last executing test programs:

1.168631385s ago: executing program 0 (id=2936):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r0}, 0x38)

942.123699ms ago: executing program 0 (id=2939):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', <r2=>0x0})
bind$can_raw(r1, &(0x7f0000000200)={0x1d, r2}, 0x10)
socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0xf}, {0xf, 0xa}, {0x3, 0xfff3}}}, 0x24}}, 0x80)

841.568685ms ago: executing program 0 (id=2942):
unshare(0x400)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x646983, 0x0)
vmsplice(r0, 0x0, 0x0, 0x0)

759.718329ms ago: executing program 0 (id=2943):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000340)="7d7a68e25d38566c61856d6817441a9caa9b23557af3d00f974cd91d1b33a9d6077fd480051346d814913f8a3ef2e1a781a2bbfc8d55dca693d39139f04047784190d93b5301b4abe27c9242396d40a5c2b7789629214281c8e09a6c1f1e0db5d1e74e1f27a89b2c25c2316fcddc9ff2a71eceb3094ba465389e", 0x7a}, {&(0x7f0000000700)="ce2ede98d4a7e4b9a7938b050ddf51835e71aa0857d0f79d3ce502000000b5cc4397be", 0x23}, {&(0x7f0000000600)="5fec9dec1e9d48e2b3a02e29dcaadb6d242c08b8b6e2a34dd08e48e34000000000000000d6bf39fd7dac80fedaaab8ff4258ecbc4e025305fab94303f773d083bb47da24c3341e27416f38e3251fe082c8f8ff2308cd2f7dc846c93e62a8d53d22fcabce47b5531463290c970dccfaa7da3e4ee56136f44b991100e3db7c750c3ccb3e01d6598d53d05ca7503d7430f3ff2b79ab629faa1dfb2d0899dd807d28174305bd600e50112aa4d0ec230a89b3078bb60a198e5a7169d91005cda3fc9870956d72773bd700", 0xc8}, {&(0x7f0000002dc0)="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", 0x19b}], 0x4, 0x0, 0x0, 0x4004845}], 0x1, 0x48800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

759.548688ms ago: executing program 0 (id=2944):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000280)=0x8, 0x4)

551.777189ms ago: executing program 0 (id=2945):
socket$nl_crypto(0x10, 0x3, 0x15)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
socket$inet_smc(0x2b, 0x1, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x10)
socket(0x28, 0x5, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, 0x0, 0x488c0)
sendmsg$nl_route(r2, 0x0, 0x40)

290.707431ms ago: executing program 1 (id=2951):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4)
sendmsg$alg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000024c0)="438dc77642449e6e17553493f7aeb57e36375ae9e2b947bee5b08bc1af2ca68b357310dce47d455f52765e1a97c5da42a110cfc487f25a4407c4ba", 0x3b}], 0x1, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4008011}, 0x4040004)
recvmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/11, 0xb}], 0x1}, 0x2}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/4, 0x4}, {&(0x7f0000000780)=""/248, 0xf8}], 0x2}, 0xfff}], 0x2, 0x2021, 0x0)

180.100678ms ago: executing program 1 (id=2952):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="257fd3cbb7ba7feb35295a62cd27", 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

179.961052ms ago: executing program 2 (id=2953):
syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @random="152f18a66094", @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x1, 0xa, 0x18, 0x68, 0x0, 0xc, 0x1, 0x0, @remote, @rand_addr=0x64010101, {[@generic={0x44, 0x2}]}}}}}}, 0x0)

179.760155ms ago: executing program 1 (id=2954):
syz_emit_ethernet(0x46, &(0x7f0000000400)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x89, 0x0, @empty, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0)

122.746643ms ago: executing program 2 (id=2955):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x39}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)

122.511012ms ago: executing program 1 (id=2956):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000002c0), &(0x7f0000000240)=r2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

122.336886ms ago: executing program 2 (id=2957):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="e7782abd70ffc8ac0d7498d2c50008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x10)

122.221217ms ago: executing program 1 (id=2958):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r0, &(0x7f0000000780), 0x12)

61.391026ms ago: executing program 2 (id=2959):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

61.213772ms ago: executing program 1 (id=2960):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0xfffffffe}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8858}, 0x4040084)

131.718µs ago: executing program 2 (id=2961):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4)

0s ago: executing program 2 (id=2962):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:5965' (ED25519) to the list of known hosts.
syzkaller login: [   57.727096][ T5582] cgroup: Unknown subsys name 'net'
[   57.830114][ T5582] cgroup: Unknown subsys name 'cpuset'
[   57.837331][ T5582] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.208121][ T5582] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.327671][ T5604] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.330884][ T5604] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.334362][ T5604] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.337944][ T5604] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.340449][ T5604] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.388152][ T5604] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.391828][ T5604] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.395092][ T5604] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.402279][ T5002] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.405966][ T5002] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.413857][ T5002] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.416230][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.418572][ T5613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.423012][ T5613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.425788][ T5613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.937019][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.940098][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.942358][ T5608] bridge_slave_0: entered allmulticast mode
[   64.945176][ T5608] bridge_slave_0: entered promiscuous mode
[   64.955683][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.957851][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.959928][ T5608] bridge_slave_1: entered allmulticast mode
[   64.962437][ T5608] bridge_slave_1: entered promiscuous mode
[   65.005090][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.022837][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.072345][ T5608] team0: Port device team_slave_0 added
[   65.083562][ T5608] team0: Port device team_slave_1 added
[   65.136043][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.138347][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.145989][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.158723][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.161279][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.168662][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.210831][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.213596][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.216150][ T5602] bridge_slave_0: entered allmulticast mode
[   65.218852][ T5602] bridge_slave_0: entered promiscuous mode
[   65.244947][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.247215][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.249302][ T5602] bridge_slave_1: entered allmulticast mode
[   65.252177][ T5602] bridge_slave_1: entered promiscuous mode
[   65.296493][ T5608] hsr_slave_0: entered promiscuous mode
[   65.299502][ T5608] hsr_slave_1: entered promiscuous mode
[   65.311644][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.317679][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.368731][ T5602] team0: Port device team_slave_0 added
[   65.370648][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.373179][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.376004][ T5609] bridge_slave_0: entered allmulticast mode
[   65.378651][ T5609] bridge_slave_0: entered promiscuous mode
[   65.381726][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.384235][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.386593][ T5609] bridge_slave_1: entered allmulticast mode
[   65.390285][ T5609] bridge_slave_1: entered promiscuous mode
[   65.402564][ T5602] team0: Port device team_slave_1 added
[   65.444561][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.446661][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.453631][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.459741][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.464482][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.473953][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.476478][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.483503][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.523387][ T5609] team0: Port device team_slave_0 added
[   65.543203][ T5609] team0: Port device team_slave_1 added
[   65.573281][ T5602] hsr_slave_0: entered promiscuous mode
[   65.575419][ T5602] hsr_slave_1: entered promiscuous mode
[   65.577351][ T5602] debugfs: 'hsr0' already exists in 'hsr'
[   65.579037][ T5602] Cannot create hsr debugfs directory
[   65.593503][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.595785][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.604567][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.623974][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.626063][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.633172][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.741003][ T5609] hsr_slave_0: entered promiscuous mode
[   65.743951][ T5609] hsr_slave_1: entered promiscuous mode
[   65.747108][ T5609] debugfs: 'hsr0' already exists in 'hsr'
[   65.749787][ T5609] Cannot create hsr debugfs directory
[   65.824161][ T5608] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.838364][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   65.842393][ T5608] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.848748][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   65.861077][ T5608] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.867720][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   65.896804][ T5608] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.907899][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   65.996917][ T5602] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.005315][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   66.036195][ T5602] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.042620][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   66.047064][ T5602] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.054339][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   66.078173][ T5602] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.083966][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   66.188292][ T5609] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.196291][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   66.201852][ T5609] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.208927][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   66.216934][ T5609] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.223594][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   66.228517][ T5609] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.234225][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   66.303081][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.307328][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.343357][ T5608] 8021q: adding VLAN 0 to HW filter on device team0
[   66.350143][ T5602] 8021q: adding VLAN 0 to HW filter on device team0
[   66.358885][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.361094][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.372576][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.375602][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.378492][ T5604] Bluetooth: hci0: command tx timeout
[   66.391560][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.394249][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.408944][ T2261] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.411095][ T2261] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.456152][ T5604] Bluetooth: hci2: command tx timeout
[   66.457318][ T5613] Bluetooth: hci1: command tx timeout
[   66.488268][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.517783][ T5609] 8021q: adding VLAN 0 to HW filter on device team0
[   66.542339][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.544558][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.566028][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.568777][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.988787][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.020006][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.080300][ T5602] veth0_vlan: entered promiscuous mode
[   67.087746][ T5608] veth0_vlan: entered promiscuous mode
[   67.098317][ T5602] veth1_vlan: entered promiscuous mode
[   67.101518][ T5608] veth1_vlan: entered promiscuous mode
[   67.126688][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.159344][ T5602] veth0_macvtap: entered promiscuous mode
[   67.183063][ T5602] veth1_macvtap: entered promiscuous mode
[   67.189728][ T5608] veth0_macvtap: entered promiscuous mode
[   67.205941][ T5608] veth1_macvtap: entered promiscuous mode
[   67.219674][ T5609] veth0_vlan: entered promiscuous mode
[   67.233682][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.248394][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.259979][ T5609] veth1_vlan: entered promiscuous mode
[   67.264619][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.283596][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.287192][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.296414][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.302904][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.306601][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.329731][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.338912][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.347737][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.350255][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.408162][ T5609] veth0_macvtap: entered promiscuous mode
[   67.428925][ T5609] veth1_macvtap: entered promiscuous mode
[   67.487837][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.494674][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.498518][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.538343][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.544721][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.552564][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.585708][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.597565][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.608291][ T2261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.614146][ T2261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.614656][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.622497][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.641918][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.646073][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.741880][ T5602] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.752888][ T2282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.759645][ T2282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.801824][ T2282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.810580][ T2282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.260076][ T5735] Driver unsupported XDP return value 0 on prog  (id 4) dev N/A, expect packet loss!
[   68.261322][ T5734] Bluetooth: MGMT ver 1.23
[   68.443617][ T5744] Cannot find del_set index 0 as target
[   68.455439][ T5613] Bluetooth: hci0: command tx timeout
[   68.535826][ T5613] Bluetooth: hci2: command tx timeout
[   68.536440][ T5604] Bluetooth: hci1: command tx timeout
[   68.570296][ T5747] netlink: 15672 bytes leftover after parsing attributes in process `syz.1.15'.
[   68.573610][ T5747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15'.
[   68.576609][ T5747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15'.
[   68.579691][ T5747] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15'.
[   68.667195][ T5753] xfrm1: entered allmulticast mode
[   68.958246][ T5761] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22'.
[   69.325420][ T5789] netlink: 16 bytes leftover after parsing attributes in process `syz.2.33'.
[   70.037636][ T5846] netlink: 88 bytes leftover after parsing attributes in process `syz.2.58'.
[   70.393651][ T5862] syz.2.66 uses obsolete (PF_INET,SOCK_PACKET)
[   70.453317][ T5863] syzkaller0: entered promiscuous mode
[   70.488420][ T5862] block nbd0: server does not support multiple connections per device.
[   70.496133][ T5862] block nbd0: shutting down sockets
[   70.535409][ T5604] Bluetooth: hci0: command tx timeout
[   70.560637][ T5862] bridge0: port 3(vlan2) entered blocking state
[   70.563454][ T5862] bridge0: port 3(vlan2) entered disabled state
[   70.566727][ T5862] vlan2: entered allmulticast mode
[   70.568900][ T5862] geneve0: entered allmulticast mode
[   70.572920][ T5862] vlan2: entered promiscuous mode
[   70.576074][ T5862] geneve0: entered promiscuous mode
[   70.616449][ T5604] Bluetooth: hci1: command tx timeout
[   70.616857][ T5613] Bluetooth: hci2: command tx timeout
[   70.646964][ T5870] netlink: 164 bytes leftover after parsing attributes in process `syz.1.69'.
[   70.716759][ T5872] Cannot find set identified by id 0 to match
[   71.543654][ T5905] vlan0: entered promiscuous mode
[   71.549783][ T5905] gretap0: entered promiscuous mode
[   71.762245][ T5914] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   71.771997][ T5914] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   71.774060][ T5914] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   71.776073][ T5914] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   71.778055][ T5914] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   71.780178][ T5914] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   71.782113][ T5914] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   71.784479][ T5914] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   71.786937][ T5914] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   71.789263][ T5914] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   71.856486][ T5915] netlink: 16 bytes leftover after parsing attributes in process `syz.1.87'.
[   71.861576][ T5915] netlink: 348 bytes leftover after parsing attributes in process `syz.1.87'.
[   72.616859][ T5613] Bluetooth: hci0: command tx timeout
[   72.696396][ T5613] Bluetooth: hci2: command tx timeout
[   72.706363][ T5613] Bluetooth: hci1: command tx timeout
[   72.781030][ T5952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.874917][ T5958] netlink: 'syz.1.104': attribute type 24 has an invalid length.
[   73.262638][ T5976] tipc: Started in network mode
[   73.271485][ T5976] tipc: Node identity b2d70df1e694, cluster identity 4711
[   73.274309][ T5976] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.282201][ T5976] syzkaller0: entered promiscuous mode
[   73.290549][ T5976] syzkaller0: entered allmulticast mode
[   73.315539][ T5976] tipc: Resetting bearer <eth:syzkaller0>
[   73.341796][ T5974] tipc: Resetting bearer <eth:syzkaller0>
[   73.368398][ T5974] tipc: Disabling bearer <eth:syzkaller0>
[   73.707683][ T6004] __nla_validate_parse: 3 callbacks suppressed
[   73.707700][ T6004] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.125'.
[   73.893527][ T6014] bridge1: entered allmulticast mode
[   73.910198][ T6016] Bluetooth: MGMT ver 1.23
[   74.004804][ T6024] ieee802154 phy0 wpan0: encryption failed: -22
[   74.207936][ T6037] netlink: 27 bytes leftover after parsing attributes in process `syz.2.141'.
[   74.433103][ T6053] ip6tnl1: entered allmulticast mode
[   74.451389][   T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   74.462824][   T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   74.475416][ T2403] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   74.808996][ T6080] netlink: 'syz.2.159': attribute type 3 has an invalid length.
[   74.875166][ T2403] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   74.958514][ T6088] netlink: 204 bytes leftover after parsing attributes in process `syz.0.163'.
[   74.961508][ T6088] netlink: 84 bytes leftover after parsing attributes in process `syz.0.163'.
[   75.255454][ T2403] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   75.494805][ T6112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.175'.
[   75.754067][ T6121] netlink: 'syz.2.178': attribute type 13 has an invalid length.
[   75.775123][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.174'.
[   75.823051][ T2403] IPVS: starting estimator thread 0...
[   75.866511][    T9] IPVS: starting estimator thread 0...
[   75.883970][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.178'.
[   75.915193][ T6127] IPVS: using max 71 ests per chain, 170400 per kthread
[   75.955126][ T6128] IPVS: using max 70 ests per chain, 168000 per kthread
[   75.995207][ T2403] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   76.025597][ T2403] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   76.253045][ T6133] netlink: 'syz.2.179': attribute type 6 has an invalid length.
[   76.410211][ T6146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.185'.
[   76.420503][ T6146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.185'.
[   76.476564][ T6151] sch_tbf: peakrate 67108864 is lower than or equals to rate 4294966145 !
[   76.603314][ T6160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.193'.
[   76.789630][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[   76.791977][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[   76.854895][ T6174] tipc: Started in network mode
[   76.873882][ T6174] tipc: Node identity ac14140f, cluster identity 4711
[   76.879075][ T6174] tipc: New replicast peer: 255.255.255.255
[   76.882030][ T6174] tipc: Enabled bearer <udp:syz2>, priority 10
[   76.934698][ T6170] Zero length message leads to an empty skb
[   77.116562][ T6191] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.119897][ T6191] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.237400][ T6191] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.253702][ T6191] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.351338][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.356796][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.370213][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.380018][ T6191] syz.2.206 (6191) used greatest stack depth: 19944 bytes left
[   77.425653][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.491868][ T6223] netlink: 'syz.2.220': attribute type 2 has an invalid length.
[   77.690576][ T6241] net_ratelimit: 3322 callbacks suppressed
[   77.690591][ T6241] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.882017][  T798] tipc: Node number set to 2886997007
[   78.391521][ T6288] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   78.771121][ T6310] ip6tnl1: entered allmulticast mode
[   79.298200][ T6347] __nla_validate_parse: 6 callbacks suppressed
[   79.298215][ T6347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.275'.
[   79.333294][ T6347] team1: entered promiscuous mode
[   79.340404][ T6347] team1: entered allmulticast mode
[   79.342690][ T6347] 8021q: adding VLAN 0 to HW filter on device team1
[   79.357885][ T6347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.275'.
[   79.392304][ T6347] team2: entered promiscuous mode
[   79.394386][ T6347] team2: entered allmulticast mode
[   79.396965][ T6347] 8021q: adding VLAN 0 to HW filter on device team2
[   79.762357][ T6344] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   79.768605][ T6371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.284'.
[   79.771877][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'.
[   80.134419][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.297'.
[   80.342917][ T6416] netlink: 'syz.1.304': attribute type 49 has an invalid length.
[   80.407422][ T6422] netlink: 'syz.0.308': attribute type 8 has an invalid length.
[   80.411600][ T6422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.308'.
[   80.420563][ T6422] veth1_to_team: entered promiscuous mode
[   80.424531][ T6422] gretap0: entered promiscuous mode
[   80.429600][ T6422] veth1_to_team: left promiscuous mode
[   80.433822][ T6422] gretap0: left promiscuous mode
[   80.804773][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.317'.
[   81.180238][ T6470] x_tables: ip6_tables: dccp match: only valid for protocol 33
[   81.224552][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'.
[   81.310196][ T6479] netlink: 76 bytes leftover after parsing attributes in process `syz.2.335'.
[   81.426217][ T6474] nbd0: detected capacity change from 0 to 63
[   81.432892][ T6483] block nbd0: Receive control failed (result -32)
[   81.435396][   T55] block nbd0: Receive control failed (result -32)
[   81.441108][ T5607] block nbd0: Dead connection, failed to find a fallback
[   81.450519][ T5607] block nbd0: shutting down sockets
[   81.459349][ T5607] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   81.462487][ T5607] Buffer I/O error on dev nbd0, logical block 0, async page read
[   81.464829][ T5607] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   81.469531][ T5607] Buffer I/O error on dev nbd0, logical block 1, async page read
[   81.472389][ T5607] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   81.475270][ T5607] Buffer I/O error on dev nbd0, logical block 2, async page read
[   81.477551][ T5607] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   81.480134][ T5607] Buffer I/O error on dev nbd0, logical block 3, async page read
[   81.484863][ T5607] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   81.490264][ T5607] Buffer I/O error on dev nbd0, logical block 0, async page read
[   81.492693][ T5607] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   81.496128][ T5607] Buffer I/O error on dev nbd0, logical block 1, async page read
[   81.498628][ T5607] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   81.501379][ T5607] Buffer I/O error on dev nbd0, logical block 2, async page read
[   81.503809][ T5607] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   81.506914][ T5607] Buffer I/O error on dev nbd0, logical block 3, async page read
[   81.509247][ T5607] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   81.511921][ T5607] Buffer I/O error on dev nbd0, logical block 0, async page read
[   81.514393][ T5607] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   81.517911][ T5607] Buffer I/O error on dev nbd0, logical block 1, async page read
[   81.523423][ T5607] ldm_validate_partition_table(): Disk read failed.
[   81.526738][ T5607] Dev nbd0: unable to read RDB block 0
[   81.529912][ T5607]  nbd0: unable to read partition table
[   81.535993][ T5607] ldm_validate_partition_table(): Disk read failed.
[   81.539885][ T5607] Dev nbd0: unable to read RDB block 0
[   81.552016][ T5607]  nbd0: unable to read partition table
[   81.615905][ T6497] netlink: 'syz.0.343': attribute type 1 has an invalid length.
[   81.681858][ T6497] bond1: entered promiscuous mode
[   81.688829][ T6497] 8021q: adding VLAN 0 to HW filter on device bond1
[   81.699507][ T5712] IPVS: starting estimator thread 0...
[   81.706474][ T6503] vlan2: entered allmulticast mode
[   81.713113][ T6503] bond1: entered allmulticast mode
[   81.764243][ T6497] bond1: (slave bridge1): making interface the new active one
[   81.768363][ T6497] bridge1: entered promiscuous mode
[   81.770311][ T6497] bridge1: entered allmulticast mode
[   81.774799][ T6497] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   81.795238][ T6508] IPVS: using max 38 ests per chain, 91200 per kthread
[   82.411672][ T6570] netlink: 'syz.1.367': attribute type 1 has an invalid length.
[   82.497711][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'.
[   83.586276][ T6636] syzkaller1: entered promiscuous mode
[   83.593347][ T6636] syzkaller1: entered allmulticast mode
[   83.687040][ T6640] netlink: 'syz.2.386': attribute type 1 has an invalid length.
[   83.690007][ T6640] netlink: 'syz.2.386': attribute type 6 has an invalid length.
[   83.693061][ T6640] netlink: 'syz.2.386': attribute type 3 has an invalid length.
[   83.769815][ T6644] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96
[   83.883885][ T6653] netlink: 'syz.1.392': attribute type 4 has an invalid length.
[   83.889574][ T6653] netlink: 'syz.1.392': attribute type 4 has an invalid length.
[   84.117418][ T6675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.553583][ T6707] bond1: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[   84.847633][ T6728] sctp: [Deprecated]: syz.0.426 (pid 6728) Use of struct sctp_assoc_value in delayed_ack socket option.
[   84.847633][ T6728] Use struct sctp_sack_info instead
[   85.091418][ T6745] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20002
[   85.112446][ T6746] syzkaller0: entered promiscuous mode
[   85.117635][ T6746] syzkaller0: entered allmulticast mode
[   87.045623][   T10] cfg80211: failed to load regulatory.db
[   89.039766][ T6791] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   89.963977][ T6922] sch_fq: defrate 8 ignored.
[   90.006312][ T6926] netlink: 'syz.1.513': attribute type 1 has an invalid length.
[   90.079335][ T6930] syzkaller0: entered promiscuous mode
[   90.081093][ T6930] syzkaller0: entered allmulticast mode
[   90.664186][ T6955] __nla_validate_parse: 2 callbacks suppressed
[   90.664198][ T6955] netlink: 40 bytes leftover after parsing attributes in process `syz.0.526'.
[   92.540482][ T7054] veth1_to_hsr: entered allmulticast mode
[   92.799014][ T7063] netlink: 'syz.1.573': attribute type 9 has an invalid length.
[   92.809831][ T7063] netlink: 'syz.1.573': attribute type 3 has an invalid length.
[   92.816011][ T7063] netlink: 'syz.1.573': attribute type 3 has an invalid length.
[   93.493029][ T7077] syzkaller0: entered promiscuous mode
[   93.496783][ T7077] syzkaller0: entered allmulticast mode
[   93.803809][ T7083] tipc: Can't bind to reserved service type 1
[   94.480570][ T7081] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   94.691134][ T7104] syzkaller1: tun_chr_ioctl cmd 1074025677
[   94.693842][ T7104] syzkaller1: linktype set to 260
[   94.822493][ T7110] netlink: 24 bytes leftover after parsing attributes in process `syz.2.596'.
[   94.827239][ T7110] netlink: 24 bytes leftover after parsing attributes in process `syz.2.596'.
[   94.972985][ T7118] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   94.975912][ T7118] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[   94.979446][ T7118] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   94.994554][ T7120] netlink: 'syz.1.601': attribute type 3 has an invalid length.
[   95.935741][ T7166] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   96.733209][ T7166] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   96.809116][ T7176] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.936259][ T7179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'.
[   97.183969][ T7193] mac80211_hwsim hwsim7 wlan1: Caught tx_queue_len zero misconfig
[   97.357282][ T7201] netlink: 'syz.0.636': attribute type 19 has an invalid length.
[   97.554412][ T7218] netlink: 'syz.0.643': attribute type 6 has an invalid length.
[  100.680280][ T7227] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  100.804665][ T7276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.665'.
[  100.851169][ T7278] TC_ACT_REPEAT abuse ?
[  100.944416][ T7282] netlink: 32 bytes leftover after parsing attributes in process `syz.0.668'.
[  101.273317][ T7303] syzkaller0: entered promiscuous mode
[  101.275608][ T7303] syzkaller0: entered allmulticast mode
[  101.492546][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.682'.
[  101.821899][ T7324] syzkaller1: entered promiscuous mode
[  101.823595][ T7324] syzkaller1: entered allmulticast mode
[  102.153735][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'.
[  102.235109][ T7352] veth1_to_hsr: left allmulticast mode
[  102.254570][ T7352] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  102.271562][ T7352] ip6tnl1: left allmulticast mode
[  102.273932][ T7352] team1: left promiscuous mode
[  102.277088][ T7352] team1: left allmulticast mode
[  102.279155][ T7352] team2: left promiscuous mode
[  102.280989][ T7352] team2: left allmulticast mode
[  102.283018][ T7352] bond1: left promiscuous mode
[  102.284948][ T7352] bridge1: left promiscuous mode
[  102.311662][ T7352] vlan2: left allmulticast mode
[  102.315993][ T7352] bond1: left allmulticast mode
[  102.326258][ T7352] bridge1: left allmulticast mode
[  102.338713][ T7358] netlink: 16 bytes leftover after parsing attributes in process `syz.2.703'.
[  102.400682][ T7360] netlink: 32 bytes leftover after parsing attributes in process `syz.1.704'.
[  102.476398][ T7369] netlink: 'syz.1.709': attribute type 66 has an invalid length.
[  102.638396][ T7386] netlink: 'syz.1.716': attribute type 29 has an invalid length.
[  102.649196][ T7386] netlink: 'syz.1.716': attribute type 29 has an invalid length.
[  102.655841][ T7386] netlink: 500 bytes leftover after parsing attributes in process `syz.1.716'.
[  102.675827][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'.
[  102.694478][ T7389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.713'.
[  102.745796][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'.
[  102.761615][ T5667] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  102.764138][ T7389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.713'.
[  102.765796][ T5667] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  102.777497][ T5667] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  102.783845][ T5667] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  103.022630][ T7414] bridge_slave_0: left allmulticast mode
[  103.028324][ T7414] bridge_slave_0: left promiscuous mode
[  103.030218][ T7414] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.054859][ T7414] bridge_slave_1: left allmulticast mode
[  103.063744][ T7414] bridge_slave_1: left promiscuous mode
[  103.070909][ T7414] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.089660][ T7414] bond0: (slave bond_slave_0): Releasing backup interface
[  103.105726][ T7414] bond0: (slave bond_slave_1): Releasing backup interface
[  103.122457][ T7414] team0: Port device team_slave_0 removed
[  103.139890][ T7414] team0: Port device team_slave_1 removed
[  103.146090][ T7414] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.154942][ T7414] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.178835][ T7422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.729'.
[  103.182226][ T7414] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.184810][ T7414] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.196017][ T7414] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  103.262849][   T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  103.268989][   T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  103.285450][ T2403] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  103.331639][ T7432] netlink: 'syz.0.733': attribute type 11 has an invalid length.
[  103.404564][ T7438] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  103.409573][ T7438] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  103.422070][ T7438] tipc: Started in network mode
[  103.423541][ T7438] tipc: Node identity 080211000001, cluster identity 4711
[  103.435634][ T7438] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.630797][ T7453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.742'.
[  103.633581][ T7453] netlink: 'syz.0.742': attribute type 5 has an invalid length.
[  103.638454][ T7453] netlink: 'syz.0.742': attribute type 5 has an invalid length.
[  103.828281][ T2403] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  103.893607][ T7465] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  104.007398][ T7469] vlan3: entered promiscuous mode
[  104.009445][ T7469] gretap0: entered promiscuous mode
[  104.011488][ T7469] vlan3: entered allmulticast mode
[  104.017851][ T7469] gretap0: entered allmulticast mode
[  104.070720][   T56] block nbd1: Receive control failed (result -32)
[  104.073093][ T7472] block nbd1: Receive control failed (result -32)
[  104.121160][ T7478] warning: `syz.1.753' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  104.175598][ T7479] tc action pedit 'at' offset 6 out of bounds
[  104.178299][ T7479] tc action pedit 'at' offset 6 out of bounds
[  104.180234][ T7479] tc action pedit 'at' offset 6 out of bounds
[  104.182008][ T7479] tc action pedit 'at' offset 6 out of bounds
[  104.183709][ T7479] tc action pedit 'at' offset 6 out of bounds
[  104.185755][ T7479] tc action pedit 'at' offset 6 out of bounds
[  104.188148][ T7479] tc action pedit 'at' offset 6 out of bounds
[  104.190053][ T7479] tc action pedit 'at' offset 6 out of bounds
[  104.191811][ T7479] tc action pedit 'at' offset 6 out of bounds
[  104.193590][ T7479] tc action pedit 'at' offset 6 out of bounds
[  104.195552][ T7479] 0: reclassify loop, rule prio 0, protocol 800
[  104.296308][ T2403] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  104.438834][    T9] tipc: Node number set to 134418688
[  104.652407][ T7515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  104.660015][ T7515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  104.667184][ T7516] sock: sock_timestamping_bind_phc: sock not bind to device
[  104.724666][ T7522] netlink: 'syz.0.773': attribute type 1 has an invalid length.
[  105.883885][ T7610] tunl0: entered promiscuous mode
[  105.896062][ T7610] netlink: 'syz.0.812': attribute type 4 has an invalid length.
[  106.911798][ T7643] netlink: 'syz.0.823': attribute type 9 has an invalid length.
[  107.059029][ T7653] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  107.107852][ T7657] veth0_to_batadv: entered allmulticast mode
[  107.111592][ T7657] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check.
[  107.284685][ T7666] __nla_validate_parse: 12 callbacks suppressed
[  107.284697][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.835'.
[  107.299453][ T7666] bond0: entered promiscuous mode
[  107.306571][ T7666] bond_slave_0: entered promiscuous mode
[  107.312483][ T7666] bond_slave_1: entered promiscuous mode
[  107.320164][ T7666] batadv_slave_0: entered promiscuous mode
[  107.321978][ T7666] batadv_slave_0: left promiscuous mode
[  107.324902][ T7666] bond0: left promiscuous mode
[  107.327061][ T7666] bond_slave_0: left promiscuous mode
[  107.328959][ T7666] bond_slave_1: left promiscuous mode
[  107.575189][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  107.712354][ T7694] trusted_key: syz.0.848 sent an empty control message without MSG_MORE.
[  107.806812][ T7708] tipc: Failed to remove unknown binding: 66,1,1/0:4020403325/4020403327
[  107.916473][ T7719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.858'.
[  107.922778][ T7719] netlink: 580 bytes leftover after parsing attributes in process `syz.2.858'.
[  107.994351][ T7729] netlink: 32 bytes leftover after parsing attributes in process `syz.0.861'.
[  108.172553][ T7743] netlink: 24 bytes leftover after parsing attributes in process `syz.0.868'.
[  110.235449][ T7850] xt_CT: No such helper "snmp"
[  110.335697][ T7855] netlink: 168 bytes leftover after parsing attributes in process `syz.2.920'.
[  110.491787][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.924'.
[  110.864653][ T7883] IPVS: ip_vs_add_dest(): server weight less than zero
[  110.875747][ T7883] IPVS: rr: FWM 3 0x00000003 - no destination available
[  110.960962][ T7896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.939'.
[  110.963676][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.939'.
[  111.513309][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.958'.
[  112.008673][ T7971] netlink: 'syz.1.974': attribute type 10 has an invalid length.
[  112.707815][ T7971] syz_tun: entered promiscuous mode
[  112.725716][ T7971] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  112.796686][ T7990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.983'.
[  112.958089][ T8009] netlink: 'syz.2.994': attribute type 12 has an invalid length.
[  112.960459][ T8009] netlink: 'syz.2.994': attribute type 29 has an invalid length.
[  112.962942][ T8009] netlink: 'syz.2.994': attribute type 1 has an invalid length.
[  112.974387][ T8009] netlink: 260 bytes leftover after parsing attributes in process `syz.2.994'.
[  113.053898][ T8020] netlink: 'syz.2.998': attribute type 1 has an invalid length.
[  113.116728][ T8024] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1000'.
[  113.157805][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1002'.
[  113.164605][ T8030] tc_dump_action: action bad kind
[  113.306441][ T8043] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1011'.
[  113.390301][ T8050] syzkaller0: entered promiscuous mode
[  113.393705][ T8050] syzkaller0: entered allmulticast mode
[  113.632341][ T8071] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  116.045123][ T8155] tipc: Enabled bearer <eth:batadv0>, priority 10
[  116.455216][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  116.598306][ T8205] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1086'.
[  116.955696][ T8219] netlink: 'syz.2.1093': attribute type 3 has an invalid length.
[  116.958584][ T8219] netlink: 'syz.2.1093': attribute type 3 has an invalid length.
[  116.961935][ T8219] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1093'.
[  117.045155][    T9] tipc: Node number set to 1413680625
[  117.110241][ T8227] netlink: 15672 bytes leftover after parsing attributes in process `syz.2.1096'.
[  117.113957][ T8227] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1096'.
[  117.118188][ T8227] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1096'.
[  117.633193][ T8265] IPVS: rr: FWM 3 0x00000003 - no destination available
[  117.661837][ T8267] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  118.011842][ T8296] netlink: 'syz.1.1131': attribute type 8 has an invalid length.
[  118.232312][ T8316] syz_tun: entered allmulticast mode
[  118.248638][ T8314] syz_tun: left allmulticast mode
[  118.291267][ T8320] netlink: 'syz.2.1143': attribute type 2 has an invalid length.
[  118.572125][ T8346] ip6erspan0: entered promiscuous mode
[  118.574241][ T8346] ip6erspan0: entered allmulticast mode
[  120.292846][ T8385] netlink: 844 bytes leftover after parsing attributes in process `syz.0.1175'.
[  120.682417][ T8419] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1192'.
[  120.687910][ T8419] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1192'.
[  122.870370][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1238'.
[  123.122961][ T8539] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1241'.
[  123.610270][ T8575] xt_hashlimit: size too large, truncated to 1048576
[  123.829021][ T8589] netlink: 'syz.2.1254': attribute type 1 has an invalid length.
[  123.831359][ T8589] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1254'.
[  124.211851][ T8608] xt_CT: You must specify a L4 protocol and not use inversions on it
[  125.187457][ T8674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1292'.
[  126.085830][ T8720] nicvf0: tun_chr_ioctl cmd 2148553947
[  126.858504][ T5604] Bluetooth: hci2: command 0x0405 tx timeout
[  127.030137][ T8738] vcan0: tx address claim with dlc 0
[  127.302467][ T8766] netlink: 'syz.2.1336': attribute type 3 has an invalid length.
[  127.367113][ T8770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1339'.
[  127.374326][ T8770] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1339'.
[  127.580887][ T8793] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1350'.
[  127.820720][ T8819] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1363'.
[  127.880463][ T8824] netlink: 758 bytes leftover after parsing attributes in process `syz.1.1365'.
[  128.469192][ T8851] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1377'.
[  129.091644][ T8894] team0: Caught tx_queue_len zero misconfig
[  129.104529][ T8894] lo: Caught tx_queue_len zero misconfig
[  129.107459][ T8894] netlink: 'syz.2.1397': attribute type 1 has an invalid length.
[  129.109719][ T8894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1397'.
[  129.483222][ T8858] syz.0.1380 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  129.496105][ T8858] CPU: 1 UID: 0 PID: 8858 Comm: syz.0.1380 Not tainted syzkaller #0 PREEMPT(full) 
[  129.496127][ T8858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  129.496135][ T8858] Call Trace:
[  129.496142][ T8858]  <TASK>
[  129.496148][ T8858]  dump_stack_lvl+0xe8/0x150
[  129.496171][ T8858]  dump_header+0xd3/0x4c0
[  129.496195][ T8858]  oom_kill_process+0x3ab/0x970
[  129.496225][ T8858]  out_of_memory+0x106c/0x1410
[  129.496241][ T8858]  ? try_charge_memcg+0xbb9/0x1570
[  129.496264][ T8858]  ? __pfx___mutex_lock+0x10/0x10
[  129.496285][ T8858]  ? __pfx_out_of_memory+0x10/0x10
[  129.496300][ T8858]  ? do_raw_spin_unlock+0xf5/0x210
[  129.496329][ T8858]  try_charge_memcg+0xc77/0x1570
[  129.496348][ T8858]  ? __lock_acquire+0x6b5/0x2cf0
[  129.496378][ T8858]  ? __pfx_try_charge_memcg+0x10/0x10
[  129.496412][ T8858]  ? charge_memcg+0x23/0x2b0
[  129.496434][ T8858]  charge_memcg+0x1a2/0x2b0
[  129.496456][ T8858]  __mem_cgroup_charge+0x25/0x80
[  129.496474][ T8858]  do_wp_page+0x11b5/0x4cc0
[  129.496497][ T8858]  ? __pte_offset_map+0x29/0x240
[  129.496522][ T8858]  ? __pfx_do_wp_page+0x10/0x10
[  129.496558][ T8858]  ? do_raw_spin_lock+0x12b/0x2f0
[  129.496579][ T8858]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  129.496607][ T8858]  handle_mm_fault+0x151d/0x3170
[  129.496636][ T8858]  ? handle_mm_fault+0xee/0x3170
[  129.496659][ T8858]  ? __pfx_handle_mm_fault+0x10/0x10
[  129.496674][ T8858]  ? lock_vma_under_rcu+0x45a/0x500
[  129.496715][ T8858]  do_user_addr_fault+0xa73/0x1340
[  129.496737][ T8858]  ? rcu_is_watching+0x15/0xb0
[  129.496755][ T8858]  ? trace_page_fault_user+0x84/0x1e0
[  129.496772][ T8858]  exc_page_fault+0x6a/0xc0
[  129.496794][ T8858]  asm_exc_page_fault+0x26/0x30
[  129.496832][ T8858] RIP: 0033:0x7f87bdc507fc
[  129.496848][ T8858] Code: 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b 41 88 3c 10 31 c0 <49> 89 34 d1 c3 b8 01 00 00 00 c3 66 0f 1f 84 00 00 00 00 00 48 83
[  129.496859][ T8858] RSP: 002b:00007ffed7648dc8 EFLAGS: 00010246
[  129.496872][ T8858] RAX: 0000000000000000 RBX: ffffffff81d7676d RCX: 0000000000000000
[  129.496882][ T8858] RDX: 000000000000076d RSI: ffffffff81d7676d RDI: 0000000000000000
[  129.496891][ T8858] RBP: 0000000000000000 R08: 00007f87be000000 R09: 00007f87be002000
[  129.496900][ T8858] R10: 0000000081d76771 R11: 0000000000000000 R12: 00007f87be016038
[  129.496909][ T8858] R13: 0000000000000000 R14: ffffffff81d7676d R15: 00007f87beb45720
[  129.496919][ T8858]  ? __x64_sys_bpf+0x1d/0x90
[  129.496939][ T8858]  ? __x64_sys_bpf+0x1d/0x90
[  129.496960][ T8858]  ? __x64_sys_bpf+0x1d/0x90
[  129.496981][ T8858]  </TASK>
[  129.497787][ T8858] memory: usage 307200kB, limit 307200kB, failcnt 2143
[  129.615861][ T8858] memory+swap: usage 307324kB, limit 9007199254740988kB, failcnt 0
[  129.618858][ T8858] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0
[  129.621505][ T8858] Memory cgroup stats for /syz0:
[  129.621878][ T8858] cache 0
[  129.626121][ T8858] rss 0
[  129.627209][ T8858] rss_huge 0
[  129.628425][ T8858] shmem 0
[  129.629532][ T8858] mapped_file 0
[  129.630823][ T8858] dirty 0
[  129.631933][ T8858] writeback 0
[  129.633194][ T8858] workingset_refault_anon 1
[  129.634878][ T8858] workingset_refault_file 0
[  129.636634][ T8858] swap 126976
[  129.637874][ T8858] swapcached 135168
[  129.639257][ T8858] pgpgin 36165
[  129.640484][ T8858] pgpgout 36164
[  129.641727][ T8858] pgfault 77713
[  129.643062][ T8858] pgmajfault 1
[  129.644308][ T8858] inactive_anon 4096
[  129.646221][ T8858] active_anon 0
[  129.647539][ T8858] inactive_file 0
[  129.648921][ T8858] active_file 0
[  129.650205][ T8858] unevictable 0
[  129.651531][ T8858] hierarchical_memory_limit 314572800
[  129.653419][ T8858] hierarchical_memsw_limit 9223372036854771712
[  129.665535][ T8858] total_cache 0
[  129.669508][ T8858] total_rss 0
[  129.670704][ T8858] total_rss_huge 0
[  129.673588][ T8858] total_shmem 0
[  129.674925][ T8858] total_mapped_file 0
[  129.702835][ T8858] total_dirty 0
[  129.704181][ T8858] total_writeback 0
[  129.706177][ T8858] total_workingset_refault_anon 1
[  129.708000][ T8858] total_workingset_refault_file 0
[  129.709849][ T8858] total_swap 126976
[  129.711238][ T8858] total_swapcached 135168
[  129.712824][ T8858] total_pgpgin 36165
[  129.714285][ T8858] total_pgpgout 36164
[  129.716338][ T8858] total_pgfault 77713
[  129.717917][ T8858] total_pgmajfault 1
[  129.719283][ T8858] total_inactive_anon 4096
[  129.720823][ T8858] total_active_anon 0
[  129.722230][ T8858] total_inactive_file 0
[  129.723758][ T8858] total_active_file 0
[  129.727879][ T8858] total_unevictable 0
[  129.729415][ T8858] anon_cost 0
[  129.730650][ T8858] file_cost 0
[  129.731909][ T8858] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1380,pid=8858,uid=0
[  129.737643][ T8858] Memory cgroup out of memory: Killed process 8858 (syz.0.1380) total-vm:104280kB, anon-rss:1244kB, file-rss:21644kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000
[  130.139494][ T8934] netlink: 'syz.2.1415': attribute type 3 has an invalid length.
[  130.219199][ T8938] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1417'.
[  130.340192][ T8943] IPv6: NLM_F_CREATE should be specified when creating new route
[  130.441244][ T8948] syzkaller0: entered promiscuous mode
[  130.446717][ T8948] syzkaller0: entered allmulticast mode
[  130.458660][   T12] syzkaller0: tun_net_xmit 70
[  130.462371][ T8948] syzkaller0: tun_net_xmit 14
[  130.743290][ T8962] syzkaller0: entered promiscuous mode
[  130.752283][ T8962] syzkaller0: entered allmulticast mode
[  130.816242][ T8973] xt_hashlimit: size too large, truncated to 1048576
[  130.883183][ T8976] xt_hashlimit: size too large, truncated to 1048576
[  130.897785][ T8976] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  132.234829][ T9013] veth0: entered promiscuous mode
[  132.247850][ T9013] bond0: entered promiscuous mode
[  132.249788][ T9013] bond_slave_0: entered promiscuous mode
[  132.251932][ T9013] bond_slave_1: entered promiscuous mode
[  132.260459][ T9011] bond0: left promiscuous mode
[  132.263626][ T9011] bond_slave_0: left promiscuous mode
[  132.271334][ T9011] bond_slave_1: left promiscuous mode
[  132.277488][ T9011] veth0: left promiscuous mode
[  132.583889][ T9044] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1465'.
[  133.027691][ T9095] xt_hashlimit: size too large, truncated to 1048576
[  133.103933][ T9103] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1491'.
[  133.568138][ T9145] No such timeout policy "syz1"
[  133.735136][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  134.464777][ T9162] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  134.519164][ T9162] tipc: Resetting bearer <eth:syzkaller0>
[  134.744628][ T9183] syzkaller0: entered promiscuous mode
[  134.748201][ T9183] syzkaller0: entered allmulticast mode
[  134.756781][ T9183] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.763410][ T9181] tipc: Resetting bearer <eth:syzkaller0>
[  134.806800][ T9181] tipc: Disabling bearer <eth:syzkaller0>
[  134.974801][ T9207] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1541'.
[  134.976832][ T9209] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1542'.
[  135.126348][ T9221] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  135.133604][ T9221] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  135.346482][ T9243] netlink: 'syz.2.1558': attribute type 3 has an invalid length.
[  135.400885][ T9249] netlink: 'syz.2.1561': attribute type 4 has an invalid length.
[  135.415233][ T9249] netlink: 'syz.2.1561': attribute type 4 has an invalid length.
[  135.748430][ T9275] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1574'.
[  135.751849][ T9275] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  135.754121][ T9275] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  136.021707][ T9287] netlink: 'syz.2.1580': attribute type 4 has an invalid length.
[  136.030785][ T9287] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1580'.
[  136.460268][ T9325] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1597'.
[  136.645925][ T9333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1600'.
[  137.936418][ T9391] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1628'.
[  138.097765][ T9406] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1636'.
[  138.218342][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  138.220969][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  138.260471][ T9417] netlink: 'syz.2.1642': attribute type 3 has an invalid length.
[  138.263692][ T9417] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1642'.
[  138.411508][ T9433] netlink: 'syz.2.1647': attribute type 3 has an invalid length.
[  139.234347][ T9475] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1664'.
[  139.282436][ T9477] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1665'.
[  139.287610][ T9477] tc_dump_action: action bad kind
[  139.890457][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1682'.
[  139.897263][ T9514] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.900375][ T9514] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.941646][ T9516] erspan0: entered promiscuous mode
[  139.955635][ T9515] erspan0: left promiscuous mode
[  140.034585][ T9518] netlink: 'syz.0.1684': attribute type 4 has an invalid length.
[  140.169527][ T9525] netlink: 'syz.1.1687': attribute type 32 has an invalid length.
[  140.171872][ T9525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1687'.
[  140.199673][ T9525] bond1: option coupled_control: invalid value (12)
[  140.203881][ T9525] bond1 (unregistering): Released all slaves
[  140.378427][ T9540] syzkaller0: entered promiscuous mode
[  140.380086][ T9540] syzkaller0: entered allmulticast mode
[  142.097063][ T9593] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  144.022343][ T9679] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  144.217098][ T9697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1762'.
[  144.229642][ T9697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1762'.
[  144.279664][ T9703] syzkaller0: entered promiscuous mode
[  144.282052][ T9703] syzkaller0: entered allmulticast mode
[  144.286377][   T12] 0: reclassify loop, rule prio 0, protocol 800
[  144.480759][ T9709] gretap0: entered promiscuous mode
[  144.492080][ T9709] vlan3: entered promiscuous mode
[  144.618151][ T9719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1771'.
[  144.625106][ T9719] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1771'.
[  144.642960][ T9719] vlan3: entered promiscuous mode
[  144.645781][ T9719] vlan3: entered allmulticast mode
[  144.647846][ T9719] syz_tun: entered allmulticast mode
[  144.869977][ T9748] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1778'.
[  145.043319][ T9766] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  145.398195][ T9792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1795'.
[  145.411267][ T9797] syzkaller1: entered promiscuous mode
[  145.413727][ T9797] syzkaller1: entered allmulticast mode
[  145.744245][ T9833] netlink: 'syz.1.1812': attribute type 2 has an invalid length.
[  145.788691][ T9838] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1814'.
[  146.040878][ T9861] gtp0: entered promiscuous mode
[  146.042781][ T9861] gtp0: entered allmulticast mode
[  146.389927][ T9875] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1831'.
[  146.394548][ T9875] netlink: 'syz.0.1831': attribute type 3 has an invalid length.
[  146.424603][ T9877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1833'.
[  146.510778][ T9887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1837'.
[  146.542556][ T9889] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  146.720396][ T9907] netlink: 'syz.2.1848': attribute type 10 has an invalid length.
[  146.722727][ T9907] ipvlan0: entered allmulticast mode
[  146.724490][ T9907] veth0_vlan: entered allmulticast mode
[  146.730084][ T9907] team0: Device ipvlan0 failed to register rx_handler
[  147.966708][T10011] sctp: [Deprecated]: syz.0.1894 (pid 10011) Use of struct sctp_assoc_value in delayed_ack socket option.
[  147.966708][T10011] Use struct sctp_sack_info instead
[  149.348469][T10079] netlink: 'syz.1.1925': attribute type 1 has an invalid length.
[  149.484661][T10101] syz.1.1936: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  149.491215][T10101] CPU: 0 UID: 0 PID: 10101 Comm: syz.1.1936 Not tainted syzkaller #0 PREEMPT(full) 
[  149.491228][T10101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  149.491234][T10101] Call Trace:
[  149.491238][T10101]  <TASK>
[  149.491242][T10101]  dump_stack_lvl+0xe8/0x150
[  149.491257][T10101]  warn_alloc+0x249/0x340
[  149.491271][T10101]  ? stack_trace_save+0xa9/0x100
[  149.491286][T10101]  ? __pfx_warn_alloc+0x10/0x10
[  149.491302][T10101]  ? kasan_save_track+0x4f/0x80
[  149.491313][T10101]  ? kasan_save_track+0x3e/0x80
[  149.491324][T10101]  ? __kasan_kmalloc+0x93/0xb0
[  149.491335][T10101]  ? __kmalloc_cache_noprof+0x31c/0x660
[  149.491347][T10101]  ? xskq_create+0x56/0x170
[  149.491358][T10101]  ? xsk_setsockopt+0x54c/0x990
[  149.491368][T10101]  ? do_sock_setsockopt+0x17c/0x1b0
[  149.491380][T10101]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  149.491392][T10101]  ? do_syscall_64+0x15f/0xf80
[  149.491401][T10101]  __vmalloc_node_range_noprof+0x132/0x1750
[  149.491427][T10101]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  149.491442][T10101]  ? __kasan_kmalloc+0x93/0xb0
[  149.491462][T10101]  vmalloc_user_noprof+0xad/0xe0
[  149.491473][T10101]  ? xskq_create+0xbf/0x170
[  149.491486][T10101]  xskq_create+0xbf/0x170
[  149.491499][T10101]  xsk_init_queue+0x8a/0xe0
[  149.491512][T10101]  xsk_setsockopt+0x54c/0x990
[  149.491524][T10101]  ? __pfx_xsk_setsockopt+0x10/0x10
[  149.491535][T10101]  ? __pfx_aa_sk_perm+0x10/0x10
[  149.491548][T10101]  ? aa_sock_opt_perm+0xff/0x1a0
[  149.491560][T10101]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  149.491572][T10101]  ? __pfx_xsk_setsockopt+0x10/0x10
[  149.491583][T10101]  do_sock_setsockopt+0x17c/0x1b0
[  149.491597][T10101]  __x64_sys_setsockopt+0x13d/0x1b0
[  149.491610][T10101]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.491634][T10101]  do_syscall_64+0x15f/0xf80
[  149.491643][T10101]  ? trace_irq_disable+0x3b/0x140
[  149.491656][T10101]  ? clear_bhb_loop+0x40/0x90
[  149.491667][T10101]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.491676][T10101] RIP: 0033:0x7f592579cdd9
[  149.491685][T10101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  149.491692][T10101] RSP: 002b:00007f5926744028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  149.491703][T10101] RAX: ffffffffffffffda RBX: 00007f5925a15fa0 RCX: 00007f592579cdd9
[  149.491710][T10101] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  149.491715][T10101] RBP: 00007f5925832d69 R08: 0000000000000004 R09: 0000000000000000
[  149.491720][T10101] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  149.491726][T10101] R13: 00007f5925a16038 R14: 00007f5925a15fa0 R15: 00007ffe33669988
[  149.491740][T10101]  </TASK>
[  149.491768][T10101] Mem-Info:
[  149.506598][T10104] __nla_validate_parse: 2 callbacks suppressed
[  149.506608][T10104] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1937'.
[  149.510407][T10101] active_anon:5553 inactive_anon:0 isolated_anon:0
[  149.510407][T10101]  active_file:12289 inactive_file:38344 isolated_file:0
[  149.510407][T10101]  unevictable:1768 dirty:126 writeback:0
[  149.510407][T10101]  slab_reclaimable:10376 slab_unreclaimable:80652
[  149.510407][T10101]  mapped:18164 shmem:2379 pagetables:956
[  149.510407][T10101]  sec_pagetables:0 bounce:0
[  149.510407][T10101]  kernel_misc_reclaimable:0
[  149.510407][T10101]  free:1128273 free_pcp:24166 free_cma:0
[  149.620314][T10101] Node 0 active_anon:9616kB inactive_anon:0kB active_file:19040kB inactive_file:9192kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37180kB dirty:80kB writeback:0kB shmem:4836kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9208kB pagetables:2180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  149.633535][T10101] Node 1 active_anon:12596kB inactive_anon:0kB active_file:30116kB inactive_file:144184kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35476kB dirty:424kB writeback:0kB shmem:4680kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:2676kB pagetables:1544kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  149.657309][T10101] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  149.672066][T10101] lowmem_reserve[]: 0 1587 2117 2117 2117
[  149.674240][T10101] Node 0 DMA32 free:1566008kB boost:0kB min:25012kB low:31264kB high:37516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:220kB inactive_anon:0kB active_file:5168kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:2080636kB managed:1625244kB mlocked:0kB bounce:0kB free_pcp:23392kB local_pcp:13556kB free_cma:0kB
[  149.686302][T10101] lowmem_reserve[]: 0 0 530 530 530
[  149.688516][T10101] Node 0 Normal free:28400kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9396kB inactive_anon:0kB active_file:13872kB inactive_file:9192kB unevictable:3536kB writepending:80kB zspages:0kB present:1572868kB managed:543152kB mlocked:0kB bounce:0kB free_pcp:4876kB local_pcp:4692kB free_cma:0kB
[  149.714020][T10101] lowmem_reserve[]: 0 0 0 0 0
[  149.716740][T10101] Node 1 Normal free:2904976kB boost:0kB min:56344kB low:70428kB high:84512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12496kB inactive_anon:0kB active_file:30116kB inactive_file:144184kB unevictable:3536kB writepending:424kB zspages:0kB present:3670012kB managed:3594680kB mlocked:0kB bounce:0kB free_pcp:66532kB local_pcp:34980kB free_cma:0kB
[  149.734159][T10101] lowmem_reserve[]: 0 0 0 0 0
[  149.739217][T10101] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  149.743675][T10101] Node 0 DMA32: 136*4kB (UME) 109*8kB (UME) 79*16kB (UM) 168*32kB (UME) 119*64kB (UM) 72*128kB (UME) 48*256kB (UME) 40*512kB (UM) 31*1024kB (UM) 13*2048kB (UME) 354*4096kB (UM) = 1566008kB
[  149.750843][T10101] Node 0 Normal: 880*4kB (UM) 227*8kB (UM) 266*16kB (UM) 372*32kB (UM) 105*64kB (UM) 3*128kB (M) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 29368kB
[  149.756816][T10101] Node 1 Normal: 2067*4kB (UME) 1189*8kB (UME) 248*16kB (UME) 210*32kB (UM) 448*64kB (UME) 217*128kB (UME) 100*256kB (UM) 31*512kB (UME) 23*1024kB (UME) 7*2048kB (U) 671*4096kB (UM) = 2912692kB
[  149.763733][T10101] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  149.768935][T10101] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  149.775417][T10101] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  149.780397][T10101] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  149.787049][T10101] 53014 total pagecache pages
[  149.790678][T10101] 2 pages in swap cache
[  149.793795][T10101] Free swap  = 124988kB
[  149.797367][T10101] Total swap = 124996kB
[  149.800514][T10101] 1834877 pages RAM
[  149.801908][T10101] 0 pages HighMem/MovableOnly
[  149.811709][T10101] 390268 pages reserved
[  149.813228][T10101] 0 pages cma reserved
[  150.006169][T10141] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1953'.
[  150.122130][T10159] tipc: Resetting bearer <eth:batadv0>
[  150.241245][T10172] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1968'.
[  150.549074][T10204] --map-set only usable from mangle table
[  150.583191][T10206] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.595819][T10208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1984'.
[  150.609756][T10208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1984'.
[  150.624665][T10210] netlink: 'syz.0.1986': attribute type 3 has an invalid length.
[  150.700949][T10216] netlink: 'syz.1.1988': attribute type 6 has an invalid length.
[  150.808568][T10225] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.811968][T10225] 8021q: adding VLAN 0 to HW filter on device team0
[  150.819828][T10225] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.862185][T10225] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.868665][T10225] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.874296][T10225] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  150.882258][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.884781][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.891019][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.893119][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.119852][T10252] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2002'.
[  151.569937][T10267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2009'.
[  151.689352][T10277] ip6tnl1: entered allmulticast mode
[  151.799298][T10293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2022'.
[  151.930304][T10313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2032'.
[  152.059596][T10330] xt_hashlimit: size too large, truncated to 1048576
[  152.060138][T10331] netlink: zone id is out of range
[  152.061939][T10330] xt_hashlimit: max too large, truncated to 1048576
[  152.063589][T10331] netlink: zone id is out of range
[  152.191572][T10343] netlink: 'syz.2.2046': attribute type 12 has an invalid length.
[  152.237016][T10345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2047'.
[  152.862071][T10390] nbd: socks must be embedded in a SOCK_ITEM attr
[  152.865443][T10390] block nbd2: shutting down sockets
[  153.153206][ T5667] tipc: Subscription rejected, illegal request
[  154.852019][T10465] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  154.857449][T10465] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  155.123692][T10478] __nla_validate_parse: 3 callbacks suppressed
[  155.123709][T10478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2108'.
[  155.299637][T10492] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2115'.
[  155.311855][T10492] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  155.500293][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2122'.
[  155.585755][T10518] syzkaller1: entered promiscuous mode
[  155.587905][T10518] syzkaller1: entered allmulticast mode
[  155.790904][T10536] netlink: 'syz.2.2132': attribute type 10 has an invalid length.
[  155.793612][T10536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2132'.
[  155.797931][T10536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2132'.
[  155.800853][T10536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2132'.
[  155.891382][T10541] netlink: 'syz.1.2134': attribute type 1 has an invalid length.
[  155.891656][T10542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2135'.
[  155.911023][T10541] 8021q: adding VLAN 0 to HW filter on device bond1
[  155.920632][T10542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2135'.
[  155.924077][T10541] vlan3: entered allmulticast mode
[  155.926963][T10541] bond1: entered allmulticast mode
[  155.950257][T10541] bond1: (slave geneve3): making interface the new active one
[  155.953055][T10541] geneve3: entered allmulticast mode
[  155.958460][T10541] bond1: (slave geneve3): Enslaving as an active interface with an up link
[  156.040505][T10550] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2138'.
[  156.657665][T10622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2172'.
[  156.661032][T10622] netlink: 'syz.2.2172': attribute type 21 has an invalid length.
[  156.713077][T10626] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  156.716524][T10626] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  156.762764][T10632] netlink: 'syz.2.2176': attribute type 10 has an invalid length.
[  156.797898][T10632] team0 (unregistering): Port device team_slave_0 removed
[  156.811794][T10632] team0 (unregistering): Port device team_slave_1 removed
[  156.941132][T10642] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  157.413103][T10675] geneve1: entered promiscuous mode
[  159.533181][T10616] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  160.083507][T10763] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  160.085615][T10763] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  160.188723][T10770] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  160.248251][T10774] : renamed from bond_slave_0
[  160.624169][T10796] __nla_validate_parse: 5 callbacks suppressed
[  160.624184][T10796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2243'.
[  160.630990][T10796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2243'.
[  161.366507][T10820] netlink: 'syz.1.2253': attribute type 1 has an invalid length.
[  161.369438][T10820] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2253'.
[  161.538532][T10822] netlink: 'syz.1.2254': attribute type 1 has an invalid length.
[  161.540522][T10822] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.2254'.
[  161.871443][T10848] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  162.248817][T10870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2278'.
[  162.266921][T10878] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  162.269438][T10878] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  162.384397][T10887] netlink: 'syz.2.2286': attribute type 4 has an invalid length.
[  162.403439][T10887] netlink: 'syz.2.2286': attribute type 4 has an invalid length.
[  162.660531][T10913] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2298'.
[  162.727448][T10917] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  162.734740][T10917] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  162.743629][T10917] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  162.752497][T10917] tipc: Resetting bearer <eth:syzkaller0>
[  162.761739][T10917] tipc: Resetting bearer <eth:syzkaller0>
[  162.862850][T10929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2305'.
[  162.962002][T10937] batadv_slave_0: entered promiscuous mode
[  162.970524][T10936] batadv_slave_0: left promiscuous mode
[  163.077619][T10949] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2316'.
[  163.133041][T10956] netlink: 'syz.2.2319': attribute type 1 has an invalid length.
[  163.434072][T10995] netlink: 'syz.1.2334': attribute type 2 has an invalid length.
[  163.440012][T10995] netlink: 'syz.1.2334': attribute type 1 has an invalid length.
[  163.444239][T10995] netlink: 'syz.1.2334': attribute type 1 has an invalid length.
[  163.531621][T11007] openvswitch: netlink: IP tunnel dst address not specified
[  163.949977][T11046] netlink: 'syz.1.2350': attribute type 3 has an invalid length.
[  164.147989][T11065] netlink: 'syz.2.2359': attribute type 9 has an invalid length.
[  164.304134][T11082] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  164.308430][T11085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2366'.
[  164.485569][T11089] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2367'.
[  164.933121][T11116] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  164.937982][T11116] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  168.295434][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  168.309696][T11137] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  168.622773][T11171] __nla_validate_parse: 1 callbacks suppressed
[  168.622792][T11171] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2397'.
[  168.629955][T11171] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2397'.
[  171.406109][T11153] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  171.409515][T11190] netlink: 'syz.2.2405': attribute type 1 has an invalid length.
[  171.420000][T11190] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2405'.
[  171.537629][T11215] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2416'.
[  171.543515][T11218] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2418'.
[  171.579602][T11218] netlink: 296 bytes leftover after parsing attributes in process `syz.2.2418'.
[  171.883355][T11253] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2433'.
[  171.920011][T11256] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  171.926342][T11256] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  172.043347][T11264] tipc: Resetting bearer <eth:syzkaller0>
[  172.082185][ T2403] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  172.252177][T11279] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2445'.
[  172.324357][T11285] netlink: 'syz.2.2448': attribute type 5 has an invalid length.
[  172.375886][ T2403] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  172.432919][T11296] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2450'.
[  172.436741][T11296] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2450'.
[  172.480111][T11301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  172.520688][T11303] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  172.809617][T11320] netlink: 'syz.2.2462': attribute type 1 has an invalid length.
[  172.833807][T11320] bond3: entered promiscuous mode
[  172.834740][T11324] sock: sock_set_timeout: `syz.0.2464' (pid 11324) tries to set negative timeout
[  172.835984][T11320] 8021q: adding VLAN 0 to HW filter on device bond3
[  172.844439][T11320] bond3: entered allmulticast mode
[  172.857050][T11320] bond3: (slave bridge2): making interface the new active one
[  172.859678][T11320] bridge2: entered promiscuous mode
[  172.861277][T11320] bridge2: entered allmulticast mode
[  172.865823][T11320] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  173.051242][T11343] netlink: 'syz.1.2473': attribute type 6 has an invalid length.
[  173.054239][T11343] netlink: 'syz.1.2473': attribute type 7 has an invalid length.
[  173.057342][T11343] netlink: 'syz.1.2473': attribute type 8 has an invalid length.
[  174.043305][T11417] netlink: 'syz.0.2507': attribute type 6 has an invalid length.
[  174.045776][T11417] netlink: 'syz.0.2507': attribute type 7 has an invalid length.
[  174.047982][T11417] netlink: 'syz.0.2507': attribute type 8 has an invalid length.
[  174.050078][T11417] netlink: 'syz.0.2507': attribute type 15 has an invalid length.
[  174.222699][T11432] __nla_validate_parse: 1 callbacks suppressed
[  174.222714][T11432] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2513'.
[  175.946269][T11505] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2540'.
[  175.957048][T11505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2540'.
[  176.009951][T11512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2543'.
[  176.014875][T11512] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2543'.
[  176.401243][T11545] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2559'.
[  177.009895][T11575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2573'.
[  177.019166][T11575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2573'.
[  177.264383][T11596] netlink: 'syz.2.2582': attribute type 1 has an invalid length.
[  177.300604][T11596] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  177.314360][T11596] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  177.362793][T11610] bond4: (slave gretap2): making interface the new active one
[  177.366438][T11610] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  177.381025][T11610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2582'.
[  177.389008][T11610] macvlan2: entered promiscuous mode
[  177.390607][T11610] macvlan2: entered allmulticast mode
[  177.438516][ T5613] Bluetooth: hci2: link tx timeout
[  177.441105][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.472552][T11615] syzkaller0: entered promiscuous mode
[  177.477680][T11615] syzkaller0: entered allmulticast mode
[  177.527105][ T5604] Bluetooth: hci2: link tx timeout
[  177.528705][ T5604] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.557268][ T5604] Bluetooth: hci2: link tx timeout
[  177.560895][ T5604] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.825666][ T5604] Bluetooth: hci2: link tx timeout
[  177.828140][ T5604] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.844414][ T5604] Bluetooth: hci2: link tx timeout
[  177.845998][ T5604] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.895886][ T5604] Bluetooth: hci2: link tx timeout
[  177.897589][ T5604] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  178.000818][T11669] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  178.212536][T11682] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2612'.
[  178.514131][T11703] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  178.518250][T11703] IPv6: NLM_F_CREATE should be set when creating new route
[  178.520967][T11703] IPv6: NLM_F_CREATE should be set when creating new route
[  178.523842][T11703] IPv6: NLM_F_CREATE should be set when creating new route
[  178.858031][ T5604] Bluetooth: hci2: link tx timeout
[  178.860012][ T5604] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  178.866461][ T5604] Bluetooth: hci2: link tx timeout
[  178.868334][ T5604] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  178.955856][ T5604] Bluetooth: hci2: link tx timeout
[  178.957830][ T5604] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  179.354893][T11760] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2645'.
[  179.362487][T11760] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2645'.
[  179.495357][ T5604] Bluetooth: hci2: command 0x0405 tx timeout
[  179.696307][T11780] netlink: 'syz.2.2654': attribute type 1 has an invalid length.
[  179.761682][T11780] bond5: entered promiscuous mode
[  179.761705][T11783] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2654'.
[  179.766560][T11780] 8021q: adding VLAN 0 to HW filter on device bond5
[  179.782978][T11783] bond5: entered allmulticast mode
[  179.829606][T11780] bond5: (slave bridge3): making interface the new active one
[  179.832425][T11780] bridge3: entered promiscuous mode
[  179.834517][T11780] bridge3: entered allmulticast mode
[  179.839676][T11780] bond5: (slave bridge3): Enslaving as an active interface with an up link
[  179.912442][T11791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2658'.
[  179.963664][T11795] netlink: 'syz.1.2658': attribute type 8 has an invalid length.
[  179.976165][T11791] 8021q: adding VLAN 0 to HW filter on device bond2
[  179.989476][T11794] bridge4: entered promiscuous mode
[  180.006528][T11795] bond2: (slave geneve4): Enslaving as an active interface with an up link
[  180.013061][   T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  180.047579][T11791] bond2 (unregistering): (slave geneve4): Releasing backup interface
[  180.064809][T11791] bond2 (unregistering): Released all slaves
[  180.094817][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  180.238539][T11811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2667'.
[  180.280445][T11811] 8021q: adding VLAN 0 to HW filter on device bond2
[  180.310472][T11811] vlan4: entered promiscuous mode
[  180.313979][T11811] bond2: entered promiscuous mode
[  180.321729][T11811] vlan4: entered allmulticast mode
[  180.323720][T11811] bond2: entered allmulticast mode
[  180.336615][T11811] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2667'.
[  180.360137][T11811] 8021q: adding VLAN 0 to HW filter on device batadv1
[  180.369560][T11811] batadv1: entered promiscuous mode
[  180.372420][T11811] batadv1: entered allmulticast mode
[  180.383485][T11811] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  180.889042][T11874] raw_sendmsg: syz.2.2697 forgot to set AF_INET. Fix it!
[  181.308488][T11887] tipc: Resetting bearer <eth:syzkaller0>
[  181.391359][T11893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2706'.
[  181.468388][T11897] pimreg: tun_chr_ioctl cmd 1074025677
[  181.470632][T11897] pimreg: linktype set to 823
[  181.702660][T11905] netlink: 'syz.2.2711': attribute type 2 has an invalid length.
[  181.872839][T11924] ip6tnl0: Caught tx_queue_len zero misconfig
[  181.877704][T11924] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2721'.
[  182.121671][T11948] pim6reg: entered allmulticast mode
[  182.129005][T11948] pim6reg: left allmulticast mode
[  182.679836][T12006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2759'.
[  182.689741][T12006] bond0: Unable to set up delay as MII monitoring is disabled
[  182.801895][T12016] syzkaller0: mtu less than device minimum
[  182.836169][T12020] netem: change failed
[  183.853134][T12077] netlink: 'syz.1.2795': attribute type 2 has an invalid length.
[  183.856847][T12077] netlink: 'syz.1.2795': attribute type 1 has an invalid length.
[  183.859105][T12077] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2795'.
[  184.448774][T12126] __nla_validate_parse: 1 callbacks suppressed
[  184.448791][T12126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2817'.
[  184.651154][T12138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2824'.
[  184.656670][T12140] lo speed is unknown, defaulting to 1000
[  184.662248][T12140] lo speed is unknown, defaulting to 1000
[  184.670238][T12140] lo speed is unknown, defaulting to 1000
[  184.674429][T12140] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  184.680884][T12140] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  184.687114][T12140] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  184.694574][T12140] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  184.704206][T12140] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  184.741135][T12140] lo speed is unknown, defaulting to 1000
[  184.745901][T12140] lo speed is unknown, defaulting to 1000
[  184.748914][T12140] lo speed is unknown, defaulting to 1000
[  184.822267][T12144] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2826'.
[  185.078331][T12173] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2840'.
[  185.095315][T12173] netlink: 'syz.2.2840': attribute type 1 has an invalid length.
[  185.206633][T12179] netlink: 'syz.0.2843': attribute type 2 has an invalid length.
[  185.209824][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2843'.
[  185.217887][T12179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  185.281629][T12186] Bluetooth: hci0: Opcode 0x080f failed: -22
[  186.053515][T12225] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2864'.
[  186.058689][T12225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2864'.
[  186.167296][T12232] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2866'.
[  186.795716][T12253] ip6gretap1: entered promiscuous mode
[  186.861237][T12255] dvmrp1: tun_chr_ioctl cmd 1074025677
[  186.863902][T12255] dvmrp1: linktype set to 804
[  187.656297][ T5613] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  188.122066][T12282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2885'.
[  188.223911][T12288] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2889'.
[  188.620359][T12315] lo speed is unknown, defaulting to 1000
[  189.392336][T12341] veth0_to_batadv: left allmulticast mode
[  189.410156][T12341] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  189.414680][T12341] veth1_vlan: left promiscuous mode
[  189.427931][T12341] veth0_vlan: left promiscuous mode
[  189.430852][T12341] veth0_vlan: entered promiscuous mode
[  189.440388][T12341] veth1_vlan: entered promiscuous mode
[  189.444635][T12341] ipvlan0: left allmulticast mode
[  189.449844][T12341] veth0_vlan: left allmulticast mode
[  189.458128][T12341] bridge0: port 3(vlan2) entered blocking state
[  189.460550][T12341] bridge0: port 3(vlan2) entered listening state
[  189.466114][T12341] __nla_validate_parse: 56 callbacks suppressed
[  189.466129][T12341] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2909'.
[  189.472447][T12341] geneve1: left promiscuous mode
[  189.476874][T12341] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2909'.
[  189.480560][T12341] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  189.483467][T12341] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  189.511939][ T5638] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  189.519473][ T5638] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  189.527630][ T5638] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  189.535634][ T5638] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  189.653639][T12355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2915'.
[  189.697900][T12358] Cannot find set identified by id 65534 to match
[  189.826607][T12358] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2916'.
[  189.835905][T12358] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2916'.
[  189.938047][T12374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2920'.
[  189.942048][T12374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2920'.
[  190.167648][T12394] netlink: 'syz.1.2930': attribute type 1 has an invalid length.
[  190.171084][T12394] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2930'.
[  190.570945][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2939'.
[  190.628881][T12418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2941'.
[  190.670992][ T6483] block nbd2: Receive control failed (result -1)
[  191.130298][T12437] netlink: 'syz.2.2949': attribute type 27 has an invalid length.
[  191.158580][T12439] nbd: must specify a size in bytes for the device
[  191.495437][ T5613] Bluetooth: hci1: command 0x0406 tx timeout
[  191.511756][ T5604] 
[  191.512519][ T5604] ======================================================
[  191.514486][ T5604] WARNING: possible circular locking dependency detected
[  191.516442][ T5604] syzkaller #0 Not tainted
[  191.517804][ T5604] ------------------------------------------------------
[  191.519833][ T5604] kworker/u11:2/5604 is trying to acquire lock:
[  191.521784][ T5604] ffff8881012ac980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140
[  191.525068][ T5604] 
[  191.525068][ T5604] but task is already holding lock:
[  191.527705][ T5604] ffff8881012acaa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140
[  191.531419][ T5604] 
[  191.531419][ T5604] which lock already depends on the new lock.
[  191.531419][ T5604] 
[  191.534934][ T5604] 
[  191.534934][ T5604] the existing dependency chain (in reverse order) is:
[  191.538027][ T5604] 
[  191.538027][ T5604] -> #11 (&root->kernfs_supers_rwsem){++++}-{4:4}:
[  191.541203][ T5604]        down_read+0x47/0x2e0
[  191.542955][ T5604]        kernfs_remove_by_name_ns+0x3f/0x140
[  191.545132][ T5604]        internal_create_group+0x587/0x1180
[  191.547310][ T5604]        sysfs_update_groups+0x60/0x130
[  191.549334][ T5604]        pmu_dev_alloc+0x29b/0x300
[  191.551098][ T5604]        perf_event_sysfs_init+0x76/0x100
[  191.553276][ T5604]        do_one_initcall+0x250/0x870
[  191.555346][ T5604]        do_initcall_level+0x104/0x190
[  191.557484][ T5604]        do_initcalls+0x59/0xa0
[  191.559398][ T5604]        kernel_init_freeable+0x2a6/0x3e0
[  191.561647][ T5604]        kernel_init+0x1d/0x1d0
[  191.563575][ T5604]        ret_from_fork+0x514/0xb70
[  191.565582][ T5604]        ret_from_fork_asm+0x1a/0x30
[  191.567650][ T5604] 
[  191.567650][ T5604] -> #10 (pmus_lock){+.+.}-{4:4}:
[  191.570483][ T5604]        __mutex_lock+0x1a3/0x1550
[  191.572425][ T5604]        perf_event_init_cpu+0x1df/0x7c0
[  191.574497][ T5604]        cpuhp_invoke_callback+0x445/0x860
[  191.576609][ T5604]        cpuhp_thread_fun+0x36b/0x780
[  191.578724][ T5604]        smpboot_thread_fn+0x541/0xa50
[  191.580807][ T5604]        kthread+0x388/0x470
[  191.582615][ T5604]        ret_from_fork+0x514/0xb70
[  191.584583][ T5604]        ret_from_fork_asm+0x1a/0x30
[  191.586633][ T5604] 
[  191.586633][ T5604] -> #9 (cpuhp_state-up){+.+.}-{0:0}:
[  191.589541][ T5604]        cpuhp_thread_fun+0x127/0x780
[  191.591631][ T5604]        smpboot_thread_fn+0x541/0xa50
[  191.593770][ T5604]        kthread+0x388/0x470
[  191.595563][ T5604]        ret_from_fork+0x514/0xb70
[  191.597536][ T5604]        ret_from_fork_asm+0x1a/0x30
[  191.599717][ T5604] 
[  191.599717][ T5604] -> #8 (cpu_hotplug_lock){++++}-{0:0}:
[  191.602699][ T5604]        cpus_read_lock+0x42/0x160
[  191.604685][ T5604]        static_key_slow_inc+0x12/0x30
[  191.606788][ T5604]        setup_udp_tunnel_sock+0x2df/0x4f0
[  191.609043][ T5604]        l2tp_tunnel_register+0xe72/0x1570
[  191.611427][ T5604]        pppol2tp_connect+0x8b7/0x17c0
[  191.613578][ T5604]        __sys_connect+0x312/0x450
[  191.615564][ T5604]        __x64_sys_connect+0x7a/0x90
[  191.617597][ T5604]        do_syscall_64+0x15f/0xf80
[  191.619585][ T5604]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.622058][ T5604] 
[  191.622058][ T5604] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  191.625046][ T5604]        lock_sock_nested+0x41/0x100
[  191.627088][ T5604]        inet_shutdown+0x6a/0x390
[  191.629047][ T5604]        nbd_mark_nsock_dead+0x2e9/0x560
[  191.631190][ T5604]        recv_work+0x1c2e/0x1d40
[  191.633126][ T5604]        process_scheduled_works+0xb5d/0x1860
[  191.635487][ T5604]        worker_thread+0xa53/0xfc0
[  191.637483][ T5604]        kthread+0x388/0x470
[  191.639268][ T5604]        ret_from_fork+0x514/0xb70
[  191.641144][ T5604]        ret_from_fork_asm+0x1a/0x30
[  191.643126][ T5604] 
[  191.643126][ T5604] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  191.645921][ T5604]        __mutex_lock+0x1a3/0x1550
[  191.647914][ T5604]        nbd_queue_rq+0x37b/0x1100
[  191.649798][ T5604]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  191.652141][ T5604]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  191.654571][ T5604]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  191.656305][ T5604]        blk_mq_run_hw_queue+0x348/0x4f0
[  191.657855][ T5604]        blk_mq_dispatch_list+0xd16/0xe10
[  191.659456][ T5604]        blk_mq_flush_plug_list+0x48d/0x570
[  191.661156][ T5604]        __blk_flush_plug+0x3ed/0x4d0
[  191.663067][ T5604]        __submit_bio+0x28d/0x580
[  191.664797][ T5604]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  191.666683][ T5604]        block_read_full_folio+0x599/0x830
[  191.668373][ T5604]        filemap_read_folio+0x137/0x3b0
[  191.669995][ T5604]        do_read_cache_folio+0x358/0x590
[  191.671625][ T5604]        read_part_sector+0xb6/0x2b0
[  191.673306][ T5604]        adfspart_check_ICS+0xb1/0x960
[  191.675266][ T5604]        bdev_disk_changed+0x817/0x1770
[  191.677175][ T5604]        blkdev_get_whole+0x380/0x510
[  191.679088][ T5604]        bdev_open+0x31e/0xd30
[  191.680893][ T5604]        blkdev_open+0x470/0x610
[  191.682538][ T5604]        do_dentry_open+0x785/0x14e0
[  191.684102][ T5604]        vfs_open+0x3b/0x340
[  191.685390][ T5604]        path_openat+0x2e08/0x3860
[  191.686890][ T5604]        do_file_open+0x23e/0x4a0
[  191.688386][ T5604]        do_sys_openat2+0x113/0x200
[  191.689931][ T5604]        __x64_sys_openat+0x138/0x170
[  191.691500][ T5604]        do_syscall_64+0x15f/0xf80
[  191.692986][ T5604]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.694937][ T5604] 
[  191.694937][ T5604] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  191.697039][ T5604]        __mutex_lock+0x1a3/0x1550
[  191.698564][ T5604]        nbd_queue_rq+0xc6/0x1100
[  191.700263][ T5604]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  191.702245][ T5604]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  191.704342][ T5604]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  191.706296][ T5604]        blk_mq_run_hw_queue+0x348/0x4f0
[  191.707966][ T5604]        blk_mq_dispatch_list+0xd16/0xe10
[  191.709649][ T5604]        blk_mq_flush_plug_list+0x48d/0x570
[  191.711575][ T5604]        __blk_flush_plug+0x3ed/0x4d0
[  191.713163][ T5604]        __submit_bio+0x28d/0x580
[  191.714685][ T5604]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  191.716605][ T5604]        block_read_full_folio+0x599/0x830
[  191.718314][ T5604]        filemap_read_folio+0x137/0x3b0
[  191.719972][ T5604]        do_read_cache_folio+0x358/0x590
[  191.721614][ T5604]        read_part_sector+0xb6/0x2b0
[  191.723154][ T5604]        adfspart_check_ICS+0xb1/0x960
[  191.724810][ T5604]        bdev_disk_changed+0x817/0x1770
[  191.726460][ T5604]        blkdev_get_whole+0x380/0x510
[  191.728081][ T5604]        bdev_open+0x31e/0xd30
[  191.729523][ T5604]        blkdev_open+0x470/0x610
[  191.731057][ T5604]        do_dentry_open+0x785/0x14e0
[  191.732828][ T5604]        vfs_open+0x3b/0x340
[  191.734476][ T5604]        path_openat+0x2e08/0x3860
[  191.736213][ T5604]        do_file_open+0x23e/0x4a0
[  191.737974][ T5604]        do_sys_openat2+0x113/0x200
[  191.739856][ T5604]        __x64_sys_openat+0x138/0x170
[  191.741790][ T5604]        do_syscall_64+0x15f/0xf80
[  191.743641][ T5604]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.745826][ T5604] 
[  191.745826][ T5604] -> #4 (set->srcu){.+.+}-{0:0}:
[  191.748350][ T5604]        __synchronize_srcu+0xca/0x300
[  191.750320][ T5604]        elevator_switch+0x1e8/0x7a0
[  191.752211][ T5604]        elevator_change+0x2cc/0x450
[  191.754092][ T5604]        elevator_set_default+0x36c/0x430
[  191.756047][ T5604]        blk_register_queue+0x3e9/0x4e0
[  191.757818][ T5604]        __add_disk+0x677/0xd50
[  191.759232][ T5604]        add_disk_fwnode+0xfb/0x480
[  191.760912][ T5604]        nbd_dev_add+0x72c/0xb50
[  191.762729][ T5604]        nbd_init+0x168/0x1f0
[  191.764854][ T5604]        do_one_initcall+0x250/0x870
[  191.766788][ T5604]        do_initcall_level+0x104/0x190
[  191.768580][ T5604]        do_initcalls+0x59/0xa0
[  191.769852][ T5604]        kernel_init_freeable+0x2a6/0x3e0
[  191.771450][ T5604]        kernel_init+0x1d/0x1d0
[  191.772826][ T5604]        ret_from_fork+0x514/0xb70
[  191.774285][ T5604]        ret_from_fork_asm+0x1a/0x30
[  191.775753][ T5604] 
[  191.775753][ T5604] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  191.777909][ T5604]        __mutex_lock+0x1a3/0x1550
[  191.779348][ T5604]        elevator_change+0x1b3/0x450
[  191.780886][ T5604]        elevator_set_none+0xb5/0x140
[  191.782472][ T5604]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  191.784503][ T5604]        nbd_start_device+0x17f/0xb10
[  191.786481][ T5604]        nbd_genl_connect+0x165b/0x1cf0
[  191.788552][ T5604]        genl_family_rcv_msg_doit+0x22a/0x330
[  191.790793][ T5604]        genl_rcv_msg+0x61c/0x7a0
[  191.792636][ T5604]        netlink_rcv_skb+0x232/0x4b0
[  191.794480][ T5604]        genl_rcv+0x28/0x40
[  191.796160][ T5604]        netlink_unicast+0x75c/0x8e0
[  191.798406][ T5604]        netlink_sendmsg+0x813/0xb40
[  191.800581][ T5604]        ____sys_sendmsg+0x972/0x9f0
[  191.802586][ T5604]        ___sys_sendmsg+0x2a5/0x360
[  191.804508][ T5604]        __x64_sys_sendmsg+0x1bd/0x2a0
[  191.806572][ T5604]        do_syscall_64+0x15f/0xf80
[  191.808463][ T5604]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.810905][ T5604] 
[  191.810905][ T5604] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  191.814054][ T5604]        blk_alloc_queue+0x546/0x680
[  191.815989][ T5604]        __blk_mq_alloc_disk+0x197/0x390
[  191.818062][ T5604]        nbd_dev_add+0x499/0xb50
[  191.819898][ T5604]        nbd_init+0x168/0x1f0
[  191.821720][ T5604]        do_one_initcall+0x250/0x870
[  191.823656][ T5604]        do_initcall_level+0x104/0x190
[  191.825519][ T5604]        do_initcalls+0x59/0xa0
[  191.827353][ T5604]        kernel_init_freeable+0x2a6/0x3e0
[  191.829494][ T5604]        kernel_init+0x1d/0x1d0
[  191.831314][ T5604]        ret_from_fork+0x514/0xb70
[  191.833147][ T5604]        ret_from_fork_asm+0x1a/0x30
[  191.835117][ T5604] 
[  191.835117][ T5604] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  191.837819][ T5604]        fs_reclaim_acquire+0x71/0x100
[  191.839880][ T5604]        kmem_cache_alloc_lru_noprof+0x45/0x640
[  191.842218][ T5604]        alloc_inode+0xb8/0x1b0
[  191.844032][ T5604]        iget_locked+0x131/0x6a0
[  191.845875][ T5604]        kernfs_get_inode+0x4f/0x780
[  191.847797][ T5604]        kernfs_get_tree+0x5cd/0x980
[  191.849660][ T5604]        sysfs_get_tree+0x46/0x110
[  191.851452][ T5604]        vfs_get_tree+0x92/0x2a0
[  191.853204][ T5604]        do_new_mount+0x341/0xd30
[  191.854970][ T5604]        __se_sys_mount+0x31d/0x420
[  191.856820][ T5604]        do_syscall_64+0x15f/0xf80
[  191.858609][ T5604]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.860926][ T5604] 
[  191.860926][ T5604] -> #0 (&root->kernfs_rwsem){++++}-{4:4}:
[  191.863816][ T5604]        __lock_acquire+0x15a5/0x2cf0
[  191.865811][ T5604]        lock_acquire+0x106/0x350
[  191.867585][ T5604]        down_write+0x96/0x200
[  191.869395][ T5604]        kernfs_remove_by_name_ns+0x4e/0x140
[  191.871568][ T5604]        sysfs_unmerge_group+0xd4/0x140
[  191.873523][ T5604]        dpm_sysfs_remove+0x5f/0xd0
[  191.875453][ T5604]        device_del+0x250/0x8f0
[  191.877278][ T5604]        device_unregister+0x21/0xf0
[  191.879272][ T5604]        hci_conn_del+0xc36/0x1230
[  191.881171][ T5604]        hci_abort_conn_sync+0xdd0/0x1190
[  191.883389][ T5604]        hci_cmd_sync_work+0x213/0x400
[  191.885394][ T5604]        process_scheduled_works+0xb5d/0x1860
[  191.887638][ T5604]        worker_thread+0xa53/0xfc0
[  191.889552][ T5604]        kthread+0x388/0x470
[  191.891301][ T5604]        ret_from_fork+0x514/0xb70
[  191.893239][ T5604]        ret_from_fork_asm+0x1a/0x30
[  191.895522][ T5604] 
[  191.895522][ T5604] other info that might help us debug this:
[  191.895522][ T5604] 
[  191.900076][ T5604] Chain exists of:
[  191.900076][ T5604]   &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem
[  191.900076][ T5604] 
[  191.905779][ T5604]  Possible unsafe locking scenario:
[  191.905779][ T5604] 
[  191.908848][ T5604]        CPU0                    CPU1
[  191.911213][ T5604]        ----                    ----
[  191.913586][ T5604]   rlock(&root->kernfs_supers_rwsem);
[  191.916076][ T5604]                                lock(pmus_lock);
[  191.919118][ T5604]                                lock(&root->kernfs_supers_rwsem);
[  191.922253][ T5604]   lock(&root->kernfs_rwsem);
[  191.924316][ T5604] 
[  191.924316][ T5604]  *** DEADLOCK ***
[  191.924316][ T5604] 
[  191.928150][ T5604] 5 locks held by kworker/u11:2/5604:
[  191.930651][ T5604]  #0: ffff88816f083140 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  191.935300][ T5604]  #1: ffffc900045dfc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  191.941010][ T5604]  #2: ffff8881b9d0cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400
[  191.945513][ T5604]  #3: ffff8881b9d0c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190
[  191.949909][ T5604]  #4: ffff8881012acaa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140
[  191.955104][ T5604] 
[  191.955104][ T5604] stack backtrace:
[  191.957894][ T5604] CPU: 0 UID: 0 PID: 5604 Comm: kworker/u11:2 Not tainted syzkaller #0 PREEMPT(full) 
[  191.957912][ T5604] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  191.957922][ T5604] Workqueue: hci1 hci_cmd_sync_work
[  191.957949][ T5604] Call Trace:
[  191.957957][ T5604]  <TASK>
[  191.957964][ T5604]  dump_stack_lvl+0xe8/0x150
[  191.957980][ T5604]  print_circular_bug+0x2e1/0x300
[  191.957999][ T5604]  check_noncircular+0x12e/0x150
[  191.958018][ T5604]  __lock_acquire+0x15a5/0x2cf0
[  191.958038][ T5604]  ? kernfs_remove_by_name_ns+0x4e/0x140
[  191.958058][ T5604]  lock_acquire+0x106/0x350
[  191.958071][ T5604]  ? kernfs_remove_by_name_ns+0x4e/0x140
[  191.958094][ T5604]  down_write+0x96/0x200
[  191.958108][ T5604]  ? kernfs_remove_by_name_ns+0x4e/0x140
[  191.958126][ T5604]  ? __pfx_down_write+0x10/0x10
[  191.958139][ T5604]  ? down_read+0x270/0x2e0
[  191.958152][ T5604]  kernfs_remove_by_name_ns+0x4e/0x140
[  191.958202][ T5604]  sysfs_unmerge_group+0xd4/0x140
[  191.958223][ T5604]  dpm_sysfs_remove+0x5f/0xd0
[  191.958243][ T5604]  device_del+0x250/0x8f0
[  191.958258][ T5604]  ? klist_iter_exit+0xc1/0x100
[  191.958273][ T5604]  ? __pfx_skb_queue_purge_reason+0x10/0x10
[  191.958290][ T5604]  ? __pfx_device_del+0x10/0x10
[  191.958306][ T5604]  ? __pfx_autoremove_wake_function+0x10/0x10
[  191.958328][ T5604]  device_unregister+0x21/0xf0
[  191.958344][ T5604]  hci_conn_del+0xc36/0x1230
[  191.958362][ T5604]  ? hci_abort_conn_sync+0xa7b/0x1190
[  191.958380][ T5604]  hci_abort_conn_sync+0xdd0/0x1190
[  191.958399][ T5604]  ? __pfx_hci_abort_conn_sync+0x10/0x10
[  191.958417][ T5604]  ? abort_conn_sync+0x26/0x210
[  191.958437][ T5604]  ? abort_conn_sync+0x26/0x210
[  191.958455][ T5604]  ? abort_conn_sync+0x19c/0x210
[  191.958473][ T5604]  ? __pfx_abort_conn_sync+0x10/0x10
[  191.958491][ T5604]  hci_cmd_sync_work+0x213/0x400
[  191.958514][ T5604]  ? process_scheduled_works+0xa70/0x1860
[  191.958529][ T5604]  process_scheduled_works+0xb5d/0x1860
[  191.958549][ T5604]  ? __pfx_process_scheduled_works+0x10/0x10
[  191.958564][ T5604]  ? assign_work+0x3d5/0x5e0
[  191.958577][ T5604]  worker_thread+0xa53/0xfc0
[  191.958595][ T5604]  kthread+0x388/0x470
[  191.958613][ T5604]  ? __pfx_worker_thread+0x10/0x10
[  191.958626][ T5604]  ? __pfx_kthread+0x10/0x10
[  191.958644][ T5604]  ret_from_fork+0x514/0xb70
[  191.958660][ T5604]  ? __pfx_ret_from_fork+0x10/0x10
[  191.958680][ T5604]  ? __switch_to+0xc79/0x1410
[  191.958700][ T5604]  ? __pfx_kthread+0x10/0x10
[  191.958717][ T5604]  ret_from_fork_asm+0x1a/0x30
[  191.958736][ T5604]  </TASK>
[  199.657688][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
