last executing test programs:

492.552213ms ago: executing program 0 (id=4975):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @host}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x88bbcfd08703268b, @host}, 0x10)

425.353031ms ago: executing program 2 (id=4977):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x2, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x4000)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4)
socket$inet(0x2, 0x1, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x88, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}]}, 0x88}}, 0x20000000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2033}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
bind$llc(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x803, 0x6)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

340.965886ms ago: executing program 0 (id=4979):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket(0x1, 0x803, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea)

340.050649ms ago: executing program 0 (id=4980):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x2a, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf)
ioctl$SIOCAX25OPTRT(r3, 0x89e7, &(0x7f00000000c0)={@default, @bcast, 0x2, 0x56})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000400791000000000000095", @ANYRES32=r3, @ANYRESHEX=r1, @ANYRESHEX=r2], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, 0x24}, 0x94)
ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, &(0x7f0000001180)={0x6, 0x65f7, @status={[0xdbd, 0x4, 0x3, 0x2a3, 0xc026, 0x9]}, [0x8000000000, 0x4, 0x7fffffffffffffff, 0x20, 0x38000000000, 0x0, 0xd, 0x9, 0x7, 0x1ff, 0x2, 0x61e, 0x9, 0x100, 0xff, 0x3, 0x18, 0x2, 0x1, 0x5, 0x10000, 0x0, 0x2, 0x67b, 0x6, 0x7, 0x1, 0x4, 0xda7, 0xf558, 0x6, 0x9, 0x200, 0x1, 0xfffffffffffffff9, 0x5, 0x3e4, 0xf2, 0x2, 0x9, 0xfffffffffffffff9, 0x0, 0x6, 0x8, 0xff, 0x7, 0x2, 0x8000000000000000, 0x0, 0x7fff, 0x5, 0x7, 0x7, 0x508, 0x100000000, 0x2, 0x3, 0x401, 0x1000, 0x5, 0x8001, 0xfffffffffffffffb, 0x7, 0xb35f]})
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r6 = openat$cgroup_devices(r5, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="61b9e36ef3fcc5443ec6968a1cebf278a6df423532cd8d9a4efaa8323365ae2c2e72798aab54e3e8b675a029e0178c197d12d788b8c6643747609fb98201a0a267dfce50421ca586219014c16db978264fe08a9699dc6d5f4b6b9f06b600dd77", @ANYRESDEC], 0xb)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000a00)={0x938, <r7=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0x0, 0x0, &(0x7f00000006c0)='syzkaller\x00', 0x2, 0xb3, &(0x7f0000000900)=""/179, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1b, r6, 0x8, &(0x7f00000009c0)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, r7, r4, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x5247, 0x1, 0x8001, 0x50040, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff, 0x6, 0x18}, 0xc)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x80009, 0x0, 0x1, 0xa9f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002f00)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x4}]}}]}, 0x38}}, 0x4000)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
pipe(0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000e35e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0)

339.680005ms ago: executing program 1 (id=4981):
unshare(0x2c060000)
unshare(0x24020400)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
sendfile(r0, r0, 0x0, 0x4)

295.339692ms ago: executing program 1 (id=4982):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
pipe(0x0)

287.320751ms ago: executing program 0 (id=4983):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
recvfrom(r0, 0x0, 0x0, 0x40, 0x0, 0x0)

283.783504ms ago: executing program 1 (id=4984):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
write$tun(r2, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x10000}}}}}}}}, 0x52)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0xc30}, 0x0)

186.085403ms ago: executing program 0 (id=4985):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000014c0)={0x10, 0x3f4, 0x0, 0x0, 0x0, {0x10, 0x3e9}}, 0x420}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x3, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20)
r3 = socket$inet(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94)
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000001f80)=r4, 0x4)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r7, 0x29, 0x46, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000100)='net_prio.prioidx\x00', 0x0, 0x0)
preadv(r9, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0)
openat$cgroup_ro(r8, &(0x7f0000000940)='blkio.bfq.time_recursive\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'})
socket$netlink(0x10, 0x3, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5b0, 0x120, 0x418, 0x320, 0x1f0, 0x0, 0x508, 0x508, 0x508, 0x508, 0x508, 0x6, &(0x7f0000000140), {[{{@ipv6={@local, @loopback, [0xff, 0xffffff00, 0xffffffff, 0xff000000], [0xff000000, 0x0, 0xffffffff, 0xffffffff], 'veth0_to_bridge\x00', 'vcan0\x00', {0xff}, {}, 0xc1, 0xe, 0x5, 0xa}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@hl={{0x28}, {0x1, 0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x2, 0x7}, {0x2, 0x4, 0x7}, {0xffffffffffffffff, 0x1, 0x6}, 0xe3f, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x5}, @empty, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xff, 0x0, 0xff], 'veth1_vlan\x00', 'dummy0\x00', {}, {}, 0x16, 0xfa, 0x1, 0x40}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@broadcast, 0x23, 0xa, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040))
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000005140)={0x14, r11, 0x1, 0x80000000}, 0x14}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000840)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000980)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000225bda400fedbdf25010000000c000200faffffffffffffff0c000200b6390000000000000800d558000000000c00030008000000000000000c00030001000000000000000c0005000100000000000000f16fa298e6dc86f1e76bd0ecc9c4a1395d7454effaf6bbd6b0926c207b2bc655f21735ee29a9b3a5f892612057433bb0023b00c1604b14813d0e18310707fdd3e3279c809b73ca55753fcb72bccfb4aca6f7f5821497b4b57926731eda447bf10f1a1c7da78ce4bfa2a924b76a9398b9a222a308f704a32384d506b7d5663db9ace8f36e107d0dd4fead0b322b8dde68944375602c0c244374f55ebc284532c0cb4f1494ec6da2679a7fbb304163d1f8eab716c4c291c643918c3955353afdf74847474fb1d1ace71b7fe120c6a371dd47c6edb89bd0224b50dcba8465be4e6b3d04beb4f7581cf3b07ddfbe86a839a50db8fbcc8b00000000000000000000004b1ae50087f995319792fc147adae92130fc881252bd5f40ec370642b20a4ae26f783d6ebcb5314476bd93aa0dc70ca56f506b20264b964a87faa7f6c4569c7b0000d4261784b68569cd9e27ea03c918803e3c5b2626a394e26dc3d55f2147f86e7daf7f8d27e8eaa93364f2843cf4a92860899430692bbd6413e4fc7176d4b5376fafa502d75e663cf359e386f2a619cd3e04650b3bcdf072614b12cd1ac25548ed37fdd0802f4b46ad226b50cede0dc1407f87907ef357413c1bfe7a59e58b"], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x4020004)

159.92276ms ago: executing program 2 (id=4986):
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x60, 0x0, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x44, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3, {0x10, 0x18, 0x2}}, @val={0x25, 0x3, {0x0, 0x34, 0x10}}, @void, @val={0x3c, 0x4, {0x1, 0x6, 0xb8, 0x8}}, @void, @void, @void, @void}}]]}, 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0)

139.287253ms ago: executing program 0 (id=4987):
r0 = socket(0x840000000002, 0x3, 0xf8)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000680)=0x3, 0x4)

93.715185ms ago: executing program 2 (id=4988):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f000000b100)={0x0, 0x0, &(0x7f000000b0c0)={&(0x7f000000af00)={0x58, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x64000840}, 0x804)

89.396054ms ago: executing program 1 (id=4989):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xc0, 0x99, 0x15, 0x5, 0xfc, 0x5, 0xfb, 0xe2, 0x5d, 0x1, 0x81, 0x84, 0x8, 0x5}, 0xe)
sendto$inet6(r0, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x10000)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000440))

86.845927ms ago: executing program 2 (id=4990):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x28}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)

370.792µs ago: executing program 2 (id=4991):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000506000000000000000000000c"], 0x0, 0x32, 0x0, 0xa, 0x7ff}, 0x28)

200.367µs ago: executing program 1 (id=4992):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', r0}, 0x18)

106.552µs ago: executing program 1 (id=4993):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000011409"], 0x18}, 0x1, 0x0, 0x0, 0x8804}, 0x40000)

0s ago: executing program 2 (id=4994):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xffbfff}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000002000000000800040001000000", 0x24)

kernel console output (not intermixed with test programs):

89] veth0_macvtap: entered promiscuous mode
[   60.799761][ T5884] veth1_vlan: entered promiscuous mode
[   60.805629][ T5889] veth1_macvtap: entered promiscuous mode
[   60.824877][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.827392][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.831626][ T5884] veth0_macvtap: entered promiscuous mode
[   60.844032][ T5884] veth1_macvtap: entered promiscuous mode
[   60.849126][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.865914][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.870022][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.874669][ T5898] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.877472][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.887147][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.889494][ T5898] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.893395][ T5891] Bluetooth: hci0: command tx timeout
[   60.908380][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.911671][ T5898] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.922822][ T5898] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.936068][ T5888] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   60.942261][ T5898] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.945648][ T5898] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.949040][ T5898] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.969641][ T5898] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.972738][ T5891] Bluetooth: hci2: command tx timeout
[   60.972932][ T5891] Bluetooth: hci1: command tx timeout
[   61.027922][ T4637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.037929][ T4637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.074570][  T719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.077932][  T719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.116885][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.119380][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.161915][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.166567][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.589927][ T5995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.43'.
[   61.730183][ T6009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.49'.
[   61.930809][ T6021] warning: `syz.0.55' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.982111][ T6025] netlink: 'syz.0.57': attribute type 1 has an invalid length.
[   61.986540][ T6025] netlink: 'syz.0.57': attribute type 1 has an invalid length.
[   62.283334][ T6042] Bluetooth: MGMT ver 1.23
[   62.433425][ T6051] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   62.439517][ T6051] netlink: 24 bytes leftover after parsing attributes in process `syz.1.70'.
[   62.444935][ T6051] netlink: 'syz.1.70': attribute type 1 has an invalid length.
[   62.449229][ T6051] netlink: 'syz.1.70': attribute type 2 has an invalid length.
[   62.451930][ T6051] netlink: 'syz.1.70': attribute type 3 has an invalid length.
[   62.456052][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.70'.
[   62.618775][ T6058] syz.1.72 uses obsolete (PF_INET,SOCK_PACKET)
[   62.709752][ T6066] Driver unsupported XDP return value 0 on prog  (id 12) dev N/A, expect packet loss!
[   62.941730][ T6080] netlink: 'syz.0.84': attribute type 1 has an invalid length.
[   62.945080][ T6080] netlink: 'syz.0.84': attribute type 4 has an invalid length.
[   62.948561][ T6080] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.84'.
[   62.975362][ T5891] Bluetooth: hci0: command tx timeout
[   63.053353][ T5891] Bluetooth: hci1: command tx timeout
[   63.053722][   T55] Bluetooth: hci2: command tx timeout
[   63.397723][ T6114] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.497078][ T6123] netlink: 24 bytes leftover after parsing attributes in process `syz.0.102'.
[   63.500470][ T6109] netlink: 'syz.2.95': attribute type 13 has an invalid length.
[   63.508128][ T6109] netlink: 'syz.2.95': attribute type 17 has an invalid length.
[   63.565661][ T6109] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   63.988335][ T6159] netlink: 256 bytes leftover after parsing attributes in process `syz.0.118'.
[   63.992377][ T6159] unsupported nlmsg_type 40
[   64.208138][ T6176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.124'.
[   64.294105][ T6187] Zero length message leads to an empty skb
[   64.333390][ T5886] Bluetooth: hci2: Opcode 0x0401 failed: -110
[   64.409958][ T6199] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.540402][ T6211] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.143'.
[   64.608011][ T6219] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.659682][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'.
[   64.867487][ T6244] gre1: entered allmulticast mode
[   65.005849][ T6245] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.010870][ T6245] bond0: (slave rose0): Enslaving as an active interface with an up link
[   65.053388][ T5886] Bluetooth: hci0: command tx timeout
[   65.080195][ T6263] veth0: entered promiscuous mode
[   65.132639][ T5886] Bluetooth: hci1: command tx timeout
[   65.134527][ T5886] Bluetooth: hci2: command 0x040f tx timeout
[   65.645123][ T6309] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.742273][ T6309] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.807722][ T6309] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.891350][ T6309] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.995291][ T5913] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.016067][ T5898] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.050833][ T5913] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.083041][ T5913] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.311311][ T6362] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   67.096037][ T6427] netlink: 'syz.1.234': attribute type 21 has an invalid length.
[   67.098888][ T6427] __nla_validate_parse: 3 callbacks suppressed
[   67.098903][ T6427] netlink: 152 bytes leftover after parsing attributes in process `syz.1.234'.
[   67.114315][ T6429] netlink: 'syz.2.233': attribute type 3 has an invalid length.
[   67.117232][ T6429] netlink: 'syz.2.233': attribute type 3 has an invalid length.
[   67.133063][ T5886] Bluetooth: hci0: command tx timeout
[   67.159118][ T6433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.236'.
[   67.200226][ T6436] netlink: 20 bytes leftover after parsing attributes in process `syz.2.237'.
[   67.212993][ T5886] Bluetooth: hci2: command 0x040f tx timeout
[   67.215087][ T5886] Bluetooth: hci1: command tx timeout
[   67.327702][ T6446] tipc: Started in network mode
[   67.329747][ T6446] tipc: Node identity 42c590cb5e79, cluster identity 4711
[   67.340908][ T6446] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.344456][ T6446] syzkaller0: entered promiscuous mode
[   67.346223][ T6446] syzkaller0: entered allmulticast mode
[   67.373530][ T6446] tipc: Resetting bearer <eth:syzkaller0>
[   67.399180][ T6443] tipc: Resetting bearer <eth:syzkaller0>
[   67.408916][ T6443] tipc: Disabling bearer <eth:syzkaller0>
[   67.440036][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.245'.
[   67.451511][ T6455] team_slave_0: entered promiscuous mode
[   67.453729][ T6455] team_slave_1: entered promiscuous mode
[   67.460438][ T6455] team_slave_0: left promiscuous mode
[   67.462283][ T6455] team_slave_1: left promiscuous mode
[   67.630509][ T6468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.251'.
[   67.845919][   T10] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   67.853147][   T10] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   68.473707][ T6508] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   68.480965][ T6508] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   68.497074][ T6508] syz.0.270 (6508) used greatest stack depth: 20856 bytes left
[   68.760419][ T6536] batman_adv: batadv0: Adding interface: dummy0
[   68.762740][ T6536] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.771338][ T6536] batman_adv: batadv0: Interface activated: dummy0
[   68.892327][ T6546] pimreg: entered allmulticast mode
[   68.960330][ T6548] netlink: 'syz.2.286': attribute type 21 has an invalid length.
[   68.964143][ T6548] netlink: 132 bytes leftover after parsing attributes in process `syz.2.286'.
[   68.979495][ T6548] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.990439][ T6548] syzkaller0: entered promiscuous mode
[   68.992221][ T6548] syzkaller0: entered allmulticast mode
[   69.050988][ T6548] tipc: Resetting bearer <eth:syzkaller0>
[   69.060729][ T6547] tipc: Resetting bearer <eth:syzkaller0>
[   69.076490][ T6547] tipc: Disabling bearer <eth:syzkaller0>
[   69.205258][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.294'.
[   69.292973][   T55] Bluetooth: hci2: command 0x040f tx timeout
[   69.425713][ T6587] netlink: 200 bytes leftover after parsing attributes in process `syz.0.304'.
[   69.431200][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.304'.
[   69.515910][ T6590] netlink: 56 bytes leftover after parsing attributes in process `syz.0.305'.
[   69.922915][ T6609] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   69.944998][ T6614] veth3: entered allmulticast mode
[   69.955602][ T5313] hid-generic 0005:046D:FFF9.0002: item fetching failed at offset 0/1
[   69.970513][ T5313] hid-generic 0005:046D:FFF9.0002: probe with driver hid-generic failed with error -22
[   70.238341][ T6641] netlink: 'syz.0.325': attribute type 10 has an invalid length.
[   70.241500][ T6641] team0: entered promiscuous mode
[   70.249027][ T6641] team_slave_0: entered promiscuous mode
[   70.251008][ T6641] team_slave_1: entered promiscuous mode
[   70.256420][ T6641] bridge0: port 3(team0) entered blocking state
[   70.261057][ T6641] bridge0: port 3(team0) entered disabled state
[   70.265824][ T6641] team0: entered allmulticast mode
[   70.267671][ T6641] team_slave_0: entered allmulticast mode
[   70.269620][ T6641] team_slave_1: entered allmulticast mode
[   70.275049][ T6641] bridge0: port 3(team0) entered blocking state
[   70.277732][ T6641] bridge0: port 3(team0) entered forwarding state
[   70.450041][ T6655] syzkaller0: entered promiscuous mode
[   70.452136][ T6655] syzkaller0: entered allmulticast mode
[   70.686540][ T6677] syzkaller0: entered promiscuous mode
[   70.689046][ T6677] syzkaller0: entered allmulticast mode
[   71.058506][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.063212][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   72.488476][ T6706] __nla_validate_parse: 6 callbacks suppressed
[   72.488489][ T6706] netlink: 28 bytes leftover after parsing attributes in process `syz.1.355'.
[   72.585553][ T6714] netlink: 24 bytes leftover after parsing attributes in process `syz.1.359'.
[   72.662206][ T6722] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   73.054503][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.375'.
[   73.058201][ T6748] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[   73.060745][ T6748] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.501897][ T6769] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.384'.
[   74.666123][ T6808] netlink: 'syz.2.403': attribute type 25 has an invalid length.
[   74.669509][ T6808] netlink: 20 bytes leftover after parsing attributes in process `syz.2.403'.
[   74.804166][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.407'.
[   74.889176][ T6819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.408'.
[   74.945395][ T6824] netlink: 'syz.1.408': attribute type 1 has an invalid length.
[   74.948013][ T6824] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.408'.
[   75.085684][ T6834] netlink: 'syz.0.412': attribute type 6 has an invalid length.
[   75.090028][ T6834] netlink: 'syz.0.412': attribute type 6 has an invalid length.
[   75.155443][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.415'.
[   75.158431][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.415'.
[   75.257478][ T6852] syz.0.419 uses old SIOCAX25GETINFO
[   75.364964][ T6864] syz.0.425 (6864) used greatest stack depth: 20680 bytes left
[   75.381040][ T6861] tun0: tun_chr_ioctl cmd 2147767520
[   75.447914][ T6870] netlink: 'syz.1.428': attribute type 5 has an invalid length.
[   75.734467][ T6892] tipc: Started in network mode
[   75.736641][ T6892] tipc: Node identity 1281381e0b8b, cluster identity 4711
[   75.739681][ T6892] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.780666][ T6892] syzkaller0: entered promiscuous mode
[   75.783031][ T6892] syzkaller0: entered allmulticast mode
[   75.785862][ T6892] tipc: Resetting bearer <eth:syzkaller0>
[   75.801109][ T6890] tipc: Resetting bearer <eth:syzkaller0>
[   76.451065][ T6890] tipc: Disabling bearer <eth:syzkaller0>
[   76.781634][ T6920] IPv6: addrconf: prefix option has invalid lifetime
[   77.139745][ T6942] netlink: 'syz.2.458': attribute type 1 has an invalid length.
[   77.182179][ T6942] bond1: (slave gretap1): making interface the new active one
[   77.185778][ T6942] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   77.682302][ T6953] __nla_validate_parse: 6 callbacks suppressed
[   77.682313][ T6953] netlink: 16 bytes leftover after parsing attributes in process `syz.0.462'.
[   77.695682][ T6953] netlink: 40 bytes leftover after parsing attributes in process `syz.0.462'.
[   77.698667][ T6953] block nbd0: not configured, cannot reconfigure
[   78.767048][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.473'.
[   79.706155][ T7030] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[   79.902808][ T7044] netlink: 240 bytes leftover after parsing attributes in process `syz.0.500'.
[   79.983414][ T7048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.503'.
[   79.987561][ T7048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.503'.
[   80.403426][ T7068] netlink: 196 bytes leftover after parsing attributes in process `syz.0.513'.
[   80.509969][ T7068] bridge0: port 3(team0) entered disabled state
[   80.512294][ T7068] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.515390][ T7068] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.547833][ T7068] batman_adv: batadv0: Interface deactivated: dummy0
[   80.646657][ T7068] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.667461][ T7068] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.735038][ T7068] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[   80.759557][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.762692][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.783081][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.785971][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.899118][ T7106] netlink: 64 bytes leftover after parsing attributes in process `syz.1.528'.
[   80.918199][ T7108] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   81.191416][ T7149] netlink: 32 bytes leftover after parsing attributes in process `syz.1.545'.
[   81.243383][ T7151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.546'.
[   81.274436][ T7152] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   81.293662][  T974] cfg80211: failed to load regulatory.db
[   81.492377][ T7167] erspan0: entered promiscuous mode
[   81.701053][ T7191] syzkaller1: entered promiscuous mode
[   81.703007][ T7191] syzkaller1: entered allmulticast mode
[   82.353224][ T7258] IPv6: addrconf: prefix option has invalid lifetime
[   82.502472][ T7278] netlink: 'syz.0.604': attribute type 1 has an invalid length.
[   82.507411][ T7276] netlink: zone id is out of range
[   82.509500][ T7276] netlink: zone id is out of range
[   82.511191][ T7276] netlink: zone id is out of range
[   82.565370][ T7276] netlink: zone id is out of range
[   82.567428][ T7276] netlink: zone id is out of range
[   82.569294][ T7276] netlink: zone id is out of range
[   82.571094][ T7276] netlink: zone id is out of range
[   82.579776][ T7278] 8021q: adding VLAN 0 to HW filter on device bond1
[   82.587968][ T7281] bond1: (slave gretap1): making interface the new active one
[   82.591109][ T7281] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   82.663681][ T7276] netlink: zone id is out of range
[   82.666689][ T7276] netlink: zone id is out of range
[   82.990970][ T7281] syz.0.604 (7281) used greatest stack depth: 20040 bytes left
[   83.041663][ T7297] __nla_validate_parse: 2 callbacks suppressed
[   83.041678][ T7297] netlink: 36 bytes leftover after parsing attributes in process `syz.0.613'.
[   83.151962][ T7306] netlink: 112 bytes leftover after parsing attributes in process `syz.0.618'.
[   83.165781][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.618'.
[   83.197622][ T7309] tun0: tun_chr_ioctl cmd 2147767507
[   84.314184][ T7364] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.316830][ T7364] syzkaller0: entered promiscuous mode
[   84.318584][ T7364] syzkaller0: entered allmulticast mode
[   84.329280][ T7364] tipc: Resetting bearer <eth:syzkaller0>
[   84.337641][ T7362] tipc: Resetting bearer <eth:syzkaller0>
[   84.345995][ T7362] tipc: Disabling bearer <eth:syzkaller0>
[   85.370495][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.653'.
[   85.414995][ T7391] bridge_slave_0: left allmulticast mode
[   85.419168][ T7391] bridge_slave_0: left promiscuous mode
[   85.424717][ T7391] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.430839][ T7391] bridge_slave_1: left allmulticast mode
[   85.439411][ T7391] bridge_slave_1: left promiscuous mode
[   85.441385][ T7391] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.457228][ T7391] bond0: (slave bond_slave_0): Releasing backup interface
[   85.466555][ T7391] bond0: (slave bond_slave_1): Releasing backup interface
[   85.474236][ T7391] team0: Port device team_slave_0 removed
[   85.481062][ T7391] team0: Port device team_slave_1 removed
[   85.487643][ T7391] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.495103][ T7391] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.500790][ T7391] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.507344][ T7391] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.521476][ T7391] bond1: (slave gretap1): Releasing active interface
[   85.562334][ T7398] team0: Failed to send options change via netlink (err -105)
[   85.566814][ T7398] team0: Mode changed to "activebackup"
[   85.599546][ T7391] syz.2.654 (7391) used greatest stack depth: 19864 bytes left
[   85.675300][ T7408] netlink: 772 bytes leftover after parsing attributes in process `syz.1.660'.
[   85.686537][ T7407] tun0: tun_chr_ioctl cmd 35111
[   85.746123][ T7412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.663'.
[   85.989881][ T7433] netlink: 'syz.0.669': attribute type 1 has an invalid length.
[   86.001290][ T7436] netlink: 24 bytes leftover after parsing attributes in process `syz.1.673'.
[   86.100386][ T7445] netlink: 76 bytes leftover after parsing attributes in process `syz.0.674'.
[   86.155576][ T7452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.678'.
[   86.201503][ T7457] netlink: 'syz.1.680': attribute type 13 has an invalid length.
[   86.323976][ T7464] tc_dump_action: action bad kind
[   86.611246][ T7490] netlink: 'syz.0.695': attribute type 21 has an invalid length.
[   86.615105][ T7490] netlink: 'syz.0.695': attribute type 6 has an invalid length.
[   86.618559][ T7490] netlink: 64 bytes leftover after parsing attributes in process `syz.0.695'.
[   86.874214][ T7512] team0: left allmulticast mode
[   86.875886][ T7512] team_slave_0: left allmulticast mode
[   86.878173][ T7512] team_slave_1: left allmulticast mode
[   86.880438][ T7512] team0: left promiscuous mode
[   86.883371][ T7512] team_slave_0: left promiscuous mode
[   86.885723][ T7512] team_slave_1: left promiscuous mode
[   86.887703][ T7512] bridge0: port 3(team0) entered disabled state
[   86.892057][ T7512] batman_adv: batadv0: Removing interface: dummy0
[   86.896486][ T7512] bridge_slave_0: left allmulticast mode
[   86.898373][ T7512] bridge_slave_0: left promiscuous mode
[   86.900314][ T7512] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.905542][ T7512] bridge_slave_1: left allmulticast mode
[   86.907697][ T7512] bridge_slave_1: left promiscuous mode
[   86.909653][ T7512] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.918456][ T7512] bond0: (slave bond_slave_0): Releasing backup interface
[   86.924045][ T7512] bond0: (slave bond_slave_1): Releasing backup interface
[   86.927770][ T7512] team0: Port device team_slave_0 removed
[   86.934806][ T7512] team0: Port device team_slave_1 removed
[   86.936937][ T7512] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.944338][ T7512] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.953706][ T7512] bond1: (slave gretap1): Releasing active interface
[   87.017944][ T7512] team0: Failed to send options change via netlink (err -105)
[   87.020900][ T7512] team0: Mode changed to "activebackup"
[   87.218707][ T7539] sctp: [Deprecated]: syz.1.718 (pid 7539) Use of int in maxseg socket option.
[   87.218707][ T7539] Use struct sctp_assoc_value instead
[   87.370084][ T7548] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.373956][ T7548] syzkaller0: entered promiscuous mode
[   87.375863][ T7548] syzkaller0: entered allmulticast mode
[   87.388654][ T7548] tipc: Resetting bearer <eth:syzkaller0>
[   87.393814][ T7547] tipc: Resetting bearer <eth:syzkaller0>
[   87.400528][ T7547] tipc: Disabling bearer <eth:syzkaller0>
[   87.503893][ T7554] netlink: 'syz.2.724': attribute type 13 has an invalid length.
[   87.849551][ T7566] trusted_key: syz.1.725 sent an empty control message without MSG_MORE.
[   88.177483][ T5913] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.180473][ T5913] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.189599][ T7591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.196034][ T5913] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.199047][ T5913] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.277986][ T7597] __nla_validate_parse: 1 callbacks suppressed
[   88.278001][ T7597] netlink: 68 bytes leftover after parsing attributes in process `syz.2.740'.
[   88.729561][ T7606] bridge_slave_0: left allmulticast mode
[   88.732135][ T7606] bridge_slave_0: left promiscuous mode
[   88.735258][ T7606] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.740045][ T7606] bridge_slave_1: left allmulticast mode
[   88.741965][ T7606] bridge_slave_1: left promiscuous mode
[   88.744338][ T7606] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.756427][ T7606] bond0: (slave bond_slave_0): Releasing backup interface
[   88.762777][ T7606] bond0: (slave bond_slave_1): Releasing backup interface
[   88.778731][ T7606] team0: Port device team_slave_0 removed
[   88.791238][ T7606] team0: Port device team_slave_1 removed
[   88.798176][ T7606] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.800751][ T7606] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.804245][ T7606] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.806859][ T7606] batman_adv: batadv0: Removing interface: batadv_slave_1
[   88.861165][ T7617] net_ratelimit: 8 callbacks suppressed
[   88.861175][ T7617] openvswitch: netlink: IP tunnel dst address not specified
[   88.882031][ T7606] team0: Failed to send options change via netlink (err -105)
[   88.892703][ T7606] team0: Mode changed to "activebackup"
[   88.955950][ T7623] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.752'.
[   89.046752][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.760'.
[   89.088264][ T7644] netlink: 'syz.0.762': attribute type 3 has an invalid length.
[   89.204642][ T7663] sch_fq: defrate 0 ignored.
[   89.298945][ T7678] vlan2: entered promiscuous mode
[   89.301529][ T7678] vlan2: entered allmulticast mode
[   89.304047][ T7678] hsr_slave_1: entered allmulticast mode
[   89.381395][ T7684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.778'.
[   90.285356][ T7713] : renamed from bond_slave_0
[   90.347488][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.795'.
[   91.593660][ T7760] netlink: 256 bytes leftover after parsing attributes in process `syz.0.816'.
[   91.763642][ T7768] netlink: 'syz.0.819': attribute type 15 has an invalid length.
[   91.766221][ T7768] netlink: 24 bytes leftover after parsing attributes in process `syz.0.819'.
[   91.894678][ T7774] netlink: 36 bytes leftover after parsing attributes in process `syz.0.823'.
[   91.904551][ T7774] netlink: 36 bytes leftover after parsing attributes in process `syz.0.823'.
[   91.907358][ T7774] netlink: 36 bytes leftover after parsing attributes in process `syz.0.823'.
[   92.127323][ T7778] smc: net device bond0 applied user defined pnetid SYZ2
[   92.150456][ T7778] smc: net device bond0 erased user defined pnetid SYZ2
[   92.570036][ T7811] netlink: 'syz.2.837': attribute type 2 has an invalid length.
[   93.021615][ T7830] tipc: Started in network mode
[   93.029218][ T7830] tipc: Node identity , cluster identity 4711
[   93.036439][ T7830] tipc: Failed to obtain node identity
[   93.041991][ T7830] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   93.051108][ T7830] syzkaller0: entered promiscuous mode
[   93.056597][ T7830] syzkaller0: entered allmulticast mode
[   93.337085][ T7846] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[   93.360233][ T7848] __nla_validate_parse: 26 callbacks suppressed
[   93.360243][ T7848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.856'.
[   93.388741][ T7848] veth1: entered promiscuous mode
[   93.391555][ T7848] bridge2: entered promiscuous mode
[   93.395520][ T7848] hsr1: entered promiscuous mode
[   93.604895][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.863'.
[   93.752403][ T7891] netlink: 'syz.1.876': attribute type 6 has an invalid length.
[   93.839926][ T7899] netlink: 'syz.0.880': attribute type 1 has an invalid length.
[   93.843446][ T7899] netlink: 144 bytes leftover after parsing attributes in process `syz.0.880'.
[   93.846910][ T7899] netlink: 'syz.0.880': attribute type 2 has an invalid length.
[   93.849550][ T7899] netlink: 64 bytes leftover after parsing attributes in process `syz.0.880'.
[   94.469115][ T7933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.895'.
[   94.641930][ T7944] vxlan0: entered promiscuous mode
[   94.645215][ T7944] vxlan0: entered allmulticast mode
[   94.647336][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   94.658284][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   94.663657][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   94.666399][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   94.859664][ T7961] pim6reg1: entered allmulticast mode
[   94.931756][ T7964] netlink: 'syz.1.908': attribute type 1 has an invalid length.
[   94.945456][ T7964] 8021q: adding VLAN 0 to HW filter on device bond1
[   94.956115][ T7964] vlan2: entered allmulticast mode
[   94.957885][ T7964] veth1: entered allmulticast mode
[   94.972240][ T7964] bond1: (slave vlan2): making interface the new active one
[   94.975812][ T7964] bond1: (slave vlan2): Enslaving as an active interface with an up link
[   95.372669][   T55] Bluetooth: hci0: command tx timeout
[   95.971277][ T8003] netlink: 'syz.2.924': attribute type 1 has an invalid length.
[   95.974098][ T8003] netlink: 3 bytes leftover after parsing attributes in process `syz.2.924'.
[   96.057383][ T8009] netlink: 256 bytes leftover after parsing attributes in process `syz.2.927'.
[   96.578364][ T8067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.953'.
[   96.819496][ T8078] wg1: entered promiscuous mode
[   96.821302][ T8078] wg1: entered allmulticast mode
[   96.884453][ T8080] netlink: 48 bytes leftover after parsing attributes in process `syz.1.959'.
[   97.117018][ T8084] tipc: Started in network mode
[   97.118835][ T8084] tipc: Node identity fe162fc29aa2, cluster identity 4711
[   97.121336][ T8084] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.125259][ T8084] syzkaller0: entered promiscuous mode
[   97.128609][ T8084] syzkaller0: entered allmulticast mode
[   97.142629][ T8084] tipc: Resetting bearer <eth:syzkaller0>
[   97.146285][ T8083] tipc: Resetting bearer <eth:syzkaller0>
[   97.153821][ T8083] tipc: Disabling bearer <eth:syzkaller0>
[   97.998081][ T8129] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.000724][ T8129] syzkaller0: entered promiscuous mode
[   98.006346][ T8129] syzkaller0: entered allmulticast mode
[   98.021134][ T8129] tipc: Resetting bearer <eth:syzkaller0>
[   98.025438][ T8127] tipc: Resetting bearer <eth:syzkaller0>
[   98.031913][ T8127] tipc: Disabling bearer <eth:syzkaller0>
[   98.557739][ T8179] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1004'.
[   98.561518][ T8179] netlink: 'syz.1.1004': attribute type 1 has an invalid length.
[   98.636594][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1006'.
[   98.663385][ T8183] bridge0: port 1(macvlan2) entered blocking state
[   98.666118][ T8183] bridge0: port 1(macvlan2) entered disabled state
[   98.668596][ T8183] macvlan2: entered allmulticast mode
[   98.670500][ T8183] bridge0: entered allmulticast mode
[   98.674033][ T8183] macvlan2: left allmulticast mode
[   98.675836][ T8183] bridge0: left allmulticast mode
[   98.814004][ T8189] Bluetooth: MGMT ver 1.23
[   98.840595][ T8191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1010'.
[   98.844935][ T8191] smc: net device bond0 applied user defined pnetid SYZ
[   99.134654][ T8216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1022'.
[   99.471546][ T8244] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1035'.
[  100.084168][ T8261] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  100.089913][ T8261] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  100.487875][ T8282] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1051'.
[  100.592186][ T8290] openvswitch: netlink: Message has 1 unknown bytes.
[  100.604081][ T8290] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.649496][ T8295] veth0_to_team: entered promiscuous mode
[  101.203994][ T8339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1078'.
[  101.357131][ T8350] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1084'.
[  101.840750][ T8403] openvswitch: netlink: Message has 4 unknown bytes.
[  102.589008][ T8422] netlink: 788 bytes leftover after parsing attributes in process `syz.2.1112'.
[  102.664857][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1115'.
[  103.268996][ T8483] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.272911][ T8483] syzkaller0: entered promiscuous mode
[  103.275185][ T8483] syzkaller0: entered allmulticast mode
[  103.284683][ T8482] tipc: Resetting bearer <eth:syzkaller0>
[  103.295182][ T8482] tipc: Disabling bearer <eth:syzkaller0>
[  103.360191][ T8495] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  103.750554][ T8535] nbd: socks must be embedded in a SOCK_ITEM attr
[  103.927975][ T8550] netlink: 'syz.1.1171': attribute type 1 has an invalid length.
[  103.930674][ T8550] __nla_validate_parse: 7 callbacks suppressed
[  103.930681][ T8550] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1171'.
[  104.070731][ T8557] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1175'.
[  104.345513][ T8575] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.353406][ T8575] syzkaller0: entered promiscuous mode
[  104.355755][ T8575] syzkaller0: entered allmulticast mode
[  104.368500][ T8575] tipc: Resetting bearer <eth:syzkaller0>
[  104.373205][ T8574] tipc: Resetting bearer <eth:syzkaller0>
[  104.381588][ T8574] tipc: Disabling bearer <eth:syzkaller0>
[  104.666405][ T8593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1189'.
[  104.955129][ T8599] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1192'.
[  104.978796][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1193'.
[  105.465048][ T8611] openvswitch: netlink: Message has 20 unknown bytes.
[  105.477685][ T8611] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.552109][ T8619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1201'.
[  105.555904][ T8619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1201'.
[  105.568596][ T8623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1203'.
[  105.707135][ T8640] netlink: 'syz.2.1210': attribute type 1 has an invalid length.
[  105.714214][ T8640] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1210'.
[  105.825163][ T8657] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1219'.
[  105.896308][ T8667] syzkaller0: refused to change device tx_queue_len
[  105.906918][ T8669] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  106.772867][ T8702] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  106.775932][  T974] IPVS: starting estimator thread 0...
[  106.882865][ T8704] IPVS: using max 79 ests per chain, 189600 per kthread
[  107.005159][ T8718] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  108.238824][ T8784] tun0: tun_chr_ioctl cmd 1074025675
[  108.240870][ T8784] tun0: persist enabled
[  108.244804][ T8784] tun0: tun_chr_ioctl cmd 1074025675
[  108.246643][ T8784] tun0: persist enabled
[  108.518848][ T8817] vlan3: entered promiscuous mode
[  108.520532][ T8817] macvtap0: entered promiscuous mode
[  109.559849][ T8889] __nla_validate_parse: 14 callbacks suppressed
[  109.559859][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1324'.
[  110.125963][ T8905] netlink: 'syz.1.1332': attribute type 13 has an invalid length.
[  110.128589][ T8905] netlink: 'syz.1.1332': attribute type 17 has an invalid length.
[  110.147944][ T8905] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  110.196482][ T8905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.256878][ T8905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.320195][ T8905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.349404][ T8929] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  110.464563][ T8931] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  110.467507][ T8931] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  110.469869][ T8933] netlink: 'syz.0.1343': attribute type 1 has an invalid length.
[  110.475808][ T8933] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1343'.
[  110.500924][ T8935] netlink: 'syz.0.1344': attribute type 1 has an invalid length.
[  110.524694][ T8935] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address
[  110.529383][ T8935] bond2: (slave vxcan5): Error -95 calling set_mac_address
[  110.575091][ T8937] gretap2: entered promiscuous mode
[  110.579148][ T8937] bond2: (slave gretap2): making interface the new active one
[  110.581820][ T8937] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  110.944960][ T8956] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.949052][ T8956] syzkaller0: entered promiscuous mode
[  110.951320][ T8956] syzkaller0: entered allmulticast mode
[  110.972352][ T8956] tipc: Resetting bearer <eth:syzkaller0>
[  110.979305][ T8955] tipc: Resetting bearer <eth:syzkaller0>
[  110.989705][ T8955] tipc: Disabling bearer <eth:syzkaller0>
[  111.073626][ T8965] netlink: 'syz.1.1356': attribute type 1 has an invalid length.
[  111.077249][ T8965] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1356'.
[  111.080747][ T8965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1356'.
[  111.520014][ T8989] dvmrp8: entered allmulticast mode
[  111.528174][ T8990] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1366'.
[  111.536581][ T8991] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[  111.553005][ T8985] dvmrp8: left allmulticast mode
[  111.702188][ T8999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1370'.
[  111.719318][ T9001] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1371'.
[  111.819402][ T9012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1375'.
[  111.916313][ T9023] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  111.920325][ T9025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1381'.
[  111.979180][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1384'.
[  112.016271][ T9035] netlink: 'syz.0.1386': attribute type 1 has an invalid length.
[  112.020290][ T9035] netlink: 'syz.0.1386': attribute type 11 has an invalid length.
[  112.144942][ T9053] tipc: Enabled bearer <udp:syz0>, priority 10
[  112.246862][ T9069] bridge3: entered promiscuous mode
[  112.464593][ T9098] xt_limit: Overflow, try lower: 604147548/4200216962
[  112.959625][ T9141] IPVS: set_ctl: invalid protocol: 255 10.1.1.0:20002
[  113.153715][  T974] tipc: Node number set to 1689530306
[  113.326152][ T9148] syzkaller1: entered promiscuous mode
[  113.328382][ T9148] syzkaller1: entered allmulticast mode
[  113.333679][ T9148] netlink: 'syz.0.1439': attribute type 15 has an invalid length.
[  113.521615][ T9161] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  113.551493][ T9163] netlink: 'syz.0.1446': attribute type 3 has an invalid length.
[  113.607454][ T9161] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  113.671690][ T9161] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  113.735379][ T9161] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  113.910792][ T5898] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  113.927389][ T5898] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  113.953700][ T5898] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  113.978891][ T5898] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  114.020596][ T9187] netlink: 'syz.1.1456': attribute type 10 has an invalid length.
[  114.615752][ T9247] __nla_validate_parse: 7 callbacks suppressed
[  114.615762][ T9247] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1483'.
[  115.187625][ T9272] netlink: 'syz.0.1493': attribute type 2 has an invalid length.
[  115.192299][ T9272] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1493'.
[  115.640529][ T9281] netlink: 'syz.2.1498': attribute type 3 has an invalid length.
[  115.643538][ T9281] netlink: 'syz.2.1498': attribute type 3 has an invalid length.
[  116.484292][ T9317] nbd0: detected capacity change from 0 to 63
[  116.489192][ T9319] block nbd0: NBD_DISCONNECT
[  116.495130][ T9319] block nbd0: Disconnected due to user request.
[  116.498110][ T9319] block nbd0: shutting down sockets
[  116.498350][ T5846] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  116.506374][ T5846] Buffer I/O error on dev nbd0, logical block 3, async page read
[  116.509836][    C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  116.513525][    C0] Buffer I/O error on dev nbd0, logical block 0, async page read
[  116.516667][    C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  116.520173][    C0] Buffer I/O error on dev nbd0, logical block 1, async page read
[  116.523320][    C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  116.526766][    C0] Buffer I/O error on dev nbd0, logical block 2, async page read
[  116.532581][ T5846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  116.536022][ T5846] Buffer I/O error on dev nbd0, logical block 0, async page read
[  116.539379][ T5846] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  116.544586][ T5846] Buffer I/O error on dev nbd0, logical block 1, async page read
[  116.547782][ T5846] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  116.551067][ T5846] Buffer I/O error on dev nbd0, logical block 2, async page read
[  116.554114][ T5846] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  116.557917][ T5846] Buffer I/O error on dev nbd0, logical block 3, async page read
[  116.561240][ T5846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  116.566314][ T5846] Buffer I/O error on dev nbd0, logical block 0, async page read
[  116.569370][ T5846] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  116.572902][ T5846] Buffer I/O error on dev nbd0, logical block 1, async page read
[  116.578483][ T5846] ldm_validate_partition_table(): Disk read failed.
[  116.584645][ T5846] Dev nbd0: unable to read RDB block 0
[  116.588059][ T5846]  nbd0: unable to read partition table
[  116.595506][ T5846] ldm_validate_partition_table(): Disk read failed.
[  116.599152][ T5846] Dev nbd0: unable to read RDB block 0
[  116.607724][ T5846]  nbd0: unable to read partition table
[  116.746672][ T9337] netlink: 'syz.0.1523': attribute type 1 has an invalid length.
[  116.750450][ T9337] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1523'.
[  116.804245][ T9344] netlink: 'syz.0.1527': attribute type 1 has an invalid length.
[  116.816483][ T9344] 8021q: adding VLAN 0 to HW filter on device bond3
[  117.116860][ T9383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1544'.
[  117.634731][ T9342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  118.027372][ T9394] netlink: zone id is out of range
[  118.029595][ T9394] netlink: zone id is out of range
[  118.031560][ T9394] netlink: zone id is out of range
[  118.037233][ T9394] netlink: zone id is out of range
[  118.047192][ T9394] netlink: zone id is out of range
[  118.049379][ T9394] netlink: zone id is out of range
[  118.051698][ T9394] netlink: zone id is out of range
[  118.056619][ T9394] netlink: zone id is out of range
[  118.058687][ T9394] netlink: zone id is out of range
[  118.060697][ T9394] netlink: zone id is out of range
[  118.188094][ T9399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1548'.
[  118.220167][ T9401] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.225041][ T9401] syzkaller0: entered promiscuous mode
[  118.227288][ T9401] syzkaller0: entered allmulticast mode
[  118.236241][ T9401] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  118.257147][ T9401] tipc: Resetting bearer <eth:syzkaller0>
[  118.264256][ T9400] tipc: Resetting bearer <eth:syzkaller0>
[  118.281679][ T9400] tipc: Disabling bearer <eth:syzkaller0>
[  118.385043][ T9409] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  118.389329][ T9409] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  118.544644][ T9421] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1559'.
[  118.574515][ T9423] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1560'.
[  118.835353][ T9426] syzkaller1: entered promiscuous mode
[  118.837807][ T9426] syzkaller1: entered allmulticast mode
[  118.845554][ T9426] netlink: 'syz.2.1561': attribute type 15 has an invalid length.
[  120.014662][ T9439] syzkaller0: entered promiscuous mode
[  120.017246][ T9439] syzkaller0: entered allmulticast mode
[  120.211233][ T9447] bridge1: the hash_elasticity option has been deprecated and is always 16
[  120.219792][ T9447] bridge1: entered allmulticast mode
[  120.343491][ T9452] netlink: 'syz.2.1572': attribute type 13 has an invalid length.
[  120.346238][ T9452] netlink: 'syz.2.1572': attribute type 17 has an invalid length.
[  120.379162][ T9452] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.387575][ T9452] 8021q: adding VLAN 0 to HW filter on device team0
[  120.463349][ T9449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  120.520659][ T9449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  120.578247][ T9449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  120.681017][ T9471] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1582'.
[  120.985609][ T9489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.092236][ T9452] syz.2.1572 (9452) used greatest stack depth: 19592 bytes left
[  121.205646][ T9499] netlink: 'syz.2.1592': attribute type 13 has an invalid length.
[  121.208656][ T9499] netlink: 'syz.2.1592': attribute type 17 has an invalid length.
[  121.293105][ T5886] Bluetooth: hci2: command 0x040f tx timeout
[  121.320759][ T9499] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1592'.
[  121.325889][ T9499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.381592][ T9499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.438065][ T9499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.818921][ T9519] netlink: 'syz.0.1600': attribute type 1 has an invalid length.
[  121.821722][ T9519] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1600'.
[  121.982343][ T9527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1604'.
[  122.015132][ T9527] netlink: 23932 bytes leftover after parsing attributes in process `syz.2.1604'.
[  122.050217][ T9531] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1606'.
[  122.609545][ T9536] netlink: 'syz.1.1608': attribute type 1 has an invalid length.
[  122.613940][ T9536] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1608'.
[  122.617893][ T9536] netlink: 'syz.1.1608': attribute type 2 has an invalid length.
[  122.621864][ T9536] netlink: 'syz.1.1608': attribute type 1 has an invalid length.
[  122.678202][ T9538] bridge0: port 1(gretap0) entered blocking state
[  122.680555][ T9538] bridge0: port 1(gretap0) entered disabled state
[  122.684447][ T9538] gretap0: entered allmulticast mode
[  122.687896][ T9538] gretap0: entered promiscuous mode
[  122.690754][ T9538] bridge0: port 1(gretap0) entered blocking state
[  122.692933][ T9538] bridge0: port 1(gretap0) entered forwarding state
[  122.907371][ T9542] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.911021][ T9542] syzkaller0: entered promiscuous mode
[  122.915204][ T9542] syzkaller0: entered allmulticast mode
[  122.936109][ T9542] tipc: Resetting bearer <eth:syzkaller0>
[  122.941693][ T9541] tipc: Resetting bearer <eth:syzkaller0>
[  122.952108][ T9541] tipc: Disabling bearer <eth:syzkaller0>
[  123.131902][ T9557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1617'.
[  123.219157][ T9564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1621'.
[  123.267710][ T9567] syzkaller1: entered promiscuous mode
[  123.270310][ T9567] syzkaller1: entered allmulticast mode
[  123.404437][ T9576] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  123.487912][ T9576] batadv_slave_0: entered promiscuous mode
[  123.493494][ T9576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1626'.
[  123.842076][ T9615] bond0: entered promiscuous mode
[  123.850649][ T9615] batadv0: entered promiscuous mode
[  123.858131][ T9615] debugfs: 'hsr1' already exists in 'hsr'
[  123.861040][ T9615] Cannot create hsr debugfs directory
[  123.867295][ T9615] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  123.873004][ T9615] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  123.877401][ T9615] hsr1: entered allmulticast mode
[  123.879637][ T9615] bond0: entered allmulticast mode
[  123.881924][ T9615] batadv0: entered allmulticast mode
[  123.887063][ T9615] 8021q: adding VLAN 0 to HW filter on device hsr1
[  124.038280][ T9631] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.051684][ T9631] tipc: Resetting bearer <eth:syzkaller0>
[  124.221755][    T9] IPVS: starting estimator thread 0...
[  124.312803][ T9643] IPVS: using max 79 ests per chain, 189600 per kthread
[  124.649809][ T9652] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.652727][ T9652] syzkaller0: entered promiscuous mode
[  124.654464][ T9652] syzkaller0: entered allmulticast mode
[  124.666667][ T9652] tipc: Resetting bearer <eth:syzkaller0>
[  124.670519][ T9651] tipc: Resetting bearer <eth:syzkaller0>
[  124.684164][ T9651] tipc: Disabling bearer <eth:syzkaller0>
[  124.939003][ T9655] netlink: 'syz.1.1659': attribute type 16 has an invalid length.
[  124.941827][ T9655] netlink: 'syz.1.1659': attribute type 17 has an invalid length.
[  124.950103][ T9655] net_ratelimit: 12 callbacks suppressed
[  124.950108][ T9655] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  125.052611][    T9] tipc: Node number set to 482119883
[  125.307309][ T9695] TCP: TCP_TX_DELAY enabled
[  125.630095][ T9705] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  125.632827][ T9705] IPv6: NLM_F_CREATE should be set when creating new route
[  125.927030][ T9710] bond0: entered promiscuous mode
[  125.929646][ T9710] batadv0: entered promiscuous mode
[  125.932207][ T9710] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  125.940043][ T9710] hsr2: entered allmulticast mode
[  125.941792][ T9710] bond0: entered allmulticast mode
[  125.944911][ T9710] batadv0: entered allmulticast mode
[  125.948145][ T9710] 8021q: adding VLAN 0 to HW filter on device hsr2
[  126.526165][ T9736] delete_channel: no stack
[  126.649817][ T9744] netlink: 'syz.2.1694': attribute type 3 has an invalid length.
[  126.654283][ T9744] __nla_validate_parse: 4 callbacks suppressed
[  126.654294][ T9744] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1694'.
[  127.270200][ T9810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1727'.
[  127.275426][ T9810] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  127.278351][ T9810] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.371487][ T9826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1733'.
[  128.487207][ T9856] netlink: 'syz.0.1747': attribute type 3 has an invalid length.
[  128.848888][ T9897] gtp0: entered promiscuous mode
[  129.230908][ T9919] delete_channel: no stack
[  129.529176][ T9948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1786'.
[  129.936257][ T9995] netlink: 'syz.0.1807': attribute type 7 has an invalid length.
[  129.996231][T10002] netlink: 'syz.0.1809': attribute type 58 has an invalid length.
[  130.099090][T10010] netlink: 'syz.2.1813': attribute type 46 has an invalid length.
[  130.225630][T10022] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1823'.
[  130.373560][T10030] syzkaller0: entered promiscuous mode
[  130.375931][T10030] syzkaller0: entered allmulticast mode
[  130.939159][T10053] sctp: [Deprecated]: syz.1.1832 (pid 10053) Use of int in max_burst socket option.
[  130.939159][T10053] Use struct sctp_assoc_value instead
[  131.018382][T10059] netlink: 'syz.1.1834': attribute type 7 has an invalid length.
[  131.021047][T10059] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1834'.
[  131.455113][T10116] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1862'.
[  131.458153][T10116] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1862'.
[  131.661023][T10144] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1875'.
[  132.322090][T10170] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1885'.
[  132.367446][T10174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1887'.
[  132.370636][T10174] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.496545][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.729823][T10202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1896'.
[  132.741294][T10202] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1896'.
[  132.895695][T10219] netlink: 'syz.0.1898': attribute type 4 has an invalid length.
[  132.975761][T10231] netlink: 'syz.0.1902': attribute type 2 has an invalid length.
[  133.269688][T10279] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  133.946091][T10343] netlink: 47 bytes leftover after parsing attributes in process `syz.0.1930'.
[  134.063879][T10354] syzkaller1: entered promiscuous mode
[  134.066559][T10354] syzkaller1: entered allmulticast mode
[  135.323834][T10399] C: renamed from team_slave_0
[  135.326781][T10399] netlink: 'syz.1.1954': attribute type 1 has an invalid length.
[  135.329440][T10399] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1954'.
[  135.333410][T10399] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  135.975856][T10439] netlink: 'syz.0.1972': attribute type 21 has an invalid length.
[  135.984613][T10439] netlink: 'syz.0.1972': attribute type 22 has an invalid length.
[  135.990650][T10439] netlink: 'syz.0.1972': attribute type 23 has an invalid length.
[  136.000350][T10439] netlink: 'syz.0.1972': attribute type 25 has an invalid length.
[  136.004239][T10439] netlink: 'syz.0.1972': attribute type 26 has an invalid length.
[  136.007524][T10439] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1972'.
[  136.451154][T10467] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1986'.
[  136.558906][T10476] tap0: tun_chr_ioctl cmd 1074025677
[  136.560910][T10476] tap0: linktype set to 0
[  136.711171][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1990'.
[  136.810386][T10491] netlink: 'syz.1.1994': attribute type 21 has an invalid length.
[  137.029895][T10507] Bluetooth: MGMT ver 1.23
[  137.199047][T10519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2007'.
[  137.319099][T10523] bridge0: port 2(erspan0) entered blocking state
[  137.321439][T10523] bridge0: port 2(erspan0) entered disabled state
[  137.325079][T10523] erspan0: entered allmulticast mode
[  137.329181][T10523] erspan0: left allmulticast mode
[  137.941051][T10553] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.299607][T10576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2029'.
[  138.329556][T10584] sctp: [Deprecated]: syz.0.2033 (pid 10584) Use of struct sctp_assoc_value in delayed_ack socket option.
[  138.329556][T10584] Use struct sctp_sack_info instead
[  138.364220][T10588] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2034'.
[  138.634951][T10614] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  138.795198][T10631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2048'.
[  138.907962][T10643] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2052'.
[  139.030176][T10656] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.065821][T10660] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  139.068681][T10660] team0: Device macvtap1 is already an upper device of the team interface
[  139.260392][T10675] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2059'.
[  139.281826][T10675] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2059'.
[  139.289099][T10675] netlink: 'syz.2.2059': attribute type 6 has an invalid length.
[  139.292789][T10675] netlink: 'syz.2.2059': attribute type 4 has an invalid length.
[  139.668129][T10710] netlink: 312 bytes leftover after parsing attributes in process `syz.2.2069'.
[  140.274838][T10772] sctp: [Deprecated]: syz.2.2092 (pid 10772) Use of struct sctp_assoc_value in delayed_ack socket option.
[  140.274838][T10772] Use struct sctp_sack_info instead
[  140.299132][T10776] netlink: zone id is out of range
[  140.301371][T10776] netlink: zone id is out of range
[  140.310538][T10776] netlink: zone id is out of range
[  140.312298][T10776] netlink: zone id is out of range
[  140.316021][T10776] netlink: zone id is out of range
[  140.317801][T10776] netlink: zone id is out of range
[  140.319896][T10776] netlink: zone id is out of range
[  140.321723][T10776] netlink: zone id is out of range
[  140.519107][T10798] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2107'.
[  140.705444][T10820] netlink: 'syz.0.2116': attribute type 2 has an invalid length.
[  140.736552][T10826] netlink: 'syz.1.2119': attribute type 4 has an invalid length.
[  140.750685][T10826] netlink: 'syz.1.2119': attribute type 4 has an invalid length.
[  140.861775][T10839] netlink: 'syz.0.2125': attribute type 1 has an invalid length.
[  140.987422][T10845] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7)
[  141.406047][T10895] Unsupported ieee802154 address type: 0
[  141.727366][T10929] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2169'.
[  141.896955][T10950] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2179'.
[  143.108673][T11001] netlink: 'syz.1.2203': attribute type 1 has an invalid length.
[  143.151407][T11007] sctp: [Deprecated]: syz.2.2207 (pid 11007) Use of struct sctp_assoc_value in delayed_ack socket option.
[  143.151407][T11007] Use struct sctp_sack_info instead
[  143.238327][T11019] macsec1: entered promiscuous mode
[  143.240542][T11019] macsec1: entered allmulticast mode
[  143.243675][T11019] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  143.413783][T11040] __nla_validate_parse: 1 callbacks suppressed
[  143.413793][T11040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2222'.
[  144.051488][T11086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2243'.
[  144.165479][T11098] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2247'.
[  144.249484][T11100] bond2: (slave gretap2): Releasing active interface
[  144.269219][T11099] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2248'.
[  144.498769][T11106] netlink: 'syz.2.2251': attribute type 12 has an invalid length.
[  144.750714][T11115] netlink: 'syz.2.2254': attribute type 4 has an invalid length.
[  145.240201][T11128] netlink: 'syz.1.2260': attribute type 2 has an invalid length.
[  145.255706][T11128] : entered promiscuous mode
[  145.371658][T11144] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2268'.
[  145.378170][T11144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2268'.
[  145.381134][T11144] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2268'.
[  145.420583][T11146] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2269'.
[  145.423886][T11146] netlink: 'syz.0.2269': attribute type 4 has an invalid length.
[  145.530156][T11166] netlink: 'syz.0.2278': attribute type 3 has an invalid length.
[  145.538553][T11166] netlink: 'syz.0.2278': attribute type 3 has an invalid length.
[  145.546359][T11166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2278'.
[  145.636590][T11182] net_ratelimit: 17 callbacks suppressed
[  145.636600][T11182] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.648867][T11184] netlink: 'syz.1.2287': attribute type 3 has an invalid length.
[  145.706690][T11192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2292'.
[  145.709631][T11192] nbd: couldn't find a device at index 65546
[  145.842623][T11216] veth0_to_bridge: entered promiscuous mode
[  145.847086][T11215] veth0_to_bridge: left promiscuous mode
[  146.045631][T11220] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  146.048803][T11220] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  147.515799][T11322] 8021q: adding VLAN 0 to HW filter on device bond2
[  147.518416][T11322] bridge0: port 1(bond2) entered blocking state
[  147.520644][T11322] bridge0: port 1(bond2) entered disabled state
[  147.524047][T11322] bond2: entered allmulticast mode
[  147.527040][T11322] bond2: entered promiscuous mode
[  147.529411][T11322] bridge0: port 1(bond2) entered blocking state
[  147.531725][T11322] bridge0: port 1(bond2) entered forwarding state
[  147.536125][ T1088] bridge0: port 1(bond2) entered disabled state
[  147.715154][T11342] netlink: 'syz.0.2360': attribute type 2 has an invalid length.
[  147.722266][T11342] : entered promiscuous mode
[  148.453979][T11368] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.596937][T11376] __nla_validate_parse: 8 callbacks suppressed
[  148.596952][T11376] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2376'.
[  148.741417][T11392] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  148.862665][T11387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  148.866142][T11401] netlink: 'syz.1.2387': attribute type 1 has an invalid length.
[  149.120754][T11417] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  149.127599][T11417] gretap0: left allmulticast mode
[  149.129532][T11417] gretap0: left promiscuous mode
[  149.131303][T11417] bridge0: port 1(gretap0) entered disabled state
[  149.150420][T11417] bond1: (slave vlan2): Releasing active interface
[  149.196442][T11417] netlink: 'syz.1.2394': attribute type 10 has an invalid length.
[  149.199747][T11417] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  149.203510][T11417] bond0: (slave wlan1): refused to change device type
[  149.208874][T11417] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  149.214987][T11417] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  149.775776][T11439] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2406'.
[  149.814165][T11441] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.176712][T11468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2417'.
[  150.265485][T11463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2417'.
[  150.591367][ T7083] IPVS: starting estimator thread 0...
[  150.611994][T11503] netlink: 'syz.0.2434': attribute type 4 has an invalid length.
[  150.617684][T11503] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.2434'.
[  150.682905][T11501] IPVS: using max 50 ests per chain, 120000 per kthread
[  150.720738][T11512] netlink: 'syz.0.2437': attribute type 1 has an invalid length.
[  150.756462][T11512] 8021q: adding VLAN 0 to HW filter on device bond4
[  150.777826][T11512] bond4: (slave gretap3): making interface the new active one
[  150.782208][T11512] bond4: (slave gretap3): Enslaving as an active interface with an up link
[  150.846015][T11521] netlink: 'syz.1.2441': attribute type 178 has an invalid length.
[  151.397565][T11528] netlink: 'syz.2.2444': attribute type 4 has an invalid length.
[  152.596701][T11596] geneve2: entered promiscuous mode
[  152.599014][T11596] geneve2: entered allmulticast mode
[  152.602405][ T5898] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 35913 - 0
[  152.610046][ T5898] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 45533 - 0
[  152.613939][ T5898] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 35913 - 0
[  152.617045][ T5898] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 45533 - 0
[  152.622159][ T5898] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 35913 - 0
[  152.627080][ T5898] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 45533 - 0
[  152.631537][ T5898] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 35913 - 0
[  152.635177][ T5898] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 45533 - 0
[  153.057772][T11628] netlink: 'syz.0.2485': attribute type 35 has an invalid length.
[  153.208161][T11643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2492'.
[  153.379867][T11660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2500'.
[  153.383279][T11660] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2500'.
[  153.779487][   T55] Bluetooth: hci2: link tx timeout
[  153.781598][   T55] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  153.785742][   T55] Bluetooth: hci2: link tx timeout
[  153.787632][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  153.808119][T11686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2511'.
[  153.891330][T11692] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  153.921174][T11696] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.925612][T11696] syzkaller0: entered promiscuous mode
[  153.927545][T11696] syzkaller0: entered allmulticast mode
[  153.946505][T11696] tipc: Resetting bearer <eth:syzkaller0>
[  153.951783][T11695] tipc: Resetting bearer <eth:syzkaller0>
[  153.966672][T11695] tipc: Disabling bearer <eth:syzkaller0>
[  154.129546][T11711] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2523'.
[  154.168833][T11713] netlink: 'syz.1.2524': attribute type 1 has an invalid length.
[  154.176986][T11713] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2524'.
[  154.180154][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2524'.
[  154.237639][T11721] bridge0: port 1(veth0_to_bridge) entered blocking state
[  154.240100][T11721] bridge0: port 1(veth0_to_bridge) entered disabled state
[  154.245498][T11721] veth0_to_bridge: entered allmulticast mode
[  154.249176][T11721] veth0_to_bridge: entered promiscuous mode
[  154.256170][T11721] bridge0: port 1(veth0_to_bridge) entered blocking state
[  154.258682][T11721] bridge0: port 1(veth0_to_bridge) entered forwarding state
[  154.283068][T11723] 8021q: adding VLAN 0 to HW filter on device bond3
[  154.422357][T11746] netlink: 'syz.0.2539': attribute type 21 has an invalid length.
[  154.425886][T11746] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2539'.
[  154.532054][T11760] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2545'.
[  154.543641][T11763] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2546'.
[  155.483613][T11850] 8021q: adding VLAN 0 to HW filter on device batadv1
[  155.487972][T11850] team0: Port device batadv1 added
[  155.645958][T11858] netlink: 'syz.2.2592': attribute type 2 has an invalid length.
[  155.648609][T11858] netlink: 119 bytes leftover after parsing attributes in process `syz.2.2592'.
[  155.800772][T11868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2597'.
[  155.852676][   T55] Bluetooth: hci2: command 0x040f tx timeout
[  155.898766][T11875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2600'.
[  155.931687][T11879] netlink: 'syz.1.2601': attribute type 1 has an invalid length.
[  156.355741][T11918] sctp: [Deprecated]: syz.1.2619 (pid 11918) Use of struct sctp_assoc_value in delayed_ack socket option.
[  156.355741][T11918] Use struct sctp_sack_info instead
[  156.444389][T11929] tc_dump_action: action bad kind
[  156.621445][T11946] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  156.988517][T11985] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  157.168296][T11998] veth1: entered promiscuous mode
[  157.932781][   T55] Bluetooth: hci2: command 0x040f tx timeout
[  157.978485][T12042] gretap0: entered promiscuous mode
[  157.986182][T12042] 0{X: renamed from gretap0
[  157.990011][T12042] 0{X: left promiscuous mode
[  157.991797][T12042] 0{X: entered allmulticast mode
[  157.995352][T12042] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  158.177780][T12056] nbd: socks must be embedded in a SOCK_ITEM attr
[  158.187563][T11610] block nbd64: NBD_DISCONNECT
[  158.237415][T12064] netlink: 'syz.2.2684': attribute type 5 has an invalid length.
[  158.748462][T12098] pim6reg1: entered promiscuous mode
[  158.750206][T12098] pim6reg1: entered allmulticast mode
[  159.161400][T12130] tipc: Enabled bearer <eth:team0>, priority 0
[  159.227595][T12134] netlink: 'syz.2.2717': attribute type 11 has an invalid length.
[  159.512861][T12146] nbd2: detected capacity change from 0 to 63
[  159.517482][T12147] block nbd2: NBD_DISCONNECT
[  159.520138][T12147] block nbd2: Disconnected due to user request.
[  159.524366][T12147] block nbd2: shutting down sockets
[  159.533209][    C0] blk_print_req_error: 138 callbacks suppressed
[  159.533223][    C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  159.539988][    C0] buffer_io_error: 138 callbacks suppressed
[  159.539998][    C0] Buffer I/O error on dev nbd2, logical block 0, async page read
[  159.545990][    C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  159.549818][    C0] Buffer I/O error on dev nbd2, logical block 1, async page read
[  159.553279][    C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  159.556999][    C0] Buffer I/O error on dev nbd2, logical block 2, async page read
[  159.560382][    C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  159.564128][    C0] Buffer I/O error on dev nbd2, logical block 3, async page read
[  159.567446][T11906] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  159.571187][T11906] Buffer I/O error on dev nbd2, logical block 0, async page read
[  159.578362][T11906] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  159.582307][T11906] Buffer I/O error on dev nbd2, logical block 1, async page read
[  159.588418][T11906] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  159.592850][T11906] Buffer I/O error on dev nbd2, logical block 2, async page read
[  159.596175][T11906] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  159.599878][T11906] Buffer I/O error on dev nbd2, logical block 3, async page read
[  159.605546][T11906] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  159.609266][T11906] Buffer I/O error on dev nbd2, logical block 0, async page read
[  159.614173][T11906] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  159.617904][T11906] Buffer I/O error on dev nbd2, logical block 1, async page read
[  159.623327][T11906] ldm_validate_partition_table(): Disk read failed.
[  159.627555][T11906] Dev nbd2: unable to read RDB block 0
[  159.631304][T11906]  nbd2: unable to read partition table
[  159.654390][T11906] ldm_validate_partition_table(): Disk read failed.
[  159.658487][T11906] Dev nbd2: unable to read RDB block 0
[  159.662178][T11906]  nbd2: unable to read partition table
[  159.729811][T12156] netlink: 'syz.0.2727': attribute type 1 has an invalid length.
[  159.735719][T12156] __nla_validate_parse: 19 callbacks suppressed
[  159.735732][T12156] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.2727'.
[  159.778877][T12161] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2730'.
[  159.847544][T12169] netlink: 'syz.2.2734': attribute type 4 has an invalid length.
[  159.870997][T12173] @: renamed from bond_slave_0
[  160.023070][T12195] delete_channel: no stack
[  160.086913][T12203] bridge0: port 1(vlan2) entered blocking state
[  160.089289][T12203] bridge0: port 1(vlan2) entered disabled state
[  160.091793][T12203] vlan2: entered allmulticast mode
[  160.099140][T12203] vlan2: entered promiscuous mode
[  161.009493][T12221] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.104630][T12233] netlink: 'syz.1.2762': attribute type 1 has an invalid length.
[  161.251320][T12244] netlink: 'syz.1.2767': attribute type 31 has an invalid length.
[  161.299516][T12244] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2767'.
[  161.469574][T12258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2770'.
[  161.510037][T12257] vlan3: entered promiscuous mode
[  161.570764][T12267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2773'.
[  161.591659][T12265] sch_tbf: burst 0 is lower than device bridge5 mtu (1514) !
[  161.857750][  T974] IPVS: starting estimator thread 0...
[  161.942561][T12283] IPVS: using max 43 ests per chain, 103200 per kthread
[  162.120732][T12285] 0{X: left allmulticast mode
[  162.142356][T12285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  162.180587][T12285] veth0_to_team: entered allmulticast mode
[  162.276954][ T5913] IPVS: stop unused estimator thread 0...
[  162.370334][T12292] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2783'.
[  162.403985][T12295] netlink: 'syz.2.2785': attribute type 1 has an invalid length.
[  162.406983][T12295] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2785'.
[  162.416961][T12295] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2785'.
[  162.460282][T12299] batadv_slave_1: entered promiscuous mode
[  162.723711][T12321] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2797'.
[  163.911091][T12374] lo: entered allmulticast mode
[  163.926910][T12374] dvmrp1: entered allmulticast mode
[  163.936938][T12373] lo: left allmulticast mode
[  164.190076][T12401] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  164.195768][T12402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2832'.
[  165.197015][T12485] netlink: 'syz.1.2866': attribute type 2 has an invalid length.
[  165.200768][T12485] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  165.384530][T12498] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  165.638182][T12503] infiniband syz1: set down
[  165.641737][T12503] infiniband syz1: added veth1_to_bond
[  165.692749][T12503] RDS/IB: syz1: added
[  165.694936][T12503] smc: adding ib device syz1 with port count 1
[  165.708019][T12503] smc:    ib device syz1 port 1 has pnetid SYZ2 (user defined)
[  166.308504][T12519] tap0: tun_chr_ioctl cmd 35108
[  166.527170][T12539] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.622043][T12547] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2893'.
[  166.641670][T12547] bond4: entered promiscuous mode
[  166.646334][T12547] 8021q: adding VLAN 0 to HW filter on device bond4
[  166.730468][T12547] bond4 (unregistering): Released all slaves
[  166.765194][T12557] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2897'.
[  166.777155][T12554] syzkaller0: entered promiscuous mode
[  166.779008][T12554] syzkaller0: entered allmulticast mode
[  166.781996][T12557] 0{X: entered promiscuous mode
[  166.785864][T12557] 0{X: entered allmulticast mode
[  167.707497][T12567] netlink: 'syz.1.2902': attribute type 29 has an invalid length.
[  167.721594][T12568] netlink: 'syz.1.2902': attribute type 29 has an invalid length.
[  167.935180][T12590] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2914'.
[  168.131060][T12613] netlink: 'syz.1.2923': attribute type 1 has an invalid length.
[  168.196252][T12613] bond4: (slave vti0): The slave device specified does not support setting the MAC address
[  168.196613][T12619] netlink: 'syz.0.2926': attribute type 1 has an invalid length.
[  168.202377][T12613] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  168.210930][T12620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2925'.
[  168.213079][T12613] bond4: (slave vti0): making interface the new active one
[  168.216787][T12613] bond4: (slave vti0): Enslaving as an active interface with an up link
[  168.219765][T12620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2925'.
[  168.223350][T12620] netlink: 'syz.2.2925': attribute type 18 has an invalid length.
[  168.378577][T12630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2930'.
[  168.596398][T12652] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2940'.
[  168.681410][T12668] macsec2: entered allmulticast mode
[  168.686828][T12668] macsec0: entered allmulticast mode
[  168.689033][T12668] veth1_macvtap: entered allmulticast mode
[  168.720040][T12673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2949'.
[  168.771737][T12678] netlink: 'syz.2.2952': attribute type 4 has an invalid length.
[  168.775601][T12678] netlink: 'syz.2.2952': attribute type 4 has an invalid length.
[  168.962760][T12692] nbd2: detected capacity change from 0 to 63
[  168.966272][T12695] block nbd2: NBD_DISCONNECT
[  168.968506][T12695] block nbd2: Disconnected due to user request.
[  168.970687][T12695] block nbd2: shutting down sockets
[  168.979668][    C1] blk_print_req_error: 138 callbacks suppressed
[  168.979677][    C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  168.984977][    C1] buffer_io_error: 138 callbacks suppressed
[  168.984983][    C1] Buffer I/O error on dev nbd2, logical block 0, async page read
[  168.989351][    C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  168.992219][    C1] Buffer I/O error on dev nbd2, logical block 1, async page read
[  168.994740][    C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  168.997516][T12692] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2958'.
[  168.997539][T12692] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  169.000386][    C1] Buffer I/O error on dev nbd2, logical block 2, async page read
[  169.000415][    C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  169.000423][    C1] Buffer I/O error on dev nbd2, logical block 3, async page read
[  169.001597][T11906] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  169.016699][T11906] Buffer I/O error on dev nbd2, logical block 0, async page read
[  169.019289][T11906] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  169.023068][T11906] Buffer I/O error on dev nbd2, logical block 1, async page read
[  169.027278][T11906] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  169.031485][T11906] Buffer I/O error on dev nbd2, logical block 2, async page read
[  169.036407][T11906] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  169.044583][T11906] Buffer I/O error on dev nbd2, logical block 3, async page read
[  169.047905][T11906] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  169.053727][T11906] Buffer I/O error on dev nbd2, logical block 0, async page read
[  169.057186][T11906] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  169.060960][T11906] Buffer I/O error on dev nbd2, logical block 1, async page read
[  169.064402][T12703] bond2: left allmulticast mode
[  169.064414][T12703] bond2: left promiscuous mode
[  169.064506][T12703] bridge0: port 1(bond2) entered disabled state
[  169.078182][T11906] ldm_validate_partition_table(): Disk read failed.
[  169.081079][T11906] Dev nbd2: unable to read RDB block 0
[  169.084445][T12703] team0: Port device batadv1 removed
[  169.085530][T11906]  nbd2: unable to read partition table
[  169.094336][T11906] ldm_validate_partition_table(): Disk read failed.
[  169.097527][T11906] Dev nbd2: unable to read RDB block 0
[  169.099558][ T3003] tipc: Resetting bearer <eth:team0>
[  169.100137][T11906]  nbd2: unable to read partition table
[  169.104151][T12703] team0: Unable to change to the same mode the team is in
[  169.110070][T12703] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  169.124233][T12705] !: renamed from dummy0
[  169.191149][T12714] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  169.325978][T12727] unknown channel width for channel at 909000KHz?
[  169.334633][T12727] unknown channel width for channel at 909000KHz?
[  169.337294][T12727] unknown channel width for channel at 909000KHz?
[  169.402833][T12734] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2972'.
[  169.672238][T12756] netlink: 'syz.1.2979': attribute type 12 has an invalid length.
[  170.399093][T12800] vcan0: tx drop: invalid sa for name 0x0000000000000080
[  170.858623][T12824] bond0 (unregistering): left promiscuous mode
[  170.861169][T12824] bond0 (unregistering): Released all slaves
[  170.999096][T12829] netlink: 'syz.1.3006': attribute type 7 has an invalid length.
[  171.003316][T12829] netlink: 'syz.1.3006': attribute type 8 has an invalid length.
[  171.143069][T12835] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  171.630958][T12865] syzkaller0: left promiscuous mode
[  171.635936][T12865] syzkaller0: left allmulticast mode
[  171.645650][T12867] __nla_validate_parse: 12 callbacks suppressed
[  171.645664][T12867] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3024'.
[  172.986481][T12929] validate_nla: 2 callbacks suppressed
[  172.986602][T12929] netlink: 'syz.2.3050': attribute type 10 has an invalid length.
[  173.005004][T12929] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  173.020174][T12929] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3050'.
[  173.035762][T12927] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  173.062870][T12929] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3050'.
[  173.090068][T12929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  173.130274][T12929] netlink: 'syz.2.3050': attribute type 12 has an invalid length.
[  173.136396][T12929] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3050'.
[  173.678067][T10301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.681828][T10301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.712288][T12969] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.717052][T12968] tipc: Disabling bearer <eth:syzkaller0>
[  173.743987][T12973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3072'.
[  173.812925][T12979] netlink: 'syz.2.3075': attribute type 10 has an invalid length.
[  174.085654][T13006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3086'.
[  174.507742][T12964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  174.849875][T13044] netlink: 'syz.1.3103': attribute type 1 has an invalid length.
[  174.858614][T13044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3103'.
[  174.863495][T13044] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  174.866788][T13044] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.135564][T13052] netlink: 'syz.0.3107': attribute type 1 has an invalid length.
[  175.138961][T13052] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3107'.
[  175.143873][T13052] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3107'.
[  175.309452][T13069] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  175.570008][T13097] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  175.587792][T13097] tipc: Resetting bearer <eth:team0>
[  175.611473][T13097] bond0: (slave wlan1): Releasing backup interface
[  175.655471][T13097] netlink: 'syz.2.3129': attribute type 10 has an invalid length.
[  175.658834][T13097] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  175.687678][T13097] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  175.707307][T13097] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  175.711140][T13097] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  175.987772][T13133] erspan1: entered promiscuous mode
[  175.989576][T13133] erspan1: entered allmulticast mode
[  176.135315][T13146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  176.141550][T13146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  176.167833][T13156] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3156'.
[  176.175484][T13146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  176.182970][T13146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  178.005085][T13284] __nla_validate_parse: 2 callbacks suppressed
[  178.005095][T13284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3208'.
[  178.333401][T13294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3210'.
[  178.368023][T13309] syzkaller1: entered promiscuous mode
[  178.370500][T13309] syzkaller1: entered allmulticast mode
[  178.704987][T13321] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.3223'.
[  179.067443][T13349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3238'.
[  179.115510][T13349] 8021q: adding VLAN 0 to HW filter on device bond5
[  179.171500][T13349] bond4: (slave gretap3): Releasing active interface
[  179.179285][T13349] vlan2: left allmulticast mode
[  179.180904][T13349] vlan2: left promiscuous mode
[  179.184890][T13349] bridge0: port 1(vlan2) entered disabled state
[  179.401948][T13382] IPVS: Scheduler module ip_vs_sip not found
[  179.408146][T13382] IPVS: length: 8 != 446622349272
[  179.441216][T13387] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  179.531805][T13397] IPVS: Error connecting to the multicast addr
[  179.756798][T13417] netlink: 'syz.1.3267': attribute type 15 has an invalid length.
[  179.759989][T13417] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3267'.
[  180.811141][T13488] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3297'.
[  180.816981][T13488] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3297'.
[  180.820394][T13488] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3297'.
[  181.035310][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  181.040820][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  181.051411][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  181.062816][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  181.133786][T13511] bridge0: port 1(veth0_to_bridge) entered disabled state
[  181.253643][T13520] netlink: 'syz.0.3312': attribute type 4 has an invalid length.
[  181.255842][T13511] veth1_macvtap: left allmulticast mode
[  181.308835][T13521] netlink: 'syz.0.3312': attribute type 4 has an invalid length.
[  181.345578][T13511] macsec0: left allmulticast mode
[  181.362218][T12368] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  181.373143][T12368] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.379118][T12368] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  181.388263][T12368] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.400274][T12368] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  181.404808][T12368] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.410314][T12368] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  181.419451][T12368] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.535943][T13527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  181.625855][T13531] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3314'.
[  181.849215][T13550] bridge6: entered allmulticast mode
[  181.875124][T13552] netlink: 'syz.0.3323': attribute type 1 has an invalid length.
[  181.901597][T13552] 8021q: adding VLAN 0 to HW filter on device bond6
[  182.160239][T13571] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.165258][T13571] syzkaller0: entered promiscuous mode
[  182.167204][T13571] syzkaller0: entered allmulticast mode
[  182.215343][T13571] tipc: Resetting bearer <eth:syzkaller0>
[  182.220373][T13570] tipc: Resetting bearer <eth:syzkaller0>
[  182.243294][T13570] tipc: Disabling bearer <eth:syzkaller0>
[  182.437386][T13587] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  182.485342][T13591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3339'.
[  182.836586][T13622] syzkaller0: entered promiscuous mode
[  182.838731][T13622] syzkaller0: entered allmulticast mode
[  182.963110][T13635] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  182.966669][T13635] openvswitch: netlink: Message has 1 unknown bytes.
[  184.021461][T13666] __nla_validate_parse: 2 callbacks suppressed
[  184.021471][T13666] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3374'.
[  184.109284][T13676] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3379'.
[  184.826549][T13728] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3402'.
[  185.102258][T13750] netlink: 'syz.0.3413': attribute type 21 has an invalid length.
[  185.112703][T13750] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3413'.
[  185.117243][T13750] netlink: 'syz.0.3413': attribute type 4 has an invalid length.
[  185.120588][T13750] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3413'.
[  185.161474][T13753] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3414'.
[  185.591853][T13815] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  185.595544][T13815] syzkaller0: entered promiscuous mode
[  185.597387][T13815] syzkaller0: entered allmulticast mode
[  185.608992][T13815] tipc: Resetting bearer <eth:syzkaller0>
[  185.613625][T13813] tipc: Resetting bearer <eth:syzkaller0>
[  185.623725][T13813] tipc: Disabling bearer <eth:syzkaller0>
[  185.664040][T13823] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3447'.
[  185.667345][T13823] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3447'.
[  185.704060][T13827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3449'.
[  185.773430][ T5891] Bluetooth: hci1: command 0x0406 tx timeout
[  186.252950][ T5886] Bluetooth: hci2: command 0x040f tx timeout
[  186.355929][T13873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3469'.
[  186.416654][T13882] netlink: 'syz.1.3473': attribute type 1 has an invalid length.
[  187.049353][T13925] veth0_to_bridge: left allmulticast mode
[  187.052302][T13925] veth0_to_bridge: left promiscuous mode
[  187.056774][T13925] bridge0: port 1(veth0_to_bridge) entered disabled state
[  187.064080][T13925] bond4: (slave vti0): Releasing backup interface
[  187.530335][T13965] syzkaller0: Caught tx_queue_len zero misconfig
[  187.539866][T13965] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  187.669464][T13975] netlink: 'syz.2.3512': attribute type 13 has an invalid length.
[  187.675308][T13975] tipc: Resetting bearer <eth:team0>
[  187.723741][ T5898] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[  187.728610][ T5898] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[  187.737342][ T5898] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[  187.740351][ T5898] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[  188.106921][T14019] netlink: 'syz.2.3533': attribute type 2 has an invalid length.
[  188.195387][T14025] netlink: 'syz.2.3536': attribute type 3 has an invalid length.
[  188.273615][T14031] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  188.301713][T14033] sit3: entered promiscuous mode
[  188.926585][T14088] team1: entered promiscuous mode
[  188.928298][T14088] team1: entered allmulticast mode
[  189.107195][T14106] __nla_validate_parse: 7 callbacks suppressed
[  189.107205][T14106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3577'.
[  189.116977][T14106] pim6reg: entered allmulticast mode
[  189.128676][T14106] pim6reg: left allmulticast mode
[  189.529267][T14157] veth1_to_team: entered allmulticast mode
[  189.531259][T14157] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  189.761974][T14180] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  189.765302][T14180] syzkaller0: entered promiscuous mode
[  189.767073][T14180] syzkaller0: entered allmulticast mode
[  189.791370][T14180] tipc: Resetting bearer <eth:syzkaller0>
[  189.806360][T14179] tipc: Resetting bearer <eth:syzkaller0>
[  189.842237][T14179] tipc: Disabling bearer <eth:syzkaller0>
[  189.857894][T14190] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  189.913606][T14195] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  189.921337][T14198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3612'.
[  190.160244][T14215] pim6reg1: entered promiscuous mode
[  190.162012][T14215] pim6reg1: entered allmulticast mode
[  190.185926][T14225] sctp: [Deprecated]: syz.1.3622 (pid 14225) Use of int in max_burst socket option.
[  190.185926][T14225] Use struct sctp_assoc_value instead
[  190.336664][T14244] netlink: 'syz.1.3628': attribute type 4 has an invalid length.
[  190.393592][T14250] syzkaller1: entered allmulticast mode
[  190.398021][T14250] syzkaller1: left allmulticast mode
[  190.404535][T14252] netlink: 'syz.2.3631': attribute type 1 has an invalid length.
[  190.420268][T14252] 8021q: adding VLAN 0 to HW filter on device bond4
[  190.441348][T14252] bond4: (slave bridge7): making interface the new active one
[  190.445968][T14252] bond4: (slave bridge7): Enslaving as an active interface with an up link
[  190.478598][T14252] bond4: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  191.645210][T14304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3650'.
[  191.745930][T14312] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3654'.
[  191.749843][T14312] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3654'.
[  191.761337][T14314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3655'.
[  192.332184][T14349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3671'.
[  192.337456][ T5886] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  192.405062][T14353] netlink: 'syz.1.3673': attribute type 7 has an invalid length.
[  192.764429][T14374] syzkaller1: entered promiscuous mode
[  192.766640][T14374] syzkaller1: entered allmulticast mode
[  193.740407][T14394] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3689'.
[  193.778826][T14396] netlink: 'syz.0.3690': attribute type 1 has an invalid length.
[  193.935019][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.510773][T14415] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3696'.
[  195.785860][T14453] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.790669][T14453] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  195.795188][T14453] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  195.802992][T14453] tipc: Resetting bearer <eth:syzkaller0>
[  196.238225][T14507] tun1: tun_chr_ioctl cmd 2148553947
[  196.816056][T14539] syzkaller1: entered allmulticast mode
[  197.285576][T14553] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  197.316976][T14557] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3758'.
[  197.363754][T14563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3760'.
[  197.450180][T14565] ip6gre2: entered allmulticast mode
[  197.506869][T14569] sock: sock_timestamping_bind_phc: sock not bind to device
[  197.630436][T14582] netlink: 'syz.0.3769': attribute type 10 has an invalid length.
[  197.636769][T14582] 8021q: adding VLAN 0 to HW filter on device team0
[  197.639822][T14582] team0: entered promiscuous mode
[  197.641689][T14582] team0: entered allmulticast mode
[  197.644347][T14582] bond0: (slave team0): Enslaving as an active interface with an up link
[  197.665507][T14584] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3770'.
[  197.728682][T14592] netpci0: tun_chr_ioctl cmd 1074025681
[  197.849754][T14607] netlink: 'syz.2.3780': attribute type 12 has an invalid length.
[  197.852526][T14607] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.3780'.
[  198.106539][T14617] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3785'.
[  198.640065][T14622] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3787'.
[  198.693211][T14628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3790'.
[  198.934367][T14655] macvtap0: refused to change device tx_queue_len
[  198.937807][T14655] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check.
[  199.007413][T14659] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  199.016551][T14663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3807'.
[  199.020192][T14663] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  199.021239][T14665] openvswitch: netlink: Key type 30 is not supported
[  199.024204][T14659] syzkaller0: entered promiscuous mode
[  199.029479][T14659] syzkaller0: entered allmulticast mode
[  199.046846][T14663] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  199.053815][T14659] tipc: Resetting bearer <eth:syzkaller0>
[  199.063543][T14658] tipc: Resetting bearer <eth:syzkaller0>
[  199.086899][T14658] tipc: Disabling bearer <eth:syzkaller0>
[  199.174042][T14676] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3813'.
[  199.237619][T14682] netlink: 'syz.2.3816': attribute type 1 has an invalid length.
[  199.277532][T14686] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  199.280788][T14686] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 35913 - 0
[  199.284406][T14686] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 45533 - 0
[  199.319638][T14686] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  199.323225][T14686] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 35913 - 0
[  199.326907][T14686] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 45533 - 0
[  199.335870][T14693] netlink: 'syz.1.3821': attribute type 3 has an invalid length.
[  199.338613][T14693] netlink: 'syz.1.3821': attribute type 1 has an invalid length.
[  199.341386][T14693] NCSI netlink: No device for ifindex 0
[  199.372996][T14695] netlink: 'syz.1.3822': attribute type 1 has an invalid length.
[  199.385442][T14686] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  199.389464][T14686] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 35913 - 0
[  199.394641][T14686] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 45533 - 0
[  199.453235][T14686] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  199.462766][T14686] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 35913 - 0
[  199.466992][T14686] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 45533 - 0
[  199.572171][ T5913] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  199.578933][ T5913] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 45533 - 0
[  199.583441][ T5913] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 35913 - 0
[  199.597004][ T5913] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  199.600612][ T5913] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 45533 - 0
[  199.605134][ T5913] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 35913 - 0
[  199.608564][ T5913] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  199.611946][ T5913] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 45533 - 0
[  199.616520][ T5913] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 35913 - 0
[  199.625949][T12368] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  199.629236][T12368] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 45533 - 0
[  199.633234][T12368] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 35913 - 0
[  200.046592][T14710] __nla_validate_parse: 1 callbacks suppressed
[  200.046602][T14710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3828'.
[  200.644240][T14734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3838'.
[  200.705454][T14734] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3838'.
[  200.729266][T14740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3841'.
[  200.811550][T14750] syzkaller1: entered promiscuous mode
[  200.814208][T14750] syzkaller1: entered allmulticast mode
[  200.855849][T14752] netlink: 'syz.2.3847': attribute type 1 has an invalid length.
[  201.421359][T14802] netlink: 'syz.0.3868': attribute type 12 has an invalid length.
[  201.428382][T14802] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.3868'.
[  201.757049][T14821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3877'.
[  202.626478][T14846] syz_tun: entered allmulticast mode
[  202.655424][T14842] dvmrp1: entered allmulticast mode
[  202.684046][T14841] syz_tun: left allmulticast mode
[  202.855945][T14851] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  202.859375][T14851] syzkaller0: entered promiscuous mode
[  202.861736][T14851] syzkaller0: entered allmulticast mode
[  202.880723][T14851] tipc: Resetting bearer <eth:syzkaller0>
[  202.886566][T14850] tipc: Resetting bearer <eth:syzkaller0>
[  202.906117][T14850] tipc: Disabling bearer <eth:syzkaller0>
[  203.219997][T14867] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  203.225609][T14867] syzkaller0: entered promiscuous mode
[  203.227450][T14867] syzkaller0: entered allmulticast mode
[  203.230855][T14867] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3897'.
[  203.298162][T14873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3901'.
[  203.301039][T14873] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3901'.
[  203.306723][T14873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3901'.
[  204.018558][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  204.912999][T14973] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  205.108496][T14999] veth0_to_bond: entered allmulticast mode
[  205.402362][T15022] netlink: 'syz.2.3967': attribute type 7 has an invalid length.
[  205.644697][T15035] __nla_validate_parse: 8 callbacks suppressed
[  205.644708][T15035] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3974'.
[  206.130572][T15051] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3982'.
[  206.459434][T15078] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  206.462253][T15078] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  206.538772][T15083] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3995'.
[  206.595124][T15083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3995'.
[  206.874817][T15097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4001'.
[  207.016380][T15107] pimreg: entered allmulticast mode
[  207.085505][T15109] netlink: 'syz.2.4007': attribute type 11 has an invalid length.
[  207.105459][T15109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4007'.
[  207.172611][T15114] netlink: 'syz.1.4010': attribute type 1 has an invalid length.
[  207.216342][T15118] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4011'.
[  207.589975][T15160] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4030'.
[  207.604500][T15158] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  207.889947][T15191] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4047'.
[  207.959747][T15198] netlink: 288 bytes leftover after parsing attributes in process `syz.2.4050'.
[  207.974230][T15200] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  207.977005][T15200] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.205195][T15233] netlink: 'syz.1.4067': attribute type 21 has an invalid length.
[  208.240591][T15240] netlink: 'syz.0.4069': attribute type 1 has an invalid length.
[  208.243504][T15240] netlink: 'syz.0.4069': attribute type 2 has an invalid length.
[  209.362633][T15316] netlink: 'syz.0.4100': attribute type 1 has an invalid length.
[  209.651069][T15355] nftables ruleset with unbound set
[  209.961941][T15388] netlink: 'syz.1.4130': attribute type 1 has an invalid length.
[  210.301660][T15427] sctp: [Deprecated]: syz.1.4147 (pid 15427) Use of int in max_burst socket option.
[  210.301660][T15427] Use struct sctp_assoc_value instead
[  210.403355][T15441] 0{X: left promiscuous mode
[  210.405862][T15441] wg1: left promiscuous mode
[  210.409281][T15441] veth0_to_team: left promiscuous mode
[  210.419940][T15441] hsr1: left promiscuous mode
[  210.423430][T15441] bridge3: left promiscuous mode
[  210.426124][T15441] gtp0: left promiscuous mode
[  210.430144][T15441] erspan1: left promiscuous mode
[  210.586424][T15451] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  210.600756][T15453] openvswitch: netlink: IP tunnel dst address not specified
[  210.690420][T15465] netem: incorrect ge model size
[  210.692248][T15465] netem: change failed
[  210.848796][T15467] __nla_validate_parse: 11 callbacks suppressed
[  210.848810][T15467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4166'.
[  210.878127][T15483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4171'.
[  211.184669][T15516] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  211.427720][T15540] tipc: New replicast peer: 255.255.255.255
[  211.430497][T15540] tipc: Enabled bearer <udp:syz2>, priority 10
[  211.441864][T15543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4200'.
[  211.501563][T15540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4198'.
[  211.507486][T15540] tipc: Disabling bearer <udp:syz2>
[  211.568129][T15562] netlink: 'syz.0.4206': attribute type 10 has an invalid length.
[  211.570946][T15562] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4206'.
[  211.576539][T15562] !: entered promiscuous mode
[  211.580147][T15562] bridge0: port 1(0!) entered blocking state
[  211.582331][T15562] bridge0: port 1(0!) entered disabled state
[  211.585272][T15562] !: entered allmulticast mode
[  211.677614][T15577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4212'.
[  211.691973][T15577] vlan3: entered promiscuous mode
[  211.702134][T15577] bridge0: entered promiscuous mode
[  211.911035][T15609] Dead loop on virtual device ip6_vti0, fix it urgently!
[  211.913783][T15609] Dead loop on virtual device ip6_vti0, fix it urgently!
[  211.916268][T15609] Dead loop on virtual device ip6_vti0, fix it urgently!
[  211.918649][T15609] Dead loop on virtual device ip6_vti0, fix it urgently!
[  211.921139][T15609] Dead loop on virtual device ip6_vti0, fix it urgently!
[  211.923637][T15609] Dead loop on virtual device ip6_vti0, fix it urgently!
[  211.939237][T12368] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  211.979549][T15618] netlink: 'syz.0.4228': attribute type 3 has an invalid length.
[  211.982126][T15618] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4228'.
[  212.076995][T15628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4232'.
[  212.088662][T15630] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4233'.
[  212.164982][T15639] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  212.168713][T15636] IPVS: stopping backup sync thread 15639 ...
[  212.173634][T15641] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4238'.
[  212.319578][T15662] netlink: 'syz.1.4248': attribute type 7 has an invalid length.
[  212.322320][T15662] netlink: 'syz.1.4248': attribute type 8 has an invalid length.
[  212.327643][T15662] netlink: 'syz.1.4248': attribute type 15 has an invalid length.
[  212.354781][T15667] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  212.358742][T15666] IPVS: stopping backup sync thread 15667 ...
[  212.483802][T12368] syzkaller0: tun_net_xmit 76
[  212.485758][T12368] syzkaller0: tun_net_xmit 48
[  212.499653][T15675] syzkaller0: create flow: hash 837624506 index 1
[  212.512704][ T5885] syzkaller0: tun_net_xmit 76
[  212.530003][T15675] syzkaller0: delete flow: hash 837624506 index 1
[  212.671676][T15683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  214.047903][T15718] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  214.069210][T15720] netlink: 'syz.0.4274': attribute type 1 has an invalid length.
[  214.268215][T15729] sctp: [Deprecated]: syz.2.4278 (pid 15729) Use of int in max_burst socket option.
[  214.268215][T15729] Use struct sctp_assoc_value instead
[  215.233448][T15769] chnl_net:caif_netlink_parms(): no params data found
[  216.474615][T15825] dvmrp8: entered allmulticast mode
[  216.480506][T15825] openvswitch: netlink: Flow key attr not present in new flow.
[  216.496168][T15823] dvmrp8: left allmulticast mode
[  216.735095][T15841] __nla_validate_parse: 9 callbacks suppressed
[  216.735110][T15841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4325'.
[  217.062059][T15872] netlink: 'syz.2.4340': attribute type 15 has an invalid length.
[  217.981966][T15894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4350'.
[  218.163160][T15906] delete_channel: no stack
[  218.585638][T15952] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  218.588842][T15952] syzkaller0: entered promiscuous mode
[  218.590983][T15952] syzkaller0: entered allmulticast mode
[  218.610866][T15952] tipc: Resetting bearer <eth:syzkaller0>
[  218.618795][T15951] tipc: Resetting bearer <eth:syzkaller0>
[  218.635757][T15951] tipc: Disabling bearer <eth:syzkaller0>
[  218.651550][T15954] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4378'.
[  218.950589][T15986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4392'.
[  218.955800][T15986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4392'.
[  218.958778][T15986] netlink: 'syz.0.4392': attribute type 13 has an invalid length.
[  219.119096][T15997] netlink: 'syz.0.4398': attribute type 2 has an invalid length.
[  219.121637][T15997] netlink: 'syz.0.4398': attribute type 1 has an invalid length.
[  219.144233][T15999] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4399'.
[  219.148152][T15999] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  219.151073][T15999] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  219.155375][T15999] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  219.446581][T16020] netlink: 'syz.1.4408': attribute type 10 has an invalid length.
[  219.928626][T16030] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4412'.
[  219.937097][T16030] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4412'.
[  219.941475][T16030] netlink: 34 bytes leftover after parsing attributes in process `syz.2.4412'.
[  220.187256][T16036] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  220.193917][T16035] IPVS: stopping backup sync thread 16036 ...
[  220.564871][T16087] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4438'.
[  220.832219][T16113] syzkaller0: entered promiscuous mode
[  220.834419][T16113] syzkaller0: entered allmulticast mode
[  221.530488][T16119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  221.804544][T16127] gretap0: entered promiscuous mode
[  221.806447][T16127] vlan1: entered promiscuous mode
[  222.018510][T16141] netlink: 'syz.2.4459': attribute type 1 has an invalid length.
[  222.021405][T16141] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4459'.
[  222.081843][T16146] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4461'.
[  222.085216][T16146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4461'.
[  222.100352][T16146] bridge0: port 1(syz_tun) entered blocking state
[  222.103067][T16146] bridge0: port 1(syz_tun) entered disabled state
[  222.105929][T16146] syz_tun: entered allmulticast mode
[  222.108720][T16146] syz_tun: entered promiscuous mode
[  222.111059][T16146] bridge0: port 1(syz_tun) entered blocking state
[  222.113421][T16146] bridge0: port 1(syz_tun) entered forwarding state
[  222.422598][T16181] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4477'.
[  222.426585][T16181] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4477'.
[  222.637994][T16199] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma?
[  222.926389][T16228] netlink: 'syz.2.4498': attribute type 1 has an invalid length.
[  222.954753][T16228] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  222.962025][   T13] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  222.967978][T16228] 8021q: adding VLAN 0 to HW filter on device bond6
[  223.040554][T16228] bond6 (unregistering): (slave ip6gretap1): Removing an active aggregator
[  223.045329][T16228] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface
[  223.050782][T16228] bond6 (unregistering): Released all slaves
[  223.060606][T16232] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4499'.
[  223.080418][T16233] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4499'.
[  223.143140][T16241] netem: change failed
[  223.163968][T16243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4502'.
[  223.166951][T16243] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4502'.
[  223.258291][T16256] netlink: 'syz.2.4509': attribute type 1 has an invalid length.
[  223.300793][T16261] netlink: 'syz.1.4511': attribute type 1 has an invalid length.
[  223.357781][T16261] bond0: (slave bridge8): making interface the new active one
[  223.360937][T16261] bond0: (slave bridge8): Enslaving as an active interface with an up link
[  223.508851][T16292] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4525'.
[  224.203575][T16345] netlink: 'syz.0.4550': attribute type 21 has an invalid length.
[  224.361575][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0
[  224.366643][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0
[  224.373703][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0
[  224.376901][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0
[  224.412040][T16376] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  225.135907][T16438] netlink: 'syz.2.4591': attribute type 1 has an invalid length.
[  225.636396][T16466] netlink: 'syz.0.4605': attribute type 33 has an invalid length.
[  226.536458][T16552] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.037132][T16608] __nla_validate_parse: 7 callbacks suppressed
[  227.037143][T16608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4669'.
[  227.056737][T16610] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4670'.
[  227.163781][T16610] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  227.172558][T16610] bond0 (unregistering): Released all slaves
[  227.186435][T16611] netlink: 'syz.0.4669': attribute type 1 has an invalid length.
[  227.190345][T16612] netlink: 'syz.0.4669': attribute type 1 has an invalid length.
[  227.258900][T16616] dvmrp1: left allmulticast mode
[  227.451300][T16632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4680'.
[  227.456343][T16632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4680'.
[  227.460642][T16634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4681'.
[  227.464810][T16632] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4680'.
[  227.509593][T16638] netlink: 277 bytes leftover after parsing attributes in process `syz.0.4683'.
[  227.621660][T16652] netlink: 336 bytes leftover after parsing attributes in process `syz.1.4690'.
[  227.716306][T16669] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4698'.
[  227.720144][T16669] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4698'.
[  227.757183][T16675] netlink: 'syz.0.4701': attribute type 30 has an invalid length.
[  227.940028][T16706] Unsupported ieee802154 address type: 0
[  228.001663][T16716] tc_dump_action: action bad kind
[  228.034607][T16718] bridge0: port 1(syz_tun) entered disabled state
[  228.042190][T16718] tipc: Resetting bearer <eth:team0>
[  228.046484][T16718] tipc: Resetting bearer <eth:syzkaller0>
[  228.048620][T16718] tipc: Resetting bearer <eth:syzkaller0>
[  228.065292][T16718] netlink: 'syz.2.4720': attribute type 16 has an invalid length.
[  228.067889][T16718] netlink: 'syz.2.4720': attribute type 17 has an invalid length.
[  228.081324][T16718] bridge0: port 1(syz_tun) entered blocking state
[  228.084034][T16718] bridge0: port 1(syz_tun) entered forwarding state
[  228.088562][T16718] tipc: Resetting bearer <eth:team0>
[  228.090469][T16718] tipc: Resetting bearer <eth:team0>
[  228.094546][T16718] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  228.424705][T16762] netlink: 'syz.0.4740': attribute type 1 has an invalid length.
[  228.434373][T16763] syzkaller0: left promiscuous mode
[  228.436667][T16763] syzkaller0: left allmulticast mode
[  228.441332][T16763] tipc: Resetting bearer <eth:syzkaller0>
[  228.505072][T16772] openvswitch: netlink: IPv4 tunnel dst address is zero
[  228.555162][T16777] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003
[  228.830944][T16818] netlink: 'syz.0.4766': attribute type 2 has an invalid length.
[  228.845196][T16818] netlink: 'syz.0.4766': attribute type 1 has an invalid length.
[  228.848835][T16818] netlink: 'syz.0.4766': attribute type 1 has an invalid length.
[  228.900967][T16824] veth1_macvtap: default FDB implementation only supports local addresses
[  229.000176][T16838] syzkaller1: entered promiscuous mode
[  229.002603][T16838] syzkaller1: entered allmulticast mode
[  229.089217][T16844] lo: entered allmulticast mode
[  229.091280][T16844] lo: left allmulticast mode
[  230.032142][T16934] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  230.174996][T16938] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  230.178246][T16938] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  230.218095][T16940] netlink: 'syz.2.4822': attribute type 3 has an invalid length.
[  230.957836][T16968] netlink: 'syz.0.4834': attribute type 4 has an invalid length.
[  231.575051][T17020] veth1_to_team: entered allmulticast mode
[  231.578015][T17020] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  231.713635][T17033] netlink: 'syz.2.4865': attribute type 1 has an invalid length.
[  231.985212][T17056] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  231.987801][T17056] syzkaller0: entered promiscuous mode
[  231.989556][T17056] syzkaller0: entered allmulticast mode
[  232.006290][T17056] tipc: Resetting bearer <eth:syzkaller0>
[  232.029711][T17053] tipc: Resetting bearer <eth:syzkaller0>
[  232.050589][T17053] tipc: Disabling bearer <eth:syzkaller0>
[  232.170378][T17067] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.235063][T17073] __nla_validate_parse: 8 callbacks suppressed
[  232.235078][T17073] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4881'.
[  232.426936][T17090] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  232.443221][T17090] bond0: (slave bridge8): Releasing active interface
[  232.499703][T17096] netlink: 'syz.1.4889': attribute type 10 has an invalid length.
[  232.503560][T17096] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  232.509479][T17096] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  232.514177][T17096] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  234.209203][T17207] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  234.318321][T17218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4941'.
[  234.335437][T17220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4942'.
[  234.339479][T17220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4942'.
[  234.376345][T17223] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  234.455590][T17227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4945'.
[  234.486007][T17229] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  234.490524][T17229] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  234.784355][T17240] sctp: [Deprecated]: syz.0.4951 (pid 17240) Use of int in maxseg socket option.
[  234.784355][T17240] Use struct sctp_assoc_value instead
[  235.219841][T17249] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20002
[  235.443557][T17259] netlink: 'syz.1.4959': attribute type 1 has an invalid length.
[  235.446582][T17259] netlink: 236 bytes leftover after parsing attributes in process `syz.1.4959'.
[  235.799569][T17290] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4974'.
[  235.915571][T17296] netlink: 'syz.2.4977': attribute type 3 has an invalid length.
[  235.967942][T17296] dvmrp1: left allmulticast mode
[  235.969929][T17296] pimreg: left allmulticast mode
[  236.036096][T17307] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  236.048433][T17307] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  236.096787][T17296] tipc: Resetting bearer <eth:team0>
[  236.099196][T17296] tipc: Resetting bearer <eth:team0>
[  236.102985][T17296] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  236.120938][T17313] nbd: must specify at least one socket
[  236.319347][T17331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4993'.
[  236.377929][T17336] ==================================================================
[  236.380685][T17336] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  236.383325][T17336] Read of size 4 at addr ffff88802962a044 by task syz.0.4996/17336
[  236.386759][T17336] 
[  236.387634][T17336] CPU: 0 UID: 0 PID: 17336 Comm: syz.0.4996 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  236.387646][T17336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  236.387651][T17336] Call Trace:
[  236.387655][T17336]  <TASK>
[  236.387659][T17336]  dump_stack_lvl+0x189/0x250
[  236.387671][T17336]  ? __kasan_check_byte+0x12/0x40
[  236.387682][T17336]  ? __pfx_dump_stack_lvl+0x10/0x10
[  236.387690][T17336]  ? lock_release+0x4b/0x3e0
[  236.387702][T17336]  ? __virt_addr_valid+0x4a5/0x5c0
[  236.387716][T17336]  print_report+0xca/0x240
[  236.387726][T17336]  ? xfrm_alloc_spi+0x570/0xf30
[  236.387741][T17336]  kasan_report+0x118/0x150
[  236.387758][T17336]  ? xfrm_alloc_spi+0x570/0xf30
[  236.387777][T17336]  xfrm_alloc_spi+0x570/0xf30
[  236.387794][T17336]  ? xfrm_alloc_spi+0x2a0/0xf30
[  236.387814][T17336]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  236.387830][T17336]  ? xfrm_find_acq+0x87/0xa0
[  236.387849][T17336]  xfrm_alloc_userspi+0x70b/0xc90
[  236.387863][T17336]  ? apparmor_capable+0x137/0x1b0
[  236.387870][T17336]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  236.387877][T17336]  ? __nla_parse+0x40/0x60
[  236.387887][T17336]  xfrm_user_rcv_msg+0x7a3/0xab0
[  236.387895][T17336]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  236.387906][T17336]  ? __pfx___mutex_trylock_common+0x10/0x10
[  236.387914][T17336]  ? rcu_is_watching+0x15/0xb0
[  236.387922][T17336]  ? trace_contention_end+0x39/0x120
[  236.387929][T17336]  ? __mutex_lock+0x335/0x1360
[  236.387939][T17336]  netlink_rcv_skb+0x208/0x470
[  236.387972][T17336]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  236.387980][T17336]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  236.387991][T17336]  ? netlink_deliver_tap+0x2e/0x1b0
[  236.388000][T17336]  ? netlink_deliver_tap+0x2e/0x1b0
[  236.388009][T17336]  xfrm_netlink_rcv+0x79/0x90
[  236.388016][T17336]  netlink_unicast+0x82f/0x9e0
[  236.388025][T17336]  ? __pfx_netlink_unicast+0x10/0x10
[  236.388032][T17336]  ? netlink_sendmsg+0x642/0xb30
[  236.388041][T17336]  ? skb_put+0x11b/0x210
[  236.388051][T17336]  netlink_sendmsg+0x805/0xb30
[  236.388062][T17336]  ? __pfx_netlink_sendmsg+0x10/0x10
[  236.388071][T17336]  ? aa_sock_msg_perm+0xf1/0x1d0
[  236.388082][T17336]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  236.388093][T17336]  ? __pfx_netlink_sendmsg+0x10/0x10
[  236.388106][T17336]  __sock_sendmsg+0x21c/0x270
[  236.388118][T17336]  ____sys_sendmsg+0x505/0x830
[  236.388135][T17336]  ? __pfx_____sys_sendmsg+0x10/0x10
[  236.388152][T17336]  ? import_iovec+0x74/0xa0
[  236.388161][T17336]  ___sys_sendmsg+0x21f/0x2a0
[  236.388175][T17336]  ? __pfx____sys_sendmsg+0x10/0x10
[  236.388198][T17336]  ? __fget_files+0x2a/0x420
[  236.388214][T17336]  ? __fget_files+0x3a0/0x420
[  236.388235][T17336]  __x64_sys_sendmsg+0x19b/0x260
[  236.388251][T17336]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  236.388271][T17336]  ? do_syscall_64+0xbe/0x3b0
[  236.388286][T17336]  do_syscall_64+0xfa/0x3b0
[  236.388300][T17336]  ? lockdep_hardirqs_on+0x9c/0x150
[  236.388315][T17336]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.388326][T17336]  ? exc_page_fault+0x9f/0xf0
[  236.388339][T17336]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.388353][T17336] RIP: 0033:0x7f6a7518ebe9
[  236.388365][T17336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  236.388375][T17336] RSP: 002b:00007f6a75f1a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  236.388389][T17336] RAX: ffffffffffffffda RBX: 00007f6a753b5fa0 RCX: 00007f6a7518ebe9
[  236.388399][T17336] RDX: 0000000000000000 RSI: 0000200000001580 RDI: 0000000000000003
[  236.388407][T17336] RBP: 00007f6a75211e19 R08: 0000000000000000 R09: 0000000000000000
[  236.388417][T17336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  236.388424][T17336] R13: 00007f6a753b6038 R14: 00007f6a753b5fa0 R15: 00007fff94112548
[  236.388436][T17336]  </TASK>
[  236.388441][T17336] 
[  236.516448][T17336] Allocated by task 14314:
[  236.517969][T17336]  kasan_save_track+0x3e/0x80
[  236.519480][T17336]  __kasan_slab_alloc+0x6c/0x80
[  236.521091][T17336]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  236.522874][T17336]  xfrm_state_alloc+0x24/0x2f0
[  236.524424][T17336]  __find_acq_core+0x8a7/0x1c00
[  236.525991][T17336]  xfrm_find_acq+0x78/0xa0
[  236.527493][T17336]  xfrm_alloc_userspi+0x6b3/0xc90
[  236.529077][T17336]  xfrm_user_rcv_msg+0x7a3/0xab0
[  236.530687][T17336]  netlink_rcv_skb+0x208/0x470
[  236.532265][T17336]  xfrm_netlink_rcv+0x79/0x90
[  236.533822][T17336]  netlink_unicast+0x82f/0x9e0
[  236.535439][T17336]  netlink_sendmsg+0x805/0xb30
[  236.537024][T17336]  __sock_sendmsg+0x21c/0x270
[  236.538600][T17336]  ____sys_sendmsg+0x505/0x830
[  236.540191][T17336]  ___sys_sendmsg+0x21f/0x2a0
[  236.541738][T17336]  __x64_sys_sendmsg+0x19b/0x260
[  236.543373][T17336]  do_syscall_64+0xfa/0x3b0
[  236.544872][T17336]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.547063][T17336] 
[  236.547874][T17336] Freed by task 5885:
[  236.549237][T17336]  kasan_save_track+0x3e/0x80
[  236.550800][T17336]  kasan_save_free_info+0x46/0x50
[  236.552464][T17336]  __kasan_slab_free+0x5b/0x80
[  236.554128][T17336]  kmem_cache_free+0x18f/0x400
[  236.555986][T17336]  xfrm_state_gc_task+0x52d/0x6b0
[  236.557691][T17336]  process_scheduled_works+0xae1/0x17b0
[  236.559531][T17336]  worker_thread+0x8a0/0xda0
[  236.561061][T17336]  kthread+0x711/0x8a0
[  236.562415][T17336]  ret_from_fork+0x3fc/0x770
[  236.563965][T17336]  ret_from_fork_asm+0x1a/0x30
[  236.565555][T17336] 
[  236.566397][T17336] The buggy address belongs to the object at ffff888029629f80
[  236.566397][T17336]  which belongs to the cache xfrm_state of size 928
[  236.570846][T17336] The buggy address is located 196 bytes inside of
[  236.570846][T17336]  freed 928-byte region [ffff888029629f80, ffff88802962a320)
[  236.575461][T17336] 
[  236.576299][T17336] The buggy address belongs to the physical page:
[  236.578609][T17336] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888029629f80 pfn:0x29628
[  236.581746][T17336] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  236.584513][T17336] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  236.587028][T17336] page_type: f5(slab)
[  236.588330][T17336] raw: 00fff00000000040 ffff88801abc8b40 dead000000000122 0000000000000000
[  236.591031][T17336] raw: ffff888029629f80 00000000800e0008 00000000f5000000 0000000000000000
[  236.593794][T17336] head: 00fff00000000040 ffff88801abc8b40 dead000000000122 0000000000000000
[  236.596609][T17336] head: ffff888029629f80 00000000800e0008 00000000f5000000 0000000000000000
[  236.599512][T17336] head: 00fff00000000002 ffffea0000a58a01 00000000ffffffff 00000000ffffffff
[  236.602346][T17336] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  236.605150][T17336] page dumped because: kasan: bad access detected
[  236.607264][T17336] page_owner tracks the page as allocated
[  236.609135][T17336] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7188, tgid 7186 (syz.1.563), ts 81676288931, free_ts 81638995034
[  236.615239][T17336]  post_alloc_hook+0x240/0x2a0
[  236.616894][T17336]  get_page_from_freelist+0x21e4/0x22c0
[  236.618740][T17336]  __alloc_frozen_pages_noprof+0x181/0x370
[  236.620659][T17336]  alloc_pages_mpol+0x232/0x4a0
[  236.622202][T17336]  allocate_slab+0x8a/0x370
[  236.623660][T17336]  ___slab_alloc+0xbeb/0x1410
[  236.625225][T17336]  kmem_cache_alloc_noprof+0x283/0x3c0
[  236.626999][T17336]  xfrm_state_alloc+0x24/0x2f0
[  236.628529][T17336]  xfrm_add_sa+0x17d1/0x4070
[  236.630093][T17336]  xfrm_user_rcv_msg+0x7a3/0xab0
[  236.631785][T17336]  netlink_rcv_skb+0x208/0x470
[  236.633391][T17336]  xfrm_netlink_rcv+0x79/0x90
[  236.635015][T17336]  netlink_unicast+0x82f/0x9e0
[  236.636658][T17336]  netlink_sendmsg+0x805/0xb30
[  236.638300][T17336]  __sock_sendmsg+0x21c/0x270
[  236.639918][T17336]  ____sys_sendmsg+0x505/0x830
[  236.641550][T17336] page last free pid 5846 tgid 5846 stack trace:
[  236.643695][T17336]  __free_frozen_pages+0xbc4/0xd30
[  236.645445][T17336]  __put_partials+0x156/0x1a0
[  236.647112][T17336]  put_cpu_partial+0x17c/0x250
[  236.648785][T17336]  __slab_free+0x2d5/0x3c0
[  236.650293][T17336]  qlist_free_all+0x97/0x140
[  236.651858][T17336]  kasan_quarantine_reduce+0x148/0x160
[  236.653721][T17336]  __kasan_slab_alloc+0x22/0x80
[  236.655399][T17336]  kmem_cache_alloc_lru_noprof+0x1c6/0x3d0
[  236.657526][T17336]  shmem_alloc_inode+0x28/0x40
[  236.659133][T17336]  alloc_inode+0x6a/0x1b0
[  236.660563][T17336]  new_inode+0x22/0x170
[  236.661965][T17336]  shmem_get_inode+0x346/0xe90
[  236.663547][T17336]  shmem_mknod+0x18c/0x3e0
[  236.664965][T17336]  path_openat+0x14f4/0x3830
[  236.666443][T17336]  do_filp_open+0x1fa/0x410
[  236.668396][T17336]  do_sys_openat2+0x121/0x1c0
[  236.670429][T17336] 
[  236.671359][T17336] Memory state around the buggy address:
[  236.673190][T17336]  ffff888029629f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  236.675750][T17336]  ffff888029629f80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  236.678357][T17336] >ffff88802962a000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  236.681019][T17336]                                            ^
[  236.683040][T17336]  ffff88802962a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  236.685645][T17336]  ffff88802962a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  236.688454][T17336] ==================================================================
[  236.691346][T17336] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  236.693774][T17336] CPU: 0 UID: 0 PID: 17336 Comm: syz.0.4996 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  236.698029][T17336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  236.701459][T17336] Call Trace:
[  236.702605][T17336]  <TASK>
[  236.703629][T17336]  dump_stack_lvl+0x99/0x250
[  236.705211][T17336]  ? __asan_memcpy+0x40/0x70
[  236.706842][T17336]  ? __pfx_dump_stack_lvl+0x10/0x10
[  236.708614][T17336]  ? __pfx__printk+0x10/0x10
[  236.710230][T17336]  vpanic+0x281/0x750
[  236.711637][T17336]  ? __pfx_vpanic+0x10/0x10
[  236.713169][T17336]  ? irqentry_exit+0x74/0x90
[  236.714666][T17336]  panic+0xb9/0xc0
[  236.715921][T17336]  ? __pfx_panic+0x10/0x10
[  236.717415][T17336]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  236.719324][T17336]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  236.721280][T17336]  ? xfrm_alloc_spi+0x570/0xf30
[  236.722926][T17336]  check_panic_on_warn+0x89/0xb0
[  236.724554][T17336]  ? xfrm_alloc_spi+0x570/0xf30
[  236.726180][T17336]  end_report+0x78/0x160
[  236.727676][T17336]  kasan_report+0x129/0x150
[  236.729232][T17336]  ? xfrm_alloc_spi+0x570/0xf30
[  236.730934][T17336]  xfrm_alloc_spi+0x570/0xf30
[  236.732555][T17336]  ? xfrm_alloc_spi+0x2a0/0xf30
[  236.734248][T17336]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  236.736028][T17336]  ? xfrm_find_acq+0x87/0xa0
[  236.737599][T17336]  xfrm_alloc_userspi+0x70b/0xc90
[  236.739348][T17336]  ? apparmor_capable+0x137/0x1b0
[  236.741100][T17336]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  236.742940][T17336]  ? __nla_parse+0x40/0x60
[  236.744501][T17336]  xfrm_user_rcv_msg+0x7a3/0xab0
[  236.746174][T17336]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  236.748042][T17336]  ? __pfx___mutex_trylock_common+0x10/0x10
[  236.749997][T17336]  ? rcu_is_watching+0x15/0xb0
[  236.751654][T17336]  ? trace_contention_end+0x39/0x120
[  236.753434][T17336]  ? __mutex_lock+0x335/0x1360
[  236.755091][T17336]  netlink_rcv_skb+0x208/0x470
[  236.756724][T17336]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  236.758610][T17336]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  236.760560][T17336]  ? netlink_deliver_tap+0x2e/0x1b0
[  236.762334][T17336]  ? netlink_deliver_tap+0x2e/0x1b0
[  236.764108][T17336]  xfrm_netlink_rcv+0x79/0x90
[  236.765705][T17336]  netlink_unicast+0x82f/0x9e0
[  236.767384][T17336]  ? __pfx_netlink_unicast+0x10/0x10
[  236.769086][T17336]  ? netlink_sendmsg+0x642/0xb30
[  236.770663][T17336]  ? skb_put+0x11b/0x210
[  236.772125][T17336]  netlink_sendmsg+0x805/0xb30
[  236.773676][T17336]  ? __pfx_netlink_sendmsg+0x10/0x10
[  236.775433][T17336]  ? aa_sock_msg_perm+0xf1/0x1d0
[  236.777079][T17336]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  236.778838][T17336]  ? __pfx_netlink_sendmsg+0x10/0x10
[  236.780622][T17336]  __sock_sendmsg+0x21c/0x270
[  236.782098][T17336]  ____sys_sendmsg+0x505/0x830
[  236.783588][T17336]  ? __pfx_____sys_sendmsg+0x10/0x10
[  236.785299][T17336]  ? import_iovec+0x74/0xa0
[  236.786838][T17336]  ___sys_sendmsg+0x21f/0x2a0
[  236.788384][T17336]  ? __pfx____sys_sendmsg+0x10/0x10
[  236.790172][T17336]  ? __fget_files+0x2a/0x420
[  236.791792][T17336]  ? __fget_files+0x3a0/0x420
[  236.793397][T17336]  __x64_sys_sendmsg+0x19b/0x260
[  236.795107][T17336]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  236.797041][T17336]  ? do_syscall_64+0xbe/0x3b0
[  236.798777][T17336]  do_syscall_64+0xfa/0x3b0
[  236.800278][T17336]  ? lockdep_hardirqs_on+0x9c/0x150
[  236.802011][T17336]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.804013][T17336]  ? exc_page_fault+0x9f/0xf0
[  236.805552][T17336]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.807497][T17336] RIP: 0033:0x7f6a7518ebe9
[  236.808973][T17336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  236.815242][T17336] RSP: 002b:00007f6a75f1a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  236.818032][T17336] RAX: ffffffffffffffda RBX: 00007f6a753b5fa0 RCX: 00007f6a7518ebe9
[  236.820648][T17336] RDX: 0000000000000000 RSI: 0000200000001580 RDI: 0000000000000003
[  236.823288][T17336] RBP: 00007f6a75211e19 R08: 0000000000000000 R09: 0000000000000000
[  236.825882][T17336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  236.828422][T17336] R13: 00007f6a753b6038 R14: 00007f6a753b5fa0 R15: 00007fff94112548
[  236.830991][T17336]  </TASK>
[  236.832766][T17336] Kernel Offset: disabled
[  236.834194][T17336] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:18:35  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001342 RDI=0000000000001343 RBP=00000000000003f8 RSP=ffffc90006c169f0
R8 =ffff888020548237 R9 =1ffff110040a9046 R10=dffffc0000000000 R11=ffffffff854e72a0
R12=dffffc0000000000 R13=ffffffff99af18ff R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e731c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6a75f1a6c0 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6a75f19fc8 CR3=000000002816c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f6a75387498 00007f6a75387470 XMM03=00007f6a753874a8 00007f6a753874a0
XMM04=00007f6a75eed100 00007f6a75387460 XMM05=00007f6a75387478 00007f6a753874c0
XMM06=00007f6a753874b8 00007f6a753874b0 XMM07=00007f6a753874a8 00007f6a753874a0
XMM08=0000000000000000 00007f6a75212ee7 XMM09=0000000000000000 00007f6a75212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b44d6b RBX=1ffff11009608341 RCX=ffff888022509cc0 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900033cf6c0 RSP=ffffc900033cf540
R8 =ffffffff8fa34237 R9 =1ffffffff1f46846 R10=dffffc0000000000 R11=fffffbfff1f46847
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b44d53 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557791d500 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000240 CR3=000000010f6da000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000004
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000001 XMM05=cc27002cdfffffff 2000000800000000
XMM06=0000000000020000 000000000070bd2b XMM07=0000000a00000000 0000000000000000
XMM08=0000000000000000 0000000100000000 XMM09=0000000000000000 00007f6a75212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
