last executing test programs:

1.857293547s ago: executing program 1 (id=5081):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000}], 0x1, 0x0)
recvfrom(r1, &(0x7f00000000c0)=""/74, 0x4a, 0x0, 0x0, 0x0)

1.854175782s ago: executing program 1 (id=5083):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

1.780077426s ago: executing program 1 (id=5086):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
syz_genetlink_get_family_id$nfc(0x0, r0)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r2], 0x7c}}, 0x20000000)

1.448090695s ago: executing program 1 (id=5095):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="74000000000101042100000000000000020000002400018014000180080001000c00028005000100"], 0x74}, 0x1, 0x0, 0x0, 0x8d7f1b7f2655125c}, 0x0)

1.370829867s ago: executing program 1 (id=5097):
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x9, 0x8, 0x1}, 0x48)

1.290974704s ago: executing program 0 (id=5098):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [{{0x254, 0x1, {{0x2, 0x200}, 0x80, 0x9, 0x4, 0x1, 0x16, 'syz1\x00', "9f95cf5a03ab4df3f0f3d0941074d2f18faf184d23b6cf52e8c676c218b39b33", "5a19d528faa003da54c821603e499a3e11b3efe2be7aafa9680b20a26883ac0a", [{0x864b, 0x6, {0x2, 0x3ff}}, {0x3, 0x3, {0x2, 0x3}}, {0x2, 0x28, {0x3, 0x3}}, {0x7, 0xfff8, {0x1, 0x1}}, {0x9d40, 0x2, {0x1, 0x8}}, {0xca, 0xc4f2, {0x3, 0xe02f}}, {0xfffa, 0x17, {0x3, 0x80}}, {0x9, 0x8001, {0x1, 0x3}}, {0x2, 0x9, {0x1, 0xfffffffd}}, {0x200, 0x3, {0x0, 0x4}}, {0x7, 0x80, {0x3, 0x8}}, {0xb1, 0x0, {0x1, 0x5}}, {0x1, 0x2dc, {0x3, 0x3}}, {0xffff, 0x8, {0x3, 0xb}}, {0x9, 0x96}, {0x2, 0x2, {0x1, 0x9}}, {0x6, 0x7, {0x2, 0x3}}, {0x5, 0x5, {0x1, 0x67}}, {0xffd6, 0x1d97, {0x3}}, {0x8, 0xdb4d, {0x2, 0xffffffff}}, {0x3, 0x7fff, {0x0, 0x2}}, {0x401, 0xc, {0x3, 0x10001}}, {0x21, 0x9, {0x2, 0x2}}, {0x3, 0x6, {0x3, 0x5}}, {0x2, 0x200, {0x3, 0x5}}, {0x7, 0x1, {0x2, 0xa6}}, {0x3, 0x101, {0x2, 0x7}}, {0x2, 0x1, {0x3, 0xffffffff}}, {0x6, 0x81, {0x0, 0x6}}, {0xd, 0xc3e, {0x2, 0x1}}, {0x0, 0x84d, {0x1, 0x1}}, {0x5, 0x65, {0x2, 0xfffffffb}}, {0x7, 0x4, {0x2, 0x1}}, {0x1, 0x40, {0x0, 0x1}}, {0xfed9, 0x6, {0x3, 0x1}}, {0x40, 0x6, {0x1, 0xff800000}}, {0x370d, 0x800, {0x1, 0x4}}, {0x101, 0x8, {0x3, 0x10001}}, {0x5, 0x3, {0x2}}, {0x401, 0x5, {0x3, 0x2}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40}, 0x80)

1.290567823s ago: executing program 0 (id=5100):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x10}, 0xa)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000240)=0x20)

1.287836683s ago: executing program 1 (id=5101):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@ifindex, 0xffffffffffffffff, 0x2e, 0x2004}, 0x20)
close(r0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x6, @none}, 0xe)
connect$bt_l2cap(r1, &(0x7f0000000380)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000240)={0xbf, 0x99, 0x9c, 0x3, 0x0, 0x5, 0xfb, 0x5, 0xec, 0xff, 0x83, 0x84, 0x8, 0x7}, 0xe)
sendto$inet6(r2, &(0x7f0000000040)='T', 0x1, 0x4001, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000080)=0x90f1, 0x4)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4)
shutdown(r2, 0x1)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/214, 0xd6}], 0x1}, 0x5}], 0x1, 0x20, 0x0)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000340), &(0x7f00000003c0)=0x4)
recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x810, 0xffffffffffffffff, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10)
bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0xffffffff}}}, 0x10)
bind$tipc(r4, &(0x7f0000000440)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x1}}, 0x10)
bind$tipc(r4, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0xfffffffffffff801], 0x0, 0x0, 0x100000}}, 0x40)

430.993205ms ago: executing program 2 (id=5112):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200004e000000000000000000000085000000530000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0xfffffdb0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

380.912187ms ago: executing program 0 (id=5113):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0)
close(r8)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
r9 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4)

330.175663ms ago: executing program 2 (id=5114):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffd38, &(0x7f0000000040)={&(0x7f0000000280)={0x20, 0x1, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff}}]}, 0x20}}, 0x0)

250.843291ms ago: executing program 2 (id=5115):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_macvtap\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x101, 0x1ff}})

200.722312ms ago: executing program 2 (id=5116):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x9c, 0x6, 0x80, 0x1, 0x4e, 0x9, 0x61, 0xff, 0x5, 0x7, 0x8, 0x7, 0x1, 0x9}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={<r1=>0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xdcdf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, 0x10000}]}, &(0x7f0000000000)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000200)={r1}, &(0x7f0000000100)=0x8)

131.06411ms ago: executing program 2 (id=5117):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000700)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030027bd7000fddbdf251b00000008000300", @ANYRES32=r3, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0)

130.826086ms ago: executing program 0 (id=5118):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x7, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001}, [@map_fd={0x18, 0x8, 0x1, 0x0, r0}, @map_fd={0x18, 0x7, 0x1, 0x0, r0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)

71.118791ms ago: executing program 0 (id=5119):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r2, @ANYBLOB="1000018004000480080007"], 0x28}}, 0x0)

824.043µs ago: executing program 2 (id=5120):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80)
close(r1)
socket$kcm(0x29, 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xf03a0005)

0s ago: executing program 0 (id=5121):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:28902' (ED25519) to the list of known hosts.
syzkaller login: [   58.006170][ T5569] cgroup: Unknown subsys name 'net'
[   58.092408][ T5569] cgroup: Unknown subsys name 'cpuset'
[   58.098185][ T5569] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.792740][ T5569] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.711035][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.716589][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.719512][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.722547][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.725422][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.795573][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.799697][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.803355][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.806671][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.811506][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.834616][ T5001] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.841762][ T5001] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.847024][ T5001] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.850611][ T5001] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.853596][ T5001] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.636976][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.639646][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.641735][ T5613] bridge_slave_0: entered allmulticast mode
[   65.644381][ T5613] bridge_slave_0: entered promiscuous mode
[   65.650674][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.653262][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.656143][ T5613] bridge_slave_1: entered allmulticast mode
[   65.660178][ T5613] bridge_slave_1: entered promiscuous mode
[   65.677593][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.680536][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.683626][ T5620] bridge_slave_0: entered allmulticast mode
[   65.687053][ T5620] bridge_slave_0: entered promiscuous mode
[   65.722846][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.725717][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.729352][ T5620] bridge_slave_1: entered allmulticast mode
[   65.733271][ T5620] bridge_slave_1: entered promiscuous mode
[   65.739078][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.772290][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.775405][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.777637][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.780146][ T5624] bridge_slave_0: entered allmulticast mode
[   65.782870][ T5624] bridge_slave_0: entered promiscuous mode
[   65.806978][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.810789][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.813344][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.815870][ T5624] bridge_slave_1: entered allmulticast mode
[   65.819382][ T5624] bridge_slave_1: entered promiscuous mode
[   65.831097][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.843629][ T5613] team0: Port device team_slave_0 added
[   65.867291][ T5613] team0: Port device team_slave_1 added
[   65.879372][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.885739][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.904494][ T5620] team0: Port device team_slave_0 added
[   65.930141][ T5620] team0: Port device team_slave_1 added
[   65.947890][ T5624] team0: Port device team_slave_0 added
[   65.950510][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.953878][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.962786][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.981972][ T5624] team0: Port device team_slave_1 added
[   65.984572][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.987429][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.996435][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.034819][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.037593][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.045358][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.051432][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.053524][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.061250][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.065914][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.068846][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.078345][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.083225][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.085392][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.093767][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.133591][ T5613] hsr_slave_0: entered promiscuous mode
[   66.136208][ T5613] hsr_slave_1: entered promiscuous mode
[   66.185314][ T5624] hsr_slave_0: entered promiscuous mode
[   66.188689][ T5624] hsr_slave_1: entered promiscuous mode
[   66.192808][ T5624] debugfs: 'hsr0' already exists in 'hsr'
[   66.195104][ T5624] Cannot create hsr debugfs directory
[   66.225892][ T5620] hsr_slave_0: entered promiscuous mode
[   66.229455][ T5620] hsr_slave_1: entered promiscuous mode
[   66.232562][ T5620] debugfs: 'hsr0' already exists in 'hsr'
[   66.234855][ T5620] Cannot create hsr debugfs directory
[   66.636509][ T5613] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.649604][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   66.652472][ T5613] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.659723][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   66.665515][ T5613] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.674840][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   66.694071][ T5613] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.700768][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   66.743287][ T5620] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.750633][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   66.755755][ T5620] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.760923][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   66.765444][ T5620] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.769306][   T54] Bluetooth: hci0: command tx timeout
[   66.774067][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   66.793400][ T5620] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.798434][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   66.847267][ T5624] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.852861][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   66.859285][   T54] Bluetooth: hci1: command tx timeout
[   66.864205][ T5624] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.869341][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   66.872818][ T5624] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.876797][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   66.879920][ T5624] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.885345][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   66.927923][   T54] Bluetooth: hci2: command tx timeout
[   66.990393][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.026439][ T5613] 8021q: adding VLAN 0 to HW filter on device team0
[   67.034988][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.045768][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.048229][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.069433][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.072136][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.086017][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.098665][ T5620] 8021q: adding VLAN 0 to HW filter on device team0
[   67.111830][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.114615][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.126269][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.128408][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.157525][ T5624] 8021q: adding VLAN 0 to HW filter on device team0
[   67.185764][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.188461][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.221056][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.223805][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.614116][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.687110][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.690148][ T5613] veth0_vlan: entered promiscuous mode
[   67.723429][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.729787][ T5613] veth1_vlan: entered promiscuous mode
[   67.772484][ T5624] veth0_vlan: entered promiscuous mode
[   67.788909][ T5624] veth1_vlan: entered promiscuous mode
[   67.814699][ T5613] veth0_macvtap: entered promiscuous mode
[   67.830538][ T5620] veth0_vlan: entered promiscuous mode
[   67.836671][ T5613] veth1_macvtap: entered promiscuous mode
[   67.859885][ T5624] veth0_macvtap: entered promiscuous mode
[   67.866654][ T5620] veth1_vlan: entered promiscuous mode
[   67.871328][ T5624] veth1_macvtap: entered promiscuous mode
[   67.893518][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.905902][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.912280][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.922050][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.939503][ T5471] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.946781][ T5471] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.961053][ T5471] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.965189][ T5471] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.982907][ T5471] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.992090][ T5620] veth0_macvtap: entered promiscuous mode
[   67.995880][ T5471] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.000637][ T5471] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.004471][ T5471] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.022658][ T5620] veth1_macvtap: entered promiscuous mode
[   68.094631][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.109260][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.153868][ T5668] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.160731][ T5668] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.174769][ T5668] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.183079][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.187321][ T5668] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.190892][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.231226][  T170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.239609][  T170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.265377][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.269490][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.313520][   T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.318084][   T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.361467][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.364853][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.392518][ T5613] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.426298][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.437525][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.633294][ T5731] netlink: 'syz.0.1': attribute type 21 has an invalid length.
[   68.858455][   T54] Bluetooth: hci0: command tx timeout
[   68.929474][   T54] Bluetooth: hci1: command tx timeout
[   69.008116][   T54] Bluetooth: hci2: command tx timeout
[   69.211353][ T5762] xt_hashlimit: overflow, try lower: 6/0
[   69.255607][ T5764] warning: `syz.2.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   70.412968][ T5801] netlink: 56 bytes leftover after parsing attributes in process `syz.1.31'.
[   70.634232][ T5817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40'.
[   70.711146][ T5822] netlink: 20 bytes leftover after parsing attributes in process `syz.0.40'.
[   70.927974][   T54] Bluetooth: hci0: command tx timeout
[   71.009026][   T54] Bluetooth: hci1: command tx timeout
[   71.089521][   T54] Bluetooth: hci2: command tx timeout
[   71.875601][ T5840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'.
[   71.879962][ T5840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'.
[   72.010788][ T5844] syz.2.53 uses obsolete (PF_INET,SOCK_PACKET)
[   72.269384][ T5860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.57'.
[   72.510589][ T5870] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[   72.517525][ T5870] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[   72.528064][ T5870] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[   72.540088][ T5870] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   72.565288][ T5870] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   72.630794][ T5879] netlink: 24 bytes leftover after parsing attributes in process `syz.0.64'.
[   72.702088][ T3417] smbdirect: ib_dev[syz2] removed
[   73.010336][   T54] Bluetooth: hci0: command tx timeout
[   73.060364][ T5911] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   73.088290][   T54] Bluetooth: hci1: command tx timeout
[   73.119791][ T5914] netlink: 16 bytes leftover after parsing attributes in process `syz.1.80'.
[   73.168550][   T54] Bluetooth: hci2: command tx timeout
[   73.607477][ T5956] netlink: 16 bytes leftover after parsing attributes in process `syz.1.98'.
[   74.171792][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'.
[   74.384923][ T5995] Illegal XDP return value 1290908086 on prog  (id 17) dev N/A, expect packet loss!
[   74.492749][ T6007] veth0_to_team: entered promiscuous mode
[   74.504112][ T6009] netlink: 'syz.0.122': attribute type 1 has an invalid length.
[   75.860654][ T6132] netlink: 'syz.0.176': attribute type 4 has an invalid length.
[   76.429093][ T6151] __nla_validate_parse: 7 callbacks suppressed
[   76.429104][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.184'.
[   76.638026][ T6160] netlink: 24 bytes leftover after parsing attributes in process `syz.2.188'.
[   76.770059][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[   76.773089][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[   77.237176][ T6185] netlink: 'syz.2.194': attribute type 1 has an invalid length.
[   77.265301][ T6185] 8021q: adding VLAN 0 to HW filter on device bond1
[   77.272419][ T6185] netlink: 28 bytes leftover after parsing attributes in process `syz.2.194'.
[   77.276081][ T6185] bond1: entered allmulticast mode
[   77.285138][ T6185] bond1: (slave dummy0): making interface the new active one
[   77.287585][ T6185] dummy0: entered allmulticast mode
[   77.291862][ T6185] bond1: (slave dummy0): Enslaving as an active interface with an up link
[   78.079196][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   78.084482][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   78.088464][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   78.092166][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   80.913038][ T6225] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   80.994895][ T6288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'.
[   81.326433][ T6309] IPv6: NLM_F_CREATE should be specified when creating new route
[   81.329745][ T6309] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   81.332611][ T6309] IPv6: NLM_F_CREATE should be set when creating new route
[   81.336427][ T6309] IPv6: NLM_F_CREATE should be set when creating new route
[   81.339249][ T6309] IPv6: NLM_F_CREATE should be set when creating new route
[   81.532479][ T6319] netlink: 'syz.0.245': attribute type 3 has an invalid length.
[   81.864641][ T6332] Zero length message leads to an empty skb
[   82.551735][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.252'.
[   84.547864][ T6321] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   84.646199][ T6370] netlink: 32 bytes leftover after parsing attributes in process `syz.0.265'.
[   84.683214][ T6370] netlink: 32 bytes leftover after parsing attributes in process `syz.0.265'.
[   84.733449][ T6376] netlink: 204 bytes leftover after parsing attributes in process `syz.2.268'.
[   84.740391][ T6376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.268'.
[   84.744410][ T6376] tc_dump_action: action bad kind
[   84.976471][ T6395] 8021q: adding VLAN 0 to HW filter on device bond2
[   85.250234][ T6410] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc
[   85.941026][ T6425] netlink: 24 bytes leftover after parsing attributes in process `syz.2.288'.
[   85.944816][ T6425] netlink: 24 bytes leftover after parsing attributes in process `syz.2.288'.
[   86.225635][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.299'.
[   86.229643][   T24] cfg80211: failed to load regulatory.db
[   86.242159][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.299'.
[   86.556880][ T6464] netlink: 'syz.1.304': attribute type 2 has an invalid length.
[   87.609276][ T6498] syzkaller1: entered promiscuous mode
[   87.611070][ T6498] syzkaller1: entered allmulticast mode
[   87.770782][ T6507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.323'.
[   87.986307][ T6512] netlink: 20 bytes leftover after parsing attributes in process `syz.1.326'.
[   88.218437][   T33] audit: type=1804 audit(1778541956.499:2): pid=6533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.335" name="/newroot/102/cgroup.controllers" dev="tmpfs" ino=531 res=1 errno=0
[   88.230157][   T33] audit: type=1800 audit(1778541956.509:3): pid=6533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.335" name="cgroup.controllers" dev="tmpfs" ino=531 res=0 errno=0
[   88.591181][ T6556] netlink: 20 bytes leftover after parsing attributes in process `syz.0.346'.
[   88.731820][ T6564] syzkaller0: entered promiscuous mode
[   88.819106][ T6569] netlink: 16 bytes leftover after parsing attributes in process `syz.2.352'.
[   90.475771][ T6615] xt_hashlimit: size too large, truncated to 1048576
[   90.986767][ T6657] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.389'.
[   91.536497][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.411'.
[   91.539529][ T6704] netlink: 224 bytes leftover after parsing attributes in process `syz.0.411'.
[   91.543587][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.411'.
[   91.731063][ T6721] netlink: 'syz.2.421': attribute type 1 has an invalid length.
[   91.753432][ T6724] netlink: 'syz.1.420': attribute type 11 has an invalid length.
[   91.825458][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.423'.
[   92.551568][ T6792] netlink: 'syz.1.449': attribute type 30 has an invalid length.
[   92.753556][ T6807] netlink: 'syz.0.456': attribute type 13 has an invalid length.
[   92.893608][ T6817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.461'.
[   94.450866][ T6893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.498'.
[   94.574603][ T6905] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[   94.584638][ T2359] IPVS: starting estimator thread 0...
[   94.651652][ T6915] netlink: 'syz.2.507': attribute type 1 has an invalid length.
[   94.679769][ T6910] IPVS: using max 64 ests per chain, 153600 per kthread
[   94.980809][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.514'.
[   95.032257][ T6932] IPVS: ip_vs_add_dest(): server weight less than zero
[   95.036279][ T6932] IPVS: rr: FWM 3 0x00000003 - no destination available
[   95.535067][ T6956] sctp: [Deprecated]: syz.0.524 (pid 6956) Use of int in max_burst socket option deprecated.
[   95.535067][ T6956] Use struct sctp_assoc_value instead
[   95.615906][ T6963] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.661888][ T6968] IPv6: addrconf: prefix option has invalid lifetime
[   95.701103][ T6971] netlink: 'syz.0.530': attribute type 1 has an invalid length.
[   95.753763][ T6971] bond3: (slave geneve3): making interface the new active one
[   95.757262][ T6971] bond3: (slave geneve3): Enslaving as an active interface with an up link
[   95.764340][ T6975] : renamed from bridge_slave_0 (while UP)
[   95.770080][ T5668] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   95.774860][ T5668] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   95.778060][ T5668] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   95.785372][ T5668] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   95.925848][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.539'.
[   95.935720][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.539'.
[   95.948828][ T6990] netlink: 'syz.0.539': attribute type 20 has an invalid length.
[   96.010852][ T6997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.537'.
[   96.720906][ T7044] netlink: 830 bytes leftover after parsing attributes in process `syz.0.560'.
[   96.935515][ T7063] openvswitch: netlink: Message has 16 unknown bytes.
[   96.942624][ T7064] netlink: 76 bytes leftover after parsing attributes in process `syz.0.570'.
[   97.269382][ T7085] "syz.2.579" (7085) uses obsolete ecb(arc4) skcipher
[   97.303432][ T7092] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[   97.967569][ T7132] gretap0: entered promiscuous mode
[   97.998895][ T7132] vlan2: entered promiscuous mode
[   98.851279][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'.
[   98.936371][ T7195] netlink: 'syz.2.628': attribute type 1 has an invalid length.
[   98.938840][ T7195] netlink: 'syz.2.628': attribute type 1 has an invalid length.
[   98.941329][ T7195] netlink: 84 bytes leftover after parsing attributes in process `syz.2.628'.
[   99.003647][ T7200] tipc: Started in network mode
[   99.005407][ T7200] tipc: Node identity aabde8576dbf, cluster identity 4711
[   99.010344][ T7200] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.015067][ T7200] syzkaller0: entered promiscuous mode
[   99.016914][ T7200] syzkaller0: entered allmulticast mode
[   99.040884][ T7200] tipc: Resetting bearer <eth:syzkaller0>
[   99.050619][ T7199] tipc: Resetting bearer <eth:syzkaller0>
[   99.089131][ T7199] tipc: Disabling bearer <eth:syzkaller0>
[   99.257232][ T7225] netlink: 'syz.2.641': attribute type 6 has an invalid length.
[   99.263991][ T7225] netlink: 'syz.2.641': attribute type 7 has an invalid length.
[   99.267049][ T7225] netlink: 'syz.2.641': attribute type 8 has an invalid length.
[  100.955606][ T7334] trusted_key: syz.0.689 sent an empty control message without MSG_MORE.
[  101.105123][ T7342] gre0: entered promiscuous mode
[  101.108417][ T7342] gre0: entered allmulticast mode
[  101.437243][ T7366] netlink: 'syz.0.704': attribute type 1 has an invalid length.
[  101.564160][ T7375] netlink: 28 bytes leftover after parsing attributes in process `syz.1.709'.
[  101.634775][ T7382] netlink: 'syz.1.714': attribute type 29 has an invalid length.
[  102.347672][ T7452] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  102.674520][   T56] block nbd0: Receive control failed (result -32)
[  103.152550][   T24] IPVS: starting estimator thread 0...
[  103.248588][ T7489] IPVS: using max 65 ests per chain, 156000 per kthread
[  103.363467][ T7512] netlink: 'syz.2.767': attribute type 4 has an invalid length.
[  103.404830][ T7517] netlink: 'syz.1.765': attribute type 4 has an invalid length.
[  103.687568][ T7524] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma?
[  103.875115][ T7559] syzkaller0: entered promiscuous mode
[  103.877228][ T7559] syzkaller0: entered allmulticast mode
[  103.987336][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.791'.
[  104.832736][ T7604] netlink: 68 bytes leftover after parsing attributes in process `syz.1.805'.
[  105.240524][ T7625] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.815'.
[  105.248975][ T7623] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  106.067511][ T7663] veth0_to_team: left promiscuous mode
[  106.185154][ T7591] Set syz1 is full, maxelem 65536 reached
[  106.265582][   T12] nci: nci_rsp_packet: unsupported rsp opcode 0xf00
[  106.350156][ T7682] : renamed from bond_slave_0
[  107.122222][ T7735] bond1: left allmulticast mode
[  107.124207][ T7735] dummy0: left allmulticast mode
[  108.680906][ T7758] syzkaller0: entered promiscuous mode
[  108.683186][ T7758] syzkaller0: entered allmulticast mode
[  109.162587][ T7774] bond2: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  109.209270][ T7669] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  110.139279][ T7852] veth3: entered promiscuous mode
[  110.654762][ T7880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.922'.
[  110.965862][ T7907] Bluetooth: MGMT ver 1.23
[  111.294120][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.945'.
[  111.297647][ T7933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.945'.
[  111.303388][ T7933] netlink: 'syz.1.945': attribute type 12 has an invalid length.
[  111.305967][ T7933] netlink: 'syz.1.945': attribute type 13 has an invalid length.
[  111.911817][ T7975] sctp: [Deprecated]: syz.2.962 (pid 7975) Use of struct sctp_assoc_value in delayed_ack socket option.
[  111.911817][ T7975] Use struct sctp_sack_info instead
[  111.919785][ T7976] syzkaller0: entered promiscuous mode
[  111.921530][ T7976] syzkaller0: entered allmulticast mode
[  112.490803][ T8019] netlink: 'syz.2.984': attribute type 6 has an invalid length.
[  112.493400][ T8019] IPv6: NLM_F_CREATE should be specified when creating new route
[  112.494124][ T8020] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.524988][ T8024] tun0: tun_chr_ioctl cmd 1074812118
[  112.526821][ T8024] tun0: tun_chr_ioctl cmd 1074033169
[  112.739993][ T8049] bond4: Unable to set up delay as MII monitoring is disabled
[  112.743549][ T8049] bond4 (unregistering): Released all slaves
[  113.007958][   T54] Bluetooth: hci2: command tx timeout
[  114.428866][ T7940] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  114.526027][ T8110] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[  114.557033][ T8118] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1029'.
[  114.873858][ T8149] netlink: 'syz.0.1039': attribute type 1 has an invalid length.
[  114.891170][ T8149] bond4: entered promiscuous mode
[  114.892823][ T8149] bond4: entered allmulticast mode
[  114.894740][ T8149] 8021q: adding VLAN 0 to HW filter on device bond4
[  114.908628][ T8149] macvlan2: entered promiscuous mode
[  114.911877][ T8149] macvlan2: entered allmulticast mode
[  114.917998][ T8149] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  115.439647][ T8184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1052'.
[  115.443675][ T8184] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1052'.
[  115.764184][ T8194] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1056'.
[  117.647920][ T8142] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  117.753843][ T8198] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1058'.
[  117.837130][ T8206] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1062'.
[  117.926627][ T8214] netlink: 'syz.0.1065': attribute type 10 has an invalid length.
[  118.076979][ T8219] xt_connbytes: Forcing CT accounting to be enabled
[  118.244651][ T8232] tipc: Started in network mode
[  118.246719][ T8232] tipc: Node identity 4246, cluster identity 4711
[  118.251620][ T8232] tipc: Node number set to 16966
[  118.254129][ T8232] tipc: Cannot configure node identity twice
[  118.400902][ T8241] 8021q: adding VLAN 0 to HW filter on device bond2
[  118.406274][ T8241] veth3: left promiscuous mode
[  118.415243][ T8242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1078'.
[  118.421973][ T8242] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1078'.
[  118.654218][ T8262] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1088'.
[  118.786286][ T8262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1088'.
[  118.793517][ T8262] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  118.838404][ T8262] batman_adv: batadv0: Removing interface: batadv_slave_1
[  118.972273][   T54] Bluetooth: hci2: link tx timeout
[  118.975594][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  118.985177][ T5001] Bluetooth: hci2: link tx timeout
[  118.987284][ T5001] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  118.990745][ T5001] Bluetooth: hci2: link tx timeout
[  118.993072][ T5001] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  118.996280][ T5001] Bluetooth: hci2: link tx timeout
[  119.000460][ T5001] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  119.003675][ T5001] Bluetooth: hci2: link tx timeout
[  119.005907][ T5001] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  119.014166][ T5001] Bluetooth: hci2: link tx timeout
[  119.016274][ T5001] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  119.020435][ T5001] Bluetooth: hci2: link tx timeout
[  119.022851][ T5001] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  119.026860][ T5001] Bluetooth: hci2: link tx timeout
[  119.029125][ T5001] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  119.391184][ T8289] syzkaller0: entered promiscuous mode
[  119.393808][ T8289] syzkaller0: entered allmulticast mode
[  119.693955][ T8293] syzkaller0: entered promiscuous mode
[  119.697427][ T8293] syzkaller0: entered allmulticast mode
[  121.017877][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  121.609852][ T8395] netlink: 'syz.0.1139': attribute type 2 has an invalid length.
[  121.612263][ T8395] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1139'.
[  121.659950][ T8399] netlink: 'syz.0.1141': attribute type 1 has an invalid length.
[  121.662807][ T8399] netlink: 'syz.0.1141': attribute type 2 has an invalid length.
[  121.729635][ T8403] vxcan3: entered allmulticast mode
[  122.330167][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1160'.
[  122.333670][ T8440] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1160'.
[  122.381977][ T8444] IPv6: NLM_F_CREATE should be specified when creating new route
[  122.832627][ T8471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1170'.
[  123.075536][ T8484] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1175'.
[  123.604268][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1190'.
[  123.607065][ T8521] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  123.612695][ T8521] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1190'.
[  123.961391][ T8543] netlink: 'syz.0.1199': attribute type 1 has an invalid length.
[  123.964766][ T8543] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1199'.
[  124.011924][ T8546] netlink: 'syz.1.1200': attribute type 1 has an invalid length.
[  124.286405][ T8571] netlink: 'syz.0.1213': attribute type 1 has an invalid length.
[  124.324544][ T8571] 8021q: adding VLAN 0 to HW filter on device bond5
[  124.340524][ T8571] bond5: (slave geneve4): making interface the new active one
[  124.345201][ T8571] bond5: (slave geneve4): Enslaving as an active interface with an up link
[  124.370092][ T8571] syz.0.1213 (8571) used greatest stack depth: 19776 bytes left
[  124.605518][ T8593] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20002
[  124.607161][ T8595] netlink: 'syz.2.1224': attribute type 62 has an invalid length.
[  124.670181][ T8600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1225'.
[  124.730843][ T8605] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1229'.
[  125.217308][ T8632] netlink: 'syz.2.1240': attribute type 1 has an invalid length.
[  125.235795][ T8632] bond3: entered promiscuous mode
[  125.239037][ T8632] 8021q: adding VLAN 0 to HW filter on device bond3
[  125.261721][ T8632] 8021q: adding VLAN 0 to HW filter on device bond3
[  125.264822][ T8632] bond3: (slave vti0): The slave device specified does not support setting the MAC address
[  125.269386][ T8632] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  125.282102][ T8632] bond3: (slave vti0): making interface the new active one
[  125.284986][ T8632] vti0: entered promiscuous mode
[  125.290467][ T8632] bond3: (slave vti0): Enslaving as an active interface with an up link
[  125.644305][ T8654] tipc: Started in network mode
[  125.646385][ T8654] tipc: Node identity c252d2a0328, cluster identity 4711
[  125.649694][ T8654] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.711073][ T8654] syzkaller0: entered promiscuous mode
[  125.713497][ T8654] syzkaller0: entered allmulticast mode
[  125.716559][ T8654] tipc: Resetting bearer <eth:syzkaller0>
[  125.725208][ T8653] tipc: Resetting bearer <eth:syzkaller0>
[  126.649898][ T8670] netlink: 'syz.0.1256': attribute type 1 has an invalid length.
[  127.036871][ T8653] tipc: Disabling bearer <eth:syzkaller0>
[  127.063468][ T2359] tipc: Node number set to 4040348320
[  127.146438][ T8685] syzkaller1: entered promiscuous mode
[  127.150972][ T8685] syzkaller1: entered allmulticast mode
[  127.237617][ T8693] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  128.058594][ T8782] netlink: 'syz.0.1285': attribute type 1 has an invalid length.
[  128.115624][ T8786] netlink: 'syz.2.1286': attribute type 1 has an invalid length.
[  128.124765][ T8782] 8021q: adding VLAN 0 to HW filter on device bond7
[  128.132066][ T8782] bond6: (slave bond7): making interface the new active one
[  128.134933][ T8782] bond6: (slave bond7): Enslaving as an active interface with an up link
[  128.152990][ T8786] 8021q: adding VLAN 0 to HW filter on device bond4
[  128.266801][ T2359] hid-generic 0005:0B57:0A11.0001: item fetching failed at offset 0/1
[  128.270021][ T2359] hid-generic 0005:0B57:0A11.0001: probe with driver hid-generic failed with error -22
[  128.825432][ T8825] ip6gre1: entered promiscuous mode
[  128.883162][ T8831] syzkaller0: entered promiscuous mode
[  128.886499][ T8831] syzkaller0: entered allmulticast mode
[  129.001750][ T8839] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  129.931621][ T8904] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1337'.
[  130.365547][ T8932] xt_l2tp: missing protocol rule (udp|l2tpip)
[  130.823919][ T8952] xt_hashlimit: size too large, truncated to 1048576
[  131.123978][ T8972] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1367'.
[  131.128836][ T8972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1367'.
[  131.214707][ T8982] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  131.218303][ T8982] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  131.313268][ T8993] xt_nfacct: accounting object `syz0' does not exist
[  131.411885][ T9003] batadv0: entered promiscuous mode
[  131.420250][ T9003] vlan2: entered promiscuous mode
[  132.334809][ T9073] netlink: 'syz.1.1413': attribute type 3 has an invalid length.
[  132.339929][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1413'.
[  132.560241][ T9065] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.565934][ T9065] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.860441][ T9065] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  133.313857][ T8488] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.326985][ T8488] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  133.338327][ T8488] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.355370][ T8488] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  133.414348][ T8488] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.417654][ T8488] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  133.423043][ T8488] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.427217][ T8488] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  133.984676][ T9145] block nbd1: not configured, cannot reconfigure
[  134.077696][ T9156] gre2: entered allmulticast mode
[  134.195194][ T9164] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1451'.
[  134.200196][ T9164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1451'.
[  134.231497][ T9164] netlink: 'syz.1.1451': attribute type 1 has an invalid length.
[  134.241939][ T9166] IPv6: addrconf: prefix option has invalid lifetime
[  134.457791][ T9179] netlink: 'syz.1.1458': attribute type 6 has an invalid length.
[  134.552764][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1460'.
[  134.562444][ T9186] bond0: entered promiscuous mode
[  134.564173][ T9186] : entered promiscuous mode
[  134.565863][ T9186] bond_slave_1: entered promiscuous mode
[  134.570647][ T9186] batadv_slave_0: entered promiscuous mode
[  134.572678][ T9186] batadv_slave_0: left promiscuous mode
[  134.837640][ T9186] bond0: left promiscuous mode
[  134.840455][ T9186] : left promiscuous mode
[  134.842968][ T9186] bond_slave_1: left promiscuous mode
[  135.113621][ T9206] IPVS: Unknown mcast interface: vcan0
[  135.577557][ T9233] Cannot find set identified by id 65534 to match
[  135.634833][ T9239] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1485'.
[  135.847096][ T9256] netlink: 'syz.0.1495': attribute type 1 has an invalid length.
[  135.853856][ T9256] netlink: 'syz.0.1495': attribute type 2 has an invalid length.
[  135.937036][ T9266] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1499'.
[  135.939151][ T9267] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1500'.
[  135.939875][ T9266] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1499'.
[  136.089300][ T9282] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1507'.
[  136.460289][ T9321] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1518'.
[  136.467098][ T9321] tc_dump_action: action bad kind
[  136.613015][ T9336] veth0_virt_wifi: mtu greater than device maximum
[  136.809032][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1527'.
[  136.812620][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1527'.
[  137.482786][ T9418] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1545'.
[  137.682740][ T9434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1553'.
[  137.760166][ T9442] macvlan1: entered allmulticast mode
[  138.132392][ T9466] netlink: 'syz.2.1565': attribute type 21 has an invalid length.
[  138.211393][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  138.535379][ T9476] netlink: 'syz.2.1570': attribute type 4 has an invalid length.
[  138.540151][ T9476] netlink: 'syz.2.1570': attribute type 8 has an invalid length.
[  140.107201][ T9537] syzkaller0: entered promiscuous mode
[  140.109601][ T9537] syzkaller0: entered allmulticast mode
[  140.114701][ T9537] 0: reclassify loop, rule prio 0, protocol 800
[  140.479468][ T9551] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.508869][ T9551] bridge_slave_0 (unregistering): left allmulticast mode
[  140.516465][ T9551] bridge_slave_0 (unregistering): left promiscuous mode
[  140.520932][ T9551] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.827251][ T5721] hid-generic 0005:4C4A:0A11.0002: item fetching failed at offset 0/1
[  140.834150][ T5721] hid-generic 0005:4C4A:0A11.0002: probe with driver hid-generic failed with error -22
[  142.603938][ T9511] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  142.703070][ T9602] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  142.840037][ T9614] __nla_validate_parse: 5 callbacks suppressed
[  142.840055][ T9614] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1627'.
[  143.181401][ T9644] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.184211][ T9644] syzkaller0: entered promiscuous mode
[  143.186341][ T9644] syzkaller0: entered allmulticast mode
[  143.256511][ T9644] tipc: Resetting bearer <eth:syzkaller0>
[  143.259820][ T9643] tipc: Resetting bearer <eth:syzkaller0>
[  143.271843][ T9643] tipc: Disabling bearer <eth:syzkaller0>
[  143.456652][ T9664] netlink: 'syz.1.1651': attribute type 10 has an invalid length.
[  143.463814][ T9666] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.1652'.
[  143.524307][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1654'.
[  143.527393][ T9671] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1654'.
[  143.643300][ T9681] netlink: 'syz.0.1650': attribute type 1 has an invalid length.
[  144.353526][ T9712] xt_CT: No such helper "snmp_trap"
[  144.835304][ T9720] netlink: 'syz.2.1674': attribute type 1 has an invalid length.
[  144.847131][ T9720] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.065412][ T9739] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.171735][ T9749] xfrm0: entered allmulticast mode
[  145.589820][ T9773] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  145.594146][ T9773] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  145.941369][ T9802] syzkaller1: entered promiscuous mode
[  145.943270][ T9802] syzkaller1: entered allmulticast mode
[  146.361563][ T9813] netlink: 'syz.0.1712': attribute type 8 has an invalid length.
[  146.821088][ T9830] sctp: [Deprecated]: syz.0.1720 (pid 9830) Use of int in max_burst socket option.
[  146.821088][ T9830] Use struct sctp_assoc_value instead
[  147.109795][ T9847] syzkaller0: entered allmulticast mode
[  147.258777][ T9849] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.369867][ T9849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1728'.
[  147.545048][ T9863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1733'.
[  147.627434][   T55] block nbd1: Receive control failed (result -1)
[  147.991268][ T9873] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  147.995119][ T9873] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  149.083416][ T9929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1759'.
[  149.482956][ T9959] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  150.201255][T10023] netlink: 'syz.1.1803': attribute type 10 has an invalid length.
[  150.204487][T10023] syz_tun: entered promiscuous mode
[  150.219007][T10023] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  150.244540][T10023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1803'.
[  150.880793][T10070] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1821'.
[  150.883452][T10070] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1821'.
[  150.886811][T10070] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1821'.
[  150.932516][T10074] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1823'.
[  150.939175][T10074] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1823'.
[  150.947490][T10074] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1823'.
[  154.126048][T10096] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  155.109269][T10214] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.229577][T10214] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.244266][T10233] netlink: 'syz.1.1880': attribute type 1 has an invalid length.
[  155.246393][T10232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1879'.
[  155.309174][T10214] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.375798][T10214] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.526683][ T8487] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.554187][ T8487] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.570561][ T8487] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.592885][ T8487] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.676415][T10340] netlink: 'syz.1.1926': attribute type 10 has an invalid length.
[  156.685692][T10340] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[  156.700290][T10340] bridge0: port 1(netdevsim1) entered blocking state
[  156.704081][T10342] netlink: 'syz.2.1928': attribute type 1 has an invalid length.
[  156.709414][T10342] netlink: 'syz.2.1928': attribute type 3 has an invalid length.
[  156.709848][T10340] bridge0: port 1(netdevsim1) entered disabled state
[  156.713413][T10342] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1928'.
[  156.717311][T10340] netdevsim netdevsim1 netdevsim1: entered promiscuous mode
[  156.753386][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1929'.
[  156.756496][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1929'.
[  156.761322][T10344] netlink: 304 bytes leftover after parsing attributes in process `syz.2.1929'.
[  157.019658][T10364] syzkaller1: entered promiscuous mode
[  157.021460][T10364] syzkaller1: entered allmulticast mode
[  157.196318][T10378] batman_adv: batadv0: Adding interface: vlan2
[  157.198918][T10378] batman_adv: batadv0: The MTU of interface vlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  157.209845][T10378] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active
[  157.214804][T10380] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  157.219838][T10381] ieee802154 phy0 wpan0: encryption failed: -22
[  157.723166][T10393] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1951'.
[  158.079799][T10416] netlink: 'syz.1.1963': attribute type 1 has an invalid length.
[  158.182420][T10425] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1967'.
[  158.187474][T10425] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1967'.
[  158.430959][T10445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1975'.
[  160.124594][T10507] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2004'.
[  160.266761][T10521] netlink: 'syz.2.2010': attribute type 1 has an invalid length.
[  160.342991][T10531] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.2017'.
[  160.376407][T10534] syzkaller0: entered promiscuous mode
[  160.379516][T10534] syzkaller0: entered allmulticast mode
[  160.391219][T10534] 0: reclassify loop, rule prio 0, protocol 800
[  160.457525][T10540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2020'.
[  161.522665][T10566] bond8 (unregistering): Released all slaves
[  161.803015][T10589] syzkaller0: entered promiscuous mode
[  161.809627][T10589] syzkaller0: entered allmulticast mode
[  161.886649][T10601] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2044'.
[  161.905142][T10601] ip6gre2: entered promiscuous mode
[  161.908290][T10601] ip6gre2: entered allmulticast mode
[  161.922142][T10601] netlink: 'syz.0.2044': attribute type 6 has an invalid length.
[  161.924905][T10601] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2044'.
[  161.939848][T10601] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  161.943964][T10601] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  161.948221][T10606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2047'.
[  162.006061][T10614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2050'.
[  162.038255][T10616] syzkaller0: entered promiscuous mode
[  162.040009][T10616] syzkaller0: entered allmulticast mode
[  162.608949][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2075'.
[  163.545912][T10687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2084'.
[  164.559313][T10785] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  164.564743][T10787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2132'.
[  164.644326][T10793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2131'.
[  165.161552][T10826] syzkaller0: entered promiscuous mode
[  165.163616][T10826] syzkaller0: entered allmulticast mode
[  165.632162][T10842] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  165.642178][T10842] syzkaller0: entered promiscuous mode
[  165.647142][T10842] syzkaller0: entered allmulticast mode
[  165.654291][T10846] netlink: 'syz.2.2160': attribute type 4 has an invalid length.
[  165.685045][T10842] tipc: Resetting bearer <eth:syzkaller0>
[  165.698897][T10841] tipc: Resetting bearer <eth:syzkaller0>
[  165.714787][T10841] tipc: Disabling bearer <eth:syzkaller0>
[  165.786893][T10852] sctp: [Deprecated]: syz.1.2163 (pid 10852) Use of struct sctp_assoc_value in delayed_ack socket option.
[  165.786893][T10852] Use struct sctp_sack_info instead
[  166.101534][T10871] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  166.103981][T10871] syzkaller0: entered promiscuous mode
[  166.105648][T10871] syzkaller0: entered allmulticast mode
[  166.128917][T10871] tipc: Resetting bearer <eth:syzkaller0>
[  166.134598][T10870] tipc: Resetting bearer <eth:syzkaller0>
[  166.149852][T10870] tipc: Disabling bearer <eth:syzkaller0>
[  166.678405][T10917] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2192'.
[  166.691995][T10917] netlink: 'syz.0.2192': attribute type 1 has an invalid length.
[  166.779759][T10917] 8021q: adding VLAN 0 to HW filter on device bond9
[  166.789288][T10917] bond8: (slave bond9): making interface the new active one
[  166.793975][T10917] bond8: (slave bond9): Enslaving as an active interface with an up link
[  166.815803][T10926] vlan2: entered promiscuous mode
[  166.820459][T10926] bond0: entered promiscuous mode
[  166.823345][T10926] : entered promiscuous mode
[  166.825441][T10926] bond_slave_1: entered promiscuous mode
[  167.033909][T10944] netlink: 'syz.0.2205': attribute type 1 has an invalid length.
[  167.071787][T10948] team0: entered promiscuous mode
[  167.075857][T10948] team_slave_0: entered promiscuous mode
[  167.080434][T10948] team_slave_1: entered promiscuous mode
[  167.085634][T10948] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  167.644124][T10994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2224'.
[  167.673755][T10996] openvswitch: netlink: IP tunnel dst address not specified
[  167.804557][T11006] netlink: 'syz.0.2232': attribute type 3 has an invalid length.
[  167.853091][T11011] syzkaller0: entered promiscuous mode
[  167.854982][T11011] syzkaller0: entered allmulticast mode
[  167.869344][T11011] TC_ACT_REPEAT abuse ?
[  167.922253][T11017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2236'.
[  167.991173][T11020] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  168.072459][T11031] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2243'.
[  168.193093][T11040] bridge3: the hash_elasticity option has been deprecated and is always 16
[  168.196019][T11040] bridge3: entered allmulticast mode
[  168.243127][T11042] syzkaller0: entered promiscuous mode
[  168.245248][T11042] syzkaller0: entered allmulticast mode
[  168.434716][T11044] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2249'.
[  168.503322][T11048] netlink: 'syz.2.2251': attribute type 1 has an invalid length.
[  168.505802][T11048] netlink: 'syz.2.2251': attribute type 3 has an invalid length.
[  168.537533][T11050] netlink: 'syz.2.2252': attribute type 2 has an invalid length.
[  168.543490][T11050] netlink: 'syz.2.2252': attribute type 1 has an invalid length.
[  168.547421][T11050] netlink: 'syz.2.2252': attribute type 1 has an invalid length.
[  169.142091][T11071] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.238774][T11071] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  169.249334][T11071] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  169.352930][   T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  169.357915][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  169.360796][   T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  169.363810][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  169.366745][   T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  169.370137][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  169.373231][   T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  169.376592][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  169.489190][T11099] netlink: 'syz.1.2271': attribute type 1 has an invalid length.
[  169.491936][T11099] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2271'.
[  169.512934][T11101] bond6: entered promiscuous mode
[  169.515231][T11101] 8021q: adding VLAN 0 to HW filter on device bond6
[  169.528804][T11101] veth7: entered promiscuous mode
[  169.530435][T11101] veth7: entered allmulticast mode
[  169.534471][T11101] bond6: (slave veth7): Enslaving as a backup interface with a down link
[  169.796724][T11112] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2277'.
[  169.800323][T11112] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  170.078670][T11118] xt_CT: You must specify a L4 protocol and not use inversions on it
[  170.093686][T11118] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2279'.
[  170.283558][T11129] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2283'.
[  170.287162][T11129] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2283'.
[  170.769214][T11159] validate_nla: 1 callbacks suppressed
[  170.769231][T11159] netlink: 'syz.2.2295': attribute type 1 has an invalid length.
[  170.806751][T11159] bond7: entered promiscuous mode
[  170.810986][T11159] 8021q: adding VLAN 0 to HW filter on device bond7
[  170.862371][T11159] bond7: (slave veth9): making interface the new active one
[  170.865336][T11159] veth9: entered promiscuous mode
[  170.868902][T11159] bond7: (slave veth9): Enslaving as an active interface with an up link
[  171.171903][T11188] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  171.877181][ T5676] IPVS: starting estimator thread 0...
[  171.979215][T11240] IPVS: using max 38 ests per chain, 91200 per kthread
[  172.048682][T11247] syzkaller1: entered promiscuous mode
[  172.050623][T11247] syzkaller1: entered allmulticast mode
[  172.400299][T11259] __nla_validate_parse: 5 callbacks suppressed
[  172.400311][T11259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2340'.
[  172.785286][T11265] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  172.792513][ T5676] team_slave_0: entered promiscuous mode
[  172.796413][ T5676] team_slave_1: entered promiscuous mode
[  172.813119][T11265] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  172.891097][T11269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2345'.
[  172.894457][T11269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2345'.
[  172.898537][T11269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2345'.
[  172.912266][ T8487] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  172.915538][T11269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2345'.
[  172.919356][ T8487] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  172.922949][T11269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2345'.
[  172.926427][T11269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2345'.
[  172.929945][ T8487] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  172.938359][ T8487] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  173.020069][T11273] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2347'.
[  173.023772][T11273] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2347'.
[  173.027291][T11273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2347'.
[  173.142986][T11279] syzkaller0: entered promiscuous mode
[  173.144660][T11279] syzkaller0: entered allmulticast mode
[  173.201969][T11277] syzkaller0: entered promiscuous mode
[  173.203854][T11277] syzkaller0: entered allmulticast mode
[  174.845963][T11320] sctp: [Deprecated]: syz.1.2366 (pid 11320) Use of struct sctp_assoc_value in delayed_ack socket option.
[  174.845963][T11320] Use struct sctp_sack_info instead
[  175.161727][T11336] syzkaller0: entered promiscuous mode
[  175.167695][T11336] syzkaller0: entered allmulticast mode
[  175.417342][T11356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  176.401498][T11388] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.407070][T11388] 8021q: adding VLAN 0 to HW filter on device team0
[  176.993778][T11429] netlink: 'syz.0.2412': attribute type 30 has an invalid length.
[  177.023998][T11429] netlink: 'syz.0.2412': attribute type 30 has an invalid length.
[  177.024739][ T8485] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  177.032588][ T8485] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  177.037644][ T8485] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  177.043905][ T8485] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  177.071691][T11433] netlink: 'syz.1.2414': attribute type 3 has an invalid length.
[  177.074037][T11433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  177.151147][T11442] netlink: 'syz.2.2417': attribute type 1 has an invalid length.
[  177.221064][T11448] netlink: 'syz.2.2420': attribute type 1 has an invalid length.
[  177.239050][T11448] 8021q: adding VLAN 0 to HW filter on device bond8
[  177.260588][T11448] bond8: (slave geneve2): making interface the new active one
[  177.265461][T11448] bond8: (slave geneve2): Enslaving as an active interface with an up link
[  177.714974][T11509] batman_adv: batadv0: Interface activated: vlan2
[  177.738607][T11509] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.746421][T11509] 8021q: adding VLAN 0 to HW filter on device team0
[  177.752535][T11509] 8021q: adding VLAN 0 to HW filter on device batadv0
[  177.782866][T11509] batman_adv: batadv0: Interface activated: batadv_slave_0
[  177.787156][T11509] batman_adv: batadv0: Interface activated: batadv_slave_1
[  177.799258][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.801426][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.902082][T11526] __nla_validate_parse: 9 callbacks suppressed
[  177.902094][T11526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2456'.
[  177.961960][T11533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2458'.
[  177.965809][T11533] netlink: 'syz.0.2458': attribute type 21 has an invalid length.
[  178.008537][T11537] netlink: 840 bytes leftover after parsing attributes in process `syz.0.2460'.
[  178.034492][T11537] netlink: 840 bytes leftover after parsing attributes in process `syz.0.2460'.
[  178.089093][T11539] syz_tun: entered allmulticast mode
[  178.107964][T11539] dvmrp8: entered allmulticast mode
[  178.124326][T11538] syz_tun: left allmulticast mode
[  178.907198][T11585] geneve3: entered promiscuous mode
[  178.910459][T11585] geneve3: entered allmulticast mode
[  179.185341][T11611] netlink: 'syz.1.2480': attribute type 49 has an invalid length.
[  179.355185][T11626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  179.404312][T11630] netlink: 'syz.2.2489': attribute type 19 has an invalid length.
[  179.407404][T11630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2489'.
[  179.418126][T11630] netlink: 'syz.2.2489': attribute type 19 has an invalid length.
[  179.421729][T11630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2489'.
[  179.536156][T11631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2488'.
[  180.307060][T11690] netlink: 'syz.0.2515': attribute type 13 has an invalid length.
[  180.530693][T11690] gre0: left promiscuous mode
[  180.532493][T11690] gre0: left allmulticast mode
[  180.586179][T11690] 8021q: adding VLAN 0 to HW filter on device bond0
[  180.595272][T11690] 8021q: adding VLAN 0 to HW filter on device team0
[  180.607025][T11690] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.649956][T11690] batman_adv: batadv0: Interface activated: batadv_slave_0
[  180.660325][T11690] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  180.664443][T11690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  180.683072][T11690] veth1_vlan: left promiscuous mode
[  180.686453][T11690] veth0_vlan: left promiscuous mode
[  180.689894][T11690] veth0_vlan: entered promiscuous mode
[  180.695849][T11690] veth1_vlan: entered promiscuous mode
[  180.704430][T11690] veth1_macvtap: left promiscuous mode
[  180.707976][T11690] veth0_macvtap: left promiscuous mode
[  180.711301][T11690] veth0_macvtap: entered promiscuous mode
[  180.724872][T11690] veth1_macvtap: entered promiscuous mode
[  180.735315][T11690] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  180.745045][T11690] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  180.754477][T11690] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  180.764010][T11690] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  180.775528][T11690] 8021q: adding VLAN 0 to HW filter on device bond1
[  180.787575][T11690] 8021q: adding VLAN 0 to HW filter on device bond2
[  180.810471][T11690] 8021q: adding VLAN 0 to HW filter on device bond3
[  180.814404][T11690] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  180.819044][ T8488] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.823271][ T8488] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  180.827367][ T8488] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.830188][ T8488] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  180.843320][T11697] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  180.845515][T11697] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  180.855772][ T8739] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.858521][ T8739] bridge0: port 1(bridge_slave_0) entered forwarding state
[  180.870850][ T8739] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.873737][ T8739] bridge0: port 2(bridge_slave_1) entered forwarding state
[  180.921749][ T8488] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.928196][ T8488] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  180.932214][ T8488] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.936514][ T8488] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  181.529932][T11718] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2529'.
[  182.123248][T11769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2553'.
[  182.129072][T11771] validate_nla: 1 callbacks suppressed
[  182.129086][T11771] netlink: 'syz.1.2554': attribute type 21 has an invalid length.
[  182.142629][T11771] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2554'.
[  182.145624][T11771] netlink: 'syz.1.2554': attribute type 1 has an invalid length.
[  182.424305][T11792] syzkaller1: entered promiscuous mode
[  182.428430][T11792] syzkaller1: entered allmulticast mode
[  182.513153][T11796] netlink: 'syz.2.2566': attribute type 1 has an invalid length.
[  182.789469][T11821] netlink: 'syz.0.2578': attribute type 21 has an invalid length.
[  182.793761][T11821] netlink: 'syz.0.2578': attribute type 20 has an invalid length.
[  182.902125][T11830] bond0: (slave syz_tun): Releasing backup interface
[  182.917670][T11830] bridge_slave_1: left allmulticast mode
[  182.920944][T11830] bridge_slave_1: left promiscuous mode
[  182.925238][T11830] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.949340][T11830] bond0: (slave bond_slave_0): Releasing backup interface
[  182.968539][T11830] bond0: (slave bond_slave_1): Releasing backup interface
[  182.982219][T11830] team_slave_0: left promiscuous mode
[  183.001984][T11830] team0: Port device team_slave_0 removed
[  183.012390][T11830] team_slave_1: left promiscuous mode
[  183.035303][T11830] team0: Port device team_slave_1 removed
[  183.041797][T11830] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  183.044240][T11830] batman_adv: batadv0: Removing interface: batadv_slave_0
[  183.054228][T11830] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  183.056979][T11830] batman_adv: batadv0: Removing interface: batadv_slave_1
[  183.075361][T11830] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  183.242901][T11855] netlink: 'syz.0.2595': attribute type 2 has an invalid length.
[  183.249150][T11855] netlink: 'syz.0.2595': attribute type 1 has an invalid length.
[  183.580945][T11882] syzkaller0: entered promiscuous mode
[  183.585604][T11882] syzkaller0: entered allmulticast mode
[  183.816128][T11892] __nla_validate_parse: 1 callbacks suppressed
[  183.816138][T11892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2612'.
[  183.824804][T11892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2612'.
[  183.837857][T11892] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  184.178895][T11910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2620'.
[  184.182817][T11910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2620'.
[  184.186342][T11910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2620'.
[  184.541721][T11937] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2632'.
[  184.567048][T11937] netlink: 'syz.2.2632': attribute type 82 has an invalid length.
[  184.790352][T11965] xt_hashlimit: invalid rate
[  185.030082][T11986] netlink: 'syz.0.2650': attribute type 3 has an invalid length.
[  186.200578][T12040] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2673'.
[  186.259507][T12043] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[  186.314485][T12048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2676'.
[  186.368298][T12052] bridge5: entered promiscuous mode
[  186.372974][T12052] bridge5: entered allmulticast mode
[  186.382775][T12052] team0: Port device bridge5 added
[  186.391931][T12052] bridge0: port 3(team0) entered blocking state
[  186.395693][T12052] bridge0: port 3(team0) entered disabled state
[  186.400208][T12052] team0: entered allmulticast mode
[  186.402007][T12052] team_slave_0: entered allmulticast mode
[  186.403783][T12052] team_slave_1: entered allmulticast mode
[  186.412581][T12052] team0: left allmulticast mode
[  186.414054][T12052] team_slave_0: left allmulticast mode
[  186.415657][T12052] team_slave_1: left allmulticast mode
[  186.514165][T12060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2683'.
[  186.801566][T12081] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2689'.
[  187.148946][   T33] audit: type=1804 audit(1778542055.439:4): pid=12102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2699" name="/newroot/924/cgroup.controllers" dev="tmpfs" ino=4677 res=1 errno=0
[  187.176813][   T33] audit: type=1800 audit(1778542055.439:5): pid=12102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2699" name="cgroup.controllers" dev="tmpfs" ino=4677 res=0 errno=0
[  188.373596][T12185] bond11: entered promiscuous mode
[  188.798910][T12217] netlink: 'syz.0.2747': attribute type 1 has an invalid length.
[  188.824436][T12224] __nla_validate_parse: 3 callbacks suppressed
[  188.824447][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2749'.
[  188.832747][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2749'.
[  188.934778][T12235] syzkaller0: entered promiscuous mode
[  188.936515][T12235] syzkaller0: entered allmulticast mode
[  189.905915][T12262] syzkaller1: entered promiscuous mode
[  189.908077][T12262] syzkaller1: entered allmulticast mode
[  190.335814][T12282] netlink: 'syz.0.2772': attribute type 33 has an invalid length.
[  190.339185][T12282] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2772'.
[  190.342775][T12282] `: renamed from team0 (while UP)
[  190.395599][T12286] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[  190.464847][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2777'.
[  190.472626][T12294] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  190.645374][T12310] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2785'.
[  190.781465][T12324] netlink: 10184 bytes leftover after parsing attributes in process `syz.0.2792'.
[  190.792084][T12324] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2792'.
[  191.002364][T12353] netlink: 'syz.1.2805': attribute type 1 has an invalid length.
[  191.005440][T12353] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.040354][T12355] pimreg: entered allmulticast mode
[  191.049236][T12355] pimreg: left allmulticast mode
[  191.130085][T12367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2811'.
[  191.488921][T12258] Bluetooth: hci1: command 0x0406 tx timeout
[  191.491498][T12258] Bluetooth: hci0: command 0x0406 tx timeout
[  192.967645][T12483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2862'.
[  192.970702][T12483] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2862'.
[  192.977063][T12483] vlan2: entered allmulticast mode
[  192.980034][T12483] veth0_to_bond: entered allmulticast mode
[  193.152539][T12494] bond9: Removing last ns target with arp_interval on
[  193.867292][T12536] syzkaller0: entered promiscuous mode
[  193.871429][T12536] syzkaller0: entered allmulticast mode
[  194.100679][T12551] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2888'.
[  194.152222][T12551] batman_adv: batadv0: Interface deactivated: vlan2
[  194.797846][T12571] sctp: [Deprecated]: syz.2.2896 (pid 12571) Use of int in maxseg socket option.
[  194.797846][T12571] Use struct sctp_assoc_value instead
[  194.843628][T12573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2897'.
[  195.053883][T12601] netlink: 'syz.0.2911': attribute type 1 has an invalid length.
[  195.056309][T12597] dvmrp1: entered allmulticast mode
[  195.431823][T12634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2922'.
[  195.434899][T12635] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2921'.
[  195.441697][T12635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2921'.
[  195.734688][T12651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  195.824644][T12642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2924'.
[  196.036343][T12667] openvswitch: netlink: VXLAN extension message has 12 unknown bytes.
[  196.080987][T12669] syzkaller0: entered promiscuous mode
[  196.082658][T12669] syzkaller0: entered allmulticast mode
[  196.636003][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2949'.
[  196.639489][T12703] netlink: 'syz.1.2949': attribute type 15 has an invalid length.
[  196.642249][T12703] netlink: 'syz.1.2949': attribute type 25 has an invalid length.
[  196.645089][T12703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2949'.
[  198.073770][T12740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2966'.
[  198.150072][T12744] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2968'.
[  198.241398][T12754] openvswitch: netlink: Actions may not be safe on all matching packets
[  198.368787][T12626] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  199.146428][T12785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2987'.
[  199.843880][T12832] netlink: 'syz.2.3007': attribute type 10 has an invalid length.
[  199.855883][T12832] bond1: (slave dummy0): Releasing active interface
[  199.863751][T12832] team0: Port device dummy0 added
[  199.866004][T12832] dummy0: entered promiscuous mode
[  199.875604][T12832] netlink: 'syz.2.3007': attribute type 10 has an invalid length.
[  199.884518][T12832] team0: Port device dummy0 removed
[  199.891845][T12832] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  200.039324][T12839] syz.2.3010 (12839) used obsolete PPPIOCDETACH ioctl
[  200.084905][T12841] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3011'.
[  200.215769][T12853] netlink: 380 bytes leftover after parsing attributes in process `syz.1.3017'.
[  200.225233][T12853] netlink: 380 bytes leftover after parsing attributes in process `syz.1.3017'.
[  200.230407][T12853] netlink: 22 bytes leftover after parsing attributes in process `syz.1.3017'.
[  200.245566][T12851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3016'.
[  200.251603][T12851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3016'.
[  200.258850][T12851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3016'.
[  200.262452][T12851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3016'.
[  200.266236][T12851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3016'.
[  200.312260][T12851] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  200.314987][T12851] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  200.341277][T12851] bond3: left promiscuous mode
[  200.343847][T12851] vti0: left promiscuous mode
[  200.352146][T12851] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  200.360074][T12851] 8021q: adding VLAN 0 to HW filter on device eth0
[  200.363714][T12851] 8021q: adding VLAN 0 to HW filter on device eth1
[  200.367117][T12851] 8021q: adding VLAN 0 to HW filter on device eth2
[  200.374167][T12851] 8021q: adding VLAN 0 to HW filter on device eth3
[  200.377035][T12851] bridge3: left allmulticast mode
[  200.381208][T12851] 8021q: adding VLAN 0 to HW filter on device bond5
[  200.384221][T12851] bond6: left promiscuous mode
[  200.387187][T12851] veth7: left promiscuous mode
[  200.389233][T12851] veth7: left allmulticast mode
[  200.391494][T12851] bond7: left promiscuous mode
[  200.393446][T12851] veth9: left promiscuous mode
[  200.400905][T12851] geneve3: left promiscuous mode
[  200.402834][T12851] geneve3: left allmulticast mode
[  200.404556][T12851] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check.
[  200.428638][   T12] bond6: (slave veth7): link status definitely up, 10000 Mbps full duplex
[  200.432312][   T12] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  200.443761][   T12] bond6: active interface up!
[  200.619417][T12879] netlink: 'syz.1.3029': attribute type 1 has an invalid length.
[  200.779658][T12887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  200.975851][T12905] netlink: 'syz.1.3040': attribute type 13 has an invalid length.
[  201.157377][T12911] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  201.162528][T12911] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.166386][T12911] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  201.264104][T12911] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  201.271621][T12911] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.275382][T12911] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  201.366461][T12911] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  201.372218][T12911] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.376671][T12911] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  201.475174][T12911] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  201.479491][T12911] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.483564][T12911] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  201.744833][ T8485] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  201.750955][ T8485] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  201.758002][ T8485] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  201.813929][ T8485] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  201.821017][ T8485] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  201.833376][ T8485] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  201.882357][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  201.888974][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  201.896883][   T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  201.932972][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  201.935543][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  201.939942][   T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  202.673625][T12992] No such timeout policy "syz1"
[  203.476337][T13062] netlink: 'syz.2.3105': attribute type 12 has an invalid length.
[  204.153176][T13116] __nla_validate_parse: 103 callbacks suppressed
[  204.153187][T13116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3127'.
[  204.186816][T13120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3129'.
[  204.366289][T13136] xt_hashlimit: size too large, truncated to 1048576
[  204.625509][T13140] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3137'.
[  204.690304][T13144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3139'.
[  206.313900][T13234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3179'.
[  206.317266][T13234] netlink: 'syz.1.3179': attribute type 8 has an invalid length.
[  206.332913][T13234] geneve3: entered promiscuous mode
[  206.336229][T13234] geneve3: entered allmulticast mode
[  206.341237][ T8485] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  206.344958][ T8485] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.352349][ T8485] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  206.356225][ T8485] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  206.552208][T13253] ipvlan2: entered promiscuous mode
[  206.576153][T13254] netdevsim netdevsim1: Direct firmware load for . failed with error -2
[  206.603094][T13254] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  206.783428][T13262] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3190'.
[  206.854857][T13271] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3194'.
[  206.857607][T13271] netlink: 'syz.0.3194': attribute type 1 has an invalid length.
[  207.144224][T13296] syzkaller1: entered promiscuous mode
[  207.145920][T13296] syzkaller1: entered allmulticast mode
[  207.266460][T13302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3205'.
[  207.290651][T13301] netlink: 'syz.0.3204': attribute type 39 has an invalid length.
[  207.515693][T13316] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3211'.
[  207.532583][T13318] netlink: ct family unspecified
[  207.535980][T13318] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  207.915777][T13355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3228'.
[  208.109357][T13375] IPVS: Unknown mcast interface: vcan0
[  208.114464][T13366] syz_tun: left promiscuous mode
[  208.119504][T13366] team0: left promiscuous mode
[  208.130147][T13366] xfrm0: left allmulticast mode
[  208.136838][T13366] macvlan1: left allmulticast mode
[  208.143627][T13366] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  208.152882][T13366] gre2: left allmulticast mode
[  208.171125][T13366] geneve3: left promiscuous mode
[  208.172746][T13366] geneve3: left allmulticast mode
[  208.179399][ T8488] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  208.187696][ T8488] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  208.193364][ T8488] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  208.202112][ T8488] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  208.347697][T13398] veth3: entered promiscuous mode
[  208.463586][T13407] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  212.752906][T13450] __nla_validate_parse: 1 callbacks suppressed
[  212.752923][T13450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3269'.
[  213.158452][T13482] dvmrp1: tun_chr_ioctl cmd 1074025677
[  213.160940][T13482] dvmrp1: linktype set to 0
[  213.162878][T13485] netlink: 'syz.1.3284': attribute type 4 has an invalid length.
[  213.554736][T13509] netlink: 'syz.2.3289': attribute type 2 has an invalid length.
[  213.735462][T13498] bond0: (slave dummy0): Releasing backup interface
[  213.745073][T13498] dummy0: left promiscuous mode
[  213.875452][T13498] : left allmulticast mode
[  213.877486][T13498] : left promiscuous mode
[  213.879656][T13498] bridge0: port 1() entered disabled state
[  213.885960][T13498] bridge_slave_1: left allmulticast mode
[  213.889371][T13498] bridge_slave_1: left promiscuous mode
[  213.891810][T13498] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.905079][T13498] bond0: (slave 45): Releasing backup interface
[  213.909633][T13498] : left promiscuous mode
[  213.916634][T13498] bond0: (slave bond_slave_1): Releasing backup interface
[  213.922605][T13498] bond_slave_1: left promiscuous mode
[  213.933035][T13498] team_slave_0: left promiscuous mode
[  213.941319][T13498] team0: Port device team_slave_0 removed
[  213.945337][T13498] team_slave_1: left promiscuous mode
[  213.953637][T13498] team0: Port device team_slave_1 removed
[  213.956656][T13498] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  213.960130][T13498] batman_adv: batadv0: Removing interface: batadv_slave_0
[  213.964633][T13498] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  213.967429][T13498] batman_adv: batadv0: Removing interface: batadv_slave_1
[  213.974787][T13498] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  213.981285][T13503] team0: No ports can be present during mode change
[  214.086107][ T5001] Bluetooth: hci2: link tx timeout
[  214.088369][ T5001] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  214.220815][T13518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  214.234897][T13518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  214.321447][T13523] bond1: option downdelay: invalid value (18446744073709547521)
[  214.324363][T13523] bond1: option downdelay: allowed values 0 - 2147483647
[  214.330176][T13523] bond1 (unregistering): Released all slaves
[  215.159434][T13558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3315'.
[  215.205016][T13562] syzkaller0: entered promiscuous mode
[  215.231557][   T33] audit: type=1804 audit(1778542083.509:6): pid=13564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3317" name="/newroot/1113/memory.events" dev="tmpfs" ino=5626 res=1 errno=0
[  215.239759][T13562] syzkaller0: entered allmulticast mode
[  216.086546][T13605] netlink: 'syz.1.3336': attribute type 6 has an invalid length.
[  216.089660][T13605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3336'.
[  216.139927][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  216.281239][T13616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3342'.
[  216.284611][T13616] batman_adv: batadv0: Removing interface: vlan2
[  217.147085][T13679] batman_adv: batadv0: Adding interface: macvlan2
[  217.149941][T13679] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  217.159631][T13679] batman_adv: batadv0: Interface activated: macvlan2
[  217.553507][ T8488] nci: nci_data_exchange_complete: no rx callback, dropping rx data...
[  217.646002][T13724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  217.743794][T13730] netlink: 153712 bytes leftover after parsing attributes in process `syz.0.3393'.
[  218.101338][T13752] netlink: 'syz.2.3396': attribute type 21 has an invalid length.
[  218.104282][T13752] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3396'.
[  218.110257][T13752] netlink: 'syz.2.3396': attribute type 4 has an invalid length.
[  218.113421][T13752] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3396'.
[  218.288680][T13705] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  218.528502][T13781] netlink: 'syz.2.3414': attribute type 49 has an invalid length.
[  218.722269][T13794] netdevsim netdevsim1: Direct firmware load for . failed with error -2
[  218.727881][T13794] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  219.845131][T13838] syzkaller0: entered promiscuous mode
[  219.846857][T13838] syzkaller0: entered allmulticast mode
[  222.325818][T13925] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3478'.
[  222.580056][T13892] Bluetooth: hci0: Opcode 0x080f failed: -4
[  223.191637][T13960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3492'.
[  223.206152][T13960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3492'.
[  223.436435][T13973] xt_hashlimit: overflow, try lower: 6/0
[  223.542037][T13978] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3501'.
[  223.557295][T13978] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3501'.
[  223.810930][ T5001] Bluetooth: hci0: command 0x0406 tx timeout
[  224.335523][T14034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3523'.
[  224.678642][T14058] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3532'.
[  225.276063][T14093] x_tables: ip_tables: time.0 match: invalid size 24 (kernel) != (user) 40
[  225.386482][T14102] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3554'.
[  225.549933][T14112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3559'.
[  225.876789][T14142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3572'.
[  226.052359][T14155] smc: net device wlan0 applied user defined pnetid SYZ0
[  226.793660][T14222] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3610'.
[  227.481127][T14269] syzkaller0: entered promiscuous mode
[  227.483209][T14269] syzkaller0: entered allmulticast mode
[  228.641127][T14334] bridge3: entered promiscuous mode
[  228.643353][T14334] bridge3: entered allmulticast mode
[  229.413167][T14364] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  229.854722][T14385] veth0_to_team: entered promiscuous mode
[  230.041639][T14382] netlink: 'syz.2.3676': attribute type 4 has an invalid length.
[  230.044506][T14382] __nla_validate_parse: 6 callbacks suppressed
[  230.044521][T14382] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3676'.
[  230.612433][T14415] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3689'.
[  230.631596][T14415] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3689'.
[  231.915601][T14467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3707'.
[  232.060662][T14486] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (32769) !
[  232.149182][T14496] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3720'.
[  232.229612][T14505] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  232.237201][T14505] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  232.263256][T14509] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3726'.
[  232.322562][T14514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3728'.
[  232.829031][T14548] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3743'.
[  233.334167][T14588] netlink: 'syz.0.3761': attribute type 10 has an invalid length.
[  233.590241][T14604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3770'.
[  234.081527][T14647] : renamed from bond0
[  234.480887][T14682] netlink: 'syz.0.3799': attribute type 1 has an invalid length.
[  234.484121][T14682] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3799'.
[  235.436424][T14743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3827'.
[  235.554771][T14750] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  236.252720][T14800] netlink: 'syz.0.3851': attribute type 6 has an invalid length.
[  236.452614][T14821] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component
[  236.510509][T14827] netlink: 'syz.2.3864': attribute type 32 has an invalid length.
[  236.513542][T14827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3864'.
[  236.554464][T14827] bond10: Setting coupled_control to off (0)
[  236.843186][T14849] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3874'.
[  236.845969][T14849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3874'.
[  236.849351][T14849] tc_dump_action: action bad kind
[  237.050736][T14871] netlink: 'syz.1.3884': attribute type 61 has an invalid length.
[  237.053408][T14871] netlink: 'syz.1.3884': attribute type 62 has an invalid length.
[  237.239506][T14892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3891'.
[  237.570452][T14920] netlink: 'syz.0.3900': attribute type 29 has an invalid length.
[  237.577137][T14920] netlink: 'syz.0.3900': attribute type 29 has an invalid length.
[  238.451708][T14950] SET target dimension over the limit!
[  238.679925][T14980] netlink: 'syz.2.3926': attribute type 2 has an invalid length.
[  238.749124][T14985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3928'.
[  238.908236][T14999] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3934'.
[  238.911813][T14999] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3934'.
[  239.141038][T15025] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3947'.
[  239.144348][T15025] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  239.794927][T15092] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3970'.
[  239.973525][T15100] syzkaller0: entered promiscuous mode
[  239.975884][T15100] syzkaller0: entered allmulticast mode
[  240.542048][T15147] __nla_validate_parse: 1 callbacks suppressed
[  240.542065][T15147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3998'.
[  240.548819][T15147] openvswitch: netlink: Invalid VLAN frame
[  240.952986][T15178] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4013'.
[  241.165758][T15197] netlink: 'syz.2.4021': attribute type 8 has an invalid length.
[  241.231932][T15205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4024'.
[  241.269813][T15205] batman_adv: batadv0: Adding interface: veth13
[  241.274101][T15205] batman_adv: batadv0: Interface activated: veth13
[  241.351643][T15221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4032'.
[  241.354323][T15221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4032'.
[  242.004479][T15286] netlink: 192 bytes leftover after parsing attributes in process `syz.1.4058'.
[  242.312641][T15305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4066'.
[  243.437576][T15373] netlink: 'syz.2.4092': attribute type 11 has an invalid length.
[  245.856916][T15485] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  245.868026][T15485] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  246.310748][T15508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4151'.
[  246.314776][T15508] netlink: 94 bytes leftover after parsing attributes in process `syz.0.4151'.
[  246.325041][T15508] netlink: 'syz.0.4151': attribute type 1 has an invalid length.
[  246.335424][T15508] netlink: 568 bytes leftover after parsing attributes in process `syz.0.4151'.
[  246.419841][T15516] syzkaller0: entered promiscuous mode
[  246.422485][T15516] syzkaller0: entered allmulticast mode
[  246.512809][T15523] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  246.526087][T15523] team0: entered promiscuous mode
[  246.531421][T15523] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  246.579553][T15526] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4161'.
[  246.667336][T15534] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4164'.
[  246.908210][T15542] team0: Mode "act``up" not found
[  247.337525][T15559] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma?
[  247.404568][T15565] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4178'.
[  247.407418][T15565] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4178'.
[  247.536660][T15576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4182'.
[  248.527695][T15638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4211'.
[  248.532826][T15638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4211'.
[  248.865697][T15664] netlink: 'syz.0.4223': attribute type 1 has an invalid length.
[  248.948658][T15669] : renamed from bridge_slave_0 (while UP)
[  249.599299][ T8488] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  249.606642][ T8488] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  249.617940][ T8488] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  249.624031][ T8488] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  250.217134][T15781] syzkaller0: entered promiscuous mode
[  250.222131][T15781] syzkaller0: entered allmulticast mode
[  251.698390][T15819] syzkaller1: entered promiscuous mode
[  251.704163][T15819] syzkaller1: entered allmulticast mode
[  252.036008][T15837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4299'.
[  252.219304][T15845] netlink: 'syz.0.4303': attribute type 1 has an invalid length.
[  252.222307][T15845] netlink: 'syz.0.4303': attribute type 1 has an invalid length.
[  252.225376][T15845] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4303'.
[  252.817109][T15880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4319'.
[  252.891936][T15885] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4321'.
[  253.141286][T15911] syzkaller0: entered promiscuous mode
[  253.142977][T15911] syzkaller0: entered allmulticast mode
[  253.150309][T15911] sch_tbf: burst 185 is lower than device syzkaller0 mtu (1500) !
[  253.604725][T15956] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4353'.
[  254.623864][ T8488] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  254.667449][T15984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4362'.
[  254.679721][T15984] netlink: 580 bytes leftover after parsing attributes in process `syz.2.4362'.
[  257.531903][T15976] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  257.762787][T16048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4391'.
[  257.855675][T16056] syzkaller0: entered promiscuous mode
[  257.859462][T16056] syzkaller0: entered allmulticast mode
[  258.504895][T16123] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  258.589624][T16127] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4425'.
[  258.938388][T16151] syzkaller0: entered promiscuous mode
[  258.945649][T16151] syzkaller0: entered allmulticast mode
[  259.811726][T16202] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4455'.
[  259.960033][T16165] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  260.085752][T16216] ip6_tunnel: non-ECT from fe80:e800:0000:0000:0000:0000:0000:0021 with DS=0x7
[  260.161715][T16221] syzkaller0: entered promiscuous mode
[  260.164626][T16221] syzkaller0: entered allmulticast mode
[  260.172765][T16221] tc action pedit offset must be on 32 bit boundaries
[  261.674004][T16276] netlink: ct family unspecified
[  261.675955][T16276] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  261.922558][T16301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4501'.
[  261.979191][T16306] netlink: 'syz.2.4503': attribute type 10 has an invalid length.
[  261.983727][T16306] syz_tun: entered promiscuous mode
[  261.994767][T16306] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  262.029437][T16308] netlink: 'syz.2.4505': attribute type 1 has an invalid length.
[  262.031871][T16308] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4505'.
[  262.034815][T16308] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4505'.
[  262.106736][T16314] syz_tun: entered allmulticast mode
[  262.109795][T16313] syz_tun: left allmulticast mode
[  262.573705][T16347] netlink: 'syz.0.4521': attribute type 29 has an invalid length.
[  262.763518][T16370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4531'.
[  263.331951][T16405] netlink: 'syz.2.4545': attribute type 1 has an invalid length.
[  263.334914][T16405] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4545'.
[  263.338613][T16405] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4545'.
[  263.342004][T16405] netlink: 'syz.2.4545': attribute type 1 has an invalid length.
[  263.621128][T16409] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  263.825198][T16429] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4553'.
[  263.902882][T16431] bond13: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  264.013767][T16438] bridge8: entered allmulticast mode
[  264.466047][T16475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4574'.
[  264.469094][T16475] IPVS: Unknown mcast interface: vcan0
[  265.466787][T16505] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.747238][T16527] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4594'.
[  265.751704][T16527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4594'.
[  266.334144][T16577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4619'.
[  266.899486][T16622] netlink: 272 bytes leftover after parsing attributes in process `syz.2.4641'.
[  267.006313][T16633] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4644'.
[  267.073663][T16637] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4645'.
[  267.079710][T16637] openvswitch: netlink: Key type 769 is out of range max 32
[  267.143585][T16641] sctp: [Deprecated]: syz.0.4647 (pid 16641) Use of struct sctp_assoc_value in delayed_ack socket option.
[  267.143585][T16641] Use struct sctp_sack_info instead
[  270.740908][T16775] __nla_validate_parse: 1 callbacks suppressed
[  270.740923][T16775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4700'.
[  271.270017][T16726] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  271.382845][T16792] netlink: 'syz.1.4708': attribute type 1 has an invalid length.
[  271.386185][T16793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4706'.
[  271.553505][T16804] netlink: 'syz.1.4713': attribute type 2 has an invalid length.
[  271.555871][T16804] netlink: 119 bytes leftover after parsing attributes in process `syz.1.4713'.
[  271.750626][T16820] batman_adv: batadv0: Adding interface: macvtap1
[  271.752693][T16820] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  271.801651][T16826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4723'.
[  271.903171][T16838] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4726'.
[  274.869656][T16839] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  275.060047][T16867] netlink: 'syz.2.4740': attribute type 12 has an invalid length.
[  275.063147][T16867] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4740'.
[  275.288019][T16891] netlink: 'syz.2.4752': attribute type 5 has an invalid length.
[  275.570556][T16925] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4766'.
[  277.467136][T16973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4788'.
[  277.803661][T16985] block nbd1: reconnected socket
[  277.889621][   T56] block nbd1: Receive control failed (result -32)
[  278.293900][T17013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4807'.
[  278.682714][T17046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4822'.
[  278.715410][T17049] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.4823'.
[  278.721027][T17049] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4823'.
[  278.724491][T17049] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4823'.
[  278.836371][T17060] syzkaller0: entered promiscuous mode
[  278.840374][T17060] syzkaller0: entered allmulticast mode
[  279.104777][T17075] vxcan0: entered allmulticast mode
[  279.284815][T17087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4841'.
[  279.294486][T17087] netlink: 'syz.0.4841': attribute type 9 has an invalid length.
[  279.304934][T17089] netlink: 'syz.2.4842': attribute type 10 has an invalid length.
[  279.499159][T17100] netlink: 'syz.0.4848': attribute type 1 has an invalid length.
[  279.524843][T17100] 8021q: adding VLAN 0 to HW filter on device bond14
[  279.721263][T17122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4857'.
[  279.802399][T17131] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4861'.
[  279.808279][T17131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4861'.
[  279.821761][T17131] vlan3: entered allmulticast mode
[  279.827871][T17131] gretap0: entered allmulticast mode
[  280.194436][T17170] netlink: 'syz.2.4880': attribute type 12 has an invalid length.
[  280.245581][T17172] netlink: 'syz.1.4881': attribute type 1 has an invalid length.
[  280.275250][T17172] bond0: entered promiscuous mode
[  280.280952][T17172] 8021q: adding VLAN 0 to HW filter on device bond0
[  280.301821][T17172] 8021q: adding VLAN 0 to HW filter on device bond0
[  280.307144][T17172] bond0: (slave vti0): The slave device specified does not support setting the MAC address
[  280.313707][T17172] bond0: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  280.328061][T17172] bond0: (slave vti0): making interface the new active one
[  280.330922][T17172] vti0: entered promiscuous mode
[  280.336373][T17172] bond0: (slave vti0): Enslaving as an active interface with an up link
[  281.261040][T17218] netlink: 'syz.2.4902': attribute type 11 has an invalid length.
[  281.824969][T17246] veth15: entered promiscuous mode
[  281.829933][T17246] team0: Port device veth15 added
[  282.264565][T17268] netlink: 'syz.2.4923': attribute type 13 has an invalid length.
[  282.747675][T17296] netlink: 'syz.0.4936': attribute type 1 has an invalid length.
[  282.845372][T17296] 8021q: adding VLAN 0 to HW filter on device bond16
[  282.856646][T17296] bond15: (slave bond16): making interface the new active one
[  282.862073][T17296] bond15: (slave bond16): Enslaving as an active interface with an up link
[  282.980906][T17312] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  282.987394][T17312] syzkaller0: entered promiscuous mode
[  282.992506][T17312] syzkaller0: entered allmulticast mode
[  283.005669][T17312] tipc: Resetting bearer <eth:syzkaller0>
[  283.012423][T17311] tipc: Resetting bearer <eth:syzkaller0>
[  283.034185][T17311] tipc: Disabling bearer <eth:syzkaller0>
[  283.242883][T17326] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  283.264761][T17326] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  284.510958][T17418] pim6reg: entered allmulticast mode
[  284.527526][T17420] netlink: 'syz.1.4987': attribute type 163 has an invalid length.
[  285.000521][T17449] netlink: 'syz.1.4999': attribute type 3 has an invalid length.
[  285.009402][T17449] __nla_validate_parse: 1 callbacks suppressed
[  285.009418][T17449] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4999'.
[  285.500459][T17457] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5002'.
[  285.556557][T17460] xt_hashlimit: size too large, truncated to 1048576
[  285.595241][T17466] IPv6: addrconf: prefix option has invalid lifetime
[  286.286620][T17502] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  286.296651][T17502] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  286.316120][T17504] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5023'.
[  286.554535][T17525] veth1_to_hsr: entered allmulticast mode
[  286.691071][T17540] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5039'.
[  286.827260][T17552] syzkaller0: entered promiscuous mode
[  286.834683][T17552] syzkaller0: entered allmulticast mode
[  286.847699][T17552] tc action pedit offset 64 out of bounds
[  286.850173][T17552] tc action pedit offset 64 out of bounds
[  286.852325][T17552] tc action pedit offset 64 out of bounds
[  286.854471][T17552] tc action pedit offset 64 out of bounds
[  286.856683][T17552] tc action pedit offset 64 out of bounds
[  286.860279][T17552] tc action pedit offset 64 out of bounds
[  286.862435][T17552] tc action pedit offset 64 out of bounds
[  286.864590][T17552] tc action pedit offset 64 out of bounds
[  286.866704][T17552] tc action pedit offset 64 out of bounds
[  286.868936][T17552] tc action pedit offset 64 out of bounds
[  286.871084][T17552] 0: reclassify loop, rule prio 0, protocol 800
[  287.141969][T17576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5057'.
[  287.191670][T17578] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  287.216345][T17578] team0: Mode changed to "activebackup"
[  287.298174][T17584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5061'.
[  288.014274][T17624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5077'.
[  288.024954][T17624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5077'.
[  288.540446][T17644] nbd3: detected capacity change from 0 to 63
[  288.546443][ T9867] block nbd3: Receive control failed (result -32)
[  288.549746][   T55] block nbd3: Receive control failed (result -32)
[  288.569368][T17329] block nbd3: Dead connection, failed to find a fallback
[  288.572897][T17329] block nbd3: shutting down sockets
[  288.576101][T17329] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  288.580339][T17329] Buffer I/O error on dev nbd3, logical block 0, async page read
[  288.585138][T17329] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  288.591093][T17329] Buffer I/O error on dev nbd3, logical block 1, async page read
[  288.594260][T17329] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  288.601484][T17329] Buffer I/O error on dev nbd3, logical block 2, async page read
[  288.603997][T17664] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5095'.
[  288.609735][T17329] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  288.613463][T17329] Buffer I/O error on dev nbd3, logical block 3, async page read
[  288.616648][T17329] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  288.621059][T17329] Buffer I/O error on dev nbd3, logical block 0, async page read
[  288.624424][T17329] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  288.627582][T17664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5095'.
[  288.631975][T17329] Buffer I/O error on dev nbd3, logical block 1, async page read
[  288.635074][T17329] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  288.639253][T17329] Buffer I/O error on dev nbd3, logical block 2, async page read
[  288.640094][T17664] netlink: 'syz.1.5095': attribute type 1 has an invalid length.
[  288.642396][T17329] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  288.648499][T17329] Buffer I/O error on dev nbd3, logical block 3, async page read
[  288.651630][T17329] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  288.654354][T17329] Buffer I/O error on dev nbd3, logical block 0, async page read
[  288.657274][T17329] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  288.660994][T17329] Buffer I/O error on dev nbd3, logical block 1, async page read
[  288.666188][T17329] ldm_validate_partition_table(): Disk read failed.
[  288.677388][T17329] Dev nbd3: unable to read RDB block 0
[  288.684919][T17329]  nbd3: unable to read partition table
[  288.724160][T17329] ldm_validate_partition_table(): Disk read failed.
[  288.728817][T17329] Dev nbd3: unable to read RDB block 0
[  288.734236][T17329]  nbd3: unable to read partition table
[  290.128183][T17729] 
[  290.129082][T17729] ======================================================
[  290.131212][T17729] WARNING: possible circular locking dependency detected
[  290.133331][T17729] syzkaller #0 Not tainted
[  290.135135][T17729] ------------------------------------------------------
[  290.137567][T17729] syz.0.5121/17729 is trying to acquire lock:
[  290.139350][T17729] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660
[  290.142214][T17729] 
[  290.142214][T17729] but task is already holding lock:
[  290.144589][T17729] ffff8881af5baf88 (&hugetlbfs_i_mmap_rwsem_key){+.+.}-{4:4}, at: unmap_vmas+0x354/0x530
[  290.147477][T17729] 
[  290.147477][T17729] which lock already depends on the new lock.
[  290.147477][T17729] 
[  290.150624][T17729] 
[  290.150624][T17729] the existing dependency chain (in reverse order) is:
[  290.153450][T17729] 
[  290.153450][T17729] -> #8 (&hugetlbfs_i_mmap_rwsem_key){+.+.}-{4:4}:
[  290.156502][T17729]        down_write+0x96/0x200
[  290.158042][T17729]        mmap_region+0x1cac/0x22a0
[  290.159577][T17729]        do_mmap+0xc39/0x10c0
[  290.161026][T17729]        vm_mmap_pgoff+0x2c9/0x4f0
[  290.162774][T17729]        ksys_mmap_pgoff+0x586/0x760
[  290.164324][T17729]        do_syscall_64+0x15f/0xf80
[  290.165852][T17729]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.167743][T17729] 
[  290.167743][T17729] -> #7 (&mm->mmap_lock){++++}-{4:4}:
[  290.169965][T17729]        __might_fault+0xcb/0x130
[  290.171556][T17729]        _copy_from_user+0x28/0xb0
[  290.173096][T17729]        csum_and_copy_from_iter_full+0x1e7/0x1f00
[  290.175023][T17729]        ip_generic_getfrag+0x149/0x2d0
[  290.176664][T17729]        __ip6_append_data+0x39cd/0x3f60
[  290.178440][T17729]        ip6_append_data+0x10f/0x280
[  290.180029][T17729]        rawv6_sendmsg+0x12d3/0x18e0
[  290.181614][T17729]        ____sys_sendmsg+0x80a/0x9f0
[  290.183169][T17729]        ___sys_sendmsg+0x2a5/0x360
[  290.184760][T17729]        __x64_sys_sendmsg+0x1bd/0x2a0
[  290.186361][T17729]        do_syscall_64+0x15f/0xf80
[  290.187878][T17729]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.189821][T17729] 
[  290.189821][T17729] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  290.192161][T17729]        lock_sock_nested+0x41/0x100
[  290.193999][T17729]        inet_shutdown+0x6a/0x390
[  290.195579][T17729]        nbd_mark_nsock_dead+0x2e9/0x560
[  290.197255][T17729]        recv_work+0x1c2e/0x1d40
[  290.198761][T17729]        process_scheduled_works+0xb5d/0x1860
[  290.201017][T17729]        worker_thread+0xa53/0xfc0
[  290.203001][T17729]        kthread+0x388/0x470
[  290.204819][T17729]        ret_from_fork+0x514/0xb70
[  290.206769][T17729]        ret_from_fork_asm+0x1a/0x30
[  290.208770][T17729] 
[  290.208770][T17729] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  290.211660][T17729]        __mutex_lock+0x1a3/0x1550
[  290.213651][T17729]        nbd_queue_rq+0x37b/0x1100
[  290.215650][T17729]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  290.217997][T17729]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  290.220646][T17729]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  290.223181][T17729]        blk_mq_run_hw_queue+0x348/0x4f0
[  290.225377][T17729]        blk_mq_dispatch_list+0xd16/0xe10
[  290.227593][T17729]        blk_mq_flush_plug_list+0x48d/0x570
[  290.229923][T17729]        __blk_flush_plug+0x3ed/0x4d0
[  290.232068][T17729]        __submit_bio+0x28d/0x580
[  290.234049][T17729]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  290.236462][T17729]        block_read_full_folio+0x599/0x830
[  290.238722][T17729]        filemap_read_folio+0x137/0x3b0
[  290.240849][T17729]        do_read_cache_folio+0x358/0x590
[  290.242663][T17729]        read_part_sector+0xb6/0x2b0
[  290.244243][T17729]        adfspart_check_ICS+0xb1/0x960
[  290.246012][T17729]        bdev_disk_changed+0x817/0x1770
[  290.247779][T17729]        blkdev_get_whole+0x380/0x510
[  290.249624][T17729]        bdev_open+0x31e/0xd30
[  290.251288][T17729]        blkdev_open+0x470/0x610
[  290.252792][T17729]        do_dentry_open+0x785/0x14e0
[  290.254413][T17729]        vfs_open+0x3b/0x340
[  290.255899][T17729]        path_openat+0x2e08/0x3860
[  290.257655][T17729]        do_file_open+0x23e/0x4a0
[  290.259498][T17729]        do_sys_openat2+0x113/0x200
[  290.261505][T17729]        __x64_sys_openat+0x138/0x170
[  290.263506][T17729]        do_syscall_64+0x15f/0xf80
[  290.265435][T17729]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.267877][T17729] 
[  290.267877][T17729] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  290.270664][T17729]        __mutex_lock+0x1a3/0x1550
[  290.272644][T17729]        nbd_queue_rq+0xc6/0x1100
[  290.274535][T17729]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  290.276845][T17729]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  290.279401][T17729]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  290.281908][T17729]        blk_mq_run_hw_queue+0x348/0x4f0
[  290.284060][T17729]        blk_mq_dispatch_list+0xd16/0xe10
[  290.286192][T17729]        blk_mq_flush_plug_list+0x48d/0x570
[  290.288442][T17729]        __blk_flush_plug+0x3ed/0x4d0
[  290.290483][T17729]        __submit_bio+0x28d/0x580
[  290.292424][T17729]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  290.294809][T17729]        block_read_full_folio+0x599/0x830
[  290.297002][T17729]        filemap_read_folio+0x137/0x3b0
[  290.299023][T17729]        do_read_cache_folio+0x358/0x590
[  290.301084][T17729]        read_part_sector+0xb6/0x2b0
[  290.303027][T17729]        adfspart_check_ICS+0xb1/0x960
[  290.305014][T17729]        bdev_disk_changed+0x817/0x1770
[  290.307032][T17729]        blkdev_get_whole+0x380/0x510
[  290.309143][T17729]        bdev_open+0x31e/0xd30
[  290.310612][T17729]        blkdev_open+0x470/0x610
[  290.312219][T17729]        do_dentry_open+0x785/0x14e0
[  290.313878][T17729]        vfs_open+0x3b/0x340
[  290.315326][T17729]        path_openat+0x2e08/0x3860
[  290.317365][T17729]        do_file_open+0x23e/0x4a0
[  290.319049][T17729]        do_sys_openat2+0x113/0x200
[  290.320586][T17729]        __x64_sys_openat+0x138/0x170
[  290.322176][T17729]        do_syscall_64+0x15f/0xf80
[  290.323713][T17729]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.325729][T17729] 
[  290.325729][T17729] -> #3 (set->srcu){.+.+}-{0:0}:
[  290.327826][T17729]        __synchronize_srcu+0xca/0x300
[  290.329804][T17729]        elevator_switch+0x1e8/0x7a0
[  290.331869][T17729]        elevator_change+0x2cc/0x450
[  290.333747][T17729]        elevator_set_default+0x36c/0x430
[  290.335666][T17729]        blk_register_queue+0x3e9/0x4e0
[  290.337991][T17729]        __add_disk+0x677/0xd50
[  290.339884][T17729]        add_disk_fwnode+0xfb/0x480
[  290.341937][T17729]        nbd_dev_add+0x72c/0xb50
[  290.343884][T17729]        nbd_init+0x168/0x1f0
[  290.345704][T17729]        do_one_initcall+0x250/0x870
[  290.347713][T17729]        do_initcall_level+0x104/0x190
[  290.349896][T17729]        do_initcalls+0x59/0xa0
[  290.351788][T17729]        kernel_init_freeable+0x2a6/0x3e0
[  290.353958][T17729]        kernel_init+0x1d/0x1d0
[  290.355800][T17729]        ret_from_fork+0x514/0xb70
[  290.357565][T17729]        ret_from_fork_asm+0x1a/0x30
[  290.359239][T17729] 
[  290.359239][T17729] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  290.361713][T17729]        __mutex_lock+0x1a3/0x1550
[  290.363664][T17729]        elevator_change+0x1b3/0x450
[  290.365706][T17729]        elevator_set_none+0xb5/0x140
[  290.367756][T17729]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  290.370168][T17729]        nbd_start_device+0x17f/0xb10
[  290.372275][T17729]        nbd_genl_connect+0x165b/0x1cf0
[  290.374181][T17729]        genl_family_rcv_msg_doit+0x22a/0x330
[  290.376499][T17729]        genl_rcv_msg+0x61c/0x7a0
[  290.378606][T17729]        netlink_rcv_skb+0x232/0x4b0
[  290.380471][T17729]        genl_rcv+0x28/0x40
[  290.381940][T17729]        netlink_unicast+0x75c/0x8e0
[  290.383646][T17729]        netlink_sendmsg+0x813/0xb40
[  290.385284][T17729]        ____sys_sendmsg+0x972/0x9f0
[  290.386934][T17729]        ___sys_sendmsg+0x2a5/0x360
[  290.388637][T17729]        __x64_sys_sendmsg+0x1bd/0x2a0
[  290.390239][T17729]        do_syscall_64+0x15f/0xf80
[  290.391755][T17729]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.393628][T17729] 
[  290.393628][T17729] -> #1 (&q->q_usage_counter(io)#52){++++}-{0:0}:
[  290.396269][T17729]        blk_alloc_queue+0x546/0x680
[  290.397874][T17729]        __blk_mq_alloc_disk+0x197/0x390
[  290.399545][T17729]        nbd_dev_add+0x499/0xb50
[  290.401562][T17729]        nbd_init+0x168/0x1f0
[  290.403344][T17729]        do_one_initcall+0x250/0x870
[  290.405372][T17729]        do_initcall_level+0x104/0x190
[  290.407228][T17729]        do_initcalls+0x59/0xa0
[  290.408659][T17729]        kernel_init_freeable+0x2a6/0x3e0
[  290.410788][T17729]        kernel_init+0x1d/0x1d0
[  290.412663][T17729]        ret_from_fork+0x514/0xb70
[  290.414624][T17729]        ret_from_fork_asm+0x1a/0x30
[  290.416661][T17729] 
[  290.416661][T17729] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  290.419896][T17729]        __lock_acquire+0x15a5/0x2cf0
[  290.421986][T17729]        lock_acquire+0x106/0x350
[  290.423931][T17729]        fs_reclaim_acquire+0x71/0x100
[  290.426016][T17729]        __kmalloc_cache_noprof+0x40/0x660
[  290.428235][T17729]        allocate_file_region_entries+0x1ef/0x5b0
[  290.430686][T17729]        __vma_reservation_common+0x6fb/0x8f0
[  290.432997][T17729]        __unmap_hugepage_range+0x10e2/0x1520
[  290.435178][T17729]        __zap_vma_range+0x4a1d/0x4b40
[  290.437110][T17729]        unmap_vmas+0x379/0x530
[  290.438643][T17729]        unmap_region+0x208/0x330
[  290.440076][T17729]        mmap_region+0xc9a/0x22a0
[  290.441766][T17729]        do_mmap+0xc39/0x10c0
[  290.443383][T17729]        vm_mmap_pgoff+0x2c9/0x4f0
[  290.445102][T17729]        ksys_mmap_pgoff+0x586/0x760
[  290.447069][T17729]        do_syscall_64+0x15f/0xf80
[  290.449046][T17729]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.451484][T17729] 
[  290.451484][T17729] other info that might help us debug this:
[  290.451484][T17729] 
[  290.455198][T17729] Chain exists of:
[  290.455198][T17729]   fs_reclaim --> &mm->mmap_lock --> &hugetlbfs_i_mmap_rwsem_key
[  290.455198][T17729] 
[  290.459148][T17729]  Possible unsafe locking scenario:
[  290.459148][T17729] 
[  290.461345][T17729]        CPU0                    CPU1
[  290.462901][T17729]        ----                    ----
[  290.464443][T17729]   lock(&hugetlbfs_i_mmap_rwsem_key);
[  290.466034][T17729]                                lock(&mm->mmap_lock);
[  290.467987][T17729]                                lock(&hugetlbfs_i_mmap_rwsem_key);
[  290.470304][T17729]   lock(fs_reclaim);
[  290.471484][T17729] 
[  290.471484][T17729]  *** DEADLOCK ***
[  290.471484][T17729] 
[  290.473829][T17729] 3 locks held by syz.0.5121/17729:
[  290.475332][T17729]  #0: ffff888114923438 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x234/0x4f0
[  290.478099][T17729]  #1: ffff8881abcebce0 (&resv_map->rw_sema){++++}-{4:4}, at: __hugetlb_zap_begin+0x317/0x3a0
[  290.481278][T17729]  #2: ffff8881af5baf88 (&hugetlbfs_i_mmap_rwsem_key){+.+.}-{4:4}, at: unmap_vmas+0x354/0x530
[  290.485009][T17729] 
[  290.485009][T17729] stack backtrace:
[  290.487093][T17729] CPU: 1 UID: 0 PID: 17729 Comm: syz.0.5121 Not tainted syzkaller #0 PREEMPT(full) 
[  290.487106][T17729] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  290.487114][T17729] Call Trace:
[  290.487119][T17729]  <TASK>
[  290.487126][T17729]  dump_stack_lvl+0xe8/0x150
[  290.487138][T17729]  print_circular_bug+0x2e1/0x300
[  290.487152][T17729]  check_noncircular+0x12e/0x150
[  290.487164][T17729]  __lock_acquire+0x15a5/0x2cf0
[  290.487174][T17729]  ? __lock_acquire+0x6b5/0x2cf0
[  290.487183][T17729]  ? __lock_acquire+0x6b5/0x2cf0
[  290.487192][T17729]  ? __lock_acquire+0x6b5/0x2cf0
[  290.487200][T17729]  ? __kmalloc_cache_noprof+0x40/0x660
[  290.487211][T17729]  lock_acquire+0x106/0x350
[  290.487219][T17729]  ? __kmalloc_cache_noprof+0x40/0x660
[  290.487229][T17729]  ? __lock_acquire+0x6b5/0x2cf0
[  290.487244][T17729]  fs_reclaim_acquire+0x71/0x100
[  290.487257][T17729]  ? __kmalloc_cache_noprof+0x40/0x660
[  290.487268][T17729]  __kmalloc_cache_noprof+0x40/0x660
[  290.487279][T17729]  ? allocate_file_region_entries+0x1ef/0x5b0
[  290.487288][T17729]  ? do_raw_spin_unlock+0x4d/0x210
[  290.487299][T17729]  allocate_file_region_entries+0x1ef/0x5b0
[  290.487310][T17729]  ? __pfx_allocate_file_region_entries+0x10/0x10
[  290.487321][T17729]  __vma_reservation_common+0x6fb/0x8f0
[  290.487331][T17729]  __unmap_hugepage_range+0x10e2/0x1520
[  290.487348][T17729]  __zap_vma_range+0x4a1d/0x4b40
[  290.487360][T17729]  ? __lock_acquire+0x6b5/0x2cf0
[  290.487369][T17729]  ? __lock_acquire+0x6b5/0x2cf0
[  290.487379][T17729]  ? __hugetlb_zap_begin+0x317/0x3a0
[  290.487390][T17729]  ? __hugetlb_zap_begin+0x317/0x3a0
[  290.487402][T17729]  ? unmap_vmas+0x354/0x530
[  290.487414][T17729]  ? __pfx___zap_vma_range+0x10/0x10
[  290.487426][T17729]  ? down_write+0x16d/0x200
[  290.487433][T17729]  ? __pfx_down_write+0x10/0x10
[  290.487440][T17729]  ? __hugetlb_zap_begin+0x33d/0x3a0
[  290.487451][T17729]  ? unmap_vmas+0x1bd/0x530
[  290.487463][T17729]  unmap_vmas+0x379/0x530
[  290.487476][T17729]  ? __pfx_unmap_vmas+0x10/0x10
[  290.487490][T17729]  ? vms_gather_munmap_vmas+0x1201/0x1380
[  290.487542][T17729]  ? tlb_gather_mmu+0x233/0x300
[  290.487555][T17729]  unmap_region+0x208/0x330
[  290.487569][T17729]  ? __pfx_unmap_region+0x10/0x10
[  290.487583][T17729]  ? __mas_set_range+0x12f/0x3c0
[  290.487592][T17729]  mmap_region+0xc9a/0x22a0
[  290.487603][T17729]  ? __lock_acquire+0x6b5/0x2cf0
[  290.487611][T17729]  ? __pfx_mmap_region+0x10/0x10
[  290.487619][T17729]  ? unwind_next_frame+0xa6/0x2550
[  290.487631][T17729]  ? is_bpf_text_address+0x26/0x2b0
[  290.487640][T17729]  ? is_bpf_text_address+0x26/0x2b0
[  290.487656][T17729]  ? stack_depot_save_flags+0x33/0x810
[  290.487667][T17729]  ? __lock_acquire+0x6b5/0x2cf0
[  290.487674][T17729]  ? security_file_alloc+0x34/0x310
[  290.487687][T17729]  ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[  290.487699][T17729]  ? aa_file_perm+0x192/0x15e0
[  290.487711][T17729]  ? mm_get_unmapped_area_vmflags+0xd9/0x110
[  290.487720][T17729]  ? cap_mmap_addr+0xaf/0x100
[  290.487729][T17729]  ? bpf_lsm_mmap_addr+0x9/0x50
[  290.487741][T17729]  ? shmem_mapping+0xd/0x50
[  290.487749][T17729]  ? memfd_check_seals_mmap+0x165/0x200
[  290.487760][T17729]  do_mmap+0xc39/0x10c0
[  290.487771][T17729]  ? __pfx_do_mmap+0x10/0x10
[  290.487778][T17729]  ? down_write_killable+0x180/0x240
[  290.487786][T17729]  ? __pfx_down_write_killable+0x10/0x10
[  290.487794][T17729]  ? apparmor_mmap_file+0x2da/0x3e0
[  290.487802][T17729]  vm_mmap_pgoff+0x2c9/0x4f0
[  290.487812][T17729]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  290.487819][T17729]  ? rcu_is_watching+0x15/0xb0
[  290.487828][T17729]  ? hugetlbfs_get_inode+0x432/0x650
[  290.487838][T17729]  ? hugetlb_file_setup+0x42c/0x630
[  290.487845][T17729]  ksys_mmap_pgoff+0x586/0x760
[  290.487855][T17729]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.487863][T17729]  do_syscall_64+0x15f/0xf80
[  290.487874][T17729]  ? trace_irq_disable+0x3b/0x140
[  290.487886][T17729]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.487894][T17729] RIP: 0033:0x7f0555b9cdd9
[  290.487904][T17729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  290.487912][T17729] RSP: 002b:00007f0556b1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  290.487921][T17729] RAX: ffffffffffffffda RBX: 00007f0555e15fa0 RCX: 00007f0555b9cdd9
[  290.487927][T17729] RDX: 0000000000000000 RSI: 0000000000ff5000 RDI: 0000200000000000
[  290.487933][T17729] RBP: 00007f0555c32d69 R08: ffffffffffffffff R09: 0000000000000000
[  290.487939][T17729] R10: 000000000004ca31 R11: 0000000000000246 R12: 0000000000000000
[  290.487944][T17729] R13: 00007f0555e16038 R14: 00007f0555e15fa0 R15: 00007ffd27c8a5f8
[  290.487953][T17729]  </TASK>
[  290.858062][   T54] Bluetooth: hci2: command 0x0406 tx timeout
