last executing test programs:

5.09729549s ago: executing program 1 (id=2507):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r2 = accept(r0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0x14, 0x4, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r2}, 0x47)

5.001773509s ago: executing program 1 (id=2509):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.921939005s ago: executing program 1 (id=2510):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x13}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.851918609s ago: executing program 1 (id=2511):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

4.411054136s ago: executing program 1 (id=2519):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)

1.179370628s ago: executing program 2 (id=2561):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x0)

1.121474922s ago: executing program 2 (id=2564):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="b7", 0x1}], 0x1)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r2, 0x0)
recvmmsg(r2, &(0x7f0000001240)=[{{&(0x7f0000000500)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000005c0)=""/138, 0x8a}, {&(0x7f0000000680)=""/244, 0xf4}, {&(0x7f0000000780)=""/185, 0xb9}, {&(0x7f0000000840)=""/189, 0xbd}, {&(0x7f0000000900)=""/233, 0xe9}, {&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000a00)=""/130, 0x82}], 0x7, &(0x7f0000000b40)=""/132, 0x84}, 0x200}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000c00)=""/250, 0xfa}, {&(0x7f00000003c0)=""/64, 0x40}, {&(0x7f0000000dc0)=""/181, 0xb5}, {&(0x7f0000000e80)=""/141, 0x8d}, {&(0x7f0000000f40)=""/176, 0xb0}, {&(0x7f0000001000)=""/134, 0x86}], 0x6, &(0x7f0000001140)=""/204, 0xcc}, 0x58}], 0x2, 0xf0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000000040000000400", @ANYRES32=0x1, @ANYRES64=r2, @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB="00000000c79c7b19d5808847000000000000000000000002849d58ce7f2e82712ebe7944e60bbda2fa2ce0d411b54ff2e999ac51e1e91c6c01eb27270a1f72b67a7cff6e6021a40aa363d8a748ccb0a47e29d2bbdb14dff5606c8b2371cba2900d15f529e6108df3d0921d9f065e7b6cc722fd5ef2c81296cc96e7e2ee523fb5756a7547e6789476f92c914952a2b3ce1e7fa5b18fc819da184e794dac3584"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff7b)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000160e00000020c000280"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
socket(0x2, 0x80805, 0x0)
sendmsg(r2, &(0x7f0000006800)={0x0, 0x0, 0x0}, 0x810)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, &(0x7f0000006240))
recvmmsg(r2, &(0x7f0000006080), 0x0, 0x10142, 0x0)

813.242228ms ago: executing program 2 (id=2566):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010)

746.839986ms ago: executing program 2 (id=2569):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)

649.432758ms ago: executing program 2 (id=2571):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030c00000000000000fbdbdf2502000900080000009700000000000000030006"], 0x60}, 0x1, 0x7}, 0x0)

574.433297ms ago: executing program 2 (id=2572):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000d40)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a", 0xfffffd61, 0x4000800, 0x0, 0xfffffffffffffef8)
recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000080)=""/43, 0xffffffffffffff03}, {&(0x7f0000000100)=""/6}], 0x2}, 0x2}], 0x2, 0x62, 0x0)
socket(0x400000000010, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r1, 0x100101)
accept(r1, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0)

449.194417ms ago: executing program 1 (id=2575):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)}}], 0x2, 0x24000045)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f0000000040))
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80), &(0x7f0000000dc0), 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x0)

371.167413ms ago: executing program 0 (id=2577):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000700000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d0000001801000020786c2500000000902020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)

281.093913ms ago: executing program 0 (id=2578):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe40, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

231.705498ms ago: executing program 0 (id=2579):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, '\x00', "5193bb672965593497c186a80e000000000000000000000000000000dffdffff", '\x00\x00=*', "12c24b40c6000010"}, 0x38)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e26, 0x2, @mcast2, 0x8000}}, 0x0, 0x0, 0x7, 0x0, "ba7455d039856e43ac49361ed2125968cc9bbcd33e5e1cc0b8a2e05b63b8b2027b8489b16891d0fc3654c5ecf218ce15477f2dcb08d68abe8156ce5d20c4d9f3795460db9904a78225926baa7187fd3e"}, 0xd8)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x5, @loopback}, 0x1c)

231.420706ms ago: executing program 0 (id=2580):
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0xc, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})

296.981µs ago: executing program 0 (id=2581):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)

0s ago: executing program 0 (id=2582):
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket(0x28, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000002600), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000300)={0x3c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0x8, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004840)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:15096' (ED25519) to the list of known hosts.
syzkaller login: [   56.286289][ T5838] cgroup: Unknown subsys name 'net'
[   56.416451][ T5838] cgroup: Unknown subsys name 'cpuset'
[   56.423308][ T5838] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.597536][ T5838] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.015242][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.018949][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.022185][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.025263][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.028253][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.117017][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.121200][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.124492][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.128398][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.132107][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.173871][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.181444][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.184567][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.188711][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.192993][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.307011][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   64.468250][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.472137][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.475178][ T5853] bridge_slave_0: entered allmulticast mode
[   64.479213][ T5853] bridge_slave_0: entered promiscuous mode
[   64.498777][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.501796][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.504555][ T5853] bridge_slave_1: entered allmulticast mode
[   64.508288][ T5853] bridge_slave_1: entered promiscuous mode
[   64.576247][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.599417][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.650932][ T5853] team0: Port device team_slave_0 added
[   64.671488][ T5858] chnl_net:caif_netlink_parms(): no params data found
[   64.680365][ T5853] team0: Port device team_slave_1 added
[   64.779699][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.783039][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.793025][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.811461][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.814158][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.826123][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.897835][ T5861] chnl_net:caif_netlink_parms(): no params data found
[   64.925804][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.928683][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.932476][ T5858] bridge_slave_0: entered allmulticast mode
[   64.936310][ T5858] bridge_slave_0: entered promiscuous mode
[   64.961357][ T5853] hsr_slave_0: entered promiscuous mode
[   64.964759][ T5853] hsr_slave_1: entered promiscuous mode
[   64.977916][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.980736][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.984074][ T5858] bridge_slave_1: entered allmulticast mode
[   64.988008][ T5858] bridge_slave_1: entered promiscuous mode
[   65.063834][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.085275][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.127073][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.129393][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.133260][ T5861] bridge_slave_0: entered allmulticast mode
[   65.136753][ T5861] bridge_slave_0: entered promiscuous mode
[   65.160332][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.163367][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.165493][ T5861] bridge_slave_1: entered allmulticast mode
[   65.168245][ T5861] bridge_slave_1: entered promiscuous mode
[   65.179926][ T5858] team0: Port device team_slave_0 added
[   65.184966][ T5858] team0: Port device team_slave_1 added
[   65.203991][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.223960][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.256791][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.259304][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.268673][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.289049][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.292980][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.300701][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.326547][ T5861] team0: Port device team_slave_0 added
[   65.333082][ T5861] team0: Port device team_slave_1 added
[   65.400049][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.403002][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.411710][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.430759][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.433733][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.443724][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.452871][ T5858] hsr_slave_0: entered promiscuous mode
[   65.456330][ T5858] hsr_slave_1: entered promiscuous mode
[   65.459265][ T5858] debugfs: 'hsr0' already exists in 'hsr'
[   65.462369][ T5858] Cannot create hsr debugfs directory
[   65.555343][ T5861] hsr_slave_0: entered promiscuous mode
[   65.558477][ T5861] hsr_slave_1: entered promiscuous mode
[   65.561739][ T5861] debugfs: 'hsr0' already exists in 'hsr'
[   65.564017][ T5861] Cannot create hsr debugfs directory
[   65.574694][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.584346][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.605305][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.613737][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.851305][ T5858] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.859619][ T5858] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.879749][ T5858] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.896918][ T5858] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.945024][ T5861] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.954963][ T5861] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.964072][ T5861] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.973195][ T5861] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.011253][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.047328][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   66.078196][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.081199][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.098154][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.101114][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.105046][ T5854] Bluetooth: hci0: command tx timeout
[   66.182009][ T5854] Bluetooth: hci1: command tx timeout
[   66.187635][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.228439][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[   66.237589][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.246600][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.248855][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.262997][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.265856][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.273879][ T5854] Bluetooth: hci2: command tx timeout
[   66.296351][ T5861] 8021q: adding VLAN 0 to HW filter on device team0
[   66.304781][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.307672][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.333614][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.336429][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.363420][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.400292][ T5861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.483794][ T5853] veth0_vlan: entered promiscuous mode
[   66.490828][ T5853] veth1_vlan: entered promiscuous mode
[   66.554219][ T5853] veth0_macvtap: entered promiscuous mode
[   66.568911][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.577706][ T5853] veth1_macvtap: entered promiscuous mode
[   66.597817][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.611315][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.638296][ T5866] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.647429][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.654530][ T5866] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.666463][ T5866] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.674403][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.705034][ T5861] veth0_vlan: entered promiscuous mode
[   66.737150][ T5861] veth1_vlan: entered promiscuous mode
[   66.752447][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.754878][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.799719][ T5858] veth0_vlan: entered promiscuous mode
[   66.808691][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.812669][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.833885][ T5858] veth1_vlan: entered promiscuous mode
[   66.837580][ T5861] veth0_macvtap: entered promiscuous mode
[   66.864171][ T5861] veth1_macvtap: entered promiscuous mode
[   66.885874][ T5853] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.892753][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.903458][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.914197][ T5858] veth0_macvtap: entered promiscuous mode
[   66.939312][ T5858] veth1_macvtap: entered promiscuous mode
[   66.962146][ T5917] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2'.
[   66.974189][ T5866] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.983677][ T5866] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.986430][ T5866] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.989852][ T5866] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.016046][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.029386][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.059643][ T5866] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.070638][ T5866] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.099189][ T5866] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.103237][ T5866] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.190806][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.196896][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.293849][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.296803][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.365706][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.368276][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.428020][ T5929] Bluetooth: MGMT ver 1.23
[   67.430749][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.436149][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.181862][ T5854] Bluetooth: hci0: command tx timeout
[   68.276036][ T5854] Bluetooth: hci1: command tx timeout
[   68.303479][ T5977] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   68.313942][    C0] Illegal XDP return value 16128 on prog  (id 5) dev lo, expect packet loss!
[   68.342103][ T5854] Bluetooth: hci2: command tx timeout
[   68.443453][ T5981] netlink: zone id is out of range
[   68.445832][ T5981] netlink: zone id is out of range
[   68.447897][ T5981] netlink: zone id is out of range
[   68.449955][ T5981] netlink: zone id is out of range
[   68.453000][ T5981] netlink: zone id is out of range
[   68.455103][ T5981] netlink: zone id is out of range
[   68.461661][ T5981] netlink: zone id is out of range
[   68.463773][ T5981] netlink: zone id is out of range
[   68.465851][ T5981] netlink: zone id is out of range
[   68.839794][ T5999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'.
[   69.316911][ T6030] Zero length message leads to an empty skb
[   69.530378][ T6042] ip6erspan0: entered allmulticast mode
[   69.594265][ T6046] netlink: 224 bytes leftover after parsing attributes in process `syz.2.56'.
[   70.184156][ T6079] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.239382][ T6081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.71'.
[   70.262574][ T5854] Bluetooth: hci0: command tx timeout
[   70.341772][ T5854] Bluetooth: hci1: command tx timeout
[   70.422688][ T5854] Bluetooth: hci2: command tx timeout
[   70.861687][ T6108] bridge0: port 3(ipvlan2) entered blocking state
[   70.864333][ T6108] bridge0: port 3(ipvlan2) entered disabled state
[   70.866926][ T6108] ipvlan2: entered allmulticast mode
[   70.869028][ T6108] bridge0: entered allmulticast mode
[   70.874506][ T6108] ipvlan2: left allmulticast mode
[   70.876475][ T6108] bridge0: left allmulticast mode
[   70.918760][ T6116] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.040538][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'.
[   71.073098][ T6121] sctp: [Deprecated]: syz.0.89 (pid 6121) Use of int in max_burst socket option deprecated.
[   71.073098][ T6121] Use struct sctp_assoc_value instead
[   71.133951][ T6129] netlink: 'syz.2.94': attribute type 21 has an invalid length.
[   71.136913][ T6129] netlink: 156 bytes leftover after parsing attributes in process `syz.2.94'.
[   71.150732][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.153607][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.234265][ T6132] syz.1.95 uses obsolete (PF_INET,SOCK_PACKET)
[   72.201768][ T6181] syzkaller0: entered allmulticast mode
[   72.260985][ T6181] syzkaller0 (unregistering): left allmulticast mode
[   72.341505][ T5854] Bluetooth: hci0: command tx timeout
[   72.423924][ T5854] Bluetooth: hci1: command tx timeout
[   72.501953][ T5854] Bluetooth: hci2: command tx timeout
[   72.828838][ T6223] netlink: 'syz.0.119': attribute type 10 has an invalid length.
[   72.859835][ T6223] team0: Port device dummy0 added
[   72.870314][ T6227] af_packet: tpacket_rcv: packet too big, clamped from 72 to 4294967272. macoff=96
[   72.892659][ T6229] netlink: 'syz.0.119': attribute type 10 has an invalid length.
[   72.923391][ T6229] team0: Port device dummy0 removed
[   72.937120][ T6229] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   72.949546][ T6228] netlink: 256 bytes leftover after parsing attributes in process `syz.1.120'.
[   72.956191][ T6228] netlink: 48 bytes leftover after parsing attributes in process `syz.1.120'.
[   72.987785][ T6228] lo speed is unknown, defaulting to 1000
[   72.998207][ T6228] lo speed is unknown, defaulting to 1000
[   73.006950][ T6228] lo speed is unknown, defaulting to 1000
[   73.394782][ T6228] infiniband syz0: set active
[   73.396607][ T6228] infiniband syz0: added lo
[   73.403709][  T791] lo speed is unknown, defaulting to 1000
[   73.435405][ T6228] RDS/IB: syz0: added
[   73.440869][ T6228] smc: adding ib device syz0 with port count 1
[   73.447800][ T6228] smc:    ib device syz0 port 1 has pnetid 
[   73.451577][  T791] lo speed is unknown, defaulting to 1000
[   73.455403][ T6228] lo speed is unknown, defaulting to 1000
[   73.626854][ T6248] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.126'.
[   73.718507][ T6228] lo speed is unknown, defaulting to 1000
[   73.764321][ T6256] net_ratelimit: 13 callbacks suppressed
[   73.764334][ T6256] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[   73.890837][ T6228] lo speed is unknown, defaulting to 1000
[   73.910235][ T6266] batadv_slave_1: entered promiscuous mode
[   73.914410][ T6265] batadv_slave_1: left promiscuous mode
[   74.084464][ T6272] gtp0: entered promiscuous mode
[   74.224994][ T6282] warning: `syz.0.143' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   74.465038][ T6289] tipc: Started in network mode
[   74.469318][ T6289] tipc: Node identity 86f241ccd785, cluster identity 4711
[   74.473038][ T6289] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.649158][ T6289] syzkaller0: entered promiscuous mode
[   74.656557][ T6289] syzkaller0: entered allmulticast mode
[   74.671943][ T6289] tipc: Resetting bearer <eth:syzkaller0>
[   74.713938][ T6288] tipc: Resetting bearer <eth:syzkaller0>
[   75.569686][ T5315] tipc: Node number set to 1366770124
[   75.999787][ T6288] tipc: Disabling bearer <eth:syzkaller0>
[   76.006411][ T6320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.159'.
[   76.022052][ T6320] netlink: 'syz.1.159': attribute type 12 has an invalid length.
[   76.036669][ T6320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.159'.
[   76.039540][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   76.043146][ T6320] netlink: 'syz.1.159': attribute type 12 has an invalid length.
[   76.051810][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   76.058242][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   76.068163][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   76.115668][ T6323] netlink: 'syz.2.160': attribute type 21 has an invalid length.
[   76.118340][ T6323] netlink: 'syz.2.160': attribute type 22 has an invalid length.
[   76.130456][ T6323] netlink: 'syz.2.160': attribute type 23 has an invalid length.
[   76.133974][ T6323] netlink: 'syz.2.160': attribute type 25 has an invalid length.
[   76.137090][ T6323] netlink: 96 bytes leftover after parsing attributes in process `syz.2.160'.
[   76.186086][ T6328] netlink: 'syz.1.163': attribute type 11 has an invalid length.
[   76.188848][ T6328] netlink: 'syz.1.163': attribute type 4 has an invalid length.
[   76.192832][ T6328] netlink: 224 bytes leftover after parsing attributes in process `syz.1.163'.
[   76.297257][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'.
[   76.325854][ T6338] lo speed is unknown, defaulting to 1000
[   76.369862][ T6340] bridge_slave_0: left allmulticast mode
[   76.375072][ T6340] bridge_slave_0: left promiscuous mode
[   76.378577][ T6340] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.418226][ T6340] bridge_slave_1: left allmulticast mode
[   76.420280][ T6340] bridge_slave_1: left promiscuous mode
[   76.422855][ T6340] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.436321][ T6340] bond0: (slave bond_slave_0): Releasing backup interface
[   76.449171][ T6340] bond0: (slave bond_slave_1): Releasing backup interface
[   76.476197][ T6340] team0: Port device team_slave_0 removed
[   76.490728][ T6340] team0: Port device team_slave_1 removed
[   76.494345][ T6340] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.496810][ T6340] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.506745][ T6340] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.509844][ T6340] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.524475][ T6343] team0: Mode changed to "broadcast"
[   76.533156][ T6346] vlan0: entered promiscuous mode
[   76.540556][ T6346] team0: Port device vlan0 added
[   76.586435][ T6340] tipc: Started in network mode
[   76.589579][ T6340] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   76.598509][ T6340] tipc: Enabled bearer <eth:team0>, priority 0
[   76.782235][ T6352] tipc: Started in network mode
[   76.784201][ T6352] tipc: Node identity 4abc22206c62, cluster identity 4711
[   76.787207][ T6352] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.798237][ T6352] syzkaller0: entered promiscuous mode
[   76.800328][ T6352] syzkaller0: entered allmulticast mode
[   76.834164][ T6352] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   76.866832][ T6352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.173'.
[   76.882188][ T6352] tipc: Resetting bearer <eth:syzkaller0>
[   76.893540][ T6351] tipc: Resetting bearer <eth:syzkaller0>
[   76.914243][ T6351] tipc: Disabling bearer <eth:syzkaller0>
[   77.147758][ T6377] netlink: 'syz.1.185': attribute type 4 has an invalid length.
[   77.150437][ T6375] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.190002][ T6375] syzkaller0: entered promiscuous mode
[   77.192055][ T6375] syzkaller0: entered allmulticast mode
[   77.194488][ T6375] tipc: Resetting bearer <eth:syzkaller0>
[   77.233379][ T6374] tipc: Resetting bearer <eth:syzkaller0>
[   77.293712][ T6387] netlink: 56 bytes leftover after parsing attributes in process `syz.1.190'.
[   77.455901][ T6393] netlink: 'syz.0.189': attribute type 10 has an invalid length.
[   78.151364][ T5315] tipc: Node number set to 11578026
[   78.209247][ T6374] tipc: Disabling bearer <eth:syzkaller0>
[   78.318398][ T6392] team0 (unregistering): Port device team_slave_0 removed
[   78.325913][ T6392] team0 (unregistering): Port device team_slave_1 removed
[   78.336036][ T6393] bond0: (slave wlan1): Opening slave failed
[   78.340303][ T6395] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   78.600159][ T6413] netlink: 410 bytes leftover after parsing attributes in process `syz.0.199'.
[   78.765394][ T6424] netlink: 'syz.0.205': attribute type 64 has an invalid length.
[   79.016728][ T6440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.210'.
[   79.044250][ T6437] netlink: 'syz.1.209': attribute type 10 has an invalid length.
[   79.050740][ T6440] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   79.054516][   T13] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   79.058042][   T13] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   79.064843][ T6437] bond0: (slave wlan1): Opening slave failed
[   79.071500][   T13] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   79.080868][   T13] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   79.155167][ T6446] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   79.693850][ T6482] netlink: 44 bytes leftover after parsing attributes in process `syz.0.231'.
[   79.769716][ T6485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.233'.
[   79.793893][ T6492] tipc: Resetting bearer <eth:team0>
[   79.810168][ T6485] veth0_macvtap: left promiscuous mode
[   79.950189][ T6500] lo speed is unknown, defaulting to 1000
[   79.970021][ T6505] raw_sendmsg: syz.1.240 forgot to set AF_INET. Fix it!
[   79.991345][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.241'.
[   80.174945][ T6508] lo speed is unknown, defaulting to 1000
[   80.315550][ T6515] lo speed is unknown, defaulting to 1000
[   80.528998][ T6536] netlink: 'syz.1.252': attribute type 21 has an invalid length.
[   80.532740][ T6536] netlink: 164 bytes leftover after parsing attributes in process `syz.1.252'.
[   81.760554][ T6578] netlink: 'syz.2.270': attribute type 2 has an invalid length.
[   82.116528][ T6600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.282'.
[   82.237146][ T6608] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[   82.406435][ T6622] netlink: 16 bytes leftover after parsing attributes in process `syz.0.292'.
[   82.504830][ T6630] netlink: 'syz.1.296': attribute type 6 has an invalid length.
[   82.614614][   T47] lo speed is unknown, defaulting to 1000
[   82.658080][ T6648] netlink: 'syz.1.307': attribute type 12 has an invalid length.
[   83.421855][ T6716] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[   83.662159][ T6728] lo speed is unknown, defaulting to 1000
[   83.706950][ T6732] ieee802154 phy0 wpan0: encryption failed: -22
[   84.008231][ T6747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.345'.
[   84.012908][ T6747] netlink: 24 bytes leftover after parsing attributes in process `syz.0.345'.
[   84.229632][ T6756] lo speed is unknown, defaulting to 1000
[   84.389004][ T6772] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.353'.
[   84.448382][ T6774] netlink: 'syz.2.354': attribute type 12 has an invalid length.
[   84.455487][ T6763] lo speed is unknown, defaulting to 1000
[   84.817431][ T6790] netlink: 'syz.2.361': attribute type 4 has an invalid length.
[   85.011437][ T6807] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.043463][ T6807] tipc: Resetting bearer <eth:syzkaller0>
[   85.058586][ T6804] tipc: Resetting bearer <eth:syzkaller0>
[   86.072250][ T6804] tipc: Disabling bearer <eth:syzkaller0>
[   86.390067][ T6834] ieee802154 phy0 wpan0: encryption failed: -22
[   86.508010][    T9] cfg80211: failed to load regulatory.db
[   86.927198][ T6881] netlink: 96 bytes leftover after parsing attributes in process `syz.1.391'.
[   87.064761][ T6895] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   87.139301][ T6899] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   87.149274][ T6899] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   87.430926][ T6922] lo speed is unknown, defaulting to 1000
[   88.156933][ T6937] lo speed is unknown, defaulting to 1000
[   88.740514][ T6992] netlink: 'syz.1.440': attribute type 10 has an invalid length.
[   88.755591][ T6992] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   88.864313][ T6998] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649
[   89.119162][ T7022] netlink: 'syz.1.453': attribute type 12 has an invalid length.
[   89.123306][ T7022] netlink: 'syz.1.453': attribute type 29 has an invalid length.
[   89.126151][ T7022] netlink: 148 bytes leftover after parsing attributes in process `syz.1.453'.
[   89.192084][ T7030] openvswitch: netlink: IP tunnel dst address not specified
[   89.345449][ T7050] netlink: 'syz.2.466': attribute type 7 has an invalid length.
[   89.467014][ T7070] netlink: 3 bytes leftover after parsing attributes in process `syz.1.476'.
[   89.509835][ T7066] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   89.514660][   T47] IPVS: starting estimator thread 0...
[   89.601184][ T7074] IPVS: using max 64 ests per chain, 153600 per kthread
[   90.024278][ T7141] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.028186][ T7141] syzkaller0: entered promiscuous mode
[   90.029913][ T7141] syzkaller0: entered allmulticast mode
[   90.046963][ T7141] tipc: Resetting bearer <eth:syzkaller0>
[   90.054851][ T7140] tipc: Resetting bearer <eth:syzkaller0>
[   90.077008][ T7140] tipc: Disabling bearer <eth:syzkaller0>
[   90.154931][ T7149] lo speed is unknown, defaulting to 1000
[   90.458366][ T7172] netlink: 'syz.0.522': attribute type 12 has an invalid length.
[   90.464759][ T7172] netlink: 'syz.0.522': attribute type 29 has an invalid length.
[   90.467631][ T7172] netlink: 148 bytes leftover after parsing attributes in process `syz.0.522'.
[   90.740012][ T7201] veth1_macvtap: left promiscuous mode
[   90.743820][ T7201] macsec0: entered promiscuous mode
[   90.745551][ T7201] macsec0: entered allmulticast mode
[   90.753127][ T7201] veth1_macvtap: entered promiscuous mode
[   90.755499][ T7201] veth1_macvtap: entered allmulticast mode
[   90.765090][ T7201] macsec0: left promiscuous mode
[   90.767244][ T7201] macsec0: left allmulticast mode
[   90.769274][ T7201] veth1_macvtap: left allmulticast mode
[   90.846349][ T7213] netlink: 'syz.0.543': attribute type 8 has an invalid length.
[   90.874635][ T7218] IPv6: addrconf: prefix option has invalid lifetime
[   91.042055][ T7233] lo speed is unknown, defaulting to 1000
[   91.074426][ T7244] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   91.467279][ T7281] netlink: 'syz.0.573': attribute type 1 has an invalid length.
[   91.469758][ T7281] netlink: 56 bytes leftover after parsing attributes in process `syz.0.573'.
[   91.643551][ T7294] syzkaller1: tun_chr_ioctl cmd 1074025677
[   91.646084][ T7294] syzkaller1: linktype set to 6
[   91.670112][ T7297] ip6gre1: entered allmulticast mode
[   91.849273][ T7310] netlink: 'syz.1.588': attribute type 1 has an invalid length.
[   91.853492][ T7310] netlink: 'syz.1.588': attribute type 2 has an invalid length.
[   92.004737][ T7325] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   92.117962][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.599'.
[   92.430159][ T5315] syz1: Port: 1 Link DOWN
[   92.433114][ T5882] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.439242][ T5882] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.456130][ T5882] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.460261][ T5882] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.526839][ T7348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.606'.
[   92.530497][ T7348] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   92.697898][ T7364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.614'.
[   93.090343][ T7407] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.631'.
[   93.113054][ T7400] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.631'.
[   93.228298][ T7422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.638'.
[   93.597696][ T7459] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.135709][ T7515] tipc: New replicast peer: 255.255.255.255
[   94.138825][ T7515] tipc: Enabled bearer <udp:syz2>, priority 10
[   96.365308][ T7634] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   96.395614][ T7637] __nla_validate_parse: 3 callbacks suppressed
[   96.395625][ T7637] netlink: 28 bytes leftover after parsing attributes in process `syz.2.729'.
[   96.550432][ T7653] lo speed is unknown, defaulting to 1000
[   97.745830][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.754'.
[   97.756713][ T7697] erspan0: entered promiscuous mode
[   97.762305][ T7697] erspan0: left promiscuous mode
[   97.861886][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[   97.935837][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.755'.
[   97.947861][ T7699] veth1_macvtap: left promiscuous mode
[   98.437962][ T7750] lo speed is unknown, defaulting to 1000
[   98.520948][ T7754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.778'.
[   99.070537][ T7804] tap0: tun_chr_ioctl cmd 1074025676
[   99.072738][ T7804] tap0: owner set to 0
[   99.179099][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.807'.
[   99.182263][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.807'.
[  100.618300][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.842'.
[  100.690344][ T7900] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  100.778690][ T7907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.849'.
[  100.789222][ T7907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.849'.
[  101.162548][ T7946] validate_nla: 2 callbacks suppressed
[  101.162570][ T7946] netlink: 'syz.2.865': attribute type 1 has an invalid length.
[  101.448556][ T7969] sctp: [Deprecated]: syz.0.877 (pid 7969) Use of struct sctp_assoc_value in delayed_ack socket option.
[  101.448556][ T7969] Use struct sctp_sack_info instead
[  101.774734][ T7985] bridge1: the hash_elasticity option has been deprecated and is always 16
[  102.171860][ T8013] netlink: 164 bytes leftover after parsing attributes in process `syz.0.893'.
[  103.692130][ T8045] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.695645][ T8045] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.039798][ T8045] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  104.057849][ T8045] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  104.168041][ T8045] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  104.172895][ T8045] gtp0: left promiscuous mode
[  104.189287][ T5866] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.201091][ T5866] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  104.209142][ T5866] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.215160][ T5866] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  104.218743][ T5866] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.222750][ T5866] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  104.226325][ T5866] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.229788][ T5866] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  104.362870][ T7955] Set syz1 is full, maxelem 65536 reached
[  104.416679][ T8058] netlink: 20 bytes leftover after parsing attributes in process `syz.1.907'.
[  104.425671][ T8058] geneve2: entered promiscuous mode
[  104.469808][ T8062] netlink: 'syz.1.909': attribute type 10 has an invalid length.
[  104.473317][ T8062] netlink: 40 bytes leftover after parsing attributes in process `syz.1.909'.
[  104.476167][ T8062] veth0_vlan: entered allmulticast mode
[  104.478600][ T8062] bridge0: port 3(veth0_vlan) entered blocking state
[  104.480904][ T8062] bridge0: port 3(veth0_vlan) entered disabled state
[  104.487358][ T8062] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  104.869337][ T8088] syzkaller1: entered promiscuous mode
[  104.872550][ T8088] syzkaller1: entered allmulticast mode
[  105.824017][ T8108] netlink: 232 bytes leftover after parsing attributes in process `syz.1.930'.
[  105.827318][ T8110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.931'.
[  106.565717][ T8163] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  106.670959][ T8170] netlink: 16 bytes leftover after parsing attributes in process `syz.0.948'.
[  106.935622][ T8189] netlink: 64 bytes leftover after parsing attributes in process `syz.1.957'.
[  107.059487][ T8203] netlink: 'syz.1.964': attribute type 1 has an invalid length.
[  107.354195][ T8218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.969'.
[  108.360696][ T8287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.995'.
[  108.537223][ T8307] ieee802154 phy0 wpan0: encryption failed: -22
[  108.791802][ T8329] vcan0: tx drop: invalid da for name 0xfffffffffffffffb
[  108.795500][ T8331] Bluetooth: MGMT ver 1.23
[  109.165140][ T8363] netlink: 'syz.0.1033': attribute type 2 has an invalid length.
[  110.040038][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811c026c00: rx timeout, send abort
[  110.544278][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811c026c00: abort rx timeout. Force session deactivation
[  110.775576][ T8422] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  110.919066][ T8429] lo speed is unknown, defaulting to 1000
[  111.856607][ T8458] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.865345][ T8458] syzkaller0: entered promiscuous mode
[  111.867460][ T8458] syzkaller0: entered allmulticast mode
[  111.903721][ T8458] tipc: Resetting bearer <eth:syzkaller0>
[  111.913514][ T8457] tipc: Resetting bearer <eth:syzkaller0>
[  111.943220][ T8457] tipc: Disabling bearer <eth:syzkaller0>
[  112.027131][ T8470] netlink: 'syz.0.1080': attribute type 29 has an invalid length.
[  112.839960][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1106'.
[  112.849765][ T8543] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.858944][ T8543] syzkaller0: entered promiscuous mode
[  112.864936][ T8543] syzkaller0: entered allmulticast mode
[  112.894361][ T8543] tipc: Resetting bearer <eth:syzkaller0>
[  112.905646][ T8542] tipc: Resetting bearer <eth:syzkaller0>
[  112.919498][ T8542] tipc: Disabling bearer <eth:syzkaller0>
[  113.207339][ T8586] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1109'.
[  113.278266][ T8593] hsr0 speed is unknown, defaulting to 1000
[  113.287080][ T8593] hsr0 speed is unknown, defaulting to 1000
[  113.294032][ T8593] hsr0 speed is unknown, defaulting to 1000
[  113.304430][ T8593] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  113.319031][ T8593] hsr0 speed is unknown, defaulting to 1000
[  113.323380][ T8593] hsr0 speed is unknown, defaulting to 1000
[  113.332893][ T8593] hsr0 speed is unknown, defaulting to 1000
[  113.685685][ T8631] netlink: 'syz.2.1130': attribute type 21 has an invalid length.
[  113.688375][ T8631] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1130'.
[  113.691795][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1130'.
[  113.898954][ T8653] syzkaller1: entered promiscuous mode
[  113.903004][ T8653] syzkaller1: entered allmulticast mode
[  113.993771][ T8659] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.997354][ T8659] syzkaller0: entered promiscuous mode
[  113.999485][ T8659] syzkaller0: entered allmulticast mode
[  114.030347][ T8659] tipc: Resetting bearer <eth:syzkaller0>
[  114.040150][ T8658] tipc: Resetting bearer <eth:syzkaller0>
[  114.050954][ T8658] tipc: Disabling bearer <eth:syzkaller0>
[  114.269926][ T8679] ieee802154 phy0 wpan0: encryption failed: -22
[  114.429386][ T8697] netlink: 'syz.0.1159': attribute type 1 has an invalid length.
[  114.660074][ T8715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1168'.
[  114.893351][ T8734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1174'.
[  114.953718][ T8734] bridge2: port 1(bond2) entered blocking state
[  114.956421][ T8734] bridge2: port 1(bond2) entered disabled state
[  114.959612][ T8734] bond2: entered allmulticast mode
[  114.964588][ T8734] bond2: entered promiscuous mode
[  115.046434][ T8743] netlink: 'syz.0.1178': attribute type 11 has an invalid length.
[  115.254202][ T8756] lo speed is unknown, defaulting to 1000
[  115.436403][ T8756] hsr0 speed is unknown, defaulting to 1000
[  115.470614][ T8770] !: renamed from dummy0 (while UP)
[  115.585285][ T8774] lo speed is unknown, defaulting to 1000
[  115.822395][ T8774] hsr0 speed is unknown, defaulting to 1000
[  116.282411][ T8810] netlink: 'syz.2.1196': attribute type 6 has an invalid length.
[  116.344325][ T8830] netlink: 'syz.0.1197': attribute type 13 has an invalid length.
[  116.825237][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1207'.
[  117.412042][ T8880] netlink: 'syz.2.1219': attribute type 4 has an invalid length.
[  117.417114][ T8880] netlink: 'syz.2.1219': attribute type 12 has an invalid length.
[  117.529335][ T5315] IPVS: starting estimator thread 0...
[  117.621308][ T8891] IPVS: using max 49 ests per chain, 117600 per kthread
[  117.897637][ T8922] netlink: 'syz.1.1238': attribute type 4 has an invalid length.
[  117.907148][  T791] lo speed is unknown, defaulting to 1000
[  117.909005][  T791] syz0: Port: 1 Link DOWN
[  117.910746][  T791] lo speed is unknown, defaulting to 1000
[  117.924538][ T8924] netlink: 'syz.2.1239': attribute type 1 has an invalid length.
[  119.215204][ T8989] macsec0: entered promiscuous mode
[  119.297263][ T8994] lo speed is unknown, defaulting to 1000
[  119.321844][ T8998] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1267'.
[  119.367747][ T9001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1268'.
[  119.478008][ T8994] hsr0 speed is unknown, defaulting to 1000
[  120.039151][ T9036] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1285'.
[  120.051452][ T9036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1285'.
[  120.054701][ T9036] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1285'.
[  120.188381][ T9054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1295'.
[  120.192997][ T9054] bond0: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  120.274845][ T9064] netlink: 'syz.2.1298': attribute type 8 has an invalid length.
[  120.277921][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1298'.
[  120.288245][ T9064] bond0: entered promiscuous mode
[  120.293195][ T9064] bond0: left promiscuous mode
[  120.297439][ T9066] netlink: 'syz.0.1300': attribute type 11 has an invalid length.
[  120.520963][ T9084] netlink: 'syz.2.1309': attribute type 3 has an invalid length.
[  120.659374][ T9097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1314'.
[  120.664012][ T9097] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  120.709184][ T9098] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1316'.
[  121.258838][ T9122] rdma_op ffff888121cf19f0 conn xmit_rdma 0000000000000000
[  121.476045][ T9130] netlink: 'syz.0.1331': attribute type 1 has an invalid length.
[  121.628912][ T9135] lo speed is unknown, defaulting to 1000
[  121.736625][   T47] IPVS: starting estimator thread 0...
[  121.761310][ T9132] IPVS: ovf: UDP 224.0.0.2:20004 - no destination available
[  121.822918][ T9140] IPVS: using max 37 ests per chain, 88800 per kthread
[  121.907028][ T9135] hsr0 speed is unknown, defaulting to 1000
[  121.969898][ T9147] netlink: 'syz.2.1337': attribute type 13 has an invalid length.
[  121.982082][ T9147] netlink: 'syz.2.1337': attribute type 17 has an invalid length.
[  122.076228][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1338'.
[  122.076768][ T9147] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.088802][ T9147] 8021q: adding VLAN 0 to HW filter on device team0
[  122.091617][ T9147] tipc: Resetting bearer <eth:team0>
[  122.094901][ T9147] tipc: Resetting bearer <eth:team0>
[  122.100937][ T9147] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  122.205110][ T9147] lo speed is unknown, defaulting to 1000
[  122.293091][ T9152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  122.424668][ T9147] hsr0 speed is unknown, defaulting to 1000
[  122.774845][ T9182] syzkaller0: entered promiscuous mode
[  122.777046][ T9182] syzkaller0: entered allmulticast mode
[  123.148504][ T9147] syz.2.1337 (9147) used greatest stack depth: 18112 bytes left
[  124.444689][ T9238] syz_tun: entered allmulticast mode
[  124.447233][ T9237] syz_tun: left allmulticast mode
[  124.459645][ T9229] IPVS: Scheduler module ip_vs_ not found
[  125.271945][ T9283] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1394'.
[  125.275693][ T9283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1394'.
[  125.456817][ T9290] openvswitch: netlink: Message has 16 unknown bytes.
[  125.790665][ T9306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1405'.
[  125.795887][ T9306] netlink: 'syz.1.1405': attribute type 3 has an invalid length.
[  125.902839][ T9312] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.316353][ T9322] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.319895][ T9322] syzkaller0: entered promiscuous mode
[  126.324515][ T9322] syzkaller0: entered allmulticast mode
[  126.334440][ T9322] tipc: Resetting bearer <eth:syzkaller0>
[  126.338592][ T9321] tipc: Resetting bearer <eth:syzkaller0>
[  126.351936][ T9321] tipc: Disabling bearer <eth:syzkaller0>
[  126.357843][ T9326] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  126.765737][ T9348] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  127.033637][ T9368] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1433'.
[  127.038041][ T9368] netlink: 'syz.0.1433': attribute type 1 has an invalid length.
[  127.219715][ T9381] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1437'.
[  127.231791][ T9381] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1437'.
[  127.249418][ T9381] ip6gretap0: entered promiscuous mode
[  127.253286][ T9381] syz_tun: entered promiscuous mode
[  127.565313][ T9395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1442'.
[  128.029952][ T9408] lo speed is unknown, defaulting to 1000
[  128.192849][ T9408] hsr0 speed is unknown, defaulting to 1000
[  128.584126][ T9426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1453'.
[  128.616138][ T9429] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1455'.
[  128.659837][ T9432] netlink: 'syz.2.1457': attribute type 32 has an invalid length.
[  129.264484][ T9481] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1479'.
[  129.450501][ T9493] netlink: 'syz.1.1485': attribute type 1 has an invalid length.
[  129.651736][ T9506] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  129.778910][ T9513] tipc: New replicast peer: 255.255.255.255
[  129.783000][ T9513] tipc: Enabled bearer <udp:syz2>, priority 10
[  129.944274][ T9517] netlink: 'syz.2.1496': attribute type 1 has an invalid length.
[  130.003508][ T9529] netlink: 'syz.2.1500': attribute type 15 has an invalid length.
[  130.032359][ T9531] : renamed from bond_slave_0
[  130.720222][ T9563] tap0: tun_chr_ioctl cmd 1074025677
[  130.724546][ T9563] tap0: linktype set to 800
[  130.901217][   T47] tipc: Node number set to 652091936
[  130.992393][ T9573] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  130.996495][ T9573] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.067310][ T9586] __nla_validate_parse: 3 callbacks suppressed
[  131.067326][ T9586] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1527'.
[  131.090803][ T9573] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  131.095131][ T9573] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.185819][ T9573] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  131.191251][ T9573] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.240789][ T9573] bond0: (slave netdevsim0): Releasing backup interface
[  131.251879][ T9573] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  131.255720][ T9573] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.344767][ T5866] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  131.348009][ T5866] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.360099][ T5866] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  131.363207][ T5866] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.373689][ T5866] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  131.376579][ T5866] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.390265][ T5866] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  131.393495][ T5866] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.343126][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1548'.
[  132.351361][ T9634] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[  132.354823][ T9634] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.437831][ T9644] pimreg: entered allmulticast mode
[  132.440396][ T9644] pimreg: left allmulticast mode
[  132.584844][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.587407][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.633381][ T9658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1561'.
[  132.636731][ T9658] IPv6: Can't replace route, no match found
[  133.517796][ T9705] syzkaller1: entered promiscuous mode
[  133.519924][ T9705] syzkaller1: entered allmulticast mode
[  133.541869][ T9709] netlink: 'syz.1.1582': attribute type 10 has an invalid length.
[  133.566303][ T9709] 8021q: adding VLAN 0 to HW filter on device batadv0
[  133.571633][ T9709] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  133.578561][ T9709] netlink: 'syz.1.1582': attribute type 10 has an invalid length.
[  133.581591][ T9709] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1582'.
[  133.584324][ T9709] batadv0: entered promiscuous mode
[  133.586133][ T9709] batadv0: entered allmulticast mode
[  133.589140][ T9709] bond0: (slave batadv0): Releasing backup interface
[  133.594786][ T9709] bridge0: port 3(batadv0) entered blocking state
[  133.598940][ T9709] bridge0: port 3(batadv0) entered disabled state
[  133.630141][ T9711] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  133.669788][ T9711] syzkaller0: entered promiscuous mode
[  133.673778][ T9711] syzkaller0: entered allmulticast mode
[  133.676119][ T9711] tipc: Resetting bearer <eth:syzkaller0>
[  133.683404][ T9710] tipc: Resetting bearer <eth:syzkaller0>
[  133.994109][ T5866] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  133.997319][ T5866] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  134.808085][ T9710] tipc: Disabling bearer <eth:syzkaller0>
[  134.836666][ T9722] lo speed is unknown, defaulting to 1000
[  135.061250][ T9722] hsr0 speed is unknown, defaulting to 1000
[  135.062968][ T9740] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1597'.
[  135.146597][ T9743] netlink: 'syz.1.1598': attribute type 10 has an invalid length.
[  135.150835][ T9743] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  135.155814][ T9743] bond0: (slave wlan1): Opening slave failed
[  135.822825][ T9776] netlink: 'syz.2.1612': attribute type 3 has an invalid length.
[  136.269724][ T9794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1622'.
[  136.273917][ T9794] netlink: 'syz.2.1622': attribute type 21 has an invalid length.
[  136.583614][ T9809] netlink: 'syz.1.1629': attribute type 11 has an invalid length.
[  136.653058][ T9813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1631'.
[  136.719455][ T5926] IPVS: starting estimator thread 0...
[  136.811230][ T9820] IPVS: using max 49 ests per chain, 117600 per kthread
[  137.169499][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1645'.
[  138.071689][ T9896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1664'.
[  138.075540][ T9896] netlink: 'syz.2.1664': attribute type 2 has an invalid length.
[  138.201287][ T9904] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1667'.
[  138.465621][ T9926] netlink: 'syz.1.1673': attribute type 6 has an invalid length.
[  138.943899][ T9932] mac80211_hwsim hwsim4 ;: renamed from wlan0
[  138.993108][ T9940] syz_tun: entered allmulticast mode
[  139.005509][ T9940] dvmrp8: entered allmulticast mode
[  139.083776][ T9939] syz_tun: left allmulticast mode
[  139.085521][ T9939] dvmrp8: left allmulticast mode
[  139.514155][ T9964] vcan0: tx drop: invalid sa for name 0xffffffffffffffff
[  139.549397][ T9966] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1691'.
[  139.560443][ T9966] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1691'.
[  139.644347][ T9968] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.648224][ T9968] syzkaller0: entered promiscuous mode
[  139.650091][ T9968] syzkaller0: entered allmulticast mode
[  139.669180][ T9968] tipc: Resetting bearer <eth:syzkaller0>
[  139.674211][ T9967] tipc: Resetting bearer <eth:syzkaller0>
[  139.701953][ T9967] tipc: Disabling bearer <eth:syzkaller0>
[  139.912846][ T9979] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  140.046010][ T9987] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1701'.
[  140.324602][T10011] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.328082][T10011] syzkaller0: entered promiscuous mode
[  140.339990][T10011] syzkaller0: entered allmulticast mode
[  140.368111][T10011] tipc: Resetting bearer <eth:syzkaller0>
[  140.381159][T10010] tipc: Resetting bearer <eth:syzkaller0>
[  140.395726][T10010] tipc: Disabling bearer <eth:syzkaller0>
[  140.544340][T10032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1720'.
[  140.932922][T10068] lo speed is unknown, defaulting to 1000
[  141.001772][T10075] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.008271][T10075] syzkaller0: entered promiscuous mode
[  141.011821][T10075] syzkaller0: entered allmulticast mode
[  141.030955][T10075] tipc: Resetting bearer <eth:syzkaller0>
[  141.034834][T10074] tipc: Resetting bearer <eth:syzkaller0>
[  141.049595][T10074] tipc: Disabling bearer <eth:syzkaller0>
[  141.080558][T10068] hsr0 speed is unknown, defaulting to 1000
[  141.211098][T10084] openvswitch: netlink: IP tunnel dst address not specified
[  141.422237][T10096] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.425220][T10096] syzkaller0: entered promiscuous mode
[  141.426942][T10096] syzkaller0: entered allmulticast mode
[  141.482898][T10096] tipc: Resetting bearer <eth:syzkaller0>
[  141.496414][T10095] tipc: Resetting bearer <eth:syzkaller0>
[  141.509971][T10095] tipc: Disabling bearer <eth:syzkaller0>
[  141.568378][T10106] lo speed is unknown, defaulting to 1000
[  141.848159][T10106] hsr0 speed is unknown, defaulting to 1000
[  141.968312][T10144] sctp: [Deprecated]: syz.0.1768 (pid 10144) Use of int in max_burst socket option deprecated.
[  141.968312][T10144] Use struct sctp_assoc_value instead
[  142.012530][T10149] netlink: 'syz.0.1771': attribute type 1 has an invalid length.
[  142.015110][T10149] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  142.162175][T10163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1779'.
[  142.165960][T10163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1779'.
[  142.214400][T10163] 8021q: adding VLAN 0 to HW filter on device bond1
[  142.755165][T10213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1800'.
[  142.785475][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1801'.
[  142.936671][T10221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1804'.
[  143.065925][T10229] vcan0: tx drop: invalid da for name 0x0000000000000003
[  143.112821][T10231] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1809'.
[  143.316410][T10251] bridge: RTM_NEWNEIGH with invalid ether address
[  143.388158][T10255] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1820'.
[  143.482345][T10261] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1823'.
[  143.486095][T10261] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1823'.
[  143.664604][T10271] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.668231][T10271] syzkaller0: entered promiscuous mode
[  143.670493][T10271] syzkaller0: entered allmulticast mode
[  143.687131][T10271] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1828'.
[  143.694388][T10271] tipc: Resetting bearer <eth:syzkaller0>
[  143.698869][T10270] tipc: Resetting bearer <eth:syzkaller0>
[  143.715023][T10270] tipc: Disabling bearer <eth:syzkaller0>
[  145.088755][ T5854] Bluetooth: hci2: link tx timeout
[  145.091697][ T5854] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  145.096258][   T55] Bluetooth: hci2: link tx timeout
[  145.097965][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  145.365752][T10336] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  145.594218][T10365] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  145.772803][T10387] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  145.783051][T10389] 8021q: adding VLAN 0 to HW filter on device bond3
[  145.795621][T10389] bond3: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  145.912254][ T5866] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  146.022591][   T13] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  146.082083][T10414] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.102909][T10413] tipc: Resetting bearer <eth:syzkaller0>
[  147.144308][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  147.866157][T10413] tipc: Disabling bearer <eth:syzkaller0>
[  147.898108][T10477] lo speed is unknown, defaulting to 1000
[  148.046713][T10477] hsr0 speed is unknown, defaulting to 1000
[  148.319903][T10510] __nla_validate_parse: 4 callbacks suppressed
[  148.319915][T10510] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1937'.
[  148.379404][T10514] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1939'.
[  148.382780][T10514] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1939'.
[  148.390408][T10514] geneve0: entered promiscuous mode
[  148.395884][ T5866] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  148.399328][ T5866] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  148.403519][ T5866] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  148.407269][ T5866] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  148.484413][T10522] netlink: 'syz.2.1943': attribute type 1 has an invalid length.
[  148.533562][T10524] netlink: 1360 bytes leftover after parsing attributes in process `syz.0.1944'.
[  148.536572][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1944'.
[  148.687718][T10537] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1950'.
[  149.195120][T10579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1968'.
[  149.357338][T10590] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1974'.
[  149.403337][T10594] netlink: 'syz.1.1976': attribute type 3 has an invalid length.
[  149.499235][T10602] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1979'.
[  150.280233][T10674] smc: net device bond0 applied user defined pnetid SYZ2
[  150.282772][T10676] netlink: 'syz.0.2014': attribute type 32 has an invalid length.
[  150.285367][T10676] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2014'.
[  151.079039][T10672] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  151.294531][T10701] netlink: 'syz.0.2024': attribute type 1 has an invalid length.
[  151.779843][T10742] hsr_slave_0: left promiscuous mode
[  151.784088][T10742] hsr_slave_1: left promiscuous mode
[  152.160148][T10759] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.163146][T10759] syzkaller0: entered promiscuous mode
[  152.172256][T10759] syzkaller0: entered allmulticast mode
[  152.196589][T10759] tipc: Resetting bearer <eth:syzkaller0>
[  152.201947][T10758] tipc: Resetting bearer <eth:syzkaller0>
[  152.217378][T10758] tipc: Disabling bearer <eth:syzkaller0>
[  152.259617][T10763] lo speed is unknown, defaulting to 1000
[  152.466942][T10763] hsr0 speed is unknown, defaulting to 1000
[  152.726824][T10782] lo speed is unknown, defaulting to 1000
[  152.880106][T10782] hsr0 speed is unknown, defaulting to 1000
[  154.150874][T10819] __nla_validate_parse: 7 callbacks suppressed
[  154.150889][T10819] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2070'.
[  154.458744][T10830] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2074'.
[  154.799747][T10852] ip6tnl1: entered promiscuous mode
[  154.933091][T10866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2086'.
[  155.176724][T10883] openvswitch: netlink: IP tunnel dst address not specified
[  155.483353][T10901] netlink: 'syz.1.2098': attribute type 1 has an invalid length.
[  155.486363][T10901] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2098'.
[  155.489948][T10901] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2098'.
[  156.030509][T10926] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2108'.
[  156.390086][T10937] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.412692][T10937] syzkaller0: entered promiscuous mode
[  156.415749][T10937] syzkaller0: entered allmulticast mode
[  156.431601][T10937] tipc: Resetting bearer <eth:syzkaller0>
[  156.435216][T10936] tipc: Resetting bearer <eth:syzkaller0>
[  157.643743][T10936] tipc: Disabling bearer <eth:syzkaller0>
[  157.695790][T10948] tipc: Enabled bearer <eth:team0>, priority 0
[  159.165984][T11018] netlink: 'syz.1.2146': attribute type 10 has an invalid length.
[  159.169041][T11018] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2146'.
[  159.175157][T11018] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  159.371403][   T33] audit: type=1800 audit(1756389782.104:2): pid=11024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2146" name="memory.events" dev="tmpfs" ino=3544 res=0 errno=0
[  159.464074][T11035] netlink: 'syz.1.2151': attribute type 1 has an invalid length.
[  160.761240][T11063] nbd1: detected capacity change from 0 to 127
[  160.766269][   T56] block nbd1: Receive control failed (result -32)
[  160.766931][T11077] block nbd1: Receive control failed (result -32)
[  160.781818][T11078] block nbd1: Dead connection, failed to find a fallback
[  160.786868][T11078] block nbd1: shutting down sockets
[  160.791364][T11078] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  160.795312][T11078] Buffer I/O error on dev nbd1, logical block 0, async page read
[  160.798523][T11078] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  160.815062][T11078] Buffer I/O error on dev nbd1, logical block 1, async page read
[  160.817965][T11078] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  160.821875][T11078] Buffer I/O error on dev nbd1, logical block 2, async page read
[  160.824460][T11078] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  160.827857][T11078] Buffer I/O error on dev nbd1, logical block 3, async page read
[  160.830452][T11078] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  160.834117][T11078] Buffer I/O error on dev nbd1, logical block 0, async page read
[  160.837635][T11078] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  160.840696][T11078] Buffer I/O error on dev nbd1, logical block 1, async page read
[  160.843492][T11078] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  160.846316][T11078] Buffer I/O error on dev nbd1, logical block 2, async page read
[  160.849212][T11078] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  160.852639][T11078] Buffer I/O error on dev nbd1, logical block 3, async page read
[  160.855179][T11078] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  160.858346][T11078] Buffer I/O error on dev nbd1, logical block 0, async page read
[  160.861916][T11078] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  160.864914][T11078] Buffer I/O error on dev nbd1, logical block 1, async page read
[  160.870971][T11078] ldm_validate_partition_table(): Disk read failed.
[  160.875103][T11078] Dev nbd1: unable to read RDB block 0
[  160.878394][T11078]  nbd1: unable to read partition table
[  160.886684][T11078] ldm_validate_partition_table(): Disk read failed.
[  160.890638][T11078] Dev nbd1: unable to read RDB block 0
[  160.894383][T11078]  nbd1: unable to read partition table
[  160.943623][T11088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2170'.
[  161.550222][T11097] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2174'.
[  161.585932][T11099] netlink: 'syz.0.2175': attribute type 1 has an invalid length.
[  161.588627][T11099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2175'.
[  161.715592][T11105] vlan2: entered promiscuous mode
[  161.992695][T11128] netlink: 'syz.0.2188': attribute type 1 has an invalid length.
[  161.995412][T11128] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2188'.
[  162.035195][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2190'.
[  162.154335][T11138] lo speed is unknown, defaulting to 1000
[  162.428966][T11138] hsr0 speed is unknown, defaulting to 1000
[  162.698491][T11161] ip6gre2: entered allmulticast mode
[  163.069771][T11172] lo speed is unknown, defaulting to 1000
[  163.120090][T11180] netlink: 'syz.2.2206': attribute type 3 has an invalid length.
[  163.226599][T11172] hsr0 speed is unknown, defaulting to 1000
[  163.499178][T11200] bond0: (slave dummy0): Releasing backup interface
[  163.510700][T11200] bridge_slave_0: left allmulticast mode
[  163.518147][T11200] bridge_slave_0: left promiscuous mode
[  163.520725][T11200] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.571213][T11200] bridge_slave_1: left allmulticast mode
[  163.573427][T11200] bridge_slave_1: left promiscuous mode
[  163.580568][T11200] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.640512][T11200] bond0: (slave bond_slave_0): Releasing backup interface
[  163.647121][T11200] bond0: (slave bond_slave_1): Releasing backup interface
[  163.654907][T11200] team0: Port device team_slave_0 removed
[  163.659877][T11200] team0: Port device team_slave_1 removed
[  163.665971][T11200] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.669598][T11200] batman_adv: batadv0: Removing interface: batadv_slave_1
[  163.675940][T11200] bond1: (slave geneve2): Releasing backup interface
[  163.680407][T11200] bond2: left allmulticast mode
[  163.682829][T11200] bond2: left promiscuous mode
[  163.685014][T11200] bridge2: port 1(bond2) entered disabled state
[  163.692264][T11200] bond3: (slave ip6gretap2): Removing an active aggregator
[  163.704405][T11200] bond3: (slave ip6gretap2): Releasing backup interface
[  164.254605][T11243] lo speed is unknown, defaulting to 1000
[  164.445228][T11243] hsr0 speed is unknown, defaulting to 1000
[  164.796025][T11282] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  165.402132][T11300] batadv_slave_1: entered promiscuous mode
[  165.405352][T11299] batadv_slave_1: left promiscuous mode
[  165.984724][T11343] netlink: 'syz.2.2277': attribute type 3 has an invalid length.
[  166.205900][T11360] tipc: Resetting bearer <eth:team0>
[  166.217897][T11360] vlan0: left promiscuous mode
[  166.222052][T11360] macsec0: left promiscuous mode
[  166.224635][T11360] ip6erspan0: left allmulticast mode
[  166.260756][T11364] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (144)
[  166.428210][T11374] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  166.434352][T11374] syzkaller0: entered promiscuous mode
[  166.436537][T11374] syzkaller0: entered allmulticast mode
[  166.454383][T11374] tipc: Resetting bearer <eth:syzkaller0>
[  166.459372][T11373] tipc: Resetting bearer <eth:syzkaller0>
[  166.472030][T11373] tipc: Disabling bearer <eth:syzkaller0>
[  166.521579][T11379] netlink: 'syz.0.2294': attribute type 4 has an invalid length.
[  166.526609][T11379] netlink: 'syz.0.2294': attribute type 4 has an invalid length.
[  166.647684][T11391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2300'.
[  166.666856][T11389] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  166.670356][T11389] syzkaller0: entered promiscuous mode
[  166.672928][T11389] syzkaller0: entered allmulticast mode
[  166.683785][T11393] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2301'.
[  166.695163][T11389] tipc: Resetting bearer <eth:syzkaller0>
[  166.698962][T11388] tipc: Resetting bearer <eth:syzkaller0>
[  166.712987][T11388] tipc: Disabling bearer <eth:syzkaller0>
[  166.824826][T11403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2305'.
[  166.898718][T11409] syzkaller1: entered promiscuous mode
[  166.900730][T11409] syzkaller1: entered allmulticast mode
[  167.268097][T11435] netlink: 788 bytes leftover after parsing attributes in process `syz.2.2321'.
[  167.339290][T11441] "syz.1.2323" (11441) uses obsolete ecb(arc4) skcipher
[  167.544645][T11454] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2325'.
[  167.938951][T11463] netlink: 'syz.0.2328': attribute type 10 has an invalid length.
[  167.941805][T11463] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2328'.
[  168.214036][T11479] sctp: [Deprecated]: syz.2.2336 (pid 11479) Use of int in maxseg socket option.
[  168.214036][T11479] Use struct sctp_assoc_value instead
[  168.388943][T11502] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2345'.
[  168.394722][T11497] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2345'.
[  168.421534][    C1] TC_ACT_REPEAT abuse ?
[  168.423770][    C1] TC_ACT_REPEAT abuse ?
[  168.787736][T11549] tipc: MTU too low for tipc bearer
[  168.990907][T11552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2368'.
[  169.040161][T11574] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  169.048451][T11574] syzkaller0: entered promiscuous mode
[  169.050641][T11574] syzkaller0: entered allmulticast mode
[  169.129685][T11574] tipc: Resetting bearer <eth:syzkaller0>
[  169.142853][T11570] tipc: Resetting bearer <eth:syzkaller0>
[  169.180566][T11570] tipc: Disabling bearer <eth:syzkaller0>
[  169.847170][T11619] syzkaller0: entered promiscuous mode
[  169.849372][T11619] syzkaller0: entered allmulticast mode
[  170.122286][T11641] netlink: 'syz.2.2403': attribute type 2 has an invalid length.
[  170.125052][T11641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2403'.
[  170.274539][T11657] syz_tun: entered allmulticast mode
[  170.280279][T11657] dvmrp8: entered allmulticast mode
[  170.307732][T11657] lo speed is unknown, defaulting to 1000
[  170.344983][T11662] netlink: 'syz.2.2409': attribute type 23 has an invalid length.
[  170.500175][T11657] hsr0 speed is unknown, defaulting to 1000
[  170.526067][T11668] lo speed is unknown, defaulting to 1000
[  170.584678][T11656] syz_tun: left allmulticast mode
[  170.586660][T11656] dvmrp8: left allmulticast mode
[  170.614472][T11676] sctp: [Deprecated]: syz.1.2417 (pid 11676) Use of struct sctp_assoc_value in delayed_ack socket option.
[  170.614472][T11676] Use struct sctp_sack_info instead
[  170.740282][T11668] hsr0 speed is unknown, defaulting to 1000
[  171.546899][T11714] lo speed is unknown, defaulting to 1000
[  171.693658][T11721] __nla_validate_parse: 1 callbacks suppressed
[  171.693673][T11721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2438'.
[  171.718830][T11714] hsr0 speed is unknown, defaulting to 1000
[  171.794332][T11731] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  171.916457][T11737] syzkaller0: entered promiscuous mode
[  171.918702][T11737] syzkaller0: entered allmulticast mode
[  173.660212][T11785] macvtap1: entered allmulticast mode
[  173.663392][T11785] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  173.667413][T11785] batman_adv: batadv0: Adding interface: macvtap1
[  173.669766][T11785] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.679123][T11785] batman_adv: batadv0: Interface activated: macvtap1
[  173.987122][T11786] TC_ACT_REPEAT abuse ?
[  173.989764][T11786] TC_ACT_REPEAT abuse ?
[  173.992272][T11786] TC_ACT_REPEAT abuse ?
[  173.995726][T11786] TC_ACT_REPEAT abuse ?
[  173.997703][T11786] TC_ACT_REPEAT abuse ?
[  173.999613][T11786] TC_ACT_REPEAT abuse ?
[  174.002207][T11786] TC_ACT_REPEAT abuse ?
[  174.004120][T11786] TC_ACT_REPEAT abuse ?
[  174.006053][T11786] TC_ACT_REPEAT abuse ?
[  174.007997][T11786] TC_ACT_REPEAT abuse ?
[  174.398793][T11802] netlink: 'syz.2.2473': attribute type 3 has an invalid length.
[  174.590310][T11810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2477'.
[  174.596939][T11810] netlink: 'syz.2.2477': attribute type 30 has an invalid length.
[  174.608774][ T5882] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  174.612782][ T5882] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  174.617050][ T5882] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  174.620267][ T5882] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  174.624428][T11810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2477'.
[  174.627389][T11810] netlink: 'syz.2.2477': attribute type 30 has an invalid length.
[  174.797711][T11823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2484'.
[  174.865832][T11828] netlink: 'syz.0.2486': attribute type 13 has an invalid length.
[  174.929680][T11830] syzkaller0: entered promiscuous mode
[  174.932319][T11830] syzkaller0: entered allmulticast mode
[  175.289249][T11851] lo speed is unknown, defaulting to 1000
[  175.456244][T11858] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2499'.
[  175.567764][T11866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2503'.
[  175.575604][T11851] hsr0 speed is unknown, defaulting to 1000
[  175.815420][T11879] netlink: 'syz.0.2508': attribute type 13 has an invalid length.
[  175.974773][T11885] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  175.977972][T11885] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.983956][ T5882] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.986584][ T5882] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.991869][ T5882] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.994850][ T5882] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  176.050179][T11885] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  176.054848][T11885] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.136673][T11885] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  176.140307][T11885] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.195579][T11885] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  176.199130][T11885] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.285564][ T5866] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  176.289738][ T5866] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.305002][ T5866] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  176.307636][ T5866] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.310542][ T5866] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  176.313732][ T5866] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.316757][ T5866] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  176.319395][ T5866] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.359326][T11906] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  176.364012][T11906] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.399328][T11906] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  176.404598][T11906] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.456756][T11906] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  176.461087][T11906] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.468148][T11916] netlink: 'syz.2.2523': attribute type 1 has an invalid length.
[  176.515394][T11906] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  176.519261][T11906] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.530130][T11916] bond1: entered promiscuous mode
[  176.532704][T11916] bond1: entered allmulticast mode
[  176.535219][T11916] 8021q: adding VLAN 0 to HW filter on device bond1
[  176.563065][T11916] 8021q: adding VLAN 0 to HW filter on device bond2
[  176.567349][T11916] bond2: entered promiscuous mode
[  176.569549][T11916] bond2: entered allmulticast mode
[  176.577413][T11916] bond1: (slave bond2): Enslaving as a backup interface with a down link
[  177.136944][T11935] bond1: left promiscuous mode
[  177.139056][T11935] bond2: left promiscuous mode
[  177.141593][T11935] bond1: left allmulticast mode
[  177.143577][T11935] bond2: left allmulticast mode
[  177.150064][ T5866] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  177.154386][ T5866] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  177.157740][ T5866] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  177.161664][ T5866] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  177.341713][T11937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2531'.
[  177.489850][T11944] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2534'.
[  177.493765][T11944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2534'.
[  177.497269][T11944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2534'.
[  177.569345][T11948] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2536'.
[  177.828969][T11962] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2543'.
[  177.832015][T11962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2543'.
[  177.858131][T11964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2544'.
[  177.956071][T11970] lo speed is unknown, defaulting to 1000
[  178.106315][T11970] hsr0 speed is unknown, defaulting to 1000
[  179.443957][T11994] netlink: 'syz.2.2556': attribute type 10 has an invalid length.
[  179.448712][T11994] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  179.458641][T11994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2556'.
[  179.477895][T11994] bond0: (slave bridge0): Releasing backup interface
[  179.577474][T12000] bridge3: entered promiscuous mode
[  179.579623][T12000] bridge3: entered allmulticast mode
[  179.607511][T12002] net_ratelimit: 987 callbacks suppressed
[  179.607523][T12002] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.665118][T12008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2563'.
[  179.718185][T12012] lo speed is unknown, defaulting to 1000
[  179.839511][T12012] hsr0 speed is unknown, defaulting to 1000
[  180.136592][T12027] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 512, id = 0
[  180.140563][T12025] IPVS: stopping backup sync thread 12027 ...
[  180.169961][T11886] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  180.181771][T11886] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.207377][T11886] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  180.214623][T11886] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.255325][T11886] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  180.258531][T11886] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.282806][T11886] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  180.286105][T11886] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.355081][T12035] IPVS: Scheduler module ip_vs_sip not found
[  180.357531][T12038] lo speed is unknown, defaulting to 1000
[  180.403370][T12041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  180.573972][T12038] hsr0 speed is unknown, defaulting to 1000
[  180.832287][T12055] nbd: socks must be embedded in a SOCK_ITEM attr
[  180.836395][T12055] 
[  180.837343][T12055] ======================================================
[  180.839720][T12055] WARNING: possible circular locking dependency detected
[  180.842129][T12055] syzkaller #0 Not tainted
[  180.843928][T12055] ------------------------------------------------------
[  180.846907][T12055] syz.0.2582/12055 is trying to acquire lock:
[  180.848834][T12055] ffff888022f45358 (sk_lock-AF_VSOCK){+.+.}-{0:0}, at: vsock_shutdown+0x67/0x2a0
[  180.851887][T12055] 
[  180.851887][T12055] but task is already holding lock:
[  180.854663][T12055] ffff888028795070 (&nsock->tx_lock){+.+.}-{4:4}, at: sock_shutdown+0x14f/0x260
[  180.857818][T12055] 
[  180.857818][T12055] which lock already depends on the new lock.
[  180.857818][T12055] 
[  180.861804][T12055] 
[  180.861804][T12055] the existing dependency chain (in reverse order) is:
[  180.865327][T12055] 
[  180.865327][T12055] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  180.868364][T12055]        lock_acquire+0x120/0x360
[  180.870178][T12055]        __mutex_lock+0x187/0x1350
[  180.871863][T12055]        nbd_queue_rq+0x257/0xf10
[  180.873488][T12055]        blk_mq_dispatch_rq_list+0x4c0/0x1900
[  180.875793][T12055]        __blk_mq_sched_dispatch_requests+0xda4/0x1570
[  180.878387][T12055]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  180.880839][T12055]        blk_mq_run_hw_queue+0x348/0x4f0
[  180.882967][T12055]        blk_mq_dispatch_list+0xd0c/0xe00
[  180.885035][T12055]        blk_mq_flush_plug_list+0x469/0x550
[  180.887072][T12055]        __blk_flush_plug+0x3d3/0x4b0
[  180.889117][T12055]        __submit_bio+0x2d3/0x5a0
[  180.891007][T12055]        submit_bio_noacct_nocheck+0x4ab/0xb50
[  180.893097][T12055]        block_read_full_folio+0x599/0x830
[  180.895061][T12055]        filemap_read_folio+0x117/0x380
[  180.896870][T12055]        do_read_cache_folio+0x350/0x590
[  180.898986][T12055]        read_part_sector+0xb6/0x2b0
[  180.900881][T12055]        adfspart_check_ICS+0xa4/0xa50
[  180.902898][T12055]        bdev_disk_changed+0x75f/0x14b0
[  180.905146][T12055]        blkdev_get_whole+0x380/0x510
[  180.906928][T12055]        bdev_open+0x31e/0xd30
[  180.908847][T12055]        blkdev_open+0x3a8/0x510
[  180.910822][T12055]        do_dentry_open+0x953/0x13f0
[  180.912874][T12055]        vfs_open+0x3b/0x340
[  180.914337][T12055]        path_openat+0x2ee5/0x3830
[  180.915964][T12055]        do_filp_open+0x1fa/0x410
[  180.917830][T12055]        do_sys_openat2+0x121/0x1c0
[  180.919854][T12055]        __x64_sys_openat+0x138/0x170
[  180.921951][T12055]        do_syscall_64+0xfa/0x3b0
[  180.923713][T12055]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.925856][T12055] 
[  180.925856][T12055] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  180.928362][T12055]        lock_acquire+0x120/0x360
[  180.930376][T12055]        __mutex_lock+0x187/0x1350
[  180.932391][T12055]        nbd_queue_rq+0xc8/0xf10
[  180.934152][T12055]        blk_mq_dispatch_rq_list+0x4c0/0x1900
[  180.936580][T12055]        __blk_mq_sched_dispatch_requests+0xda4/0x1570
[  180.939181][T12055]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  180.941773][T12055]        blk_mq_run_hw_queue+0x348/0x4f0
[  180.944039][T12055]        blk_mq_dispatch_list+0xd0c/0xe00
[  180.946386][T12055]        blk_mq_flush_plug_list+0x469/0x550
[  180.948792][T12055]        __blk_flush_plug+0x3d3/0x4b0
[  180.951028][T12055]        __submit_bio+0x2d3/0x5a0
[  180.953083][T12055]        submit_bio_noacct_nocheck+0x4ab/0xb50
[  180.955567][T12055]        block_read_full_folio+0x599/0x830
[  180.957911][T12055]        filemap_read_folio+0x117/0x380
[  180.959848][T12055]        do_read_cache_folio+0x350/0x590
[  180.961911][T12055]        read_part_sector+0xb6/0x2b0
[  180.963792][T12055]        adfspart_check_ICS+0xa4/0xa50
[  180.965983][T12055]        bdev_disk_changed+0x75f/0x14b0
[  180.968201][T12055]        blkdev_get_whole+0x380/0x510
[  180.970394][T12055]        bdev_open+0x31e/0xd30
[  180.972331][T12055]        blkdev_open+0x3a8/0x510
[  180.974319][T12055]        do_dentry_open+0x953/0x13f0
[  180.976419][T12055]        vfs_open+0x3b/0x340
[  180.978307][T12055]        path_openat+0x2ee5/0x3830
[  180.980426][T12055]        do_filp_open+0x1fa/0x410
[  180.982503][T12055]        do_sys_openat2+0x121/0x1c0
[  180.984623][T12055]        __x64_sys_openat+0x138/0x170
[  180.986822][T12055]        do_syscall_64+0xfa/0x3b0
[  180.988878][T12055]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.991422][T12055] 
[  180.991422][T12055] -> #4 (set->srcu){.+.+}-{0:0}:
[  180.994133][T12055]        lock_sync+0xba/0x160
[  180.995977][T12055]        __synchronize_srcu+0x96/0x3a0
[  180.998067][T12055]        elevator_switch+0x12b/0x640
[  181.000056][T12055]        elevator_change+0x2d4/0x450
[  181.002120][T12055]        elevator_set_default+0x186/0x260
[  181.004305][T12055]        blk_register_queue+0x34e/0x3f0
[  181.006438][T12055]        __add_disk+0x677/0xd50
[  181.008387][T12055]        add_disk_fwnode+0xfc/0x480
[  181.010357][T12055]        nbd_dev_add+0x717/0xae0
[  181.012319][T12055]        nbd_init+0x168/0x1f0
[  181.014194][T12055]        do_one_initcall+0x236/0x820
[  181.016324][T12055]        do_initcall_level+0x104/0x190
[  181.018483][T12055]        do_initcalls+0x59/0xa0
[  181.020429][T12055]        kernel_init_freeable+0x334/0x4b0
[  181.022686][T12055]        kernel_init+0x1d/0x1d0
[  181.024248][T12055]        ret_from_fork+0x3fc/0x770
[  181.025911][T12055]        ret_from_fork_asm+0x1a/0x30
[  181.027662][T12055] 
[  181.027662][T12055] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  181.030391][T12055]        lock_acquire+0x120/0x360
[  181.032438][T12055]        __mutex_lock+0x187/0x1350
[  181.034517][T12055]        elevator_change+0x19b/0x450
[  181.036663][T12055]        elevator_set_none+0x42/0xb0
[  181.038647][T12055]        blk_mq_update_nr_hw_queues+0x598/0x1aa0
[  181.041174][T12055]        nbd_start_device+0x17f/0xb10
[  181.043339][T12055]        nbd_genl_connect+0x135b/0x18f0
[  181.045561][T12055]        genl_family_rcv_msg_doit+0x215/0x300
[  181.047904][T12055]        genl_rcv_msg+0x60e/0x790
[  181.049949][T12055]        netlink_rcv_skb+0x208/0x470
[  181.052110][T12055]        genl_rcv+0x28/0x40
[  181.053996][T12055]        netlink_unicast+0x82f/0x9e0
[  181.056132][T12055]        netlink_sendmsg+0x805/0xb30
[  181.058268][T12055]        __sock_sendmsg+0x21c/0x270
[  181.060418][T12055]        ____sys_sendmsg+0x505/0x830
[  181.062660][T12055]        ___sys_sendmsg+0x21f/0x2a0
[  181.064764][T12055]        __x64_sys_sendmsg+0x19b/0x260
[  181.066983][T12055]        do_syscall_64+0xfa/0x3b0
[  181.069030][T12055]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.071700][T12055] 
[  181.071700][T12055] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  181.075168][T12055]        lock_acquire+0x120/0x360
[  181.077254][T12055]        blk_alloc_queue+0x538/0x620
[  181.079401][T12055]        __blk_mq_alloc_disk+0x15c/0x340
[  181.081373][T12055]        nbd_dev_add+0x46c/0xae0
[  181.082978][T12055]        nbd_init+0x168/0x1f0
[  181.084600][T12055]        do_one_initcall+0x236/0x820
[  181.086244][T12055]        do_initcall_level+0x104/0x190
[  181.088089][T12055]        do_initcalls+0x59/0xa0
[  181.089737][T12055]        kernel_init_freeable+0x334/0x4b0
[  181.091997][T12055]        kernel_init+0x1d/0x1d0
[  181.093761][T12055]        ret_from_fork+0x3fc/0x770
[  181.095785][T12055]        ret_from_fork_asm+0x1a/0x30
[  181.097860][T12055] 
[  181.097860][T12055] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  181.100700][T12055]        lock_acquire+0x120/0x360
[  181.102864][T12055]        fs_reclaim_acquire+0x72/0x100
[  181.105178][T12055]        __kmalloc_cache_noprof+0x41/0x3d0
[  181.107577][T12055]        virtio_transport_do_socket_init+0x57/0x2f0
[  181.110157][T12055]        vsock_assign_transport+0x5ae/0x770
[  181.112540][T12055]        vsock_connect+0x5ab/0xe20
[  181.114592][T12055]        __sys_connect+0x316/0x440
[  181.116644][T12055]        __x64_sys_connect+0x7a/0x90
[  181.118743][T12055]        do_syscall_64+0xfa/0x3b0
[  181.120748][T12055]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.123309][T12055] 
[  181.123309][T12055] -> #0 (sk_lock-AF_VSOCK){+.+.}-{0:0}:
[  181.126399][T12055]        validate_chain+0xb9b/0x2140
[  181.128479][T12055]        __lock_acquire+0xab9/0xd20
[  181.130558][T12055]        lock_acquire+0x120/0x360
[  181.132590][T12055]        lock_sock_nested+0x48/0x100
[  181.134703][T12055]        vsock_shutdown+0x67/0x2a0
[  181.136743][T12055]        nbd_mark_nsock_dead+0x2e9/0x560
[  181.138989][T12055]        sock_shutdown+0x15e/0x260
[  181.141050][T12055]        nbd_config_put+0x342/0x790
[  181.143057][T12055]        nbd_genl_connect+0x167c/0x18f0
[  181.145193][T12055]        genl_family_rcv_msg_doit+0x215/0x300
[  181.147577][T12055]        genl_rcv_msg+0x60e/0x790
[  181.149504][T12055]        netlink_rcv_skb+0x208/0x470
[  181.151625][T12055]        genl_rcv+0x28/0x40
[  181.153423][T12055]        netlink_unicast+0x82f/0x9e0
[  181.155499][T12055]        netlink_sendmsg+0x805/0xb30
[  181.157593][T12055]        __sock_sendmsg+0x21c/0x270
[  181.159675][T12055]        ____sys_sendmsg+0x505/0x830
[  181.161818][T12055]        ___sys_sendmsg+0x21f/0x2a0
[  181.163890][T12055]        __x64_sys_sendmsg+0x19b/0x260
[  181.166065][T12055]        do_syscall_64+0xfa/0x3b0
[  181.168079][T12055]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.170642][T12055] 
[  181.170642][T12055] other info that might help us debug this:
[  181.170642][T12055] 
[  181.174610][T12055] Chain exists of:
[  181.174610][T12055]   sk_lock-AF_VSOCK --> &cmd->lock --> &nsock->tx_lock
[  181.174610][T12055] 
[  181.179416][T12055]  Possible unsafe locking scenario:
[  181.179416][T12055] 
[  181.182403][T12055]        CPU0                    CPU1
[  181.184554][T12055]        ----                    ----
[  181.186646][T12055]   lock(&nsock->tx_lock);
[  181.188552][T12055]                                lock(&cmd->lock);
[  181.191094][T12055]                                lock(&nsock->tx_lock);
[  181.193893][T12055]   lock(sk_lock-AF_VSOCK);
[  181.195762][T12055] 
[  181.195762][T12055]  *** DEADLOCK ***
[  181.195762][T12055] 
[  181.198941][T12055] 4 locks held by syz.0.2582/12055:
[  181.201050][T12055]  #0: ffffffff8f59deb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  181.204344][T12055]  #1: ffffffff8f59dcc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  181.207863][T12055]  #2: ffff8880213cc230 (&nbd->config_lock){+.+.}-{4:4}, at: refcount_dec_and_mutex_lock+0x30/0xa0
[  181.211850][T12055]  #3: ffff888028795070 (&nsock->tx_lock){+.+.}-{4:4}, at: sock_shutdown+0x14f/0x260
[  181.214773][T12055] 
[  181.214773][T12055] stack backtrace:
[  181.216661][T12055] CPU: 0 UID: 0 PID: 12055 Comm: syz.0.2582 Not tainted syzkaller #0 PREEMPT(full) 
[  181.216673][T12055] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  181.216680][T12055] Call Trace:
[  181.216684][T12055]  <TASK>
[  181.216690][T12055]  dump_stack_lvl+0x189/0x250
[  181.216704][T12055]  ? __pfx_dump_stack_lvl+0x10/0x10
[  181.216713][T12055]  ? __pfx__printk+0x10/0x10
[  181.216725][T12055]  ? print_lock_name+0xde/0x100
[  181.216736][T12055]  print_circular_bug+0x2ee/0x310
[  181.216746][T12055]  check_noncircular+0x134/0x160
[  181.216754][T12055]  validate_chain+0xb9b/0x2140
[  181.216762][T12055]  ? __lock_acquire+0xab9/0xd20
[  181.216773][T12055]  ? __mutex_trylock_common+0x153/0x260
[  181.216781][T12055]  ? look_up_lock_class+0x74/0x170
[  181.216792][T12055]  ? register_lock_class+0x51/0x320
[  181.216803][T12055]  __lock_acquire+0xab9/0xd20
[  181.216814][T12055]  ? vsock_shutdown+0x67/0x2a0
[  181.216824][T12055]  lock_acquire+0x120/0x360
[  181.216834][T12055]  ? vsock_shutdown+0x67/0x2a0
[  181.216847][T12055]  lock_sock_nested+0x48/0x100
[  181.216857][T12055]  ? vsock_shutdown+0x67/0x2a0
[  181.216867][T12055]  vsock_shutdown+0x67/0x2a0
[  181.216877][T12055]  nbd_mark_nsock_dead+0x2e9/0x560
[  181.216886][T12055]  sock_shutdown+0x15e/0x260
[  181.216897][T12055]  nbd_config_put+0x342/0x790
[  181.216910][T12055]  nbd_genl_connect+0x167c/0x18f0
[  181.216923][T12055]  ? __pfx_nbd_genl_connect+0x10/0x10
[  181.216936][T12055]  ? __nla_parse+0x40/0x60
[  181.216947][T12055]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  181.216958][T12055]  genl_family_rcv_msg_doit+0x215/0x300
[  181.216968][T12055]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  181.216979][T12055]  ? stack_trace_save+0x9c/0xe0
[  181.216989][T12055]  genl_rcv_msg+0x60e/0x790
[  181.216998][T12055]  ? __pfx_genl_rcv_msg+0x10/0x10
[  181.217006][T12055]  ? __pfx_nbd_genl_connect+0x10/0x10
[  181.217018][T12055]  netlink_rcv_skb+0x208/0x470
[  181.217031][T12055]  ? __lock_acquire+0xab9/0xd20
[  181.217041][T12055]  ? __pfx_genl_rcv_msg+0x10/0x10
[  181.217049][T12055]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  181.217062][T12055]  ? down_read+0x1ad/0x2e0
[  181.217070][T12055]  genl_rcv+0x28/0x40
[  181.217077][T12055]  netlink_unicast+0x82f/0x9e0
[  181.217088][T12055]  ? __pfx_netlink_unicast+0x10/0x10
[  181.217098][T12055]  ? netlink_sendmsg+0x642/0xb30
[  181.217108][T12055]  ? skb_put+0x11b/0x210
[  181.217115][T12055]  netlink_sendmsg+0x805/0xb30
[  181.217128][T12055]  ? __pfx_netlink_sendmsg+0x10/0x10
[  181.217139][T12055]  ? aa_sock_msg_perm+0xf1/0x1d0
[  181.217146][T12055]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  181.217154][T12055]  ? __pfx_netlink_sendmsg+0x10/0x10
[  181.217165][T12055]  __sock_sendmsg+0x21c/0x270
[  181.217175][T12055]  ____sys_sendmsg+0x505/0x830
[  181.217183][T12055]  ? __pfx_____sys_sendmsg+0x10/0x10
[  181.217192][T12055]  ? import_iovec+0x74/0xa0
[  181.217200][T12055]  ___sys_sendmsg+0x21f/0x2a0
[  181.217208][T12055]  ? __pfx____sys_sendmsg+0x10/0x10
[  181.217221][T12055]  ? __fget_files+0x2a/0x420
[  181.217232][T12055]  ? __fget_files+0x3a0/0x420
[  181.217244][T12055]  __x64_sys_sendmsg+0x19b/0x260
[  181.217252][T12055]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  181.217311][T12055]  ? rcu_is_watching+0x15/0xb0
[  181.217326][T12055]  ? do_syscall_64+0xbe/0x3b0
[  181.217339][T12055]  do_syscall_64+0xfa/0x3b0
[  181.217350][T12055]  ? lockdep_hardirqs_on+0x9c/0x150
[  181.217361][T12055]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.217368][T12055]  ? exc_page_fault+0x9f/0xf0
[  181.217378][T12055]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.217386][T12055] RIP: 0033:0x7f4835b8ebe9
[  181.217394][T12055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  181.217401][T12055] RSP: 002b:00007f4836a49038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  181.217410][T12055] RAX: ffffffffffffffda RBX: 00007f4835db5fa0 RCX: 00007f4835b8ebe9
[  181.217415][T12055] RDX: 0000000020004840 RSI: 00002000000027c0 RDI: 0000000000000006
[  181.217420][T12055] RBP: 00007f4835c11e19 R08: 0000000000000000 R09: 0000000000000000
[  181.217425][T12055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  181.217429][T12055] R13: 00007f4835db6038 R14: 00007f4835db5fa0 R15: 00007ffcbe84de48
[  181.217438][T12055]  </TASK>
[  181.390515][T12055] block nbd2: shutting down sockets

VM DIAGNOSIS:
14:03:23  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000196a RDI=000000000000196b RBP=00000000000003f8 RSP=ffffc900084b6710
R8 =ffff888020b58237 R9 =1ffff1100416b046 R10=dffffc0000000000 R11=ffffffff854f3380
R12=dffffc0000000000 R13=ffffffff99afa8d9 R14=ffffffff99def420 R15=0000000000000000
RIP=ffffffff854f33fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f4836a496c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000300 CR3=0000000028f36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000000000ff00 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 000055006b736964 XMM03=0000000000000000 0000000000000000
XMM04=ffffff0000000000 0000000000ff0000 XMM05=0000000000000071 00302d31722f702f
XMM06=ff00000000000000 0000000000000000 XMM07=0000000000000000 0000000000ff0000
XMM08=ffffffffffffff00 ff00000000000000 XMM09=00306e6170772f74 656e2f317968702f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff11026cc753c RBX=1ffff11026cc4f01 RCX=ffff888108d30000 RDX=0000000000000000
RSI=ffffc9000331fd40 RDI=ffff88813663a9e0 RBP=ffff88813663a9c8 RSP=ffffc9000331faf8
R8 =ffffffff8fa38a37 R9 =1ffffffff1f47146 R10=dffffc0000000000 R11=fffffbfff1f47147
R12=ffffc9000331fd40 R13=dffffc0000000000 R14=ffff888136627b50 R15=0000002a154ae71b
RIP=ffffffff8b75b68a RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558ea64500 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055be7c7ed7e8 CR3=00000000288f0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000015 000000000003bf12
XMM02=b88084000ce60300 10b08084000ce603 XMM03=f0030204000cec03 1004000ce8030210
XMM04=0000000000000000 0000000000000000 XMM05=000055558ea89bf8 000055558ea89620
XMM06=0000000000000000 0000000000000000 XMM07=001000019fd00300 1000019fc0030210
XMM08=00019fb003781000 019e900301000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
