last executing test programs:

536.863261ms ago: executing program 0 (id=2833):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}]}]}, 0x3c}}, 0x0)

536.643847ms ago: executing program 2 (id=2834):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a3200000000140000"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x0)

535.950661ms ago: executing program 0 (id=2835):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="0bac0f0001ac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

535.61993ms ago: executing program 2 (id=2836):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000600))

388.311511ms ago: executing program 2 (id=2839):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002d000b00faffffffffffffff0200000008000300040001000c00018006"], 0x28}}, 0x8000)

387.597049ms ago: executing program 0 (id=2841):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x80}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x7}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8)
r2 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
close(r1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32=0x0], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

327.680399ms ago: executing program 2 (id=2842):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
writev(r0, &(0x7f0000001180)=[{0x0}, {&(0x7f0000000180)="19", 0x1}], 0x2)

327.321416ms ago: executing program 0 (id=2843):
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/26, 0x1a}, 0x40)

325.841628ms ago: executing program 2 (id=2845):
r0 = socket(0x11, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x2118, 0x4)
sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100e2f288a8d2", 0x13}, {&(0x7f0000001c00)="659900c3f7c8e544e1abc41796cae4c9908368acb3abdb908ada84b1c98b91c34352f80ed64e4606a25bcbab94869ac816a7fb9c29a8c768fbffb21ad7f6013ff676da589c", 0x45}], 0x2}}], 0x1, 0x40055)
recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x2}, {{&(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000800)=[{&(0x7f00000007c0)=""/20, 0x14}], 0x1, &(0x7f0000000840)=""/138, 0x8a}, 0x4}], 0x2, 0x2002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180))
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x6100204)
pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000540)="00214797357e0e8d442441e9beae583d48ac340dc69d54af976b6a7c18c4907ed175462f18ec0e16ad9f57abed3bad46320d0d4abf7c3a617f1b2fbe8b338d1fce4490668ce9faadcf6b44b9906eeb59241caa04a1bf2399f37a7f221861e3580bdf025cb470613b79119f1c9fe8b9ee5d1f41b6af7d12a2ba71c7a74727cece06221eadc4d7137811e483a94c1164f4496f0fe1829f55cd2d91b74aeee64bc05e7014dbb599bad1be2d8c", 0xab}, {&(0x7f0000000240)}], 0x2, 0x739, 0x1)
r2 = socket$xdp(0x2c, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000b000000001190adc070329b449703407a3512aaa1c986876e11588dacf75dba53b88ee4dfdccde65e0b4237b0ae09c13f1a32f8c972da0860640c39d50696e1337bf7ce5d6f7dede3bf4b67d69215974c9eb21db67a09f52339d1c83e1a11626b7175205a4b6e90b038abaf2228b4f791dd1961fee09fcd090bf391cb9ef9b22e71a8227dc2aae7f60b5efc0ec0d5ca0b09ddf7e9d53b69676615c645a4374aebc10b2a17690eed08b6dfe3d63ee85b13746f99494c", @ANYRES32, @ANYBLOB="ff0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000010000000400"/28], 0x50)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000005c0)=0x200000, 0x4)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB="1fff7ca2ff178d7ae7795c0e17e0631d7068edd58a5f3202d59492507b901a0ba0e5d9e8065756990d36dcd83e88a2876fc921aefe1794a189d0e51cd99bd037751952dc9169d1f8dd15f872a01cb15f4ae2ed196b14a4f0f02f223582516b8d455e7ae999548e91d0d7afa66ee6c9d8bd66a8342ad81151ac1f0d5d5d04c0a5c9d776c18b1fa876fddaac5897bed78cdd25f3fafa5774295abccf6c874de5b0c41c19f0a387d1676eb5f35a80984013daa39f37a32b81e561d6816b516947668354205a6fa552bc5bce068ce24b410f0f6c2508d0d28b4ad270d73b267ef87e", @ANYRES16=0x0, @ANYBLOB="010427bd7000fcdbdf25140000000c0006000100000001"], 0x20}}, 0x4090)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00'})
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040)=0x800, 0x4)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r4, &(0x7f0000000000)={0x2a, 0x0, 0x7ffe}, 0xc)
r5 = socket(0x2b, 0x1, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20040894)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{0x0}], 0x1}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
bind$qrtr(r4, &(0x7f00000000c0)={0x2a, 0x1, 0x7ffe}, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000140)=""/160, 0xa0}, {&(0x7f0000000200)=""/19, 0x13}], 0x2, 0x6, 0x1)

238.200602ms ago: executing program 0 (id=2846):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, r1, 0x3141e0b2751b0f9b, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x43, 0x1, 0x5}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x6051}, 0x4000)

237.90323ms ago: executing program 1 (id=2847):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f00000020c0)={&(0x7f0000000640)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x46, 0x0, 0x0, &(0x7f0000001e40)=[@mask_cswp={0x58, 0x118, 0x9, {{0x7f, 0x4}, 0x0, 0x0, 0x7, 0x4, 0xef, 0x3, 0xc, 0x7}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xf}], 0x70, 0x20008011}, 0x0)

237.644959ms ago: executing program 1 (id=2848):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003280)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x30, 0x280}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0)

178.130567ms ago: executing program 0 (id=2849):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001600)={0x48, r2, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4)

177.725068ms ago: executing program 1 (id=2850):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000e00)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a07f0ff000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2ebfe94"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000}, 0x34)

97.268424ms ago: executing program 1 (id=2851):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x8800)

45.533236ms ago: executing program 1 (id=2852):
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f00000002c0), &(0x7f0000000380)=""/100}, 0x20)

5.389974ms ago: executing program 1 (id=2853):
unshare(0x20400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@fallback, r0, 0x2f}, 0x20)

0s ago: executing program 2 (id=2854):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a03400004200010025bd7000fddbdf25020000000800388004000680100001800c00c80002000000000000007334048011"], 0x34a0}, 0x1, 0x0, 0x0, 0x8800}, 0x4040)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:61621' (ED25519) to the list of known hosts.
syzkaller login: [   57.560687][ T5791] cgroup: Unknown subsys name 'net'
[   57.662785][ T5791] cgroup: Unknown subsys name 'cpuset'
[   57.667535][ T5791] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.426673][ T5791] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   69.682164][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   69.688240][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   69.694029][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   69.694107][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   69.697109][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   69.700281][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   69.701485][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   69.706351][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   69.718299][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   69.725825][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   69.783821][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   69.787193][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   69.791094][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   69.795104][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   69.798456][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.145601][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   70.189989][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   70.205322][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   70.340336][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.343240][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.345451][ T5838] bridge_slave_0: entered allmulticast mode
[   70.348717][ T5838] bridge_slave_0: entered promiscuous mode
[   70.382286][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.384837][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.387252][ T5846] bridge_slave_0: entered allmulticast mode
[   70.391000][ T5846] bridge_slave_0: entered promiscuous mode
[   70.393762][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.396218][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.398467][ T5838] bridge_slave_1: entered allmulticast mode
[   70.401661][ T5838] bridge_slave_1: entered promiscuous mode
[   70.411798][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.414117][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.416925][ T5841] bridge_slave_0: entered allmulticast mode
[   70.419781][ T5841] bridge_slave_0: entered promiscuous mode
[   70.423725][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.426176][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.428438][ T5846] bridge_slave_1: entered allmulticast mode
[   70.433935][ T5846] bridge_slave_1: entered promiscuous mode
[   70.448294][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.451782][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.454380][ T5841] bridge_slave_1: entered allmulticast mode
[   70.457578][ T5841] bridge_slave_1: entered promiscuous mode
[   70.476129][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.496115][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.501769][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.506436][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.512199][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.525900][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.567842][ T5841] team0: Port device team_slave_0 added
[   70.581599][ T5838] team0: Port device team_slave_0 added
[   70.585157][ T5841] team0: Port device team_slave_1 added
[   70.588884][ T5846] team0: Port device team_slave_0 added
[   70.593175][ T5838] team0: Port device team_slave_1 added
[   70.614471][ T5846] team0: Port device team_slave_1 added
[   70.660562][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.663210][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.673571][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.678519][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.680754][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.689331][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.695296][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.697758][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.705228][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.709681][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.712477][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.722445][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.727102][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.729214][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.739633][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.749446][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.751759][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.759511][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.834011][ T5846] hsr_slave_0: entered promiscuous mode
[   70.837179][ T5846] hsr_slave_1: entered promiscuous mode
[   70.846178][ T5838] hsr_slave_0: entered promiscuous mode
[   70.848754][ T5838] hsr_slave_1: entered promiscuous mode
[   70.852190][ T5838] debugfs: 'hsr0' already exists in 'hsr'
[   70.854196][ T5838] Cannot create hsr debugfs directory
[   70.859212][ T5841] hsr_slave_0: entered promiscuous mode
[   70.862080][ T5841] hsr_slave_1: entered promiscuous mode
[   70.864982][ T5841] debugfs: 'hsr0' already exists in 'hsr'
[   70.866580][ T5841] Cannot create hsr debugfs directory
[   71.180706][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.188028][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.193989][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.205378][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   71.245952][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   71.251137][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   71.257034][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   71.261788][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   71.338680][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   71.345806][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   71.350775][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   71.357592][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   71.413681][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.445981][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.455478][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   71.468606][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.471229][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.482323][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   71.495741][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.498400][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.504680][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.506775][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.523914][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.526375][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.583881][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.629354][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   71.651218][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.653286][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.662612][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.665282][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.706635][ T5841] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   71.711353][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   71.764074][   T55] Bluetooth: hci0: command tx timeout
[   71.766145][   T55] Bluetooth: hci1: command tx timeout
[   71.808371][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.840296][ T5196] Bluetooth: hci2: command tx timeout
[   71.846911][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.886194][ T5846] veth0_vlan: entered promiscuous mode
[   71.907126][ T5846] veth1_vlan: entered promiscuous mode
[   71.924716][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.953099][ T5846] veth0_macvtap: entered promiscuous mode
[   71.958327][ T5838] veth0_vlan: entered promiscuous mode
[   71.966574][ T5846] veth1_macvtap: entered promiscuous mode
[   71.987347][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.991865][ T5838] veth1_vlan: entered promiscuous mode
[   71.999700][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.018943][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.025148][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.031118][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.039609][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.060929][ T5841] veth0_vlan: entered promiscuous mode
[   72.091949][ T5838] veth0_macvtap: entered promiscuous mode
[   72.097260][ T5838] veth1_macvtap: entered promiscuous mode
[   72.106546][ T5841] veth1_vlan: entered promiscuous mode
[   72.127831][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.149440][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.172351][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.176148][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.178732][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.186092][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.192130][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.206719][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.244955][ T5841] veth0_macvtap: entered promiscuous mode
[   72.252255][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.262555][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.270895][ T5841] veth1_macvtap: entered promiscuous mode
[   72.300715][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.304855][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.315413][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.319746][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   72.332686][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.349333][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.353759][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.357021][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.360344][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.363570][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.397297][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.491261][ T5901] syz.2.21 (5901) used greatest stack depth: 19176 bytes left
[   72.496570][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.499188][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.564769][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.574774][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.542094][ T5966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'.
[   73.596961][ T5970] netlink: 'syz.1.48': attribute type 21 has an invalid length.
[   73.623618][ T5970] netlink: 'syz.1.48': attribute type 22 has an invalid length.
[   73.626789][ T5970] netlink: 'syz.1.48': attribute type 23 has an invalid length.
[   73.631692][ T5970] netlink: 136 bytes leftover after parsing attributes in process `syz.1.48'.
[   73.799556][ T5980] netlink: 'syz.2.53': attribute type 7 has an invalid length.
[   73.807869][ T5980] netlink: 'syz.2.53': attribute type 8 has an invalid length.
[   73.820694][ T5980] netlink: 'syz.2.53': attribute type 8 has an invalid length.
[   73.841805][ T5196] Bluetooth: hci1: command tx timeout
[   73.842883][   T55] Bluetooth: hci0: command tx timeout
[   73.845971][ T5980] netlink: 'syz.2.53': attribute type 4 has an invalid length.
[   73.848763][ T5980] netlink: 'syz.2.53': attribute type 7 has an invalid length.
[   73.855395][ T5980] netlink: 207236 bytes leftover after parsing attributes in process `syz.2.53'.
[   73.920685][ T5196] Bluetooth: hci2: command tx timeout
[   74.048578][ T5994] netlink: 28 bytes leftover after parsing attributes in process `syz.2.60'.
[   74.062429][ T5996] netlink: 40 bytes leftover after parsing attributes in process `syz.0.61'.
[   74.074105][ T5994] netlink: 'syz.2.60': attribute type 8 has an invalid length.
[   74.076988][ T5994] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   74.087594][ T5996] Zero length message leads to an empty skb
[   74.459064][ T6018] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[   74.838688][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'.
[   75.437029][ T6073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'.
[   75.923482][ T5196] Bluetooth: hci0: command tx timeout
[   75.932840][ T5196] Bluetooth: hci1: command tx timeout
[   75.962766][ T6110] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.965551][ T6110] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.972523][ T6110] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.975262][ T6110] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.001460][ T5196] Bluetooth: hci2: command tx timeout
[   76.303839][ T6135] netlink: 120 bytes leftover after parsing attributes in process `syz.0.121'.
[   76.306735][ T6135] netlink: 'syz.0.121': attribute type 1 has an invalid length.
[   76.308918][ T6135] netlink: 64 bytes leftover after parsing attributes in process `syz.0.121'.
[   76.427619][ T6143] netlink: 24 bytes leftover after parsing attributes in process `syz.2.125'.
[   76.606275][ T6155] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.609191][ T6155] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.672095][ T6155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.682806][ T6155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.780634][ T6160] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[   76.785589][ T6160] bond1 (unregistering): Released all slaves
[   76.801376][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.805642][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.809120][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.812733][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.912664][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   76.915160][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   77.351753][ T6192] netem: incorrect ge model size
[   77.363877][ T6192] netem: change failed
[   77.584259][ T6219] ip6tnl1: entered allmulticast mode
[   77.602849][ T6221] netlink: get zone limit has 4 unknown bytes
[   77.668625][ T6229] syz.1.154 uses obsolete (PF_INET,SOCK_PACKET)
[   78.001932][ T5196] Bluetooth: hci1: command tx timeout
[   78.003896][   T55] Bluetooth: hci0: command tx timeout
[   78.081289][ T5196] Bluetooth: hci2: command tx timeout
[   78.165690][ T6260] Illegal XDP return value 4294967274 on prog  (id 25) dev syz_tun, expect packet loss!
[   78.588285][ T6286] __nla_validate_parse: 4 callbacks suppressed
[   78.588300][ T6286] netlink: 28 bytes leftover after parsing attributes in process `syz.2.183'.
[   78.601835][ T6286] netlink: 28 bytes leftover after parsing attributes in process `syz.2.183'.
[   78.613385][ T6286] netlink: 28 bytes leftover after parsing attributes in process `syz.2.183'.
[   78.620153][ T6286] netlink: 28 bytes leftover after parsing attributes in process `syz.2.183'.
[   78.890673][ T6308] warning: `syz.0.193' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   79.306469][ T6337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.207'.
[   79.362201][ T6337] netlink: 92 bytes leftover after parsing attributes in process `syz.1.207'.
[   79.553874][ T6347] netlink: 24 bytes leftover after parsing attributes in process `syz.1.212'.
[   79.849047][ T6353] validate_nla: 1 callbacks suppressed
[   79.849078][ T6353] netlink: 'syz.2.215': attribute type 10 has an invalid length.
[   79.854679][ T6353] macvlan1: entered allmulticast mode
[   79.857170][ T6353] veth1_vlan: entered allmulticast mode
[   79.862431][ T6353] team0: Port device macvlan1 added
[   80.055386][ T6363] netlink: 'syz.0.219': attribute type 8 has an invalid length.
[   80.476620][ T6380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.227'.
[   80.626474][   T33] audit: type=1804 audit(1778525088.560:2): pid=6386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.230" name="/newroot/74/cgroup.controllers" dev="tmpfs" ino=389 res=1 errno=0
[   80.636224][   T33] audit: type=1800 audit(1778525088.560:3): pid=6386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.230" name="cgroup.controllers" dev="tmpfs" ino=389 res=0 errno=0
[   80.907008][ T6408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.240'.
[   81.008373][ T6416] tipc: Started in network mode
[   81.011480][ T6416] tipc: Node identity 5e7ae000a7cf, cluster identity 4711
[   81.015084][ T6416] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.017871][ T6416] syzkaller0: entered promiscuous mode
[   81.020558][ T6416] syzkaller0: entered allmulticast mode
[   81.040963][ T6416] tipc: Resetting bearer <eth:syzkaller0>
[   81.048395][ T6415] tipc: Resetting bearer <eth:syzkaller0>
[   81.062395][ T6415] tipc: Disabling bearer <eth:syzkaller0>
[   81.196342][ T6424] netlink: 'syz.0.247': attribute type 1 has an invalid length.
[   81.199041][ T6424] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.294037][ T6430] bond1: Unable to set down delay as MII monitoring is disabled
[   81.300609][ T6430] bond1 (unregistering): Released all slaves
[   81.778609][ T6441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.252'.
[   82.184394][ T6465] netlink: 'syz.2.265': attribute type 8 has an invalid length.
[   82.408223][ T6480] xt_connbytes: Forcing CT accounting to be enabled
[   82.414931][ T6480] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   82.475184][ T6486] netlink: 'syz.0.273': attribute type 1 has an invalid length.
[   82.931064][ T6513] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.950836][ T6516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.408863][ T6597] syzkaller1: entered promiscuous mode
[   84.410803][ T6597] syzkaller1: entered allmulticast mode
[   84.414843][ T6597] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96
[   84.585337][ T6615] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   84.658438][ T6621] netlink: 'syz.1.325': attribute type 4 has an invalid length.
[   84.673493][ T6621] netlink: 'syz.1.325': attribute type 4 has an invalid length.
[   84.903888][ T6640] __nla_validate_parse: 9 callbacks suppressed
[   84.903899][ T6640] netlink: 16 bytes leftover after parsing attributes in process `syz.1.335'.
[   85.147757][ T6665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.347'.
[   85.174187][ T6665] team0: Port device team_slave_0 removed
[   85.519200][ T6699] Bluetooth: MGMT ver 1.23
[   85.572464][ T6703] netlink: 68 bytes leftover after parsing attributes in process `syz.0.365'.
[   85.582372][ T6705] netlink: 'syz.1.366': attribute type 9 has an invalid length.
[   85.669332][ T6709] netlink: 28 bytes leftover after parsing attributes in process `syz.0.368'.
[   86.082737][ T6738] netlink: 12 bytes leftover after parsing attributes in process `syz.2.382'.
[   86.105689][ T6738] netlink: 2 bytes leftover after parsing attributes in process `syz.2.382'.
[   86.411099][ T6774] netlink: 16 bytes leftover after parsing attributes in process `syz.1.400'.
[   87.131664][   T24] cfg80211: failed to load regulatory.db
[   87.662383][ T6823] netlink: 36 bytes leftover after parsing attributes in process `syz.2.420'.
[   87.675755][ T6823] sctp: [Deprecated]: syz.2.420 (pid 6823) Use of int in maxseg socket option.
[   87.675755][ T6823] Use struct sctp_assoc_value instead
[   87.841457][ T6837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.426'.
[   87.926012][ T6842] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   88.382248][ T6885] netlink: 'syz.0.448': attribute type 3 has an invalid length.
[   88.392528][ T6887] netlink: 20 bytes leftover after parsing attributes in process `syz.2.450'.
[   89.161642][ T6949] team0: entered promiscuous mode
[   89.164158][ T6949] team_slave_0: entered promiscuous mode
[   89.166662][ T6949] team_slave_1: entered promiscuous mode
[   89.169254][ T6949] macvlan1: entered promiscuous mode
[   89.502723][ T6971] netlink: 'syz.2.483': attribute type 1 has an invalid length.
[   89.551658][ T6971] bond1: entered promiscuous mode
[   89.553678][ T6971] bond1: entered allmulticast mode
[   89.556043][ T6971] 8021q: adding VLAN 0 to HW filter on device bond1
[   89.566848][ T6971] erspan1: entered allmulticast mode
[   89.574550][ T6971] bond1: (slave erspan1): making interface the new active one
[   89.577602][ T6971] erspan1: entered promiscuous mode
[   89.582986][ T6971] bond1: (slave erspan1): Enslaving as an active interface with an up link
[   89.601545][ T6971] syz.2.483 (6971) used obsolete PPPIOCDETACH ioctl
[   90.164042][ T7012] netlink: 'syz.1.491': attribute type 1 has an invalid length.
[   90.191500][ T7012] 8021q: adding VLAN 0 to HW filter on device bond1
[   90.221276][ T7012] veth3: entered allmulticast mode
[   90.228588][ T7012] bond1: (slave veth3): Enslaving as an active interface with a down link
[   90.248028][ T7012] bond1 (unregistering): (slave veth3): Releasing active interface
[   90.257791][ T7012] bond1 (unregistering): Released all slaves
[   90.396090][ T7023] bridge0: port 3(vlan3) entered blocking state
[   90.398678][ T7023] bridge0: port 3(vlan3) entered disabled state
[   90.402780][ T7023] vlan3: entered allmulticast mode
[   90.404676][ T7023] bridge0: entered allmulticast mode
[   90.498427][ T7023] vlan3: left allmulticast mode
[   90.504185][ T7023] bridge0: left allmulticast mode
[   90.583179][ T7025] syzkaller0: entered promiscuous mode
[   90.585283][ T7025] syzkaller0: entered allmulticast mode
[   90.600552][ T7025] 0: reclassify loop, rule prio 0, protocol 800
[   90.723108][ T7031] syzkaller0: entered promiscuous mode
[   90.725205][ T7031] syzkaller0: entered allmulticast mode
[   91.394300][ T7081] netlink: 'syz.1.524': attribute type 2 has an invalid length.
[   91.397722][ T7081] netlink: 'syz.1.524': attribute type 2 has an invalid length.
[   91.443020][ T7084] dummy0: entered promiscuous mode
[   91.445223][ T7084] macsec1: entered promiscuous mode
[   91.447310][ T7084] macsec1: entered allmulticast mode
[   91.449224][ T7084] dummy0: entered allmulticast mode
[   91.461894][ T7084] dummy0: left allmulticast mode
[   91.466212][ T7084] dummy0: left promiscuous mode
[   91.519646][ T7091] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   91.524539][ T7091] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[   91.573640][ T7096] __nla_validate_parse: 5 callbacks suppressed
[   91.573654][ T7096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.529'.
[   91.658159][ T7104] netlink: 'syz.2.533': attribute type 28 has an invalid length.
[   91.885725][ T7125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.543'.
[   92.008092][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.546'.
[   92.196996][ T7151] netlink: 'syz.0.555': attribute type 1 has an invalid length.
[   92.205484][ T7151] netlink: 1008 bytes leftover after parsing attributes in process `syz.0.555'.
[   92.652012][ T7166] netlink: 312 bytes leftover after parsing attributes in process `syz.0.560'.
[   92.654741][ T7166] netlink: 'syz.0.560': attribute type 1 has an invalid length.
[   93.142984][ T7196] netlink: 'syz.1.574': attribute type 9 has an invalid length.
[   93.465093][ T7213] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.565220][ T7213] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.694829][ T7213] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.705407][ T7230] netlink: 676 bytes leftover after parsing attributes in process `syz.2.590'.
[   93.752407][ T7233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.592'.
[   93.767385][ T7213] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.850652][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.593'.
[   93.875251][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.594'.
[   93.905340][ T5850] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.922927][ T5850] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.952411][ T5850] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.955728][ T5850] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.080939][ T7249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.598'.
[   94.256871][ T7258] xt_l2tp: v2 tid > 0xffff: 37482740
[   94.309022][ T7249] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.312505][ T7249] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.479108][ T7249] ip6tnl1: left allmulticast mode
[   94.502246][ T5850] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.509930][ T5850] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.517252][ T5850] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.525673][ T5850] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.013697][ T7296] netlink: 'syz.1.619': attribute type 11 has an invalid length.
[   95.048465][ T7298] netlink: 'syz.1.620': attribute type 4 has an invalid length.
[   95.139311][ T7308] geneve2: entered promiscuous mode
[   95.150488][ T7308] geneve2: entered allmulticast mode
[   95.157856][ T5850] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[   95.166847][ T5850] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[   95.177741][ T5850] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[   95.182322][ T5850] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[   96.240149][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[   96.818115][ T7357] netlink: 'syz.1.645': attribute type 2 has an invalid length.
[   97.157380][ T7370] netlink: 'syz.2.651': attribute type 10 has an invalid length.
[   97.161414][ T7370] __nla_validate_parse: 4 callbacks suppressed
[   97.161435][ T7370] netlink: 40 bytes leftover after parsing attributes in process `syz.2.651'.
[   97.177261][ T7370] geneve0: entered promiscuous mode
[   97.183993][ T7370] team0: Port device geneve0 added
[   97.189529][ T5850] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.225304][ T5850] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.240199][ T5850] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.243460][ T5850] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.862616][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.665'.
[   98.497489][ T7430] netlink: 'syz.0.677': attribute type 32 has an invalid length.
[   98.500758][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'.
[   98.539561][ T7430] bond3: option coupled_control: invalid value (12)
[   98.546090][ T7430] bond3 (unregistering): Released all slaves
[   98.696093][ T7440] netlink: 144 bytes leftover after parsing attributes in process `syz.0.681'.
[   99.274641][ T7470] xt_bpf: check failed: parse error
[  100.407302][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.716'.
[  100.419034][ T7522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.716'.
[  100.630394][ T7528] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.719'.
[  100.712544][ T7532] netlink: 1244 bytes leftover after parsing attributes in process `syz.0.721'.
[  101.408201][ T7573] netlink: 32 bytes leftover after parsing attributes in process `syz.1.741'.
[  101.919819][ T7617] netlink: 20 bytes leftover after parsing attributes in process `syz.0.756'.
[  102.086637][ T7631] tipc: Started in network mode
[  102.091464][ T7631] tipc: Node identity 8636e7f25946, cluster identity 4711
[  102.100131][ T7631] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.104147][ T7631] syzkaller0: entered promiscuous mode
[  102.106228][ T7631] syzkaller0: entered allmulticast mode
[  102.133886][ T7631] tipc: Resetting bearer <eth:syzkaller0>
[  102.142372][ T7629] tipc: Resetting bearer <eth:syzkaller0>
[  102.155507][ T7629] tipc: Disabling bearer <eth:syzkaller0>
[  102.246225][ T7639] netlink: 28 bytes leftover after parsing attributes in process `syz.0.764'.
[  102.251911][ T7642] xt_hashlimit: max too large, truncated to 1048576
[  102.255257][ T7642] xt_hashlimit: Unknown mode mask 300, kernel too old?
[  102.262233][ T7639] netlink: 28 bytes leftover after parsing attributes in process `syz.0.764'.
[  102.878898][ T7677] netlink: 20 bytes leftover after parsing attributes in process `syz.0.780'.
[  102.891951][ T7677] geneve3: entered promiscuous mode
[  102.895181][   T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[  102.900399][   T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[  102.903714][   T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[  102.906865][   T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[  103.015784][ T7682] netlink: 'syz.0.783': attribute type 1 has an invalid length.
[  103.018833][ T7682] netlink: 'syz.0.783': attribute type 1 has an invalid length.
[  103.032839][ T7682] netlink: 24 bytes leftover after parsing attributes in process `syz.0.783'.
[  103.036226][ T7682] netlink: 1 bytes leftover after parsing attributes in process `syz.0.783'.
[  103.182563][ T7687] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  103.645135][ T7697] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.648259][ T7697] syzkaller0: entered promiscuous mode
[  103.650550][ T7697] syzkaller0: entered allmulticast mode
[  103.669141][ T7697] tipc: Resetting bearer <eth:syzkaller0>
[  103.677978][ T7696] tipc: Resetting bearer <eth:syzkaller0>
[  103.709403][ T7696] tipc: Disabling bearer <eth:syzkaller0>
[  103.836329][ T7708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.793'.
[  103.908717][ T7708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.793'.
[  104.060629][ T7713] netlink: 'syz.2.795': attribute type 7 has an invalid length.
[  104.439382][ T7736] hm3): entered promiscuous mode
[  104.486423][ T7740] netlink: 'syz.0.805': attribute type 2 has an invalid length.
[  104.593779][ T7746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.808'.
[  104.724356][ T7751] tipc: Enabled bearer <udp:s>, priority 10
[  104.740188][ T5902] IPVS: starting estimator thread 0...
[  104.842044][ T7753] IPVS: using max 67 ests per chain, 160800 per kthread
[  105.324058][ T7780] netlink: 16 bytes leftover after parsing attributes in process `syz.1.822'.
[  105.722022][ T5902] tipc: Node number set to 3748718578
[  105.797180][ T7804] tap0: tun_chr_ioctl cmd 2148553947
[  106.303703][ T7822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.842'.
[  107.136353][ T7842] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  107.139158][ T7842] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  107.148865][ T7844] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  107.247949][ T7847] Bluetooth: MGMT ver 1.23
[  107.294520][ T7853] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.320872][ T7853] tipc: Resetting bearer <eth:syzkaller0>
[  107.477360][ T7867] ieee802154 phy1 wpan1: encryption failed: -22
[  107.506982][ T7869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.862'.
[  107.913923][ T7898] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  108.117940][ T7902] syzkaller0: entered promiscuous mode
[  108.121435][ T7902] syzkaller0: entered allmulticast mode
[  108.332672][   T31] tipc: Node number set to 4189446144
[  108.782099][ T7937] openvswitch: netlink: IP tunnel dst address not specified
[  108.884204][ T7947] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  108.891110][ T7946] macvtap0: entered promiscuous mode
[  108.900148][ T7943] syzkaller1: entered promiscuous mode
[  108.901928][ T7943] syzkaller1: entered allmulticast mode
[  109.074994][ T7963] netlink: 'syz.0.904': attribute type 1 has an invalid length.
[  109.077334][ T7963] netlink: 'syz.0.904': attribute type 2 has an invalid length.
[  109.085001][ T7965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.905'.
[  109.188078][ T7972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.908'.
[  109.193968][ T7972] block nbd0: Unsupported socket: should be TCP or UNIX.
[  109.311941][ T5196] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  109.315110][ T5196] Bluetooth: hci2: command 0x0405 tx timeout
[  109.333582][ T7978] netlink: 'syz.2.910': attribute type 1 has an invalid length.
[  109.449499][ T7990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.915'.
[  109.453383][ T7990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.915'.
[  109.630858][ T8004] netlink: 277 bytes leftover after parsing attributes in process `syz.2.922'.
[  109.667167][ T8009] netlink: 'syz.0.925': attribute type 8 has an invalid length.
[  109.687970][ T8005] netlink: 16 bytes leftover after parsing attributes in process `syz.1.919'.
[  109.806707][ T8020] : entered promiscuous mode
[  109.835826][ T8022] netlink: 84 bytes leftover after parsing attributes in process `syz.1.930'.
[  110.190924][ T8058] netlink: 272 bytes leftover after parsing attributes in process `syz.1.945'.
[  110.240667][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.947'.
[  110.352207][ T8065] syzkaller0: entered promiscuous mode
[  110.354417][ T8065] syzkaller0: entered allmulticast mode
[  110.771489][   T13] nci: nci_rx_work: unknown MT 0x4
[  111.194253][   T13] tipc: Subscription rejected, illegal request
[  111.300118][   T33] audit: type=1804 audit(1778525119.240:4): pid=8117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.972" name="/newroot/309/cgroup.controllers" dev="tmpfs" ino=1571 res=1 errno=0
[  111.309266][   T33] audit: type=1800 audit(1778525119.240:5): pid=8117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.972" name="cgroup.controllers" dev="tmpfs" ino=1571 res=0 errno=0
[  111.326901][   T33] audit: type=1804 audit(1778525119.260:6): pid=8117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.972" name="/newroot/309/cgroup.controllers" dev="tmpfs" ino=1571 res=1 errno=0
[  111.508004][ T8091] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  111.727140][ T8134] syzkaller0: entered promiscuous mode
[  111.729451][ T8134] syzkaller0: entered allmulticast mode
[  112.410293][ T8120] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  112.561783][ T8147] syzkaller0: entered promiscuous mode
[  112.563500][ T8147] syzkaller0: entered allmulticast mode
[  113.491560][ T8163] __nla_validate_parse: 2 callbacks suppressed
[  113.491579][ T8163] netlink: 60 bytes leftover after parsing attributes in process `syz.0.990'.
[  113.503180][ T8163] unsupported nlmsg_type 40
[  113.510115][ T8164] netlink: 152 bytes leftover after parsing attributes in process `syz.1.991'.
[  113.513432][ T8164] netlink: 16 bytes leftover after parsing attributes in process `syz.1.991'.
[  114.339477][ T8233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1021'.
[  114.350531][ T8233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1021'.
[  114.353062][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  114.363546][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  114.366572][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  114.369163][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  114.535246][ T8254] veth0: entered promiscuous mode
[  114.541118][ T8253] veth0: left promiscuous mode
[  114.857451][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1043'.
[  114.860390][ T8280] team0: Cannot enslave team device to itself
[  115.023506][ T8298] netlink: 'syz.2.1052': attribute type 29 has an invalid length.
[  115.027795][ T8298] netlink: 'syz.2.1052': attribute type 29 has an invalid length.
[  115.032624][ T8298] netlink: 'syz.2.1052': attribute type 32 has an invalid length.
[  115.035324][ T8298] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1052'.
[  115.073067][ T8303] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1054'.
[  115.462050][ T8340] netlink: 'syz.0.1072': attribute type 1 has an invalid length.
[  115.468660][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1072'.
[  115.479088][ T8340] netlink: 'syz.0.1072': attribute type 1 has an invalid length.
[  115.497649][ T8340] syzkaller1: entered promiscuous mode
[  115.499801][ T8340] syzkaller1: entered allmulticast mode
[  115.650553][ T8352] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1077'.
[  115.712400][ T8355] netlink: Conntrack attr has 4 unknown bytes
[  116.159329][ T8395] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  116.285123][ T8405] bond1: entered promiscuous mode
[  116.287570][ T8405] 8021q: adding VLAN 0 to HW filter on device bond1
[  116.357775][ T8412] syzkaller0: entered promiscuous mode
[  116.368538][ T8412] syzkaller0: entered allmulticast mode
[  116.387588][ T8414] netem: change failed
[  117.716697][ T8481] netlink: 'syz.1.1136': attribute type 1 has an invalid length.
[  117.850863][ T8489] veth0_to_bond: entered allmulticast mode
[  118.418624][ T8523] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  118.430889][ T8523] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  118.490753][ T8528] tipc: Failed to remove unknown binding: 66,0,0/3748718578:660007117/660007119
[  118.493673][ T8528] tipc: Failed to remove unknown binding: 66,0,0/3748718578:660007117/660007118
[  118.496730][ T8528] tipc: Failed to remove unknown binding: 66,0,0/3748718578:660007117/660007119
[  118.509684][ T8528] tipc: Failed to remove unknown binding: 66,0,0/3748718578:660007117/660007118
[  118.676585][ T8537] syzkaller0: entered allmulticast mode
[  118.678732][ T8537] syzkaller0: entered promiscuous mode
[  118.692475][ T8537] syzkaller0 (unregistering): left promiscuous mode
[  118.695143][ T8537] syzkaller0 (unregistering): left allmulticast mode
[  119.240665][ T8555] netlink: 'syz.2.1166': attribute type 1 has an invalid length.
[  119.461030][ T8558] __nla_validate_parse: 15 callbacks suppressed
[  119.461047][ T8558] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1167'.
[  119.466752][ T8558] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1167'.
[  120.101849][ T8610] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  120.106547][ T8610] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  120.207486][ T8616] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1191'.
[  120.456636][ T8634] sock: sock_timestamping_bind_phc: sock not bind to device
[  120.619528][ T8639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1200'.
[  120.936749][ T8647] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1204'.
[  121.372169][ T8668] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1214'.
[  121.542665][ T8682] syzkaller0: entered promiscuous mode
[  121.544962][ T8682] syzkaller0: entered allmulticast mode
[  121.555381][ T8682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1219'.
[  121.560013][ T8682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1219'.
[  121.563908][ T8682] 0: reclassify loop, rule prio 0, protocol 800
[  121.757985][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1227'.
[  121.771684][ T5850] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  121.775223][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1227'.
[  121.778730][ T5850] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  121.789371][ T5850] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  121.795391][ T5850] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  122.435184][ T8754] syzkaller1: entered promiscuous mode
[  122.437282][ T8754] syzkaller1: entered allmulticast mode
[  122.835041][ T8767] No such timeout policy "syz0"
[  123.687034][ T8808] netlink: 'syz.1.1277': attribute type 1 has an invalid length.
[  123.842418][ T8824] ip6tnl3: entered allmulticast mode
[  124.233819][ T8863] Bluetooth: MGMT ver 1.23
[  124.249148][ T8865] GUP no longer grows the stack in syz.2.1303 (8865): 200000003000-20000000a000 (200000001000)
[  124.265819][ T8865] CPU: 0 UID: 0 PID: 8865 Comm: syz.2.1303 Not tainted syzkaller #0 PREEMPT(full) 
[  124.265833][ T8865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  124.265840][ T8865] Call Trace:
[  124.265844][ T8865]  <TASK>
[  124.265849][ T8865]  dump_stack_lvl+0xe8/0x150
[  124.265868][ T8865]  __get_user_pages+0x2453/0x29d0
[  124.265883][ T8865]  ? __lock_acquire+0x6b5/0x2cf0
[  124.265904][ T8865]  ? __gup_longterm_locked+0xc4e/0x1630
[  124.265916][ T8865]  ? down_read_killable+0x1bb/0x340
[  124.265928][ T8865]  __gup_longterm_locked+0xdcf/0x1630
[  124.265953][ T8865]  gup_fast_fallback+0x1d82/0x22e0
[  124.265978][ T8865]  ? __pfx_gup_fast_fallback+0x10/0x10
[  124.265987][ T8865]  ? futex_unqueue+0x22/0x240
[  124.265998][ T8865]  ? futex_unqueue+0x22/0x240
[  124.266007][ T8865]  ? is_valid_gup_args+0x11f/0x200
[  124.266019][ T8865]  ? get_user_pages_fast+0x4d/0xb0
[  124.266030][ T8865]  __iov_iter_get_pages_alloc+0x3b6/0xb10
[  124.266046][ T8865]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  124.266060][ T8865]  iov_iter_get_pages2+0x5e/0xa0
[  124.266072][ T8865]  __se_sys_vmsplice+0x7b3/0x1490
[  124.266091][ T8865]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  124.266102][ T8865]  ? __pfx_futex_wait+0x10/0x10
[  124.266118][ T8865]  ? lockdep_hardirqs_on+0x7a/0x110
[  124.266154][ T8865]  do_syscall_64+0x14d/0xf80
[  124.266165][ T8865]  ? trace_irq_disable+0x3b/0x150
[  124.266176][ T8865]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.266186][ T8865]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.266194][ T8865] RIP: 0033:0x7f689159cdd9
[  124.266204][ T8865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  124.266210][ T8865] RSP: 002b:00007f68924ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  124.266221][ T8865] RAX: ffffffffffffffda RBX: 00007f6891815fa0 RCX: 00007f689159cdd9
[  124.266227][ T8865] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006
[  124.266231][ T8865] RBP: 00007f6891632d69 R08: 0000000000000000 R09: 0000000000000000
[  124.266236][ T8865] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  124.266240][ T8865] R13: 00007f6891816038 R14: 00007f6891815fa0 R15: 00007ffe5b5fb498
[  124.266253][ T8865]  </TASK>
[  124.378395][ T8873] veth0: entered promiscuous mode
[  124.387553][ T8873] veth0: left promiscuous mode
[  124.525865][ T8887] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  124.688917][ T8905] bond0: Error: Cannot enslave bond to itself.
[  124.752827][ T8912] x_tables: ip_tables: osf match: only valid for protocol 6
[  124.795955][ T8916] batadv_slave_1: entered promiscuous mode
[  124.798199][ T8915] batadv_slave_1: left promiscuous mode
[  124.922230][ T8926] x_tables: duplicate entry at hook 3
[  125.109052][ T8943] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  125.164683][ T8947] xt_socket: unknown flags 0x50
[  125.806483][ T8975] __nla_validate_parse: 9 callbacks suppressed
[  125.806496][ T8975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1354'.
[  125.887650][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1357'.
[  125.893317][ T8987] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1356'.
[  125.896668][ T8987] netlink: 'syz.2.1356': attribute type 1 has an invalid length.
[  125.956700][ T8984] veth3: entered allmulticast mode
[  125.964206][ T8984] bond4: (slave veth3): Enslaving as an active interface with an up link
[  125.964772][ T8993] netlink: 'syz.1.1360': attribute type 1 has an invalid length.
[  125.969286][ T8993] netlink: 'syz.1.1360': attribute type 11 has an invalid length.
[  125.973438][ T8993] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1360'.
[  125.987847][ T8994] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1361'.
[  126.011218][ T8984] bond4 (unregistering): (slave veth3): Releasing backup interface
[  126.014041][ T8996] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1362'.
[  126.022610][ T8984] bond4 (unregistering): Released all slaves
[  126.473439][ T9036] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  126.498731][ T9039] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1381'.
[  127.479721][ T9107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1407'.
[  127.732391][ T9130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1419'.
[  127.754273][ T9132] ip6tnl1: entered allmulticast mode
[  127.956859][ T9144] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1425'.
[  128.335355][ T9176] TC_ACT_REPEAT abuse ?
[  128.918790][ T9226] veth4: entered allmulticast mode
[  129.247587][ T9254] bond2: Removing last arp target with arp_interval on
[  129.813759][ T9298] netlink: 'syz.0.1495': attribute type 21 has an invalid length.
[  130.696380][ T9304] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  130.704046][ T9326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  130.838005][ T9334] __nla_validate_parse: 14 callbacks suppressed
[  130.838028][ T9334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1509'.
[  130.843308][ T9334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1509'.
[  131.039537][ T9344] veth1_macvtap: left promiscuous mode
[  131.042107][ T9344] macsec0: entered allmulticast mode
[  131.060224][ T9344] veth1_macvtap: entered promiscuous mode
[  131.064331][ T9344] veth1_macvtap: entered allmulticast mode
[  131.074573][ T9344] macsec0: left allmulticast mode
[  131.076596][ T9344] veth1_macvtap: left allmulticast mode
[  131.129582][ T9350] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1517'.
[  131.184983][ T9354] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1519'.
[  131.188471][ T9354] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1519'.
[  131.193164][ T9354] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  131.272239][ T9361] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1521'.
[  131.286186][ T9358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  131.391109][ T9369] netem: change failed
[  131.417841][ T9373] netlink: 'syz.1.1528': attribute type 1 has an invalid length.
[  131.865556][ T9390] sctp: [Deprecated]: syz.0.1536 (pid 9390) Use of int in max_burst socket option.
[  131.865556][ T9390] Use struct sctp_assoc_value instead
[  132.048811][ T9405] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1543'.
[  132.148593][ T9415] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  132.157188][ T9415] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  132.164546][ T9417] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1549'.
[  132.226391][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.229543][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.245610][ T9418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  132.409822][ T9430] dvmrp0: entered allmulticast mode
[  132.549275][ T9441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1560'.
[  132.552783][ T9441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1560'.
[  133.837134][ T9538] ipt_REJECT: TCP_RESET invalid for non-tcp
[  133.901846][ T9546] netlink: 'syz.2.1609': attribute type 11 has an invalid length.
[  134.026478][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  134.029456][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0
[  134.032408][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  134.035036][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0
[  134.044059][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  134.052462][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0
[  134.055062][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  134.057619][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0
[  134.164897][ T9568] syzkaller0: entered promiscuous mode
[  134.166709][ T9568] syzkaller0: entered allmulticast mode
[  134.204193][ T9573] netlink: 'syz.1.1622': attribute type 2 has an invalid length.
[  134.577015][ T9604] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.583486][ T9604] 8021q: adding VLAN 0 to HW filter on device team0
[  134.588252][ T9604] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  134.619268][ T9604] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  134.641765][ T5887] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  134.675579][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  134.700544][ T5887] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  134.776204][ T9618] syzkaller1: entered promiscuous mode
[  134.778470][ T9618] syzkaller1: entered allmulticast mode
[  134.825434][ T9621] netlink: 'syz.2.1641': attribute type 1 has an invalid length.
[  135.681152][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  135.684082][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  135.795888][ T9700] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0
[  135.988779][ T9724] xt_bpf: check failed: parse error
[  136.018357][ T9728] __nla_validate_parse: 186 callbacks suppressed
[  136.018369][ T9728] netlink: 276 bytes leftover after parsing attributes in process `syz.1.1692'.
[  136.165259][ T9738] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1697'.
[  136.168422][ T9738] netlink: 'syz.2.1697': attribute type 1 has an invalid length.
[  136.332033][ T9756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1705'.
[  136.491177][ T5902] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  136.598856][ T9773] netlink: 'syz.0.1714': attribute type 12 has an invalid length.
[  136.815238][ T9791] block nbd0: server does not support multiple connections per device.
[  136.840189][ T9791] block nbd0: shutting down sockets
[  136.917737][ T9802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1726'.
[  136.923427][ T9802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1726'.
[  137.510735][ T9849] Bluetooth: hci0: Opcode 0x080f failed: -22
[  137.862995][ T9891] tunl0: entered promiscuous mode
[  137.865057][ T9891] netlink: 'syz.0.1770': attribute type 4 has an invalid length.
[  137.867316][ T9891] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1770'.
[  137.871530][ T9893] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  138.324487][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  138.498500][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1797'.
[  138.504970][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1797'.
[  138.555257][ T9951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1799'.
[  138.980573][ T9962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1804'.
[  139.148285][ T9970] netlink: 'syz.1.1808': attribute type 3 has an invalid length.
[  139.518024][ T9995] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  139.840332][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  140.720562][T10061] netlink: 'syz.2.1849': attribute type 1 has an invalid length.
[  140.732573][T10061] netlink: 'syz.2.1849': attribute type 1 has an invalid length.
[  140.940184][T10071] syzkaller1: entered promiscuous mode
[  140.942760][T10071] syzkaller1: entered allmulticast mode
[  141.060758][T10075] trusted_key: syz.0.1856 sent an empty control message without MSG_MORE.
[  141.077412][T10077] tipc: Failed to remove unknown binding: 66,0,0/3748718578:3828178661/3828178663
[  141.082285][T10077] tipc: Failed to remove unknown binding: 66,0,0/3748718578:3828178661/3828178662
[  141.085294][T10077] tipc: Failed to remove unknown binding: 66,0,0/3748718578:3828178661/3828178663
[  141.088007][T10077] tipc: Failed to remove unknown binding: 66,0,0/3748718578:3828178661/3828178662
[  141.312723][T10090] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.894030][T10108] __nla_validate_parse: 10 callbacks suppressed
[  141.894053][T10108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1871'.
[  142.849776][T10148] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1890'.
[  142.869492][T10150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1891'.
[  143.014852][T10160] smc: net device hsr0 applied user defined pnetid SYZ2
[  143.248561][ T5196] Bluetooth: hci2: link tx timeout
[  143.253631][ T5196] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.304725][T10187] macsec0: entered promiscuous mode
[  143.322787][   T55] Bluetooth: hci2: link tx timeout
[  143.324396][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.362190][   T55] Bluetooth: hci2: link tx timeout
[  143.364512][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.556585][   T55] Bluetooth: hci2: link tx timeout
[  143.558464][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.660603][T10214] netlink: 'syz.0.1911': attribute type 2 has an invalid length.
[  143.663705][T10214] netlink: 'syz.0.1911': attribute type 2 has an invalid length.
[  144.096401][   T55] Bluetooth: hci2: link tx timeout
[  144.098342][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  144.323326][   T55] Bluetooth: hci2: link tx timeout
[  144.325310][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  144.362257][T10238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1922'.
[  144.365352][T10238] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1922'.
[  144.368118][T10238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1922'.
[  144.373790][T10238] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1922'.
[  145.030438][T10285] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.034450][T10285] 8021q: adding VLAN 0 to HW filter on device team0
[  145.042551][T10285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  145.288414][T10296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1946'.
[  145.296698][ T5196] Bluetooth: hci2: command 0x0405 tx timeout
[  145.771085][T10280] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  145.871200][T10312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1953'.
[  145.875557][T10312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1953'.
[  145.891265][T10312] netlink: 'syz.2.1953': attribute type 14 has an invalid length.
[  145.901159][T10312] netlink: 'syz.2.1953': attribute type 11 has an invalid length.
[  146.307037][   T31] IPVS: starting estimator thread 0...
[  146.405675][T10343] IPVS: using max 67 ests per chain, 160800 per kthread
[  146.699307][T10368] netlink: 'syz.1.1978': attribute type 10 has an invalid length.
[  146.730129][T10368] team0: Failed to send options change via netlink (err -105)
[  146.735932][T10368] team0: Port device dummy0 added
[  146.739646][T10368] netlink: 'syz.1.1978': attribute type 10 has an invalid length.
[  146.744657][T10368] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  146.758457][T10368] team0: Failed to send options change via netlink (err -105)
[  146.765933][T10368] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  146.769768][T10368] team0: Port device dummy0 removed
[  146.777826][T10368] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  146.965059][T10390] netlink: 'syz.0.1989': attribute type 1 has an invalid length.
[  146.980838][T10390] 8021q: adding VLAN 0 to HW filter on device bond4
[  146.991005][T10390] __nla_validate_parse: 1 callbacks suppressed
[  146.991016][T10390] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1989'.
[  146.995457][T10390] bond4: entered allmulticast mode
[  146.999516][T10393] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1990'.
[  147.007359][T10390] bond4: (slave dummy0): making interface the new active one
[  147.010664][T10390] dummy0: entered allmulticast mode
[  147.015432][T10390] bond4: (slave dummy0): Enslaving as an active interface with an up link
[  147.171271][T10404] tipc: Started in network mode
[  147.172893][T10404] tipc: Node identity 00000000000003000000000000000001, cluster identity 4711
[  147.176754][T10404] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  147.336173][T10418] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2002'.
[  147.350471][T10418] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2002'.
[  147.417985][T10426] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2006'.
[  147.488319][T10432] IPVS: Unknown mcast interface: vcan0
[  148.000787][T10464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2024'.
[  148.077655][T10466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2025'.
[  148.560059][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  149.375687][T10505] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  149.821005][T10545] IPVS: Scheduler module ip_vs_sip not found
[  149.997427][T10559] hsr0: entered promiscuous mode
[  150.000138][T10558] hsr0: left promiscuous mode
[  150.369244][T10598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2083'.
[  150.899018][T10635] syzkaller0: entered promiscuous mode
[  150.902197][T10635] syzkaller0: entered allmulticast mode
[  150.905852][T10635] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2098'.
[  151.021667][T10643] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2102'.
[  152.298880][T10672] xt_TCPMSS: Only works on TCP SYN packets
[  152.448161][T10680] tunl0: left promiscuous mode
[  152.457134][T10680] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  153.485674][T10606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  153.645690][T10705] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2131'.
[  153.655223][T10708] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2132'.
[  153.809140][T10716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2136'.
[  153.825417][T10718] netlink: 'syz.0.2137': attribute type 163 has an invalid length.
[  153.885490][T10722] ipt_ECN: cannot use operation on non-tcp rule
[  154.187216][T10755] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2155'.
[  154.231928][T10752] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2154'.
[  154.235320][T10752] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2154'.
[  154.562345][T10774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  157.555681][T10796] bond3 (unregistering): Released all slaves
[  157.600808][T10808] netlink: 'syz.1.2173': attribute type 8 has an invalid length.
[  157.603934][T10808] sch_fq: defrate 0 ignored.
[  157.823632][T10827] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2179'.
[  157.837029][T10827] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2179'.
[  157.838757][T10829] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes.
[  157.852628][T10831] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.045880][T10842] netlink: 'syz.0.2185': attribute type 9 has an invalid length.
[  158.050486][T10842] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.2185'.
[  158.312486][T10855] geneve1: entered promiscuous mode
[  158.881482][T10872] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2199'.
[  158.886326][T10872] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2199'.
[  158.968068][T10877] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  159.086305][T10884] netlink: 'syz.1.2205': attribute type 1 has an invalid length.
[  159.106265][T10884] 8021q: adding VLAN 0 to HW filter on device bond2
[  159.131837][T10884] bond2: (slave veth7): Enslaving as an active interface with a down link
[  159.146499][T10884] bond0: (slave dummy0): Releasing backup interface
[  159.153791][T10884] bond2: (slave dummy0): making interface the new active one
[  159.157751][T10884] dummy0: entered promiscuous mode
[  159.159567][T10884] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  159.180504][T10884] netlink: 'syz.1.2205': attribute type 10 has an invalid length.
[  159.183148][T10884] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2205'.
[  159.190737][T10884] bond2: (slave dummy0): Releasing active interface
[  159.645442][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2224'.
[  159.853957][T10940] netlink: 'syz.1.2232': attribute type 22 has an invalid length.
[  159.856889][T10940] netlink: 'syz.1.2232': attribute type 22 has an invalid length.
[  159.859343][T10940] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2232'.
[  160.202550][   T12] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  160.210426][   T12] bond0: (slave bond_slave_1): link status definitely down, disabling slave
[  160.214611][   T12] bond0: now running without any active interface!
[  160.317693][T10972] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.902286][T11004] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  160.929428][T11004] team0: entered promiscuous mode
[  160.931358][T11004] team_slave_0: entered promiscuous mode
[  160.933104][T11004] team_slave_1: entered promiscuous mode
[  160.938100][T11004] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  161.930202][T11033] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.093202][T11041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2274'.
[  162.178797][T11048] batadv_slave_1: entered promiscuous mode
[  162.183564][T11046] batadv_slave_1: left promiscuous mode
[  162.382458][T11065] netlink: 'syz.2.2286': attribute type 1 has an invalid length.
[  162.398281][T11068] xt_TPROXY: Can be used only with -p tcp or -p udp
[  162.447510][T11065] bond3: (slave bridge7): making interface the new active one
[  162.463362][T11065] bond3: (slave bridge7): Enslaving as an active interface with an up link
[  162.492148][T11065] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  162.520293][T11065] macvlan3: entered promiscuous mode
[  162.522306][T11065] macvlan3: entered allmulticast mode
[  162.524763][T11065] bond3: entered promiscuous mode
[  162.526593][T11065] bridge7: entered promiscuous mode
[  162.529180][T11065] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  162.541440][T11065] bond3: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  162.546606][T11065] bond3: left promiscuous mode
[  162.548006][T11065] bridge7: left promiscuous mode
[  162.652135][T11082] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.204410][T11122] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2310'.
[  163.244315][T11126] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2312'.
[  163.916372][T11181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2335'.
[  163.957933][T11185] netlink: 'syz.1.2337': attribute type 1 has an invalid length.
[  164.342992][T11207] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2346'.
[  164.537516][T11219] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2349'.
[  164.541980][T11219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2349'.
[  164.940492][T11243] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2363'.
[  164.944083][T11243] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2363'.
[  165.186583][T11258] syzkaller0: entered promiscuous mode
[  165.188612][T11258] syzkaller0: entered allmulticast mode
[  165.192966][T11260] tipc: Enabling of bearer <eth:vcan0> rejected, failed to enable media
[  165.210117][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  165.556031][T11278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2374'.
[  166.341141][T11269] batman_adv: batadv0: Adding interface: veth7
[  166.343699][T11269] batman_adv: batadv0: The MTU of interface veth7 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  166.353653][T11269] batman_adv: batadv0: Interface activated: veth7
[  166.582160][T11292] netlink: 'syz.2.2382': attribute type 1 has an invalid length.
[  166.603403][T11292] bond4: entered promiscuous mode
[  166.605467][T11292] 8021q: adding VLAN 0 to HW filter on device bond4
[  166.618615][T11292] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  166.622554][T11292] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  166.626045][T11292] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  166.647147][T11297] pimreg0: tun_chr_ioctl cmd 1074025681
[  166.840150][T11307] gre1: entered allmulticast mode
[  166.896125][T11310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2391'.
[  166.928058][T11310] bond5: entered promiscuous mode
[  166.930639][T11310] 8021q: adding VLAN 0 to HW filter on device bond5
[  166.955237][T11310] vlan3: entered allmulticast mode
[  166.957630][T11310] bond5: entered allmulticast mode
[  167.032563][T11318] sctp: [Deprecated]: syz.2.2394 (pid 11318) Use of int in max_burst socket option.
[  167.032563][T11318] Use struct sctp_assoc_value instead
[  167.335527][T11333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2401'.
[  167.339136][T11333] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2401'.
[  167.608009][T11356] pim6reg1: entered promiscuous mode
[  167.610171][T11356] pim6reg1: entered allmulticast mode
[  167.772763][T11376] ipt_rpfilter: unknown options
[  167.782898][T11372] bond5: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  167.786728][T11372] bond5 (unregistering): Released all slaves
[  167.993786][T11383] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  167.998933][T11383] netlink: 'syz.1.2422': attribute type 3 has an invalid length.
[  168.856951][T11426] openvswitch: netlink: IP tunnel dst address not specified
[  169.178327][T11447] __nla_validate_parse: 2 callbacks suppressed
[  169.178344][T11447] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2446'.
[  169.288063][T11455] netlink: 'syz.2.2450': attribute type 3 has an invalid length.
[  169.901770][T11489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2462'.
[  169.932078][T11489] bond3: entered promiscuous mode
[  169.933958][T11489] 8021q: adding VLAN 0 to HW filter on device bond3
[  169.989304][T11481] 8021q: adding VLAN 0 to HW filter on device bond3
[  169.996125][T11481] bond3: (slave vti1): The slave device specified does not support setting the MAC address
[  170.001481][T11481] bond3: (slave vti1): Error -95 calling set_mac_address
[  170.198701][T11508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2474'.
[  170.532228][T11533] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2485'.
[  170.620777][T11535] syzkaller1: entered promiscuous mode
[  170.623024][T11535] syzkaller1: entered allmulticast mode
[  170.895151][T11535] team0: left promiscuous mode
[  170.897015][T11535] team_slave_0: left promiscuous mode
[  170.905158][T11535] team_slave_1: left promiscuous mode
[  170.907225][T11535] macvlan1: left promiscuous mode
[  170.909613][T11535] geneve0: left promiscuous mode
[  170.938932][T11535] veth1_vlan: left allmulticast mode
[  170.942917][T11535] macvlan1: left allmulticast mode
[  170.961332][T11535] geneve1: left promiscuous mode
[  170.963634][T11535] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  170.974713][T11535] bond1: left promiscuous mode
[  170.976482][T11535] erspan1: left promiscuous mode
[  170.978423][T11535] bond1: left allmulticast mode
[  170.988787][T11535] erspan1: left allmulticast mode
[  171.032972][T11535] ip6tnl1: left allmulticast mode
[  171.150981][T11535] bond4: left promiscuous mode
[  171.157730][T11535] syzkaller1: left promiscuous mode
[  171.161700][T11535] syzkaller1: left allmulticast mode
[  171.168297][T11538] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) !
[  171.205096][ T5850] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  171.208352][ T5850] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  171.212327][ T5850] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  171.217391][ T5850] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  171.226316][ T5850] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  171.230318][ T5850] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  171.249284][ T5850] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  171.254139][ T5850] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  171.385336][T11560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.406884][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2494'.
[  171.965197][T11605] xt_CT: You must specify a L4 protocol and not use inversions on it
[  172.002133][T11606] syzkaller0: entered promiscuous mode
[  172.004382][T11606] syzkaller0: entered allmulticast mode
[  172.076759][T11614] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  172.254874][T11630] netlink: 'syz.2.2526': attribute type 6 has an invalid length.
[  172.431319][T11643] netlink: 'syz.0.2532': attribute type 3 has an invalid length.
[  173.918050][T11725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2565'.
[  173.925103][T11725] vlan0: MTU too low for tipc bearer
[  173.927244][T11725] tipc: Enabling of bearer <eth:vlan0> rejected, failed to enable media
[  173.991690][T11729] netlink: 'syz.2.2567': attribute type 1 has an invalid length.
[  174.099573][T11735] syzkaller1: entered promiscuous mode
[  174.108673][T11735] syzkaller1: entered allmulticast mode
[  174.486415][T11761] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  174.808853][   T33] audit: type=1800 audit(1778525182.740:7): pid=11768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2586" name="memory.events" dev="tmpfs" ino=4235 res=0 errno=0
[  174.818048][T11781] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  174.913513][T11784] syzkaller0: entered promiscuous mode
[  174.915726][T11784] syzkaller0: entered allmulticast mode
[  174.954702][T11787] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  175.100489][T11801] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2601'.
[  175.170676][T11804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2602'.
[  175.216566][T11808] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  175.224087][T11808] batadv_slave_0: entered promiscuous mode
[  175.226387][T11808] batadv_slave_0: entered allmulticast mode
[  175.293615][T11814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2607'.
[  175.354459][T11817] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  176.223153][T11874] bond4: option miimon: invalid value (18446744073709551607)
[  176.226108][T11874] bond4: option miimon: allowed values 0 - 2147483647
[  176.228760][T11877] netlink: 212320 bytes leftover after parsing attributes in process `syz.2.2636'.
[  176.235816][T11874] bond4 (unregistering): Released all slaves
[  176.378816][T11885] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  176.435924][T11886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2639'.
[  176.441974][T11886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2639'.
[  176.444839][T11886] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2639'.
[  176.450936][T11885] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  176.453075][T11885] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  176.455323][T11885] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  176.457850][T11885] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  176.460388][T11885] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  176.462535][T11885] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  176.464507][T11885] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  176.466825][T11885] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  176.489254][T11886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2639'.
[  176.492152][T11886] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2639'.
[  176.495038][T11886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2639'.
[  176.725995][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  176.729631][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  176.732598][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  176.738494][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  178.191109][T11989] block nbd0: server does not support multiple connections per device.
[  178.197114][T11989] block nbd0: shutting down sockets
[  178.229528][T11995] netlink: 'syz.0.2688': attribute type 1 has an invalid length.
[  178.234101][T11995] nbd: error processing sock list
[  178.298987][T12003] netlink: 'syz.0.2692': attribute type 1 has an invalid length.
[  178.910602][T12041] netlink: 'syz.0.2708': attribute type 61 has an invalid length.
[  178.913757][T12041] netlink: 'syz.0.2708': attribute type 62 has an invalid length.
[  179.954713][T12131] tipc: Failed to remove unknown binding: 66,1,1/0:2639427161/2639427163
[  179.967601][T12131] tipc: Cannot configure node identity twice
[  180.002876][T12134] netlink: 'syz.0.2716': attribute type 2 has an invalid length.
[  180.183853][T12144] bond6: entered promiscuous mode
[  180.689400][T12164] __nla_validate_parse: 4 callbacks suppressed
[  180.689423][T12164] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2727'.
[  180.740661][T12166] netlink: 'syz.2.2728': attribute type 9 has an invalid length.
[  180.852076][T12178] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2734'.
[  180.855451][T12178] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2734'.
[  181.074710][T12195] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  181.390978][T12223] netlink: 'syz.1.2755': attribute type 1 has an invalid length.
[  181.398500][T12223] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2755'.
[  181.515505][T12231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2759'.
[  181.760557][T12251] ieee802154 phy1 wpan1: encryption failed: -22
[  181.937664][T12258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2772'.
[  182.052918][T12264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2775'.
[  182.688132][T12304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2794'.
[  182.702770][T12306] IPv6: sit2: Disabled Multicast RS
[  182.941468][T12316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2800'.
[  183.415908][T12332] batman_adv: batadv0: Interface deactivated: veth7
[  183.432011][ T5850] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  183.434303][T12341] netlink: 'syz.1.2811': attribute type 1 has an invalid length.
[  183.435410][ T5850] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  183.438624][T12341] netlink: 'syz.1.2811': attribute type 4 has an invalid length.
[  183.445566][ T5850] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  183.448965][ T5850] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  183.453317][T12341] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2811'.
[  183.522497][T12346] netlink: 'syz.1.2814': attribute type 1 has an invalid length.
[  183.547039][T12346] 8021q: adding VLAN 0 to HW filter on device bond4
[  183.574870][T12346] bond4: entered promiscuous mode
[  183.576416][T12346] bond4: entered allmulticast mode
[  183.584822][T12346] dummy0: left promiscuous mode
[  183.596253][T12346] bond4: (slave dummy0): making interface the new active one
[  183.599767][T12346] dummy0: entered promiscuous mode
[  183.602907][T12346] dummy0: entered allmulticast mode
[  183.610730][T12346] bond4: (slave dummy0): Enslaving as an active interface with an up link
[  183.701703][T12360] netlink: 'syz.0.2819': attribute type 21 has an invalid length.
[  184.602227][T12387] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  184.772276][T12407] netlink: 'syz.2.2839': attribute type 1 has an invalid length.
[  185.172402][T12427] 
[  185.173230][T12427] ======================================================
[  185.175431][T12427] WARNING: possible circular locking dependency detected
[  185.177582][T12427] syzkaller #0 Not tainted
[  185.179138][T12427] ------------------------------------------------------
[  185.181269][T12427] syz.0.2849/12427 is trying to acquire lock:
[  185.183646][T12427] ffffffff8e85e9e8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x218/0x19c0
[  185.186727][T12427] 
[  185.186727][T12427] but task is already holding lock:
[  185.189262][T12427] ffff888107764318 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10
[  185.192507][T12427] 
[  185.192507][T12427] which lock already depends on the new lock.
[  185.192507][T12427] 
[  185.195755][T12427] 
[  185.195755][T12427] the existing dependency chain (in reverse order) is:
[  185.198541][T12427] 
[  185.198541][T12427] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  185.201267][T12427]        blk_alloc_queue+0x546/0x680
[  185.202911][T12427]        __blk_mq_alloc_disk+0x197/0x390
[  185.204653][T12427]        nbd_dev_add+0x499/0xb50
[  185.206257][T12427]        nbd_init+0x168/0x1f0
[  185.207696][T12427]        do_one_initcall+0x250/0x8d0
[  185.209425][T12427]        do_initcall_level+0x104/0x190
[  185.211172][T12427]        do_initcalls+0x59/0xa0
[  185.212697][T12427]        kernel_init_freeable+0x2a6/0x3e0
[  185.214715][T12427]        kernel_init+0x1d/0x1d0
[  185.216733][T12427]        ret_from_fork+0x51e/0xb90
[  185.218879][T12427]        ret_from_fork_asm+0x1a/0x30
[  185.221057][T12427] 
[  185.221057][T12427] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  185.223708][T12427]        fs_reclaim_acquire+0x71/0x100
[  185.226001][T12427]        prepare_alloc_pages+0x152/0x650
[  185.228267][T12427]        __alloc_frozen_pages_noprof+0x12f/0x380
[  185.230607][T12427]        __alloc_pages_noprof+0xa/0x30
[  185.232612][T12427]        pcpu_populate_chunk+0x182/0xb30
[  185.235133][T12427]        pcpu_alloc_noprof+0xc6c/0x19c0
[  185.237202][T12427]        xt_percpu_counter_alloc+0x161/0x220
[  185.239405][T12427]        translate_table+0x134a/0x2110
[  185.241434][T12427]        ipt_register_table+0x11b/0x7f0
[  185.243462][T12427]        iptable_raw_table_init+0x54/0x80
[  185.245468][T12427]        xt_find_table_lock+0x30c/0x3e0
[  185.247441][T12427]        xt_request_find_table_lock+0x26/0x100
[  185.249581][T12427]        do_ipt_get_ctl+0x716/0x1240
[  185.251457][T12427]        nf_getsockopt+0x26e/0x290
[  185.253784][T12427]        ip_getsockopt+0x19e/0x230
[  185.255670][T12427]        do_sock_getsockopt+0x2d3/0x3f0
[  185.257692][T12427]        __x64_sys_getsockopt+0x1a4/0x240
[  185.259813][T12427]        do_syscall_64+0x14d/0xf80
[  185.261744][T12427]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.264145][T12427] 
[  185.264145][T12427] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}:
[  185.266935][T12427]        __lock_acquire+0x15a5/0x2cf0
[  185.268931][T12427]        lock_acquire+0xf0/0x2e0
[  185.270791][T12427]        __mutex_lock+0x19f/0x1300
[  185.272682][T12427]        pcpu_alloc_noprof+0x218/0x19c0
[  185.274724][T12427]        sbitmap_init_node+0x1e1/0x640
[  185.276759][T12427]        sbitmap_queue_init_node+0x3e/0x4d0
[  185.280018][T12427]        blk_mq_init_tags+0x15c/0x2d0
[  185.282174][T12427]        blk_mq_alloc_map_and_rqs+0xbb/0x9c0
[  185.284557][T12427]        blk_mq_update_nr_hw_queues+0xa68/0x1ae0
[  185.287149][T12427]        nbd_start_device+0x17f/0xb10
[  185.289183][T12427]        nbd_genl_connect+0x165b/0x1cf0
[  185.291294][T12427]        genl_family_rcv_msg_doit+0x22a/0x330
[  185.293571][T12427]        genl_rcv_msg+0x61c/0x7a0
[  185.295539][T12427]        netlink_rcv_skb+0x232/0x4b0
[  185.297659][T12427]        genl_rcv+0x28/0x40
[  185.299488][T12427]        netlink_unicast+0x80f/0x9b0
[  185.301641][T12427]        netlink_sendmsg+0x813/0xb40
[  185.303737][T12427]        ____sys_sendmsg+0xa68/0xad0
[  185.305904][T12427]        ___sys_sendmsg+0x2a5/0x360
[  185.307981][T12427]        __x64_sys_sendmsg+0x1bd/0x2a0
[  185.309986][T12427]        do_syscall_64+0x14d/0xf80
[  185.311917][T12427]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.314477][T12427] 
[  185.314477][T12427] other info that might help us debug this:
[  185.314477][T12427] 
[  185.318419][T12427] Chain exists of:
[  185.318419][T12427]   pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#49
[  185.318419][T12427] 
[  185.323542][T12427]  Possible unsafe locking scenario:
[  185.323542][T12427] 
[  185.326400][T12427]        CPU0                    CPU1
[  185.328364][T12427]        ----                    ----
[  185.330445][T12427]   lock(&q->q_usage_counter(io)#49);
[  185.332567][T12427]                                lock(fs_reclaim);
[  185.335168][T12427]                                lock(&q->q_usage_counter(io)#49);
[  185.338193][T12427]   lock(pcpu_alloc_mutex);
[  185.339998][T12427] 
[  185.339998][T12427]  *** DEADLOCK ***
[  185.339998][T12427] 
[  185.343185][T12427] 6 locks held by syz.0.2849/12427:
[  185.345234][T12427]  #0: ffffffff8fc39ff0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  185.348486][T12427]  #1: ffffffff8fc39e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  185.352041][T12427]  #2: ffff88810964c1d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0
[  185.356325][T12427]  #3: ffff88810964c0d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0
[  185.360618][T12427]  #4: ffff888107764318 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10
[  185.364821][T12427]  #5: ffff888107764350 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10
[  185.369124][T12427] 
[  185.369124][T12427] stack backtrace:
[  185.371437][T12427] CPU: 0 UID: 0 PID: 12427 Comm: syz.0.2849 Not tainted syzkaller #0 PREEMPT(full) 
[  185.371456][T12427] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  185.371468][T12427] Call Trace:
[  185.371476][T12427]  <TASK>
[  185.371485][T12427]  dump_stack_lvl+0xe8/0x150
[  185.371510][T12427]  print_circular_bug+0x2e1/0x300
[  185.371538][T12427]  check_noncircular+0x12e/0x150
[  185.371564][T12427]  __lock_acquire+0x15a5/0x2cf0
[  185.371592][T12427]  lock_acquire+0xf0/0x2e0
[  185.371607][T12427]  ? pcpu_alloc_noprof+0x218/0x19c0
[  185.371627][T12427]  __mutex_lock+0x19f/0x1300
[  185.371642][T12427]  ? pcpu_alloc_noprof+0x218/0x19c0
[  185.371658][T12427]  ? stack_depot_save_flags+0x3f3/0x810
[  185.371678][T12427]  ? kasan_save_track+0x4f/0x80
[  185.371691][T12427]  ? kasan_save_track+0x3e/0x80
[  185.371705][T12427]  ? pcpu_alloc_noprof+0x218/0x19c0
[  185.371719][T12427]  ? __kmalloc_cache_node_noprof+0x3ef/0x6b0
[  185.371736][T12427]  ? blk_mq_init_tags+0x83/0x2d0
[  185.371754][T12427]  ? blk_mq_alloc_map_and_rqs+0xbb/0x9c0
[  185.371767][T12427]  ? blk_mq_update_nr_hw_queues+0xa68/0x1ae0
[  185.371781][T12427]  ? __pfx___mutex_lock+0x10/0x10
[  185.371790][T12427]  ? genl_rcv+0x28/0x40
[  185.371808][T12427]  ? ____sys_sendmsg+0xa68/0xad0
[  185.371828][T12427]  ? ___sys_sendmsg+0x2a5/0x360
[  185.371852][T12427]  pcpu_alloc_noprof+0x218/0x19c0
[  185.371874][T12427]  sbitmap_init_node+0x1e1/0x640
[  185.371895][T12427]  sbitmap_queue_init_node+0x3e/0x4d0
[  185.371917][T12427]  blk_mq_init_tags+0x15c/0x2d0
[  185.371936][T12427]  blk_mq_alloc_map_and_rqs+0xbb/0x9c0
[  185.371950][T12427]  ? kfree+0x1c1/0x630
[  185.371967][T12427]  ? blk_mq_update_nr_hw_queues+0x977/0x1ae0
[  185.371990][T12427]  blk_mq_update_nr_hw_queues+0xa68/0x1ae0
[  185.372043][T12427]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[  185.372066][T12427]  ? sysfs_add_file_mode_ns+0x259/0x300
[  185.372087][T12427]  nbd_start_device+0x17f/0xb10
[  185.372110][T12427]  ? device_create_file+0xf4/0x1b0
[  185.372135][T12427]  nbd_genl_connect+0x165b/0x1cf0
[  185.372159][T12427]  ? __pfx_nbd_genl_connect+0x10/0x10
[  185.372178][T12427]  ? rcu_is_watching+0x15/0xb0
[  185.372199][T12427]  ? __nla_parse+0x40/0x60
[  185.372218][T12427]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  185.372241][T12427]  genl_family_rcv_msg_doit+0x22a/0x330
[  185.372262][T12427]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  185.372287][T12427]  ? __lock_acquire+0x6b5/0x2cf0
[  185.372306][T12427]  genl_rcv_msg+0x61c/0x7a0
[  185.372328][T12427]  ? __pfx_genl_rcv_msg+0x10/0x10
[  185.372370][T12427]  ? __pfx_nbd_genl_connect+0x10/0x10
[  185.372389][T12427]  ? __lock_acquire+0x6b5/0x2cf0
[  185.372411][T12427]  netlink_rcv_skb+0x232/0x4b0
[  185.372427][T12427]  ? __pfx_genl_rcv_msg+0x10/0x10
[  185.372446][T12427]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  185.372467][T12427]  ? down_read+0x272/0x2e0
[  185.372479][T12427]  ? genl_rcv+0xd/0x40
[  185.372499][T12427]  genl_rcv+0x28/0x40
[  185.372521][T12427]  netlink_unicast+0x80f/0x9b0
[  185.372540][T12427]  ? __pfx_netlink_unicast+0x10/0x10
[  185.372555][T12427]  ? netlink_sendmsg+0x650/0xb40
[  185.372571][T12427]  ? skb_put+0x11b/0x210
[  185.372590][T12427]  netlink_sendmsg+0x813/0xb40
[  185.372609][T12427]  ? __pfx_netlink_sendmsg+0x10/0x10
[  185.372627][T12427]  ? aa_sock_msg_perm+0xf1/0x1b0
[  185.372643][T12427]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  185.372659][T12427]  ? __pfx_netlink_sendmsg+0x10/0x10
[  185.372674][T12427]  ____sys_sendmsg+0xa68/0xad0
[  185.372694][T12427]  ? futex_unqueue+0x211/0x240
[  185.372713][T12427]  ? __pfx_____sys_sendmsg+0x10/0x10
[  185.372735][T12427]  ? import_iovec+0x73/0xa0
[  185.372756][T12427]  ___sys_sendmsg+0x2a5/0x360
[  185.372776][T12427]  ? __pfx____sys_sendmsg+0x10/0x10
[  185.372799][T12427]  ? futex_wait+0x29a/0x380
[  185.372826][T12427]  ? __fget_files+0x2a/0x420
[  185.372845][T12427]  ? __fget_files+0x3a0/0x420
[  185.372866][T12427]  __x64_sys_sendmsg+0x1bd/0x2a0
[  185.372887][T12427]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  185.372910][T12427]  ? rcu_is_watching+0x15/0xb0
[  185.372932][T12427]  do_syscall_64+0x14d/0xf80
[  185.372952][T12427]  ? trace_irq_disable+0x3b/0x150
[  185.372972][T12427]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.373003][T12427]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.373044][T12427] RIP: 0033:0x7f930df9cdd9
[  185.373063][T12427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  185.373077][T12427] RSP: 002b:00007f930ef0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  185.373093][T12427] RAX: ffffffffffffffda RBX: 00007f930e215fa0 RCX: 00007f930df9cdd9
[  185.373103][T12427] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 0000000000000006
[  185.373114][T12427] RBP: 00007f930e032d69 R08: 0000000000000000 R09: 0000000000000000
[  185.373124][T12427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  185.373132][T12427] R13: 00007f930e216038 R14: 00007f930e215fa0 R15: 00007ffcc88ed2a8
[  185.373150][T12427]  </TASK>
[  185.581442][T12440] netlink: 'syz.2.2854': attribute type 1 has an invalid length.
[  185.667288][T12441] block nbd0: Receive control failed (result -32)
[  185.669264][   T56] block nbd0: Receive control failed (result -32)
