last executing test programs:

1.52963688s ago: executing program 1 (id=6860):
setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x0, &(0x7f00000003c0)=0x5, 0x4)

1.46721751s ago: executing program 1 (id=6861):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004)
recvmmsg(r0, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}, 0x4008101}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000000c0)=""/177, 0xb1}, {&(0x7f00000004c0)=""/268, 0x10c}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000003bc0)=""/4109, 0x100d}, {&(0x7f0000000340)=""/219, 0xdb}], 0x5}, 0x80000000}, {{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000600)=""/73, 0x49}, {&(0x7f00000001c0)=""/18, 0x12}, {&(0x7f00000002c0)=""/53, 0x35}, {&(0x7f0000000680)=""/173, 0xad}, {&(0x7f0000000740)=""/61, 0x3d}, {&(0x7f00000007c0)=""/170, 0xaa}], 0x6, &(0x7f0000000900)=""/18, 0x12}, 0x8001}, {{&(0x7f0000000940)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000009c0)=""/212, 0xd4}], 0x1}, 0x8000}, {{&(0x7f0000000b00)=@ax25={{0x3, @netrom}, [@null, @rose, @bcast, @netrom, @remote, @rose, @default, @netrom]}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000b80)=""/50, 0x32}, {&(0x7f0000000bc0)=""/91, 0x5b}, {&(0x7f0000000c40)=""/63, 0x3f}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/21, 0x15}, {&(0x7f0000000cc0)=""/235, 0xeb}, {&(0x7f0000000dc0)=""/55, 0x37}], 0x8, &(0x7f0000000e80)=""/18, 0x12}, 0x99}, {{&(0x7f0000000ec0)=@can, 0x80, &(0x7f0000001040)=[{&(0x7f0000000f40)=""/85, 0x55}, {&(0x7f0000000fc0)=""/121, 0x79}], 0x2, &(0x7f0000001080)=""/1, 0x1}}, {{&(0x7f00000010c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001140)=""/119, 0x77}, {&(0x7f00000011c0)=""/121, 0x79}, {&(0x7f0000001240)=""/225, 0xe1}, {&(0x7f0000001340)=""/22, 0x16}, {&(0x7f0000001380)=""/136, 0x88}], 0x5}, 0xa4b}, {{&(0x7f00000014c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000004c00)=""/4096, 0x1049}], 0x1}, 0x80000000}], 0xa, 0x0, 0x0)

1.407168204s ago: executing program 1 (id=6863):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000110a20000000080a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000780900010073797a3100000000280004800800014000000005080002401b2fd2c5140003006970258adf2e3000000000000000000028000000000a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

1.359019105s ago: executing program 1 (id=6865):
r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000100))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000680), r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0xffffffffffffff4a, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x20}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={<r5=>r4})
sendmsg$kcm(r5, &(0x7f0000001b80)={&(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @remote}, 0x1, 0x0, 0x4, 0x2}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)}, {&(0x7f00000003c0)="da6fbe8a986abffcfb96cf689b2b449dd49598c19856217540c632a0abec6e6122764734bb8ac0a0b10edc883aed0ecb5ce42b98d812c0dd4b8022d380aa855cdea5a9cc79d5661688534250fa29b6f07307b43687362df1c15c52094a8f763ba20ff116bc803d6693f772297aabee491944c73d90e7ad951cb2a79c6dfa7d2392d85b6cddfebf96482cb804d0e0e7ab6e4b7b6c3ea9b8a3e2e311139fc7b86a5bdc8ef6ec39d0d08357c6ea1f96d7bdc92c8a31d843cf31f7d28ba36d3cde89062af184332b978bfb503e", 0xcb}, {&(0x7f0000000600)="fb5882f8ac9240dcea9a39355dd83e51d9448b0a31cb021da3a3b78b3bdfec16c940cda88b2bde200ab96b404542eef27f7d73142fc9a91bf6289d8c707376077c8bdff9ee8f9c1cea768c37796cf23b1fc0bccad53e681b4053c27bcf49bb8504a169641a2129ba3f6c2ce8dafe49b1100cdcfb32fba15352c42ce319dbdfec43e35b15fb014238", 0x88}], 0x3, &(0x7f00000006c0)}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b15, &(0x7f0000000000)={'wlan0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, 0x0, &(0x7f0000000040))
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'ipvlan0\x00', 0x2})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r10=>0x0})
r11 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x41, &(0x7f00000001c0)=0x291, 0x4)
sendto$packet(r11, 0x0, 0x0, 0x24048005, &(0x7f0000000080)={0x11, 0xc, r10, 0x1, 0x1f, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
sendmsg$nl_xfrm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="64000000140011020000000000000000ffffffff000000000000000000000000fc0200"/56, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="c06b6e000000000008001f00000000000a001000e6"], 0x64}}, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8000000000000000, 0x8000000000000001, 0x2, 0x0, 0x8}, 0x0, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x100000003, 0xfb, 0x1, 0xffff}, &(0x7f0000000200), &(0x7f00000004c0)={&(0x7f0000000240)={[0xc7]}, 0x8})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x2}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)

518.589625ms ago: executing program 2 (id=6880):
syz_emit_ethernet(0x52, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x6, "a874e400"}, @generic={0x1, 0x2}]}}}}}}}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000ee0f63bb69605c4785000000630000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$netlink(0x10, 0x3, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000060000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000008000000b7030000000080008500000006000000b7080000ff000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x48, r4, 0x1, 0xf0bd27, 0x25dfcbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xfffffffffffffffa}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}]}, 0xfffffffffffffc6b}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000043000000080a05000000000000000010020000060c00034000000000000000020900020073797a32000000000900010073797a3000000000140000001100010000000000000000000a00221e"], 0x8c}}, 0x0)

467.437012ms ago: executing program 2 (id=6881):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004)
recvmmsg(r0, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}, 0x4008101}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000000c0)=""/177, 0xb1}, {&(0x7f00000004c0)=""/268, 0x10c}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000003bc0)=""/4109, 0x100d}, {&(0x7f0000000340)=""/219, 0xdb}], 0x5}, 0x80000300}, {{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000600)=""/73, 0x49}, {&(0x7f00000001c0)=""/18, 0x12}, {&(0x7f00000002c0)=""/53, 0x35}, {&(0x7f0000000680)=""/173, 0xad}, {&(0x7f0000000740)=""/61, 0x3d}, {&(0x7f00000007c0)=""/170, 0xaa}], 0x6, &(0x7f0000000900)=""/18, 0x12}, 0x8001}, {{&(0x7f0000000940)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000009c0)=""/212, 0xd4}], 0x1}, 0x8000}, {{&(0x7f0000000b00)=@ax25={{0x3, @netrom}, [@null, @rose, @bcast, @netrom, @remote, @rose, @default, @netrom]}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000b80)=""/50, 0x32}, {&(0x7f0000000bc0)=""/91, 0x5b}, {&(0x7f0000000c40)=""/63, 0x3f}, {&(0x7f0000001a80)=""/4096, 0x1032}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/21, 0x15}, {&(0x7f0000000cc0)=""/235, 0xeb}, {&(0x7f0000000dc0)=""/55, 0x37}], 0x8, &(0x7f0000000e80)=""/18, 0x12}, 0x99}, {{&(0x7f0000000ec0)=@can, 0x80, &(0x7f0000001040)=[{&(0x7f0000000f40)=""/85, 0x55}, {&(0x7f0000000fc0)=""/121, 0x79}], 0x2, &(0x7f0000001080)=""/1, 0x1}}, {{&(0x7f00000010c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001140)=""/119, 0x77}, {&(0x7f00000011c0)=""/121, 0x79}, {&(0x7f0000001240)=""/225, 0xe1}, {&(0x7f0000001340)=""/22, 0x16}, {&(0x7f0000001380)=""/136, 0x88}], 0x5}, 0xa4b}, {{&(0x7f00000014c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000004c00)=""/4096, 0x1000}], 0x1}, 0x80000000}], 0xa, 0x0, 0x0)

408.606972ms ago: executing program 1 (id=6883):
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x7)
setsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f00000003c0)=0x5, 0x4)

408.494341ms ago: executing program 2 (id=6884):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b40)=ANY=[@ANYBLOB="14000000100001f4ffffff00000000000000000a20000000000a01030000000000000000010000010900010073797a3100000000540000001b0a01040000000000000000010000000900030073797a31000000780900010073797a3100000000280004800800014000000005080002401b2fd2c5140003006970258adf2e3000000000000000000028000000000a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

407.945918ms ago: executing program 1 (id=6885):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r3, &(0x7f0000000480), 0x0, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000d82000/0x3000)=nil, 0x3000, 0x3, 0x20010, r5, 0xfffff000)
unshare(0x62040200)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="9f4604da64dffd1b040000000802110000010802110001f007021100000000000000000000000000640001000108"], 0x2e)
nanosleep(&(0x7f0000000480)={0x77359400}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010000000110012882845090b6551824"], 0x28)

339.645091ms ago: executing program 2 (id=6887):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60080, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000000)={'syzkaller0\x00'})
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000440)=ANY=[@ANYBLOB="895c170e", @ANYBLOB="659b44a31830e283874af7680b296520b0c58722f268a1c82b2ce023dd00d7b0294ff192c6d01447ef835754d3c90da0a19a18734b610e9704fa676d5df224e2a985ece90d12130fe231b0bc3d8a427a80b2b6378ec55e6e3c218c9a89a7f0931898109682af006490bb5e94b4485c0da24f4f47a77317c203ac658a0fc7cbee23e4c8ec34d934a1baf3d586d70569794aec990156834fa07fd0980fd3d315bf991f43dc4a671c6691fd0bd93bd7d54bad557a495f15dc38c5682f9333ba2bd9", @ANYBLOB="00f50000000000e229cec62dc332f080485474f90000000efb0000"], 0x14}}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32=r6], 0x3c}}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b17590818"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='rcu_utilization\x00', 0xffffffffffffffff, 0x0, 0x1000000000}, 0x18)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
close(r7)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, 0x0, 0x0)
accept4(r3, 0x0, 0x0, 0x80800)
socket$inet(0x2, 0xa, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
sendto(r4, &(0x7f0000000240)="cf28e8c585f78f0d0af625f84323612ef15b6120ccb685bef6370728ac5fde12aee028f9f734a4b721b1026e417d7b3b3be4344e77dd67fd4ae60e", 0x3b, 0x800, &(0x7f00000003c0)=@hci={0x1f, 0x2, 0x3}, 0x80)

339.381328ms ago: executing program 0 (id=6888):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000000000001400000018696d300000000000000800170011fa0000a05274e7d4e6ccfae12d3c4d77d07aa7b25a68ba18d776899e94dcecf205110600544c0076b7a376db00"/87], 0x34}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x00\x10'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008840)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@dellink={0x3c, 0x11, 0x50b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40800, 0x200}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x1}, @IFLA_ALT_IFNAME={0x14, 0x35, 'xfrm0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20004004)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8)

229.520515ms ago: executing program 0 (id=6889):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600001900000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={0x2c, 0xd, 0xa, 0xe01, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x2c}}, 0x2000000000000000)

158.20159ms ago: executing program 0 (id=6890):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)={0x64, r3, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x3e, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x1}, @device_b, @device_a, @initial, {0x4, 0x9}, @value=@ver_80211n={0x0, 0xd6, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, @val, @void, @void, @val={0x2d, 0x1a, {0x800, 0x0, 0x0, 0x0, {0x10, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x400, 0x6, 0x9}}, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x64}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be70}, 0x24008080)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x401, 0x3d3, 0x3, 0x3ff, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

88.553945ms ago: executing program 0 (id=6891):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000f40a20000000080a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000780900010073797a3100000000280004800800014000000005080002401b2fd2c5140003006970258adf2e3000000000000000000028000000000a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

88.087554ms ago: executing program 2 (id=6892):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) (async)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xe, 0x7}]}) (async)
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) (async)
close(0x3)

85.783362ms ago: executing program 0 (id=6893):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x68, 0x0, 0x1, 0x401, 0x3a000000, 0x0, {0x2}, [@CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x414}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x410}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x424}, @CTA_FILTER_REPLY_FLAGS={0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0x68}}, 0xc0)

271.49µs ago: executing program 0 (id=6894):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0c00cdec590806000108000611"], 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000003147df8fdfffffff9dbdf250900020073797a320000000008004100734f7700140033006272696467653000"], 0x38}, 0x1, 0x0, 0x0, 0x44810}, 0x200040c0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r4=>0x0})
socket$inet_udp(0x2, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0xa, 0x801, 0x84)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000))
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r6, @ANYRESOCT=r5], 0x20)
sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@random="5b37182347bc", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "9d0080", 0x18, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @local, [{0x0, 0x0, "ff9b"}]}}}}}}, 0x0)
socket$inet(0x2, 0x3, 0xe)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000580)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="3000000000000000840000000100000000000000040200"/44, @ANYRES32=0x0, @ANYBLOB="20000000000000008400000008000000fe8000000000000000000000000000aa"], 0x50}], 0x1, 0x0)

0s ago: executing program 2 (id=6895):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="200000005e0001ff07000000000000000c000000010000000600008004000180"], 0x20}], 0x1}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000002000010400000000000000000a0000000000100000000000140011006c766d727031000000000100000000000000464868e822d32cb592a056f4d787f9bba6100c0097cec916"], 0x38}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600fc"], 0x94}}, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r3)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="aa750c45", @ANYRES16=r6, @ANYBLOB="01002abd70000000000001000000000000000941000000140018000007327564703a73797a3200000000"], 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x4000000)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=[{0x10, 0x1, 0x51}], 0x10}}], 0x2, 0x4000854)
syz_init_net_socket$ax25(0x3, 0x5, 0x7)

kernel console output (not intermixed with test programs):

6797][T16751] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  240.431512][T16753] netlink: 'syz.1.3620': attribute type 1 has an invalid length.
[  240.436105][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.439294][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.608875][T16767] macsec1: entered promiscuous mode
[  240.610666][T16767] macsec1: entered allmulticast mode
[  240.855924][T16783] bond1: (slave macvlan1): Error -98 calling set_mac_address
[  240.912986][ T5828] Bluetooth: hci1: command tx timeout
[  241.115342][T16813] netlink: 'syz.1.3640': attribute type 12 has an invalid length.
[  241.130656][T16815] pimreg: entered allmulticast mode
[  241.151018][T16815] pimreg: left allmulticast mode
[  241.959082][T16817] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  242.005339][T16845] batadv_slave_1: entered promiscuous mode
[  242.009405][T16844] batadv_slave_1: left promiscuous mode
[  242.241500][T16875] __nla_validate_parse: 48 callbacks suppressed
[  242.241513][T16875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3660'.
[  242.285617][T16879] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3662'.
[  242.406434][T16888] bond1: (slave macvlan0): Error -98 calling set_mac_address
[  242.427748][T16890] bond1: (slave macvlan0): Error -98 calling set_mac_address
[  242.515437][T16899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3668'.
[  242.548277][T16901] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3669'.
[  242.562096][T16901] bond1: (slave macvlan1): Error -98 calling set_mac_address
[  242.576599][T16903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3670'.
[  242.580575][T16903] netlink: 'syz.0.3670': attribute type 39 has an invalid length.
[  242.895469][T16930] netlink: 'syz.1.3679': attribute type 1 has an invalid length.
[  242.979621][T16938] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3682'.
[  242.991548][   T12] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  242.994374][ T5828] Bluetooth: hci1: command tx timeout
[  242.995214][   T12] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  243.020407][T16936] netlink: 'syz.2.3681': attribute type 1 has an invalid length.
[  243.023071][   T47] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  243.026587][T16936] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3681'.
[  243.053349][T10301] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  243.180027][T16948] xt_CT: You must specify a L4 protocol and not use inversions on it
[  243.269633][T16953] IPVS: Scheduler module ip_vs_sip not found
[  243.309612][T16956] lo speed is unknown, defaulting to 1000
[  243.312852][   T47] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  243.403815][T16956] lo speed is unknown, defaulting to 1000
[  243.471358][T16956] netlink: 212172 bytes leftover after parsing attributes in process `syz.2.3689'.
[  243.569771][T16961] xt_recent: Unsupported userspace flags (00000048)
[  243.610665][T16961] netlink: 'syz.2.3690': attribute type 1 has an invalid length.
[  243.625336][T16961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3690'.
[  244.552362][T17004] netlink: 'syz.2.3700': attribute type 21 has an invalid length.
[  244.557167][T17004] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3700'.
[  244.940466][T17015] syzkaller1: entered promiscuous mode
[  244.942246][T17015] syzkaller1: entered allmulticast mode
[  245.083312][ T5828] Bluetooth: hci1: command tx timeout
[  245.117215][T17030] netlink: 'syz.1.3704': attribute type 11 has an invalid length.
[  245.119550][T17030] netlink: 'syz.1.3704': attribute type 11 has an invalid length.
[  245.210284][T17036] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  245.236278][T17039] lo speed is unknown, defaulting to 1000
[  245.236997][T17036] netlink: 'syz.2.3712': attribute type 8 has an invalid length.
[  245.376762][T17039] lo speed is unknown, defaulting to 1000
[  245.405654][T17043] lo speed is unknown, defaulting to 1000
[  245.714630][T17043] lo speed is unknown, defaulting to 1000
[  246.036731][T17054] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  246.214562][T17062] netlink: 'syz.0.3719': attribute type 1 has an invalid length.
[  246.220736][T17066] netlink: 'syz.1.3720': attribute type 1 has an invalid length.
[  246.226225][T17066] netlink: 'syz.1.3720': attribute type 3 has an invalid length.
[  246.228688][T17066] NCSI netlink: No device for ifindex 246
[  246.306980][ T5295] IPVS: starting estimator thread 0...
[  246.393128][T17074] IPVS: using max 61 ests per chain, 146400 per kthread
[  246.465866][T17094] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  246.468245][T17094] syzkaller0: entered promiscuous mode
[  246.469950][T17094] syzkaller0: entered allmulticast mode
[  246.487573][T17094] tipc: Resetting bearer <eth:syzkaller0>
[  246.490956][T17090] tipc: Resetting bearer <eth:syzkaller0>
[  246.500789][T17090] tipc: Disabling bearer <eth:syzkaller0>
[  246.517861][T17102] netlink: 'syz.1.3731': attribute type 10 has an invalid length.
[  246.618095][T17110] bond1: (slave macvlan0): Error -98 calling set_mac_address
[  246.627985][T17114] tap0: tun_chr_ioctl cmd 1074025677
[  246.629698][T17114] tap0: linktype set to 0
[  246.695991][T17121] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5
[  246.788093][T17123] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  246.790413][T17123] IPv6: NLM_F_CREATE should be set when creating new route
[  246.905000][T17152] bond1: (slave macvlan0): Error -98 calling set_mac_address
[  247.165117][ T5828] Bluetooth: hci1: command tx timeout
[  247.257537][T17178] __nla_validate_parse: 11 callbacks suppressed
[  247.257552][T17178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3752'.
[  247.264421][T17180] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3752'.
[  247.312813][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  247.344532][T17184] bond1: (slave macvlan0): Error -98 calling set_mac_address
[  247.427459][T17188] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  247.437675][T17186] syz.0.3755: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  247.445549][T17186] CPU: 1 UID: 0 PID: 17186 Comm: syz.0.3755 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  247.445565][T17186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  247.445571][T17186] Call Trace:
[  247.445575][T17186]  <TASK>
[  247.445581][T17186]  dump_stack_lvl+0x189/0x250
[  247.445599][T17186]  ? __pfx_dump_stack_lvl+0x10/0x10
[  247.445609][T17186]  ? __pfx__printk+0x10/0x10
[  247.445638][T17186]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  247.445651][T17186]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  247.445663][T17186]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  247.445675][T17186]  warn_alloc+0x214/0x310
[  247.445687][T17186]  ? __pfx_warn_alloc+0x10/0x10
[  247.445699][T17186]  ? __get_vm_area_node+0x28f/0x300
[  247.445711][T17186]  ? xskq_create+0xbf/0x170
[  247.445722][T17186]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  247.445748][T17186]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  247.445761][T17186]  ? xskq_create+0x56/0x170
[  247.445769][T17186]  ? __kasan_kmalloc+0x93/0xb0
[  247.445783][T17186]  vmalloc_user_noprof+0xad/0xf0
[  247.445796][T17186]  ? xskq_create+0xbf/0x170
[  247.445804][T17186]  xskq_create+0xbf/0x170
[  247.445813][T17186]  xsk_init_queue+0xb0/0x110
[  247.445822][T17186]  xsk_setsockopt+0x4de/0x710
[  247.445836][T17186]  ? __pfx_xsk_setsockopt+0x10/0x10
[  247.445850][T17186]  ? __fget_files+0x2a/0x420
[  247.445858][T17186]  ? aa_sock_opt_perm+0x74/0x110
[  247.445906][T17186]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  247.445917][T17186]  ? __pfx_xsk_setsockopt+0x10/0x10
[  247.445930][T17186]  do_sock_setsockopt+0x17c/0x1b0
[  247.445946][T17186]  __x64_sys_setsockopt+0x13f/0x1b0
[  247.445965][T17186]  do_syscall_64+0xfa/0x3b0
[  247.445976][T17186]  ? lockdep_hardirqs_on+0x9c/0x150
[  247.445984][T17186]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.445993][T17186]  ? exc_page_fault+0x9f/0xf0
[  247.446002][T17186]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.446010][T17186] RIP: 0033:0x7f04dd38e9a9
[  247.446019][T17186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  247.446027][T17186] RSP: 002b:00007f04de181038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  247.446037][T17186] RAX: ffffffffffffffda RBX: 00007f04dd5b5fa0 RCX: 00007f04dd38e9a9
[  247.446043][T17186] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004
[  247.446049][T17186] RBP: 00007f04dd410ca1 R08: 0000000000000004 R09: 0000000000000000
[  247.446054][T17186] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  247.446059][T17186] R13: 0000000000000000 R14: 00007f04dd5b5fa0 R15: 00007ffeefefee18
[  247.446072][T17186]  </TASK>
[  247.446165][T17186] Mem-Info:
[  247.529703][T17186] active_anon:4025 inactive_anon:0 isolated_anon:0
[  247.529703][T17186]  active_file:11153 inactive_file:38286 isolated_file:0
[  247.529703][T17186]  unevictable:1768 dirty:274 writeback:0
[  247.529703][T17186]  slab_reclaimable:10225 slab_unreclaimable:140707
[  247.529703][T17186]  mapped:18411 shmem:2413 pagetables:870
[  247.529703][T17186]  sec_pagetables:0 bounce:0
[  247.529703][T17186]  kernel_misc_reclaimable:0
[  247.529703][T17186]  free:185432 free_pcp:25944 free_cma:0
[  247.543022][T17186] Node 0 active_anon:6336kB inactive_anon:0kB active_file:7396kB inactive_file:23996kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:49776kB dirty:196kB writeback:0kB shmem:4776kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4872kB pagetables:1892kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  247.553117][T17186] Node 1 active_anon:9764kB inactive_anon:0kB active_file:37216kB inactive_file:129148kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:23868kB dirty:900kB writeback:0kB shmem:4876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7976kB pagetables:1588kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  247.563241][T17186] Node 0 DMA free:14028kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:888kB local_pcp:352kB free_cma:0kB
[  247.572030][T17186] lowmem_reserve[]: 0 812 812 812 812
[  247.573930][T17186] Node 0 DMA32 free:90512kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6336kB inactive_anon:0kB active_file:7396kB inactive_file:23996kB unevictable:3536kB writepending:196kB present:1556484kB managed:831988kB mlocked:0kB bounce:0kB free_pcp:32616kB local_pcp:17684kB free_cma:0kB
[  247.585203][T17186] lowmem_reserve[]: 0 0 0 0 0
[  247.586637][T17186] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  247.595490][T17186] lowmem_reserve[]: 0 0 854 854 854
[  247.597068][T17186] Node 1 Normal free:178696kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9764kB inactive_anon:0kB active_file:37216kB inactive_file:129148kB unevictable:3536kB writepending:900kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:70028kB local_pcp:36128kB free_cma:0kB
[  247.608566][T17186] lowmem_reserve[]: 0 0 0 0 0
[  247.610084][T17186] Node 0 DMA: 3*4kB (UM) 2*8kB (U) 5*16kB (UME) 5*32kB (UM) 3*64kB (UME) 4*128kB (UME) 5*256kB (UME) 5*512kB (UME) 1*1024kB (E) 0*2048kB 2*4096kB (U) = 14028kB
[  247.615026][T17186] Node 0 DMA32: 1074*4kB (UME) 497*8kB (UME) 174*16kB (UME) 94*32kB (UME) 128*64kB (UME) 53*128kB (UME) 32*256kB (UM) 16*512kB (UM) 8*1024kB (UME) 6*2048kB (UM) 6*4096kB (U) = 90480kB
[  247.620440][T17186] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  247.627402][T17186] Node 1 Normal: 2008*4kB (UME) 1281*8kB (UME) 846*16kB (UME) 767*32kB (UME) 471*64kB (UME) 86*128kB (UM) 21*256kB (UME) 14*512kB (UME) 7*1024kB (UM) 4*2048kB (UME) 13*4096kB (M) = 178664kB
[  247.633736][T17186] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  247.636704][T17186] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  247.639480][T17186] 51852 total pagecache pages
[  247.641031][T17186] 0 pages in swap cache
[  247.642402][T17186] Free swap  = 124996kB
[  247.644049][T17186] Total swap = 124996kB
[  247.645408][T17186] 786301 pages RAM
[  247.646551][T17186] 0 pages HighMem/MovableOnly
[  247.648001][T17186] 241056 pages reserved
[  247.649298][T17186] 0 pages cma reserved
[  247.816583][T17194] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3757'.
[  247.860761][T17200] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3759'.
[  248.113693][T17222] netlink: 'syz.0.3767': attribute type 1 has an invalid length.
[  248.117414][T17222] netlink: 'syz.0.3767': attribute type 3 has an invalid length.
[  248.119993][T17222] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3767'.
[  248.124509][T17222] NCSI netlink: No device for ifindex 246
[  248.176638][T17228] bond0: entered promiscuous mode
[  248.179254][T17228] bond0: left promiscuous mode
[  248.215464][T17228] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  248.394309][T17234] netlink: 'syz.0.3771': attribute type 12 has an invalid length.
[  248.678300][T17249] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3777'.
[  248.956385][T17272] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3784'.
[  248.964997][T17272] macvlan0: entered promiscuous mode
[  248.966712][T17272] bond0: entered promiscuous mode
[  248.968358][T17272] macvlan0: entered allmulticast mode
[  248.970082][T17272] bond0: entered allmulticast mode
[  248.971951][T17272] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  248.976366][T17272] bond0: left allmulticast mode
[  248.977868][T17272] bond0: left promiscuous mode
[  249.030058][T17276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3785'.
[  249.111824][T17282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3786'.
[  249.115913][T17282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3786'.
[  249.118895][T17282] netlink: 'syz.0.3786': attribute type 14 has an invalid length.
[  249.121351][T17282] netlink: 'syz.0.3786': attribute type 13 has an invalid length.
[  249.968946][T17333] syzkaller0: entered promiscuous mode
[  249.970753][T17333] syzkaller0: entered allmulticast mode
[  250.096509][T17342] syzkaller1: entered promiscuous mode
[  250.100414][T17342] syzkaller1: entered allmulticast mode
[  250.113276][   T54] Bluetooth: hci1: command tx timeout
[  250.201633][T17346] pimreg: entered allmulticast mode
[  250.423877][T17362] netlink: 'syz.2.3811': attribute type 1 has an invalid length.
[  250.448292][T17362] xt_CT: No such helper "snmp"
[  250.453694][T17362] tipc: Started in network mode
[  250.455491][T17362] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  250.458860][T17362] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[  250.462463][T17362] tipc: Enabled bearer <udp:syz1>, priority 10
[  250.685663][T17370] vlan2: entered promiscuous mode
[  250.687424][T17370] bridge0: entered promiscuous mode
[  250.689210][T17370] vlan2: entered allmulticast mode
[  250.690911][T17370] bridge0: entered allmulticast mode
[  250.741934][T17372] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  250.968981][T17382] sctp: [Deprecated]: syz.2.3818 (pid 17382) Use of struct sctp_assoc_value in delayed_ack socket option.
[  250.968981][T17382] Use struct sctp_sack_info instead
[  251.108473][T17388] macvlan0: entered promiscuous mode
[  251.110255][T17388] bond0: entered promiscuous mode
[  251.111872][T17388] macvlan0: entered allmulticast mode
[  251.116804][T17388] bond0: entered allmulticast mode
[  251.118806][T17388] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  251.122136][T17388] bond0: left allmulticast mode
[  251.124008][T17388] bond0: left promiscuous mode
[  251.294144][T17409] netlink: 'syz.0.3827': attribute type 13 has an invalid length.
[  251.370721][T17420] netlink: 'syz.2.3830': attribute type 1 has an invalid length.
[  251.388704][T17420] 8021q: adding VLAN 0 to HW filter on device bond1
[  251.422784][T17420] 8021q: adding VLAN 0 to HW filter on device bond1
[  251.425177][T17420] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  251.429274][T17420] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  251.452936][ T5295] tipc: Node number set to 1
[  251.470300][T17427] veth5: entered promiscuous mode
[  251.481160][T17427] bond1: (slave veth5): Enslaving as an active interface with a down link
[  251.541214][T17427] erspan0: entered allmulticast mode
[  251.551008][T17427] bond1: (slave erspan0): making interface the new active one
[  251.558038][T17427] bond1: (slave erspan0): Enslaving as an active interface with an up link
[  251.626318][T17445] bond1: (slave macvlan1): Error -98 calling set_mac_address
[  251.827118][T17452] ip6erspan0: entered allmulticast mode
[  252.031764][T17459] Bluetooth: MGMT ver 1.23
[  252.193324][   T54] Bluetooth: hci1: command 0x0405 tx timeout
[  252.270208][T17476] __nla_validate_parse: 154 callbacks suppressed
[  252.270221][T17476] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3846'.
[  252.277844][T17476] netlink: 'syz.1.3846': attribute type 29 has an invalid length.
[  252.346792][T17480] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3849'.
[  252.356884][T17480] macvlan2: entered promiscuous mode
[  252.358659][T17480] macvlan2: entered allmulticast mode
[  252.400810][T17482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3850'.
[  252.405423][T17482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3850'.
[  252.569598][T17493] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3855'.
[  252.646594][T17501] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3857'.
[  252.677080][T17506] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3858'.
[  252.686430][T17506] bond_slave_0: entered promiscuous mode
[  252.688182][T17506] bond_slave_1: entered promiscuous mode
[  252.690031][T17506] macvlan2: entered promiscuous mode
[  252.691653][T17506] bond0: entered promiscuous mode
[  252.694787][T17506] macvlan2: entered allmulticast mode
[  252.696403][T17506] bond0: entered allmulticast mode
[  252.697947][T17506] bond_slave_0: entered allmulticast mode
[  252.699716][T17506] bond_slave_1: entered allmulticast mode
[  252.706468][T17506] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  252.710431][T17506] bond0: left allmulticast mode
[  252.712075][T17506] bond_slave_0: left allmulticast mode
[  252.714801][T17506] bond_slave_1: left allmulticast mode
[  252.716469][T17506] bond0: left promiscuous mode
[  252.718290][T17506] bond_slave_0: left promiscuous mode
[  252.719972][T17506] bond_slave_1: left promiscuous mode
[  252.991740][T17523] netlink: 'syz.2.3863': attribute type 3 has an invalid length.
[  252.998423][T17523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3863'.
[  253.261836][T17540] netlink: 'syz.2.3871': attribute type 10 has an invalid length.
[  253.273776][T17539] netlink: 'syz.1.3870': attribute type 1 has an invalid length.
[  253.278988][T17540] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3871'.
[  253.420155][T17554] netlink: 'syz.0.3876': attribute type 1 has an invalid length.
[  254.215840][T17563] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3880'.
[  254.229752][T17563] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  254.341106][T17571] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode
[  254.523063][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  254.590145][T17594] batman_adv: batadv0: Removing interface: dummy0
[  254.595811][T17594] bond1: (slave macvlan1): Releasing backup interface
[  254.597876][T17594] bond1: (slave macvlan1): the permanent HWaddr of slave - 52:a7:46:ec:a6:7a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  254.606889][T17594] bond1: (slave macvlan2): Releasing backup interface
[  254.610495][T17594] bond1: (slave macvlan3): Releasing backup interface
[  254.625580][T17594] bond11: (slave bridge9): Releasing backup interface
[  254.636150][T17594] team0: Port device gtp0 removed
[  254.876107][T17624] siw: device registration error -23
[  254.979624][T17632] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  254.985205][T17632] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.992837][T17632] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  255.126992][T17632] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  255.130256][T17632] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.136900][T17632] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  255.156905][ T1359] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  255.217076][T17632] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  255.220074][T17632] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.224442][T17632] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  255.306567][T17632] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  255.309532][T17632] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.312446][T17632] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  255.398630][T17632] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  255.401185][T17632] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  255.404259][T17632] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  255.412453][T17632] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  255.416016][T17632] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  255.418778][T17632] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  255.428450][T17632] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  255.431240][T17632] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  255.435820][T17632] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  255.446408][T17632] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  255.448951][T17632] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  255.451434][T17632] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  255.518703][T17671] erspan0: left allmulticast mode
[  255.542520][T17671] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.545088][T17671] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.617379][T17671] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  255.626656][T17671] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  255.689453][T17671] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  255.692265][T17671] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  255.697995][T17671] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  255.700771][T17671] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  255.721621][T17671] mac80211_hwsim hwsim22 wlan0: left promiscuous mode
[  255.724469][T17671] macsec1: left promiscuous mode
[  255.726054][T17671] macsec1: left allmulticast mode
[  255.729741][T17671] vlan2: left promiscuous mode
[  255.731311][T17671] bridge0: left promiscuous mode
[  255.735497][T17671] vlan2: left allmulticast mode
[  255.737064][T17671] bridge0: left allmulticast mode
[  255.742048][T17671] veth5: left promiscuous mode
[  255.989516][T17700] lo speed is unknown, defaulting to 1000
[  256.099028][T17700] lo speed is unknown, defaulting to 1000
[  256.164070][T17710] syz_tun: entered allmulticast mode
[  256.355603][T17717] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  256.359045][T17717] bond1: (slave macvlan0): Enslaving as a backup interface with a down link
[  256.432774][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  256.559472][T17734] syzkaller0: entered promiscuous mode
[  256.562170][T17734] syzkaller0: entered allmulticast mode
[  256.699094][T17746] bond1: (slave macvlan1): Error -98 calling set_mac_address
[  256.770742][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.773250][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.922788][T17758] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  256.925593][T17758] syzkaller0: entered promiscuous mode
[  256.927370][T17758] syzkaller0: entered allmulticast mode
[  256.937775][T17757] tipc: Resetting bearer <eth:syzkaller0>
[  256.951293][T17757] tipc: Disabling bearer <eth:syzkaller0>
[  257.227313][T17773] bond1: (slave macvlan0): Releasing backup interface
[  257.230151][T17773] bond0: left promiscuous mode
[  257.273074][  T790] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  257.357563][T17773] vlan0: entered promiscuous mode
[  257.359794][T17773] veth1: entered promiscuous mode
[  257.362149][T17773] vlan0: left allmulticast mode
[  257.364981][T17773] veth1: left allmulticast mode
[  257.368478][T17773] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  257.417935][T17787] __nla_validate_parse: 16 callbacks suppressed
[  257.417948][T17787] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3950'.
[  257.655919][T17802] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[  257.811351][T17813] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3960'.
[  257.904396][T17821] set match dimension is over the limit!
[  257.965447][  T790] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  258.082498][T17835] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3967'.
[  258.116096][T17842] netlink: 'syz.0.3970': attribute type 1 has an invalid length.
[  258.118867][T17842] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3970'.
[  258.125231][T17836] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3968'.
[  258.178406][T17846] sctp: [Deprecated]: syz.0.3971 (pid 17846) Use of struct sctp_assoc_value in delayed_ack socket option.
[  258.178406][T17846] Use struct sctp_sack_info instead
[  258.221689][T17852] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3974'.
[  258.227770][T17852] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3974'.
[  258.241309][T17852] pimreg: left allmulticast mode
[  258.251393][T17852] syz_tun: left allmulticast mode
[  258.257884][T17857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3976'.
[  258.301419][T17860] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  258.311495][T17863] rdma_rxe: rxe_newlink: failed to add lo
[  258.316171][T17860] bond1: (slave macvlan1): Enslaving as a backup interface with a down link
[  258.353096][T17852] 8021q: adding VLAN 0 to HW filter on device bond0
[  258.358391][T17852] 8021q: adding VLAN 0 to HW filter on device team0
[  258.371211][T17852] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  258.380540][T17865] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3979'.
[  258.409575][T17865] bond1: (slave macvlan5): Error -98 calling set_mac_address
[  258.492014][T17873] openvswitch: netlink: Key type 11387 is out of range max 32
[  258.620749][T17901] netlink: 'syz.2.3989': attribute type 1 has an invalid length.
[  258.620905][T17900] syzkaller1: entered promiscuous mode
[  258.629351][T17900] syzkaller1: entered allmulticast mode
[  258.677744][T17905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3987'.
[  258.775558][T17917] netlink: 'syz.1.3994': attribute type 32 has an invalid length.
[  259.400965][T17941] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  259.407622][T17942] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  259.418421][T17941] netlink: 'syz.2.4000': attribute type 21 has an invalid length.
[  259.502351][T17948] netlink: 'syz.2.4002': attribute type 19 has an invalid length.
[  259.656797][T17959] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  259.659328][T17959] macvlan1: entered promiscuous mode
[  259.661218][T17959] macvlan1: entered allmulticast mode
[  259.666291][T17959] veth1_vlan: entered allmulticast mode
[  259.671643][T17959] tipc: Resetting bearer <eth:syzkaller0>
[  259.692311][T17958] tipc: Disabling bearer <eth:syzkaller0>
[  260.053143][T17982] netlink: 'syz.1.4016': attribute type 1 has an invalid length.
[  260.148889][T17987] netlink: 'syz.1.4017': attribute type 2 has an invalid length.
[  260.194897][T17990] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  260.197847][T17990] syzkaller0: entered promiscuous mode
[  260.199571][T17990] syzkaller0: entered allmulticast mode
[  260.217598][T17990] tipc: Resetting bearer <eth:syzkaller0>
[  260.311247][T18000] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  260.316215][T18000] syzkaller0: entered promiscuous mode
[  260.317998][T18000] syzkaller0: entered allmulticast mode
[  260.329166][T17999] tipc: Resetting bearer <eth:syzkaller0>
[  260.340001][T17999] tipc: Disabling bearer <eth:syzkaller0>
[  260.709634][T18017] netlink: 'syz.0.4027': attribute type 1 has an invalid length.
[  260.843882][T18021] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  260.846521][T18021] syzkaller0: entered promiscuous mode
[  260.848344][T18021] syzkaller0: entered allmulticast mode
[  260.857739][T18020] tipc: Resetting bearer <eth:syzkaller0>
[  260.867876][T18020] tipc: Disabling bearer <eth:syzkaller0>
[  261.025557][T17989] tipc: Resetting bearer <eth:syzkaller0>
[  261.045079][T17989] tipc: Disabling bearer <eth:syzkaller0>
[  261.145019][T18037] xt_TPROXY: Can be used only with -p tcp or -p udp
[  261.210668][T18041] bond1: (slave macvlan2): Error -98 calling set_mac_address
[  261.299460][T18045] (unnamed net_device) (uninitialized): option lacp_active: invalid value (18)
[  261.304798][T18047] (unnamed net_device) (uninitialized): option lacp_active: invalid value (18)
[  261.460735][T18058] netlink: 'syz.2.4043': attribute type 1 has an invalid length.
[  261.631632][T18072] bond1: (slave macvlan2): Error -98 calling set_mac_address
[  261.758894][T18079] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  261.860898][T18083] netlink: 'syz.1.4052': attribute type 10 has an invalid length.
[  262.180123][T18102] x_tables: duplicate underflow at hook 4
[  262.290148][T18109] pimreg: entered allmulticast mode
[  262.521955][T18134] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  262.526445][T18134] syzkaller0: entered promiscuous mode
[  262.528309][T18134] syzkaller0: entered allmulticast mode
[  262.545523][T18133] tipc: Resetting bearer <eth:syzkaller0>
[  262.560066][T18133] tipc: Disabling bearer <eth:syzkaller0>
[  263.190201][T18174] can: request_module (can-proto-0) failed.
[  263.518302][T18205] pim6reg1: entered promiscuous mode
[  263.520151][T18205] pim6reg1: entered allmulticast mode
[  263.604781][T18215] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  263.607359][T18215] syzkaller0: entered promiscuous mode
[  263.609130][T18215] syzkaller0: entered allmulticast mode
[  263.625945][T18211] tipc: Resetting bearer <eth:syzkaller0>
[  263.638593][T18211] tipc: Disabling bearer <eth:syzkaller0>
[  263.656566][T18221] __nla_validate_parse: 14 callbacks suppressed
[  263.656578][T18221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4088'.
[  263.717445][T18227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4088'.
[  263.727923][T18219] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4087'.
[  263.831499][T18235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4091'.
[  264.048273][T18246] tap0: tun_chr_ioctl cmd 1074025677
[  264.050052][T18246] tap0: linktype set to 769
[  264.221347][T18250] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4097'.
[  264.710954][T18273] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4103'.
[  264.716974][T18273] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  264.762927][T18281] netlink: 'syz.0.4106': attribute type 16 has an invalid length.
[  264.765562][T18281] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4106'.
[  264.831472][T18289] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4108'.
[  264.850260][T18289] xt_hashlimit: size too large, truncated to 1048576
[  264.923409][T18295] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4111'.
[  264.931999][T18295] bond1: (slave macvlan2): Error -98 calling set_mac_address
[  264.941744][T18296] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4112'.
[  265.011203][T18301] netlink: 'syz.0.4113': attribute type 1 has an invalid length.
[  265.071069][T18301] bond13: (slave bridge0): making interface the new active one
[  265.079346][T18301] bond13: (slave bridge0): Enslaving as an active interface with an up link
[  265.189991][T18308] pim6reg: entered allmulticast mode
[  265.351864][T18327] bond1: (slave macvlan1): Releasing backup interface
[  265.608383][T18363] netlink: 'syz.1.4132': attribute type 1 has an invalid length.
[  265.700221][T18368] lo speed is unknown, defaulting to 1000
[  265.874780][T18368] lo speed is unknown, defaulting to 1000
[  265.928633][T18390] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  265.935238][T18390] bond1: (slave macvlan2): Enslaving as a backup interface with a down link
[  266.055970][T18404] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  266.059385][T18404] netlink: 'syz.1.4144': attribute type 3 has an invalid length.
[  266.305955][T18419] netlink: 'syz.1.4149': attribute type 1 has an invalid length.
[  266.308735][T18419] netlink: 'syz.1.4149': attribute type 1 has an invalid length.
[  266.311491][T18419] netlink: 'syz.1.4149': attribute type 1 has an invalid length.
[  266.315239][T18419] netlink: 'syz.1.4149': attribute type 1 has an invalid length.
[  266.317959][T18419] netlink: 'syz.1.4149': attribute type 1 has an invalid length.
[  266.320639][T18419] netlink: 'syz.1.4149': attribute type 1 has an invalid length.
[  267.524160][T18542] xt_time: invalid argument - start or stop time greater than 23:59:59
[  267.647036][T18548] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  267.675370][T18548] bond14: entered promiscuous mode
[  267.677411][T18548] bond14: entered allmulticast mode
[  267.679844][T18548] 8021q: adding VLAN 0 to HW filter on device bond14
[  267.698121][T18555] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  267.701069][T18555] syzkaller0: entered promiscuous mode
[  267.703955][T18555] syzkaller0: entered allmulticast mode
[  267.745330][T18555] tipc: Resetting bearer <eth:syzkaller0>
[  267.781873][T18564] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  267.941510][T18573] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  268.305101][T18595] veth1_vlan: left allmulticast mode
[  268.506733][T18554] tipc: Resetting bearer <eth:syzkaller0>
[  268.521369][T18554] tipc: Disabling bearer <eth:syzkaller0>
[  268.610910][T18563] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  268.677993][T18621] __nla_validate_parse: 78 callbacks suppressed
[  268.678005][T18621] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4227'.
[  268.756640][T18631] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4231'.
[  268.778242][T18631] bond1: (slave macvlan3): Error -98 calling set_mac_address
[  269.039055][T18661] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4237'.
[  269.073734][T18665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4240'.
[  269.077750][T18665] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4240'.
[  269.101937][T18665] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4240'.
[  269.264585][T18680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4245'.
[  269.270758][T18680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4245'.
[  269.331197][T18688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4246'.
[  269.406053][T18697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4249'.
[  269.535048][T18711] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  269.654893][T18726] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  269.657898][T18726] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  269.718480][ T5854] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[  270.239059][T18773] bond1: (slave macvlan3): Error -98 calling set_mac_address
[  270.542002][T18795] lo speed is unknown, defaulting to 1000
[  270.561065][T18799] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  270.658975][T18795] lo speed is unknown, defaulting to 1000
[  270.862165][T18819] bond1: (slave macvlan3): Error -98 calling set_mac_address
[  270.928431][T18825] dvmrp0: entered allmulticast mode
[  270.931288][T18827] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[  271.026619][T18834] syzkaller0: entered promiscuous mode
[  271.028394][T18834] syzkaller0: entered allmulticast mode
[  271.043658][T18832] lo speed is unknown, defaulting to 1000
[  271.176255][T18832] lo speed is unknown, defaulting to 1000
[  271.176315][T18829] lo speed is unknown, defaulting to 1000
[  271.290912][T18829] lo speed is unknown, defaulting to 1000
[  271.426925][T18851] validate_nla: 70 callbacks suppressed
[  271.426937][T18851] netlink: 'syz.2.4300': attribute type 3 has an invalid length.
[  271.806423][T18887] x_tables: ip_tables: osf match: only valid for protocol 6
[  271.849768][T18892] netlink: 'syz.2.4314': attribute type 1 has an invalid length.
[  272.071612][T18909] bond1: (slave macvlan5): Error -98 calling set_mac_address
[  272.786265][T18935] netlink: 'syz.1.4327': attribute type 10 has an invalid length.
[  272.788797][T18935] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  272.958676][T18948] vlan3: entered promiscuous mode
[  272.960391][T18948] gretap0: entered promiscuous mode
[  272.980325][T18949] vlan3: entered promiscuous mode
[  273.105477][T18957] netlink: 'syz.2.4334': attribute type 1 has an invalid length.
[  273.142172][T18959] syzkaller0: entered promiscuous mode
[  273.144508][T18959] syzkaller0: entered allmulticast mode
[  273.225603][T18961] netlink: 'syz.2.4336': attribute type 2 has an invalid length.
[  273.259966][T18963] syzkaller0: entered promiscuous mode
[  273.261871][T18963] syzkaller0: entered allmulticast mode
[  273.871648][T18988] syzkaller1: entered promiscuous mode
[  273.876110][T18988] syzkaller1: entered allmulticast mode
[  273.878967][T18988] __nla_validate_parse: 19 callbacks suppressed
[  273.878975][T18988] netlink: 404 bytes leftover after parsing attributes in process `syz.0.4346'.
[  273.884800][T18988] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4346'.
[  273.887738][T18988] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4346'.
[  273.890525][T18988] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4346'.
[  273.894500][T18988] syzkaller1: left promiscuous mode
[  273.896170][T18988] syzkaller1: left allmulticast mode
[  274.085277][T19011] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4356'.
[  274.166898][T19016] batadv_slave_1: entered promiscuous mode
[  274.169423][T19016] batadv_slave_1: left promiscuous mode
[  274.244224][T19022] lo speed is unknown, defaulting to 1000
[  274.369653][T19022] lo speed is unknown, defaulting to 1000
[  274.451686][T19036] syzkaller0: entered promiscuous mode
[  274.455647][T19036] syzkaller0: entered allmulticast mode
[  274.627284][T19033] tc_dump_action: action bad kind
[  275.186879][T19047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4368'.
[  275.245450][T19048] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4368'.
[  275.624190][T19050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4369'.
[  275.627666][T19050] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4369'.
[  275.633988][T19050] gtp0: entered promiscuous mode
[  275.635620][T19050] gtp0: entered allmulticast mode
[  275.788432][T19063] syzkaller0: entered promiscuous mode
[  275.790202][T19063] syzkaller0: entered allmulticast mode
[  275.922174][T19067] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4373'.
[  275.932299][T19067] bond1: (slave macvlan3): Error -98 calling set_mac_address
[  276.056994][T19077] IPVS: Error connecting to the multicast addr
[  276.127806][T19083] netlink: 'syz.2.4378': attribute type 1 has an invalid length.
[  276.166454][T19083] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  276.173957][ T5855] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  276.179383][T19083] 8021q: adding VLAN 0 to HW filter on device bond3
[  276.194396][T19083] veth7: entered promiscuous mode
[  276.206537][T19083] bond3: (slave veth7): Enslaving as a backup interface with a down link
[  276.218041][T19083] bond1: (slave erspan0): Releasing active interface
[  276.225004][T19083] bridge_slave_0: left allmulticast mode
[  276.226988][T19083] bridge_slave_0: left promiscuous mode
[  276.229011][T19083] bridge0: port 1(bridge_slave_0) entered disabled state
[  276.240365][T19083] bridge_slave_1: left allmulticast mode
[  276.253415][T19083] bridge_slave_1: left promiscuous mode
[  276.257347][T19083] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.268056][T19083] bond0: (slave bond_slave_0): Releasing backup interface
[  276.275326][T19083] bond0: (slave bond_slave_1): Releasing backup interface
[  276.286062][T19083] team0: Port device team_slave_0 removed
[  276.295242][T19083] team0: Port device team_slave_1 removed
[  276.298807][T19083] batman_adv: batadv0: Removing interface: batadv_slave_0
[  276.303997][   T12] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  276.307608][T19083] batman_adv: batadv0: Removing interface: batadv_slave_1
[  276.316534][T19083] macvlan1: left promiscuous mode
[  276.318876][T19083] macvlan1: left allmulticast mode
[  276.328394][T19083] bond1: (slave veth5): Releasing active interface
[  276.341465][T19083] gtp0: left promiscuous mode
[  276.344805][T19083] gtp0: left allmulticast mode
[  276.361015][T19083] bond3: (slave ip6gretap1): Removing an active aggregator
[  276.366509][T19083] bond3: (slave ip6gretap1): Releasing backup interface
[  276.368811][T19083] bond3: (slave ip6gretap1): the permanent HWaddr of slave - 8a:42:3e:64:b7:0a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  276.377986][T19083] veth7: left promiscuous mode
[  276.384436][T19083] bond3: (slave veth7): Releasing backup interface
[  276.817585][T19099] sctp: [Deprecated]: syz.2.4385 (pid 19099) Use of int in max_burst socket option.
[  276.817585][T19099] Use struct sctp_assoc_value instead
[  276.822478][T19099] IPVS: set_ctl: invalid protocol: 41 172.20.20.187:20001
[  276.826504][T19099] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20002
[  277.016271][T19112] syzkaller0: entered promiscuous mode
[  277.018779][T19112] syzkaller0: entered allmulticast mode
[  277.089054][T19121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  277.196809][T19135] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  277.258454][T19142] syzkaller0: entered promiscuous mode
[  277.260213][T19142] syzkaller0: entered allmulticast mode
[  278.110976][T19156] netlink: 'syz.2.4405': attribute type 1 has an invalid length.
[  278.288655][T19173] netlink: 'syz.1.4412': attribute type 7 has an invalid length.
[  278.346678][T19173] tc_dump_action: action bad kind
[  278.374184][T19186] netlink: 'syz.0.4416': attribute type 1 has an invalid length.
[  278.458912][T19200] x_tables: duplicate underflow at hook 3
[  278.529997][T19213] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  278.535311][T19213] syzkaller0: entered promiscuous mode
[  278.537044][T19213] syzkaller0: entered allmulticast mode
[  278.549948][T19213] tipc: Resetting bearer <eth:syzkaller0>
[  278.582054][T19213] tipc: Resetting bearer <eth:syzkaller0>
[  278.596853][T19213] tipc: Disabling bearer <eth:syzkaller0>
[  278.669220][T19222] netlink: 'syz.0.4425': attribute type 4 has an invalid length.
[  278.746781][T19227] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  278.749023][T19227] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  278.858633][T19237] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  278.864246][T19239] netlink: 'syz.0.4433': attribute type 4 has an invalid length.
[  278.944229][T19237] 8021q: adding VLAN 0 to HW filter on device bond4
[  278.986162][T19249] netlink: 'syz.0.4436': attribute type 4 has an invalid length.
[  278.989136][T19249] syzkaller0: entered promiscuous mode
[  278.990890][T19249] syzkaller0: entered allmulticast mode
[  278.994434][T19249] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  279.071256][T19255] __nla_validate_parse: 13 callbacks suppressed
[  279.071266][T19255] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4438'.
[  279.097514][T19257] sock: sock_timestamping_bind_phc: sock not bind to device
[  279.131054][T19260] netlink: 'syz.0.4440': attribute type 4 has an invalid length.
[  279.295716][T19273] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  279.326439][T19273] syzkaller0: entered promiscuous mode
[  279.328226][T19273] syzkaller0: entered allmulticast mode
[  279.342900][T19272] tipc: Resetting bearer <eth:syzkaller0>
[  279.445295][T19283] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4448'.
[  279.486208][T19291] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4451'.
[  280.577561][T19272] tipc: Disabling bearer <eth:syzkaller0>
[  280.630721][T19298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4453'.
[  280.668304][T19301] pim6reg1: entered allmulticast mode
[  280.746135][T19308] xt_CT: You must specify a L4 protocol and not use inversions on it
[  280.799495][T19311] netlink: 'syz.0.4458': attribute type 1 has an invalid length.
[  280.887147][T19319] SET target dimension over the limit!
[  280.990737][T19326] syzkaller0: entered promiscuous mode
[  280.992493][T19326] syzkaller0: entered allmulticast mode
[  281.021345][T19321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4464'.
[  281.185535][T19348] netlink: 596 bytes leftover after parsing attributes in process `syz.1.4472'.
[  281.233851][T19354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  281.265216][T19356] netlink: 'syz.2.4476': attribute type 4 has an invalid length.
[  281.317211][T19366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4479'.
[  281.328570][T19368] netlink: 'syz.2.4480': attribute type 10 has an invalid length.
[  281.331369][T19368] team0: Cannot enslave team device to itself
[  281.429048][T19380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4485'.
[  281.540400][T19393] syzkaller1: entered promiscuous mode
[  281.542198][T19393] syzkaller1: entered allmulticast mode
[  281.556606][T19393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4489'.
[  281.559324][T19393] netlink: 312 bytes leftover after parsing attributes in process `syz.2.4489'.
[  281.658323][T19394] dvmrp8: entered allmulticast mode
[  281.660903][T19392] dvmrp8: left allmulticast mode
[  281.775882][T19402] syzkaller0: entered promiscuous mode
[  281.777677][T19402] syzkaller0: entered allmulticast mode
[  282.289730][T19424] syzkaller0: entered promiscuous mode
[  282.291571][T19424] syzkaller0: entered allmulticast mode
[  282.586117][T19432] Cannot find add_set index 3 as target
[  283.081691][T19483] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  283.085945][T19483] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  283.101299][T19482] tap0: tun_chr_ioctl cmd 1074025678
[  283.104838][T19482] tap0: group set to 0
[  283.205474][T19492] validate_nla: 4 callbacks suppressed
[  283.205484][T19492] netlink: 'syz.1.4529': attribute type 21 has an invalid length.
[  283.209911][T19492] netlink: 'syz.1.4529': attribute type 22 has an invalid length.
[  283.214981][T19492] netlink: 'syz.1.4529': attribute type 23 has an invalid length.
[  283.217390][T19492] netlink: 'syz.1.4529': attribute type 25 has an invalid length.
[  283.438003][T19506] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  283.761095][T19541] netlink: 'syz.0.4545': attribute type 4 has an invalid length.
[  283.899276][T19557] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  284.031551][T19573] netlink: 'syz.1.4556': attribute type 4 has an invalid length.
[  284.142496][T19582] netlink: 'syz.1.4560': attribute type 12 has an invalid length.
[  284.151192][T19584] __nla_validate_parse: 18 callbacks suppressed
[  284.151203][T19584] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4561'.
[  284.244235][T19595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4564'.
[  284.309494][T19599] syzkaller0: entered promiscuous mode
[  284.311208][T19599] syzkaller0: entered allmulticast mode
[  284.317121][T19599] syzkaller0: refused to change device tx_queue_len
[  284.440095][T19601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4567'.
[  284.515315][T19605] lo speed is unknown, defaulting to 1000
[  284.608844][T19605] lo speed is unknown, defaulting to 1000
[  284.696356][T19610] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4570'.
[  284.970730][T19625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4575'.
[  284.995633][T19625] bond13: (slave bridge0): Releasing active interface
[  285.062510][T19628] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4576'.
[  285.069700][T19628] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4576'.
[  285.092537][T19628] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4576'.
[  285.103404][T19628] 0X: renamed from gretap0
[  285.106294][T19628] 0X: entered allmulticast mode
[  285.113543][T19628] A link change request failed with some changes committed already. Interface 30X may have been left with an inconsistent configuration, please check.
[  285.119589][T19628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4576'.
[  285.127988][T19628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4576'.
[  285.131012][T19630] syzkaller0: entered promiscuous mode
[  285.135314][T19630] syzkaller0: entered allmulticast mode
[  285.309659][T19637] bond1: (slave macvlan2): Releasing backup interface
[  285.509670][T19644] IPVS: persistence engine module ip_vs_pe_ not found
[  285.997870][T19671] openvswitch: netlink: IPv4 tunnel dst address is zero
[  286.042435][T19674] ipt_ECN: cannot use operation on non-tcp rule
[  286.117588][T19680] lo speed is unknown, defaulting to 1000
[  286.276296][T19680] lo speed is unknown, defaulting to 1000
[  286.377110][T19698] netlink: 'syz.0.4600': attribute type 1 has an invalid length.
[  286.383744][T19680] netlink: 'syz.1.4593': attribute type 13 has an invalid length.
[  286.386693][T19680] netlink: 'syz.1.4593': attribute type 17 has an invalid length.
[  286.398214][T19680] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  286.649489][   T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  287.021437][T19755] 8021q: adding VLAN 0 to HW filter on device bond13
[  287.057389][T19755] 8021q: adding VLAN 0 to HW filter on device bond13
[  287.059857][T19755] bond13: (slave vxcan1): The slave device specified does not support setting the MAC address
[  287.070354][T19755] bond13: (slave vxcan1): Error -95 calling set_mac_address
[  287.215730][T19777] syzkaller0: entered promiscuous mode
[  287.217543][T19777] syzkaller0: entered allmulticast mode
[  287.684558][T19820] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6
[  288.366606][T19863] IPVS: length: 148 != 24
[  288.383692][T19863] validate_nla: 1 callbacks suppressed
[  288.383703][T19863] netlink: 'syz.2.4651': attribute type 4 has an invalid length.
[  288.446528][T19872] netlink: 'syz.2.4655': attribute type 26 has an invalid length.
[  288.480552][T19875] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  288.484872][T19875] syzkaller0: entered promiscuous mode
[  288.486635][T19875] syzkaller0: entered allmulticast mode
[  288.509160][T19875] tipc: Resetting bearer <eth:syzkaller0>
[  288.512426][T19877] syzkaller0: entered promiscuous mode
[  288.517781][T19877] syzkaller0: entered allmulticast mode
[  288.524079][T19877] syzkaller0: refused to change device tx_queue_len
[  288.527067][T19874] tipc: Resetting bearer <eth:syzkaller0>
[  288.536072][T19874] tipc: Disabling bearer <eth:syzkaller0>
[  288.588085][T19882] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  288.739350][T19890] 8021q: VLANs not supported on xfrm0
[  288.842175][T19909] netlink: 'syz.1.4668': attribute type 21 has an invalid length.
[  288.929295][T19917] 8021q: adding VLAN 0 to HW filter on device bond5
[  288.932389][T19917] bond0: (slave bond5): Enslaving as an active interface with an up link
[  288.960888][T19924] netlink: 'syz.1.4672': attribute type 1 has an invalid length.
[  288.996103][ T3371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.999103][ T3371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.152119][T19934] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  289.154964][T19935] syzkaller0: entered promiscuous mode
[  289.156760][T19935] syzkaller0: entered allmulticast mode
[  289.159363][T19934] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  289.162033][T19934] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  289.165467][T19934] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  289.168394][T19934] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  289.171121][T19934] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  289.176354][T19934] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  289.179076][T19934] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  289.181666][T19934] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  289.184988][T19934] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  289.187543][T19934] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  289.190339][T19934] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  289.193530][T19934] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  289.196146][T19934] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  289.198764][T19934] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  289.201508][T19934] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  289.205301][T19934] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  289.216392][T19934] tipc: Resetting bearer <eth:syzkaller0>
[  289.227664][T19934] tipc: Disabling bearer <eth:syzkaller0>
[  289.461045][T19949] __nla_validate_parse: 23 callbacks suppressed
[  289.461057][T19949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4679'.
[  289.476962][T19951] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4680'.
[  289.589558][ T8984] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  289.719509][T19969] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.4686'.
[  290.516222][T19980] gretap1: entered promiscuous mode
[  290.545725][T19974] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4687'.
[  290.548515][T19974] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4687'.
[  290.613802][T19989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4693'.
[  290.623653][T19989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4693'.
[  290.780263][T20004] netlink: 'syz.2.4700': attribute type 1 has an invalid length.
[  290.804821][T20008] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4701'.
[  290.840806][T20006] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  290.853595][T20006] netlink: 'syz.1.4699': attribute type 33 has an invalid length.
[  290.855907][T20006] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4699'.
[  290.916507][T20013] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4702'.
[  291.102452][T20042] netlink: 'syz.0.4713': attribute type 39 has an invalid length.
[  291.186987][T20054] netlink: 'syz.1.4718': attribute type 11 has an invalid length.
[  291.189532][T20054] netlink: 'syz.1.4718': attribute type 11 has an invalid length.
[  291.368560][T20075] netlink: zone id is out of range
[  291.370175][T20075] netlink: zone id is out of range
[  291.371736][T20075] netlink: set zone limit has 4 unknown bytes
[  291.614912][T20095] netlink: 'syz.1.4733': attribute type 30 has an invalid length.
[  291.760670][T20019] delete_channel: no stack
[  291.963301][T20112] bond0: (slave bond5): Releasing backup interface
[  291.972256][T20112] netlink: 'syz.2.4741': attribute type 10 has an invalid length.
[  292.058472][T20124] 8021q: VLANs not supported on caif0
[  292.077344][T20128] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  292.287040][T20148] ipvlan0: entered promiscuous mode
[  292.770122][T20207] can: request_module (can-proto-0) failed.
[  292.838281][T20215] bond1: (slave macvlan0): Releasing backup interface
[  292.864847][T20215] netlink: 'syz.0.4776': attribute type 10 has an invalid length.
[  292.867285][T20215] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  292.872012][T20215] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  292.875401][T20215] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  293.084766][T20234] DL<Y: renamed from lo
[  294.125641][T20327] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  294.367943][T20343] netlink: 'syz.2.4821': attribute type 322 has an invalid length.
[  294.538490][T20357] __nla_validate_parse: 34 callbacks suppressed
[  294.538512][T20357] netlink: 600 bytes leftover after parsing attributes in process `syz.2.4828'.
[  294.660584][T20369] x_tables: duplicate underflow at hook 1
[  294.757044][T20371] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4833'.
[  294.760461][T20371] nbd: must specify at least one socket
[  294.866869][T20379] xt_l2tp: invalid flags combination: 4
[  294.882437][T20379] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4835'.
[  294.994297][T20387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4840'.
[  295.007752][T20386] netlink: 'syz.2.4839': attribute type 29 has an invalid length.
[  295.075461][T20398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4841'.
[  295.159188][T20407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4845'.
[  295.291133][T20416] netlink: 'syz.1.4849': attribute type 1 has an invalid length.
[  295.336694][T20418] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  295.349232][T20418] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4851'.
[  295.363357][T20420] syzkaller0: entered promiscuous mode
[  295.365664][T20420] syzkaller0: entered allmulticast mode
[  295.446573][T20424] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4853'.
[  295.471346][T20432] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4855'.
[  295.476378][T20432] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4855'.
[  295.858194][T20483] netlink: 'syz.2.4873': attribute type 2 has an invalid length.
[  295.860667][T20483] netlink: 'syz.2.4873': attribute type 1 has an invalid length.
[  295.918547][T20493] netlink: 'syz.1.4876': attribute type 3 has an invalid length.
[  296.159775][T20515] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  296.164021][T20515] bond1: (slave macvlan5): Enslaving as a backup interface with a down link
[  296.202140][T20518] netlink: 'syz.1.4886': attribute type 1 has an invalid length.
[  296.233871][T20518] xt_CT: No such helper "snmp"
[  296.244509][T20519] lo: entered promiscuous mode
[  296.332774][  T790] tipc: Node number set to 2111180688
[  296.369925][T20516] lo: left promiscuous mode
[  296.578548][T20556] set match dimension is over the limit!
[  296.881080][T20568] tipc: Enabling of bearer <eth:ipvlan1> rejected, failed to enable media
[  297.128549][T20592] netlink: 'syz.2.4916': attribute type 11 has an invalid length.
[  297.211937][T20598] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  297.303217][T20609] xt_hashlimit: size too large, truncated to 1048576
[  297.487227][T20626] xfrm1: entered promiscuous mode
[  297.489768][T20626] xfrm1: entered allmulticast mode
[  297.519030][T20628] dvmrp0: left allmulticast mode
[  297.520751][T20628] pimreg: left allmulticast mode
[  297.549218][T20622] netlink: 'syz.1.4926': attribute type 3 has an invalid length.
[  297.566110][T20634] netlink: zone id is out of range
[  297.567751][T20634] netlink: zone id is out of range
[  297.570968][T20634] netlink: zone id is out of range
[  297.586878][T20634] netlink: zone id is out of range
[  297.590157][T20634] netlink: get zone limit has 4 unknown bytes
[  297.621443][T20642] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  298.004611][T20682] xt_CT: No such helper "snmp"
[  298.101865][T20695] netlink: 'syz.2.4952': attribute type 1 has an invalid length.
[  298.138484][T20699] bond1: (slave macvlan7): Error -98 calling set_mac_address
[  298.272937][ T5828] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  298.311794][T20710] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  298.316876][T20710] gretap3: entered promiscuous mode
[  298.318703][T20710] gretap3: entered allmulticast mode
[  298.328901][T20710] syzkaller1: entered promiscuous mode
[  298.330687][T20710] syzkaller1: entered allmulticast mode
[  298.451480][T20721] xt_ecn: cannot match TCP bits for non-tcp packets
[  298.692361][T20733] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  298.776464][T20765] batadv_slave_1: entered promiscuous mode
[  298.779614][T20764] batadv_slave_1: left promiscuous mode
[  298.829828][T20773] netlink: 'syz.0.4978': attribute type 11 has an invalid length.
[  298.868681][T20778] netlink: 'syz.0.4980': attribute type 10 has an invalid length.
[  298.871521][T20778] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  298.945027][T20786] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  298.948101][T20786] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  299.000362][T20790] 8021q: VLANs not supported on ipvlan1
[  299.984356][T20820] __nla_validate_parse: 39 callbacks suppressed
[  299.984368][T20820] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4996'.
[  299.989465][T20820] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4996'.
[  300.096945][T20830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4998'.
[  300.146599][T20834] xt_time: unknown flags 0x4
[  300.180269][T20837] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5001'.
[  300.187339][T20837] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5001'.
[  300.195306][T20837] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5001'.
[  300.199143][T20837] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5001'.
[  300.202364][T20837] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5001'.
[  300.205983][T20837] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5001'.
[  300.210006][T20837] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5001'.
[  300.359916][T20847] bond1: (slave macvlan7): Error -98 calling set_mac_address
[  300.558025][T20858] bridge_slave_0: entered allmulticast mode
[  300.930706][T20885] Cannot find add_set index 3 as target
[  301.085313][T20900] tap0: tun_chr_ioctl cmd 1074025677
[  301.087221][T20900] tap0: linktype set to 270
[  301.092127][T20896] lo speed is unknown, defaulting to 1000
[  301.190325][T20896] DL<Y speed is unknown, defaulting to 1000
[  301.455073][T20924] validate_nla: 1 callbacks suppressed
[  301.455109][T20924] netlink: 'syz.2.5028': attribute type 4 has an invalid length.
[  301.471300][T20924] netlink: 'syz.2.5028': attribute type 4 has an invalid length.
[  301.526122][T20929] tipc: New replicast peer: 255.255.255.255
[  301.528365][T20929] tipc: Enabled bearer <udp:syz2>, priority 10
[  301.531057][T20929] tipc: Disabling bearer <udp:syz2>
[  302.021339][T20972] lo speed is unknown, defaulting to 1000
[  302.117483][T20979] netlink: 'syz.1.5049': attribute type 1 has an invalid length.
[  302.120797][T20972] DL<Y speed is unknown, defaulting to 1000
[  302.244404][T20989] xt_l2tp: v2 tid > 0xffff: 4294967295
[  302.335461][T21001] netlink: 'syz.1.5056': attribute type 23 has an invalid length.
[  302.488899][T21020] netlink: 'syz.1.5062': attribute type 3 has an invalid length.
[  302.593969][T21035] xt_cluster: node mask cannot exceed total number of nodes
[  303.138206][T21085] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  303.141164][T21086] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  303.211711][T21093] bond1: (slave macvlan7): Error -98 calling set_mac_address
[  303.498736][T21124] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  303.502221][T21124] bond1: (slave macvlan3): Enslaving as a backup interface with a down link
[  303.535383][T21127] openvswitch: netlink: Missing key (keys=40, expected=80)
[  303.882078][T21161] bond1: (slave macvlan4): Error -98 calling set_mac_address
[  304.394221][T21194] 8021q: adding VLAN 0 to HW filter on device team0
[  304.399742][T21194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  304.408033][  T790] lo speed is unknown, defaulting to 1000
[  304.421923][  T790] syz0: Port: 1 Link ACTIVE
[  304.423663][  T790] lo speed is unknown, defaulting to 1000
[  304.638091][T21227] netlink: 'syz.1.5135': attribute type 1 has an invalid length.
[  304.731176][T21239] 0X: left allmulticast mode
[  304.739471][T21239] bridge0: left promiscuous mode
[  304.740751][T21233] x_tables: duplicate underflow at hook 1
[  304.745251][T21239] bridge_slave_0: left allmulticast mode
[  304.748756][T21239] geneve1: left promiscuous mode
[  304.750409][T21239] geneve1: left allmulticast mode
[  304.770578][T21239] gtp0: left allmulticast mode
[  304.778710][T21239] sit1: left promiscuous mode
[  304.796175][T21239] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  304.798776][T21239] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  304.801406][T21239] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  304.805230][T21239] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  304.817341][T21239] ip6gre1: left allmulticast mode
[  304.825108][T21239] vlan0: left promiscuous mode
[  304.826723][T21239] veth1: left promiscuous mode
[  304.836541][T21239] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  304.839153][T21239] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  304.841723][T21239] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  304.844400][T21239] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  304.850212][T21239] bond5: left promiscuous mode
[  304.871217][T21239] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  304.873964][T21239] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  304.876499][T21239] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  304.879048][T21239] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  304.881787][T21239] geneve4: left promiscuous mode
[  304.883520][T21239] geneve4: left allmulticast mode
[  304.888217][T21239] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  304.890404][T21239] macsec0: left promiscuous mode
[  304.891951][T21239] macsec0: left allmulticast mode
[  304.900423][T21239] macvlan0: left promiscuous mode
[  304.907895][T21239] ip6erspan0: left allmulticast mode
[  304.921231][T21239] ipvlan0: left promiscuous mode
[  305.015687][T21254] __nla_validate_parse: 239 callbacks suppressed
[  305.015698][T21254] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5143'.
[  305.025894][T21254] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  305.032035][T21254] bond1: (slave macvlan4): Enslaving as a backup interface with a down link
[  305.217961][T21267] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5147'.
[  305.295319][T21275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5150'.
[  305.509661][T21295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5157'.
[  305.549508][T21293] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  305.700970][T21299] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.5160'.
[  305.974810][T21321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5169'.
[  306.045328][T21329] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  306.048980][T21329] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5171'.
[  306.076003][T21333] IPv6: sit2: Disabled Multicast RS
[  306.078325][T21333] sit2: entered allmulticast mode
[  306.260643][T21347] ip6t_srh: unknown srh invflags 4000
[  306.472664][T21362] netlink: 'syz.1.5183': attribute type 1 has an invalid length.
[  306.475573][T21362] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5183'.
[  306.813756][T21369] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5188'.
[  307.235332][T21378] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5192'.
[  307.502225][T21411] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0
[  307.507044][T21411] vlan1: entered allmulticast mode
[  307.508759][T21411] ip6gretap0: entered allmulticast mode
[  307.696242][T21431] netlink: 'syz.0.5210': attribute type 1 has an invalid length.
[  307.724342][T21433] bond1: (slave macvlan5): Error -98 calling set_mac_address
[  308.239957][T21485] A link change request failed with some changes committed already. Interface DL<Y may have been left with an inconsistent configuration, please check.
[  308.288035][T21492] netlink: 'syz.1.5231': attribute type 1 has an invalid length.
[  308.443741][T21511] netlink: 'syz.0.5237': attribute type 6 has an invalid length.
[  308.452537][T21511] netlink: 'syz.0.5237': attribute type 1 has an invalid length.
[  308.464418][T21510] netlink: 'syz.0.5237': attribute type 1 has an invalid length.
[  308.623343][T21525] bond1: (slave macvlan7): Error -98 calling set_mac_address
[  308.690117][T21528] netlink: 'syz.1.5243': attribute type 8 has an invalid length.
[  308.707964][T21530] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  308.775034][T21538] netlink: 'syz.0.5248': attribute type 11 has an invalid length.
[  308.779796][T21538] netlink: 'syz.0.5248': attribute type 11 has an invalid length.
[  308.788062][T21541] 8021q: VLANs not supported on sit0
[  308.827517][T21543] netlink: 'syz.1.5250': attribute type 1 has an invalid length.
[  308.877654][T21545] bond1: (slave macvlan5): Error -98 calling set_mac_address
[  309.021325][T21562] netlink: 'syz.0.5257': attribute type 1 has an invalid length.
[  309.155728][T21568] openvswitch: netlink: Flow key attr not present in new flow.
[  310.036020][T21578] bond1: (slave macvlan3): Releasing backup interface
[  310.038200][T21578] bond1: (slave macvlan3): the permanent HWaddr of slave - 12:ba:41:0b:d4:73 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  310.045059][T21578] bond1: (slave macvlan4): Releasing backup interface
[  310.055908][T21586] netlink: 'syz.2.5266': attribute type 1 has an invalid length.
[  310.058500][T21586] __nla_validate_parse: 35 callbacks suppressed
[  310.058508][T21586] netlink: 208 bytes leftover after parsing attributes in process `syz.2.5266'.
[  310.250260][T21594] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5270'.
[  310.320918][T21598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5272'.
[  310.778823][T21621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5280'.
[  310.827082][T21624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5281'.
[  310.830660][T21624] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5281'.
[  310.894384][T21631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5283'.
[  310.898818][T21631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5283'.
[  310.901608][T21631] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5283'.
[  310.905210][T21631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5283'.
[  311.205484][T21651] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  311.209176][T21651] bond1: (slave macvlan5): Enslaving as a backup interface with a down link
[  311.305217][T21657] Cannot find add_set index 4 as target
[  311.338666][T21659] batman_adv: batadv0: Adding interface: virt_wifi0
[  311.340839][T21659] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.349709][T21659] batman_adv: batadv0: Interface activated: virt_wifi0
[  311.531713][T21668] tipc: New replicast peer: 255.255.255.255
[  311.546408][T21668] tipc: Enabled bearer <udp:syz2>, priority 10
[  312.371663][T21681] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  312.377441][T21680] validate_nla: 4 callbacks suppressed
[  312.377450][T21680] netlink: 'syz.1.5303': attribute type 21 has an invalid length.
[  312.395301][T21680] bond1: (slave macvlan5): Releasing backup interface
[  312.499753][T21680] vlan0: entered promiscuous mode
[  312.501391][T21680] veth1: entered promiscuous mode
[  312.504762][T21680] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  312.581074][T21702] netlink: 'syz.1.5311': attribute type 4 has an invalid length.
[  312.846407][T21722] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7
[  313.282100][T21738] netlink: 'syz.0.5321': attribute type 1 has an invalid length.
[  313.380333][T21745] netlink: 'syz.0.5323': attribute type 21 has an invalid length.
[  313.526021][T21751] netlink: 'syz.2.5322': attribute type 10 has an invalid length.
[  314.079257][T21788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  314.136150][T21792] netlink: 'syz.1.5339': attribute type 1 has an invalid length.
[  314.212079][T21792] netlink: 'syz.1.5339': attribute type 1 has an invalid length.
[  314.545917][T21820] lo speed is unknown, defaulting to 1000
[  314.633886][T21820] DL<Y speed is unknown, defaulting to 1000
[  314.762378][T21830] netlink: 'syz.2.5350': attribute type 8 has an invalid length.
[  315.064873][T21849] netlink: 'syz.0.5358': attribute type 1 has an invalid length.
[  315.068223][T21849] __nla_validate_parse: 28 callbacks suppressed
[  315.068233][T21849] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5358'.
[  315.251205][T21860] x_tables: duplicate underflow at hook 2
[  315.291780][T21872] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[  315.297221][T21871] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[  315.340292][T21878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5367'.
[  315.345380][T21878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5367'.
[  315.502153][T21892] netlink: 'syz.1.5372': attribute type 1 has an invalid length.
[  315.505061][T21892] netlink: 236 bytes leftover after parsing attributes in process `syz.1.5372'.
[  315.537575][T21890] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5370'.
[  315.647344][T21911] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5379'.
[  315.650247][T21911] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5379'.
[  315.794371][T21928] xt_connbytes: Forcing CT accounting to be enabled
[  315.796397][T21928] x_tables: ip6_tables: SNPT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING
[  315.806465][T21925] xt_l2tp: v2 doesn't support IP mode
[  315.815215][T21923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5385'.
[  315.917258][T21940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5390'.
[  315.930127][T21941] lo speed is unknown, defaulting to 1000
[  316.029183][T21945] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5391'.
[  316.104797][T21957] 8021q: adding VLAN 0 to HW filter on device bond16
[  316.107275][T21941] DL<Y speed is unknown, defaulting to 1000
[  316.122486][T21957] 8021q: adding VLAN 0 to HW filter on device bond16
[  316.125106][T21957] bond16: (slave vxcan1): The slave device specified does not support setting the MAC address
[  316.129129][T21957] bond16: (slave vxcan1): Error -95 calling set_mac_address
[  316.171399][T21959] veth17: entered promiscuous mode
[  316.175988][T21959] bond16: (slave veth17): Enslaving as an active interface with a down link
[  316.187487][T21957] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  316.190466][   T27] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  316.384453][T21961] delete_channel: no stack
[  316.432225][T21968] bond1: (slave macvlan7): Error -98 calling set_mac_address
[  316.711712][T21981] xt_CT: You must specify a L4 protocol and not use inversions on it
[  317.384781][T22021] netlink: 'syz.2.5416': attribute type 11 has an invalid length.
[  317.751084][T22035] validate_nla: 3 callbacks suppressed
[  317.751097][T22035] netlink: 'syz.0.5420': attribute type 1 has an invalid length.
[  318.007121][T22046] bond1: (slave macvlan7): Error -98 calling set_mac_address
[  318.141577][T22057] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  318.202211][T22059] netlink: 'syz.0.5429': attribute type 5 has an invalid length.
[  318.344189][T22075] netlink: 'syz.2.5435': attribute type 1 has an invalid length.
[  318.420282][T22081] IPVS: set_ctl: invalid protocol: 4 100.1.1.2:20001
[  318.432039][T22081] rdma_op ffff8880471f89f0 conn xmit_rdma 0000000000000000
[  318.669677][T22104] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  318.708237][T22104] syzkaller0: entered promiscuous mode
[  318.710488][T22104] syzkaller0: entered allmulticast mode
[  318.713677][T22104] tipc: Resetting bearer <eth:syzkaller0>
[  318.721954][T22103] tipc: Resetting bearer <eth:syzkaller0>
[  319.870216][T22103] tipc: Disabling bearer <eth:syzkaller0>
[  320.079443][T22128] lo speed is unknown, defaulting to 1000
[  320.121323][T22131] xt_CT: No such helper "snmp"
[  320.207606][T22140] x_tables: duplicate underflow at hook 1
[  320.231241][T22128] DL<Y speed is unknown, defaulting to 1000
[  320.646687][T22169] nft_compat: unsupported protocol 0
[  320.918898][T22188] netlink: 'syz.1.5471': attribute type 1 has an invalid length.
[  320.924883][T22188] __nla_validate_parse: 25 callbacks suppressed
[  320.924894][T22188] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5471'.
[  321.155488][T22201] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5475'.
[  321.170768][T22201] bond1: (slave macvlan7): Error -98 calling set_mac_address
[  321.404588][T22226] syzkaller0: entered promiscuous mode
[  321.406312][T22226] syzkaller0: entered allmulticast mode
[  321.557474][T22239] netlink: 'syz.0.5484': attribute type 64 has an invalid length.
[  321.600029][T22239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5484'.
[  321.712756][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  321.916536][T22283] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  321.981312][T22288] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5494'.
[  322.013846][T22293] netlink: 'syz.1.5496': attribute type 29 has an invalid length.
[  322.017773][T22294] netlink: 'syz.1.5496': attribute type 29 has an invalid length.
[  322.020182][T22294] netlink: 'syz.1.5496': attribute type 29 has an invalid length.
[  322.135841][T22311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5501'.
[  322.200814][T22318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5505'.
[  322.220612][T22320] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  322.346221][T22326] netlink: 'syz.0.5509': attribute type 12 has an invalid length.
[  322.348913][T22326] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.5509'.
[  322.357721][T22330] netlink: 'syz.1.5511': attribute type 1 has an invalid length.
[  322.510513][T22340] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  322.536357][T22344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5512'.
[  322.612330][T22349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5517'.
[  322.709609][T22354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5519'.
[  322.876742][T22369] validate_nla: 1 callbacks suppressed
[  322.876754][T22369] netlink: 'syz.2.5524': attribute type 2 has an invalid length.
[  322.998953][T22383] Cannot find del_set index 4 as target
[  323.040535][T22388] netlink: 'syz.1.5530': attribute type 1 has an invalid length.
[  323.041092][T22383] xt_socket: unknown flags 0xd0
[  323.149634][T22397] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  323.157534][T22397] bond1: (slave macvlan6): Enslaving as a backup interface with a down link
[  323.240035][T22406] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  323.300916][T22411] lo speed is unknown, defaulting to 1000
[  323.312255][T22414] netlink: 'syz.1.5540': attribute type 1 has an invalid length.
[  323.421147][T22422] netlink: 'syz.1.5541': attribute type 1 has an invalid length.
[  323.507932][T22411] DL<Y speed is unknown, defaulting to 1000
[  323.543602][T22417] netlink: 'syz.0.5539': attribute type 9 has an invalid length.
[  323.728746][T22446] netlink: 'syz.0.5549': attribute type 1 has an invalid length.
[  323.871802][   T33] audit: type=1107 audit(1753090705.429:8): pid=22460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  324.170605][T22511] netlink: 'syz.1.5572': attribute type 27 has an invalid length.
[  324.520827][T22538] netlink: 'syz.2.5582': attribute type 1 has an invalid length.
[  324.539612][T22538] 8021q: adding VLAN 0 to HW filter on device bond6
[  324.553266][T22538] bond6: (slave gretap1): making interface the new active one
[  324.556095][T22538] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  325.062126][T22554] bond1: (slave macvlan7): Error -98 calling set_mac_address
[  325.427682][T22582] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  325.430526][T22582] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  325.880581][T22609] xt_CT: You must specify a L4 protocol and not use inversions on it
[  325.881197][T22608] xt_CT: You must specify a L4 protocol and not use inversions on it
[  326.149609][T22627] __nla_validate_parse: 30 callbacks suppressed
[  326.149621][T22627] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5615'.
[  326.194995][T22634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5616'.
[  326.345900][T22649] netlink: 'syz.0.5620': attribute type 39 has an invalid length.
[  326.504885][T22656] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5622'.
[  326.507628][T22656] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5622'.
[  326.526432][T22658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5623'.
[  326.666121][T22679] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[  326.677305][T22679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5630'.
[  326.690729][T22681] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5631'.
[  326.706896][T22681] bond1: (slave macvlan7): Error -98 calling set_mac_address
[  326.749715][T22685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5633'.
[  326.805613][T22690] netlink: 'syz.1.5634': attribute type 2 has an invalid length.
[  326.818681][T22691] openvswitch: netlink: Actions may not be safe on all matching packets
[  326.849729][T22693] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5636'.
[  326.926567][T22698] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  326.956821][T22698] lo speed is unknown, defaulting to 1000
[  327.023638][T22706] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5638'.
[  327.147430][T22698] DL<Y speed is unknown, defaulting to 1000
[  327.405639][T22742] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  327.408039][T22742] syzkaller0: entered promiscuous mode
[  327.410689][T22742] syzkaller0: entered allmulticast mode
[  327.430572][T22742] tipc: Resetting bearer <eth:syzkaller0>
[  327.438217][T22741] tipc: Resetting bearer <eth:syzkaller0>
[  327.447933][T22741] tipc: Disabling bearer <eth:syzkaller0>
[  327.524302][T22748] delete_channel: no stack
[  327.899082][T22787] validate_nla: 5 callbacks suppressed
[  327.899096][T22787] netlink: 'syz.1.5668': attribute type 1 has an invalid length.
[  328.216085][  T790] lo speed is unknown, defaulting to 1000
[  328.217987][  T790] syz0: Port: 1 Link DOWN
[  328.219930][  T790] lo speed is unknown, defaulting to 1000
[  328.293914][T22807] netlink: 'syz.1.5675': attribute type 1 has an invalid length.
[  328.767598][T22839] bridge_slave_0: entered allmulticast mode
[  328.810026][T22845] netlink: 'syz.2.5689': attribute type 1 has an invalid length.
[  328.883360][T22850] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  328.957662][T22856] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  328.958761][T22852] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  328.965416][T22852] netlink: 'syz.0.5692': attribute type 1 has an invalid length.
[  329.008124][T22859] 8021q: VLANs not supported on ip6_vti0
[  329.057196][T22861] netlink: 'syz.0.5695': attribute type 1 has an invalid length.
[  329.212092][T22872] syzkaller0: entered promiscuous mode
[  329.216122][T22872] syzkaller0: entered allmulticast mode
[  329.281180][T22874] x_tables: duplicate underflow at hook 2
[  329.434179][T22889] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[  329.556843][T22899] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  329.564564][T22899] syzkaller0: MTU too low for tipc bearer
[  329.566463][T22899] tipc: Disabling bearer <eth:syzkaller0>
[  329.744217][T22913] netlink: 'syz.0.5716': attribute type 1 has an invalid length.
[  329.746951][T22913] netlink: 'syz.0.5716': attribute type 1 has an invalid length.
[  329.749667][T22913] netlink: 'syz.0.5716': attribute type 8 has an invalid length.
[  329.856856][T22929] netlink: 'syz.1.5722': attribute type 64 has an invalid length.
[  329.861881][T22925] netlink: 'syz.0.5720': attribute type 1 has an invalid length.
[  329.902320][T22929] dvmrp8: left allmulticast mode
[  329.960589][T22941] No such timeout policy "syz0"
[  330.293242][T22971] tipc: Trying to set illegal importance in message
[  330.619461][T23012] macsec1: entered promiscuous mode
[  330.621155][T23012] ip6gretap0: entered promiscuous mode
[  330.623516][T23012] macsec1: entered allmulticast mode
[  330.625721][T23012] ip6gretap0: entered allmulticast mode
[  331.556735][T23048] __nla_validate_parse: 58 callbacks suppressed
[  331.556749][T23048] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5761'.
[  331.579318][T23048] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  331.593567][T23048] bond1: (slave macvlan7): Enslaving as a backup interface with a down link
[  331.598484][T23052] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  331.603640][T23051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5762'.
[  331.655681][T23058] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5764'.
[  331.675507][T23044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5759'.
[  331.916738][T23071] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5769'.
[  331.927409][T23071] bond1: (slave macvlan8): Error -98 calling set_mac_address
[  332.015421][T23074] !: renamed from dummy0
[  332.085117][T23078] lo speed is unknown, defaulting to 1000
[  332.205710][T23078] DL<Y speed is unknown, defaulting to 1000
[  332.676698][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  332.679682][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  332.726712][T23110] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  332.735756][ T5876] DL<Y speed is unknown, defaulting to 1000
[  332.738033][ T5876] syz1: Port: 1 Link ACTIVE
[  332.739534][T23114] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5776'.
[  332.807735][T23123] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5779'.
[  332.860833][T23129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5781'.
[  332.877929][T23128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5782'.
[  332.935710][T23139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5785'.
[  333.049790][T23153] validate_nla: 5 callbacks suppressed
[  333.049802][T23153] netlink: 'syz.2.5791': attribute type 4 has an invalid length.
[  333.054662][T23153] netlink: 'syz.2.5791': attribute type 17 has an invalid length.
[  333.059569][T23156] netlink: 'syz.2.5791': attribute type 4 has an invalid length.
[  333.062051][T23156] netlink: 'syz.2.5791': attribute type 17 has an invalid length.
[  333.105971][T23162] netlink: 'syz.2.5793': attribute type 10 has an invalid length.
[  333.108667][T23163] netlink: 'syz.2.5793': attribute type 10 has an invalid length.
[  333.143665][T23158] bridge20: the hash_elasticity option has been deprecated and is always 16
[  333.360348][T23183] bond1: (slave macvlan7): Error -98 calling set_mac_address
[  333.584166][T23203] tipc: Resetting bearer <eth:syzkaller0>
[  333.625810][T23205] bond1: (slave macvlan8): Error -98 calling set_mac_address
[  333.800566][T23217] netlink: 'syz.1.5814': attribute type 10 has an invalid length.
[  333.803841][T23217] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  333.873261][ T5831] Bluetooth: hci1: command 0x0405 tx timeout
[  334.455723][T23246] 8021q: adding VLAN 0 to HW filter on device team0
[  334.459978][T23246] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  334.466132][ T5876] lo speed is unknown, defaulting to 1000
[  334.468051][ T5876] syz0: Port: 1 Link ACTIVE
[  334.469640][ T5876] lo speed is unknown, defaulting to 1000
[  334.558869][T23255] netlink: 'syz.0.5831': attribute type 5 has an invalid length.
[  334.935353][T23298] netlink: 'syz.2.5850': attribute type 5 has an invalid length.
[  335.036827][T23304] netlink: 'syz.2.5851': attribute type 1 has an invalid length.
[  335.196486][   T33] audit: type=1800 audit(1753090716.759:9): pid=23317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5858" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=10356 res=0 errno=0
[  335.564157][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  335.584557][T23351] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  335.589443][T23351] tipc: Enabled bearer <udp:syz1>, priority 10
[  335.655279][T23356] bond1: (slave macvlan8): Error -98 calling set_mac_address
[  335.805900][T23373] siw: device registration error -23
[  336.312307][T23401] delete_channel: no stack
[  336.503128][T23431] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  336.677252][T23440] __nla_validate_parse: 37 callbacks suppressed
[  336.677265][T23440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5900'.
[  336.808854][T23445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  336.846163][T23447] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5902'.
[  336.969321][T23458] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5904'.
[  336.979135][T23458] bond1: (slave macvlan8): Error -98 calling set_mac_address
[  337.217354][T23468] syzkaller1: entered promiscuous mode
[  337.219398][T23468] syzkaller1: entered allmulticast mode
[  337.493640][T23484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5915'.
[  337.611401][T23490] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5919'.
[  337.619603][T23490] bond1: (slave macvlan8): Error -98 calling set_mac_address
[  337.759336][T23503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5923'.
[  337.808689][T23506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5924'.
[  337.812318][T23506] netlink: 194892 bytes leftover after parsing attributes in process `syz.0.5924'.
[  337.887099][T23516] macsec2: entered promiscuous mode
[  337.888839][T23516] macsec2: entered allmulticast mode
[  337.890475][T23516] !: entered allmulticast mode
[  337.895754][T23516] !: left allmulticast mode
[  337.949428][T23527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5929'.
[  337.956218][T23527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5929'.
[  337.997018][T23531] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  338.060574][T23538] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  338.578626][T23568] gtp1: entered promiscuous mode
[  338.580505][T23568] gtp1: entered allmulticast mode
[  338.629592][T23582] validate_nla: 10 callbacks suppressed
[  338.629603][T23582] netlink: 'syz.0.5948': attribute type 1 has an invalid length.
[  338.682251][T23588] bond1: (slave macvlan8): Error -98 calling set_mac_address
[  338.758312][T23591] netlink: 'syz.0.5951': attribute type 16 has an invalid length.
[  338.760914][T23591] netlink: 'syz.0.5951': attribute type 17 has an invalid length.
[  338.791415][T23591] ip6gretap0: left allmulticast mode
[  338.801200][ T5295] lo speed is unknown, defaulting to 1000
[  338.803732][ T5295] syz0: Port: 1 Link DOWN
[  338.805125][ T5295] lo speed is unknown, defaulting to 1000
[  338.938937][T23605] netlink: 'syz.1.5957': attribute type 64 has an invalid length.
[  338.938949][T23604] netlink: 'syz.1.5957': attribute type 64 has an invalid length.
[  338.978915][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  338.981546][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  339.150427][T23627] netlink: 'syz.1.5965': attribute type 1 has an invalid length.
[  339.240385][T23635] veth19: entered promiscuous mode
[  339.298699][T23627] erspan0: entered allmulticast mode
[  339.417179][T23660] netlink: 'syz.0.5978': attribute type 4 has an invalid length.
[  339.420360][T23660] netlink: 'syz.0.5978': attribute type 4 has an invalid length.
[  339.428006][ T5954] lo speed is unknown, defaulting to 1000
[  339.429795][ T5954] syz0: Port: 1 Link ACTIVE
[  339.431249][ T5954] lo speed is unknown, defaulting to 1000
[  340.036893][T23690] xt_policy: neither incoming nor outgoing policy selected
[  340.041414][T23690] netlink: 'syz.0.5990': attribute type 5 has an invalid length.
[  340.540098][T23733] netlink: 'syz.1.6003': attribute type 1 has an invalid length.
[  340.695605][T23747] 8021q: adding VLAN 0 to HW filter on device bond17
[  340.739270][T23755] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  340.745654][T23756] syzkaller0: entered promiscuous mode
[  340.747377][T23756] syzkaller0: entered allmulticast mode
[  340.761622][T23756] tipc: Resetting bearer <eth:syzkaller0>
[  340.773593][T23754] tipc: Resetting bearer <eth:syzkaller0>
[  340.786563][T23754] tipc: Disabling bearer <eth:syzkaller0>
[  341.660094][T23783] nbd: nbd0 already in use
[  341.760144][T23786] __nla_validate_parse: 23 callbacks suppressed
[  341.760156][T23786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6024'.
[  341.783470][T23786] IPVS: Unknown mcast interface: vcan0
[  342.240801][T23826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6037'.
[  342.245407][T23826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6037'.
[  342.381931][T23847] lo speed is unknown, defaulting to 1000
[  342.500323][T23847] DL<Y speed is unknown, defaulting to 1000
[  342.710006][T23803] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  342.875542][T23866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6050'.
[  343.316084][T23910] can: request_module (can-proto-0) failed.
[  343.642114][T23940] 8021q: adding VLAN 0 to HW filter on device bond18
[  343.670817][T23943] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6080'.
[  343.697328][T23947] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  343.699951][T23947] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  343.702546][T23947] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  343.707925][T23947] geneve1: entered promiscuous mode
[  343.709521][T23947] geneve1: entered allmulticast mode
[  343.749169][T23950] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6082'.
[  343.758834][T23950] bond1: (slave macvlan7): Error -98 calling set_mac_address
[  343.792034][T23953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6083'.
[  343.852415][T23959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6083'.
[  343.877446][T23959] 8021q: adding VLAN 0 to HW filter on device bond19
[  343.891680][T23959] macvlan8: entered promiscuous mode
[  343.893954][T23959] macvlan8: entered allmulticast mode
[  343.896984][T23959] bond19: entered promiscuous mode
[  343.899484][T23959] 8021q: adding VLAN 0 to HW filter on device macvlan8
[  343.905835][T23959] bond19: left promiscuous mode
[  343.921329][T23958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6085'.
[  343.958312][T23962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6086'.
[  344.007785][T23967] validate_nla: 7 callbacks suppressed
[  344.007796][T23967] netlink: 'syz.2.6087': attribute type 5 has an invalid length.
[  344.354316][T23991] lo speed is unknown, defaulting to 1000
[  344.447963][T23991] DL<Y speed is unknown, defaulting to 1000
[  344.650390][T23998] netlink: 'syz.0.6099': attribute type 5 has an invalid length.
[  344.857769][T24012] 8021q: adding VLAN 0 to HW filter on device macvlan8
[  344.861074][T24012] bond1: (slave macvlan8): Enslaving as a backup interface with a down link
[  344.932331][T23977] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  345.215668][T24053] IPv6: sit3: Disabled Multicast RS
[  345.217877][T24053] sit3: entered allmulticast mode
[  345.923932][T24041] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  345.969220][T24077] netlink: 'syz.0.6128': attribute type 1 has an invalid length.
[  346.090280][T24081] netlink: 'syz.0.6129': attribute type 1 has an invalid length.
[  346.150913][T24084] pim6reg0: tun_chr_ioctl cmd 1074025694
[  346.155047][T24086] netlink: 'syz.0.6132': attribute type 5 has an invalid length.
[  346.474698][T24104] bond1: (slave macvlan7): Error -98 calling set_mac_address
[  346.533475][T24109] netlink: 'syz.2.6141': attribute type 2 has an invalid length.
[  346.537274][T24109] openvswitch: netlink: Flow key attr not present in new flow.
[  346.613602][T24117] batman_adv: batadv0: Removing interface: virt_wifi0
[  346.641798][T24119] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  346.714850][T24125] bond1: (slave macvlan7): Error -98 calling set_mac_address
[  347.060817][T24093] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  347.110026][T24158] netlink: 'syz.0.6160': attribute type 11 has an invalid length.
[  347.225353][T24178] __nla_validate_parse: 14 callbacks suppressed
[  347.225367][T24178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6166'.
[  347.245580][T24178] 8021q: adding VLAN 0 to HW filter on device bond7
[  347.289894][T24191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6169'.
[  347.294274][T24191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6169'.
[  347.337230][T24197] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6171'.
[  347.343285][T24197] bond0 (unregistering): Released all slaves
[  347.434753][T24194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6170'.
[  347.499381][T24210] netlink: 'syz.1.6174': attribute type 1 has an invalid length.
[  347.502211][T24210] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6174'.
[  347.567979][T24214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6176'.
[  347.570759][T24214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6176'.
[  347.582496][T24214] netlink: 'syz.1.6176': attribute type 6 has an invalid length.
[  347.697898][T24219] netlink: 'syz.1.6178': attribute type 29 has an invalid length.
[  347.701514][T24219] netlink: 548 bytes leftover after parsing attributes in process `syz.1.6178'.
[  347.925765][T24237] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6184'.
[  348.084594][T24183] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  348.218985][T24273] lo speed is unknown, defaulting to 1000
[  348.509180][T24273] DL<Y speed is unknown, defaulting to 1000
[  348.641519][T24309] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  348.726073][T24317] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  348.875117][T24325] lo speed is unknown, defaulting to 1000
[  348.999468][T24325] DL<Y speed is unknown, defaulting to 1000
[  349.041789][T24325] openvswitch: netlink: Flow actions attr not present in new flow.
[  349.272128][T24341] bond1: (slave macvlan9): Error -98 calling set_mac_address
[  349.705126][T24327] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  349.809052][T24369] validate_nla: 4 callbacks suppressed
[  349.809064][T24369] netlink: 'syz.1.6228': attribute type 29 has an invalid length.
[  349.816263][T24373] netlink: 'syz.2.6230': attribute type 10 has an invalid length.
[  349.818837][T24369] netlink: 'syz.1.6228': attribute type 29 has an invalid length.
[  349.822563][T24373] netlink: 'syz.2.6230': attribute type 49 has an invalid length.
[  349.872196][T24377] bond1: (slave macvlan7): Error -98 calling set_mac_address
[  349.915863][T24379] netlink: 'syz.2.6232': attribute type 21 has an invalid length.
[  350.237597][T24403] bond1: (slave macvlan7): Error -98 calling set_mac_address
[  350.302182][T24405] lo speed is unknown, defaulting to 1000
[  350.344696][T24406] netlink: 'syz.1.6241': attribute type 2 has an invalid length.
[  350.399618][T24405] DL<Y speed is unknown, defaulting to 1000
[  350.756568][T24434] bond1: (slave macvlan9): Error -98 calling set_mac_address
[  350.780032][T24384] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  350.818098][T24436] netlink: 'syz.2.6253': attribute type 2 has an invalid length.
[  351.061438][T24462] netlink: 'syz.2.6259': attribute type 1 has an invalid length.
[  351.187203][T24476] netlink: 'syz.1.6265': attribute type 29 has an invalid length.
[  351.190051][T24476] netlink: 'syz.1.6265': attribute type 29 has an invalid length.
[  352.250927][T24582] vlan0: entered promiscuous mode
[  352.258466][T24582] team0: Port device vlan0 added
[  352.265250][T24582] __nla_validate_parse: 35 callbacks suppressed
[  352.265261][T24582] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6301'.
[  352.427738][T24595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6304'.
[  352.433986][T24597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6304'.
[  352.622555][T24611] netlink: 548 bytes leftover after parsing attributes in process `syz.1.6307'.
[  352.763804][T24619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6311'.
[  352.801231][T24627] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6314'.
[  352.899066][T24636] netlink: 176 bytes leftover after parsing attributes in process `syz.1.6317'.
[  353.058724][T24641] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6319'.
[  353.707901][T24656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6325'.
[  353.710909][T24656] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6325'.
[  353.987914][T24647] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  354.520466][T24726] No such timeout policy "syz0"
[  354.644967][T24728] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  354.648044][T24728] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  354.651256][T24728] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  354.837642][  T790] lo speed is unknown, defaulting to 1000
[  354.839502][  T790] syz0: Port: 1 Link DOWN
[  354.841824][  T790] lo speed is unknown, defaulting to 1000
[  354.946886][T24742] validate_nla: 20 callbacks suppressed
[  354.946900][T24742] netlink: 'syz.2.6355': attribute type 1 has an invalid length.
[  355.125254][T24751] netdevsim netdevsim0: Direct firmware load for .
[  355.125254][T24751]  failed with error -2
[  355.128426][T24751] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  355.128426][T24751] 
[  355.226093][T24767] tipc: Enabling of bearer <udp:sy0> rejected, failed to enable media
[  355.404420][T24785] netlink: 'syz.1.6365': attribute type 5 has an invalid length.
[  355.911012][T24819] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  355.919241][T24819] netlink: 'syz.0.6374': attribute type 1 has an invalid length.
[  356.174297][T24829] 8021q: adding VLAN 0 to HW filter on device macvlan9
[  356.178854][T24829] bond1: (slave macvlan9): Enslaving as a backup interface with a down link
[  356.468249][T24844] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:21
[  356.679740][T24872] openvswitch: netlink: Duplicate or invalid key (type 0).
[  356.682030][T24872] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  356.687545][T24872] netlink: 'syz.1.6391': attribute type 15 has an invalid length.
[  356.749722][T24878] netlink: 'syz.1.6393': attribute type 1 has an invalid length.
[  356.752513][T24878] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR
[  357.099876][T24902] netlink: 'syz.1.6402': attribute type 12 has an invalid length.
[  357.250044][T24905] bridge14: entered promiscuous mode
[  357.506858][T24915] netlink: 'syz.2.6405': attribute type 5 has an invalid length.
[  357.641907][T24924] ip6tnl4: entered promiscuous mode
[  357.644420][T24924] ip6tnl4: entered allmulticast mode
[  357.649352][T24924] team0: Device ip6tnl4 is up. Set it down before adding it as a team port
[  357.965612][T24942] __nla_validate_parse: 18 callbacks suppressed
[  357.965625][T24942] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6414'.
[  357.975267][T24942] netlink: 'syz.1.6414': attribute type 33 has an invalid length.
[  357.977823][T24942] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6414'.
[  358.025210][T24948] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6415'.
[  358.034666][T24948] bridge21: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  358.110516][T24950] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6416'.
[  358.115951][T24950] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  358.120912][T24911] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  358.176919][T24965] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6419'.
[  358.224173][T24971] syzkaller1: entered promiscuous mode
[  358.225862][T24971] syzkaller1: entered allmulticast mode
[  358.273877][T24967] lo speed is unknown, defaulting to 1000
[  358.337319][T24981] Cannot find add_set index 3 as target
[  358.351718][T24981] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  358.393559][T24967] DL<Y speed is unknown, defaulting to 1000
[  358.501949][T24994] netlink: 'syz.1.6429': attribute type 5 has an invalid length.
[  358.561947][T24997] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  358.599434][T25002] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[  358.606137][T25002] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  358.659487][T25002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6431'.
[  358.745056][T25014] bond1: (slave macvlan7): Error -98 calling set_mac_address
[  358.844772][T25023] netlink: 'syz.2.6440': attribute type 5 has an invalid length.
[  359.010672][T25042] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6444'.
[  359.080956][T25052] x_tables: duplicate underflow at hook 1
[  359.308997][T25064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6452'.
[  359.314198][T25064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6452'.
[  359.582447][T25076] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6457'.
[  359.633767][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  359.751306][T25085] netlink: 'syz.2.6460': attribute type 11 has an invalid length.
[  359.801911][T25088] tipc: New replicast peer: 255.255.255.255
[  359.805514][T25088] tipc: Enabled bearer <udp:syz2>, priority 10
[  360.010696][T25110] validate_nla: 5 callbacks suppressed
[  360.010709][T25110] netlink: 'syz.0.6467': attribute type 5 has an invalid length.
[  360.075590][T25107] ipt_REJECT: ECHOREPLY no longer supported.
[  360.089003][T25104] vlan1: entered promiscuous mode
[  360.090638][T25104] bridge0: entered promiscuous mode
[  360.092339][T25104] vlan1: entered allmulticast mode
[  360.094641][T25104] bridge0: entered allmulticast mode
[  360.224614][T25125] bond1: (slave macvlan10): Error -98 calling set_mac_address
[  360.465469][T25158] netlink: 'syz.0.6485': attribute type 14 has an invalid length.
[  360.500012][T25153] netlink: 'syz.1.6483': attribute type 1 has an invalid length.
[  360.586119][T25171] team0: Port device vlan0 removed
[  360.588784][T25171] bond1: (slave macvlan5): Releasing backup interface
[  360.590910][T25171] bond1: (slave macvlan5): the permanent HWaddr of slave - 92:51:0b:ef:3d:80 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  360.597765][T25171] bond1: (slave macvlan7): Releasing backup interface
[  360.609316][T25171] bond1: (slave macvlan8): Releasing backup interface
[  360.614002][T25171] bond1: (slave macvlan9): Releasing backup interface
[  360.748813][T25186] netlink: 'syz.0.6495': attribute type 5 has an invalid length.
[  361.049574][T25209] netlink: 'syz.1.6504': attribute type 10 has an invalid length.
[  361.264374][  T790] DL<Y speed is unknown, defaulting to 1000
[  361.266461][  T790] syz1: Port: 1 Link DOWN
[  361.297158][T25238] netlink: 'syz.2.6516': attribute type 5 has an invalid length.
[  361.305789][T25239] netlink: 'syz.1.6515': attribute type 3 has an invalid length.
[  361.309078][T25239] A link change request failed with some changes committed already. Interface DL<Y may have been left with an inconsistent configuration, please check.
[  361.348133][T25243] syzkaller1: entered promiscuous mode
[  361.350032][T25243] syzkaller1: entered allmulticast mode
[  361.520592][T25264] netlink: 'syz.2.6526': attribute type 5 has an invalid length.
[  362.036645][T25294] netlink: 'syz.2.6534': attribute type 4 has an invalid length.
[  362.039168][T25294] netlink: 'syz.2.6534': attribute type 2 has an invalid length.
[  362.760070][T25322] xt_TPROXY: Can be used only with -p tcp or -p udp
[  363.085948][T25342] lo speed is unknown, defaulting to 1000
[  363.090992][T25344] bond16: (slave veth17): Releasing active interface
[  363.109234][T25344] bond1: (slave macvlan6): Releasing backup interface
[  363.177935][T25342] DL<Y speed is unknown, defaulting to 1000
[  363.371816][T25355] __nla_validate_parse: 23 callbacks suppressed
[  363.371828][T25355] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6553'.
[  363.469159][T25360] xt_ecn: cannot match TCP bits for non-tcp packets
[  363.482247][T25360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6555'.
[  363.487628][T25360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6555'.
[  363.541221][T25366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6558'.
[  363.545943][T25366] siw: device registration error -23
[  363.563278][T25367] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  364.050459][T25392] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6565'.
[  364.199331][T25401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6567'.
[  364.379592][T25419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6574'.
[  364.619954][T25447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6585'.
[  364.626679][T25447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6585'.
[  364.728184][T25452] netlink: 548 bytes leftover after parsing attributes in process `syz.1.6586'.
[  364.901592][T25472] openvswitch: netlink: IPv4 tun info is not correct
[  364.962276][T25480] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  365.173438][T25511] validate_nla: 9 callbacks suppressed
[  365.173451][T25511] netlink: 'syz.2.6613': attribute type 1 has an invalid length.
[  365.504630][T25527] netlink: 'syz.1.6619': attribute type 5 has an invalid length.
[  365.614063][T25541] x_tables: duplicate underflow at hook 1
[  366.757028][T25643] lo speed is unknown, defaulting to 1000
[  366.772332][T25631] netlink: 'syz.0.6650': attribute type 10 has an invalid length.
[  366.786362][T25631] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  366.886370][T25643] DL<Y speed is unknown, defaulting to 1000
[  367.688217][T25672] lo speed is unknown, defaulting to 1000
[  367.808821][T25672] DL<Y speed is unknown, defaulting to 1000
[  368.156699][T25708] netlink: 'syz.1.6669': attribute type 16 has an invalid length.
[  368.159136][T25708] netlink: 'syz.1.6669': attribute type 17 has an invalid length.
[  368.177578][T25708] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  368.185090][ T2273] DL<Y speed is unknown, defaulting to 1000
[  368.187142][ T2273] syz1: Port: 1 Link ACTIVE
[  368.269663][T25716] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  368.380984][T25727] __nla_validate_parse: 12 callbacks suppressed
[  368.380996][T25727] netlink: 348 bytes leftover after parsing attributes in process `syz.2.6679'.
[  368.388656][T25727] netlink: 'syz.2.6679': attribute type 11 has an invalid length.
[  368.391063][T25727] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6679'.
[  368.569299][T25749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6685'.
[  368.585678][T25750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6685'.
[  368.635134][T25755] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6687'.
[  368.808619][T25766] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6688'.
[  368.824996][T25768] bridge8: the hash_elasticity option has been deprecated and is always 16
[  368.827902][T25768] bridge8: entered allmulticast mode
[  368.830949][T25768] netlink: 'syz.2.6690': attribute type 1 has an invalid length.
[  369.194599][T25797] netlink: 'syz.0.6698': attribute type 1 has an invalid length.
[  369.290568][T25803] netlink: 'syz.0.6700': attribute type 1 has an invalid length.
[  369.302470][T25803] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6700'.
[  369.312375][T25803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6700'.
[  369.516487][T25815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6705'.
[  369.750167][T25834] netlink: 'syz.2.6712': attribute type 3 has an invalid length.
[  369.813680][T25839] xt_CT: No such helper "syz0"
[  370.305017][T25868] veth15: entered promiscuous mode
[  370.317812][T25869] erspan0: entered allmulticast mode
[  370.707851][T25888] ip6gre1: entered allmulticast mode
[  370.712315][T25888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6729'.
[  370.749421][T25893] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  370.754591][T25893] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  370.856780][T25900] netlink: 'syz.1.6733': attribute type 5 has an invalid length.
[  370.879622][T25902] Cannot find add_set index 3 as target
[  371.049687][T25916] netlink: 'syz.1.6739': attribute type 4 has an invalid length.
[  371.058884][ T5954] DL<Y speed is unknown, defaulting to 1000
[  371.061246][ T5954] syz1: Port: 1 Link DOWN
[  371.067336][T25916] netlink: 'syz.1.6739': attribute type 4 has an invalid length.
[  371.072098][ T5954] DL<Y speed is unknown, defaulting to 1000
[  371.075442][ T5954] syz1: Port: 1 Link ACTIVE
[  371.208679][T25921] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  371.211837][T25921] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  371.928842][T25952] netlink: 'syz.2.6751': attribute type 1 has an invalid length.
[  372.357337][T25979] netlink: 'syz.0.6759': attribute type 10 has an invalid length.
[  372.555628][T25993] netlink: 'syz.0.6763': attribute type 1 has an invalid length.
[  372.927962][T26006] ip6t_REJECT: ECHOREPLY is not supported
[  372.974821][T26009] netlink: del zone limit has 4 unknown bytes
[  373.052340][T26013] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  373.119834][T26018] netlink: 'syz.1.6772': attribute type 1 has an invalid length.
[  373.418623][T26036] netlink: 'syz.1.6778': attribute type 5 has an invalid length.
[  373.501904][T26042] netlink: 'syz.1.6781': attribute type 1 has an invalid length.
[  373.505387][T26042] __nla_validate_parse: 15 callbacks suppressed
[  373.505398][T26042] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6781'.
[  373.511335][T26042] netlink: 'syz.1.6781': attribute type 1 has an invalid length.
[  373.515353][T26042] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6781'.
[  373.518422][T26042] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6781'.
[  373.521594][T26042] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6781'.
[  373.524614][T26042] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6781'.
[  373.527667][T26042] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6781'.
[  373.530696][T26042] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6781'.
[  373.533798][T26042] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6781'.
[  373.536831][T26042] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6781'.
[  373.539887][T26042] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6781'.
[  373.903268][T26062] xt_hashlimit: size too large, truncated to 1048576
[  373.905516][T26061] xt_hashlimit: size too large, truncated to 1048576
[  374.444898][T26099] sch_tbf: burst 240 is lower than device lo mtu (11337746) !
[  374.632519][T26107] wireguard1: entered promiscuous mode
[  374.637479][T26107] wireguard1: entered allmulticast mode
[  374.795275][T26123] openvswitch: netlink: IPv4 tunnel dst address is zero
[  375.060254][T26159] sctp: [Deprecated]: syz.1.6821 (pid 26159) Use of struct sctp_assoc_value in delayed_ack socket option.
[  375.060254][T26159] Use struct sctp_sack_info instead
[  375.632727][   T54] Bluetooth: hci1: command 0x0405 tx timeout
[  376.107212][T26239] validate_nla: 172 callbacks suppressed
[  376.107223][T26239] netlink: 'syz.2.6850': attribute type 4 has an invalid length.
[  376.290540][T26259] netlink: 'syz.2.6854': attribute type 5 has an invalid length.
[  376.367504][T26263] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  376.372070][T26263] syzkaller0: entered promiscuous mode
[  376.374413][T26263] syzkaller0: entered allmulticast mode
[  376.408999][T26263] tipc: Resetting bearer <eth:syzkaller0>
[  376.412303][T26262] tipc: Resetting bearer <eth:syzkaller0>
[  376.425688][T26262] tipc: Disabling bearer <eth:syzkaller0>
[  376.628855][T26288] netlink: 'syz.0.6866': attribute type 1 has an invalid length.
[  376.631519][T26288] netlink: 'syz.0.6866': attribute type 1 has an invalid length.
[  376.636175][T26288] netlink: 'syz.0.6866': attribute type 1 has an invalid length.
[  376.638699][T26288] netlink: 'syz.0.6866': attribute type 1 has an invalid length.
[  376.641392][T26288] netlink: 'syz.0.6866': attribute type 1 has an invalid length.
[  376.645367][T26288] netlink: 'syz.0.6866': attribute type 1 has an invalid length.
[  376.647862][T26288] netlink: 'syz.0.6866': attribute type 1 has an invalid length.
[  376.650314][T26288] netlink: 'syz.0.6866': attribute type 1 has an invalid length.
[  377.617355][T26334] erspan0: left allmulticast mode
[  377.632259][T26334] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  377.643865][T26340] openvswitch: netlink: EtherType 10 is less than min 600
[  377.666046][T26338] batadv0: entered promiscuous mode
[  377.667728][T26338] batadv0: entered allmulticast mode
[  377.677195][T26334] lo speed is unknown, defaulting to 1000
[  377.847131][T26334] DL<Y speed is unknown, defaulting to 1000
[  378.003706][ T5855] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  378.006159][ T5855] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  378.025540][  T790] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  378.032958][    C0] ==================================================================
[  378.035450][    C0] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0
[  378.037899][    C0] Read of size 2 at addr ffff88802e8bd82a by task swapper/0/0
[  378.040347][    C0] 
[  378.041952][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  378.041966][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  378.041974][    C0] Call Trace:
[  378.041980][    C0]  <IRQ>
[  378.041986][    C0]  dump_stack_lvl+0x189/0x250
[  378.042021][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  378.042034][    C0]  ? rcu_is_watching+0x15/0xb0
[  378.042045][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  378.042055][    C0]  ? rcu_is_watching+0x15/0xb0
[  378.042064][    C0]  ? lock_release+0x4b/0x3e0
[  378.042075][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  378.042084][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  378.042095][    C0]  print_report+0xd2/0x2b0
[  378.042104][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  378.042114][    C0]  kasan_report+0x118/0x150
[  378.042128][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  378.042138][    C0]  rose_timer_expiry+0x471/0x4b0
[  378.042149][    C0]  call_timer_fn+0x17e/0x5f0
[  378.042158][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  378.042167][    C0]  ? call_timer_fn+0xbe/0x5f0
[  378.042175][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  378.042185][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  378.042198][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  378.042208][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  378.042217][    C0]  __run_timer_base+0x61a/0x860
[  378.042230][    C0]  ? ktime_get+0x3e/0x1f0
[  378.042244][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  378.042255][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  378.042269][    C0]  run_timer_softirq+0xb7/0x180
[  378.042281][    C0]  handle_softirqs+0x286/0x870
[  378.042293][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  378.042302][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  378.042312][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  378.042325][    C0]  __irq_exit_rcu+0xca/0x1f0
[  378.042334][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  378.042344][    C0]  irq_exit_rcu+0x9/0x30
[  378.042352][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  378.042361][    C0]  </IRQ>
[  378.042364][    C0]  <TASK>
[  378.042368][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  378.042378][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  378.042388][    C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 93 dd 1a 00 f3 0f 1e fa fb f4 <e9> c8 dd 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  378.042397][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000286
[  378.042406][    C0] RAX: 71467ab9c2b83800 RBX: ffffffff81976c78 RCX: 71467ab9c2b83800
[  378.042413][    C0] RDX: 0000000000000001 RSI: ffffffff8d99603b RDI: ffffffff8be28c40
[  378.042419][    C0] RBP: ffffffff8de07ea8 R08: ffff88804b032f5b R09: 1ffff110096065eb
[  378.042425][    C0] R10: dffffc0000000000 R11: ffffed10096065ec R12: ffffffff8fa1d5f0
[  378.042431][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50
[  378.042438][    C0]  ? do_idle+0x1e8/0x510
[  378.042450][    C0]  default_idle+0x13/0x20
[  378.042460][    C0]  default_idle_call+0x74/0xb0
[  378.042469][    C0]  do_idle+0x1e8/0x510
[  378.042479][    C0]  ? __pfx_do_idle+0x10/0x10
[  378.042491][    C0]  cpu_startup_entry+0x44/0x60
[  378.042500][    C0]  rest_init+0x2de/0x300
[  378.042511][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  378.042520][    C0]  start_kernel+0x47d/0x500
[  378.042533][    C0]  x86_64_start_reservations+0x24/0x30
[  378.042546][    C0]  x86_64_start_kernel+0x143/0x1c0
[  378.042557][    C0]  common_startup_64+0x13e/0x147
[  378.042574][    C0]  </TASK>
[  378.042577][    C0] 
[  378.144233][    C0] Allocated by task 26194:
[  378.145599][    C0]  kasan_save_track+0x3e/0x80
[  378.147037][    C0]  __kasan_kmalloc+0x93/0xb0
[  378.148408][    C0]  __kmalloc_cache_noprof+0x230/0x3d0
[  378.149998][    C0]  __genradix_ptr_alloc+0x352/0x4a0
[  378.151544][    C0]  __genradix_prealloc+0x44/0x90
[  378.153045][    C0]  sctp_stream_init+0x14b/0x440
[  378.154509][    C0]  sctp_association_new+0x10dd/0x25f0
[  378.156126][    C0]  sctp_connect_new_asoc+0x2c5/0x690
[  378.157748][    C0]  sctp_sendmsg+0x155c/0x2810
[  378.159216][    C0]  __sock_sendmsg+0x19c/0x270
[  378.160596][    C0]  __sys_sendto+0x3bd/0x520
[  378.161995][    C0]  __x64_sys_sendto+0xde/0x100
[  378.163407][    C0]  do_syscall_64+0xfa/0x3b0
[  378.164781][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.166588][    C0] 
[  378.167346][    C0] Freed by task 26194:
[  378.168617][    C0]  kasan_save_track+0x3e/0x80
[  378.170090][    C0]  kasan_save_free_info+0x46/0x50
[  378.171639][    C0]  __kasan_slab_free+0x62/0x70
[  378.173110][    C0]  kfree+0x18e/0x440
[  378.174292][    C0]  genradix_free_recurse+0x5d/0xa0
[  378.175835][    C0]  genradix_free_recurse+0x5d/0xa0
[  378.177402][    C0]  sctp_stream_free+0xd5/0x110
[  378.178897][    C0]  sctp_association_free+0x26d/0x7f0
[  378.180472][    C0]  sctp_do_sm+0x3eba/0x5a20
[  378.181805][    C0]  sctp_primitive_SHUTDOWN+0x98/0xc0
[  378.183372][    C0]  sctp_close+0x409/0x900
[  378.184679][    C0]  inet_release+0x144/0x190
[  378.186052][    C0]  sock_close+0xc3/0x240
[  378.187330][    C0]  __fput+0x44c/0xa70
[  378.188540][    C0]  task_work_run+0x1d4/0x260
[  378.189951][    C0]  get_signal+0x11ed/0x1340
[  378.191317][    C0]  arch_do_signal_or_restart+0x9a/0x750
[  378.192965][    C0]  exit_to_user_mode_loop+0x75/0x110
[  378.194578][    C0]  do_syscall_64+0x2bd/0x3b0
[  378.195944][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.197686][    C0] 
[  378.198411][    C0] The buggy address belongs to the object at ffff88802e8bd800
[  378.198411][    C0]  which belongs to the cache kmalloc-512 of size 512
[  378.202495][    C0] The buggy address is located 42 bytes inside of
[  378.202495][    C0]  freed 512-byte region [ffff88802e8bd800, ffff88802e8bda00)
[  378.206425][    C0] 
[  378.207157][    C0] The buggy address belongs to the physical page:
[  378.209075][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e8bc
[  378.211610][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  378.214063][    C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  378.216240][    C0] page_type: f5(slab)
[  378.217468][    C0] raw: 00fff00000000040 ffff88801a441c80 ffffea0000ba2c00 dead000000000002
[  378.219975][    C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  378.222496][    C0] head: 00fff00000000040 ffff88801a441c80 ffffea0000ba2c00 dead000000000002
[  378.225030][    C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  378.227612][    C0] head: 00fff00000000002 ffffea0000ba2f01 00000000ffffffff 00000000ffffffff
[  378.230163][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  378.232755][    C0] page dumped because: kasan: bad access detected
[  378.232887][  T790] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  378.234672][    C0] page_owner tracks the page as allocated
[  378.234678][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 29, tgid 29 (kworker/u9:1), ts 49136189464, free_ts 0
[  378.243979][    C0]  post_alloc_hook+0x240/0x2a0
[  378.245444][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  378.247136][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  378.248923][    C0]  alloc_pages_mpol+0x232/0x4a0
[  378.250453][    C0]  allocate_slab+0x8a/0x3b0
[  378.251893][    C0]  ___slab_alloc+0xbfc/0x1480
[  378.253334][    C0]  __kmalloc_noprof+0x305/0x4f0
[  378.254819][    C0]  __cfg80211_bss_update+0x196/0x2120
[  378.256459][    C0]  cfg80211_inform_single_bss_data+0xba9/0x1ac0
[  378.258367][    C0]  cfg80211_inform_bss_data+0x1fb/0x3b20
[  378.260038][    C0]  cfg80211_inform_bss_frame_data+0x3d7/0x730
[  378.261857][    C0]  __ieee80211_sta_join_ibss+0xd58/0x1610
[  378.263544][    C0]  ieee80211_sta_create_ibss+0x300/0x480
[  378.265229][    C0]  ieee80211_ibss_work+0xdb1/0x1060
[  378.266820][    C0]  cfg80211_wiphy_work+0x2df/0x460
[  378.268340][    C0]  process_scheduled_works+0xae1/0x17b0
[  378.270019][    C0] page_owner free stack trace missing
[  378.271800][    C0] 
[  378.272608][    C0] Memory state around the buggy address:
[  378.274368][    C0]  ffff88802e8bd700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  378.276855][    C0]  ffff88802e8bd780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  378.279387][    C0] >ffff88802e8bd800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  378.282024][    C0]                                   ^
[  378.283788][    C0]  ffff88802e8bd880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  378.286227][    C0]  ffff88802e8bd900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  378.288639][    C0] ==================================================================
[  378.291252][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  378.293494][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  378.297188][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  378.300459][    C0] Call Trace:
[  378.301555][    C0]  <IRQ>
[  378.302471][    C0]  dump_stack_lvl+0x99/0x250
[  378.303923][    C0]  ? __asan_memcpy+0x40/0x70
[  378.305378][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  378.307014][    C0]  ? __pfx__printk+0x10/0x10
[  378.308472][    C0]  panic+0x2db/0x790
[  378.309911][    C0]  ? __pfx_panic+0x10/0x10
[  378.311256][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  378.313310][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  378.315164][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  378.317088][    C0]  ? print_memory_metadata+0x314/0x400
[  378.318735][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  378.320263][    C0]  check_panic_on_warn+0x89/0xb0
[  378.321881][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  378.323777][    C0]  end_report+0x78/0x160
[  378.325293][    C0]  kasan_report+0x129/0x150
[  378.326869][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  378.328666][    C0]  rose_timer_expiry+0x471/0x4b0
[  378.330391][    C0]  call_timer_fn+0x17e/0x5f0
[  378.332044][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  378.334000][    C0]  ? call_timer_fn+0xbe/0x5f0
[  378.335510][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  378.337170][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  378.339048][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  378.340914][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  378.342508][    C0]  __run_timer_base+0x61a/0x860
[  378.343918][    C0]  ? ktime_get+0x3e/0x1f0
[  378.345260][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  378.346975][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  378.349012][    C0]  run_timer_softirq+0xb7/0x180
[  378.350778][    C0]  handle_softirqs+0x286/0x870
[  378.352180][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  378.353589][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  378.355126][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  378.356895][    C0]  __irq_exit_rcu+0xca/0x1f0
[  378.358475][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  378.360280][    C0]  irq_exit_rcu+0x9/0x30
[  378.361828][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  378.363875][    C0]  </IRQ>
[  378.364983][    C0]  <TASK>
[  378.365946][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  378.367681][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  378.369337][    C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 93 dd 1a 00 f3 0f 1e fa fb f4 <e9> c8 dd 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  378.376073][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000286
[  378.378310][    C0] RAX: 71467ab9c2b83800 RBX: ffffffff81976c78 RCX: 71467ab9c2b83800
[  378.380752][    C0] RDX: 0000000000000001 RSI: ffffffff8d99603b RDI: ffffffff8be28c40
[  378.383035][    C0] RBP: ffffffff8de07ea8 R08: ffff88804b032f5b R09: 1ffff110096065eb
[  378.385408][    C0] R10: dffffc0000000000 R11: ffffed10096065ec R12: ffffffff8fa1d5f0
[  378.387814][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50
[  378.390087][    C0]  ? do_idle+0x1e8/0x510
[  378.391352][    C0]  default_idle+0x13/0x20
[  378.392612][    C0]  default_idle_call+0x74/0xb0
[  378.394011][    C0]  do_idle+0x1e8/0x510
[  378.395196][    C0]  ? __pfx_do_idle+0x10/0x10
[  378.396770][    C0]  cpu_startup_entry+0x44/0x60
[  378.398541][    C0]  rest_init+0x2de/0x300
[  378.400121][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  378.401999][    C0]  start_kernel+0x47d/0x500
[  378.403564][    C0]  x86_64_start_reservations+0x24/0x30
[  378.405579][    C0]  x86_64_start_kernel+0x143/0x1c0
[  378.407397][    C0]  common_startup_64+0x13e/0x147
[  378.408913][    C0]  </TASK>
[  378.410571][    C0] Kernel Offset: disabled
[  378.412078][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:39:19  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33be660 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99df3570 RSP=ffffc900000073f0
R8 =ffff888107388237 R9 =1ffff11020e71046 R10=dffffc0000000000 R11=ffffffff85460ce0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460d57 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2c6b38 CR3=000000002d9f2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2801100100000001 0020000000110208
XMM02=241855b690508482 2801100100000001 XMM03=0020000000110208 0000001102080100
XMM04=00007f9fd30ed100 00007f9fd2586440 XMM05=00007f9fd2586458 00007f9fd25864a0
XMM06=00007f9fd2586498 00007f9fd2586490 XMM07=00007f9fd2586488 00007f9fd2586480
XMM08=07c6a7151ba41403 0912340256624a03 XMM09=0000000000000000 00007f9fd2411df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00007f56df067540 RBX=000055de1240f9f0 RCX=0000000000000000 RDX=00007ffef3ae1b48
RSI=0000000000000000 RDI=000055de1240f9f0 RBP=00007ffef3ae1b48 RSP=00007ffef3ae1ae8
R8 =00007ffef3ae1b48 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000
RIP=00007f56def41c89 RFL=00000202 [-------] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f56df0e2800 ffffffff 00c00000
GS =0000 0000000000000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555561dea808 CR3=0000000110ee9000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
