last executing test programs:

2.332624538s ago: executing program 0 (id=7170):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001100050000000001feffffff07000000", @ANYRES32=r1, @ANYBLOB="402000000000000014001a80100005800c0009"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x800)

2.252167693s ago: executing program 0 (id=7171):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ec0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000011c0)={0x2c, r0, 0x11, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x10000)

229.763ms ago: executing program 0 (id=7172):
listen(0xffffffffffffffff, 0xfffffffc)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={<r1=>0x0}, &(0x7f0000000000)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e27, @dev={0xac, 0x14, 0x14, 0x28}}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000500)=@assoc_value={r1, 0x7f}, 0x8)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x42000, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)

228.849182ms ago: executing program 2 (id=7174):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
close(0x4)

226.110378ms ago: executing program 1 (id=7175):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
close(r0)

154.896136ms ago: executing program 0 (id=7176):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x42, 0x4, 0x410, 0xffffffff, 0x2a8, 0x210, 0x2a8, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc5a, 0x4, 0x7, 0xffffffff, 0xb87d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x2, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x9, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x11, 0x1, 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470)

154.586653ms ago: executing program 2 (id=7177):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48)

153.212646ms ago: executing program 1 (id=7178):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10)

152.968359ms ago: executing program 2 (id=7179):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x503, 0x70bd2a, 0xc, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a8}}, 0x20}}, 0x800)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000ffff3201"], 0x138)

148.099124ms ago: executing program 0 (id=7180):
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, 0x0, 0x0)

82.560654ms ago: executing program 2 (id=7181):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000010003b0c000000000500000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e00002000028004001200060011"], 0x50}}, 0x0)

82.26086ms ago: executing program 1 (id=7182):
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x110, 0x3, 0x0, 0x15edfeb2)

81.999218ms ago: executing program 0 (id=7183):
r0 = socket(0x2b, 0x1, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r5, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x804)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0x3}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x40004)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000040)=0x4, 0x4)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r12, 0xfffffdc8, &(0x7f0000000340)}, 0xc)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f00000010c0)='syzkaller\x00', 0x9, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f00000003c0)=ANY=[@ANYBLOB="800000000802110000010802110000005050505050500063c8b5e1410c98403bfda2112a0b000000000000000000640001000012bcb2fc61dca02864d19884114976094ba46f010076065c050400"], 0x42)
setsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, 0x0, 0x0)

81.90104ms ago: executing program 1 (id=7184):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000080)=0xb1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x67)

76.768754ms ago: executing program 2 (id=7185):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r3=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x1c}, 0x4, 0x700000000000000}, 0x0)

680.683µs ago: executing program 1 (id=7186):
close(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127f000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, 0x24}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x34)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

394.431µs ago: executing program 2 (id=7187):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x19}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xd9, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x7, 0x7, "04030e5c61"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0)

0s ago: executing program 1 (id=7188):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)

kernel console output (not intermixed with test programs):

ed state
[  199.901911][T12372] bond5: (slave veth0_to_bond): Releasing backup interface
[  199.922871][T12372] bond0: (slave bond_slave_0): Releasing backup interface
[  199.931787][T12372] bond0: (slave bond_slave_1): Releasing backup interface
[  199.940784][T12372] team0: Port device team_slave_0 removed
[  199.966585][T12372] team0: Port device team_slave_1 removed
[  199.976677][T12372] batman_adv: batadv0: Removing interface: batadv_slave_0
[  199.984247][T12372] batman_adv: batadv0: Removing interface: batadv_slave_1
[  199.989125][T12372] batman_adv: batadv0: Removing interface: wlan0
[  199.999376][T12372] bond1: (slave bond2): Releasing backup interface
[  200.007501][T12372] bond1: (slave bond2): the permanent HWaddr of slave - 8e:f4:5d:00:3f:c9 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  200.024013][T12372] bond1: (slave gretap1): making interface the new active one
[  200.038251][T12372] bond1: (slave gretap1): Releasing backup interface
[  200.051573][ T5668] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  200.065734][ T5668] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  200.096315][T12377] team0: Mode changed to "activebackup"
[  200.242010][T12383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2843'.
[  200.674404][T12393] bridge0: port 1(macvlan0) entered disabled state
[  200.718380][T12405] openvswitch: netlink: Multiple metadata blocks provided
[  201.043732][T12393] veth1_vlan: left allmulticast mode
[  201.363595][T12393] ip6gre1: left allmulticast mode
[  201.390436][T12393] bond1: left allmulticast mode
[  201.415959][T12393] bond2: left allmulticast mode
[  201.421277][T12393] erspan0: left allmulticast mode
[  201.472441][    T9] syz1: Port: 1 Link DOWN
[  201.474738][ T5668] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  201.486402][ T5668] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.500260][ T5668] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  201.513312][ T5668] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.530756][ T5668] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  201.545615][ T5668] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.549026][ T5668] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  201.552564][ T5668] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.704490][T12427] netlink: 'syz.1.2863': attribute type 1 has an invalid length.
[  201.762445][T12427] gretap2: entered allmulticast mode
[  201.768558][T12427] bond6: (slave gretap2): making interface the new active one
[  201.771731][T12427] bond6: (slave gretap2): Enslaving as an active interface with an up link
[  202.062945][T12459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2873'.
[  202.138045][T12465] gre1: entered promiscuous mode
[  202.358057][T12488] netlink: 'syz.0.2891': attribute type 8 has an invalid length.
[  202.361596][T12488] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2891'.
[  202.364390][T12488] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2891'.
[  202.434447][T12490] netlink: 'syz.0.2891': attribute type 23 has an invalid length.
[  202.898453][T12508] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  203.018969][T12511] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2899'.
[  203.271443][T12538] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2909'.
[  203.290264][T12539] batadv0: entered promiscuous mode
[  203.299384][T12539] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  203.401238][T12547] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2913'.
[  203.413384][T12547] netlink: 'syz.0.2913': attribute type 8 has an invalid length.
[  203.418975][T12547] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2913'.
[  203.597734][T12566] syzkaller0: entered promiscuous mode
[  203.600111][T12566] syzkaller0: entered allmulticast mode
[  203.924726][T12577] netlink: 'syz.0.2927': attribute type 4 has an invalid length.
[  203.927695][T12577] __nla_validate_parse: 1 callbacks suppressed
[  203.927708][T12577] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2927'.
[  204.116457][T12590] netlink: 'syz.1.2932': attribute type 27 has an invalid length.
[  204.119590][T12590] netlink: 'syz.1.2932': attribute type 4 has an invalid length.
[  204.122652][T12590] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2932'.
[  204.130166][T12590] syz_tun: entered allmulticast mode
[  204.290903][T12599] netlink: 'syz.0.2936': attribute type 2 has an invalid length.
[  204.293612][T12599] netlink: 'syz.0.2936': attribute type 1 has an invalid length.
[  204.298450][T12599] nbd: illegal input index 65544
[  204.396431][T12605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2939'.
[  204.408407][T12605] macvtap0: entered promiscuous mode
[  204.410708][T12605] bond0: entered promiscuous mode
[  204.413019][T12605] macvtap0: entered allmulticast mode
[  204.414797][T12605] bond0: entered allmulticast mode
[  204.420061][T12605] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  204.429724][T12605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2939'.
[  204.438278][T12605] bond0: left allmulticast mode
[  204.442218][T12605] bond0: left promiscuous mode
[  204.447299][T12605] macvtap0: left promiscuous mode
[  204.449323][T12605] macvtap0: left allmulticast mode
[  204.538870][T12607] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2940'.
[  204.781254][T12623] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2947'.
[  204.785772][T12619] syzkaller0: entered promiscuous mode
[  204.787934][T12619] syzkaller0: entered allmulticast mode
[  205.022381][T12639] pim6reg1: entered promiscuous mode
[  205.027625][T12639] pim6reg1: entered allmulticast mode
[  205.088047][T12643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2957'.
[  205.650121][T12668] syzkaller0: entered promiscuous mode
[  205.652442][T12668] syzkaller0: entered allmulticast mode
[  205.796741][T12675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2971'.
[  205.799965][T12675] netlink: 'syz.0.2971': attribute type 10 has an invalid length.
[  205.802575][T12675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2971'.
[  205.973300][T12687] xt_hashlimit: size too large, truncated to 1048576
[  206.145217][T12697] bond3: option arp_interval: invalid value (18446744073709551615)
[  206.147814][T12697] bond3: option arp_interval: allowed values 0 - 2147483647
[  206.151996][T12697] bond3 (unregistering): Released all slaves
[  206.281909][T12708] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2985'.
[  206.520535][T12727] netlink: 'syz.1.2992': attribute type 1 has an invalid length.
[  207.035750][T12752] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  207.396903][T12772] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  207.403804][T12772] batman_adv: batadv0: Removing interface: batadv_slave_0
[  207.412264][T12772] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  207.415253][T12772] batman_adv: batadv0: Removing interface: batadv_slave_1
[  207.422377][T12772] batman_adv: batadv0: Interface deactivated: macvlan3
[  207.424952][T12772] batman_adv: batadv0: Removing interface: macvlan3
[  207.458070][T12778] syzkaller1: entered promiscuous mode
[  207.460559][T12778] syzkaller1: entered allmulticast mode
[  207.660744][T12795] netlink: 'syz.1.3013': attribute type 14 has an invalid length.
[  207.663785][T12795] bond0: option xmit_hash_policy: invalid value (183)
[  207.701635][T12801] tc_dump_action: action bad kind
[  207.729320][T12805] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  207.732314][T12805] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  207.747425][T12805] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  207.751364][T12805] tipc: Resetting bearer <eth:syzkaller0>
[  208.164149][T12836] bridge0: entered allmulticast mode
[  208.450371][T12871] netlink: 'syz.0.3048': attribute type 1 has an invalid length.
[  208.638306][T12887] netlink: 'syz.0.3055': attribute type 1 has an invalid length.
[  208.645514][T12887] netlink: 'syz.0.3055': attribute type 2 has an invalid length.
[  209.265859][T12938] __nla_validate_parse: 11 callbacks suppressed
[  209.265877][T12938] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3081'.
[  209.272382][T12938] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3081'.
[  209.294366][T12945] netlink: 'syz.2.3083': attribute type 2 has an invalid length.
[  209.373702][T12950] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3085'.
[  209.385758][T12951] netlink: 'syz.0.3086': attribute type 21 has an invalid length.
[  209.388909][T12951] netlink: 'syz.0.3086': attribute type 22 has an invalid length.
[  209.391936][T12951] netlink: 'syz.0.3086': attribute type 23 has an invalid length.
[  209.395025][T12951] netlink: 'syz.0.3086': attribute type 25 has an invalid length.
[  209.399645][T12951] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3086'.
[  209.548697][T12967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3094'.
[  209.600706][   T56] block nbd1: Receive control failed (result -107)
[  209.826545][T12979] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.833138][T12979] 8021q: adding VLAN 0 to HW filter on device team0
[  209.843232][T12979] 8021q: adding VLAN 0 to HW filter on device batadv0
[  209.881428][T12979] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  209.886575][T12979] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  209.897981][T12979] veth1_vlan: left promiscuous mode
[  209.901082][T12979] veth0_vlan: left promiscuous mode
[  209.904485][T12979] veth0_vlan: entered promiscuous mode
[  209.910105][T12979] veth1_vlan: entered promiscuous mode
[  209.912241][T12979] veth1_vlan: entered allmulticast mode
[  209.925236][T12979] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  209.930814][T12979] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  209.939673][T12979] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  209.946109][T12979] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  209.973695][T12979] 8021q: adding VLAN 0 to HW filter on device bond1
[  209.978632][T12979] 8021q: adding VLAN 0 to HW filter on device bond2
[  209.989297][T12979] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  209.994850][  T994] syz1: Port: 1 Link ACTIVE
[  210.030933][ T1113] bridge0: port 1(macvlan0) entered blocking state
[  210.033605][ T1113] bridge0: port 1(macvlan0) entered listening state
[  210.043319][ T5668] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  210.046437][ T5668] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  210.049284][ T5668] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  210.055146][ T5668] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  210.070635][ T5668] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  210.074073][ T5668] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  210.077996][ T5668] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  210.080943][ T5668] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  210.086143][T13000] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  210.091048][ T5668] ip6_tnl_xmit_ctl: 1 callbacks suppressed
[  210.091056][ T5668] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  210.096537][T13000] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  210.100969][ T5668] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  210.115967][ T6058] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  210.140174][ T6058] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  210.182966][T13001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  210.210969][T13009] smc: net device lo applied user defined pnetid SYZ2
[  210.214544][T13009] smc: net device lo erased user defined pnetid SYZ2
[  210.223965][T13008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3110'.
[  210.255156][T13011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3112'.
[  210.255699][ T6058] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  210.261820][T13011] netlink: 'syz.1.3112': attribute type 22 has an invalid length.
[  210.267339][ T5668] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  210.270589][T13011] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3112'.
[  210.352497][T13008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3110'.
[  210.406027][ T6058] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  210.796343][ T6058] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  211.096423][T13073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3135'.
[  211.286064][ T5668] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  211.289479][ T5668] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  211.472494][T13088] netlink: 'syz.2.3145': attribute type 1 has an invalid length.
[  211.512986][T13088] 8021q: adding VLAN 0 to HW filter on device bond6
[  211.572469][T13088] bond6: (slave veth11): Enslaving as a backup interface with a down link
[  211.594173][T13088] v: entered promiscuous mode
[  212.516112][T13124] syzkaller0: entered promiscuous mode
[  212.518952][T13124] syzkaller0: entered allmulticast mode
[  214.159261][T13156] tipc: MTU too low for tipc bearer
[  214.716199][T13192] block nbd2: server does not support multiple connections per device.
[  214.721610][T13192] block nbd2: shutting down sockets
[  214.819131][T13202] __nla_validate_parse: 6 callbacks suppressed
[  214.819143][T13202] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3195'.
[  214.979119][T13213] syzkaller1: left promiscuous mode
[  214.980852][T13213] syzkaller1: left allmulticast mode
[  215.115571][    C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed
[  215.115583][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  215.140756][T13225] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3205'.
[  215.769186][T13265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3220'.
[  216.095015][T13286] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3230'.
[  216.259713][T13305] bond7 (unregistering): Released all slaves
[  216.463746][T13319] validate_nla: 1 callbacks suppressed
[  216.463758][T13319] netlink: 'syz.1.3245': attribute type 21 has an invalid length.
[  216.472351][T13319] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3245'.
[  216.476896][T13319] netlink: 'syz.1.3245': attribute type 4 has an invalid length.
[  216.479374][T13319] netlink: 'syz.1.3245': attribute type 3 has an invalid length.
[  216.482091][T13319] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3245'.
[  216.522145][T13321] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  216.884720][T13355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3261'.
[  216.889609][T13355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3261'.
[  216.899990][T13355] erspan0: entered promiscuous mode
[  216.906984][T13355] erspan0: left promiscuous mode
[  217.257906][T13368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3267'.
[  217.300046][T13370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3268'.
[  217.773964][T13414] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.977207][T13431] nbd: must specify an index to disconnect
[  219.159941][T13508] xt_hashlimit: max too large, truncated to 1048576
[  219.275076][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xc9
[  220.039326][T13512] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  220.243281][T13570] __nla_validate_parse: 9 callbacks suppressed
[  220.243297][T13570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3351'.
[  220.254506][T13570] bridge0: left allmulticast mode
[  221.072630][T13635] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  221.079423][T13635] bond8 (unregistering): Released all slaves
[  222.475704][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  223.125917][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  224.108073][T13649] netlink: 'syz.2.3385': attribute type 1 has an invalid length.
[  224.224623][T13667] pim6reg99999999: entered allmulticast mode
[  224.231773][T13669] netlink: 'syz.2.3392': attribute type 1 has an invalid length.
[  224.368454][T13683] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  224.381757][T13681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3398'.
[  224.514530][T13693] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3406'.
[  224.525257][T13693] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3406'.
[  224.564518][T13701] veth0: entered promiscuous mode
[  224.568425][T13701] bond0: entered promiscuous mode
[  224.570162][T13701] bond_slave_0: entered promiscuous mode
[  224.572133][T13701] bond_slave_1: entered promiscuous mode
[  224.580932][T13700] bond0: left promiscuous mode
[  224.588397][T13700] bond_slave_0: left promiscuous mode
[  224.591966][T13700] bond_slave_1: left promiscuous mode
[  224.604628][T13700] veth0: left promiscuous mode
[  224.738566][T13713] xt_CT: You must specify a L4 protocol and not use inversions on it
[  225.105999][T13742] block nbd2: server does not support multiple connections per device.
[  225.117887][T13742] block nbd2: shutting down sockets
[  225.126430][T13749] openvswitch: netlink: IP tunnel dst address not specified
[  225.879800][T13742] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  225.891523][T13742] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  225.932638][T13742] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  225.934956][T13742] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  226.137559][T13742] tipc: Resetting bearer <eth:syzkaller0>
[  226.348895][T13801] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3437'.
[  226.355649][T13801] netlink: 'syz.1.3437': attribute type 7 has an invalid length.
[  226.358546][T13801] netlink: 'syz.1.3437': attribute type 8 has an invalid length.
[  226.364790][T13801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3437'.
[  226.451341][T13802] bridge0: port 1(macvlan0) entered disabled state
[  226.748925][T13802] veth1_vlan: left allmulticast mode
[  227.046578][T13801] erspan0: entered promiscuous mode
[  227.051532][T13801] erspan0: left promiscuous mode
[  227.058928][  T994] syz1: Port: 1 Link DOWN
[  227.081039][   T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  227.090691][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  227.096050][   T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  227.100585][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  227.118053][   T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  227.125951][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  227.133817][   T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  227.138932][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  227.311131][T13836] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3452'.
[  227.516999][T13855] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  227.962952][T13884] bond6: (slave gretap2): Releasing active interface
[  228.009221][T13884] team0: Mode changed to "loadbalance"
[  228.209049][T13908] netlink: 'syz.0.3483': attribute type 1 has an invalid length.
[  228.212226][T13908] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3483'.
[  228.992606][T13921] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3488'.
[  229.481847][T13948] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3499'.
[  229.512777][T13950] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3500'.
[  229.518492][T13950] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3500'.
[  229.599378][T13958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3504'.
[  229.653367][T13962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3506'.
[  229.973498][T13976] netlink: 'syz.0.3512': attribute type 1 has an invalid length.
[  230.014810][T13976] bond3: entered promiscuous mode
[  230.017819][T13976] 8021q: adding VLAN 0 to HW filter on device bond3
[  230.041602][T13978] sctp: [Deprecated]: syz.2.3513 (pid 13978) Use of int in maxseg socket option.
[  230.041602][T13978] Use struct sctp_assoc_value instead
[  230.052164][T13976] 8021q: adding VLAN 0 to HW filter on device bond3
[  230.062237][T13976] bond3: (slave gre1): The slave device specified does not support setting the MAC address
[  230.069851][T13976] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode
[  230.087866][T13976] bond3: (slave gre1): making interface the new active one
[  230.090891][T13976] gre1: entered promiscuous mode
[  230.094100][T13976] bond3: (slave gre1): Enslaving as an active interface with an up link
[  230.369008][T14004] syzkaller1: entered promiscuous mode
[  230.371266][T14004] syzkaller1: entered allmulticast mode
[  230.918501][T14058] xt_hashlimit: size too large, truncated to 1048576
[  231.160516][T14065] netlink: 'syz.1.3547': attribute type 1 has an invalid length.
[  231.163692][T14065] netlink: 'syz.1.3547': attribute type 2 has an invalid length.
[  231.364291][T14079] __nla_validate_parse: 4 callbacks suppressed
[  231.364311][T14079] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3555'.
[  231.394281][T14079] Bluetooth: MGMT ver 1.23
[  231.650967][T14096] netlink: 'syz.1.3562': attribute type 1 has an invalid length.
[  231.653784][T14096] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3562'.
[  231.969867][T14120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3572'.
[  232.030039][T14129] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  232.079125][T14132] bond7: invalid NS target :: specified for addition
[  232.081418][T14132] bond7: option ns_ip6_target: invalid value (18446744073709551615)
[  232.085832][T14132] bond7 (unregistering): Released all slaves
[  232.290929][T14143] sock: sock_timestamping_bind_phc: sock not bind to device
[  232.345016][T14145] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  232.356757][T14145] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  232.498188][T14151] lo speed is unknown, defaulting to 1000
[  232.504274][T14151] lo speed is unknown, defaulting to 1000
[  232.513115][T14151] lo speed is unknown, defaulting to 1000
[  232.521068][T14151] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  232.527339][T14151] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  232.532862][T14151] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  232.544826][T14151] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  232.592216][T14151] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  232.658865][T14151] lo speed is unknown, defaulting to 1000
[  232.665257][T14151] lo speed is unknown, defaulting to 1000
[  232.682622][T14151] lo speed is unknown, defaulting to 1000
[  233.136023][T14183] pimreg9: entered allmulticast mode
[  233.405186][T14208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3613'.
[  233.422136][T14209] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3612'.
[  233.440753][T14211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3615'.
[  233.499005][T14217] syzkaller0: entered promiscuous mode
[  233.501150][T14217] syzkaller0: entered allmulticast mode
[  233.566968][T14225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3622'.
[  233.667342][T14234] syzkaller1: left promiscuous mode
[  233.669566][T14234] syzkaller1: left allmulticast mode
[  233.859825][T14244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3629'.
[  233.867587][T14244] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3629'.
[  235.044187][T14298] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3653'.
[  235.168512][    T9] lo speed is unknown, defaulting to 1000
[  235.340977][T14319] bridge0: port 1(syz_tun) entered blocking state
[  235.344254][T14319] bridge0: port 1(syz_tun) entered disabled state
[  235.348965][T14319] syz_tun: entered promiscuous mode
[  235.459098][T14335] netlink: 'syz.2.3668': attribute type 1 has an invalid length.
[  235.573945][T14340] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  236.129581][T14393] trusted_key: syz.1.3695 sent an empty control message without MSG_MORE.
[  236.389842][T14422] __nla_validate_parse: 1 callbacks suppressed
[  236.389855][T14422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3710'.
[  236.413936][T14422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3710'.
[  236.880939][T14472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3732'.
[  236.883828][T14472] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  237.154613][T14496] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  238.358465][T14559] netlink: 'syz.0.3771': attribute type 1 has an invalid length.
[  238.668092][T14578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3779'.
[  238.717098][T14582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3782'.
[  238.731882][T14582] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3782'.
[  239.023468][T14609] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3793'.
[  239.159548][T14631] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3805'.
[  239.163107][T14631] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3805'.
[  240.018592][T14644] netlink: 'syz.2.3811': attribute type 11 has an invalid length.
[  240.021618][T14644] netlink: 4312 bytes leftover after parsing attributes in process `syz.2.3811'.
[  240.056343][T14646] netlink: 'syz.2.3812': attribute type 83 has an invalid length.
[  240.163484][T14649] veth9: entered allmulticast mode
[  240.173669][T14649] bond4: (slave veth9): Enslaving as an active interface with an up link
[  240.207291][T14657] netlink: 'syz.1.3817': attribute type 1 has an invalid length.
[  240.251195][T14660] bond4 (unregistering): (slave veth9): Releasing backup interface
[  240.264585][T14660] bond4 (unregistering): Released all slaves
[  240.450719][T14672] bond7: option lp_interval: invalid value (0)
[  240.458007][T14672] bond7: option lp_interval: allowed values 1 - 2147483647
[  240.462387][T14672] bond7 (unregistering): Released all slaves
[  240.491153][T14677] netlink: 'syz.2.3826': attribute type 1 has an invalid length.
[  240.684429][T14685] gre0: left promiscuous mode
[  240.704601][T14685] bridge1: left promiscuous mode
[  240.706982][T14685] bridge1: left allmulticast mode
[  240.708871][T14685] ip6gre1: left allmulticast mode
[  240.716057][T14685] vlan2: left promiscuous mode
[  240.722907][T14685] geneve2: left promiscuous mode
[  240.727896][T14685] geneve2: left allmulticast mode
[  240.745247][T14685] gretap2: left allmulticast mode
[  240.747080][T14685] gre1: left promiscuous mode
[  241.068973][T14700] sch_tbf: burst 0 is lower than device lo mtu (143) !
[  241.207854][T14697] lo speed is unknown, defaulting to 1000
[  241.624251][T14709] netlink: 'syz.2.3837': attribute type 1 has an invalid length.
[  241.627403][T14709] netlink: 'syz.2.3837': attribute type 2 has an invalid length.
[  241.924630][T14726] rdma_rxe: rxe_newlink: failed to add lo
[  241.955566][T14726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  242.129084][T14739] netlink: 'syz.0.3849': attribute type 9 has an invalid length.
[  242.158537][T14741] openvswitch: netlink: Message has 1 unknown bytes.
[  242.169732][T14741] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  242.255144][T14745] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  242.481401][T14765] bond8: option mode: invalid value (254)
[  242.486064][T14765] bond8 (unregistering): Released all slaves
[  242.671547][T14782] __nla_validate_parse: 4 callbacks suppressed
[  242.671565][T14782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3871'.
[  242.683879][T14782] netlink: 580 bytes leftover after parsing attributes in process `syz.1.3871'.
[  242.810885][T14791] tipc: Enabling of bearer <utp:s> rejected, media not registered
[  243.065040][T14802] netlink: 'syz.1.3879': attribute type 30 has an invalid length.
[  243.068964][T14802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3879'.
[  243.560209][T14815] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  243.584379][T14815] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  243.587969][T14815] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  244.162676][T14859] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  244.651785][T14890] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3915'.
[  244.656192][T14890] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3915'.
[  244.660658][T14890] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3915'.
[  244.666780][T14889] bridge_slave_0: left allmulticast mode
[  244.670125][T14889] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.679556][T14889] bridge_slave_1: left allmulticast mode
[  244.681810][T14889] bridge_slave_1: left promiscuous mode
[  244.684419][T14889] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.922677][T14889] bond5: (slave veth0_to_bond): Releasing active interface
[  244.927243][T14889] veth7: entered promiscuous mode
[  244.939547][T14889] bond0: (slave bond_slave_0): Releasing backup interface
[  244.947547][T14889] tipc: Resetting bearer <ib:bond_slave_0>
[  244.954948][T14889] tipc: Resetting bearer <ib:bond_slave_0>
[  244.970106][T14889] tipc: Resetting bearer <ib:bond_slave_0>
[  244.974791][T14889] bond0: (slave bond_slave_1): Releasing backup interface
[  244.998654][T14889] team0: Port device team_slave_0 removed
[  245.021940][T14889] team0: Port device team_slave_1 removed
[  245.033425][T14889] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  245.287083][T14903] xt_connbytes: Forcing CT accounting to be enabled
[  245.289936][T14903] xt_CT: You must specify a L4 protocol and not use inversions on it
[  245.563664][T14919] bridge0: port 2(veth1_to_bridge) entered blocking state
[  245.566654][T14919] bridge0: port 2(veth1_to_bridge) entered disabled state
[  245.569425][T14919] veth1_to_bridge: entered allmulticast mode
[  245.572643][T14919] veth1_to_bridge: entered promiscuous mode
[  245.629063][T14923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3932'.
[  245.861349][T14949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3944'.
[  246.541473][T15006] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  246.544125][T15006] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  246.700302][T15014] SET target dimension over the limit!
[  246.855729][ T9984] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 20004 - 0
[  246.862175][ T9984] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 20004 - 0
[  246.870103][ T9984] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 20004 - 0
[  246.874289][ T9984] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 20004 - 0
[  246.886468][T15020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3976'.
[  246.891946][T15020] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  246.899565][T15020] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  246.959473][T15023] netlink: 'syz.2.3976': attribute type 1 has an invalid length.
[  246.962647][T15023] netlink: 'syz.2.3976': attribute type 3 has an invalid length.
[  246.966639][T15023] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3976'.
[  247.425002][T15044] bond7: Unable to set down delay as MII monitoring is disabled
[  247.437976][T15044] bond7 (unregistering): Released all slaves
[  247.575991][T15057] netlink: 'syz.2.3991': attribute type 1 has an invalid length.
[  248.156381][T15086] xt_CONNSECMARK: invalid mode: 254
[  248.320022][T15097] netlink: 'syz.0.4012': attribute type 2 has an invalid length.
[  248.323364][T15097] __nla_validate_parse: 4 callbacks suppressed
[  248.323372][T15097] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4012'.
[  248.669141][T15129] netlink: 'syz.1.4026': attribute type 21 has an invalid length.
[  248.671634][T15129] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4026'.
[  248.674545][T15129] netlink: 'syz.1.4026': attribute type 5 has an invalid length.
[  248.678839][T15129] netlink: 'syz.1.4026': attribute type 6 has an invalid length.
[  248.681954][T15129] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4026'.
[  248.778266][T15119] bond4: entered promiscuous mode
[  248.780807][T15119] 8021q: adding VLAN 0 to HW filter on device bond4
[  248.885115][T15129] lo speed is unknown, defaulting to 1000
[  248.952111][T15139] netlink: 'syz.0.4029': attribute type 13 has an invalid length.
[  249.123709][T15145] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4032'.
[  249.296573][T15155] ipt_REJECT: ECHOREPLY no longer supported.
[  249.543964][T15181] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4049'.
[  249.593480][T15179] netlink: 4456 bytes leftover after parsing attributes in process `syz.2.4046'.
[  249.630190][T15189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4053'.
[  249.694478][T15194] netlink: 'syz.0.4055': attribute type 1 has an invalid length.
[  249.803326][T15201] can: request_module (can-proto-5) failed.
[  250.108105][T15223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4068'.
[  253.683530][T15279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  254.113821][T15307] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4104'.
[  254.141923][T15309] netlink: 'syz.1.4105': attribute type 4 has an invalid length.
[  254.343526][T15315] lo speed is unknown, defaulting to 1000
[  254.495677][T15315] dvmrp0: entered allmulticast mode
[  254.571020][T15320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4109'.
[  254.600968][T15320] 8021q: adding VLAN 0 to HW filter on device bond6
[  254.650650][ T5668] dvmrp0: left allmulticast mode
[  254.729079][T15320] bond6: entered promiscuous mode
[  254.732535][T15320] bond6: entered allmulticast mode
[  254.940685][T15338] netlink: 'syz.2.4116': attribute type 13 has an invalid length.
[  255.067623][T15343] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  255.447657][T15385] ip6_vti0: Caught tx_queue_len zero misconfig
[  255.962516][T15424] lo speed is unknown, defaulting to 1000
[  256.082281][T15424] dvmrp0: entered allmulticast mode
[  256.126399][ T9984] veth7: left promiscuous mode
[  256.173268][T15443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4163'.
[  256.212130][ T9984] dvmrp0: left allmulticast mode
[  256.444274][T15461] netlink: 'syz.0.4172': attribute type 1 has an invalid length.
[  256.450334][T15461] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4172'.
[  256.454626][T15461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4172'.
[  256.553676][T15469] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4175'.
[  256.634759][T15474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4177'.
[  256.639836][T15474] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  256.642749][T15475] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4169'.
[  256.646809][T15474] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  256.649583][T15474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4177'.
[  256.840735][T15487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4183'.
[  256.861724][T15486] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  256.882704][T15486] bond7 (unregistering): Released all slaves
[  257.464274][T15533] netlink: 'syz.2.4203': attribute type 8 has an invalid length.
[  257.733854][T15552] xfrm1: entered allmulticast mode
[  258.390775][T15589] openvswitch: netlink: Duplicate or invalid key (type 0).
[  258.394205][T15589] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  258.409604][T15589] lo: Caught tx_queue_len zero misconfig
[  260.173765][T15703] netlink: 'syz.1.4284': attribute type 1 has an invalid length.
[  260.198680][T15703] ipvlan2: entered allmulticast mode
[  260.200342][T15703] bond7: entered allmulticast mode
[  260.216715][T15703] bond7: (slave bridge7): making interface the new active one
[  260.219301][T15703] bridge7: entered allmulticast mode
[  260.221964][T15703] bond7: (slave bridge7): Enslaving as an active interface with an up link
[  260.337118][T15708] __nla_validate_parse: 18 callbacks suppressed
[  260.337134][T15708] netlink: 236 bytes leftover after parsing attributes in process `syz.1.4286'.
[  260.343787][T15708] netlink: 236 bytes leftover after parsing attributes in process `syz.1.4286'.
[  260.569787][T15729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4297'.
[  260.572708][T15730] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4296'.
[  260.572731][T15730] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4296'.
[  260.681870][T15738] xt_hashlimit: size too large, truncated to 1048576
[  260.737693][T15745] xt_hashlimit: size too large, truncated to 1048576
[  260.780307][T15745] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  260.887962][T15752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4306'.
[  261.278629][T15763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4313'.
[  261.328876][T15765] syzkaller0: entered promiscuous mode
[  261.331827][T15765] syzkaller0: entered allmulticast mode
[  261.354342][T15765] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  261.363146][T15765] tipc: Resetting bearer <eth:syzkaller0>
[  261.402846][T15771] v: left promiscuous mode
[  261.426998][T15771] tipc: Resetting bearer <ib:bond_slave_0>
[  261.450580][T15771] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  261.459333][T15764] tipc: Resetting bearer <eth:syzkaller0>
[  261.482388][T15764] tipc: Disabling bearer <eth:syzkaller0>
[  261.527936][T15779] netlink: 'syz.1.4319': attribute type 4 has an invalid length.
[  261.539746][T15779] netlink: 'syz.1.4319': attribute type 4 has an invalid length.
[  261.688475][T15792] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4325'.
[  261.691547][T15792] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4325'.
[  261.694478][T15792] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4325'.
[  261.727770][T15794] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  263.349995][T15833] netlink: 'syz.2.4342': attribute type 5 has an invalid length.
[  263.660029][T15866] netlink: 'syz.0.4359': attribute type 29 has an invalid length.
[  263.704994][T15869] syzkaller1: entered promiscuous mode
[  263.708667][T15869] syzkaller1: entered allmulticast mode
[  263.804269][T15879] tc_dump_action: action bad kind
[  263.955805][T15890] bond8: (slave bridge8): Enslaving as an active interface with an up link
[  263.991672][T15890] macvlan2: entered promiscuous mode
[  263.995195][T15890] macvlan2: entered allmulticast mode
[  263.998528][T15890] bond8: (slave macvlan2): Error -98 calling set_mac_address
[  264.112957][T15905] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  264.230693][T15916] syzkaller1: entered promiscuous mode
[  264.232511][T15916] syzkaller1: entered allmulticast mode
[  264.441311][T15936] ip6tnl0: Caught tx_queue_len zero misconfig
[  265.470938][T16010] __nla_validate_parse: 7 callbacks suppressed
[  265.470948][T16010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4422'.
[  265.961855][T16042] ipip1: entered promiscuous mode
[  265.963657][T16042] ipip1: entered allmulticast mode
[  266.113096][T16065] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4445'.
[  266.116047][T16065] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4445'.
[  266.472778][T16104] Cannot find add_set index 0 as target
[  266.475764][T16104] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20002
[  266.487000][T16104] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4463'.
[  266.490397][ T6052] lo speed is unknown, defaulting to 1000
[  266.494645][T16104] Cannot find add_set index 0 as target
[  266.811222][T16124] tls_set_device_offload_rx: netdev not found
[  266.824898][T16124] netlink: 'syz.0.4471': attribute type 7 has an invalid length.
[  266.831242][T16124] netlink: 'syz.0.4471': attribute type 3 has an invalid length.
[  266.839503][T16124] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4471'.
[  266.950477][T16126] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  266.986770][T16119] lo speed is unknown, defaulting to 1000
[  267.126892][T16139] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4478'.
[  267.130134][T16139] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4478'.
[  267.134676][T16139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4478'.
[  267.203249][T16142] syzkaller0: entered promiscuous mode
[  267.206188][T16142] syzkaller0: entered allmulticast mode
[  267.521474][T16172] netlink: 'syz.0.4494': attribute type 1 has an invalid length.
[  267.524643][T16172] netlink: 'syz.0.4494': attribute type 4 has an invalid length.
[  267.529499][T16172] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4494'.
[  267.753337][T16176] lo speed is unknown, defaulting to 1000
[  267.766674][T16190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4501'.
[  267.786552][T16192] netlink: 'syz.0.4503': attribute type 1 has an invalid length.
[  267.792561][T16192] netlink: 'syz.0.4503': attribute type 4 has an invalid length.
[  267.952955][T16202] netlink: 'syz.0.4506': attribute type 1 has an invalid length.
[  270.700667][T16202] bond7: (slave veth11): Enslaving as an active interface with a down link
[  270.758950][T16204] bond7: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  271.278086][T16238] netlink: 'syz.0.4522': attribute type 13 has an invalid length.
[  271.281479][T16238] netlink: 'syz.0.4522': attribute type 17 has an invalid length.
[  271.329239][T16238] 8021q: adding VLAN 0 to HW filter on device bond0
[  271.336455][T16238] 8021q: adding VLAN 0 to HW filter on device batadv0
[  271.371534][T16238] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  271.376097][T16238] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  271.383201][T16238] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  271.390095][ T6061] lo speed is unknown, defaulting to 1000
[  271.392469][ T6048] syz1: Port: 1 Link ACTIVE
[  271.397513][ T6061] syz2: Port: 1 Link ACTIVE
[  272.088702][T16281] bond8: option all_slaves_active: invalid value (255)
[  272.094794][T16281] bond8 (unregistering): Released all slaves
[  272.158478][T16288] __nla_validate_parse: 1 callbacks suppressed
[  272.158490][T16288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4539'.
[  272.203799][T16288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4539'.
[  272.254388][T16293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4542'.
[  272.360971][T16300] sctp: [Deprecated]: syz.2.4546 (pid 16300) Use of struct sctp_assoc_value in delayed_ack socket option.
[  272.360971][T16300] Use struct sctp_sack_info instead
[  272.400243][T16304] tap0: tun_chr_ioctl cmd 2148553947
[  272.403570][T16303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4548'.
[  272.542435][T16314] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4553'.
[  272.617605][T16318] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4555'.
[  272.693659][T16326] openvswitch: netlink: IP tunnel dst address not specified
[  272.693671][T16327] tc_dump_action: action bad kind
[  273.134090][T16345] netlink: 'syz.2.4566': attribute type 13 has an invalid length.
[  273.140262][T16345] netlink: 'syz.2.4566': attribute type 12 has an invalid length.
[  273.245217][T16349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4568'.
[  273.551263][T16375] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  273.600027][T16379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4579'.
[  273.714867][T16390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4584'.
[  273.890306][T16401] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4587'.
[  273.907652][T16403] gre0: Master is either lo or non-ether device
[  273.955191][T16405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.010607][T16405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.021329][T16405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.808722][T16444] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  274.896593][T16434] lo speed is unknown, defaulting to 1000
[  275.300073][T16466] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  275.450227][T16476] netlink: 'syz.1.4621': attribute type 1 has an invalid length.
[  275.452729][T16476] netlink: 'syz.1.4621': attribute type 1 has an invalid length.
[  275.685876][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  275.850117][T16510] bond8: entered promiscuous mode
[  275.852290][T16510] bond8: entered allmulticast mode
[  275.854763][T16510] 8021q: adding VLAN 0 to HW filter on device bond8
[  276.076600][ T6048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  276.528577][T16533] tipc: Failed to remove unknown binding: 66,0,0/3383759760:3490683895/3490683897
[  276.540563][T16533] tipc: Failed to remove unknown binding: 66,0,0/3383759760:3490683895/3490683896
[  276.549620][T16533] tipc: Failed to remove unknown binding: 66,0,0/3383759760:3490683895/3490683897
[  276.555787][T16533] tipc: Failed to remove unknown binding: 66,0,0/3383759760:3490683895/3490683896
[  276.876942][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  276.884206][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  277.116456][T16558] netlink: 'syz.1.4657': attribute type 4 has an invalid length.
[  277.169364][T16559] netlink: 'syz.1.4657': attribute type 4 has an invalid length.
[  277.234706][T16548] tipc: Resetting bearer <ib:bond_slave_0>
[  277.693269][T16548] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  277.699506][T16548] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  277.792710][T16548] macvtap1: left promiscuous mode
[  277.830849][T16548] ip6tnl3: left allmulticast mode
[  277.899262][T16548] xfrm1: left allmulticast mode
[  277.934513][   T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  277.938789][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  277.942228][   T12] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 37645 - 0
[  277.948647][   T12] netdevsim netdevsim2 eth0: unset [1, 2] type 2 family 0 port 20004 - 0
[  277.978255][T16568] syzkaller0: entered promiscuous mode
[  277.980501][T16568] syzkaller0: entered allmulticast mode
[  277.984794][   T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  277.990007][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  277.998725][   T12] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 37645 - 0
[  278.003711][   T12] netdevsim netdevsim2 eth1: unset [1, 2] type 2 family 0 port 20004 - 0
[  278.008733][   T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  278.012312][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  278.016310][   T12] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 37645 - 0
[  278.019413][   T12] netdevsim netdevsim2 eth2: unset [1, 2] type 2 family 0 port 20004 - 0
[  278.022746][   T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  278.026319][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  278.029022][   T12] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 37645 - 0
[  278.033971][   T12] netdevsim netdevsim2 eth3: unset [1, 2] type 2 family 0 port 20004 - 0
[  278.093758][T16583] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  279.741326][T16641] __nla_validate_parse: 6 callbacks suppressed
[  279.741337][T16641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4682'.
[  279.749553][T16641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4682'.
[  279.792789][T16645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4684'.
[  279.822286][T16645] 8021q: adding VLAN 0 to HW filter on device bond8
[  279.881600][T16650] syzkaller0: entered promiscuous mode
[  279.884552][T16652] openvswitch: netlink: IPv4 tunnel dst address is zero
[  279.889617][T16650] syzkaller0: entered allmulticast mode
[  280.024153][T16660] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4692'.
[  280.029004][T16660] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4692'.
[  280.032603][T16660] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4692'.
[  280.038260][T16662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4691'.
[  280.041074][T16662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4691'.
[  280.072592][T16662] bond9: Removing last arp target with arp_interval on
[  280.253943][T16678] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4700'.
[  280.664090][T16711] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4714'.
[  280.831293][T16733] : renamed from veth0_to_bond
[  281.153288][T16762] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI %
[  281.791933][T16802] gretap0: left promiscuous mode
[  281.826614][T16802] bridge0: port 1(syz_tun) entered blocking state
[  281.829322][T16802] bridge0: port 1(syz_tun) entered forwarding state
[  281.839801][T16802] bridge0: left promiscuous mode
[  281.843931][T16802] 8021q: adding VLAN 0 to HW filter on device bond0
[  281.849438][T16802] 8021q: adding VLAN 0 to HW filter on device team0
[  281.854967][T16802] 8021q: adding VLAN 0 to HW filter on device batadv0
[  281.907506][T16802] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  281.921905][ T1115] bridge0: port 2(veth1_to_bridge) entered blocking state
[  281.924730][ T1115] bridge0: port 2(veth1_to_bridge) entered forwarding state
[  281.959676][ T6050] bridge0: entered promiscuous mode
[  282.487826][T16829] bridge: RTM_NEWNEIGH with invalid state 0x0
[  282.770959][T16846] tc_dump_action: action bad kind
[  282.868733][   T34] audit: type=1107 audit(1784983744.367:6): pid=16850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  283.459968][T16887] rdma_rxe: rxe_newlink: failed to add lo
[  283.726273][T16907] netlink: 'syz.1.4806': attribute type 1 has an invalid length.
[  283.762922][T16907] bond9: entered promiscuous mode
[  283.768463][T16907] 8021q: adding VLAN 0 to HW filter on device bond9
[  283.800838][T16912] syzkaller0: entered promiscuous mode
[  283.805638][T16912] syzkaller0: entered allmulticast mode
[  283.824323][T16907] bond9: (slave bridge10): making interface the new active one
[  283.827532][T16907] bridge10: entered promiscuous mode
[  283.830506][T16907] bond9: (slave bridge10): Enslaving as an active interface with an up link
[  284.563869][T16954] netlink: 'syz.0.4829': attribute type 3 has an invalid length.
[  284.567690][T16954] netlink: 'syz.0.4829': attribute type 6 has an invalid length.
[  284.771715][T16971] __nla_validate_parse: 6 callbacks suppressed
[  284.771727][T16971] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4837'.
[  284.784811][T16971] ip6gre2: entered promiscuous mode
[  284.788915][T16971] ip6gre2: entered allmulticast mode
[  284.802293][T16971] netlink: 'syz.1.4837': attribute type 6 has an invalid length.
[  284.806567][T16971] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4837'.
[  284.819485][T16971] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  284.822869][T16971] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  284.950629][T16986] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4842'.
[  285.073329][T16990] netlink: 'syz.0.4844': attribute type 1 has an invalid length.
[  285.352779][T17014] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4856'.
[  285.355976][T17014] geneve1: Caught tx_queue_len zero misconfig
[  285.571270][T17026] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4863'.
[  285.669336][T17038] openvswitch: netlink: nsh attr 251 is out of range max 3
[  285.682054][T17040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4868'.
[  285.730882][T17044] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  285.839015][T17050] bridge7: entered promiscuous mode
[  285.841034][T17050] bridge7: entered allmulticast mode
[  285.974700][T17055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4873'.
[  286.304568][T17075] netlink: 'syz.2.4883': attribute type 1 has an invalid length.
[  286.429398][T17090] netlink: 'syz.2.4891': attribute type 1 has an invalid length.
[  286.447981][T17090] bond10: entered promiscuous mode
[  286.449900][T17090] 8021q: adding VLAN 0 to HW filter on device bond10
[  286.466479][T17090] 8021q: adding VLAN 0 to HW filter on device bond10
[  286.470318][T17090] bond10: (slave ipip0): The slave device specified does not support setting the MAC address
[  286.479497][T17090] bond10: (slave ipip0): Setting fail_over_mac to active for active-backup mode
[  286.499315][T17090] bond10: (slave ipip0): making interface the new active one
[  286.511426][T17090] ipip0: entered promiscuous mode
[  286.516968][T17090] bond10: (slave ipip0): Enslaving as an active interface with an up link
[  286.812849][T17105] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  286.834767][T17107] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4898'.
[  287.254631][T17128] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  287.255222][T17127] netlink: 'syz.2.4907': attribute type 1 has an invalid length.
[  287.262222][T17127] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4907'.
[  287.266121][T17127] netlink: 'syz.2.4907': attribute type 1 has an invalid length.
[  287.314415][T17134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4911'.
[  287.430069][T17134] : renamed from sit0 (while UP)
[  287.635488][T17161] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20000
[  287.643932][T17164] nbd: must specify a size in bytes for the device
[  287.865003][T17183] netlink: 'syz.2.4930': attribute type 1 has an invalid length.
[  287.896301][T17183] 8021q: adding VLAN 0 to HW filter on device bond11
[  288.438118][T17210] geneve2: entered promiscuous mode
[  288.440422][T17210] geneve2: entered allmulticast mode
[  288.444037][ T5810] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  288.455682][ T5810] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  288.461811][ T5810] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  288.466018][ T5810] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  288.762972][T17238] validate_nla: 1 callbacks suppressed
[  288.762991][T17238] netlink: 'syz.2.4953': attribute type 1 has an invalid length.
[  288.778226][T17240] ip6t_rpfilter: unknown options
[  288.808840][T17238] 8021q: adding VLAN 0 to HW filter on device bond12
[  288.843472][T17238] bond12: (slave gretap2): Enslaving as a backup interface with an up link
[  288.925982][ T5810] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  288.942577][T17257] Bluetooth: hci1: too big key_count value 29096
[  288.972865][T17261] netlink: 'syz.2.4965': attribute type 1 has an invalid length.
[  289.019043][T17261] 8021q: adding VLAN 0 to HW filter on device bond13
[  289.026847][T17266] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  289.055606][ T5810] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  289.088537][T17261] bond13: (slave geneve4): making interface the new active one
[  289.094216][T17261] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967272. macoff=96
[  289.102614][T17261] bond13: (slave geneve4): Enslaving as an active interface with an up link
[  289.106564][ T5810] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  289.111841][ T5810] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  289.115732][ T5810] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  289.121946][ T5810] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  289.133711][T17261] syz.2.4965 (17261) used greatest stack depth: 20520 bytes left
[  289.453996][T17290] gretap0: left promiscuous mode
[  289.481180][T17290] erspan0: left promiscuous mode
[  289.558846][T17294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.598269][T17294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.602393][T17294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.640025][T17290] bridge0: left promiscuous mode
[  289.652537][T17290] 8021q: adding VLAN 0 to HW filter on device bond0
[  289.654984][T17302] xt_recent: Unsupported userspace flags (000000c5)
[  289.673098][T17290] 8021q: adding VLAN 0 to HW filter on device team0
[  289.731668][ T1115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.788797][T17290] tipc: Resetting bearer <ib:bond_slave_0>
[  289.817310][T17290] batadv_slave_1: left promiscuous mode
[  289.822477][T17290] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  290.022045][   T34] audit: type=1800 audit(1784983751.517:7): pid=17318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4987" name="memory.events" dev="tmpfs" ino=8031 res=0 errno=0
[  290.033046][   T34] audit: type=1804 audit(1784983751.517:8): pid=17318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4987" name="/newroot/1588/memory.events" dev="tmpfs" ino=8031 res=1 errno=0
[  290.117189][T17324] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  290.121036][T17324] batman_adv: batadv0: Adding interface: gretap1
[  290.123621][T17324] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  290.135351][T17324] batman_adv: batadv0: Interface activated: gretap1
[  290.495175][T17336] netlink: 'syz.0.4995': attribute type 11 has an invalid length.
[  290.797858][ T5778] net_ratelimit: 22 callbacks suppressed
[  290.797879][ T5778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.837192][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.858420][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  291.241779][T17359] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  291.265893][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  291.290226][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  291.296583][T17369] __nla_validate_parse: 6 callbacks suppressed
[  291.296594][T17369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5005'.
[  291.465819][T17381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5011'.
[  291.468754][T17381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5011'.
[  291.471890][T17381] netlink: 'syz.2.5011': attribute type 6 has an invalid length.
[  291.519711][T17383] syzkaller1: entered promiscuous mode
[  291.522023][T17383] syzkaller1: entered allmulticast mode
[  291.528708][T17385] xt_cgroup: invalid path, errno=-2
[  291.680747][T17394] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5015'.
[  291.836155][ T5778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  291.894584][T17405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  291.917012][T17405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  291.918804][ T6049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  292.428627][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  292.434853][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  292.613071][T17441] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5033'.
[  292.719365][T17445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  292.731511][T17446] netlink: 420 bytes leftover after parsing attributes in process `syz.0.5034'.
[  292.978203][T17452] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5035'.
[  293.083229][T17462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5041'.
[  293.131671][T17462] vlan2: entered allmulticast mode
[  293.138119][T17462] bridge8: entered allmulticast mode
[  293.149933][T17462] bond2: (slave erspan0): Releasing backup interface
[  293.168823][T17462] bridge8: port 1(erspan0) entered blocking state
[  293.178124][T17462] bridge8: port 1(erspan0) entered disabled state
[  293.181381][T17462] erspan0: entered allmulticast mode
[  293.190170][T17462] erspan0: entered promiscuous mode
[  293.659776][T17499] IPVS: ip_vs_add_dest(): server weight less than zero
[  294.115193][T17541] netlink: 'syz.1.5076': attribute type 1 has an invalid length.
[  294.187471][T17541] 8021q: adding VLAN 0 to HW filter on device bond10
[  294.218777][T17549] bond10: (slave gretap4): Enslaving as a backup interface with an up link
[  294.278066][T17541] bond10 (unregistering): (slave gretap4): Releasing backup interface
[  294.297506][T17541] bond10 (unregistering): Released all slaves
[  294.454508][T17573] xt_policy: too many policy elements
[  294.809678][T17600] netlink: 'syz.1.5092': attribute type 11 has an invalid length.
[  294.812459][T17600] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5092'.
[  294.963812][T17608] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  294.971955][T17608] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  295.250726][T17622] netlink: 'syz.1.5103': attribute type 10 has an invalid length.
[  295.255391][T17622] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5103'.
[  295.622396][T17630] lo speed is unknown, defaulting to 1000
[  295.847335][ T6049] net_ratelimit: 109 callbacks suppressed
[  295.847348][ T6049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  295.941182][T17653] netlink: 'syz.1.5113': attribute type 1 has an invalid length.
[  296.001543][ T5778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.724371][T17673] syz_tun: entered allmulticast mode
[  296.790143][T17672] syz_tun: left allmulticast mode
[  296.879581][T17680] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5124'.
[  296.925894][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.929752][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  297.036226][ T5778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  297.090282][T17688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5128'.
[  297.246572][T17698] netlink: 'syz.1.5133': attribute type 1 has an invalid length.
[  297.433886][T17710] syzkaller0: entered promiscuous mode
[  297.437114][T17710] syzkaller0: entered allmulticast mode
[  297.500189][T17718] netlink: 'syz.1.5143': attribute type 30 has an invalid length.
[  297.709178][T17735] bond9: option miimon: invalid value (18446744073709551615)
[  297.712043][T17735] bond9: option miimon: allowed values 0 - 2147483647
[  297.715919][T17735] bond9 (unregistering): Released all slaves
[  297.732302][T17738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5151'.
[  297.957006][T17753] syz_tun: left promiscuous mode
[  297.959325][T17753] bridge0: port 1(syz_tun) entered disabled state
[  297.970394][T17753] veth1_to_bridge: left allmulticast mode
[  297.972195][T17753] veth1_to_bridge: left promiscuous mode
[  297.974655][T17753] bridge0: port 2(veth1_to_bridge) entered disabled state
[  297.994048][T17753] bond7: (slave bridge7): Releasing active interface
[  297.999020][T17753] bridge7: left allmulticast mode
[  298.010337][T17753] bond8: (slave bridge8): Releasing backup interface
[  298.021680][T17753] bond9: (slave bridge10): Releasing backup interface
[  298.026767][T17753] bridge10: left promiscuous mode
[  298.037580][T17748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5155'.
[  298.066105][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.077060][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.100237][ T6048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.120691][T17763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5162'.
[  298.199316][T17767] netlink: 'syz.2.5164': attribute type 1 has an invalid length.
[  298.218309][T17769] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  298.390756][T17784] netlink: 'syz.0.5172': attribute type 3 has an invalid length.
[  298.459779][T17790] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5175'.
[  298.562686][T17800] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  298.581200][T17802] netlink: 'syz.2.5181': attribute type 1 has an invalid length.
[  298.628720][T17802] 8021q: adding VLAN 0 to HW filter on device bond14
[  298.657548][ T1114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  299.530238][T17807] veth13: entered allmulticast mode
[  299.542209][T17807] bond14: (slave veth13): Enslaving as an active interface with a down link
[  299.564981][T17802] bond14: (slave veth0_to_bond): making interface the new active one
[  299.576786][T17802] veth0_to_bond: entered promiscuous mode
[  299.580079][T17802] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  299.595039][T17815] macvlan1: entered promiscuous mode
[  299.598314][T17815] macvlan1: entered allmulticast mode
[  299.600965][T17815] bond14: entered promiscuous mode
[  299.605209][T17815] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  299.610084][T17815] bond14: (slave macvlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  299.625248][T17815] bond14: left promiscuous mode
[  299.817419][T17814] lo speed is unknown, defaulting to 1000
[  300.320833][T17853] netlink: 27 bytes leftover after parsing attributes in process `syz.0.5202'.
[  300.382201][T17859] tipc: Can't bind to reserved service type 0
[  300.591356][T17870] syzkaller1: entered promiscuous mode
[  300.593713][T17870] syzkaller1: entered allmulticast mode
[  300.954556][T17886] net_ratelimit: 13 callbacks suppressed
[  300.954566][T17886] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  301.133594][T17897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5222'.
[  301.195633][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  301.204024][ T6058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  301.467205][ T9984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  301.473742][ T9984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.116770][T17948] netlink: 207236 bytes leftover after parsing attributes in process `syz.0.5245'.
[  302.235759][ T6058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.299053][T17964] syzkaller1: entered promiscuous mode
[  302.301343][T17964] syzkaller1: entered allmulticast mode
[  302.477264][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.480676][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.486019][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.489461][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.745882][T17980] RDS: rds_bind could not find a transport for fe80::23, load rds_tcp or rds_rdma?
[  302.833356][T18001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5270'.
[  302.837933][T18001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5270'.
[  302.906781][T18005] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5272'.
[  302.912332][T18008] netlink: 'syz.1.5273': attribute type 11 has an invalid length.
[  302.919814][T18008] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5273'.
[  302.982878][T18015] veth0_vlan: Caught tx_queue_len zero misconfig
[  302.987357][T18015] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5275'.
[  303.619699][T18026] veth9: left allmulticast mode
[  303.621869][T18026] bond6: left allmulticast mode
[  303.636950][T18026] bond8: left allmulticast mode
[  303.650427][T18026] bridge7: left allmulticast mode
[  303.661720][T18026] geneve2: left allmulticast mode
[  303.672865][T18026] batman_adv: batadv0: Interface deactivated: gretap1
[  303.711890][T18026] vlan2: left allmulticast mode
[  303.717534][T18026] bridge8: left allmulticast mode
[  303.726422][ T5757] lo speed is unknown, defaulting to 1000
[  303.729034][ T5777] syz1: Port: 1 Link DOWN
[  303.732901][ T5668] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  303.732909][ T5757] syz2: Port: 1 Link DOWN
[  303.738900][ T5668] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  303.747836][ T5668] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  303.754558][ T5668] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  304.181935][T18042] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  304.242004][T18042] syzkaller0: entered promiscuous mode
[  304.244989][T18042] syzkaller0: entered allmulticast mode
[  304.251225][T18042] tipc: Resetting bearer <eth:syzkaller0>
[  304.269469][T18041] tipc: Resetting bearer <eth:syzkaller0>
[  305.908110][T18041] tipc: Disabling bearer <eth:syzkaller0>
[  306.218426][T18089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5304'.
[  306.222550][T18089] netlink: 'syz.1.5304': attribute type 11 has an invalid length.
[  306.232901][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  306.236793][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  306.241254][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  306.243886][T18089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5304'.
[  306.247973][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  306.252407][T18089] netlink: 'syz.1.5304': attribute type 11 has an invalid length.
[  306.396892][ T6048] net_ratelimit: 39 callbacks suppressed
[  306.396909][ T6048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  306.423516][T18102] netlink: 'syz.1.5310': attribute type 13 has an invalid length.
[  306.489762][T18102] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  307.025727][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  307.028528][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  307.436131][ T6048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  308.003667][T18130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  308.016093][T18130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  308.019373][T18130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  308.022162][T18130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  308.027088][T18130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  308.031147][T18130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  308.212096][T18144] netlink: 'syz.0.5323': attribute type 4 has an invalid length.
[  308.401345][T18161] bond15: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  308.408862][T18161] bond15 (unregistering): Released all slaves
[  308.609670][T18176] tipc: Failed to remove unknown binding: 66,1,1/3621322874:3252669536/3252669538
[  308.612810][T18176] tipc: Failed to remove unknown binding: 66,1,1/3621322874:3252669536/3252669538
[  309.223876][T18199] tipc: Resetting bearer <eth:ip6gre0>
[  309.708969][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  309.712649][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  309.730570][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  309.736826][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  309.871096][T18231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5357'.
[  309.892692][T18231] vlan5: entered allmulticast mode
[  309.894441][T18231] bridge11: entered allmulticast mode
[  309.899970][T18231] bridge11: port 1(erspan0) entered blocking state
[  309.902178][T18231] bridge11: port 1(erspan0) entered disabled state
[  309.904376][T18231] erspan0: entered allmulticast mode
[  309.913008][T18231] erspan0: entered promiscuous mode
[  310.555251][T18247] tipc: Resetting bearer <ib:bond_slave_0>
[  310.759941][T18247] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  310.849872][T18247] veth13: left allmulticast mode
[  310.863364][ T9984] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  310.869978][ T9984] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  310.875772][ T9984] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  310.884637][ T9984] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  311.403162][T18299] netlink: 'syz.2.5387': attribute type 1 has an invalid length.
[  311.407042][T18299] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5387'.
[  311.529219][T18308] net_ratelimit: 1037 callbacks suppressed
[  311.529234][T18308] openvswitch: netlink: Multiple metadata blocks provided
[  311.655640][T18322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5395'.
[  311.806657][T18339] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5403'.
[  312.701166][T18397] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5431'.
[  313.431588][T18403] netlink: 'syz.2.5433': attribute type 4 has an invalid length.
[  313.440138][T18403] netlink: 'syz.2.5433': attribute type 4 has an invalid length.
[  313.471975][T18405] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5434'.
[  313.496170][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  313.531171][T18411] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  313.541810][T18411] rdma_rxe: rxe_newlink: failed to add lo
[  313.558414][T18415] netlink: 'syz.1.5438': attribute type 1 has an invalid length.
[  313.563776][T18415] netlink: 'syz.1.5438': attribute type 1 has an invalid length.
[  313.583905][T18417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  313.587762][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  313.591716][T18417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  313.595911][T18416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  313.624899][T18414] netlink: 'syz.0.5439': attribute type 1 has an invalid length.
[  313.650370][T18414] 8021q: adding VLAN 0 to HW filter on device bond9
[  313.678215][T18414] bond9: (slave geneve3): making interface the new active one
[  313.681925][T18414] bond9: (slave geneve3): Enslaving as an active interface with an up link
[  313.687690][ T9984] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  313.694025][ T9984] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  313.704166][ T9984] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  313.707573][ T9984] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  313.895766][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.046376][T18465] netlink: 'syz.2.5463': attribute type 4 has an invalid length.
[  314.048780][T18465] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5463'.
[  314.479747][T18488] syzkaller1: left promiscuous mode
[  314.481459][T18488] syzkaller1: left allmulticast mode
[  314.521960][T18490] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5475'.
[  314.551378][T18492] netlink: 'syz.2.5474': attribute type 15 has an invalid length.
[  314.557652][T18492] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5474'.
[  314.575998][T18494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5476'.
[  315.292277][T18526] syz_tun: entered allmulticast mode
[  315.299897][T18526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5488'.
[  315.304325][T18526] netlink: 'syz.0.5488': attribute type 9 has an invalid length.
[  315.309302][T18526] netlink: 'syz.0.5488': attribute type 6 has an invalid length.
[  315.313501][T18525] syz_tun: left allmulticast mode
[  315.347979][T18528] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5489'.
[  315.587574][T18538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5494'.
[  315.942215][T18568] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5508'.
[  315.950442][T18568] netlink: 103 bytes leftover after parsing attributes in process `syz.0.5508'.
[  316.067232][T18577] team0: Device veth1_virt_wifi failed to register rx_handler
[  316.077980][T18577] xt_HMARK: spi-set and port-set can't be combined
[  316.156166][T18586] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5514'.
[  316.285515][T18599] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5520'.
[  316.881963][T18640] xt_CT: No such helper "snmp_trap"
[  316.999068][T18653] xt_hashlimit: invalid rate
[  317.028771][T18652] syz.0.5545: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  317.036083][T18652] CPU: 0 UID: 0 PID: 18652 Comm: syz.0.5545 Not tainted syzkaller #0 PREEMPT(full) 
[  317.036150][T18652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  317.036162][T18652] Call Trace:
[  317.036169][T18652]  <TASK>
[  317.036177][T18652]  dump_stack_lvl+0xe8/0x150
[  317.036209][T18652]  warn_alloc+0x24c/0x270
[  317.036232][T18652]  ? stack_depot_save_flags+0x33/0x800
[  317.036258][T18652]  ? __pfx_warn_alloc+0x10/0x10
[  317.036280][T18652]  ? kasan_save_track+0x3e/0x80
[  317.036301][T18652]  ? __kasan_kmalloc+0x93/0xb0
[  317.036322][T18652]  ? xsk_setsockopt+0x52a/0x960
[  317.036336][T18652]  ? do_sock_setsockopt+0x17c/0x1b0
[  317.036354][T18652]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  317.036369][T18652]  ? do_syscall_64+0x174/0x580
[  317.036388][T18652]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.036413][T18652]  __vmalloc_node_range_noprof+0x12c/0x1730
[  317.036455][T18652]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  317.036477][T18652]  ? __kasan_kmalloc+0x93/0xb0
[  317.036531][T18652]  ? __kmalloc_cache_noprof+0x32d/0x660
[  317.036554][T18652]  ? __kmalloc_cache_noprof+0x150/0x660
[  317.036578][T18652]  vmalloc_user_noprof+0xad/0xe0
[  317.036596][T18652]  ? xskq_create+0xbf/0x170
[  317.036614][T18652]  xskq_create+0xbf/0x170
[  317.036633][T18652]  xsk_init_queue+0x8a/0xe0
[  317.036652][T18652]  xsk_setsockopt+0x52a/0x960
[  317.036667][T18652]  ? __fget_files+0x2a/0x420
[  317.036689][T18652]  ? __pfx_xsk_setsockopt+0x10/0x10
[  317.036705][T18652]  ? __pfx_aa_sk_perm+0x10/0x10
[  317.036724][T18652]  ? aa_sock_opt_perm+0xff/0x1a0
[  317.036743][T18652]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  317.036760][T18652]  ? __pfx_xsk_setsockopt+0x10/0x10
[  317.036777][T18652]  do_sock_setsockopt+0x17c/0x1b0
[  317.036798][T18652]  __x64_sys_setsockopt+0x13d/0x1b0
[  317.036818][T18652]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.036833][T18652]  do_syscall_64+0x174/0x580
[  317.036849][T18652]  ? trace_irq_disable+0x3b/0x140
[  317.036873][T18652]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.036888][T18652] RIP: 0033:0x7f25eeb9de99
[  317.036904][T18652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  317.036920][T18652] RSP: 002b:00007f25efb25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  317.036937][T18652] RAX: ffffffffffffffda RBX: 00007f25eee25fa0 RCX: 00007f25eeb9de99
[  317.036949][T18652] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  317.036959][T18652] RBP: 00007f25eec33eaf R08: 0000000000000004 R09: 0000000000000000
[  317.036970][T18652] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  317.036982][T18652] R13: 00007f25eee26038 R14: 00007f25eee25fa0 R15: 00007ffc125fca28
[  317.037008][T18652]  </TASK>
[  317.037158][T18652] Mem-Info:
[  317.075827][T18659] validate_nla: 3 callbacks suppressed
[  317.075844][T18659] netlink: 'syz.1.5547': attribute type 2 has an invalid length.
[  317.077136][T18652] active_anon:5057 inactive_anon:0 isolated_anon:0
[  317.077136][T18652]  active_file:82 inactive_file:51681 isolated_file:0
[  317.077136][T18652]  unevictable:1768 dirty:147 writeback:0
[  317.077136][T18652]  slab_reclaimable:10999 slab_unreclaimable:107283
[  317.077136][T18652]  mapped:18271 shmem:2378 pagetables:900
[  317.077136][T18652]  sec_pagetables:0 bounce:0
[  317.077136][T18652]  kernel_misc_reclaimable:0
[  317.077136][T18652]  free:1096596 free_pcp:18279 free_cma:0
[  317.094355][T18659] : entered promiscuous mode
[  317.096859][T18652] Node 0 active_anon:9804kB inactive_anon:0kB active_file:92kB inactive_file:170708kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46416kB dirty:336kB writeback:0kB shmem:4692kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4872kB pagetables:2208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  317.096915][T18652] Node 1 active_anon:10592kB inactive_anon:0kB active_file:236kB inactive_file:36016kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:26668kB dirty:252kB writeback:0kB shmem:4820kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8376kB pagetables:1392kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  317.096963][T18652] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  317.097016][T18652] lowmem_reserve[]: 0 1583 2113 2113 2113
[  317.097054][T18652] Node 0 DMA32 free:1454112kB boost:0kB min:24976kB low:31220kB high:37464kB reserved_highatomic:0KB free_highatomic:0KB active_anon:908kB inactive_anon:0kB active_file:24kB inactive_file:8064kB unevictable:0kB writepending:76kB zspages:0kB present:2080636kB managed:1621320kB mlocked:0kB bounce:0kB free_pcp:6580kB local_pcp:2664kB free_cma:0kB
[  317.097115][T18652] lowmem_reserve[]: 0 0 530 530 530
[  317.097152][T18652] Node 0 Normal free:16476kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8848kB inactive_anon:0kB active_file:68kB inactive_file:162644kB unevictable:3536kB writepending:260kB zspages:0kB present:1572868kB managed:542744kB mlocked:0kB bounce:0kB free_pcp:2108kB local_pcp:2088kB free_cma:0kB
[  317.097208][T18652] lowmem_reserve[]: 0 0 0 0 0
[  317.097241][T18652] Node 1 Normal free:2900436kB boost:0kB min:56380kB low:70472kB high:84564kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10592kB inactive_anon:0kB active_file:236kB inactive_file:36016kB unevictable:3536kB writepending:252kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:64380kB local_pcp:30140kB free_cma:0kB
[  317.097290][T18652] lowmem_reserve[]: 0 0 0 0 0
[  317.097395][T18652] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  317.097545][T18652] Node 0 DMA32: 36*4kB (UME) 20*8kB (U) 3*16kB (UE) 12*32kB (U) 3*64kB (UME) 1*128kB (M) 8*256kB (UM) 10*512kB (ME) 6*1024kB (UME) 5*2048kB (UM) 349*4096kB (UM) = 1454112kB
[  317.264304][T18660] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  317.266413][T18652] Node 0 Normal: 363*4kB (UME) 286*8kB (UME) 70*16kB (UME) 119*32kB (UME) 76*64kB (UME) 16*128kB (UME) 4*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16604kB
[  317.266540][T18652] Node 1 Normal: 651*4kB (ME) 499*8kB (UM) 513*16kB (UME) 592*32kB (UME) 416*64kB (UME) 164*128kB (UME) 68*256kB (UME) 40*512kB (UM) 2*1024kB (UM) 3*2048kB (UM) 677*4096kB (UM) = 2900436kB
[  317.266619][T18652] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  317.266628][T18652] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  317.266636][T18652] 54191 total pagecache pages
[  317.266641][T18652] 0 pages in swap cache
[  317.266646][T18652] Free swap  = 124996kB
[  317.266650][T18652] Total swap = 124996kB
[  317.266655][T18652] 1834877 pages RAM
[  317.266659][T18652] 0 pages HighMem/MovableOnly
[  317.266663][T18652] 391350 pages reserved
[  317.266666][T18652] 0 pages cma reserved
[  317.473366][T18674] netlink: zone id is out of range
[  317.476888][T18674] netlink: zone id is out of range
[  317.478940][T18674] netlink: zone id is out of range
[  317.480926][T18674] netlink: zone id is out of range
[  317.483280][T18674] netlink: zone id is out of range
[  317.485737][T18674] netlink: zone id is out of range
[  317.489444][T18674] netlink: zone id is out of range
[  317.491071][T18674] netlink: zone id is out of range
[  317.493086][T18674] netlink: zone id is out of range
[  317.494681][T18674] netlink: zone id is out of range
[  317.510184][T18675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5552'.
[  317.553750][T18686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5556'.
[  317.664622][T18682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5555'.
[  318.328551][T18742] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  318.331144][T18742] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  318.366711][T18744] netlink: 'syz.2.5580': attribute type 1 has an invalid length.
[  319.000491][T18796] IPv6: NLM_F_CREATE should be specified when creating new route
[  319.118712][T18802] netlink: 'syz.0.5607': attribute type 1 has an invalid length.
[  319.918006][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  319.920540][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  319.923656][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  319.930994][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  320.680263][T18900] __nla_validate_parse: 16 callbacks suppressed
[  320.680280][T18900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5650'.
[  320.979210][T18906] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  321.599003][T18964] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5680'.
[  321.632425][T18944] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5670'.
[  321.883848][T18993] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  321.924869][T18997] netlink: 'syz.2.5692': attribute type 11 has an invalid length.
[  322.123019][T19008] netlink: 'syz.1.5696': attribute type 1 has an invalid length.
[  322.228872][T19000] lo speed is unknown, defaulting to 1000
[  322.281796][T19021] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5700'.
[  322.477148][T19031] team0: entered promiscuous mode
[  322.479255][T19031] team0: entered allmulticast mode
[  322.482113][T19031] 8021q: adding VLAN 0 to HW filter on device team0
[  322.485096][T19031] team0: Cannot enslave team device to itself
[  322.517254][T19033] netlink: 'syz.1.5705': attribute type 2 has an invalid length.
[  322.521359][T19033] netlink: 'syz.1.5705': attribute type 2 has an invalid length.
[  322.524474][T19033] netlink: 67 bytes leftover after parsing attributes in process `syz.1.5705'.
[  322.636135][T19037] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  322.639393][T19037] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  322.643078][T19037] tipc: Resetting bearer <eth:syzkaller0>
[  322.744245][T19043] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5710'.
[  322.883259][T19054] net_ratelimit: 378 callbacks suppressed
[  322.883270][T19054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  322.889027][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  322.936859][T19061] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5717'.
[  323.084849][T19072] tipc: Resetting bearer <eth:syzkaller0>
[  323.290598][T19080] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5726'.
[  323.459313][T19092] netlink: 'syz.0.5731': attribute type 5 has an invalid length.
[  323.519047][T19098] netlink: 'syz.0.5734': attribute type 11 has an invalid length.
[  323.549910][T19100] siw: device registration error -23
[  323.828889][T19116] bond15: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms
[  323.832453][T19116] bond15: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[  323.836806][T19116] bond15: entered allmulticast mode
[  323.960183][T19127] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5748'.
[  323.963833][T19127] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5748'.
[  324.678033][T19186] lo speed is unknown, defaulting to 1000
[  324.828911][T19214] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  324.915773][T19221] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  325.369802][T19252] netlink: 'syz.1.5805': attribute type 4 has an invalid length.
[  325.412520][T19250] tcf_pedit_act: 7 callbacks suppressed
[  325.412540][T19250] tc action pedit offset must be on 32 bit boundaries
[  325.420081][T19250] tc action pedit offset must be on 32 bit boundaries
[  325.422849][T19250] tc action pedit offset must be on 32 bit boundaries
[  325.425696][T19250] tc action pedit offset must be on 32 bit boundaries
[  325.428163][T19250] tc action pedit offset must be on 32 bit boundaries
[  325.430844][T19250] tc action pedit offset must be on 32 bit boundaries
[  325.433487][T19250] tc action pedit offset must be on 32 bit boundaries
[  325.436216][T19250] tc action pedit offset must be on 32 bit boundaries
[  325.438803][T19250] tc action pedit offset must be on 32 bit boundaries
[  325.441405][T19250] tc action pedit offset must be on 32 bit boundaries
[  325.444063][T19250] TC_ACT_REPEAT abuse ?
[  325.585034][T19265] netlink: 'syz.2.5810': attribute type 23 has an invalid length.
[  325.887052][T19291] syzkaller0: entered promiscuous mode
[  325.889120][T19291] syzkaller0: entered allmulticast mode
[  326.282139][T19319] __nla_validate_parse: 5 callbacks suppressed
[  326.282157][T19319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5836'.
[  326.353484][T19323] bond10 (unregistering): Released all slaves
[  326.488411][T19338] netlink: 'syz.0.5845': attribute type 3 has an invalid length.
[  326.491469][T19338] netlink: 'syz.0.5845': attribute type 3 has an invalid length.
[  326.602040][T19349] sctp: [Deprecated]: syz.1.5851 (pid 19349) Use of struct sctp_assoc_value in delayed_ack socket option.
[  326.602040][T19349] Use struct sctp_sack_info instead
[  326.799322][T19365] tipc: New replicast peer: 255.255.255.255
[  326.803362][T19365] tipc: Enabled bearer <udp:syz2>, priority 10
[  327.014756][T19390] openvswitch: netlink: Port 856954028 exceeds max allowable 65535
[  327.024286][T19383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5867'.
[  327.414261][T19420] xfrm0: entered allmulticast mode
[  328.372655][T19446] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5892'.
[  328.388035][T19453] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5895'.
[  328.651427][T19469] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5902'.
[  328.717955][T19474] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5905'.
[  328.721997][T19474] netlink: 'syz.1.5905': attribute type 1 has an invalid length.
[  328.737200][T19474] geneve3: entered promiscuous mode
[  328.890515][T19491] netlink: 58 bytes leftover after parsing attributes in process `syz.1.5913'.
[  328.898188][T19491] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5913'.
[  328.974894][T19498] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5915'.
[  329.157955][T19509] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5918'.
[  329.536962][T19533] netlink: 'syz.0.5933': attribute type 1 has an invalid length.
[  329.633205][T19543] netlink: 'syz.2.5938': attribute type 30 has an invalid length.
[  329.636673][T19543] netlink: 'syz.2.5938': attribute type 29 has an invalid length.
[  329.733604][T19555] netlink: 'syz.2.5944': attribute type 24 has an invalid length.
[  329.776747][T19561] netlink: get zone limit has 4 unknown bytes
[  329.931545][T19578] nbd: must specify at least one socket
[  330.256639][T19614] netlink: 'syz.1.5971': attribute type 7 has an invalid length.
[  330.260477][T19614] netlink: 'syz.1.5971': attribute type 7 has an invalid length.
[  330.499597][T19630] netlink: 'syz.0.5979': attribute type 11 has an invalid length.
[  330.705206][T19647] can: request_module (can-proto-0) failed.
[  331.063449][T19660] lo speed is unknown, defaulting to 1000
[  331.491719][T19694] __nla_validate_parse: 4 callbacks suppressed
[  331.491736][T19694] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6006'.
[  331.522326][T19696] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6007'.
[  331.849765][T19732] IPv6: NLM_F_CREATE should be specified when creating new route
[  332.063949][T19756] xt_l2tp: v2 doesn't support IP mode
[  332.301054][T19770] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6040'.
[  332.507347][T19793] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  332.511824][T19793] bond10 (unregistering): Released all slaves
[  335.378413][T19780] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  335.795650][T19843] tipc: Resetting bearer <eth:ip6gre0>
[  335.860450][T19851] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6076'.
[  336.058395][T19869] IPVS: length: 15 != 8
[  336.167806][T19880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.170727][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.924436][T19933] erspan0: Device is already in use.
[  337.022670][T19941] syzkaller1: entered promiscuous mode
[  337.024951][T19941] syzkaller1: entered allmulticast mode
[  337.151744][T19947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6120'.
[  337.349121][T19956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.357986][T19956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.360976][T19956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.363735][T19956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.366935][T19956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.369870][T19956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.372572][T19956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.375128][T19956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  338.237838][T20026] netlink: 'syz.2.6157': attribute type 32 has an invalid length.
[  338.240549][T20026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6157'.
[  338.254902][T20026] bond16: option coupled_control: invalid value (255)
[  338.259847][T20026] bond16 (unregistering): Released all slaves
[  339.531540][T20082] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6183'.
[  339.534612][T20082] netlink: 'syz.1.6183': attribute type 1 has an invalid length.
[  339.538552][T20082] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6183'.
[  339.617695][T20086] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6184'.
[  339.860000][T20116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  339.906745][T20121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6201'.
[  340.034090][T20131] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6206'.
[  340.861517][T20143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6212'.
[  340.912538][T20143] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6212'.
[  340.956098][T20143] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6212'.
[  341.017148][T20153] bridge0: entered allmulticast mode
[  341.026895][T20153] macvlan0: left allmulticast mode
[  341.029102][T20153] macvlan0: left promiscuous mode
[  341.034419][T20153] bridge0: port 1(macvlan0) entered disabled state
[  341.139639][T20159] netlink: 'syz.2.6219': attribute type 12 has an invalid length.
[  341.624282][T20204] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  341.632519][T20204] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  341.640545][T20204] bond10: left promiscuous mode
[  341.642499][T20204] ipip0: left promiscuous mode
[  341.663021][T20204] bond15: left allmulticast mode
[  342.053493][T20236] bond16: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  342.058258][T20236] bond16 (unregistering): Released all slaves
[  342.073406][T20239] netlink: 'syz.0.6256': attribute type 4 has an invalid length.
[  345.256043][T20254] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  345.679218][T20319] macvtap1: entered promiscuous mode
[  346.101172][T20349] __nla_validate_parse: 2 callbacks suppressed
[  346.101191][T20349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6301'.
[  346.434440][T20382] tipc: Failed to remove unknown binding: 66,1,1/497823950:3487233157/3487233159
[  346.595156][T20374] lo speed is unknown, defaulting to 1000
[  346.599566][T20394] sch_tbf: burst 4 is lower than device lo mtu (1294) !
[  346.786437][T20404] xt_NFQUEUE: number of total queues is 0
[  346.830016][   T34] audit: type=1804 audit(1784983808.327:9): pid=20403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6324" name="/newroot/2134/cgroup.controllers" dev="tmpfs" ino=10772 res=1 errno=0
[  346.846199][   T34] audit: type=1800 audit(1784983808.327:10): pid=20403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6324" name="cgroup.controllers" dev="tmpfs" ino=10772 res=0 errno=0
[  347.131249][T20420] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  347.134993][T20420] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  347.204945][T20423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  347.403923][T20432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6338'.
[  347.414207][T20432] xt_TCPMSS: Only works on TCP SYN packets
[  347.673436][T20441] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6341'.
[  347.683482][T20443] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6342'.
[  348.069866][T20473] netlink: 'syz.1.6357': attribute type 1 has an invalid length.
[  348.073001][T20473] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6357'.
[  348.639814][   T34] audit: type=1800 audit(1784983810.137:11): pid=20495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6365" name="blkio.bfq.time_recursive" dev="tmpfs" ino=10811 res=0 errno=0
[  349.004862][T20520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6376'.
[  349.233608][T20542] netlink: 'syz.1.6384': attribute type 1 has an invalid length.
[  349.280226][T20542] bond11: entered promiscuous mode
[  349.282137][T20542] bond11: entered allmulticast mode
[  349.284203][T20542] 8021q: adding VLAN 0 to HW filter on device bond11
[  349.305625][T20542] erspan1: entered allmulticast mode
[  349.311247][T20542] bond11: (slave erspan1): making interface the new active one
[  349.314236][T20542] erspan1: entered promiscuous mode
[  349.321867][T20542] bond11: (slave erspan1): Enslaving as an active interface with an up link
[  349.336396][T20542] syz.1.6384 (20542) used obsolete PPPIOCDETACH ioctl
[  349.766615][T20571] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  349.832574][T20579] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6404'.
[  349.838197][T20579] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6404'.
[  349.929354][T20585] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6406'.
[  351.115225][T20649] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6435'.
[  351.202845][T20657] netlink: 666 bytes leftover after parsing attributes in process `syz.2.6439'.
[  351.249411][T20663] Unknown options in mask 6
[  351.380024][T20678] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6449'.
[  355.281824][T20773] xt_hashlimit: max too large, truncated to 1048576
[  355.288204][T20775] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6480'.
[  355.297572][T20775] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6480'.
[  355.473741][T20790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6488'.
[  355.524994][T20791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6486'.
[  355.771254][T20820] tap0: tun_chr_ioctl cmd 1074025677
[  355.784525][T20820] tap0: linktype set to 6
[  355.801554][T20826] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6502'.
[  357.052165][T20878] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6524'.
[  357.084096][T20880] syzkaller1: entered promiscuous mode
[  357.086092][T20880] syzkaller1: entered allmulticast mode
[  357.709599][T20905] netlink: 'syz.0.6537': attribute type 21 has an invalid length.
[  357.712713][T20905] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6537'.
[  357.716920][T20905] netlink: 'syz.0.6537': attribute type 4 has an invalid length.
[  357.720020][T20905] netlink: 'syz.0.6537': attribute type 5 has an invalid length.
[  357.726362][T20905] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6537'.
[  357.978797][T20934] netlink: 'syz.1.6549': attribute type 1 has an invalid length.
[  358.351958][T20957] sctp: [Deprecated]: syz.2.6558 (pid 20957) Use of struct sctp_assoc_value in delayed_ack socket option.
[  358.351958][T20957] Use struct sctp_sack_info instead
[  358.482514][T20965] bond16: option arp_all_targets: invalid value (3)
[  358.488777][T20965] bond16 (unregistering): Released all slaves
[  359.343025][T21016] syzkaller1: entered promiscuous mode
[  359.344800][T21016] syzkaller1: entered allmulticast mode
[  359.498836][T20980] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  359.767006][T21038] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6593'.
[  359.872351][T21046] gre0: entered promiscuous mode
[  359.874493][T21046] gre0: entered allmulticast mode
[  359.879026][T21046] net_ratelimit: 36 callbacks suppressed
[  359.879039][T21046] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  360.129010][T21069] netlink: 'syz.0.6608': attribute type 1 has an invalid length.
[  360.132471][T21069] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6608'.
[  360.960689][T21103] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.6623'.
[  361.399450][T21138] syzkaller1: entered promiscuous mode
[  361.401265][T21138] syzkaller1: entered allmulticast mode
[  361.557506][T21144] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6640'.
[  363.246935][T21215] gre0: left promiscuous mode
[  363.249053][T21215] gre0: left allmulticast mode
[  363.258204][T21215] team0: left promiscuous mode
[  363.261225][T21215] team0: left allmulticast mode
[  363.280922][T21215] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  363.310411][T21215] tipc: Resetting bearer <eth:syzkaller0>
[  363.322211][T21215] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  363.328860][T21215] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  363.343989][T21215] ipvlan2: left allmulticast mode
[  363.349336][T21215] bond7: left allmulticast mode
[  363.359293][T21215] bond9: left promiscuous mode
[  363.363996][T21215] ip6gre2: left promiscuous mode
[  363.369002][T21215] ip6gre2: left allmulticast mode
[  363.380079][T21215] vlan5: left allmulticast mode
[  363.383419][T21215] bridge11: left allmulticast mode
[  363.393276][T21215] geneve3: left promiscuous mode
[  363.415907][T21215] bond11: left promiscuous mode
[  363.425547][T21215] erspan1: left promiscuous mode
[  363.432489][T21215] bond11: left allmulticast mode
[  363.440866][T21219] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  363.452465][T21215] erspan1: left allmulticast mode
[  363.463046][T21219] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  363.473885][ T5668] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  363.479232][T21219] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  363.482347][ T5668] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  363.486107][ T5668] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  363.493134][ T5668] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  363.804446][T21229] netlink: 8752 bytes leftover after parsing attributes in process `syz.2.6676'.
[  364.019257][T21248] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  364.022341][T21248] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  364.029822][T21248] TC_ACT_REPEAT abuse ?
[  365.058828][T21305] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  365.702686][T21364] smc: net device vlan1 applied user defined pnetid SYZ2
[  365.748901][T21369] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  365.756726][T21369] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  365.793442][T21369] tipc: Resetting bearer <eth:syzkaller0>
[  365.963491][T21384] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6746'.
[  366.569215][T21406] netlink: 'syz.1.6756': attribute type 1 has an invalid length.
[  366.602067][T21406] 8021q: adding VLAN 0 to HW filter on device bond12
[  366.617167][T21406] tipc: Enabled bearer <eth:batadv0>, priority 10
[  366.623102][T21406] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6756'.
[  366.636465][T21406] 8021q: adding VLAN 0 to HW filter on device batadv1
[  366.641425][T21406] bond12: (slave batadv1): making interface the new active one
[  366.644622][T21406] bond12: (slave batadv1): Enslaving as an active interface with an up link
[  366.859709][T21412] netlink: 'syz.2.6758': attribute type 4 has an invalid length.
[  366.872236][T21412] netlink: 'syz.2.6758': attribute type 4 has an invalid length.
[  366.908694][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.029836][T21420] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6762'.
[  367.175995][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.208654][T21434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.216299][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.276969][T21437] bond16: Removing last ns target with arp_interval on
[  367.598538][T21449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6774'.
[  367.638763][T21453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6777'.
[  367.641340][T21451] GUP no longer grows the stack in syz.1.6776 (21451): 200000003000-20000000a000 (200000001000)
[  367.655731][T21451] CPU: 0 UID: 0 PID: 21451 Comm: syz.1.6776 Not tainted syzkaller #0 PREEMPT(full) 
[  367.655752][T21451] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  367.655765][T21451] Call Trace:
[  367.655773][T21451]  <TASK>
[  367.655781][T21451]  dump_stack_lvl+0xe8/0x150
[  367.655826][T21451]  __get_user_pages+0x238c/0x2720
[  367.655844][T21451]  ? __gup_longterm_locked+0xc3b/0x15c0
[  367.655886][T21451]  __gup_longterm_locked+0xd52/0x15c0
[  367.655899][T21451]  ? lock_acquire+0x106/0x350
[  367.655922][T21451]  gup_fast_fallback+0x1d8c/0x20e0
[  367.655946][T21451]  ? __pfx_gup_fast_fallback+0x10/0x10
[  367.655956][T21451]  ? is_valid_gup_args+0x11f/0x200
[  367.655966][T21451]  ? get_user_pages_fast+0x4d/0xb0
[  367.655976][T21451]  __iov_iter_get_pages_alloc+0x378/0xa40
[  367.655994][T21451]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  367.656005][T21451]  iov_iter_get_pages2+0x5e/0xa0
[  367.656019][T21451]  __se_sys_vmsplice+0x7b5/0x1660
[  367.656040][T21451]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  367.656053][T21451]  ? __pfx_futex_wait+0x10/0x10
[  367.656092][T21451]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.656102][T21451]  do_syscall_64+0x174/0x580
[  367.656145][T21451]  ? trace_irq_disable+0x3b/0x140
[  367.656181][T21451]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.656190][T21451] RIP: 0033:0x7fdaf8f9de99
[  367.656201][T21451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  367.656210][T21451] RSP: 002b:00007fdaf71f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  367.656220][T21451] RAX: ffffffffffffffda RBX: 00007fdaf9225fa0 RCX: 00007fdaf8f9de99
[  367.656227][T21451] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006
[  367.656233][T21451] RBP: 00007fdaf9033eaf R08: 0000000000000000 R09: 0000000000000000
[  367.656239][T21451] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  367.656244][T21451] R13: 00007fdaf9226038 R14: 00007fdaf9225fa0 R15: 00007fffd813d6b8
[  367.656260][T21451]  </TASK>
[  367.761088][T21459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6780'.
[  367.788878][T21461] netlink: 'syz.1.6781': attribute type 1 has an invalid length.
[  367.791503][T21457] tipc: Resetting bearer <eth:syzkaller0>
[  367.792847][T21461] netlink: 200 bytes leftover after parsing attributes in process `syz.1.6781'.
[  367.798134][T21461] netlink: 'syz.1.6781': attribute type 1 has an invalid length.
[  367.801148][T21461] netlink: 29 bytes leftover after parsing attributes in process `syz.1.6781'.
[  367.804067][T21457] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  367.808553][T21457] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  368.002491][T21481] netlink: 'syz.2.6791': attribute type 5 has an invalid length.
[  368.005506][T21481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6791'.
[  368.108034][T21492] xt_hashlimit: size too large, truncated to 1048576
[  368.157050][T21502] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  368.271166][T21508] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  368.273737][T21508] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  368.276718][T21508] tipc: Resetting bearer <eth:syzkaller0>
[  368.280602][T21508] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  368.590510][T21533] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  368.594545][T21533] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  368.956765][T21564] __nla_validate_parse: 1 callbacks suppressed
[  368.956780][T21564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6820'.
[  369.038181][T21568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6821'.
[  369.256419][T21581] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6826'.
[  369.504253][T21589] sit5: entered promiscuous mode
[  369.623156][T21597] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  369.631671][T21597] syzkaller0: entered promiscuous mode
[  369.638024][T21597] syzkaller0: entered allmulticast mode
[  369.676513][T21597] tipc: Resetting bearer <eth:syzkaller0>
[  369.691583][T21596] tipc: Resetting bearer <eth:syzkaller0>
[  369.736420][T21596] tipc: Disabling bearer <eth:syzkaller0>
[  369.910651][T21617] syzkaller0: entered promiscuous mode
[  369.913344][T21617] syzkaller0: entered allmulticast mode
[  370.279156][T21645] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  370.322118][T21648] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6860'.
[  370.335916][T21648] netlink: 'syz.1.6860': attribute type 9 has an invalid length.
[  370.343256][T21648] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.6860'.
[  370.544855][T21668] netlink: 'syz.2.6869': attribute type 3 has an invalid length.
[  370.549183][T21668] netlink: 'syz.2.6869': attribute type 1 has an invalid length.
[  370.552696][T21668] netlink: 'syz.2.6869': attribute type 2 has an invalid length.
[  370.860969][T21688] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6877'.
[  371.171661][T21707] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6887'.
[  371.519763][T21732] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6899'.
[  371.529499][T21730] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6898'.
[  371.708971][T21747] netlink: 'syz.1.6905': attribute type 16 has an invalid length.
[  371.719257][T21747] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.6905'.
[  371.744919][T21748] syzkaller0: entered promiscuous mode
[  371.760837][T21748] syzkaller0: entered allmulticast mode
[  371.952291][T21767] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  371.954940][T21767] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  372.312508][T21800] xt_CT: You must specify a L4 protocol and not use inversions on it
[  372.314010][T21804] x_tables: duplicate entry at hook 2
[  372.344359][T21806] SET target dimension over the limit!
[  372.504953][T21810] block nbd1: NBD_DISCONNECT
[  372.509798][T21810] block nbd1: Send disconnect failed -32
[  372.514278][T21810] block nbd1: shutting down sockets
[  372.853517][T21841] netlink: 'syz.0.6949': attribute type 1 has an invalid length.
[  372.871958][ T9984] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  372.874826][ T9984] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  372.880974][ T9984] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  372.891240][ T9984] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  372.978452][T21851] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20000
[  372.982765][T21851] vlan0: entered promiscuous mode
[  373.150366][T21867] macvlan0: Caught tx_queue_len zero misconfig
[  373.398902][T21877] 8021q: adding VLAN 0 to HW filter on device bond0
[  373.417420][T21877] 8021q: adding VLAN 0 to HW filter on device batadv0
[  373.453684][ T5778] lo speed is unknown, defaulting to 1000
[  373.456136][   T33] syz1: Port: 1 Link ACTIVE
[  373.457812][ T5778] syz2: Port: 1 Link ACTIVE
[  373.460284][T21879] netlink: 'syz.0.6966': attribute type 1 has an invalid length.
[  373.470526][T21879] netlink: 'syz.0.6966': attribute type 2 has an invalid length.
[  373.634700][T21891] bond10: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms
[  373.646101][T21891] bond10: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms
[  373.659022][T21891] bond10: entered allmulticast mode
[  373.664366][T21891] 8021q: adding VLAN 0 to HW filter on device bond10
[  374.032745][T21912] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  374.038260][T21912] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.260277][T21918] bond13: option fail_over_mac: invalid value (127)
[  374.265045][T21918] bond13 (unregistering): Released all slaves
[  374.295584][T21912] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  374.298772][T21912] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.442326][T21912] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  374.458800][T21912] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.530098][T21912] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  374.534486][T21912] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.671746][T21933] __nla_validate_parse: 12 callbacks suppressed
[  374.671758][T21933] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6992'.
[  374.696303][ T9984] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  374.702542][ T9984] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  374.734687][ T5668] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  374.738273][ T5668] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  374.751744][ T5668] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  374.762507][ T5668] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  374.787971][ T9984] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  374.791233][ T9984] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  375.054389][T21953] batman_adv: batadv0: Removing interface: gretap1
[  375.663591][T21956] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7003'.
[  376.956364][T22029] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7031'.
[  377.177839][T22043] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7037'.
[  377.185989][T22043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7037'.
[  377.193325][T22043] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7037'.
[  377.206293][T22043] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7037'.
[  378.126393][T22099] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7055'.
[  378.179722][T22099] syzkaller1: entered promiscuous mode
[  378.182163][T22099] syzkaller1: entered allmulticast mode
[  378.272522][T22104] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7057'.
[  378.393628][T22109] netlink: 'syz.1.7060': attribute type 83 has an invalid length.
[  378.896496][T22132] netlink: 'syz.1.7069': attribute type 1 has an invalid length.
[  378.899367][T22132] netlink: 228 bytes leftover after parsing attributes in process `syz.1.7069'.
[  378.916575][T22134] netlink: 'syz.2.7070': attribute type 1 has an invalid length.
[  378.943549][T22134] 8021q: adding VLAN 0 to HW filter on device bond17
[  379.044591][T22141] syzkaller0: tun_chr_ioctl cmd 1074812118
[  379.599982][T22192] syzkaller0: entered promiscuous mode
[  379.601902][T22192] syzkaller0: entered allmulticast mode
[  380.036675][T22213] __nla_validate_parse: 1 callbacks suppressed
[  380.036692][T22213] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7105'.
[  380.175106][T22218] syzkaller1: left promiscuous mode
[  380.177563][T22218] syzkaller1: left allmulticast mode
[  380.540557][T22237] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  380.851807][T22250] syzkaller0: entered promiscuous mode
[  380.854008][T22250] syzkaller0: entered allmulticast mode
[  380.871966][T22250] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7120'.
[  380.885227][T22250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7120'.
[  380.889769][T22250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7120'.
[  380.893086][T22250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7120'.
[  380.896609][T22250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7120'.
[  380.899890][T22250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7120'.
[  380.902951][T22250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7120'.
[  381.024860][T22254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7122'.
[  381.651185][T22273] bond14: (slave veth0_to_bond): Releasing active interface
[  381.655245][T22273] veth0_to_bond: left promiscuous mode
[  381.670855][T22273] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  381.691731][T22273] team0: Port device xfrm0 added
[  382.573762][T22283] IPv6: NLM_F_CREATE should be specified when creating new route
[  383.307551][T22224] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  383.390379][T22289] netlink: 296 bytes leftover after parsing attributes in process `syz.1.7136'.
[  384.723249][T22364] syzkaller1: entered promiscuous mode
[  384.726230][T22364] syzkaller1: entered allmulticast mode
[  384.876716][T22368] xt_l2tp: missing protocol rule (udp|l2tpip)
[  387.013304][T22339] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  387.214748][T22397] __nla_validate_parse: 6 callbacks suppressed
[  387.214759][T22397] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7181'.
[  387.227240][T22401] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  387.239761][T22401] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  387.318628][  T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.321963][  T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.348840][T22406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  387.359262][ T5757] ------------[ cut here ]------------
[  387.362768][ T5757] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  387.365886][ T5757] WARNING: net/mac80211/rate.c:404 at __rate_control_send_low+0x60c/0x8a0, CPU#0: kworker/0:4/5757
[  387.369778][ T5757] Modules linked in:
[  387.371745][ T5757] CPU: 0 UID: 0 PID: 5757 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) 
[  387.375420][ T5757] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  387.379360][ T5757] Workqueue: mld mld_ifc_work
[  387.381313][ T5757] RIP: 0010:__rate_control_send_low+0x638/0x8a0
[  387.383757][ T5757] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f
[  387.391219][ T5757] RSP: 0018:ffffc900043ae738 EFLAGS: 00010246
[  387.393564][ T5757] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000
[  387.396769][ T5757] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff906964d0
[  387.399806][ T5757] RBP: ffff88810ea10f40 R08: 0000000000000000 R09: 0000000000000000
[  387.402859][ T5757] R10: 0000000000000004 R11: 0000000000000000 R12: ffff8881147953a8
[  387.406056][ T5757] R13: dffffc0000000000 R14: ffffffff906964d0 R15: ffff88810ea13258
[  387.409113][ T5757] FS:  0000000000000000(0000) GS:ffff88818d954000(0000) knlGS:0000000000000000
[  387.412477][ T5757] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  387.415064][ T5757] CR2: 0000001b313efff8 CR3: 0000000111804000 CR4: 00000000000006f0
[  387.418234][ T5757] Call Trace:
[  387.419568][ T5757]  <TASK>
[  387.420757][ T5757]  rate_control_send_low+0x1a7/0x7b0
[  387.422866][ T5757]  ? __lock_acquire+0x683/0x2cf0
[  387.424835][ T5757]  rate_control_get_rate+0x20b/0x5d0
[  387.427044][ T5757]  ieee80211_tx_h_rate_ctrl+0xafa/0x1760
[  387.429250][ T5757]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  387.431725][ T5757]  ? __asan_memcpy+0x40/0x70
[  387.433537][ T5757]  invoke_tx_handlers_late+0xb5/0x1830
[  387.435633][ T5757]  ? ieee80211_tx_h_select_key+0xd1c/0x1a90
[  387.437496][ T5757]  ieee80211_tx_dequeue+0x3fb6/0x55a0
[  387.439637][ T5757]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[  387.441860][ T5757]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  387.443908][ T5757]  ? do_raw_spin_lock+0x12b/0x2f0
[  387.445999][ T5757]  ? ieee80211_queue_skb+0x16e0/0x22c0
[  387.448221][ T5757]  ieee80211_hwsim_wake_tx_queue+0xbb/0x150
[  387.450768][ T5757]  ieee80211_queue_skb+0x1923/0x22c0
[  387.452869][ T5757]  ieee80211_tx+0x2c2/0x4b0
[  387.456802][ T5757]  ? __pfx_ieee80211_tx+0x10/0x10
[  387.458583][ T5757]  ? ieee80211_xmit+0x2e5/0x3c0
[  387.460353][ T5757]  __ieee80211_subif_start_xmit+0xf06/0x1690
[  387.463046][ T5757]  ? __ieee80211_subif_start_xmit+0x2ca/0x1690
[  387.465575][ T5757]  ? worker_thread+0xa47/0xfb0
[  387.467390][ T5757]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[  387.469888][ T5757]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[  387.472301][ T5757]  ieee80211_subif_start_xmit+0xf1/0x570
[  387.474509][ T5757]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[  387.477059][ T5757]  ? __pfx_netif_skb_features+0x10/0x10
[  387.479182][ T5757]  dev_hard_start_xmit+0x2cd/0x830
[  387.481147][ T5757]  __dev_queue_xmit+0x14c0/0x3820
[  387.483106][ T5757]  ? __lock_acquire+0x683/0x2cf0
[  387.485046][ T5757]  ? __dev_queue_xmit+0x29b/0x3820
[  387.487120][ T5757]  ? ___neigh_create+0x1cd2/0x22b0
[  387.489144][ T5757]  ? __pfx___dev_queue_xmit+0x10/0x10
[  387.491223][ T5757]  ? neigh_resolve_output+0x428/0x720
[  387.493318][ T5757]  ? eth_header+0x11b/0x200
[  387.495042][ T5757]  ? __asan_memcpy+0x40/0x70
[  387.496970][ T5757]  ? ip6_output+0x11e/0x540
[  387.498771][ T5757]  ip6_output+0x337/0x540
[  387.500523][ T5757]  ? __pfx_ip6_output+0x10/0x10
[  387.502383][ T5757]  NF_HOOK+0x177/0x4f0
[  387.503916][ T5757]  ? __pfx_NF_HOOK+0x10/0x10
[  387.505802][ T5757]  ? icmp6_dst_alloc+0x39b/0x430
[  387.507711][ T5757]  ? __pfx_dst_output+0x10/0x10
[  387.509600][ T5757]  ? __local_bh_enable_ip+0xd0/0x130
[  387.511615][ T5757]  ? icmp6_dst_alloc+0x39b/0x430
[  387.513492][ T5757]  ? icmp6_dst_alloc+0x39b/0x430
[  387.515492][ T5757]  mld_sendpack+0x890/0xe10
[  387.517259][ T5757]  ? mld_sendpack+0x206/0xe10
[  387.519094][ T5757]  ? __pfx_mld_sendpack+0x10/0x10
[  387.521070][ T5757]  mld_ifc_work+0x842/0xd60
[  387.522798][ T5757]  ? process_scheduled_works+0xa20/0x14e0
[  387.524938][ T5757]  process_scheduled_works+0xa8e/0x14e0
[  387.527190][ T5757]  ? __pfx_process_scheduled_works+0x10/0x10
[  387.529515][ T5757]  ? assign_work+0x3cf/0x5d0
[  387.531313][ T5757]  worker_thread+0xa47/0xfb0
[  387.533111][ T5757]  ? __kthread_parkme+0x71/0x1f0
[  387.535048][ T5757]  kthread+0x388/0x470
[  387.536747][ T5757]  ? __pfx_worker_thread+0x10/0x10
[  387.538735][ T5757]  ? __pfx_kthread+0x10/0x10
[  387.540552][ T5757]  ret_from_fork+0x514/0xb70
[  387.542352][ T5757]  ? __pfx_ret_from_fork+0x10/0x10
[  387.544344][ T5757]  ? __switch_to+0xc89/0x1420
[  387.546276][ T5757]  ? __pfx_kthread+0x10/0x10
[  387.548051][ T5757]  ret_from_fork_asm+0x1a/0x30
[  387.549921][ T5757]  </TASK>
[  387.551097][ T5757] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  387.553880][ T5757] CPU: 0 UID: 0 PID: 5757 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) 
[  387.557477][ T5757] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  387.561328][ T5757] Workqueue: mld mld_ifc_work
[  387.563155][ T5757] Call Trace:
[  387.564446][ T5757]  <TASK>
[  387.565603][ T5757]  vpanic+0x56c/0xa60
[  387.567158][ T5757]  ? __pfx__printk+0x10/0x10
[  387.568898][ T5757]  ? __pfx_vpanic+0x10/0x10
[  387.570686][ T5757]  ? is_bpf_text_address+0x292/0x2b0
[  387.572740][ T5757]  ? is_bpf_text_address+0x26/0x2b0
[  387.574754][ T5757]  panic+0xc5/0xd0
[  387.576241][ T5757]  ? __pfx_panic+0x10/0x10
[  387.577987][ T5757]  ? ret_from_fork_asm+0x1a/0x30
[  387.579934][ T5757]  __warn+0x315/0x4c0
[  387.581482][ T5757]  ? __rate_control_send_low+0x60c/0x8a0
[  387.583652][ T5757]  ? __rate_control_send_low+0x60c/0x8a0
[  387.585853][ T5757]  __report_bug+0x276/0x570
[  387.587627][ T5757]  ? __rate_control_send_low+0x60c/0x8a0
[  387.589745][ T5757]  ? __pfx___report_bug+0x10/0x10
[  387.591701][ T5757]  ? unwind_next_frame+0x8f/0x2550
[  387.593680][ T5757]  ? lock_acquire+0x106/0x350
[  387.595499][ T5757]  report_bug_entry+0x19a/0x290
[  387.597352][ T5757]  ? __rate_control_send_low+0x638/0x8a0
[  387.599520][ T5757]  ? __rate_control_send_low+0x63d/0x8a0
[  387.601671][ T5757]  handle_bug+0xce/0x200
[  387.603338][ T5757]  exc_invalid_op+0x1a/0x50
[  387.605183][ T5757]  asm_exc_invalid_op+0x1a/0x20
[  387.607148][ T5757] RIP: 0010:__rate_control_send_low+0x638/0x8a0
[  387.609566][ T5757] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f
[  387.616869][ T5757] RSP: 0018:ffffc900043ae738 EFLAGS: 00010246
[  387.619234][ T5757] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000
[  387.622271][ T5757] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff906964d0
[  387.625528][ T5757] RBP: ffff88810ea10f40 R08: 0000000000000000 R09: 0000000000000000
[  387.628536][ T5757] R10: 0000000000000004 R11: 0000000000000000 R12: ffff8881147953a8
[  387.631680][ T5757] R13: dffffc0000000000 R14: ffffffff906964d0 R15: ffff88810ea13258
[  387.634724][ T5757]  ? __rate_control_send_low+0x600/0x8a0
[  387.636873][ T5757]  rate_control_send_low+0x1a7/0x7b0
[  387.638865][ T5757]  ? __lock_acquire+0x683/0x2cf0
[  387.640740][ T5757]  rate_control_get_rate+0x20b/0x5d0
[  387.642870][ T5757]  ieee80211_tx_h_rate_ctrl+0xafa/0x1760
[  387.645073][ T5757]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  387.647424][ T5757]  ? __asan_memcpy+0x40/0x70
[  387.649241][ T5757]  invoke_tx_handlers_late+0xb5/0x1830
[  387.651340][ T5757]  ? ieee80211_tx_h_select_key+0xd1c/0x1a90
[  387.653600][ T5757]  ieee80211_tx_dequeue+0x3fb6/0x55a0
[  387.655707][ T5757]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[  387.657902][ T5757]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  387.659933][ T5757]  ? do_raw_spin_lock+0x12b/0x2f0
[  387.661914][ T5757]  ? ieee80211_queue_skb+0x16e0/0x22c0
[  387.664043][ T5757]  ieee80211_hwsim_wake_tx_queue+0xbb/0x150
[  387.666346][ T5757]  ieee80211_queue_skb+0x1923/0x22c0
[  387.668389][ T5757]  ieee80211_tx+0x2c2/0x4b0
[  387.670563][ T5757]  ? __pfx_ieee80211_tx+0x10/0x10
[  387.672488][ T5757]  ? ieee80211_xmit+0x2e5/0x3c0
[  387.674377][ T5757]  __ieee80211_subif_start_xmit+0xf06/0x1690
[  387.676713][ T5757]  ? __ieee80211_subif_start_xmit+0x2ca/0x1690
[  387.679231][ T5757]  ? worker_thread+0xa47/0xfb0
[  387.681012][ T5757]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[  387.683428][ T5757]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[  387.685775][ T5757]  ieee80211_subif_start_xmit+0xf1/0x570
[  387.687930][ T5757]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[  387.690377][ T5757]  ? __pfx_netif_skb_features+0x10/0x10
[  387.692514][ T5757]  dev_hard_start_xmit+0x2cd/0x830
[  387.694494][ T5757]  __dev_queue_xmit+0x14c0/0x3820
[  387.696463][ T5757]  ? __lock_acquire+0x683/0x2cf0
[  387.698391][ T5757]  ? __dev_queue_xmit+0x29b/0x3820
[  387.700348][ T5757]  ? ___neigh_create+0x1cd2/0x22b0
[  387.702364][ T5757]  ? __pfx___dev_queue_xmit+0x10/0x10
[  387.704442][ T5757]  ? neigh_resolve_output+0x428/0x720
[  387.706520][ T5757]  ? eth_header+0x11b/0x200
[  387.708296][ T5757]  ? __asan_memcpy+0x40/0x70
[  387.710082][ T5757]  ? ip6_output+0x11e/0x540
[  387.711843][ T5757]  ip6_output+0x337/0x540
[  387.713774][ T5757]  ? __pfx_ip6_output+0x10/0x10
[  387.715504][ T5757]  NF_HOOK+0x177/0x4f0
[  387.716726][ T5757]  ? __pfx_NF_HOOK+0x10/0x10
[  387.718031][ T5757]  ? icmp6_dst_alloc+0x39b/0x430
[  387.719655][ T5757]  ? __pfx_dst_output+0x10/0x10
[  387.721130][ T5757]  ? __local_bh_enable_ip+0xd0/0x130
[  387.722718][ T5757]  ? icmp6_dst_alloc+0x39b/0x430
[  387.724235][ T5757]  ? icmp6_dst_alloc+0x39b/0x430
[  387.725709][ T5757]  mld_sendpack+0x890/0xe10
[  387.727089][ T5757]  ? mld_sendpack+0x206/0xe10
[  387.728488][ T5757]  ? __pfx_mld_sendpack+0x10/0x10
[  387.730144][ T5757]  mld_ifc_work+0x842/0xd60
[  387.731531][ T5757]  ? process_scheduled_works+0xa20/0x14e0
[  387.733238][ T5757]  process_scheduled_works+0xa8e/0x14e0
[  387.735083][ T5757]  ? __pfx_process_scheduled_works+0x10/0x10
[  387.737056][ T5757]  ? assign_work+0x3cf/0x5d0
[  387.738660][ T5757]  worker_thread+0xa47/0xfb0
[  387.740460][ T5757]  ? __kthread_parkme+0x71/0x1f0
[  387.742381][ T5757]  kthread+0x388/0x470
[  387.744008][ T5757]  ? __pfx_worker_thread+0x10/0x10
[  387.745938][ T5757]  ? __pfx_kthread+0x10/0x10
[  387.747726][ T5757]  ret_from_fork+0x514/0xb70
[  387.749554][ T5757]  ? __pfx_ret_from_fork+0x10/0x10
[  387.751533][ T5757]  ? __switch_to+0xc89/0x1420
[  387.753389][ T5757]  ? __pfx_kthread+0x10/0x10
[  387.755227][ T5757]  ret_from_fork_asm+0x1a/0x30
[  387.757083][ T5757]  </TASK>
[  387.759060][ T5757] Kernel Offset: disabled
[  387.760745][ T5757] Rebooting in 86400 seconds..
