T8109] netlink: 3 bytes leftover after parsing attributes in process `syz.2.971'.
[  120.820577][ T8144] netlink: 'syz.1.984': attribute type 1 has an invalid length.
[  120.833691][ T8144] netlink: 'syz.1.984': attribute type 2 has an invalid length.
[  120.844634][ T8144] netlink: 'syz.1.984': attribute type 3 has an invalid length.
[  121.391616][ T8163] openvswitch: netlink: ct_state flags 010000e0 unsupported
[  121.482688][ T8171] Bluetooth: MGMT ver 1.23
[  121.531224][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.998'.
[  123.721473][ T8136] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  124.062108][ T8234] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1026'.
[  124.123843][ T8238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1028'.
[  124.247190][ T8225] lo: Caught tx_queue_len zero misconfig
[  124.249648][ T8225] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1020'.
[  124.253786][ T8225] netem: change failed
[  124.570695][ T8260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1038'.
[  124.750336][ T8272] netlink: 'syz.0.1044': attribute type 5 has an invalid length.
[  124.765357][ T8272] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1044'.
[  125.349116][ T8321] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1065'.
[  125.363841][ T8321] veth1_to_team: entered promiscuous mode
[  125.370618][ T8321] dummy0: entered promiscuous mode
[  125.395258][ T8321] hsr1: entered promiscuous mode
[  125.471653][ T8331] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1071'.
[  125.492496][ T8334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1070'.
[  125.504738][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1070'.
[  125.740080][ T8360] bond3: option downdelay: invalid value (18446744073709547521)
[  125.742570][ T8360] bond3: option downdelay: allowed values 0 - 2147483647
[  125.747124][ T8360] bond3 (unregistering): Released all slaves
[  125.766608][ T8365] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1082'.
[  125.872951][ T8375] set match dimension is over the limit!
[  126.020355][ T8381] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.976074][ T8381] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.084742][ T8381] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.217662][ T8381] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.341854][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.358841][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.379548][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.399999][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.459610][ T8432] netlink: 'syz.2.1113': attribute type 1 has an invalid length.
[  127.966333][ T8470] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048)
[  128.230608][ T8482] bond0: entered promiscuous mode
[  128.232821][ T8482] bond_slave_0: entered promiscuous mode
[  128.237039][ T8482] bond_slave_1: entered promiscuous mode
[  128.241513][ T8482] batadv0: entered promiscuous mode
[  128.511263][ T8509] syzkaller0: entered promiscuous mode
[  128.513425][ T8509] syzkaller0: entered allmulticast mode
[  128.557043][ T8514] netlink: 'syz.1.1150': attribute type 3 has an invalid length.
[  128.559402][ T8514] netlink: 'syz.1.1150': attribute type 1 has an invalid length.
[  128.562022][ T8514] NCSI netlink: No device for ifindex 36
[  130.171263][ T8539] __nla_validate_parse: 7 callbacks suppressed
[  130.171287][ T8539] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1162'.
[  130.226839][ T8545] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1165'.
[  130.354777][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1171'.
[  130.375162][ T8559] macvlan2: entered allmulticast mode
[  130.377494][ T8559] veth1_vlan: entered allmulticast mode
[  131.278821][ T8600] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1187'.
[  131.388410][ T8604] vlan3: entered promiscuous mode
[  131.390474][ T8604] bridge0: entered promiscuous mode
[  131.445212][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1190'.
[  131.946810][ T8652] syzkaller0: entered promiscuous mode
[  131.949015][ T8652] syzkaller0: entered allmulticast mode
[  132.114522][ T5706] Bluetooth: hci0: command tx timeout
[  132.281390][ T8610] Bluetooth: hci0: Opcode 0x080f failed: -4
[  132.366869][ T8676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1223'.
[  132.419202][ T8678] tipc: Cannot configure node identity twice
[  133.357146][ T8729] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1246'.
[  133.369992][ T8729] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1246'.
[  133.502476][ T8737] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1251'.
[  133.506230][ T8737] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1251'.
[  133.567287][ T8745] syzkaller0: entered promiscuous mode
[  133.569280][ T8745] syzkaller0: entered allmulticast mode
[  133.803244][ T8766] netlink: 'syz.1.1262': attribute type 29 has an invalid length.
[  134.196386][ T5706] Bluetooth: hci0: command 0x080f tx timeout
[  135.467963][ T8869] syzkaller0: entered promiscuous mode
[  135.470487][ T8869] syzkaller0: entered allmulticast mode
[  136.222440][ T8905] __nla_validate_parse: 1 callbacks suppressed
[  136.222453][ T8905] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1311'.
[  136.481034][ T8916] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1321'.
[  136.495444][ T8916] tc action pedit 'at' offset 6 out of bounds
[  136.749868][ T8922] netlink: 712 bytes leftover after parsing attributes in process `syz.2.1323'.
[  136.752943][ T8922] netlink: 5504 bytes leftover after parsing attributes in process `syz.2.1323'.
[  136.758779][ T8922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1323'.
[  136.887248][ T8931] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1327'.
[  137.225985][ T8958] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1339'.
[  137.504083][ T8977] netlink: 'syz.0.1345': attribute type 3 has an invalid length.
[  137.507859][ T8977] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1345'.
[  137.733757][ T8995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1351'.
[  137.750880][ T8995] dummy0: mtu less than device minimum
[  137.849670][ T9006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1357'.
[  137.889465][ T9008] syzkaller0: entered promiscuous mode
[  137.891435][ T9008] syzkaller0: entered allmulticast mode
[  138.356560][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[  138.359044][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[  138.461004][ T9030] netlink: 'syz.2.1369': attribute type 1 has an invalid length.
[  138.739707][ T9047] wg1 speed is unknown, defaulting to 1000
[  138.742841][ T9047] wg1 speed is unknown, defaulting to 1000
[  138.748382][ T9047] wg1 speed is unknown, defaulting to 1000
[  138.752063][ T9047] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  138.763087][ T9047] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  138.769847][ T9047] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  138.779154][ T9047] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  138.797830][ T9047] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  138.802849][ T9049] bond3 (unregistering): Released all slaves
[  138.853007][ T9047] wg1 speed is unknown, defaulting to 1000
[  138.858411][ T9047] wg1 speed is unknown, defaulting to 1000
[  138.867638][ T9047] wg1 speed is unknown, defaulting to 1000
[  139.049516][ T9060] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  139.051788][ T9060] IPv6: NLM_F_CREATE should be set when creating new route
[  139.068292][ T9064] netlink: 'syz.0.1381': attribute type 1 has an invalid length.
[  139.191537][ T9078] netlink: 'syz.0.1387': attribute type 2 has an invalid length.
[  139.257186][ T9080] syz_tun: entered allmulticast mode
[  139.287786][ T9080] dvmrp8: entered allmulticast mode
[  139.297805][ T9079] syz_tun: left allmulticast mode
[  139.599329][ T9098] syzkaller1: entered promiscuous mode
[  139.609436][ T9098] syzkaller1: entered allmulticast mode
[  139.779519][ T9102] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  139.797827][ T9102] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  143.825028][ T9146] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  143.953515][ T9167] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  143.968918][ T9167] bond3 (unregistering): Released all slaves
[  144.161486][ T9192] __nla_validate_parse: 12 callbacks suppressed
[  144.161501][ T9192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1434'.
[  144.216118][ T9200] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1437'.
[  144.328362][ T9212] veth1_macvtap: left promiscuous mode
[  144.330139][ T9212] macsec0: entered promiscuous mode
[  145.173904][ T9218] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1445'.
[  145.185622][ T9218] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1445'.
[  145.195807][ T9218] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1445'.
[  145.200361][ T9218] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1445'.
[  145.390820][ T9241] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  145.433181][ T9239] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.548620][ T9239] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.639311][ T9239] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.728784][ T9239] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.849370][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.868653][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.887101][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.906067][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  146.533376][ T9309] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  146.599352][ T9313] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1470'.
[  146.771425][ T9311] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.774977][ T9311] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.143130][ T9311] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.484703][ T9311] veth1_vlan: left allmulticast mode
[  147.543553][ T9309] ip6gre1: entered allmulticast mode
[  147.549613][ T9309] team0: Device ip6gre1 is of different type
[  147.620988][ T9317] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check.
[  147.638614][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.648680][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.659243][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.670217][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.966376][  T261] block nbd0: Connection timed out, retrying (0/2 alive)
[  147.970329][  T261] block nbd0: Connection timed out, retrying (0/2 alive)
[  147.973052][  T261] block nbd0: Connection timed out, retrying (0/2 alive)
[  147.980539][  T261] block nbd0: Connection timed out, retrying (0/2 alive)
[  147.983616][  T261] block nbd0: Dead connection, failed to find a fallback
[  147.986207][  T261] block nbd0: shutting down sockets
[  147.989625][  T261] blk_print_req_error: 135 callbacks suppressed
[  147.989640][  T261] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  147.996172][  T261] buffer_io_error: 138 callbacks suppressed
[  147.996180][  T261] Buffer I/O error on dev nbd0, logical block 3, async page read
[  148.001812][  T261] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.005394][  T261] Buffer I/O error on dev nbd0, logical block 2, async page read
[  148.008185][  T261] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.010906][  T261] Buffer I/O error on dev nbd0, logical block 1, async page read
[  148.013235][  T261] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.017161][  T261] Buffer I/O error on dev nbd0, logical block 0, async page read
[  148.023215][ T6195] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.026793][ T6195] Buffer I/O error on dev nbd0, logical block 0, async page read
[  148.030141][ T6195] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.033393][ T6195] Buffer I/O error on dev nbd0, logical block 1, async page read
[  148.036984][ T6195] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.040210][ T6195] Buffer I/O error on dev nbd0, logical block 2, async page read
[  148.045800][ T6195] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.053670][ T6195] Buffer I/O error on dev nbd0, logical block 3, async page read
[  148.059182][ T6195] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.061957][ T6195] Buffer I/O error on dev nbd0, logical block 0, async page read
[  148.064964][ T6195] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.067642][ T6195] Buffer I/O error on dev nbd0, logical block 1, async page read
[  148.071303][ T6195] ldm_validate_partition_table(): Disk read failed.
[  148.075882][ T6195] Dev nbd0: unable to read RDB block 0
[  148.079246][ T6195]  nbd0: unable to read partition table
[  148.109197][ T6195] ldm_validate_partition_table(): Disk read failed.
[  148.119212][ T6195] Dev nbd0: unable to read RDB block 0
[  148.128607][ T6195]  nbd0: unable to read partition table
[  148.222086][ T9361] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1492'.
[  148.336584][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1494'.
[  148.457212][ T9380] netlink: 'syz.0.1498': attribute type 13 has an invalid length.
[  148.645492][ T9380] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.648004][ T9380] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.971099][ T9380] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  148.998918][ T9380] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  149.579537][ T5751] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  149.584609][ T5751] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  149.588650][ T5751] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  149.594877][ T5751] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  149.807083][ T9390] x_tables: unsorted underflow at hook 3
[  150.222227][ T9412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1513'.
[  150.280985][   T56] block nbd2: Receive control failed (result -1)
[  151.500933][ T9427] SET target dimension over the limit!
[  151.947733][ T9447] netlink: 'syz.0.1529': attribute type 3 has an invalid length.
[  151.950884][ T9447] netlink: 'syz.0.1529': attribute type 3 has an invalid length.
[  152.083824][ T9458] netlink: 'syz.1.1533': attribute type 21 has an invalid length.
[  152.200270][ T9464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1536'.
[  152.427707][ T9474] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1541'.
[  152.825428][ T9493] xt_hashlimit: size too large, truncated to 1048576
[  153.376336][ T9521] syzkaller0: entered promiscuous mode
[  153.378168][ T9521] syzkaller0: entered allmulticast mode
[  153.661824][ T9539] netlink: 7060 bytes leftover after parsing attributes in process `syz.1.1571'.
[  153.711102][ T9544] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  153.778164][ T9549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1575'.
[  153.840524][ T9549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1575'.
[  154.707208][ T9570] netlink: 'syz.0.1584': attribute type 1 has an invalid length.
[  154.820827][ T9578] x_tables: duplicate entry at hook 2
[  155.186359][ T9594] 
[  155.187371][ T9594] ======================================================
[  155.190006][ T9594] WARNING: possible circular locking dependency detected
[  155.192632][ T9594] syzkaller #0 Not tainted
[  155.194463][ T9594] ------------------------------------------------------
[  155.197031][ T9594] syz.2.1592/9594 is trying to acquire lock:
[  155.199276][ T9594] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_noprof+0x40/0x650
[  155.202789][ T9594] 
[  155.202789][ T9594] but task is already holding lock:
[  155.205421][ T9594] ffff8881032d05b0 (&hugetlb_fault_mutex_table[i]){+.+.}-{4:4}, at: hugetlb_fault+0x3d8/0x1510
[  155.209201][ T9594] 
[  155.209201][ T9594] which lock already depends on the new lock.
[  155.209201][ T9594] 
[  155.213045][ T9594] 
[  155.213045][ T9594] the existing dependency chain (in reverse order) is:
[  155.216420][ T9594] 
[  155.216420][ T9594] -> #8 (&hugetlb_fault_mutex_table[i]){+.+.}-{4:4}:
[  155.219729][ T9594]        __mutex_lock+0x1a3/0x1550
[  155.221676][ T9594]        hugetlb_fault+0x3d8/0x1510
[  155.223641][ T9594]        handle_mm_fault+0x2007/0x3170
[  155.225653][ T9594]        do_user_addr_fault+0x75b/0x1340
[  155.227757][ T9594]        exc_page_fault+0x6a/0xc0
[  155.229712][ T9594]        asm_exc_page_fault+0x26/0x30
[  155.231846][ T9594]        rep_movs_alternative+0x33/0x90
[  155.233932][ T9594]        _copy_to_user+0x8a/0xb0
[  155.235803][ T9594]        do_pipe2+0xd4/0x190
[  155.237565][ T9594]        __x64_sys_pipe+0x3a/0x50
[  155.239482][ T9594]        do_syscall_64+0x15f/0xf80
[  155.241444][ T9594]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.243860][ T9594] 
[  155.243860][ T9594] -> #7 (&mm->mmap_lock){++++}-{4:4}:
[  155.246735][ T9594]        __might_fault+0xcb/0x130
[  155.248575][ T9594]        _copy_from_user+0x28/0xb0
[  155.250195][ T9594]        csum_and_copy_from_iter_full+0x1e7/0x1f00
[  155.252383][ T9594]        ip_generic_getfrag+0x149/0x2d0
[  155.254413][ T9594]        __ip6_append_data+0x39cd/0x3f60
[  155.256418][ T9594]        ip6_append_data+0x10f/0x280
[  155.258102][ T9594]        rawv6_sendmsg+0x12d3/0x18e0
[  155.259973][ T9594]        ____sys_sendmsg+0x80a/0x9f0
[  155.261883][ T9594]        ___sys_sendmsg+0x2a5/0x360
[  155.263837][ T9594]        __x64_sys_sendmsg+0x1bd/0x2a0
[  155.265826][ T9594]        do_syscall_64+0x15f/0xf80
[  155.267686][ T9594]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.270003][ T9594] 
[  155.270003][ T9594] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  155.272818][ T9594]        lock_sock_nested+0x41/0x100
[  155.274773][ T9594]        inet_shutdown+0x6a/0x390
[  155.276624][ T9594]        nbd_mark_nsock_dead+0x2e9/0x560
[  155.278636][ T9594]        recv_work+0x1c2e/0x1d40
[  155.280422][ T9594]        process_scheduled_works+0xb5d/0x1860
[  155.282585][ T9594]        worker_thread+0xa53/0xfc0
[  155.284462][ T9594]        kthread+0x388/0x470
[  155.286044][ T9594]        ret_from_fork+0x514/0xb70
[  155.287915][ T9594]        ret_from_fork_asm+0x1a/0x30
[  155.289837][ T9594] 
[  155.289837][ T9594] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  155.292602][ T9594]        __mutex_lock+0x1a3/0x1550
[  155.294586][ T9594]        nbd_queue_rq+0x37b/0x1100
[  155.296480][ T9594]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  155.298642][ T9594]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  155.301177][ T9594]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  155.303601][ T9594]        blk_mq_run_work_fn+0x16c/0x300
[  155.305647][ T9594]        process_scheduled_works+0xb5d/0x1860
[  155.307897][ T9594]        worker_thread+0xa53/0xfc0
[  155.309810][ T9594]        kthread+0x388/0x470
[  155.311537][ T9594]        ret_from_fork+0x514/0xb70
[  155.313444][ T9594]        ret_from_fork_asm+0x1a/0x30
[  155.315438][ T9594] 
[  155.315438][ T9594] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  155.318089][ T9594]        __mutex_lock+0x1a3/0x1550
[  155.320003][ T9594]        nbd_queue_rq+0xc6/0x1100
[  155.321885][ T9594]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  155.324151][ T9594]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  155.326700][ T9594]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  155.329054][ T9594]        blk_mq_run_work_fn+0x16c/0x300
[  155.331111][ T9594]        process_scheduled_works+0xb5d/0x1860
[  155.333379][ T9594]        worker_thread+0xa53/0xfc0
[  155.335301][ T9594]        kthread+0x388/0x470
[  155.337028][ T9594]        ret_from_fork+0x514/0xb70
[  155.338931][ T9594]        ret_from_fork_asm+0x1a/0x30
[  155.340866][ T9594] 
[  155.340866][ T9594] -> #3 (set->srcu){.+.+}-{0:0}:
[  155.343459][ T9594]        __synchronize_srcu+0xca/0x300
[  155.345472][ T9594]        elevator_switch+0x1e8/0x7a0
[  155.347407][ T9594]        elevator_change+0x2cc/0x450
[  155.349764][ T9594]        elevator_set_default+0x36c/0x430
[  155.351986][ T9594]        blk_register_queue+0x3e9/0x4e0
[  155.354028][ T9594]        __add_disk+0x677/0xd50
[  155.355810][ T9594]        add_disk_fwnode+0xfb/0x480
[  155.357686][ T9594]        nbd_dev_add+0x72c/0xb50
[  155.359568][ T9594]        nbd_init+0x168/0x1f0
[  155.361358][ T9594]        do_one_initcall+0x250/0x870
[  155.363328][ T9594]        do_initcall_level+0x104/0x190
[  155.365350][ T9594]        do_initcalls+0x59/0xa0
[  155.367151][ T9594]        kernel_init_freeable+0x2a6/0x3e0
[  155.369282][ T9594]        kernel_init+0x1d/0x1d0
[  155.371082][ T9594]        ret_from_fork+0x514/0xb70
[  155.372975][ T9594]        ret_from_fork_asm+0x1a/0x30
[  155.374942][ T9594] 
[  155.374942][ T9594] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  155.377793][ T9594]        __mutex_lock+0x1a3/0x1550
[  155.379688][ T9594]        elevator_change+0x1b3/0x450
[  155.381680][ T9594]        elevator_set_none+0xb5/0x140
[  155.383666][ T9594]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  155.386005][ T9594]        nbd_start_device+0x17f/0xb10
[  155.387967][ T9594]        nbd_genl_connect+0x165b/0x1cf0
[  155.390013][ T9594]        genl_family_rcv_msg_doit+0x22a/0x330
[  155.392294][ T9594]        genl_rcv_msg+0x61c/0x7a0
[  155.394144][ T9594]        netlink_rcv_skb+0x232/0x4b0
[  155.396044][ T9594]        genl_rcv+0x28/0x40
[  155.397737][ T9594]        netlink_unicast+0x75c/0x8e0
[  155.399679][ T9594]        netlink_sendmsg+0x813/0xb40
[  155.401632][ T9594]        ____sys_sendmsg+0x972/0x9f0
[  155.403587][ T9594]        ___sys_sendmsg+0x2a5/0x360
[  155.405523][ T9594]        __x64_sys_sendmsg+0x1bd/0x2a0
[  155.407551][ T9594]        do_syscall_64+0x15f/0xf80
[  155.409440][ T9594]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.411805][ T9594] 
[  155.411805][ T9594] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  155.414963][ T9594]        blk_alloc_queue+0x546/0x680
[  155.416914][ T9594]        __blk_mq_alloc_disk+0x197/0x390
[  155.418974][ T9594]        nbd_dev_add+0x499/0xb50
[  155.420754][ T9594]        nbd_init+0x168/0x1f0
[  155.422474][ T9594]        do_one_initcall+0x250/0x870
[  155.424446][ T9594]        do_initcall_level+0x104/0x190
[  155.426461][ T9594]        do_initcalls+0x59/0xa0
[  155.428266][ T9594]        kernel_init_freeable+0x2a6/0x3e0
[  155.430340][ T9594]        kernel_init+0x1d/0x1d0
[  155.432129][ T9594]        ret_from_fork+0x514/0xb70
[  155.434001][ T9594]        ret_from_fork_asm+0x1a/0x30
[  155.435960][ T9594] 
[  155.435960][ T9594] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  155.438603][ T9594]        __lock_acquire+0x15a5/0x2cf0
[  155.440554][ T9594]        lock_acquire+0x106/0x350
[  155.442367][ T9594]        fs_reclaim_acquire+0x71/0x100
[  155.444376][ T9594]        kmem_cache_alloc_noprof+0x40/0x650
[  155.446655][ T9594]        __anon_vma_prepare+0xcb/0x4a0
[  155.448631][ T9594]        __vmf_anon_prepare+0xe1/0x1b0
[  155.450655][ T9594]        hugetlb_no_page+0x399/0x2100
[  155.452649][ T9594]        hugetlb_fault+0x747/0x1510
[  155.454583][ T9594]        handle_mm_fault+0x2007/0x3170
[  155.456577][ T9594]        __get_user_pages+0x1683/0x2720
[  155.458611][ T9594]        populate_vma_page_range+0x2be/0x3c0
[  155.460831][ T9594]        __mm_populate+0x25f/0x390
[  155.462776][ T9594]        vm_mmap_pgoff+0x3aa/0x4f0
[  155.464747][ T9594]        ksys_mmap_pgoff+0x586/0x760
[  155.466791][ T9594]        do_syscall_64+0x15f/0xf80
[  155.468679][ T9594]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.471005][ T9594] 
[  155.471005][ T9594] other info that might help us debug this:
[  155.471005][ T9594] 
[  155.474769][ T9594] Chain exists of:
[  155.474769][ T9594]   fs_reclaim --> &mm->mmap_lock --> &hugetlb_fault_mutex_table[i]
[  155.474769][ T9594] 
[  155.479756][ T9594]  Possible unsafe locking scenario:
[  155.479756][ T9594] 
[  155.482456][ T9594]        CPU0                    CPU1
[  155.484434][ T9594]        ----                    ----
[  155.486397][ T9594]   lock(&hugetlb_fault_mutex_table[i]);
[  155.488474][ T9594]                                lock(&mm->mmap_lock);
[  155.490951][ T9594]                                lock(&hugetlb_fault_mutex_table[i]);
[  155.493949][ T9594]   lock(fs_reclaim);
[  155.495456][ T9594] 
[  155.495456][ T9594]  *** DEADLOCK ***
[  155.495456][ T9594] 
[  155.498392][ T9594] 2 locks held by syz.2.1592/9594:
[  155.500271][ T9594]  #0: ffff888195d00f78 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x182/0x390
[  155.503711][ T9594]  #1: ffff8881032d05b0 (&hugetlb_fault_mutex_table[i]){+.+.}-{4:4}, at: hugetlb_fault+0x3d8/0x1510
[  155.507687][ T9594] 
[  155.507687][ T9594] stack backtrace:
[  155.509892][ T9594] CPU: 1 UID: 0 PID: 9594 Comm: syz.2.1592 Not tainted syzkaller #0 PREEMPT(full) 
[  155.509912][ T9594] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  155.509922][ T9594] Call Trace:
[  155.509930][ T9594]  <TASK>
[  155.509937][ T9594]  dump_stack_lvl+0xe8/0x150
[  155.509956][ T9594]  print_circular_bug+0x2e1/0x300
[  155.509978][ T9594]  check_noncircular+0x12e/0x150
[  155.509997][ T9594]  __lock_acquire+0x15a5/0x2cf0
[  155.510018][ T9594]  ? xas_start+0x3d4/0x770
[  155.510038][ T9594]  ? filemap_get_entry+0xcd/0x3f0
[  155.510058][ T9594]  ? kmem_cache_alloc_noprof+0x40/0x650
[  155.510076][ T9594]  lock_acquire+0x106/0x350
[  155.510090][ T9594]  ? kmem_cache_alloc_noprof+0x40/0x650
[  155.510109][ T9594]  ? filemap_get_entry+0x378/0x3f0
[  155.510127][ T9594]  ? __anon_vma_prepare+0xcb/0x4a0
[  155.510146][ T9594]  fs_reclaim_acquire+0x71/0x100
[  155.510165][ T9594]  ? kmem_cache_alloc_noprof+0x40/0x650
[  155.510207][ T9594]  kmem_cache_alloc_noprof+0x40/0x650
[  155.510228][ T9594]  __anon_vma_prepare+0xcb/0x4a0
[  155.510247][ T9594]  ? __filemap_get_folio_mpol+0x9b0/0xb00
[  155.510266][ T9594]  __vmf_anon_prepare+0xe1/0x1b0
[  155.510282][ T9594]  hugetlb_no_page+0x399/0x2100
[  155.510299][ T9594]  ? huge_pte_alloc+0x483/0x630
[  155.510322][ T9594]  hugetlb_fault+0x747/0x1510
[  155.510339][ T9594]  ? __pfx_hugetlb_fault+0x10/0x10
[  155.510356][ T9594]  ? mtree_range_walk+0x6f9/0x8b0
[  155.510379][ T9594]  handle_mm_fault+0x2007/0x3170
[  155.510396][ T9594]  ? mt_find+0x186/0x630
[  155.510416][ T9594]  ? mt_find+0x481/0x630
[  155.510436][ T9594]  ? mt_find+0x186/0x630
[  155.510455][ T9594]  ? handle_mm_fault+0xee/0x3170
[  155.510470][ T9594]  ? __pfx_mt_find+0x10/0x10
[  155.510491][ T9594]  ? __pfx_handle_mm_fault+0x10/0x10
[  155.510514][ T9594]  ? hugetlb_vma_unlock_read+0x7d/0x140
[  155.510532][ T9594]  __get_user_pages+0x1683/0x2720
[  155.510558][ T9594]  populate_vma_page_range+0x2be/0x3c0
[  155.510574][ T9594]  ? __pfx_populate_vma_page_range+0x10/0x10
[  155.510591][ T9594]  ? down_read+0x270/0x2e0
[  155.510602][ T9594]  ? __mm_populate+0x173/0x390
[  155.510617][ T9594]  __mm_populate+0x25f/0x390
[  155.510632][ T9594]  ? __pfx___mm_populate+0x10/0x10
[  155.510650][ T9594]  vm_mmap_pgoff+0x3aa/0x4f0
[  155.510667][ T9594]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  155.510681][ T9594]  ? rcu_is_watching+0x15/0xb0
[  155.510697][ T9594]  ? hugetlbfs_get_inode+0x432/0x650
[  155.510720][ T9594]  ? hugetlb_file_setup+0x42c/0x630
[  155.510734][ T9594]  ksys_mmap_pgoff+0x586/0x760
[  155.510752][ T9594]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.510766][ T9594]  do_syscall_64+0x15f/0xf80
[  155.510786][ T9594]  ? trace_irq_disable+0x3b/0x140
[  155.510810][ T9594]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.510824][ T9594] RIP: 0033:0x7f4b44f9cdd9
[  155.510839][ T9594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  155.510852][ T9594] RSP: 002b:00007f4b45e01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  155.510868][ T9594] RAX: ffffffffffffffda RBX: 00007f4b45215fa0 RCX: 00007f4b44f9cdd9
[  155.510879][ T9594] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000200000
[  155.510888][ T9594] RBP: 00007f4b45032d69 R08: ffffffffffffffff R09: 0000000000000000
[  155.510898][ T9594] R10: 000200000006c832 R11: 0000000000000246 R12: 0000000000000000
[  155.510907][ T9594] R13: 00007f4b45216038 R14: 00007f4b45215fa0 R15: 00007ffdac833ac8
[  155.510923][ T9594]  </TASK>
