last executing test programs:

1.627599171s ago: executing program 0 (id=1853):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8)

1.579155483s ago: executing program 0 (id=1856):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc86", 0xc1}], 0x1)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0x1c75}], 0x1)

1.451199131s ago: executing program 0 (id=1859):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[], 0x47)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0)
splice(r0, 0x0, r3, 0x0, 0x47, 0x0)

1.4506996s ago: executing program 0 (id=1861):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080))
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$phonet(0x23, 0x2, 0x1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r11, 0x0, 0x0)
sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x24000086)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x8080)
sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x0, 0x1, 0x406, 0xfffffffe, 0xffffffff, 0x23}, [@TCA_NETEM_LOSS={0x4}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffe, 0x5}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
bind$phonet(r2, &(0x7f0000000140)={0x23, 0xb3, 0xef, 0x3}, 0x10)
r12 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r12, 0x84, 0x6e, &(0x7f0000004840)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}], 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{0x0, 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

1.127465561s ago: executing program 2 (id=1870):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000080))

1.125307028s ago: executing program 2 (id=1872):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x2c}}, 0x0)

1.051014565s ago: executing program 2 (id=1874):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x34, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

1.050672367s ago: executing program 1 (id=1876):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e000000200000000000000001800000000000000100100000c00000044f73eb84ebe3397"], 0x38}, 0x0)

984.289171ms ago: executing program 1 (id=1877):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@o_path={&(0x7f00000024c0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1}, 0x18)

982.352488ms ago: executing program 2 (id=1878):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040))
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000840)=ANY=[], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
pwritev(r1, &(0x7f0000000480), 0x0, 0x2, 0x80)
pwrite64(r1, 0x0, 0x0, 0xda8)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, 0x0, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, 0x0, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, 0x0, 0x0)
unshare(0x20000400)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070084000000060004404e2200000c00028008f500407f000001"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

880.09559ms ago: executing program 2 (id=1879):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, 0x0, 0x4)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)

879.581815ms ago: executing program 1 (id=1880):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}}, 0x0)

879.378121ms ago: executing program 1 (id=1881):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r0, 0x3a, 0xd4, 0x0, 0x0)

820.340554ms ago: executing program 1 (id=1882):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x41, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00'}, 0x90)

820.133389ms ago: executing program 1 (id=1883):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r0 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, 0x0, 0x0)
socket$kcm(0x2, 0xa, 0x2)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x800003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)

476.501659ms ago: executing program 0 (id=1884):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000055090100000000009500000000000000181100"/60, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x12)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c01000013000500"/20, @ANYRES32=r2, @ANYBLOB="000000000000000014000300766c616e3000000000000000000000000a0001"], 0x11c}}, 0x4)

421.57136ms ago: executing program 0 (id=1885):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socket$netlink(0x10, 0x3, 0x4)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x8000000, 0x0, 0x0, 0x8000000}, 0x90)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, "df37bd7dd1f52d71", "36df584c0b108e6f70d983f458f47526", "8a431885", "ee92d87907e4d50a"}, 0x28)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
r6 = socket(0x15, 0x1, 0x1)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r7, 0x103, 0x7, 0x0, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={<r8=>0x0, 0x8001, 0x4, 0x9, 0x9, 0x400}, &(0x7f0000000080)=0x14)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000100)={0xfff7, 0x401, 0x0, 0x6, 0x401, 0x1000, 0x2, 0x7fff, r8}, 0x0)

0s ago: executing program 2 (id=1886):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000700)={'bond0\x00'})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:1229' (ED25519) to the list of known hosts.
syzkaller login: [   58.069133][ T5827] cgroup: Unknown subsys name 'net'
[   58.207351][ T5827] cgroup: Unknown subsys name 'cpuset'
[   58.214532][ T5827] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   60.002712][ T5827] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.820576][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.828238][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.831316][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.835287][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.837742][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.850628][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.863576][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.866288][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.876533][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.881099][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.884809][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.884974][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.890653][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.894892][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.905329][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.287473][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   65.316534][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   65.374474][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   65.459848][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.463276][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.467108][ T5844] bridge_slave_0: entered allmulticast mode
[   65.470527][ T5844] bridge_slave_0: entered promiscuous mode
[   65.489061][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.491452][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.494047][ T5847] bridge_slave_0: entered allmulticast mode
[   65.496857][ T5847] bridge_slave_0: entered promiscuous mode
[   65.501259][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.504991][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.507760][ T5844] bridge_slave_1: entered allmulticast mode
[   65.510975][ T5844] bridge_slave_1: entered promiscuous mode
[   65.546777][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.549678][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.552742][ T5847] bridge_slave_1: entered allmulticast mode
[   65.556667][ T5847] bridge_slave_1: entered promiscuous mode
[   65.579334][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.613634][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.644526][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.660846][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.663573][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.665915][ T5854] bridge_slave_0: entered allmulticast mode
[   65.669381][ T5854] bridge_slave_0: entered promiscuous mode
[   65.675282][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.678157][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.681030][ T5854] bridge_slave_1: entered allmulticast mode
[   65.685662][ T5854] bridge_slave_1: entered promiscuous mode
[   65.691175][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.747797][ T5844] team0: Port device team_slave_0 added
[   65.766668][ T5844] team0: Port device team_slave_1 added
[   65.773499][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.778974][ T5847] team0: Port device team_slave_0 added
[   65.798750][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.816930][ T5847] team0: Port device team_slave_1 added
[   65.854740][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.857509][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.868100][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.884066][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.886824][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.897215][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.902136][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.905362][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.914139][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.923970][ T5854] team0: Port device team_slave_0 added
[   65.926419][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.929210][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.939548][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.951250][ T5854] team0: Port device team_slave_1 added
[   65.994370][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.997073][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.006660][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.033036][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.035318][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.043962][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.051653][ T5844] hsr_slave_0: entered promiscuous mode
[   66.054528][ T5844] hsr_slave_1: entered promiscuous mode
[   66.062046][ T5847] hsr_slave_0: entered promiscuous mode
[   66.065905][ T5847] hsr_slave_1: entered promiscuous mode
[   66.068884][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   66.071249][ T5847] Cannot create hsr debugfs directory
[   66.154559][ T5854] hsr_slave_0: entered promiscuous mode
[   66.157224][ T5854] hsr_slave_1: entered promiscuous mode
[   66.159510][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   66.161713][ T5854] Cannot create hsr debugfs directory
[   66.430001][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.441562][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.457140][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.469617][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.509465][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.517929][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.534173][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.540308][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.603491][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.608709][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.616103][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.629661][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.676875][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.701065][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   66.722885][  T192] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.725506][  T192] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.737804][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.745166][  T192] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.747337][  T192] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.767565][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   66.799202][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.809109][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.811367][ T3559] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.841457][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   66.846700][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.849501][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.867739][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.870568][ T3559] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.884545][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.887419][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.930796][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.943807][ T5857] Bluetooth: hci1: command tx timeout
[   66.944314][ T5234] Bluetooth: hci0: command tx timeout
[   66.948593][   T55] Bluetooth: hci2: command tx timeout
[   67.050541][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.109279][ T5847] veth0_vlan: entered promiscuous mode
[   67.121646][ T5847] veth1_vlan: entered promiscuous mode
[   67.165246][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.174233][ T5847] veth0_macvtap: entered promiscuous mode
[   67.180744][ T5847] veth1_macvtap: entered promiscuous mode
[   67.232204][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.248152][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.260326][ T5854] veth0_vlan: entered promiscuous mode
[   67.266526][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.279629][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.285946][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.289282][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.299824][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.304666][ T5854] veth1_vlan: entered promiscuous mode
[   67.379116][ T5854] veth0_macvtap: entered promiscuous mode
[   67.389307][ T5854] veth1_macvtap: entered promiscuous mode
[   67.408725][ T5844] veth0_vlan: entered promiscuous mode
[   67.427395][ T5844] veth1_vlan: entered promiscuous mode
[   67.428095][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.440812][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.467163][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.476645][ T3559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.479142][ T3559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.480500][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.505621][ T5876] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.509196][ T5876] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.515056][ T5876] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.518556][ T5876] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.522689][ T5844] veth0_macvtap: entered promiscuous mode
[   67.538095][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.539269][ T5844] veth1_macvtap: entered promiscuous mode
[   67.609310][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.636517][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.636808][ T5913] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET)
[   67.683599][ T5876] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.691061][ T5876] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.695518][ T5876] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.698921][ T5876] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.703290][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.706319][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.790339][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.800415][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.837292][ T3559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.840824][ T3559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.913347][  T189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.916386][  T189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.077316][ T5897] IPVS: starting estimator thread 0...
[   68.175753][ T5934] Zero length message leads to an empty skb
[   68.207468][ T5930] IPVS: using max 63 ests per chain, 151200 per kthread
[   68.277157][ T5938] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12'.
[   68.323067][ T5940] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13'.
[   68.328858][ T5940] sch_fq: defrate 0 ignored.
[   69.023781][   T55] Bluetooth: hci2: command tx timeout
[   69.025551][   T55] Bluetooth: hci1: command tx timeout
[   69.027258][   T55] Bluetooth: hci0: command tx timeout
[   69.149187][ T5994] netlink: 224 bytes leftover after parsing attributes in process `syz.0.36'.
[   69.154805][ T5994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.36'.
[   69.251821][ T6004] openvswitch: netlink: Flow key attr not present in new flow.
[   70.198635][ T6098] netlink: 'syz.1.52': attribute type 6 has an invalid length.
[   70.225845][ T6103] warning: `syz.0.56' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   70.283546][ T6105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.57'.
[   70.948506][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.951057][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.005984][ T6109] netlink: 'syz.1.59': attribute type 5 has an invalid length.
[   71.104592][   T55] Bluetooth: hci0: command tx timeout
[   71.104670][ T5857] Bluetooth: hci1: command tx timeout
[   71.106664][ T5234] Bluetooth: hci2: command tx timeout
[   71.321356][ T6133] netlink: 7906 bytes leftover after parsing attributes in process `syz.2.69'.
[   71.898890][ T6176] Illegal XDP return value 3977223944 on prog  (id 17) dev N/A, expect packet loss!
[   72.518509][ T6189] xt_HMARK: proto mask must be zero with L3 mode
[   72.779121][ T6200] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   72.790023][ T6201] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[   72.921463][ T6205] netlink: 'syz.1.103': attribute type 4 has an invalid length.
[   72.949030][ T6205] netlink: 'syz.1.103': attribute type 4 has an invalid length.
[   73.174159][ T6227] netlink: 180 bytes leftover after parsing attributes in process `syz.1.110'.
[   73.184851][ T5234] Bluetooth: hci0: command tx timeout
[   73.184895][ T5857] Bluetooth: hci2: command tx timeout
[   73.186811][   T55] Bluetooth: hci1: command tx timeout
[   73.922399][ T6265] syzkaller1: entered promiscuous mode
[   73.926608][ T6265] syzkaller1: entered allmulticast mode
[   73.972009][ T6270] netlink: 'syz.1.130': attribute type 10 has an invalid length.
[   73.997213][ T6270] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   74.029083][ T6270] bridge1: entered promiscuous mode
[   74.030583][ T6274] netlink: 24 bytes leftover after parsing attributes in process `syz.2.132'.
[   74.031236][ T6270] bridge1: entered allmulticast mode
[   74.128738][ T6278] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.205365][ T6270] tipc: Started in network mode
[   74.207401][ T6270] tipc: Node identity fc000000000000000000000000000001, cluster identity 4711
[   74.211066][ T6270] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   74.448609][ T6297] openvswitch: netlink: Message has 200 unknown bytes.
[   74.455926][ T6297] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.528785][ T6303] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[   74.724313][ T6315] netlink: 'syz.1.151': attribute type 1 has an invalid length.
[   74.800137][ T6320] netlink: 'syz.0.153': attribute type 1 has an invalid length.
[   74.814556][ T6323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'.
[   74.830611][ T6320] 8021q: adding VLAN 0 to HW filter on device bond1
[   74.889065][ T6320] bond1: (slave geneve2): making interface the new active one
[   74.898950][ T6320] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   74.948560][ T6320] syz.0.153 (6320) used greatest stack depth: 16952 bytes left
[   75.077658][ T6335] netlink: 44 bytes leftover after parsing attributes in process `syz.0.159'.
[   75.451002][ T6342] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   75.465925][ T6342] lo speed is unknown, defaulting to 1000
[   75.472702][ T6342] lo speed is unknown, defaulting to 1000
[   75.477235][ T6342] lo speed is unknown, defaulting to 1000
[   75.488516][ T6342] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   75.505232][ T6342] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   75.536551][ T6342] lo speed is unknown, defaulting to 1000
[   75.541009][ T6342] lo speed is unknown, defaulting to 1000
[   75.547878][ T6342] lo speed is unknown, defaulting to 1000
[   75.879561][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.167'.
[   75.992823][ T6362] netlink: 24 bytes leftover after parsing attributes in process `syz.1.170'.
[   76.334321][ T6377] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.337648][ T6377] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.347087][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'.
[   76.471340][ T6377] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.482291][ T6377] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.608941][ T6379] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   76.640024][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.647236][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.650690][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.661049][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.014886][ T6413] netlink: 108 bytes leftover after parsing attributes in process `syz.1.190'.
[   77.250148][ T6422] syzkaller0: entered promiscuous mode
[   77.252957][ T6422] syzkaller0: entered allmulticast mode
[   78.720151][ T6484] netlink: 'syz.0.223': attribute type 74 has an invalid length.
[   78.837498][ T6488] bridge: RTM_NEWNEIGH with invalid ether address
[   79.231551][ T6511] netlink: 104 bytes leftover after parsing attributes in process `syz.0.235'.
[   79.570378][ T6524] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.596349][ T6522] tipc: Disabling bearer <eth:syzkaller0>
[   79.760809][ T6539] netlink: 'syz.1.249': attribute type 4 has an invalid length.
[   79.790069][ T6539] netlink: 36 bytes leftover after parsing attributes in process `syz.1.249'.
[   79.802659][ T6539] netlink: 24 bytes leftover after parsing attributes in process `syz.1.249'.
[   80.146586][ T6568] only policy match revision 0 supported
[   80.146606][ T6568] unable to load match
[   80.280141][ T6573] tipc: Started in network mode
[   80.282201][ T6573] tipc: Node identity a299983dd5de, cluster identity 4711
[   80.285744][ T6573] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.292803][ T6573] syzkaller0: entered promiscuous mode
[   80.295858][ T6573] syzkaller0: entered allmulticast mode
[   80.320857][ T6573] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   80.363612][ T6573] tipc: Resetting bearer <eth:syzkaller0>
[   80.392378][ T6571] tipc: Resetting bearer <eth:syzkaller0>
[   80.447441][ T6571] tipc: Disabling bearer <eth:syzkaller0>
[   80.462420][ T6582] netlink: 20 bytes leftover after parsing attributes in process `syz.1.269'.
[   80.586668][ T6586] netlink: 16 bytes leftover after parsing attributes in process `syz.2.270'.
[   80.959944][ T6619] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[   81.945874][ T6664] veth0_to_bridge: entered promiscuous mode
[   82.212312][ T6677] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   83.031266][ T6728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.336'.
[   83.036436][ T6728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.336'.
[   83.290618][ T6742] netlink: 'syz.0.338': attribute type 12 has an invalid length.
[   83.346950][ T6750] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.342'.
[   84.611450][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'.
[   84.884944][ T6799] atomic_op ffff888119b67198 conn xmit_atomic 0000000000000000
[   84.977671][ T6806] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.989737][ T6806] syzkaller0: entered promiscuous mode
[   84.992052][ T6806] syzkaller0: entered allmulticast mode
[   85.010320][ T6806] tipc: Resetting bearer <eth:syzkaller0>
[   85.022978][ T6804] tipc: Resetting bearer <eth:syzkaller0>
[   85.043797][ T6804] tipc: Disabling bearer <eth:syzkaller0>
[   85.229800][ T6821] sctp: [Deprecated]: syz.0.375 (pid 6821) Use of struct sctp_assoc_value in delayed_ack socket option.
[   85.229800][ T6821] Use struct sctp_sack_info instead
[   85.527893][ T6835] netlink: 16 bytes leftover after parsing attributes in process `syz.2.381'.
[   86.308344][   T10] cfg80211: failed to load regulatory.db
[   86.469600][ T6863] netlink: 16 bytes leftover after parsing attributes in process `syz.0.394'.
[   86.473207][ T6863] netlink: 40 bytes leftover after parsing attributes in process `syz.0.394'.
[   86.760448][ T6881] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.122007][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.416'.
[   87.346609][ T6925] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   87.461968][ T6934] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20004
[   87.627420][ T6945] netlink: 32 bytes leftover after parsing attributes in process `syz.1.431'.
[   87.681797][ T6950] Bluetooth: MGMT ver 1.23
[   87.689115][ T6951] netlink: 32 bytes leftover after parsing attributes in process `syz.1.431'.
[   88.138911][ T6974] netlink: 224 bytes leftover after parsing attributes in process `syz.0.444'.
[   88.143124][ T6974] netlink: 16 bytes leftover after parsing attributes in process `syz.0.444'.
[   88.757790][ T6983] IPv6: NLM_F_REPLACE set, but no existing node found!
[   89.229964][ T7009] netlink: 'syz.2.459': attribute type 13 has an invalid length.
[   89.316274][ T7015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.463'.
[   90.091757][ T7026] netlink: 'syz.2.468': attribute type 10 has an invalid length.
[   90.144093][ T7027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.468'.
[   90.148013][ T7027] netlink: 68 bytes leftover after parsing attributes in process `syz.2.468'.
[   90.151625][ T7027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.468'.
[   90.157135][ T7027] netlink: 68 bytes leftover after parsing attributes in process `syz.2.468'.
[   90.328756][ T7037] netlink: 48 bytes leftover after parsing attributes in process `syz.2.473'.
[   90.814942][ T7071] netlink: 92 bytes leftover after parsing attributes in process `syz.2.491'.
[   92.019064][ T7112] netlink: 'syz.1.507': attribute type 4 has an invalid length.
[   92.022318][ T7112] netlink: 17 bytes leftover after parsing attributes in process `syz.1.507'.
[   93.015079][ T7149] netlink: 'syz.2.523': attribute type 3 has an invalid length.
[   93.017989][ T7149] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.523'.
[   93.144811][ T7160] : renamed from wg2 (while UP)
[   93.311223][ T7171] netlink: 152 bytes leftover after parsing attributes in process `syz.1.534'.
[   93.395395][ T7181] netlink: 56 bytes leftover after parsing attributes in process `syz.0.538'.
[   93.551608][ T7194] tunl0: Caught tx_queue_len zero misconfig
[   93.596727][ T7198] lo: Caught tx_queue_len zero misconfig
[   93.599167][ T7198] netlink: 'syz.2.546': attribute type 15 has an invalid length.
[   94.228651][ T7224] team0: Caught tx_queue_len zero misconfig
[   94.827352][ T7258] vlan0: entered promiscuous mode
[   95.500533][ T7305] netlink: 'syz.1.594': attribute type 2 has an invalid length.
[   95.509496][ T7305] __nla_validate_parse: 4 callbacks suppressed
[   95.509515][ T7305] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.594'.
[   95.517166][ T7305] nbd: must specify a device to reconfigure
[   95.585734][ T7309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.593'.
[   95.879787][ T7327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'.
[   95.918197][ T7328] netlink: 72 bytes leftover after parsing attributes in process `syz.2.602'.
[   97.817179][ T7415] syzkaller1: entered promiscuous mode
[   97.819856][ T7415] syzkaller1: entered allmulticast mode
[   98.082415][ T7436] netlink: 277 bytes leftover after parsing attributes in process `syz.1.647'.
[   98.338344][ T7447] netlink: 'syz.2.649': attribute type 16 has an invalid length.
[   98.341445][ T7447] netlink: 'syz.2.649': attribute type 17 has an invalid length.
[   98.347463][ T7447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.649'.
[   98.352748][ T7447] IPv6: NLM_F_REPLACE set, but no existing node found!
[   98.772816][ T7463] netlink: 14 bytes leftover after parsing attributes in process `syz.1.657'.
[   98.855553][ T7463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   98.863690][ T7463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   98.870497][ T7463] bond0 (unregistering): Released all slaves
[   99.200856][ T7476] netlink: 20 bytes leftover after parsing attributes in process `syz.1.662'.
[   99.301858][ T7484] batadv_slave_1: entered promiscuous mode
[   99.305975][ T7483] batadv_slave_1: left promiscuous mode
[   99.881741][ T7511] netlink: 'syz.0.676': attribute type 1 has an invalid length.
[   99.884276][ T7512] netlink: 'syz.1.677': attribute type 1 has an invalid length.
[   99.884621][ T7511] netlink: 'syz.0.676': attribute type 3 has an invalid length.
[   99.889996][ T7511] netlink: 224 bytes leftover after parsing attributes in process `syz.0.676'.
[   99.920827][ T7512] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.946535][ T7512] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.949034][ T7512] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[   99.955839][ T7512] bond0: (slave vxcan3): Error -95 calling set_mac_address
[   99.967065][ T7517] netlink: 24 bytes leftover after parsing attributes in process `syz.0.679'.
[  100.026215][ T7512] veth3: entered promiscuous mode
[  100.032183][ T7512] bond0: (slave veth3): Enslaving as an active interface with a down link
[  100.497229][ T7541] gtp0: entered promiscuous mode
[  100.499661][ T7541] gtp0: entered allmulticast mode
[  100.560642][ T7548] netlink: 'syz.1.688': attribute type 12 has an invalid length.
[  101.163993][ T7593] __nla_validate_parse: 2 callbacks suppressed
[  101.164009][ T7593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.710'.
[  101.504593][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.723'.
[  101.727513][ T7639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.730'.
[  101.944455][ T7649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.734'.
[  101.948276][ T7649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.734'.
[  102.066970][ T7656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.737'.
[  102.568095][ T7672] netlink: 248 bytes leftover after parsing attributes in process `syz.1.745'.
[  103.365538][ T7712] syzkaller1: entered promiscuous mode
[  103.367292][ T7712] syzkaller1: entered allmulticast mode
[  103.597576][ T7726] sctp: [Deprecated]: syz.2.762 (pid 7726) Use of struct sctp_assoc_value in delayed_ack socket option.
[  103.597576][ T7726] Use struct sctp_sack_info instead
[  104.025821][ T7743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.769'.
[  104.739803][ T7788] netlink: 'syz.2.783': attribute type 1 has an invalid length.
[  104.743292][ T7788] netlink: 224 bytes leftover after parsing attributes in process `syz.2.783'.
[  104.908566][ T7799] netlink: 'syz.1.787': attribute type 1 has an invalid length.
[  104.911778][ T7799] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.787'.
[  104.991410][ T7803] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  105.151313][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  105.160585][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  105.167227][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  105.182608][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  105.397159][    T9] IPVS: starting estimator thread 0...
[  105.483434][ T7834] IPVS: using max 53 ests per chain, 127200 per kthread
[  106.061264][ T7899] ksmbd: Unknown IPC event: 3, ignore.
[  106.339100][ T7908] __nla_validate_parse: 5 callbacks suppressed
[  106.339116][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.836'.
[  106.344873][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.836'.
[  106.568317][ T7911] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  106.674956][ T5897] IPVS: starting estimator thread 0...
[  106.772530][ T7918] IPVS: using max 63 ests per chain, 151200 per kthread
[  107.451918][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.859'.
[  107.457624][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.859'.
[  107.461025][ T7956] netlink: 'syz.0.859': attribute type 18 has an invalid length.
[  107.586581][ T7964] syzkaller0: entered promiscuous mode
[  107.588981][ T7964] syzkaller0: entered allmulticast mode
[  107.670809][ T7969] netlink: 'syz.1.866': attribute type 2 has an invalid length.
[  107.950534][ T7992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.875'.
[  108.168236][ T8005] netlink: 'syz.2.878': attribute type 13 has an invalid length.
[  108.171280][ T8005] netlink: 'syz.2.878': attribute type 17 has an invalid length.
[  108.276530][ T7998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.287759][ T8005] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.292391][ T8005] 8021q: adding VLAN 0 to HW filter on device team0
[  108.302027][ T8005] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  108.710207][ T8028] netlink: 'syz.1.888': attribute type 1 has an invalid length.
[  109.027647][ T8039] netlink: 1 bytes leftover after parsing attributes in process `syz.1.893'.
[  110.446488][ T8159] netlink: 'syz.1.920': attribute type 8 has an invalid length.
[  111.772141][ T8218] netlink: 156 bytes leftover after parsing attributes in process `syz.0.944'.
[  111.784240][ T8219] syzkaller1: entered promiscuous mode
[  111.785985][ T8219] syzkaller1: entered allmulticast mode
[  111.877128][ T8223] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.879713][ T8223] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.973668][ T8223] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.989439][ T8223] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  112.129148][   T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.132063][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.137267][   T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.140851][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.154619][   T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.162686][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.166515][   T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.180408][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.340448][ T8253] syzkaller1: entered promiscuous mode
[  112.343956][ T8253] syzkaller1: entered allmulticast mode
[  112.344907][ T8249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.958'.
[  112.365820][ T8252] syzkaller1: entered promiscuous mode
[  112.368069][ T8252] syzkaller1: entered allmulticast mode
[  112.375288][ T8248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.036911][ T8281] netlink: 20 bytes leftover after parsing attributes in process `syz.2.973'.
[  113.040439][ T8281] netlink: 36 bytes leftover after parsing attributes in process `syz.2.973'.
[  113.245947][ T8297] netlink: 'syz.1.979': attribute type 29 has an invalid length.
[  113.693874][ T8324] tipc: Started in network mode
[  113.696019][ T8324] tipc: Node identity 7ebcc118721a, cluster identity 4711
[  113.699061][ T8324] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.704947][ T8322] tipc: Resetting bearer <eth:syzkaller0>
[  114.072142][   T55] Bluetooth: hci2: link tx timeout
[  114.074634][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  114.696994][    T9] tipc: Node number set to 212255000
[  114.905313][ T8322] tipc: Disabling bearer <eth:syzkaller0>
[  115.092042][ T8365] ieee802154 phy1 wpan1: encryption failed: -22
[  115.395278][ T8383] netlink: 'syz.0.1013': attribute type 1 has an invalid length.
[  115.400415][ T8383] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1013'.
[  115.763776][ T8413] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1024'.
[  115.773449][ T8413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1024'.
[  115.776968][ T8413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1024'.
[  115.960612][ T8426] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  116.041442][ T8431] bridge_slave_0: left allmulticast mode
[  116.044785][ T8431] bridge_slave_0: left promiscuous mode
[  116.047211][ T8431] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.054857][ T8431] bridge_slave_1: left allmulticast mode
[  116.057110][ T8431] bridge_slave_1: left promiscuous mode
[  116.059725][ T8431] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.066907][ T8431] bond0: (slave bond_slave_0): Releasing backup interface
[  116.074139][ T8431] bond0: (slave bond_slave_1): Releasing backup interface
[  116.080603][ T8431] team0: Port device team_slave_0 removed
[  116.086201][ T8431] team0: Port device team_slave_1 removed
[  116.088962][ T8431] batman_adv: batadv0: Removing interface: batadv_slave_0
[  116.093439][ T8431] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.097167][ T8431] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  116.148786][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  116.224690][ T8434] netlink: 'syz.2.1032': attribute type 10 has an invalid length.
[  116.231299][ T8434] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  116.701188][ T8456] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  116.870270][ T8466] bridge0: port 3(netdevsim2) entered blocking state
[  116.882669][ T8466] bridge0: port 3(netdevsim2) entered disabled state
[  116.885333][ T8466] netdevsim netdevsim0 netdevsim2: entered allmulticast mode
[  116.924422][ T8466] netdevsim netdevsim0 netdevsim2: entered promiscuous mode
[  117.056159][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1052'.
[  117.059438][ T8477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1052'.
[  117.063695][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1052'.
[  117.070645][ T8477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1052'.
[  117.458949][ T8517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1067'.
[  117.557264][ T8525] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1071'.
[  117.725554][ T8539] dvmrp0: entered allmulticast mode
[  117.769752][ T8543] netlink: 'syz.0.1075': attribute type 25 has an invalid length.
[  117.773699][ T8543] netlink: 'syz.0.1075': attribute type 25 has an invalid length.
[  117.829720][ T8545] dvmrp12: entered allmulticast mode
[  117.836415][ T8544] dvmrp12: left allmulticast mode
[  118.707709][ T8569] sctp: [Deprecated]: syz.0.1090 (pid 8569) Use of struct sctp_assoc_value in delayed_ack socket option.
[  118.707709][ T8569] Use struct sctp_sack_info instead
[  119.016454][ T8579] netlink: 'syz.1.1095': attribute type 23 has an invalid length.
[  119.047798][ T8581] 8021q: adding VLAN 0 to HW filter on device bond2
[  119.073627][ T8581] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  119.277172][ T8598] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.280896][ T8598] syzkaller0: entered promiscuous mode
[  119.283886][ T8598] syzkaller0: entered allmulticast mode
[  119.307325][ T8598] tipc: Resetting bearer <eth:syzkaller0>
[  119.314446][ T8597] tipc: Resetting bearer <eth:syzkaller0>
[  119.329308][ T8597] tipc: Disabling bearer <eth:syzkaller0>
[  119.629647][ T8626] bridge_slave_0: invalid flags given to default FDB implementation
[  119.849376][ T8639] bridge0: entered promiscuous mode
[  119.931175][ T8641] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1123'.
[  120.796600][ T8682] netlink: 'syz.1.1142': attribute type 1 has an invalid length.
[  120.825486][ T8682] 8021q: adding VLAN 0 to HW filter on device bond1
[  120.876710][ T8682] bond1: (slave veth5): Enslaving as an active interface with a down link
[  120.892985][ T8682] bond1: (slave dummy0): making interface the new active one
[  120.897061][ T8682] dummy0: entered promiscuous mode
[  120.899598][ T8682] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  121.017540][ T8696] TCP: TCP_TX_DELAY enabled
[  122.174082][ T8725] netlink: 'syz.1.1160': attribute type 1 has an invalid length.
[  123.039011][ T8806] syzkaller1: tun_chr_ioctl cmd 2148553947
[  123.151950][ T8819] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1185'.
[  123.557588][ T8856] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1196'.
[  124.198405][ T8892] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1211'.
[  124.303217][ T8894] nbd0: detected capacity change from 0 to 127
[  124.310432][   T56] block nbd0: Receive control failed (result -104)
[  126.306731][ T8955] netlink: 'syz.2.1236': attribute type 1 has an invalid length.
[  126.309864][ T8955] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1236'.
[  126.500283][ T8977] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1238'.
[  126.660276][ T8988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1251'.
[  126.668448][ T8988] bridge_slave_1: left allmulticast mode
[  126.670422][ T8988] bridge_slave_1: left promiscuous mode
[  126.673048][ T8988] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.678047][ T8988] bridge_slave_0: left allmulticast mode
[  126.680253][ T8988] bridge_slave_0: left promiscuous mode
[  126.686306][ T8988] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.970005][ T9011] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1261'.
[  127.035147][ T8994] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.055179][ T8994] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  127.304294][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.311127][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.318799][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.328656][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.566377][ T9042] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1275'.
[  127.570056][ T9042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1275'.
[  127.575073][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1275'.
[  127.603239][ T9045] IPv6: Can't replace route, no match found
[  128.448387][ T9097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1299'.
[  128.553950][ T9097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1299'.
[  128.880463][ T9116] netlink: 'syz.0.1305': attribute type 4 has an invalid length.
[  128.909488][ T9116] netlink: 'syz.0.1305': attribute type 4 has an invalid length.
[  129.837167][ T9141] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1315'.
[  129.840958][ T9141] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1315'.
[  129.975216][ T9152] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1320'.
[  130.079061][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1323'.
[  130.093936][ T9160] netlink: 'syz.0.1322': attribute type 8 has an invalid length.
[  130.105180][ T9160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1322'.
[  130.197346][ T9167] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1326'.
[  130.210944][ T9167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1326'.
[  130.661763][ T9212] netlink: 'syz.1.1343': attribute type 2 has an invalid length.
[  130.670409][ T9212] netlink: 'syz.1.1343': attribute type 2 has an invalid length.
[  130.751910][ T9220] netlink: 'syz.2.1346': attribute type 3 has an invalid length.
[  130.755942][ T9220] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1346'.
[  130.945083][ T9230] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.953073][ T9230] syzkaller0: entered promiscuous mode
[  130.955174][ T9230] syzkaller0: entered allmulticast mode
[  130.995588][ T9238] ip6tnl1: entered promiscuous mode
[  131.000033][ T9230] tipc: Resetting bearer <eth:syzkaller0>
[  131.007698][ T9229] tipc: Resetting bearer <eth:syzkaller0>
[  131.020468][ T9229] tipc: Disabling bearer <eth:syzkaller0>
[  131.160142][ T9250] netlink: 'syz.1.1359': attribute type 13 has an invalid length.
[  131.248794][ T9252] dvmrp0: entered allmulticast mode
[  131.278450][ T9247] syzkaller0: entered promiscuous mode
[  131.280517][ T9247] syzkaller0: entered allmulticast mode
[  132.389685][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.811595][ T9274] unsupported nlmsg_type 40
[  133.490810][ T9333] __nla_validate_parse: 5 callbacks suppressed
[  133.490826][ T9333] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1397'.
[  133.823051][ T5857] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  133.824240][   T55] Bluetooth: hci0: command 0x0c1a tx timeout
[  133.959918][ T9366] syzkaller1: entered promiscuous mode
[  133.962217][ T9366] syzkaller1: entered allmulticast mode
[  133.975250][ T9366] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  134.213519][ T9379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1420'.
[  134.331223][ T9397] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1427'.
[  134.588199][ T9424] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1436'.
[  134.602371][ T9424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1436'.
[  135.428438][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1439'.
[  135.438578][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1439'.
[  135.448349][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1439'.
[  135.453249][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1439'.
[  135.457151][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1439'.
[  135.596710][ T9431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  135.617911][ T9437] syzkaller1: tun_chr_ioctl cmd 1074025677
[  135.632896][ T9437] syzkaller1: linktype set to 6
[  135.671768][ T9439] netlink: 'syz.2.1442': attribute type 5 has an invalid length.
[  135.736530][   T47] hid-generic 0005:16BF:5505.0001: item fetching failed at offset 1/2
[  135.740433][   T47] hid-generic 0005:16BF:5505.0001: probe with driver hid-generic failed with error -22
[  136.008166][ T9465] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.015656][ T9465] syzkaller0: entered promiscuous mode
[  136.023898][ T9465] syzkaller0: entered allmulticast mode
[  136.060356][ T9473] sch_tbf: burst 19872 is lower than device lo mtu (65499) !
[  136.083025][ T9465] tipc: Resetting bearer <eth:syzkaller0>
[  136.092781][ T9463] tipc: Resetting bearer <eth:syzkaller0>
[  136.114344][ T9463] tipc: Disabling bearer <eth:syzkaller0>
[  136.693954][ T9522] netlink: 'syz.1.1472': attribute type 12 has an invalid length.
[  136.903012][ T9547] : renamed from veth0_to_bond
[  137.064275][ T9564] syzkaller1: entered promiscuous mode
[  137.066543][ T9564] syzkaller1: entered allmulticast mode
[  137.150493][ T9572] netlink: 'syz.1.1495': attribute type 8 has an invalid length.
[  137.157463][ T9572] bond0: entered promiscuous mode
[  137.166784][ T9572] bond0: left promiscuous mode
[  137.202338][ T9575] netlink: 'syz.1.1495': attribute type 8 has an invalid length.
[  137.209357][ T9575] bond0: entered promiscuous mode
[  137.221026][ T9575] bond0: left promiscuous mode
[  137.286465][ T9583] netlink: 'syz.2.1500': attribute type 21 has an invalid length.
[  137.289738][ T9583] netlink: 'syz.2.1500': attribute type 22 has an invalid length.
[  137.293297][ T9583] netlink: 'syz.2.1500': attribute type 23 has an invalid length.
[  137.305709][ T9583] netlink: 'syz.2.1500': attribute type 25 has an invalid length.
[  137.312673][ T9583] netlink: 'syz.2.1500': attribute type 26 has an invalid length.
[  137.508321][ T9598] syzkaller0: entered promiscuous mode
[  137.510681][ T9598] syzkaller0: entered allmulticast mode
[  139.446781][ T9651] __nla_validate_parse: 17 callbacks suppressed
[  139.446793][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1527'.
[  139.746820][ T9666] netlink: 'syz.0.1534': attribute type 1 has an invalid length.
[  139.752060][ T9666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1534'.
[  140.155669][ T9676] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1539'.
[  140.161511][ T9676] wg1 speed is unknown, defaulting to 1000
[  140.165138][ T9676] wg1 speed is unknown, defaulting to 1000
[  140.168183][ T9676] wg1 speed is unknown, defaulting to 1000
[  140.181350][ T9676] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  140.257937][ T9676] wg1 speed is unknown, defaulting to 1000
[  140.262316][ T9676] wg1 speed is unknown, defaulting to 1000
[  140.270616][ T9676] wg1 speed is unknown, defaulting to 1000
[  140.464744][ T9694] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1547'.
[  140.660400][ T9698] syzkaller1: entered allmulticast mode
[  140.668943][ T9706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1551'.
[  140.959317][ T9718] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.964819][ T9718] syzkaller0: entered promiscuous mode
[  140.967175][ T9718] syzkaller0: entered allmulticast mode
[  140.975362][ T9718] validate_nla: 1 callbacks suppressed
[  140.975397][ T9718] netlink: 'syz.0.1557': attribute type 13 has an invalid length.
[  141.031908][ T9717] tipc: Resetting bearer <eth:syzkaller0>
[  141.045723][ T9717] tipc: Disabling bearer <eth:syzkaller0>
[  141.136422][ T9720] tunl0: Caught tx_queue_len zero misconfig
[  141.924043][ T9762] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  142.519194][ T9785] Unsupported ieee802154 address type: 0
[  142.581083][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1588'.
[  142.586976][ T9790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1588'.
[  143.041428][ T9821] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1603'.
[  143.047473][ T9821] netlink: 'syz.0.1603': attribute type 7 has an invalid length.
[  143.050721][ T9821] netlink: 'syz.0.1603': attribute type 8 has an invalid length.
[  143.053976][ T9821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1603'.
[  143.118223][ T9829] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1607'.
[  143.242346][ T9837] wg1 speed is unknown, defaulting to 1000
[  143.452121][   T33] audit: type=1800 audit(1758837417.044:2): pid=9837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1611" name="memory.events" dev="tmpfs" ino=2389 res=0 errno=0
[  144.538144][ T9947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1650'.
[  144.541035][ T9947] netlink: 'syz.1.1650': attribute type 12 has an invalid length.
[  144.554136][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  144.554166][ T9947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1650'.
[  144.559382][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  144.565394][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  144.568431][ T9947] netlink: 'syz.1.1650': attribute type 12 has an invalid length.
[  144.572222][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  144.683211][ T9960] : renamed from bond_slave_0
[  145.152974][T10006] netlink: 'syz.0.1671': attribute type 21 has an invalid length.
[  145.155986][T10006] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1671'.
[  145.210702][T10011] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1673'.
[  145.267275][T10017] netlink: 'syz.0.1676': attribute type 1 has an invalid length.
[  145.272018][T10017] netlink: 'syz.0.1676': attribute type 2 has an invalid length.
[  145.455406][T10039] netlink: 'syz.1.1682': attribute type 10 has an invalid length.
[  145.458077][T10039] syz_tun: entered promiscuous mode
[  145.507342][T10045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1684'.
[  146.013002][T10066] raw_sendmsg: syz.0.1692 forgot to set AF_INET. Fix it!
[  146.227604][T10077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1697'.
[  146.279276][T10077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1697'.
[  146.347569][T10082] netlink: 'syz.0.1699': attribute type 9 has an invalid length.
[  146.350992][T10082] netlink: 'syz.0.1699': attribute type 6 has an invalid length.
[  146.354625][T10082] netlink: 'syz.0.1699': attribute type 7 has an invalid length.
[  146.357881][T10082] netlink: 'syz.0.1699': attribute type 8 has an invalid length.
[  146.446862][T10086] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  146.460138][T10088] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1702'.
[  146.493889][T10090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  146.950733][T10116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1715'.
[  146.995547][T10116] syz.1.1715: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  147.001318][T10116] CPU: 1 UID: 0 PID: 10116 Comm: syz.1.1715 Not tainted syzkaller #0 PREEMPT(full) 
[  147.001330][T10116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  147.001337][T10116] Call Trace:
[  147.001348][T10116]  <TASK>
[  147.001353][T10116]  dump_stack_lvl+0x189/0x250
[  147.001370][T10116]  ? __pfx_dump_stack_lvl+0x10/0x10
[  147.001379][T10116]  ? __pfx__printk+0x10/0x10
[  147.001390][T10116]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  147.001400][T10116]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  147.001409][T10116]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  147.001435][T10116]  warn_alloc+0x214/0x310
[  147.001448][T10116]  ? stack_depot_save_flags+0x40/0x860
[  147.001462][T10116]  ? __pfx_warn_alloc+0x10/0x10
[  147.001473][T10116]  ? kasan_save_track+0x4f/0x80
[  147.001484][T10116]  ? xskq_create+0x56/0x170
[  147.001496][T10116]  ? xsk_init_queue+0xb0/0x110
[  147.001506][T10116]  ? xsk_setsockopt+0x4dc/0x8d0
[  147.001516][T10116]  ? do_sock_setsockopt+0x17c/0x1b0
[  147.001525][T10116]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  147.001534][T10116]  ? do_syscall_64+0xfa/0x3b0
[  147.001541][T10116]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.001554][T10116]  __vmalloc_node_range_noprof+0x125/0x12f0
[  147.001578][T10116]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  147.001591][T10116]  ? __kasan_kmalloc+0x93/0xb0
[  147.001603][T10116]  vmalloc_user_noprof+0xad/0xf0
[  147.001613][T10116]  ? xskq_create+0xbf/0x170
[  147.001624][T10116]  xskq_create+0xbf/0x170
[  147.001637][T10116]  xsk_init_queue+0xb0/0x110
[  147.001649][T10116]  xsk_setsockopt+0x4dc/0x8d0
[  147.001660][T10116]  ? __pfx_xsk_setsockopt+0x10/0x10
[  147.001670][T10116]  ? __pfx_aa_sk_perm+0x10/0x10
[  147.001683][T10116]  ? aa_sock_opt_perm+0xff/0x1b0
[  147.001692][T10116]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  147.001700][T10116]  ? __pfx_xsk_setsockopt+0x10/0x10
[  147.001710][T10116]  do_sock_setsockopt+0x17c/0x1b0
[  147.001722][T10116]  __x64_sys_setsockopt+0x13f/0x1b0
[  147.001734][T10116]  do_syscall_64+0xfa/0x3b0
[  147.001742][T10116]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.001749][T10116]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  147.001759][T10116]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.001766][T10116] RIP: 0033:0x7fece698ec29
[  147.001775][T10116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  147.001782][T10116] RSP: 002b:00007fece7841038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  147.001791][T10116] RAX: ffffffffffffffda RBX: 00007fece6bd5fa0 RCX: 00007fece698ec29
[  147.001797][T10116] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b
[  147.001801][T10116] RBP: 00007fece6a11e41 R08: 0000000000000004 R09: 0000000000000000
[  147.001806][T10116] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  147.001810][T10116] R13: 00007fece6bd6038 R14: 00007fece6bd5fa0 R15: 00007ffc586a94d8
[  147.001823][T10116]  </TASK>
[  147.001843][T10116] Mem-Info:
[  147.046882][T10118] netlink: 'syz.2.1716': attribute type 1 has an invalid length.
[  147.061511][T10116] active_anon:5374 inactive_anon:0 isolated_anon:0
[  147.061511][T10116]  active_file:1321 inactive_file:38270 isolated_file:0
[  147.061511][T10116]  unevictable:1768 dirty:296 writeback:0
[  147.061511][T10116]  slab_reclaimable:9839 slab_unreclaimable:99688
[  147.061511][T10116]  mapped:18124 shmem:2446 pagetables:994
[  147.061511][T10116]  sec_pagetables:0 bounce:0
[  147.061511][T10116]  kernel_misc_reclaimable:0
[  147.061511][T10116]  free:247186 free_pcp:20536 free_cma:0
[  147.066867][T10118] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1716'.
[  147.066886][T10118] netlink: 'syz.2.1716': attribute type 1 has an invalid length.
[  147.163435][T10116] Node 0 active_anon:10804kB inactive_anon:0kB active_file:4128kB inactive_file:151056kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30984kB dirty:1040kB writeback:0kB shmem:4944kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7696kB pagetables:2592kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  147.174950][T10116] Node 1 active_anon:10760kB inactive_anon:0kB active_file:1156kB inactive_file:2024kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:41512kB dirty:144kB writeback:0kB shmem:4840kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4464kB pagetables:1656kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  147.187837][T10116] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  147.200364][T10116] lowmem_reserve[]: 0 814 814 814 814
[  147.203630][T10116] Node 0 DMA32 free:205980kB boost:0kB min:33720kB low:42148kB high:50576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10804kB inactive_anon:0kB active_file:4128kB inactive_file:151056kB unevictable:3536kB writepending:1040kB present:1556484kB managed:833644kB mlocked:0kB bounce:0kB free_pcp:43484kB local_pcp:18248kB free_cma:0kB
[  147.215674][T10116] lowmem_reserve[]: 0 0 0 0 0
[  147.217556][T10116] Node 1 DMA32 free:458492kB boost:0kB min:19172kB low:23964kB high:28756kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  147.230507][T10116] lowmem_reserve[]: 0 0 854 854 854
[  147.234058][T10116] Node 1 Normal free:308696kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10896kB inactive_anon:0kB active_file:1156kB inactive_file:2024kB unevictable:3536kB writepending:144kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:39092kB local_pcp:21672kB free_cma:0kB
[  147.247632][T10116] lowmem_reserve[]: 0 0 0 0 0
[  147.252573][T10116] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  147.257436][T10116] Node 0 DMA32: 615*4kB (UME) 498*8kB (UME) 335*16kB (UM) 104*32kB (UM) 126*64kB (UM) 26*128kB (UME) 21*256kB (UME) 4*512kB (UME) 4*1024kB (UM) 8*2048kB (UM) 37*4096kB (M) = 205980kB
[  147.264180][T10116] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  147.272145][T10116] Node 1 Normal: 288*4kB (UME) 208*8kB (ME) 219*16kB (UME) 324*32kB (UM) 406*64kB (UM) 158*128kB (UME) 74*256kB (UM) 43*512kB (UM) 12*1024kB (UME) 10*2048kB (UME) 42*4096kB (M) = 308656kB
[  147.279607][T10116] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  147.283354][T10116] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  147.286433][T10116] 42037 total pagecache pages
[  147.287912][T10116] 0 pages in swap cache
[  147.289285][T10116] Free swap  = 124996kB
[  147.290594][T10116] Total swap = 124996kB
[  147.291884][T10116] 786301 pages RAM
[  147.296057][T10116] 0 pages HighMem/MovableOnly
[  147.299449][T10116] 240658 pages reserved
[  147.301054][T10116] 0 pages cma reserved
[  147.308954][T10123] lo: Caught tx_queue_len zero misconfig
[  147.460457][T10145] bridge_slave_0: default FDB implementation only supports local addresses
[  147.922139][T10176] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.925763][T10176] syzkaller0: entered promiscuous mode
[  147.928262][T10176] syzkaller0: entered allmulticast mode
[  147.937077][T10176] tipc: Resetting bearer <eth:syzkaller0>
[  147.941054][T10175] tipc: Resetting bearer <eth:syzkaller0>
[  147.949640][T10175] tipc: Disabling bearer <eth:syzkaller0>
[  148.244971][T10190] netlink: 'syz.0.1746': attribute type 1 has an invalid length.
[  148.486278][T10218] netlink: 'syz.0.1757': attribute type 30 has an invalid length.
[  148.846468][T10246] delete_channel: no stack
[  149.226635][T10269] 8021q: adding VLAN 0 to HW filter on device bond2
[  149.243293][T10269] macvlan2: entered promiscuous mode
[  149.245181][T10269] macvlan2: entered allmulticast mode
[  149.247736][T10269] bond2: entered promiscuous mode
[  149.250056][T10269] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  149.254792][T10269] bond2: left promiscuous mode
[  149.321879][T10279] wg1 speed is unknown, defaulting to 1000
[  149.650487][T10302] __nla_validate_parse: 6 callbacks suppressed
[  149.650503][T10302] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1794'.
[  150.474634][T10353] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1814'.
[  150.483795][T10353] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1814'.
[  150.769650][T10363] wg1 speed is unknown, defaulting to 1000
[  151.126858][T10377] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  151.131417][T10377] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  151.151338][T10379] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1826'.
[  151.288413][T10389] @: renamed from veth0_vlan
[  151.800504][T10425] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1849'.
[  152.099898][T10450] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.106023][T10450] syzkaller0: entered promiscuous mode
[  152.108279][T10450] syzkaller0: entered allmulticast mode
[  152.133749][T10450] tipc: Resetting bearer <eth:syzkaller0>
[  152.655086][T10494] gtp0: left promiscuous mode
[  152.656841][T10494] gtp0: left allmulticast mode
[  152.925512][T10449] tipc: Resetting bearer <eth:syzkaller0>
[  152.938156][T10449] tipc: Disabling bearer <eth:syzkaller0>
[  153.060547][T10503] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1884'.
[  153.139099][T10505] syzkaller0: entered promiscuous mode
[  153.141026][T10505] syzkaller0: entered allmulticast mode
[  153.161888][T10505] tls_set_device_offload: netdev not found
[  154.444529][T10507] 
[  154.445587][T10507] ======================================================
[  154.448342][T10507] WARNING: possible circular locking dependency detected
[  154.451118][T10507] syzkaller #0 Not tainted
[  154.453631][T10507] ------------------------------------------------------
[  154.456796][T10507] syz.2.1886/10507 is trying to acquire lock:
[  154.459095][T10507] ffffffff8f68f9b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  154.462693][T10507] 
[  154.462693][T10507] but task is already holding lock:
[  154.466354][T10507] ffffffff8f68f958 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  154.470110][T10507] 
[  154.470110][T10507] which lock already depends on the new lock.
[  154.470110][T10507] 
[  154.474145][T10507] 
[  154.474145][T10507] the existing dependency chain (in reverse order) is:
[  154.477637][T10507] 
[  154.477637][T10507] -> #2 (nr_neigh_list_lock){+...}-{3:3}:
[  154.480742][T10507]        lock_acquire+0x120/0x360
[  154.482817][T10507]        _raw_spin_lock_bh+0x36/0x50
[  154.484923][T10507]        nr_rt_ioctl+0x390/0xd50
[  154.486890][T10507]        sock_do_ioctl+0xdc/0x300
[  154.488897][T10507]        sock_ioctl+0x576/0x790
[  154.490790][T10507]        __se_sys_ioctl+0xfc/0x170
[  154.492827][T10507]        do_syscall_64+0xfa/0x3b0
[  154.494776][T10507]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.497199][T10507] 
[  154.497199][T10507] -> #1 (&nr_node->node_lock){+...}-{3:3}:
[  154.500410][T10507]        lock_acquire+0x120/0x360
[  154.502366][T10507]        _raw_spin_lock_bh+0x36/0x50
[  154.504428][T10507]        nr_rt_ioctl+0x193/0xd50
[  154.506335][T10507]        sock_do_ioctl+0xdc/0x300
[  154.508281][T10507]        sock_ioctl+0x576/0x790
[  154.510132][T10507]        __se_sys_ioctl+0xfc/0x170
[  154.512156][T10507]        do_syscall_64+0xfa/0x3b0
[  154.514004][T10507]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.516486][T10507] 
[  154.516486][T10507] -> #0 (nr_node_list_lock){+...}-{3:3}:
[  154.519543][T10507]        validate_chain+0xb9b/0x2140
[  154.521562][T10507]        __lock_acquire+0xab9/0xd20
[  154.523601][T10507]        lock_acquire+0x120/0x360
[  154.525582][T10507]        _raw_spin_lock_bh+0x36/0x50
[  154.527621][T10507]        nr_rt_device_down+0xa9/0x720
[  154.529693][T10507]        nr_device_event+0x137/0x150
[  154.531782][T10507]        notifier_call_chain+0x1b6/0x3e0
[  154.534003][T10507]        netif_close_many+0x29c/0x410
[  154.536126][T10507]        netif_close+0x158/0x210
[  154.538167][T10507]        dev_close+0x10a/0x220
[  154.540049][T10507]        bpq_device_event+0x377/0x6a0
[  154.542158][T10507]        notifier_call_chain+0x1b6/0x3e0
[  154.544370][T10507]        __dev_notify_flags+0x18d/0x2e0
[  154.546363][T10507]        netif_change_flags+0xe8/0x1a0
[  154.548572][T10507]        dev_change_flags+0x130/0x260
[  154.550753][T10507]        dev_ioctl+0x7b4/0x1150
[  154.552688][T10507]        sock_do_ioctl+0x22c/0x300
[  154.554632][T10507]        sock_ioctl+0x576/0x790
[  154.556567][T10507]        __se_sys_ioctl+0xfc/0x170
[  154.558614][T10507]        do_syscall_64+0xfa/0x3b0
[  154.560600][T10507]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.563064][T10507] 
[  154.563064][T10507] other info that might help us debug this:
[  154.563064][T10507] 
[  154.566956][T10507] Chain exists of:
[  154.566956][T10507]   nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock
[  154.566956][T10507] 
[  154.572352][T10507]  Possible unsafe locking scenario:
[  154.572352][T10507] 
[  154.575231][T10507]        CPU0                    CPU1
[  154.577322][T10507]        ----                    ----
[  154.579459][T10507]   lock(nr_neigh_list_lock);
[  154.581311][T10507]                                lock(&nr_node->node_lock);
[  154.584144][T10507]                                lock(nr_neigh_list_lock);
[  154.586916][T10507]   lock(nr_node_list_lock);
[  154.588757][T10507] 
[  154.588757][T10507]  *** DEADLOCK ***
[  154.588757][T10507] 
[  154.591913][T10507] 2 locks held by syz.2.1886/10507:
[  154.593956][T10507]  #0: ffffffff8f53a248 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  154.597266][T10507]  #1: ffffffff8f68f958 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  154.601180][T10507] 
[  154.601180][T10507] stack backtrace:
[  154.603633][T10507] CPU: 0 UID: 0 PID: 10507 Comm: syz.2.1886 Not tainted syzkaller #0 PREEMPT(full) 
[  154.603730][T10507] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  154.603741][T10507] Call Trace:
[  154.603750][T10507]  <TASK>
[  154.603759][T10507]  dump_stack_lvl+0x189/0x250
[  154.603783][T10507]  ? __pfx_dump_stack_lvl+0x10/0x10
[  154.603799][T10507]  ? __pfx__printk+0x10/0x10
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  154.603817][T10507]  ? print_lock_name+0xde/0x100
[  154.603835][T10507]  print_circular_bug+0x2ee/0x310
[  154.603850][T10507]  check_noncircular+0x134/0x160
[  154.603865][T10507]  validate_chain+0xb9b/0x2140
[  154.603880][T10507]  ? rt6_disable_ip+0x6b3/0x720
[  154.603898][T10507]  ? __lock_acquire+0xab9/0xd20
[  154.603918][T10507]  __lock_acquire+0xab9/0xd20
[  154.603938][T10507]  ? nr_rt_device_down+0xa9/0x720
[  154.603951][T10507]  lock_acquire+0x120/0x360
[  154.603968][T10507]  ? nr_rt_device_down+0xa9/0x720
[  154.603985][T10507]  ? nr_rt_device_down+0xa9/0x720
[  154.603997][T10507]  _raw_spin_lock_bh+0x36/0x50
[  154.604015][T10507]  ? nr_rt_device_down+0xa9/0x720
[  154.604027][T10507]  nr_rt_device_down+0xa9/0x720
[  154.604041][T10507]  ? do_raw_spin_unlock+0x4d/0x240
[  154.604056][T10507]  nr_device_event+0x137/0x150
[  154.604078][T10507]  notifier_call_chain+0x1b6/0x3e0
[  154.604096][T10507]  netif_close_many+0x29c/0x410
[  154.604121][T10507]  ? __pfx_netif_close_many+0x10/0x10
[  154.604138][T10507]  ? bond_netdev_event+0x227/0xe80
[  154.604156][T10507]  netif_close+0x158/0x210
[  154.604169][T10507]  ? __pfx_netif_close+0x10/0x10
[  154.604181][T10507]  ? tun_device_event+0x77/0x1020
[  154.604194][T10507]  ? __pfx___neigh_ifdown+0x10/0x10
[  154.604214][T10507]  ? macsec_notify+0x104/0x660
[  154.604231][T10507]  dev_close+0x10a/0x220
[  154.604247][T10507]  bpq_device_event+0x377/0x6a0
[  154.604268][T10507]  notifier_call_chain+0x1b6/0x3e0
[  154.604284][T10507]  __dev_notify_flags+0x18d/0x2e0
[  154.604303][T10507]  ? __pfx___dev_notify_flags+0x10/0x10
[  154.604317][T10507]  ? __dev_change_flags+0x4cc/0x6d0
[  154.604333][T10507]  ? __pfx___dev_change_flags+0x10/0x10
[  154.604348][T10507]  ? full_name_hash+0x92/0xe0
[  154.604363][T10507]  netif_change_flags+0xe8/0x1a0
[  154.604381][T10507]  dev_change_flags+0x130/0x260
[  154.604396][T10507]  dev_ioctl+0x7b4/0x1150
[  154.604412][T10507]  sock_do_ioctl+0x22c/0x300
[  154.604433][T10507]  ? __pfx_sock_do_ioctl+0x10/0x10
[  154.604451][T10507]  ? __lock_acquire+0xab9/0xd20
[  154.604473][T10507]  sock_ioctl+0x576/0x790
[  154.604492][T10507]  ? __pfx_sock_ioctl+0x10/0x10
[  154.604510][T10507]  ? __fget_files+0x2a/0x420
[  154.604529][T10507]  ? __fget_files+0x3a0/0x420
[  154.604546][T10507]  ? __fget_files+0x2a/0x420
[  154.604565][T10507]  ? bpf_lsm_file_ioctl+0x9/0x20
[  154.604581][T10507]  ? __pfx_sock_ioctl+0x10/0x10
[  154.604598][T10507]  __se_sys_ioctl+0xfc/0x170
[  154.604614][T10507]  do_syscall_64+0xfa/0x3b0
[  154.604628][T10507]  ? lockdep_hardirqs_on+0x9c/0x150
[  154.604680][T10507]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.604697][T10507]  ? exc_page_fault+0x9f/0xf0
[  154.604716][T10507]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.604730][T10507] RIP: 0033:0x7f3dd678ec29
[  154.604745][T10507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  154.604757][T10507] RSP: 002b:00007f3dd7564038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  154.604772][T10507] RAX: ffffffffffffffda RBX: 00007f3dd69d5fa0 RCX: 00007f3dd678ec29
[  154.604782][T10507] RDX: 0000200000000700 RSI: 0000000000008914 RDI: 0000000000000004
[  154.604791][T10507] RBP: 00007f3dd6811e41 R08: 0000000000000000 R09: 0000000000000000
[  154.604800][T10507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  154.604809][T10507] R13: 00007f3dd69d6038 R14: 00007f3dd69d5fa0 R15: 00007ffc67f877d8
[  154.604824][T10507]  </TASK>
[  154.793675][   T61] block nbd0: Possible stuck request ffff888021f10000: control (read@0,1024B). Runtime 30 seconds
[  154.797944][   T61] block nbd0: Possible stuck request ffff888021f10200: control (read@1024,1024B). Runtime 30 seconds
[  154.812562][   T61] block nbd0: Possible stuck request ffff888021f10400: control (read@2048,1024B). Runtime 30 seconds
[  154.817124][   T61] block nbd0: Possible stuck request ffff888021f10600: control (read@3072,1024B). Runtime 30 seconds

VM DIAGNOSIS:
21:57:08  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33b9860 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000005106 RDI=0000000000005107 RBP=ffffffff99dcc710 RSP=ffffc90002f0ed70
R8 =ffff888107580237 R9 =1ffff11020eb0046 R10=dffffc0000000000 R11=ffffffff854fab60
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99dcc480 R15=0000000000000000
RIP=ffffffff854fabd7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f3dd75646c0 ffffffff 00c00000
GS =0000 ffff8880b863d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007eff4734bff8 CR3=0000000106e94000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffff00ffffff00 ffffffffffffffff
XMM02=ff00000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000000000ff 00000000000000ff XMM05=0000000000000071 0000000000000000
XMM06=ff00000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffffffff XMM09=00306e6170772f74 656e2f327968702f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff821fff4d RBX=ffffea00044d7800 RCX=0000000000000003 RDX=ffffffff821ffde2
RSI=ffffffff8e24ff40 RDI=0000000000000001 RBP=dffffc0000000000 RSP=ffffc90002e6faa0
R8 =ffff88811e4ab980 R9 =0000000000000002 R10=0000000000000006 R11=0000000000000000
R12=0000000000000000 R13=0000000000000001 R14=0000000000000001 R15=0000000000140dca
RIP=ffffffff81bfad98 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f40ef2ef380 ffffffff 00c00000
GS =0000 ffff8881a3c3d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000056299621dcf8 CR3=0000000039cf4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000ff000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
