last executing test programs:

2.46946289s ago: executing program 0 (id=7662):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a310000000008000300000000093000048008000100000012341400028006"], 0xb0}}, 0x0)

2.379615462s ago: executing program 0 (id=7663):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x44, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x400c0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9c010000", @ANYRES16=r1, @ANYBLOB="09000000000000000000140000000c00038008000100080000005800"], 0x19c}}, 0x0)

2.327638503s ago: executing program 0 (id=7665):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000000000101060000000000000000020000003400018014000180080001007f000001080002007f0000011c0002800500010011000000060002"], 0x9c}}, 0x0)

2.327043261s ago: executing program 0 (id=7667):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xfffff801}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="140000000000000029"], 0x18}}], 0x2, 0x20000040)

2.249546128s ago: executing program 0 (id=7669):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000300)=@hci, 0x80, &(0x7f0000000380)=[{&(0x7f0000000500)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000600)={0x0, 0xfffffffffffffd8e, &(0x7f0000000640)=[{&(0x7f0000000680)="a2", 0xfffffdef}], 0x1}, 0x80)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3d, &(0x7f00000006c0), 0x3c)

1.757319803s ago: executing program 1 (id=7674):
socket$xdp(0x2c, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000200000000000000b1d4000039459cc397f5685942d30f85c5e3c0974e4958a7fe59f75d52c0b9b642d80f7533eec2b33c8f22d6ba033cced1e9c0ff694f2f1a3da50cdba5654fbc07203724bb7b5be15bc278d8f972909879fda6cc844a567514078011d2d70df26b29ea6e1aa815ce51eef2a9ffaf3e231ccfa9ce4f58da4458d202fd6ccd6e911fcb2091e275ccad25922457f6660e5d020d52efd0b8c09d359f24a05f32ae48a644172c8e5f"], &(0x7f00000000c0)='syzkaller\x00', 0x9034, 0xa2, &(0x7f00000002c0)=""/162, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x9, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000480)=[{0x4, 0x4, 0x6, 0xe}]}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xe, &(0x7f0000000200)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
connect$inet6(r4, &(0x7f0000000500)={0xa, 0x4e24, 0x9, @mcast1, 0x55}, 0x1c)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
r8 = socket(0x1, 0x803, 0x0)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f706b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}}, &(0x7f0000000bc0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000d00)=[{0x0, 0x2, 0xd, 0xc}], 0x10, 0x3}, 0x94)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001000), r11)
sendmsg$NLBL_MGMT_C_REMOVE(r11, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001040)=ANY=[], 0x20}}, 0x4c880)
r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_LIST(r11, &(0x7f0000001340)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB, @ANYRES16=r12, @ANYBLOB="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"], 0x430}}, 0x4081)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r10, @ANYBLOB="bfebb9bed3ff0700"], 0x20}, 0x1, 0x0, 0x0, 0x4000886}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="03000000040000"], 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r14 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0c00018008000600", @ANYRES32, @ANYBLOB="0c000280050023000000000008000500"], 0x318}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)

1.548940353s ago: executing program 1 (id=7676):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x30, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4}}}]}, 0x30}}, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0xfbfd, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x8}}, {{@in=@private=0xa010100, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4}}, 0xe8)
connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000700000014000800000000000000000000000000000000000c0016"], 0x34}}, 0x0)

1.479609568s ago: executing program 1 (id=7677):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x70, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13c4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x70}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x84, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13c4}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x2710}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}]}, 0x84}}, 0x0)
r2 = socket$inet(0x2, 0x2, 0x11)
bind$inet(r2, &(0x7f0000000680)={0x2, 0x2710, @loopback}, 0x10)
sendto$inet(r2, &(0x7f00000008c0)="0d0a436d68882d4965c0010000000400000ae1f4", 0x14, 0x4, &(0x7f0000000700)={0x2, 0x4e24, @multicast1}, 0x10)

1.479063093s ago: executing program 1 (id=7678):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, 0x5c)

1.374240808s ago: executing program 1 (id=7680):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073018d00000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x358}, 0x48)

1.317317844s ago: executing program 0 (id=7681):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000300)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x40040)
write$nci(r0, &(0x7f0000001700)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8)
write$nci(r0, &(0x7f0000001740)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4)
sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001800)={0x24, r3, 0x1, 0x70bd27, 0x25dfdb7d, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c004}, 0x4000000)
write$nci(r0, &(0x7f0000001840)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5)

1.316315973s ago: executing program 1 (id=7683):
r0 = socket(0x10, 0x80002, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
connect$tipc(r1, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10)
sendmmsg$inet(r1, &(0x7f0000002f40)=[{{0x0, 0x15, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x3c, r5, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}]}, 0x3c}}, 0x400400c)
r6 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008814}, 0x20008040)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002900)=r7, 0x4)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000240)=0x4, 0x4)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x40000)
recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r9, 0x84, 0x1, 0x0, 0x0)
r10 = socket$inet6(0xa, 0x3, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@initdev={0xac, 0x1e, 0x3, 0x0}, 0x4e1f, 0x0, 0x0, 0x3, 0xa, 0x0, 0x0, 0x87}, {0xec, 0x8000000000000000, 0x1, 0x6811221b, 0x1d26, 0x8000000000010001, 0x200000200000003, 0x100000000}, {0x7ae, 0x1, 0x6, 0x7}, 0x6, 0x0, 0x1, 0x0, 0x6, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x6c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x0, 0x3, 0x2, 0x0, 0x9}}, 0xe8)
r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
setsockopt$RDS_GET_MR_FOR_DEST(r11, 0x114, 0x7, &(0x7f0000000180)={@vsock={0x28, 0x0, 0x0, @local}, {0x0}, 0x0, 0x12}, 0xa0)
connect$inet6(r10, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @loopback, 0x1ff}, 0x1c)

227.685449ms ago: executing program 2 (id=7697):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0xa, 0x3, 0x83)
r2 = socket(0xa, 0x3, 0x87)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_macvtap\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@local, 0x40, r3})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001400b59527bd7000fddbdf250a3d00c8", @ANYRES32=r3, @ANYBLOB="080008008205000014000200fe8000000000000000000000000000aa"], 0x48}, 0x1, 0x0, 0x0, 0x2004c040}, 0x8000)

149.957699ms ago: executing program 2 (id=7698):
bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

149.819795ms ago: executing program 2 (id=7699):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004055}, 0x24000840)

78.849397ms ago: executing program 2 (id=7700):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@struct={0x1, 0x1, 0x0, 0x4, 0x0, 0x4, [{0x2, 0x5, 0x9}]}]}, {0x0, [0x5f, 0x2e]}}, 0x0, 0x34, 0x0, 0x1, 0x9}, 0x28)

78.749061ms ago: executing program 2 (id=7701):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
listen(r0, 0x3)

0s ago: executing program 2 (id=7702):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="670004000a5b8e9e2ecdd3ec98fe000000000000e226", @ANYRES16=r2, @ANYRESHEX=r1], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfe, 0x80}, 0xc)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000b00)={0x1f, 0x0, @any, 0x8, 0x2}, 0xe)
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x3}, 0x4)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', <r8=>0x0})
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4)
sendto$packet(r7, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14)
r9 = socket$packet(0x11, 0x3, 0x300)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$sock(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="2e00000013000500000000000000000003010000100002007664706173696d5f6e6574000a00040076647079300019cc88bc7a85e014", 0x36}], 0x1}, 0x0)
setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r11, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x90)

kernel console output (not intermixed with test programs):

ty 0
[  281.099279][T15935] tipc: Disabling bearer <eth:syz_tun>
[  281.651503][T15956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4462'.
[  281.652223][T15956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4462'.
[  281.852012][ T8954] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  281.857669][ T6907] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  281.919963][T15961] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4464'.
[  282.029613][T15965] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4466'.
[  282.229476][T15967] net_ratelimit: 33 callbacks suppressed
[  282.229553][T15967] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  282.769090][T15997] macvtap1: entered promiscuous mode
[  282.769171][T15997] macvtap1: entered allmulticast mode
[  282.769176][T15997] gretap0: entered allmulticast mode
[  282.793689][T15997] gretap0: left allmulticast mode
[  282.795315][T15997] macvtap1: left promiscuous mode
[  282.795325][T15997] macvtap1: left allmulticast mode
[  282.801025][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  282.886080][T13276] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  283.489811][T16053] Bluetooth: hci0: unsupported parameter 5135
[  283.489826][T16053] Bluetooth: hci0: unsupported parameter 8192
[  283.489884][T16053] Bluetooth: hci0: unsupported parameter 5135
[  283.489891][T16053] Bluetooth: hci0: unsupported parameter 8192
[  283.775736][T16075] netlink: 'syz.2.4518': attribute type 1 has an invalid length.
[  283.794251][T16075] 8021q: adding VLAN 0 to HW filter on device bond7
[  283.822386][T16075] bond7: (slave veth9): Enslaving as an active interface with a down link
[  283.844923][T16075] bond7: (slave dummy0): Enslaving as an active interface with a down link
[  283.846673][T16075] netlink: 'syz.2.4518': attribute type 10 has an invalid length.
[  283.848288][T16075] __nla_validate_parse: 5 callbacks suppressed
[  283.848296][T16075] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4518'.
[  283.848335][T16075] dummy0: entered promiscuous mode
[  283.850807][T16075] bond7: (slave dummy0): Releasing active interface
[  283.980780][T16080] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4521'.
[  284.085257][T16090] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4524'.
[  284.085326][T16090] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4524'.
[  284.269641][T16101] vcan0: entered promiscuous mode
[  284.269656][T16101] vcan0: entered allmulticast mode
[  284.470160][T16114] netlink: 'syz.0.4537': attribute type 6 has an invalid length.
[  284.505136][T16119] netlink: 'syz.1.4535': attribute type 2 has an invalid length.
[  284.954527][T16144] bridge0: left promiscuous mode
[  284.955403][T16144] bridge_slave_0: left promiscuous mode
[  284.957770][T16144] veth0_virt_wifi: left allmulticast mode
[  284.957927][T16144] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  285.258438][T16157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4556'.
[  285.264740][T16157] macvlan5: entered promiscuous mode
[  285.285168][T16159] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4557'.
[  285.352584][T16164] Bluetooth: hci0: unsupported parameter 5161
[  285.352598][T16164] Bluetooth: hci0: unsupported parameter 8192
[  285.352603][T16164] Bluetooth: hci0: unsupported parameter 5161
[  285.352608][T16164] Bluetooth: hci0: unsupported parameter 8192
[  285.431792][T16165] 8021q: adding VLAN 0 to HW filter on device bond8
[  285.432719][T16165] team0: Port device bond8 added
[  285.516396][T16176] trusted_key: syz.1.4564 sent an empty control message without MSG_MORE.
[  285.596573][T16181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4566'.
[  285.658544][T16186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4568'.
[  286.057822][T16197] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4573'.
[  286.079524][T16190] netlink: Failed to add %pK     helper -22
[  286.079664][T16190] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  286.801060][    C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed
[  286.802781][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  288.005043][T16274] netlink: 'syz.2.4609': attribute type 32 has an invalid length.
[  288.152568][T16284] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  288.181766][T16284] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  288.204956][T16284] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  288.558516][T16313] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4626'.
[  288.790276][T16338] vlan2: entered promiscuous mode
[  289.412331][T16364] nbd: must specify at least one socket
[  290.401025][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  290.874309][T16425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4677'.
[  291.078881][T16432] xt_CT: You must specify a L4 protocol and not use inversions on it
[  291.167334][T16436] netlink: 'syz.1.4682': attribute type 1 has an invalid length.
[  291.238788][T16436] bond7: (slave veth5): Enslaving as an active interface with a down link
[  291.255089][T16436] bond7: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  291.459339][T16443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4684'.
[  291.459371][T16443] macvlan0: left promiscuous mode
[  291.459544][T16443] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4684'.
[  291.948762][T16474] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  292.048405][T16457] infiniband syz2: set down
[  292.051775][T16457] infiniband syz2: added bond_slave_0
[  292.059636][T16457] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  292.059653][T16457] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  292.059668][T16457] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  292.089051][T16457] RDS/IB: syz2: added
[  292.089078][T16457] smc: adding ib device syz2 with port count 1
[  292.089088][T16457] smc:    ib device syz2 port 1 has no pnetid
[  292.434358][T16489] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4707'.
[  292.547032][T16487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4705'.
[  292.548350][T16487] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4705'.
[  292.613764][T16487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  293.385516][T16517] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4719'.
[  293.938319][T16544] netlink: 'syz.1.4730': attribute type 4 has an invalid length.
[  294.604204][T16565] syzkaller0: entered promiscuous mode
[  294.604230][T16565] syzkaller0: entered allmulticast mode
[  294.881033][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  296.543881][T16618] ip_tables: iptables: counters copy to user failed while replacing table
[  296.673525][T16626] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  296.969383][T16649] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4776'.
[  297.062716][T16655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4779'.
[  297.062732][T16655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4779'.
[  298.232652][T16706] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4801'.
[  298.490082][T16717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4807'.
[  298.530936][T16716] ip_tables: iptables: counters copy to user failed while replacing table
[  298.698738][T16734] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  298.752907][T16737] syzkaller0: entered promiscuous mode
[  298.752921][T16737] syzkaller0: entered allmulticast mode
[  299.116154][T16757] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4824'.
[  299.349554][T16767] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4827'.
[  299.491548][T16774] netlink: 'syz.0.4831': attribute type 6 has an invalid length.
[  299.657780][T16783] netlink: 'syz.2.4836': attribute type 27 has an invalid length.
[  299.657799][T16783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4836'.
[  299.657818][T16783] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  299.813117][T16789] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4839'.
[  299.977221][T16799] batman_adv: batadv0: Adding interface: syzkaller0
[  299.977233][T16799] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  299.977271][T16799] batman_adv: batadv0: Interface activated: syzkaller0
[  299.977279][T16799] batadv0: mtu less than device minimum
[  299.977774][T16799] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  299.978261][T16799] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  299.978695][T16799] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  299.979222][T16799] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  299.979687][T16799] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  299.980156][T16799] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  300.442426][T16805] netlink: 'syz.2.4846': attribute type 7 has an invalid length.
[  300.448425][T16798] batman_adv: batadv0: Interface deactivated: syzkaller0
[  300.490575][T16798] batman_adv: batadv0: Removing interface: syzkaller0
[  300.631462][T16812] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4849'.
[  300.680140][T16821] C: entered promiscuous mode
[  300.688349][T16821] tunl0: entered promiscuous mode
[  300.693284][T16821] gre0: entered promiscuous mode
[  300.721980][T16821] erspan0: entered promiscuous mode
[  300.722608][T16821] ip_vti0: entered promiscuous mode
[  300.726714][T16821] ip6_vti0: entered promiscuous mode
[  300.740807][T16821] sit0: entered promiscuous mode
[  300.752718][T16821] ip6tnl0: entered promiscuous mode
[  300.753323][T16821] ip6gre0: entered promiscuous mode
[  300.760543][T16821] ip6gretap0: entered promiscuous mode
[  300.780764][T16821] bond0: entered promiscuous mode
[  300.780793][T16821] netdevsim netdevsim2 netdevsim1: entered promiscuous mode
[  300.795451][T16821] team0: entered promiscuous mode
[  300.795470][T16821] bond8: entered promiscuous mode
[  300.827794][T16821] nlmon0: entered promiscuous mode
[  300.828829][T16821] batadv0: entered promiscuous mode
[  300.839044][T16821] vxcan0: entered promiscuous mode
[  300.847040][T16821] vxcan1: entered promiscuous mode
[  300.879129][T16821] veth0: entered promiscuous mode
[  300.899780][T16821] veth1: entered promiscuous mode
[  301.121188][T16821] wg0: entered promiscuous mode
[  301.129909][T16821] wg1: entered promiscuous mode
[  301.136632][T16821] wg2: entered promiscuous mode
[  301.146496][T16821] veth0_to_bridge: entered promiscuous mode
[  301.149549][T16821] bridge_slave_0: entered promiscuous mode
[  301.170584][T16821] veth1_to_bridge: entered promiscuous mode
[  301.194661][T16821] veth0_to_bond: entered promiscuous mode
[  301.205767][T16821] bond_slave_0: entered promiscuous mode
[  301.223583][T16821] veth1_to_bond: entered promiscuous mode
[  301.237605][T16821] bond_slave_1: entered promiscuous mode
[  301.252505][T16821] veth0_to_team: entered promiscuous mode
[  301.265951][T16821] team_slave_0: entered promiscuous mode
[  301.270594][T16821] veth1_to_team: entered promiscuous mode
[  301.287165][T16821] team_slave_1: entered promiscuous mode
[  301.296766][T16821] veth1_to_batadv: entered promiscuous mode
[  301.308561][T16821] batadv_slave_1: entered promiscuous mode
[  301.320338][T16821] xfrm0: entered promiscuous mode
[  301.333169][T16821] veth0_to_hsr: entered promiscuous mode
[  301.350723][T16821] veth1_to_hsr: entered promiscuous mode
[  301.376753][T16821] hsr0: entered promiscuous mode
[  301.386320][T16821] veth1_virt_wifi: entered promiscuous mode
[  301.393304][T16821] veth0_virt_wifi: entered promiscuous mode
[  301.399140][T16821] : entered promiscuous mode
[  301.399483][T16821] vlan0: entered promiscuous mode
[  301.399620][T16821] vlan1: entered promiscuous mode
[  301.399732][T16821] macvlan0: entered promiscuous mode
[  301.399802][T16821] macvlan1: entered promiscuous mode
[  301.399857][T16821] ipvlan1: entered promiscuous mode
[  301.399967][T16821] veth0_macvtap: entered promiscuous mode
[  301.417257][T16821] macsec0: entered promiscuous mode
[  301.417376][T16821] geneve0: entered promiscuous mode
[  301.417483][T16821] geneve1: entered promiscuous mode
[  301.417589][T16821] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  301.433566][T16821] netdevsim netdevsim2 netdevsim2: entered promiscuous mode
[  301.433666][T16821] netdevsim netdevsim2 netdevsim3: entered promiscuous mode
[  301.433758][T16821] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  301.433863][T16821] ip6erspan0: entered promiscuous mode
[  301.433947][T16821] bond1: entered promiscuous mode
[  301.434033][T16821] erspan1: entered promiscuous mode
[  301.434121][T16821] macvlan2: entered promiscuous mode
[  301.434327][T16821] gre1: entered promiscuous mode
[  301.434409][T16821] vxcan2: entered promiscuous mode
[  301.434509][T16821] vxcan3: entered promiscuous mode
[  301.434591][T16821] veth2: entered promiscuous mode
[  301.437764][T16821] veth3: entered promiscuous mode
[  301.437880][T16821] bond2: entered promiscuous mode
[  301.437964][T16821] bond3: entered promiscuous mode
[  301.438151][T16821] geneve2: entered promiscuous mode
[  301.463748][T16821] macvlan3: entered promiscuous mode
[  301.478680][T16821] macvlan4: entered promiscuous mode
[  301.491953][T16821] ip6gre1: entered promiscuous mode
[  301.492020][T16821] bond4: entered promiscuous mode
[  301.497396][T16821] bridge1: entered promiscuous mode
[  301.499714][T16821] vlan3: entered promiscuous mode
[  301.499831][T16821] sit1: entered promiscuous mode
[  301.499895][T16821] vx0: entered promiscuous mode
[  301.499942][T16821] veth4: entered promiscuous mode
[  301.500096][T16821] gre2: entered promiscuous mode
[  301.519486][T16821] veth6: entered promiscuous mode
[  301.519568][T16821] veth7: entered promiscuous mode
[  301.541624][T16821] erspan2: entered promiscuous mode
[  301.541709][T16821] vlan4: entered promiscuous mode
[  301.541871][T16821] ipip0: entered promiscuous mode
[  301.544570][T16821] bond6: entered promiscuous mode
[  301.544678][T16821] gtp0: entered promiscuous mode
[  301.550394][T16821] bridge2: entered promiscuous mode
[  301.565758][T16821] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  301.565841][T16821] ipip1: entered promiscuous mode
[  301.574250][T16821] bridge0: entered promiscuous mode
[  301.579433][T16821] vxcan4: entered promiscuous mode
[  301.579527][T16821] vxcan5: entered promiscuous mode
[  301.587846][T16821] bridge3: entered promiscuous mode
[  301.596887][T16821] ip6gretap1: entered promiscuous mode
[  301.603786][T16821] mac80211_hwsim hwsim11 wlan2: entered promiscuous mode
[  301.603862][T16821] syztnl0: entered promiscuous mode
[  301.608796][T16821] bond7: entered promiscuous mode
[  301.609191][T16821] veth8: entered promiscuous mode
[  301.619151][T16821] veth9: entered promiscuous mode
[  301.975412][T16854] netlink: 'syz.0.4867': attribute type 1 has an invalid length.
[  302.328606][T16858] syzkaller1: entered promiscuous mode
[  302.328628][T16858] syzkaller1: entered allmulticast mode
[  302.666144][T16866] hsr0: entered allmulticast mode
[  302.666168][T16866] hsr_slave_0: entered allmulticast mode
[  302.666181][T16866] hsr_slave_1: entered allmulticast mode
[  302.680077][T16866] __nla_validate_parse: 3 callbacks suppressed
[  302.680138][T16866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4872'.
[  302.889081][T16866] hsr0 (unregistering): left allmulticast mode
[  303.015891][T16875] net_ratelimit: 33 callbacks suppressed
[  303.015905][T16875] openvswitch: netlink: EtherType 300 is less than min 600
[  303.091935][T16873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4874'.
[  303.184296][T16878] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4878'.
[  303.230773][T16884] block nbd0: not configured, cannot reconfigure
[  303.360452][T16890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4882'.
[  303.403031][T16891] ip6t_rt: address list match requested but addrnr is 0
[  303.631284][T16899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4888'.
[  304.321207][T16924] netlink: 'syz.0.4901': attribute type 1 has an invalid length.
[  304.356152][T16924] macvtap1: entered allmulticast mode
[  304.360305][T16924] macvtap2: entered allmulticast mode
[  304.374480][T16924] bond6: (slave bridge8): making interface the new active one
[  304.377484][T16924] bond6: (slave bridge8): Enslaving as an active interface with an up link
[  304.695803][T16952] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4912'.
[  304.695817][T16952] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4912'.
[  304.892296][T16965] netlink: 'syz.1.4920': attribute type 10 has an invalid length.
[  304.892669][T16965] netlink: 'syz.1.4920': attribute type 10 has an invalid length.
[  305.077037][T16972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4923'.
[  305.121073][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  305.229295][T16980] C: entered allmulticast mode
[  305.229389][T16980] C: left allmulticast mode
[  305.273260][T16985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4930'.
[  305.446896][T16991] pimreg0: tun_chr_ioctl cmd 1074025677
[  305.447836][T16991] pimreg0: linktype set to 776
[  305.597862][T17006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4938'.
[  305.832794][T17024] openvswitch: netlink: Port 856954028 exceeds max allowable 65535
[  306.069559][T17039] openvswitch: netlink: IP tunnel attribute has 5365 unknown bytes.
[  306.429819][T17054] netlink: 'syz.1.4961': attribute type 10 has an invalid length.
[  306.922449][T17092] bond9: entered promiscuous mode
[  307.473725][T17137] netlink: 'syz.1.5001': attribute type 4 has an invalid length.
[  308.342432][T17207] netlink: 'syz.1.5033': attribute type 3 has an invalid length.
[  308.342453][T17207] __nla_validate_parse: 5 callbacks suppressed
[  308.342460][T17207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5033'.
[  308.667665][T17217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5039'.
[  309.225547][T17234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5048'.
[  309.273080][T17250] netlink: 'syz.0.5054': attribute type 5 has an invalid length.
[  309.814696][T17259] xt_nfacct: accounting object `' does not exist
[  309.820507][T17259] netlink: 'syz.2.5058': attribute type 2 has an invalid length.
[  310.203812][T17261] smc: removing ib device syz2
[  310.252860][T17261] smbdirect: ib_dev[syz2] removed
[  310.866829][T17287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5069'.
[  311.638515][T17320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5085'.
[  311.638530][T17320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5085'.
[  311.638545][T17320] netlink: 'syz.0.5085': attribute type 6 has an invalid length.
[  311.638551][T17320] netlink: 'syz.0.5085': attribute type 5 has an invalid length.
[  311.638936][T17320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5085'.
[  311.638944][T17320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5085'.
[  311.638952][T17320] netlink: 'syz.0.5085': attribute type 6 has an invalid length.
[  311.638957][T17320] netlink: 'syz.0.5085': attribute type 5 has an invalid length.
[  311.749723][T17329] ip6t_rt: unknown flags 1F
[  311.761201][T17328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5089'.
[  311.761219][T17328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5089'.
[  311.994929][T17346] netlink: 'syz.0.5096': attribute type 12 has an invalid length.
[  312.307033][T17351] C: left promiscuous mode
[  312.308191][T17351] tunl0: left promiscuous mode
[  312.309487][T17351] gre0: left promiscuous mode
[  312.312866][T17351] erspan0: left promiscuous mode
[  312.314562][T17351] ip_vti0: left promiscuous mode
[  312.314926][T17351] ip6_vti0: left promiscuous mode
[  312.315292][T17351] sit0: left promiscuous mode
[  312.315828][T17351] ip6tnl0: left promiscuous mode
[  312.316241][T17351] ip6gre0: left promiscuous mode
[  312.316670][T17351] ip6gretap0: left promiscuous mode
[  312.317475][T17351] 8021q: adding VLAN 0 to HW filter on device bond0
[  312.317874][T17351] team0: left promiscuous mode
[  312.318269][T17351] 8021q: adding VLAN 0 to HW filter on device team0
[  312.318587][T17351] dummy0: left promiscuous mode
[  312.319193][T17351] nlmon0: left promiscuous mode
[  312.319630][T17351] batadv0: left promiscuous mode
[  312.320136][T17351] 8021q: adding VLAN 0 to HW filter on device batadv0
[  312.320377][T17351] vxcan0: left promiscuous mode
[  312.320813][T17351] vxcan1: left promiscuous mode
[  312.323879][T17351] veth0: left promiscuous mode
[  312.324399][T17351] veth1: left promiscuous mode
[  312.347105][T17351] wg0: left promiscuous mode
[  312.372474][T17352] openvswitch: netlink: Message has 8 unknown bytes.
[  312.389600][T17351] wg1: left promiscuous mode
[  312.414910][T17351] wg2: left promiscuous mode
[  312.415473][T17351] veth0_to_bridge: left promiscuous mode
[  312.415984][T17351] bridge_slave_0: left promiscuous mode
[  312.416243][T17351] veth1_to_bridge: left promiscuous mode
[  312.417819][T17351] veth0_to_bond: left promiscuous mode
[  312.418430][T17351] bond_slave_0: left promiscuous mode
[  312.418725][T17351] veth1_to_bond: left promiscuous mode
[  312.419216][T17351] bond_slave_1: left promiscuous mode
[  312.419533][T17351] veth0_to_team: left promiscuous mode
[  312.419977][T17351] team_slave_0: left promiscuous mode
[  312.420375][T17351] veth1_to_team: left promiscuous mode
[  312.424530][T17351] team_slave_1: left promiscuous mode
[  312.424830][T17351] veth1_to_batadv: left promiscuous mode
[  312.428940][T17351] batadv_slave_1: left promiscuous mode
[  312.429484][T17351] xfrm0: left promiscuous mode
[  312.429952][T17351] veth0_to_hsr: left promiscuous mode
[  312.430537][T17351] hsr_slave_0: left promiscuous mode
[  312.430802][T17351] veth1_to_hsr: left promiscuous mode
[  312.433924][T17351] hsr_slave_1: left promiscuous mode
[  312.450555][T17351] veth1_virt_wifi: left promiscuous mode
[  312.456826][T17351] veth0_virt_wifi: left promiscuous mode
[  312.457324][T17351] : left promiscuous mode
[  312.457870][T17351] veth1_vlan: left promiscuous mode
[  312.463130][T17351] vlan0: left promiscuous mode
[  312.464825][T17351] vlan1: left promiscuous mode
[  312.465359][T17351] veth1_vlan: entered promiscuous mode
[  312.465446][T17351] macvlan0: left promiscuous mode
[  312.470475][T17351] macvlan1: left promiscuous mode
[  312.471527][T17351] ipvlan1: left promiscuous mode
[  312.472612][T17351] geneve0: left promiscuous mode
[  312.473246][T17351] geneve1: left promiscuous mode
[  312.476721][T17351] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  312.476896][T17351] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  312.477434][T17351] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  312.477683][T17351] netdevsim netdevsim2 netdevsim2: left promiscuous mode
[  312.478104][T17351] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  312.484239][T17351] netdevsim netdevsim2 netdevsim3: left promiscuous mode
[  312.484372][T17351] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  312.489857][T17351] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  312.493900][T17351] ip6erspan0: left promiscuous mode
[  312.494234][T17351] bond1: left promiscuous mode
[  312.494361][T17351] 8021q: adding VLAN 0 to HW filter on device bond1
[  312.494624][T17351] erspan1: left promiscuous mode
[  312.495148][T17351] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  312.495267][T17351] macvlan2: left promiscuous mode
[  312.496873][T17351] gre1: left promiscuous mode
[  312.497176][T17351] vxcan2: left promiscuous mode
[  312.497444][T17351] vxcan3: left promiscuous mode
[  312.497770][T17351] veth2: left promiscuous mode
[  312.498506][T17351] veth3: left promiscuous mode
[  312.499225][T17351] bond2: left promiscuous mode
[  312.499905][T17351] 8021q: adding VLAN 0 to HW filter on device bond2
[  312.500370][T17351] bond3: left promiscuous mode
[  312.500517][T17351] 8021q: adding VLAN 0 to HW filter on device bond3
[  312.500737][T17351] : entered promiscuous mode
[  312.500743][T17351] : entered allmulticast mode
[  312.504184][T17351] macsec1: left promiscuous mode
[  312.512332][T17351] geneve2: left promiscuous mode
[  312.512343][T17351] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  312.912775][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  312.912884][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  312.912945][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  312.913002][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  313.174577][T17374] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  313.316079][T17380] netlink: 'syz.1.5108': attribute type 8 has an invalid length.
[  313.328925][T17379] xt_addrtype: ipv6 does not support BROADCAST matching
[  313.648309][T17396] __nla_validate_parse: 9 callbacks suppressed
[  313.648323][T17396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5115'.
[  313.648348][T17396] netlink: 'syz.1.5115': attribute type 10 has an invalid length.
[  313.648356][T17396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5115'.
[  313.666971][T17396] geneve2: entered promiscuous mode
[  313.666990][T17396] geneve2: entered allmulticast mode
[  313.684828][T13271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  313.685187][T13271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  313.685347][T13271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  314.058388][T17408] bond2: option mode: unable to set because the bond device has slaves
[  314.063999][T17408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5120'.
[  314.064154][T17408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5120'.
[  314.064253][T17408] bond0: left promiscuous mode
[  314.072509][T17408] 8021q: adding VLAN 0 to HW filter on device bond0
[  314.080117][T17408] bond2: (slave bond0): Enslaving as an active interface with a down link
[  314.401838][T17426] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 17 bytes
[  314.452931][T17427] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  315.639822][T17452] netlink: 'syz.2.5140': attribute type 1 has an invalid length.
[  315.639884][T17452] netlink: 'syz.2.5140': attribute type 2 has an invalid length.
[  315.943573][T17461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5145'.
[  316.290004][T17473] syz_tun: entered allmulticast mode
[  316.294075][T17472] syz_tun: left allmulticast mode
[  316.507569][T17482] netlink: 'syz.1.5153': attribute type 3 has an invalid length.
[  317.004594][T17504] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5162'.
[  317.258883][T17513] syzkaller0: entered promiscuous mode
[  317.258897][T17513] syzkaller0: entered allmulticast mode
[  317.320684][T17515] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  317.575496][T17519] netlink: 165 bytes leftover after parsing attributes in process `syz.0.5170'.
[  317.740059][T17525] IPv6: NLM_F_REPLACE set, but no existing node found!
[  318.302920][T17542] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  318.404791][T17547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5183'.
[  318.442897][T17549] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  318.442927][T17549] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  318.503404][T17550] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  318.503504][T17550] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  318.746756][T17563] bridge_slave_0: entered promiscuous mode
[  318.928294][T17573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5193'.
[  319.042458][T17576] ip_tables: iptables: counters copy to user failed while replacing table
[  319.139324][T17577] netlink: 'syz.0.5194': attribute type 1 has an invalid length.
[  319.139518][T17577] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5194'.
[  319.194174][T17577] netlink: 'syz.0.5194': attribute type 1 has an invalid length.
[  319.194195][T17577] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5194'.
[  319.517142][T17588] xt_TCPMSS: Only works on TCP SYN packets
[  319.695986][T17594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5200'.
[  319.829360][T17596] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  319.917403][T17605] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  319.917420][T17605] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  319.928887][T17603] Bluetooth: hci0: unsupported parameter 5135
[  319.928900][T17603] Bluetooth: hci0: unsupported parameter 8192
[  319.928906][T17603] Bluetooth: hci0: unsupported parameter 5135
[  319.928942][T17603] Bluetooth: hci0: unsupported parameter 8192
[  320.048158][T17610] syzkaller0: entered promiscuous mode
[  320.048179][T17610] syzkaller0: entered allmulticast mode
[  320.095083][T17614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5206'.
[  320.187558][T17618] netlink: 'syz.2.5209': attribute type 1 has an invalid length.
[  320.187581][T17618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5209'.
[  320.667050][T17633] syzkaller1: entered promiscuous mode
[  320.667234][T17633] syzkaller1: entered allmulticast mode
[  321.105969][T17650] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  321.179079][T17652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5223'.
[  321.386054][T17657] Bluetooth: hci0: unsupported parameter 5134
[  321.386070][T17657] Bluetooth: hci0: unsupported parameter 8192
[  321.386076][T17657] Bluetooth: hci0: unsupported parameter 5134
[  321.386080][T17657] Bluetooth: hci0: unsupported parameter 8192
[  321.814999][T17685] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5236'.
[  322.051344][T17693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5239'.
[  322.215651][T17701] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5244'.
[  324.000028][T17779] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5280'.
[  324.106278][T17791] syzkaller1: entered promiscuous mode
[  324.106293][T17791] syzkaller1: entered allmulticast mode
[  324.144022][T17793] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5286'.
[  324.144037][T17793] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5286'.
[  324.144049][T17793] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5286'.
[  325.512196][T17851] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  325.709640][T17857] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5313'.
[  325.709666][T17857] netlink: 239 bytes leftover after parsing attributes in process `syz.0.5313'.
[  326.463711][T17887] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5325'.
[  326.559130][T17892] syzkaller0: entered promiscuous mode
[  326.559152][T17892] syzkaller0: entered allmulticast mode
[  327.017830][T17906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5332'.
[  327.083887][T17909] netlink: 'syz.0.5334': attribute type 2 has an invalid length.
[  327.519296][T17918] macvtap3: entered allmulticast mode
[  327.519442][T17918] veth0_to_bridge: entered allmulticast mode
[  327.531570][T17918] veth0_to_bridge: left allmulticast mode
[  328.996108][T17947] netlink: 'syz.0.5351': attribute type 1 has an invalid length.
[  328.996129][T17947] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5351'.
[  329.367111][T17953] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5353'.
[  329.581187][T17960] SET target dimension over the limit!
[  329.629134][T17967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5359'.
[  330.269003][T17994] syzkaller0: entered promiscuous mode
[  330.269026][T17994] syzkaller0: entered allmulticast mode
[  330.356722][T17997] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  330.538242][T18009] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  330.625232][T18011] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5380'.
[  331.525057][T18061] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5403'.
[  331.792126][T18075] ip_tables: iptables: counters copy to user failed while replacing table
[  332.078435][T18088] netlink: 'syz.1.5415': attribute type 1 has an invalid length.
[  332.346901][T18090] veth7: entered allmulticast mode
[  332.367454][T18090] bond10: (slave veth7): Enslaving as an active interface with a down link
[  332.367946][T18098] veth0_to_bond: left promiscuous mode
[  332.383775][T18098] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  332.410343][T18100] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  332.410368][T18100] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  332.960604][T18121] netlink: 'syz.0.5428': attribute type 1 has an invalid length.
[  333.324011][T18131] netlink: 'syz.0.5434': attribute type 1 has an invalid length.
[  333.345790][T18131] 8021q: adding VLAN 0 to HW filter on device bond7
[  333.365036][T18131] bond7: (slave veth9): Enslaving as an active interface with a down link
[  333.368897][T18131] bond7: (slave macvlan0): Enslaving as an active interface with a down link
[  333.921250][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  333.955387][T18158] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5446'.
[  334.465847][T18185] openvswitch: netlink: Unknown key attributes 1
[  334.526808][T18187] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5461'.
[  334.554362][T18187] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5461'.
[  334.919039][T18203] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  334.940811][T18203] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5465'.
[  335.189759][T18217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5471'.
[  335.613129][T18242] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5484'.
[  335.646278][T18244] netlink: 'syz.2.5481': attribute type 1 has an invalid length.
[  335.664485][T18244] 8021q: adding VLAN 0 to HW filter on device bond10
[  335.668780][T18246] dvmrp0: entered allmulticast mode
[  335.676563][T18246] dvmrp0: left allmulticast mode
[  335.693073][T18244] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  335.725308][T18244] bridge5: entered promiscuous mode
[  335.741461][T18244] bond10: (slave bridge5): Enslaving as an active interface with an up link
[  336.183546][T18266] x_tables: unsorted underflow at hook 3
[  336.385044][T18275] block nbd0: Receive control failed (result -32)
[  337.349980][T18323] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[  337.452065][T18331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5525'.
[  337.471841][T18331] 8021q: adding VLAN 0 to HW filter on device bond11
[  337.479721][T18331] macvtap2: entered allmulticast mode
[  337.484653][T18331] bond11: (slave sit6): refused to change device type
[  337.629158][T18338] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5528'.
[  337.668833][T18340] netlink: 'syz.1.5529': attribute type 8 has an invalid length.
[  337.668854][T18340] netlink: 'syz.1.5529': attribute type 9 has an invalid length.
[  337.668861][T18340] netlink: 'syz.1.5529': attribute type 10 has an invalid length.
[  337.668870][T18340] netlink: 'syz.1.5529': attribute type 11 has an invalid length.
[  337.668878][T18340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5529'.
[  338.993887][T18385] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5551'.
[  339.121727][T18396] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5553'.
[  339.476507][T18412] netlink: 'syz.1.5563': attribute type 9 has an invalid length.
[  339.485632][T18414] ip_tables: iptables: counters copy to user failed while replacing table
[  339.588422][T18419] __nla_validate_parse: 3 callbacks suppressed
[  339.588550][T18419] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5566'.
[  339.765746][T18433] syzkaller0: entered promiscuous mode
[  339.765761][T18433] syzkaller0: entered allmulticast mode
[  339.809380][T18440] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5576'.
[  339.809402][T18440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5576'.
[  339.810447][T18440] netlink: 'syz.1.5576': attribute type 11 has an invalid length.
[  339.826210][T18440] block nbd0: NBD_DISCONNECT
[  339.826226][T18440] block nbd0: Send disconnect failed -32
[  339.826233][T18440] block nbd0: shutting down sockets
[  340.141957][T18458] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5580'.
[  340.144545][T18458] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5580'.
[  340.709258][T18474] af_packet: tpacket_rcv: packet too big, clamped from 2916 to 4294967286. macoff=82
[  342.225193][T18497] netlink: 4912 bytes leftover after parsing attributes in process `syz.0.5598'.
[  342.816964][T18440] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  343.270660][T18512] netlink: 'syz.0.5604': attribute type 2 has an invalid length.
[  343.270680][T18512] netlink: 'syz.0.5604': attribute type 8 has an invalid length.
[  343.270689][T18512] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5604'.
[  343.724058][T18539] syzkaller0: entered promiscuous mode
[  343.724071][T18539] syzkaller0: entered allmulticast mode
[  343.786346][T18543] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5620'.
[  343.833195][T18545] openvswitch: netlink: Invalid VLAN frame
[  344.463070][T18584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5639'.
[  344.628920][T18595] Bluetooth: hci0: invalid length 0, exp 2 for type 20
[  344.635020][T13276] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  344.668354][T18587] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  344.760446][T18599] lo: left promiscuous mode
[  344.763942][T18599] tunl0: left promiscuous mode
[  344.764259][T18599] gre0: left promiscuous mode
[  344.764538][T18599] gretap0: left promiscuous mode
[  344.764807][T18599] erspan0: left promiscuous mode
[  344.765059][T18599] ip_vti0: left promiscuous mode
[  344.765470][T18599] ip6_vti0: left promiscuous mode
[  344.765753][T18599] sit0: left promiscuous mode
[  344.766041][T18599] ip6tnl0: left promiscuous mode
[  344.766297][T18599] ip6gre0: left promiscuous mode
[  344.766809][T18599] vcan0: left promiscuous mode
[  344.767219][T18599] : left promiscuous mode
[  344.767988][T18599] team0: left promiscuous mode
[  344.768894][T18599] dummy0: left promiscuous mode
[  344.769161][T18599] nlmon0: left promiscuous mode
[  344.769453][T18599] batadv0: left promiscuous mode
[  344.769924][T18599] vxcan0: left promiscuous mode
[  344.770215][T18599] vxcan1: left promiscuous mode
[  344.770532][T18599] veth0: left promiscuous mode
[  344.814440][T18599] veth1: left promiscuous mode
[  344.814881][T18599] wg0: left promiscuous mode
[  344.815115][T18599] wg2: left promiscuous mode
[  344.815285][T18599] veth0_to_bridge: left promiscuous mode
[  344.815706][T18599] veth1_to_bridge: left promiscuous mode
[  344.817678][T18599] bridge_slave_1: left promiscuous mode
[  344.818039][T18599] veth0_to_bond: left promiscuous mode
[  344.818217][T18599] bond_slave_0: left promiscuous mode
[  344.818587][T18599] veth1_to_bond: left promiscuous mode
[  344.818768][T18599] b{.: left promiscuous mode
[  344.818970][T18599] veth0_to_team: left promiscuous mode
[  344.819135][T18599] team_slave_0: left promiscuous mode
[  344.819374][T18599] veth1_to_team: left promiscuous mode
[  344.819642][T18599] team_slave_1: left promiscuous mode
[  344.819879][T18599] veth0_to_batadv: left promiscuous mode
[  344.820215][T18599] batadv_slave_0: left promiscuous mode
[  344.820416][T18599] veth1_to_batadv: left promiscuous mode
[  344.820614][T18599] batadv_slave_1: left promiscuous mode
[  344.820811][T18599] xfrm0: left promiscuous mode
[  344.863519][T18599] veth0_to_hsr: left promiscuous mode
[  344.863899][T18599] veth1_to_hsr: left promiscuous mode
[  344.864416][T18599] hsr0: left promiscuous mode
[  344.865339][T18599] veth1_virt_wifi: left promiscuous mode
[  344.865550][T18599] veth0_virt_wifi: left promiscuous mode
[  344.865910][T18599] virt_wifi0: left promiscuous mode
[  344.868319][T18599] vlan0: left promiscuous mode
[  344.868922][T18599] vlan1: left promiscuous mode
[  344.870153][T18599] macvlan1: left promiscuous mode
[  344.870727][T18599] ipvlan0: left promiscuous mode
[  344.896764][T18599] ipvlan1: left promiscuous mode
[  344.898375][T18599] veth1_macvtap: left promiscuous mode
[  344.898879][T18599] veth0_macvtap: left promiscuous mode
[  344.899321][T18599] veth0_macvtap: entered promiscuous mode
[  344.899409][T18599] macvtap0: left promiscuous mode
[  344.899844][T18599] tipc: Resetting bearer <eth:macvtap0>
[  344.899945][T18599] veth1_macvtap: entered promiscuous mode
[  344.900037][T18599] macsec0: left promiscuous mode
[  344.900717][T18599] geneve0: left promiscuous mode
[  344.924327][T18599] geneve1: left promiscuous mode
[  344.928537][T18599] netdevsim netdevsim0 netdevsim1: left promiscuous mode
[  344.928770][T18599] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  344.929258][T18599] netdevsim netdevsim0 netdevsim2: left promiscuous mode
[  344.929485][T18599] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  344.930052][T18599] netdevsim netdevsim0 netdevsim3: left promiscuous mode
[  344.930289][T18599] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  344.949015][T18599] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  344.956274][T18599] syztnl0: left promiscuous mode
[  344.957009][T18599] ip6tnl1: left promiscuous mode
[  344.957583][T18599] ip6tnl2: left promiscuous mode
[  344.959747][T18599] ip6tnl3: left promiscuous mode
[  344.960224][T18599] ip6tnl4: left promiscuous mode
[  344.974152][T18599] netdevsim0.0: left promiscuous mode
[  344.974171][T18599] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  344.974829][T18599] vti0: left promiscuous mode
[  344.975384][T18599] sit1: left promiscuous mode
[  344.976209][T18599] 8021q: adding VLAN 0 to HW filter on device bond1
[  344.976516][T18599] vlan2: left promiscuous mode
[  344.976523][T18599] bond1: left promiscuous mode
[  344.976985][T18599] ip6gre1: left promiscuous mode
[  344.977855][T18599] vxlan0: left promiscuous mode
[  344.978421][T18599] vti1: left promiscuous mode
[  344.979133][T18599] nl80211: left promiscuous mode
[  344.979677][T18599] gtp0: left promiscuous mode
[  344.980192][T18599] geneve2: left promiscuous mode
[  345.009206][T18599] ip6erspan0: left promiscuous mode
[  345.014465][T18599] gretap0: entered promiscuous mode
[  345.014478][T18599] gretap0: entered allmulticast mode
[  345.014667][T18599] macvlan2: left promiscuous mode
[  345.016765][T18599] vxlan1: left promiscuous mode
[  345.016775][T18599] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  345.040712][   T12] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  345.040801][   T12] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  345.061131][ T8922] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  345.072805][T13273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  345.072938][T13273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  345.073038][T13273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  345.073135][T13273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  345.104803][T13276] bond7: (slave macvlan0): link status definitely up, 10000 Mbps full duplex
[  345.105266][T13276] bond7: (slave macvlan0): making interface the new active one
[  345.571287][ T1289] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  345.662011][T13276] bond7: active interface up!
[  346.076418][T18621] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5652'.
[  346.089976][ T8922] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  346.723664][T18651] netlink: 'syz.1.5667': attribute type 21 has an invalid length.
[  346.724782][T18651] netlink: 'syz.1.5667': attribute type 3 has an invalid length.
[  346.724795][T18651] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5667'.
[  347.075253][T18663] Bluetooth: hci0: Opcode 0x080f failed: -22
[  347.383420][T18685] syzkaller0: entered promiscuous mode
[  347.383430][T18685] syzkaller0: entered allmulticast mode
[  347.867095][T18720] netdevsim netdevsim1 : renamed from netdevsim0
[  348.566614][T18741] netlink: 'syz.2.5707': attribute type 25 has an invalid length.
[  348.800970][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  349.118103][T18765] tc_dump_action: action bad kind
[  349.212225][T18772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5722'.
[  350.198210][T18805] Cannot find set identified by id 0 to match
[  350.661815][T18823] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  350.992130][T18831] netlink: 'syz.2.5748': attribute type 39 has an invalid length.
[  351.245641][T18841] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  351.246148][T18841] gre0: entered allmulticast mode
[  351.324650][T18845] netlink: 'syz.1.5755': attribute type 3 has an invalid length.
[  351.379995][T18851] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5759'.
[  351.392811][T18851] syzkaller1: entered promiscuous mode
[  351.392826][T18851] syzkaller1: entered allmulticast mode
[  351.596992][T18859] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5762'.
[  351.668414][T18859] syzkaller0: entered promiscuous mode
[  351.668433][T18859] syzkaller0: entered allmulticast mode
[  351.957748][T18867] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  351.957776][T18867] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  351.957788][T18867] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  352.215702][T18876] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5767'.
[  352.216229][T18876] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5767'.
[  352.274524][T18873] 8021q: adding VLAN 0 to HW filter on device batadv0
[  352.279924][   T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.280264][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.295157][   T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.295453][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.324596][T18873] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  352.324610][T18873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  352.340270][T18873] 8021q: adding VLAN 0 to HW filter on device 
[  352.341615][T18873] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  352.342179][T18873] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  352.342714][T18873] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  352.361733][T18873] 8021q: adding VLAN 0 to HW filter on device bond1
[  352.364731][T18873] 8021q: adding VLAN 0 to HW filter on device bond2
[  352.366197][T18873] 8021q: adding VLAN 0 to HW filter on device bond3
[  352.369012][T18873] 8021q: adding VLAN 0 to HW filter on device bond0
[  352.424873][T18873] 8021q: adding VLAN 0 to HW filter on device bond4
[  352.427291][T18873] 8021q: adding VLAN 0 to HW filter on device bond5
[  352.433055][T18873] 8021q: adding VLAN 0 to HW filter on device bond6
[  352.443478][T18873] 8021q: adding VLAN 0 to HW filter on device bond7
[  352.455232][T18873] 8021q: adding VLAN 0 to HW filter on device bond8
[  352.456922][T18873] 8021q: adding VLAN 0 to HW filter on device bond9
[  352.463833][T18873] 8021q: adding VLAN 0 to HW filter on device bond10
[  352.467220][T18873] bond11: entered allmulticast mode
[  352.468246][T18873] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  352.483171][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  352.496866][   T12] bond7: (slave veth5): link status definitely up, 10000 Mbps full duplex
[  352.510231][   T12] bond7: (slave veth5): making interface the new active one
[  352.543838][   T12] bond7: active interface up!
[  352.594355][ T6907] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  352.594555][ T6907] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  352.595102][ T6907] ip6_tunnel: 8 xmit: Local address not yet configured!
[  352.595239][ T6907] ip6_tunnel: 8 xmit: Local address not yet configured!
[  352.598039][ T6907] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  352.598123][ T6907] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  352.612100][ T1289] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  352.622544][ T1289] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  352.626331][ T1289] ip6_tunnel: 8 xmit: Local address not yet configured!
[  352.697445][T13271] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  352.716736][T13271] bond10: (slave veth7): link status definitely up, 10000 Mbps full duplex
[  352.716890][T13271] bond10: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex
[  352.726630][T13271] bond10: (slave veth7): making interface the new active one
[  352.730026][T13271] bond10: active interface up!
[  352.734400][ T5523] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  352.735689][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  353.149052][T18900] netlink: zone id is out of range
[  353.149257][T18900] netlink: zone id is out of range
[  353.150037][T18900] netlink: zone id is out of range
[  353.150300][T18900] netlink: zone id is out of range
[  353.310569][T18908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5782'.
[  353.410743][T18913] syzkaller1: entered promiscuous mode
[  353.410755][T18913] syzkaller1: entered allmulticast mode
[  354.728423][T18956] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5804'.
[  354.887937][T18981] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5814'.
[  355.576576][T19021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5828'.
[  355.576595][T19021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5828'.
[  355.911537][T19031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5833'.
[  357.679971][T19017] bond11: left allmulticast mode
[  357.726930][   T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  357.726989][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  357.727021][   T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  357.727030][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  357.727043][   T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  357.727052][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  358.306732][T19093] x_tables: unsorted entry at hook 3
[  358.406930][T19099] Bluetooth: hci0: unsupported parameter 5135
[  358.406954][T19099] Bluetooth: hci0: unsupported parameter 8192
[  358.406963][T19099] Bluetooth: hci0: unsupported parameter 5135
[  358.406971][T19099] Bluetooth: hci0: unsupported parameter 8192
[  359.373665][T19133] netlink: 'syz.2.5883': attribute type 5 has an invalid length.
[  359.401889][T19136] netlink: 'syz.1.5882': attribute type 1 has an invalid length.
[  359.441769][T19136] bond12: entered promiscuous mode
[  359.442175][T19136] 8021q: adding VLAN 0 to HW filter on device bond12
[  359.468229][T19136] bond12: (slave bridge9): making interface the new active one
[  359.468247][T19136] bridge9: entered promiscuous mode
[  359.471395][T19136] bond12: (slave bridge9): Enslaving as an active interface with an up link
[  359.479413][T19144] __nla_validate_parse: 1 callbacks suppressed
[  359.479425][T19144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5887'.
[  359.500305][T19142] net_ratelimit: 65 callbacks suppressed
[  359.500316][T19142] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  359.523621][ T8922] ip6_tnl_xmit_ctl: 9 callbacks suppressed
[  359.523633][ T8922] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  359.539701][T19142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5885'.
[  359.540623][T19136] dummy0: left promiscuous mode
[  359.555416][T19136] batman_adv: batadv0: Adding interface: dummy0
[  359.555429][T19136] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  359.555597][T19136] batman_adv: batadv0: Interface activated: dummy0
[  359.589618][T19136] batadv0: mtu less than device minimum
[  359.590654][T19136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  359.591890][T19136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  359.592829][T19136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  359.593784][T19136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  359.594743][T19136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  359.595650][T19136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  359.596518][T19136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  359.597441][T19136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  359.645550][T19151] netlink: 'syz.1.5882': attribute type 10 has an invalid length.
[  359.645567][T19151] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5882'.
[  359.646142][T19151] batadv0: entered allmulticast mode
[  359.649794][T19151] 8021q: adding VLAN 0 to HW filter on device batadv0
[  359.672474][T19153] sch_tbf: burst 7 is lower than device bridge0 mtu (1514) !
[  359.705058][T19153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5891'.
[  359.705384][T19153] sch_tbf: peakrate 896 is lower than or equals to rate 3850 !
[  360.120090][T19185] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5904'.
[  360.239728][T19197] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5907'.
[  360.327354][ T8922] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  360.534835][T19231] netlink: 'syz.0.5920': attribute type 7 has an invalid length.
[  360.591597][T19237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5922'.
[  360.611284][T19237] 8021q: adding VLAN 0 to HW filter on device bond8
[  360.618011][T19237] batman_adv: batadv0: Interface deactivated: dummy0
[  360.618024][T19237] batman_adv: batadv0: Removing interface: dummy0
[  360.717097][T19252] netlink: 'syz.1.5929': attribute type 2 has an invalid length.
[  360.725585][T19252] : entered promiscuous mode
[  360.807316][ T7565] block nbd0: Receive control failed (result -32)
[  360.807368][ T7565] block nbd0: Receive control failed (result -32)
[  364.094736][T19292] netlink: 'syz.0.5946': attribute type 1 has an invalid length.
[  364.167353][T19292] veth11: entered allmulticast mode
[  364.178939][T19292] bond9: (slave veth11): Enslaving as an active interface with a down link
[  364.200147][T19292] bond9: (slave veth0_to_bond): making interface the new active one
[  364.208091][T19292] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  364.234152][T19292] macvlan5: entered promiscuous mode
[  364.234163][T19292] macvlan5: entered allmulticast mode
[  364.234424][T19292] bond9: entered promiscuous mode
[  364.234432][T19292] veth0_to_bond: entered promiscuous mode
[  364.234764][T19292] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  364.235053][T19292] bond9: (slave macvlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  364.235112][T19292] bond9: left promiscuous mode
[  364.235120][T19292] veth0_to_bond: left promiscuous mode
[  364.871059][T13271] net_ratelimit: 24 callbacks suppressed
[  364.871075][T13271] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  365.097412][T19379] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  365.116616][ T5702] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  365.381085][T13271] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  365.891080][ T5643] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  365.913947][T19438] netlink: 'syz.1.6013': attribute type 1 has an invalid length.
[  366.005793][T19444] netlink: 'syz.1.6015': attribute type 1 has an invalid length.
[  366.015036][ T5702] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  366.402935][T13271] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  366.410454][T19469] Cannot find add_set index 0 as target
[  366.485418][T19475] netlink: 'syz.1.6030': attribute type 1 has an invalid length.
[  366.515239][T19479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6032'.
[  366.540794][T19479] netlink: 'syz.1.6032': attribute type 1 has an invalid length.
[  366.812653][   T56] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  366.911088][   T12] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  367.431844][ T5643] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  367.466085][T19494] Bluetooth: hci0: invalid length 0, exp 2 for type 6
[  367.826938][T19513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6046'.
[  367.827029][T19513] openvswitch: netlink: Missing valid actions attribute.
[  367.941779][ T5643] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  368.154490][T19535] xt_CT: You must specify a L4 protocol and not use inversions on it
[  368.373481][T19550] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6061'.
[  368.451148][ T5643] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  368.531963][T19566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6064'.
[  368.570962][T19569] netlink: 'syz.1.6065': attribute type 11 has an invalid length.
[  368.977209][T19598] Cannot find add_set index 0 as target
[  369.016924][T19603] netlink: 'syz.1.6082': attribute type 3 has an invalid length.
[  369.016936][T19603] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6082'.
[  369.144581][T19614] netlink: 'syz.2.6087': attribute type 1 has an invalid length.
[  369.144593][T19614] netlink: 64543 bytes leftover after parsing attributes in process `syz.2.6087'.
[  369.347203][T19635] syzkaller1: entered promiscuous mode
[  369.347216][T19635] syzkaller1: entered allmulticast mode
[  369.390288][T19641] xt_HMARK: spi-set and port-set can't be combined
[  369.598984][T19664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6110'.
[  369.812032][T19682] sit0: entered promiscuous mode
[  369.814901][T19682] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6121'.
[  369.991167][T13273] net_ratelimit: 5 callbacks suppressed
[  369.991181][T13273] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  370.084616][T19713] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6136'.
[  370.174159][T19723] openvswitch: netlink: nsh attribute has 17 unknown bytes.
[  370.358569][T19741] netlink: 'syz.2.6149': attribute type 33 has an invalid length.
[  370.358583][T19741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6149'.
[  370.358597][T19741] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  370.501270][ T5643] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  371.011278][T13271] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  371.041177][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  371.325656][T19773] netlink: 'syz.0.6162': attribute type 4 has an invalid length.
[  371.470722][T19783] tipc: Enabled bearer <eth:ipvlan1>, priority 10
[  371.525481][T13271] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  371.738534][T19806] Bluetooth: hci0: unsupported parameter 5134
[  371.738546][T19806] Bluetooth: hci0: unsupported parameter 8192
[  371.738552][T19806] Bluetooth: hci0: unsupported parameter 5134
[  371.738557][T19806] Bluetooth: hci0: unsupported parameter 8192
[  372.032753][T13271] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  372.366199][T19837] __nla_validate_parse: 3 callbacks suppressed
[  372.366212][T19837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6192'.
[  372.366229][T19837] netlink: 'syz.2.6192': attribute type 7 has an invalid length.
[  372.366234][T19837] netlink: 'syz.2.6192': attribute type 8 has an invalid length.
[  372.366238][T19837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6192'.
[  372.471417][ T8936] tipc: Node number set to 1475135032
[  372.476337][T19841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6191'.
[  372.476795][T19841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6191'.
[  372.477114][T19841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6191'.
[  372.477334][T19841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6191'.
[  372.477470][T19841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6191'.
[  372.477602][T19841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6191'.
[  372.477854][T19841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6191'.
[  372.477972][T19841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6191'.
[  372.541483][T13276] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  373.061184][T13271] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  373.571163][T13276] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  373.762858][T19900] IPVS: Unknown mcast interface: veth0_to_batadv
[  373.842756][   T56] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  374.085272][T13276] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  374.494710][T19977] sock: sock_timestamping_bind_phc: sock not bind to device
[  374.799107][T19994] bond10: (slave veth0_to_bond): Releasing backup interface
[  374.799127][T19994] bond10: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  374.826780][T19994] bond0: (slave netdevsim1): Releasing backup interface
[  374.827949][T19994] netdevsim netdevsim2 netdevsim1: left promiscuous mode
[  374.828166][T19994] netdevsim netdevsim2 netdevsim1: left allmulticast mode
[  374.843516][T19994] bond7: (slave veth9): Releasing active interface
[  374.846643][T19994] team0: Port device bond8 removed
[  374.848497][T19994] bond10: (slave bridge5): Releasing backup interface
[  375.101711][T13276] net_ratelimit: 1 callbacks suppressed
[  375.101728][T13276] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  375.621591][T13276] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  376.133125][ T5643] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  376.641312][T13273] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  377.151220][T13273] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  377.661288][T13276] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  378.171214][T13271] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  378.180044][T20010] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  378.284201][T20047] __nla_validate_parse: 12 callbacks suppressed
[  378.284217][T20047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6284'.
[  378.315649][T20049] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6285'.
[  378.315669][T20049] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6285'.
[  378.408409][T20055] pimreg: entered allmulticast mode
[  378.410035][T20055] pimreg: left allmulticast mode
[  378.502698][T20063] netlink: 'syz.0.6292': attribute type 3 has an invalid length.
[  378.502710][T20063] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6292'.
[  378.571460][T20067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6293'.
[  378.580063][T20067] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6293'.
[  378.635935][T20067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6293'.
[  378.683171][T13276] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  379.191138][ T5643] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  379.703617][T13273] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  380.211114][T13276] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  380.219671][T20111] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6309'.
[  380.383154][T20107] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  380.437124][T20107] syzkaller0: entered promiscuous mode
[  380.437145][T20107] syzkaller0: entered allmulticast mode
[  380.437538][T20107] tipc: Resetting bearer <eth:syzkaller0>
[  380.478054][T20106] tipc: Resetting bearer <eth:syzkaller0>
[  380.529607][T20135] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6315'.
[  380.643268][T20141] netlink: 'syz.0.6316': attribute type 2 has an invalid length.
[  380.643281][T20141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6316'.
[  380.731127][ T5643] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  381.243083][T13273] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  381.728002][T20106] tipc: Disabling bearer <eth:syzkaller0>
[  381.730684][T20138] tc_dump_action: action bad kind
[  381.752768][ T5643] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  381.873098][T20156] netlink: 'syz.0.6321': attribute type 3 has an invalid length.
[  381.873111][T20156] netlink: 'syz.0.6321': attribute type 2 has an invalid length.
[  381.906618][T20159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  381.908100][T20159] netlink: 'syz.2.6319': attribute type 6 has an invalid length.
[  382.263842][   T12] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  382.295081][T20186] bond13: option arp_interval: invalid value (18446744073709551615)
[  382.295100][T20186] bond13: option arp_interval: allowed values 0 - 2147483647
[  382.296254][T20186] bond13 (unregistering): Released all slaves
[  382.408116][T20189] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  382.771318][T13273] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  383.004956][T20177] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  383.112984][T20208] netlink: 'syz.0.6342': attribute type 1 has an invalid length.
[  383.293766][ T5643] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  383.397642][T20230] syzkaller0: entered promiscuous mode
[  383.397661][T20230] syzkaller0: entered allmulticast mode
[  383.620786][T20242] tipc: New replicast peer: 127.0.0.1
[  383.623383][T20242] tipc: Enabled bearer <udp:syz2>, priority 10
[  383.652622][T20244] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  383.801084][   T12] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  383.960369][T20272] macvlan0: entered promiscuous mode
[  383.960506][T20272] netlink: 'syz.2.6371': attribute type 2 has an invalid length.
[  384.008908][T20277] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  384.217835][T20293] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  385.139112][T20301] __nla_validate_parse: 4 callbacks suppressed
[  385.139125][T20301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6386'.
[  385.287187][T20315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6393'.
[  385.287202][T20315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6393'.
[  385.331001][T13273] net_ratelimit: 2 callbacks suppressed
[  385.331014][T13273] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  385.467853][T20338] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified.
[  385.467871][T20338] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  385.843065][ T5643] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  386.351474][T13271] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  386.564344][T20408] syzkaller0: entered promiscuous mode
[  386.564362][T20408] syzkaller0: entered allmulticast mode
[  386.861048][T13273] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  387.371118][   T12] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  387.881145][ T5643] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  388.391188][T13273] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  388.901135][T13273] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  389.214619][T20387] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  389.595193][T20443] netlink: 'syz.2.6449': attribute type 8 has an invalid length.
[  389.631118][T20446] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  390.289381][T20518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6483'.
[  390.337587][T20523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6484'.
[  390.403088][T20525] syzkaller1: entered promiscuous mode
[  390.403110][T20525] syzkaller1: entered allmulticast mode
[  390.430060][T20523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6484'.
[  390.440014][T13273] net_ratelimit: 2 callbacks suppressed
[  390.440028][T13273] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  390.576158][T20533] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  390.941179][ T5643] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  391.172098][T20543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6493'.
[  391.451117][ T5643] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  391.585811][T20579] xt_l2tp: wrong L2TP version: 0
[  391.645236][T20587] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  391.715017][T20593] netlink: 'syz.2.6517': attribute type 1 has an invalid length.
[  391.715034][T20593] netlink: 'syz.2.6517': attribute type 4 has an invalid length.
[  391.715041][T20593] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6517'.
[  391.715558][T20593] netlink: 'syz.2.6517': attribute type 1 has an invalid length.
[  391.715570][T20593] netlink: 'syz.2.6517': attribute type 4 has an invalid length.
[  391.715579][T20593] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6517'.
[  391.961853][T13271] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  391.976768][T20620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6528'.
[  392.095210][T20631] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes
[  392.325044][   T34] audit: type=1804 audit(1792036598.413:6): pid=20650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6541" name="/newroot/2120/cgroup.controllers" dev="tmpfs" ino=10712 res=1 errno=0
[  392.325792][   T34] audit: type=1800 audit(1792036598.413:7): pid=20650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6541" name="cgroup.controllers" dev="tmpfs" ino=10712 res=0 errno=0
[  392.380406][T20653] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6542'.
[  392.422420][T20657] x_tables: duplicate entry at hook 1
[  392.471616][T13271] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  392.473408][T20657] netlink: 'syz.0.6544': attribute type 1 has an invalid length.
[  392.991592][   T12] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  393.196960][T20715] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6573'.
[  393.501402][   T12] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  393.582631][T20752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6587'.
[  393.673058][T20761] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  393.688453][T20764] netlink: 'syz.0.6593': attribute type 1 has an invalid length.
[  393.729590][T20764] 8021q: adding VLAN 0 to HW filter on device bond10
[  393.762548][T20764] bond10: (slave gretap1): making interface the new active one
[  393.775971][T20764] bond10: (slave gretap1): Enslaving as an active interface with an up link
[  394.013848][T13271] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  394.081020][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  394.862223][T20859] netlink: 'syz.0.6640': attribute type 6 has an invalid length.
[  394.862235][T20859] netlink: 'syz.0.6640': attribute type 5 has an invalid length.
[  395.259718][T20897] netlink: 'syz.1.6657': attribute type 1 has an invalid length.
[  395.547435][ T5643] net_ratelimit: 4 callbacks suppressed
[  395.547457][ T5643] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  396.061055][ T5643] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  396.574522][ T5643] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  397.081129][ T5643] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  397.099611][T20941] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  397.303012][T20962] __nla_validate_parse: 5 callbacks suppressed
[  397.303024][T20962] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6684'.
[  397.303033][T20962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6684'.
[  397.303040][T20962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6684'.
[  397.591520][ T5643] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  397.641941][T20995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6700'.
[  397.675833][T20998] xt_IDLETIMER: label is empty or not nul-terminated
[  397.859079][T21011] pim6reg1: entered promiscuous mode
[  397.859103][T21011] pim6reg1: entered allmulticast mode
[  398.101218][ T5643] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  398.543665][T21038] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6720'.
[  398.543688][T21038] netlink: 50 bytes leftover after parsing attributes in process `syz.2.6720'.
[  398.611065][T13276] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  398.862564][T21055] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6728'.
[  398.964977][T21063] SET target dimension over the limit!
[  399.121812][T13276] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  399.122009][T21065] netdevsim netdevsim1 netdevsim1 (unregistering): left promiscuous mode
[  399.123364][T21065] team0: Port device netdevsim1 removed
[  399.328293][T21071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6735'.
[  399.631189][ T5643] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  399.940550][T21090] netlink: 'syz.0.6744': attribute type 1 has an invalid length.
[  399.982773][T21090] 8021q: adding VLAN 0 to HW filter on device bond12
[  399.988335][T21090] bond11: (slave bond12): making interface the new active one
[  399.988909][T21090] bond11: (slave bond12): Enslaving as an active interface with an up link
[  400.012463][T21090] bond11: (slave gretap2): Enslaving as a backup interface with an up link
[  400.015490][T21090] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  400.015771][T21090] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  400.635195][T21095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6745'.
[  400.651897][T13271] net_ratelimit: 1 callbacks suppressed
[  400.651914][T13271] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  401.116086][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  401.121200][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  401.163231][T13271] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  401.658680][T21155] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6772'.
[  401.658706][T21155] netlink: 'syz.0.6772': attribute type 1 has an invalid length.
[  401.671140][T13271] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  402.191231][ T5643] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  402.711503][   T12] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  403.231453][   T12] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  403.741135][ T6908] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  404.024887][T21119] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  404.147436][T21173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  404.196485][T21180] syzkaller1: entered promiscuous mode
[  404.196496][T21180] syzkaller1: entered allmulticast mode
[  404.211411][T21183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  404.251013][ T5643] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  404.281240][T21173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  404.761132][T13276] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  404.973282][T21240] openvswitch: netlink: IPv4 tunnel dst address is zero
[  405.017803][T21246] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  405.067444][T21248] netlink: 'syz.0.6813': attribute type 3 has an invalid length.
[  405.067581][T21248] netlink: 'syz.0.6813': attribute type 3 has an invalid length.
[  405.078415][T21248] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6813'.
[  405.082840][ T8922] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  405.159481][T21255] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  405.159530][T21255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  405.178624][T21255] tipc: Resetting bearer <eth:ipvlan1>
[  405.203265][T21255] 8021q: adding VLAN 0 to HW filter on device bond1
[  405.205331][T21255] 8021q: adding VLAN 0 to HW filter on device bond2
[  405.206495][T21255] 8021q: adding VLAN 0 to HW filter on device bond3
[  405.208700][T21255] 8021q: adding VLAN 0 to HW filter on device bond0
[  405.233273][ T5702] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  405.234218][ T5702] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  405.276398][T21255] 8021q: adding VLAN 0 to HW filter on device bond4
[  405.277807][T21255] 8021q: adding VLAN 0 to HW filter on device bond5
[  405.280689][T21255] 8021q: adding VLAN 0 to HW filter on device bond6
[  405.318520][T21255] 8021q: adding VLAN 0 to HW filter on device bond7
[  405.325446][T21255] 8021q: adding VLAN 0 to HW filter on device bond8
[  405.326002][T21255] 8021q: adding VLAN 0 to HW filter on device bond9
[  405.327048][T21255] 8021q: adding VLAN 0 to HW filter on device bond10
[  405.328695][T21255] 8021q: adding VLAN 0 to HW filter on device bond11
[  405.328966][T21255] bond11: entered allmulticast mode
[  405.329205][T21255] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  405.422124][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  405.422150][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  405.423716][ T6908] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  405.423728][ T6908] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  405.423743][ T6908] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  405.423752][ T6908] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  405.423765][ T6908] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  405.423773][ T6908] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  405.424129][T21261] netlink: 'syz.1.6817': attribute type 3 has an invalid length.
[  405.424250][T21261] netlink: 'syz.1.6817': attribute type 3 has an invalid length.
[  405.427177][T21262] batman_adv: batadv0: Adding interface: syzkaller0
[  405.427213][T21262] batman_adv: batadv0: Interface activated: syzkaller0
[  405.489366][T21264] sit0: left promiscuous mode
[  405.500602][T21268] netdevsim netdevsim0: Direct firmware load for . failed with error -2
[  405.500712][T21268] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  405.527410][T21264] macvlan0: left promiscuous mode
[  405.534704][T21264] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  405.559951][T13276] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  405.560042][T13276] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  405.560210][T13276] ip6_tunnel: 8 xmit: Local address not yet configured!
[  405.560295][T13276] ip6_tunnel: 8 xmit: Local address not yet configured!
[  405.567974][T13276] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  405.568135][T13276] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  405.591332][    C0] Dropped outbound packet type=88ca
[  405.594072][T21253] batman_adv: batadv0: Interface deactivated: syzkaller0
[  405.614668][T21253] batman_adv: batadv0: Removing interface: syzkaller0
[  405.779127][T21274] syzkaller0: entered promiscuous mode
[  405.779147][T21274] syzkaller0: entered allmulticast mode
[  405.783616][   T12] net_ratelimit: 5 callbacks suppressed
[  405.783629][   T12] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  406.058912][T21282] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  406.131062][    C0] Dropped outbound packet type=88ca
[  406.291196][ T5643] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  406.376472][T21293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6832'.
[  406.411685][ T5643] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  406.414286][ T6908] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  406.414318][ T6908] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  406.414342][ T6908] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  406.517841][T21299] tc_dump_action: action bad kind
[  406.816613][ T5643] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  406.823690][T21311] syzkaller0: entered promiscuous mode
[  406.823700][T21311] syzkaller0: entered allmulticast mode
[  406.954599][T21315] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  407.011175][T21319] syzkaller1: entered promiscuous mode
[  407.011192][T21319] syzkaller1: entered allmulticast mode
[  407.201344][    C0] Dropped outbound packet type=88ca
[  407.257772][T21328] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6848'.
[  407.267015][T21328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6848'.
[  407.321896][ T6908] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  407.337283][T21333] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6851'.
[  407.782416][ T5643] nci: nci_rx_work: unknown MT 0x6
[  407.782690][T21354] netlink: 'syz.2.6858': attribute type 4 has an invalid length.
[  407.782705][T21354] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6858'.
[  407.783649][T21354] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  407.831293][ T6908] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  407.864576][T21364] openvswitch: netlink: Key type 29 is not supported
[  408.250950][    C0] Dropped outbound packet type=88ca
[  408.342771][   T12] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  408.367837][T21369] lo: entered allmulticast mode
[  408.376363][T21369] lo: left allmulticast mode
[  409.282399][    C1] ip6_tnl_xmit_ctl: 7 callbacks suppressed
[  409.282417][    C1] ip6_tunnel: 8 xmit: Local address not yet configured!
[  409.291252][    C0] Dropped outbound packet type=88ca
[  409.682006][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  409.842561][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  410.321070][    C0] Dropped outbound packet type=88ca
[  410.540769][T21352] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  410.759965][T21397] netlink: 324 bytes leftover after parsing attributes in process `syz.0.6875'.
[  410.891175][   T12] net_ratelimit: 5 callbacks suppressed
[  410.891187][   T12] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  410.904859][T21408] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  410.906900][T21408] syzkaller0: entered promiscuous mode
[  410.906910][T21408] syzkaller0: entered allmulticast mode
[  410.910239][T21408] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  410.938559][T21410] bridge14: entered promiscuous mode
[  410.938587][T21410] bridge14: entered allmulticast mode
[  410.947554][T21408] tipc: Resetting bearer <eth:syzkaller0>
[  410.951309][T21407] tipc: Resetting bearer <eth:syzkaller0>
[  410.956243][T21414] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  411.060155][T21417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6884'.
[  411.096751][T21407] tipc: Disabling bearer <eth:syzkaller0>
[  411.222661][T21431] netlink: 'syz.2.6889': attribute type 2 has an invalid length.
[  411.361066][    C0] Dropped outbound packet type=88ca
[  411.401105][T13273] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  411.911078][T13273] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  412.401072][    C0] Dropped outbound packet type=88ca
[  412.433736][T13273] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  412.949826][T21523] xt_l2tp: v2 doesn't support IP mode
[  412.954051][ T6908] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  412.985094][T21521] nbd3: detected capacity change from 0 to 63
[  413.006614][T19256] block nbd3: Receive control failed (result -104)
[  413.372091][T21537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6939'.
[  413.441719][    C0] Dropped outbound packet type=88ca
[  413.470083][   T12] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  413.616354][T21539] syzkaller0: entered promiscuous mode
[  413.616395][T21539] syzkaller0: entered allmulticast mode
[  413.634710][T21539] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  413.635824][T21538] tipc: Resetting bearer <eth:syzkaller0>
[  413.665210][T21538] tipc: Disabling bearer <eth:syzkaller0>
[  413.997683][ T5643] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  414.490984][    C0] Dropped outbound packet type=88ca
[  414.501225][ T6908] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  414.631219][T21507] Set syz1 is full, maxelem 65536 reached
[  415.531208][    C0] Dropped outbound packet type=88ca
[  416.033837][T13271] net_ratelimit: 2 callbacks suppressed
[  416.033856][T13271] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  416.072231][T21558] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  416.072252][T21558] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  416.109815][T21563] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6949'.
[  416.109845][T21563] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6949'.
[  416.128113][T21564] IPVS: Unknown mcast interface: macsec0
[  416.142047][T21564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6947'.
[  416.337144][T21587] netpci0: tun_chr_ioctl cmd 1074025678
[  416.337156][T21587] netpci0: group set to 0
[  416.457445][T21595] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6965'.
[  416.457464][T21595] netlink: 'syz.2.6965': attribute type 6 has an invalid length.
[  416.553046][ T6908] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  416.561022][    C0] Dropped outbound packet type=88ca
[  416.592713][T21601] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6968'.
[  416.720416][T21612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6972'.
[  416.720444][T21612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6972'.
[  417.023502][T21636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6984'.
[  417.061228][ T5643] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  417.078560][    T9] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  417.084640][T21643] netlink: 'syz.0.6984': attribute type 16 has an invalid length.
[  417.084653][T21643] netlink: 'syz.0.6984': attribute type 17 has an invalid length.
[  417.102981][    T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  417.121925][    C1] ip6_tunnel: 8 xmit: Local address not yet configured!
[  417.128932][T21643] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  417.136465][T21643] geneve2: left allmulticast mode
[  417.137056][T21643] macvlan2: left allmulticast mode
[  417.137063][T21643] gretap0: left allmulticast mode
[  417.137557][T21643] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  417.146386][T21636] vlan3: entered promiscuous mode
[  417.146395][T21636] bridge0: entered promiscuous mode
[  417.164841][ T2377] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  417.251673][ T2377] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  417.326176][T21668] netlink: 'syz.0.6996': attribute type 21 has an invalid length.
[  417.326214][T21668] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6996'.
[  417.451140][ T2377] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  417.486153][T21680] syzkaller0: entered promiscuous mode
[  417.486168][T21680] syzkaller0: entered allmulticast mode
[  417.571236][ T5643] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  417.585087][T21689] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  417.596948][T21686] 8021q: adding VLAN 0 to HW filter on device bond11
[  417.601146][    C0] Dropped outbound packet type=88ca
[  417.761555][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  418.081535][ T5643] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  418.168203][T21712] netlink: 'syz.1.7016': attribute type 62 has an invalid length.
[  418.401943][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  418.591588][   T12] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  418.641144][    C0] Dropped outbound packet type=88ca
[  419.101353][   T12] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  419.212838][T21752] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7035'.
[  419.547032][T21762] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  419.683718][   T99] block nbd3: Connection timed out, retrying (0/1 alive)
[  419.685547][   T99] block nbd3: Dead connection, failed to find a fallback
[  419.685561][   T99] block nbd3: shutting down sockets
[  419.685626][   T99] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  419.685691][   T99] Buffer I/O error on dev nbd3, logical block 0, async page read
[  419.685783][   T99] Buffer I/O error on dev nbd3, logical block 1, async page read
[  419.685794][   T99] Buffer I/O error on dev nbd3, logical block 2, async page read
[  419.685805][   T99] Buffer I/O error on dev nbd3, logical block 3, async page read
[  419.689538][   T99] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  419.689558][   T99] Buffer I/O error on dev nbd3, logical block 0, async page read
[  419.689620][   T99] Buffer I/O error on dev nbd3, logical block 1, async page read
[  419.689632][   T99] Buffer I/O error on dev nbd3, logical block 2, async page read
[  419.689641][   T99] Buffer I/O error on dev nbd3, logical block 3, async page read
[  419.690503][   T99] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  419.690521][   T99] Buffer I/O error on dev nbd3, logical block 0, async page read
[  419.690531][   T99] Buffer I/O error on dev nbd3, logical block 1, async page read
[  419.690636][   T99] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  419.690745][   T99] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  419.691214][    C0] Dropped outbound packet type=88ca
[  419.694383][   T99] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  419.703218][  T135] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2
[  419.705823][  T135] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  419.705950][  T135] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  419.705990][T21125] ldm_validate_partition_table(): Disk read failed.
[  419.706066][  T135] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  419.706682][T21125] Dev nbd3: unable to read RDB block 0
[  419.710477][T21125]  nbd3: unable to read partition table
[  419.738869][T21125] ldm_validate_partition_table(): Disk read failed.
[  419.739186][T21125] Dev nbd3: unable to read RDB block 0
[  419.740405][T21125]  nbd3: unable to read partition table
[  419.804195][T21777] IPv6: NLM_F_CREATE should be specified when creating new route
[  420.721102][    C0] Dropped outbound packet type=88ca
[  421.022529][T21810] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  421.023043][T21810] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  421.171197][T13276] net_ratelimit: 3 callbacks suppressed
[  421.171208][T13276] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  421.577690][T21848] ip_tables: iptables: counters copy to user failed while replacing table
[  421.681331][   T12] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  421.722764][T21861] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  421.771144][    C0] Dropped outbound packet type=88ca
[  421.832954][T21868] netlink: 'syz.2.7090': attribute type 1 has an invalid length.
[  421.906167][T21875] __nla_validate_parse: 1 callbacks suppressed
[  421.906181][T21875] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.7092'.
[  422.033643][T21885] netlink: 'syz.2.7098': attribute type 1 has an invalid length.
[  422.060681][T21885] 8021q: adding VLAN 0 to HW filter on device bond12
[  422.075661][T21885] 8021q: adding VLAN 0 to HW filter on device bond12
[  422.075826][T21885] bond12: (slave gre3): The slave device specified does not support setting the MAC address
[  422.076159][T21885] bond12: (slave gre3): Error -95 calling set_mac_address
[  422.116305][T21889] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7098'.
[  422.124376][T21891] ip_tables: iptables: counters copy to user failed while replacing table
[  422.153053][T21889] 8021q: adding VLAN 0 to HW filter on device bond13
[  422.162002][T21889] bond12: (slave bond13): Enslaving as an active interface with a down link
[  422.187306][T21885] bond12 (unregistering): (slave bond13): Releasing active interface
[  422.196597][T21885] bond12 (unregistering): Released all slaves
[  422.203330][ T5643] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  422.445649][T21911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7109'.
[  422.711479][T13271] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  422.716779][T21924] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7113'.
[  422.811031][    C0] Dropped outbound packet type=88ca
[  423.221589][   T12] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  423.731534][   T12] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  423.842672][    C0] Dropped outbound packet type=88ca
[  424.242408][T13271] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  424.596236][T21993] netlink: 'syz.2.7148': attribute type 1 has an invalid length.
[  424.640353][T21993] 8021q: adding VLAN 0 to HW filter on device bond14
[  424.646588][T21993] bond12: (slave bond14): making interface the new active one
[  424.650482][T21993] bond12: (slave bond14): Enslaving as an active interface with an up link
[  424.669099][T21993] bond12: (slave gretap1): Enslaving as a backup interface with an up link
[  424.751544][ T5643] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  424.756386][T22000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7150'.
[  424.895645][    C0] Dropped outbound packet type=88ca
[  425.467082][T22016] tc_dump_action: action bad kind
[  425.921279][    C0] Dropped outbound packet type=88ca
[  426.066325][T22063] macsec1: entered promiscuous mode
[  426.184231][T22072] net_ratelimit: 4 callbacks suppressed
[  426.184244][T22072] openvswitch: netlink: Flow actions attr not present in new flow.
[  426.245199][T22078] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7187'.
[  426.267550][T22080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7188'.
[  426.283213][ T5643] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  426.314295][T22084] netlink: 'syz.2.7189': attribute type 11 has an invalid length.
[  426.406416][T22090] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  426.406448][T22090] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  426.490562][T22095] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  426.592101][T22101] Bluetooth: ISO socket layer initialized
[  426.736137][T22108] tipc: Disabling bearer <udp:syz2>
[  426.791497][T13273] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  426.961080][    C0] Dropped outbound packet type=88ca
[  427.137378][T22082] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  427.146131][T22087] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  427.146694][T22091] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  427.232917][T22137] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes
[  427.311182][T13271] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  427.822536][T13271] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  428.011209][    C0] Dropped outbound packet type=88ca
[  428.320146][T22167] syzkaller0: entered promiscuous mode
[  428.320168][T22167] syzkaller0: entered allmulticast mode
[  428.334472][ T6908] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  429.051020][    C0] Dropped outbound packet type=88ca
[  429.467148][T22234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7254'.
[  429.540082][T22236] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  429.540793][T22236] syzkaller0: entered promiscuous mode
[  429.540815][T22236] syzkaller0: entered allmulticast mode
[  429.556305][T22236] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  429.579795][T22236] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) !
[  429.587331][T22236] tipc: Resetting bearer <eth:syzkaller0>
[  429.613854][T22235] tipc: Resetting bearer <eth:syzkaller0>
[  429.672584][T22235] tipc: Disabling bearer <eth:syzkaller0>
[  430.081030][    C0] Dropped outbound packet type=88ca
[  430.275901][T22277] xt_CT: No such helper "netbios-ns"
[  430.677208][T22309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7290'.
[  430.677245][T22309] netlink: 'syz.2.7290': attribute type 10 has an invalid length.
[  430.677256][T22309] netlink: 'syz.2.7290': attribute type 5 has an invalid length.
[  430.677265][T22309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7290'.
[  430.707886][T22309] geneve3: entered promiscuous mode
[  430.707909][T22309] geneve3: entered allmulticast mode
[  430.731404][ T6908] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 56842 - 0
[  430.731450][ T6908] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 56842 - 0
[  430.731475][ T6908] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 56842 - 0
[  430.731497][ T6908] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 56842 - 0
[  430.958440][T22331] sch_tbf: burst 21990 is lower than device erspan0 mtu (32783) !
[  431.074327][T22343] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7307'.
[  431.076286][T22343] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7307'.
[  431.103696][T22345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7308'.
[  431.120999][    C0] Dropped outbound packet type=88ca
[  431.276506][T22365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7318'.
[  431.360705][T22376] netlink: 456 bytes leftover after parsing attributes in process `syz.1.7323'.
[  431.360722][T22376] netlink: 456 bytes leftover after parsing attributes in process `syz.1.7323'.
[  431.401178][ T6908] net_ratelimit: 7 callbacks suppressed
[  431.401190][ T6908] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  431.414094][T22383] sctp: [Deprecated]: syz.0.7324 (pid 22383) Use of struct sctp_assoc_value in delayed_ack socket option.
[  431.414094][T22383] Use struct sctp_sack_info instead
[  431.414644][T22383] sctp: [Deprecated]: syz.0.7324 (pid 22383) Use of struct sctp_assoc_value in delayed_ack socket option.
[  431.414644][T22383] Use struct sctp_sack_info instead
[  431.438328][T22380] xt_hashlimit: size too large, truncated to 1048576
[  431.729455][T22410] netlink: 'syz.1.7338': attribute type 11 has an invalid length.
[  431.729469][T22410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7338'.
[  431.841190][    C1] ip6_tunnel: 8 xmit: Local address not yet configured!
[  431.913277][T13273] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  432.106451][T22425] 0{X: renamed from gretap0
[  432.108916][T22425] 0{X: entered allmulticast mode
[  432.110012][T22425] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  432.161092][    C0] Dropped outbound packet type=88ca
[  432.421036][T13276] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  432.544477][T22467] ip6gre4: entered allmulticast mode
[  432.545536][ T5643] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  432.835510][T22487] IPVS: stopping backup sync thread 14679 ...
[  432.931549][T13271] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  433.121904][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  433.201130][    C0] Dropped outbound packet type=88ca
[  433.307869][T22520] netlink: 'syz.1.7379': attribute type 21 has an invalid length.
[  433.307955][T22520] netlink: 'syz.1.7379': attribute type 4 has an invalid length.
[  433.307964][T22520] netlink: 'syz.1.7379': attribute type 3 has an invalid length.
[  433.441124][T13271] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  433.599424][T22540] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  433.698432][T22546] netlink: 'syz.0.7388': attribute type 2 has an invalid length.
[  433.951463][ T5643] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  433.999059][T22585] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  433.999120][T22585] IPv6: NLM_F_CREATE should be set when creating new route
[  433.999152][T22585] IPv6: NLM_F_CREATE should be set when creating new route
[  434.179656][T22601] netlink: 'syz.0.7411': attribute type 1 has an invalid length.
[  434.183018][T22599] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  434.241241][    C0] Dropped outbound packet type=88ca
[  434.340102][T22608] netlink: 'syz.0.7415': attribute type 2 has an invalid length.
[  434.461618][ T5643] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  434.755039][T22635] __nla_validate_parse: 12 callbacks suppressed
[  434.755059][T22635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7425'.
[  434.769966][T22637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7423'.
[  434.936318][T22654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7432'.
[  434.949891][T13271] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  434.972935][T22647] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  435.042976][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  435.050094][T22659] xfrm0: entered allmulticast mode
[  435.235619][T22672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7441'.
[  435.281035][    C0] Dropped outbound packet type=88ca
[  435.305144][T22683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7445'.
[  435.308254][T22683] ip6tnl8: entered allmulticast mode
[  435.364619][T22688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7448'.
[  435.518132][T22703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7455'.
[  435.525903][T22706] bridge_slave_1: invalid flags given to default FDB implementation
[  435.546375][T22708] netlink: 'syz.0.7457': attribute type 4 has an invalid length.
[  435.578670][T22703] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7455'.
[  435.648251][T22717] netlink: 'syz.0.7460': attribute type 21 has an invalid length.
[  435.648322][T22717] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7460'.
[  435.825749][T22732] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7467'.
[  436.321234][    C0] Dropped outbound packet type=88ca
[  436.401136][    C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  436.502387][T13273] net_ratelimit: 4 callbacks suppressed
[  436.502407][T13273] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  436.839837][T22793] xt_hashlimit: max too large, truncated to 1048576
[  436.978747][T22799] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  437.021174][ T6908] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  437.370963][    C0] Dropped outbound packet type=88ca
[  437.541369][ T6908] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  437.674210][T22847] netlink: ct_mark mask cannot be 0
[  437.674227][T22847] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  437.765742][T22861] x_tables: duplicate underflow at hook 2
[  437.824132][T22867] validate_nla: 1 callbacks suppressed
[  437.824152][T22867] netlink: 'syz.2.7527': attribute type 1 has an invalid length.
[  437.853603][T22867] 8021q: adding VLAN 0 to HW filter on device bond15
[  437.871244][T22867] bond15: (slave veth0_to_bond): making interface the new active one
[  437.872472][T22867] bond15: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  437.879347][T22867] bond15: entered promiscuous mode
[  437.879362][T22867] veth0_to_bond: entered promiscuous mode
[  437.879526][T22867] bond15: entered allmulticast mode
[  437.879535][T22867] veth0_to_bond: entered allmulticast mode
[  437.912754][T22867] macvlan5: entered promiscuous mode
[  437.912776][T22867] macvlan5: entered allmulticast mode
[  437.916223][T22867] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  437.928725][T22867] bond15: (slave macvlan5): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond
[  437.960681][T22874] netlink: 'syz.0.7530': attribute type 61 has an invalid length.
[  437.986471][T22876] syz_tun: entered allmulticast mode
[  437.996023][T22876] pimreg: entered allmulticast mode
[  438.051684][ T6908] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  438.411053][    C0] Dropped outbound packet type=88ca
[  438.568370][T13271] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  439.083103][ T6908] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  439.451136][    C0] Dropped outbound packet type=88ca
[  439.591554][T13271] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  440.310532][T23015] syzkaller0: entered promiscuous mode
[  440.310552][T23015] syzkaller0: entered allmulticast mode
[  440.320610][T23015] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  440.327006][T23015] tipc: Resetting bearer <eth:syzkaller0>
[  440.327871][T23014] tipc: Resetting bearer <eth:syzkaller0>
[  440.351153][T23014] tipc: Disabling bearer <eth:syzkaller0>
[  440.491154][    C0] Dropped outbound packet type=88ca
[  441.018349][T23026] syzkaller1: entered promiscuous mode
[  441.018371][T23026] syzkaller1: entered allmulticast mode
[  441.176724][T23038] bond13: (slave team0): Device is not bonding slave
[  441.176740][T23038] bond13: option active_slave: invalid value (team0)
[  441.178024][T23038] bond13 (unregistering): Released all slaves
[  441.219580][T23043] __nla_validate_parse: 14 callbacks suppressed
[  441.219592][T23043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7595'.
[  441.510331][T23068] netlink: 'syz.1.7607': attribute type 1 has an invalid length.
[  441.531085][    C0] Dropped outbound packet type=88ca
[  441.558599][T23068] bond14: (slave bridge12): Enslaving as a backup interface with an up link
[  441.579576][T23068] macvlan4: entered promiscuous mode
[  441.579597][T23068] macvlan4: entered allmulticast mode
[  441.580087][T23068] bond14: entered promiscuous mode
[  441.580097][T23068] bridge12: entered promiscuous mode
[  441.589291][T23068] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  441.596270][T23068] bond14: left promiscuous mode
[  441.596287][T23068] bridge12: left promiscuous mode
[  441.631646][T13273] net_ratelimit: 3 callbacks suppressed
[  441.631732][T13273] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  441.727193][T23077] ip6gre5: entered allmulticast mode
[  441.845736][T23085] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7614'.
[  441.892946][T23089] IPv6: NLM_F_REPLACE set, but no existing node found!
[  442.051414][T23097] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7620'.
[  442.051783][T23097] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7620'.
[  442.092849][T23097] batman_adv: batadv0: Interface deactivated: dummy0
[  442.092871][T23097] batman_adv: batadv0: Removing interface: dummy0
[  442.108378][T23097] bond10: (slave veth0_to_bond): Releasing active interface
[  442.108402][T23097] veth7: entered promiscuous mode
[  442.125056][T23097] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  442.561054][    C0] Dropped outbound packet type=88ca
[  442.745207][T23127] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8
[  443.207722][T23149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  443.545344][T23176] dummy0: entered allmulticast mode
[  443.546318][T23175] dummy0: left allmulticast mode
[  443.611013][    C0] Dropped outbound packet type=88ca
[  443.701384][T23174] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  443.701402][T23174] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  443.865415][T23191] netlink: 'syz.0.7662': attribute type 1 has an invalid length.
[  443.865436][T23191] netlink: 'syz.0.7662': attribute type 2 has an invalid length.
[  443.865444][T23191] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7662'.
[  443.906186][T23194] netlink: 280 bytes leftover after parsing attributes in process `syz.0.7663'.
[  443.906210][T23194] netlink: 'syz.0.7663': attribute type 3 has an invalid length.
[  443.960459][T23198] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7665'.
[  443.960487][T23198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7665'.
[  443.960498][T23198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7665'.
[  444.438552][T23214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7671'.
[  444.455068][T23214] netlink: 'syz.1.7671': attribute type 1 has an invalid length.
[  444.593353][T23220] 8021q: adding VLAN 0 to HW filter on device bond15
[  444.625052][T23223] syzkaller0: entered promiscuous mode
[  444.625075][T23223] syzkaller0: entered allmulticast mode
[  444.641096][    C0] Dropped outbound packet type=88ca
[  444.641142][    C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  444.642842][T23220] bond15 (unregistering): Released all slaves
[  445.027272][T23242] syzkaller0: entered promiscuous mode
[  445.027336][T23242] syzkaller0: entered allmulticast mode
[  445.662305][T23267] ip_tables: iptables: counters copy to user failed while replacing table
[  445.663899][T23267] IPVS: set_ctl: invalid protocol: 4 100.1.1.0:20001
[  445.681077][    C0] Dropped outbound packet type=88ca
[  446.329277][T23296] netlink: 'syz.2.7702': attribute type 10 has an invalid length.
[  446.336459][T23296] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  446.340308][T23296] team0: Port device netdevsim1 added
[  446.419608][T23297] netlink: 'syz.2.7702': attribute type 10 has an invalid length.
[  446.429471][T23297] team0: Port device netdevsim1 removed
[  446.435575][T23297] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  446.436741][T23297] netdevsim netdevsim2 netdevsim1: entered promiscuous mode
[  446.436892][T23297] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[  446.438064][T23297] bond0: (slave netdevsim1): Enslaving as an active interface with a down link
[  446.721110][    C0] Dropped outbound packet type=88ca
[  447.761145][    C0] Dropped outbound packet type=88ca
[  447.972320][T23246] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  447.985411][T23236] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  447.987777][T23296] 
[  447.992188][T23296] ======================================================
[  447.996162][T23296] WARNING: possible circular locking dependency detected
[  447.999478][T23296] syzkaller #0 Not tainted
[  448.001707][T23296] ------------------------------------------------------
[  448.004539][T23296] syz.2.7702/23296 is trying to acquire lock:
[  448.007119][T23296] ffff8881012d4210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0
[  448.011452][T23296] 
[  448.011452][T23296] but task is already holding lock:
[  448.014400][T23296] ffff8881012d4180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0
[  448.018053][T23296] 
[  448.018053][T23296] which lock already depends on the new lock.
[  448.018053][T23296] 
[  448.022160][T23296] 
[  448.022160][T23296] the existing dependency chain (in reverse order) is:
[  448.025761][T23296] 
[  448.025761][T23296] -> #9 (&root->kernfs_rwsem){++++}-{4:4}:
[  448.028971][T23296]        down_write+0x96/0x200
[  448.030931][T23296]        kernfs_add_one+0x41/0x6f0
[  448.032897][T23296]        kernfs_create_dir_ns+0x1a1/0x230
[  448.035136][T23296]        internal_create_group+0x440/0x1180
[  448.037513][T23296]        cpuhp_invoke_callback+0x434/0x810
[  448.039899][T23296]        cpuhp_issue_call+0x3f0/0x750
[  448.042062][T23296]        __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0
[  448.044787][T23296]        __cpuhp_setup_state+0x3f/0x60
[  448.047003][T23296]        do_one_initcall+0x250/0x870
[  448.049159][T23296]        do_initcall_level+0x10a/0x1a0
[  448.051453][T23296]        do_initcalls+0x59/0xa0
[  448.053451][T23296]        kernel_init_freeable+0x29d/0x3e0
[  448.055739][T23296]        kernel_init+0x22/0x1d0
[  448.057652][T23296]        ret_from_fork+0x514/0xb70
[  448.059720][T23296]        ret_from_fork_asm+0x1a/0x30
[  448.061850][T23296] 
[  448.061850][T23296] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}:
[  448.065020][T23296] 
[  448.065020][T23296] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  448.068086][T23296]        cpus_read_lock+0x42/0x160
[  448.070016][T23296]        static_key_slow_inc+0x12/0x30
[  448.072115][T23296]        nbd_genl_reconnect_sock_cb+0x69a/0xbb0
[  448.074656][T23296]        nbd_genl_foreach_sock+0x265/0x450
[  448.077031][T23296]        nbd_genl_reconfigure+0xbbb/0x1040
[  448.079372][T23296]        genl_family_rcv_msg_doit+0x233/0x340
[  448.081848][T23296]        genl_rcv_msg+0x614/0x7a0
[  448.083895][T23296]        netlink_rcv_skb+0x226/0x4a0
[  448.086031][T23296]        genl_rcv+0x28/0x40
[  448.087895][T23296]        netlink_unicast+0x7bd/0x940
[  448.090018][T23296]        netlink_sendmsg+0x813/0xb40
[  448.092154][T23296]        sock_sendmsg_nosec+0x13a/0x180
[  448.094397][T23296]        ____sys_sendmsg+0x54e/0x850
[  448.096599][T23296]        ___sys_sendmsg+0x2a5/0x360
[  448.098740][T23296]        __x64_sys_sendmsg+0x1b1/0x290
[  448.100962][T23296]        do_syscall_64+0x166/0x520
[  448.103025][T23296]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.105601][T23296] 
[  448.105601][T23296] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  448.108748][T23296]        __mutex_lock+0x19d/0x1550
[  448.110819][T23296]        nbd_queue_rq+0x373/0xff0
[  448.112848][T23296]        blk_mq_dispatch_rq_list+0x499/0x1990
[  448.115296][T23296]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  448.118032][T23296]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  448.120617][T23296]        blk_mq_run_work_fn+0x16c/0x300
[  448.122844][T23296]        process_scheduled_works+0xc3d/0x1630
[  448.125275][T23296]        worker_thread+0xa47/0xfb0
[  448.127361][T23296]        kthread+0x38b/0x480
[  448.129238][T23296]        ret_from_fork+0x514/0xb70
[  448.131301][T23296]        ret_from_fork_asm+0x1a/0x30
[  448.133451][T23296] 
[  448.133451][T23296] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  448.136360][T23296]        __mutex_lock+0x19d/0x1550
[  448.138405][T23296]        nbd_queue_rq+0xc1/0xff0
[  448.140434][T23296]        blk_mq_dispatch_rq_list+0x499/0x1990
[  448.142936][T23296]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  448.145681][T23296]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  448.148293][T23296]        blk_mq_run_work_fn+0x16c/0x300
[  448.150507][T23296]        process_scheduled_works+0xc3d/0x1630
[  448.152987][T23296]        worker_thread+0xa47/0xfb0
[  448.155044][T23296]        kthread+0x38b/0x480
[  448.156961][T23296]        ret_from_fork+0x514/0xb70
[  448.159075][T23296]        ret_from_fork_asm+0x1a/0x30
[  448.161225][T23296] 
[  448.161225][T23296] -> #4 (set->srcu){.+.+}-{0:0}:
[  448.164152][T23296]        __synchronize_srcu+0xc9/0x2f0
[  448.166420][T23296]        elevator_switch+0x1e8/0x7b0
[  448.168612][T23296]        elevator_change+0x2fa/0x480
[  448.170823][T23296]        elevator_set_default+0x375/0x440
[  448.173192][T23296]        blk_register_queue+0x3f3/0x4e0
[  448.175476][T23296]        __add_disk+0x6b8/0xdb0
[  448.177505][T23296]        add_disk_fwnode+0x100/0x3a0
[  448.179713][T23296]        nbd_dev_add+0x733/0xb60
[  448.181700][T23296]        nbd_init+0x168/0x1f0
[  448.183623][T23296]        do_one_initcall+0x250/0x870
[  448.185709][T23296]        do_initcall_level+0x10a/0x1a0
[  448.187875][T23296]        do_initcalls+0x59/0xa0
[  448.189901][T23296]        kernel_init_freeable+0x29d/0x3e0
[  448.192063][T23296]        kernel_init+0x22/0x1d0
[  448.194060][T23296]        ret_from_fork+0x514/0xb70
[  448.196072][T23296]        ret_from_fork_asm+0x1a/0x30
[  448.198242][T23296] 
[  448.198242][T23296] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  448.201434][T23296]        __mutex_lock+0x19d/0x1550
[  448.203567][T23296]        elevator_change+0x1af/0x480
[  448.205752][T23296]        elevator_set_none+0xb5/0x140
[  448.207995][T23296]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  448.210420][T23296]        nbd_start_device+0x189/0xb30
[  448.212293][T23296]        nbd_genl_connect+0x167d/0x1cd0
[  448.214183][T23296]        genl_family_rcv_msg_doit+0x233/0x340
[  448.216224][T23296]        genl_rcv_msg+0x614/0x7a0
[  448.217900][T23296]        netlink_rcv_skb+0x226/0x4a0
[  448.219713][T23296]        genl_rcv+0x28/0x40
[  448.221336][T23296]        netlink_unicast+0x7bd/0x940
[  448.223468][T23296]        netlink_sendmsg+0x813/0xb40
[  448.225426][T23296]        sock_sendmsg_nosec+0x13a/0x180
[  448.227259][T23296]        ____sys_sendmsg+0x54e/0x850
[  448.228990][T23296]        ___sys_sendmsg+0x2a5/0x360
[  448.230817][T23296]        __x64_sys_sendmsg+0x1b1/0x290
[  448.232816][T23296]        do_syscall_64+0x166/0x520
[  448.234525][T23296]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.236625][T23296] 
[  448.236625][T23296] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  448.239465][T23296]        blk_alloc_queue+0x544/0x690
[  448.241260][T23296]        __blk_mq_alloc_disk+0x194/0x390
[  448.243071][T23296]        nbd_dev_add+0x494/0xb60
[  448.244746][T23296]        nbd_init+0x168/0x1f0
[  448.246387][T23296]        do_one_initcall+0x250/0x870
[  448.248404][T23296]        do_initcall_level+0x10a/0x1a0
[  448.250532][T23296]        do_initcalls+0x59/0xa0
[  448.252481][T23296]        kernel_init_freeable+0x29d/0x3e0
[  448.254757][T23296]        kernel_init+0x22/0x1d0
[  448.256721][T23296]        ret_from_fork+0x514/0xb70
[  448.258814][T23296]        ret_from_fork_asm+0x1a/0x30
[  448.260935][T23296] 
[  448.260935][T23296] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  448.263815][T23296]        fs_reclaim_acquire+0x71/0x100
[  448.265903][T23296]        kmem_cache_alloc_noprof+0x5f/0x600
[  448.268244][T23296]        __kernfs_iattrs+0xdd/0x380
[  448.270328][T23296]        kernfs_iop_setattr+0xe6/0x3f0
[  448.272485][T23296]        notify_change+0xbba/0xea0
[  448.274557][T23296]        do_truncate+0x1c2/0x250
[  448.276578][T23296]        path_openat+0x15b5/0x1d60
[  448.278646][T23296]        do_file_open+0x23e/0x4a0
[  448.280657][T23296]        do_sys_openat2+0x115/0x200
[  448.282711][T23296]        __x64_sys_openat+0x138/0x170
[  448.284901][T23296]        do_syscall_64+0x166/0x520
[  448.286961][T23296]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.289512][T23296] 
[  448.289512][T23296] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[  448.292890][T23296]        __lock_acquire+0x164c/0x2de0
[  448.295086][T23296]        lock_acquire+0x115/0x350
[  448.297135][T23296]        down_write+0x96/0x200
[  448.299097][T23296]        kernfs_link_sibling+0x4c7/0x5a0
[  448.301397][T23296]        kernfs_add_one+0x2db/0x6f0
[  448.303488][T23296]        kernfs_create_dir_ns+0x1a1/0x230
[  448.305767][T23296]        sysfs_create_dir_ns+0x12f/0x2a0
[  448.308083][T23296]        kobject_add_internal+0x622/0xcd0
[  448.310403][T23296]        kobject_add+0x163/0x240
[  448.312426][T23296]        device_add+0x3fa/0xb80
[  448.314362][T23296]        vdpasim_net_dev_add+0x2c0/0x3d0
[  448.316616][T23296]        vdpa_nl_cmd_dev_add_set_doit+0xa8b/0xbd0
[  448.319208][T23296]        genl_family_rcv_msg_doit+0x233/0x340
[  448.321600][T23296]        genl_rcv_msg+0x614/0x7a0
[  448.323640][T23296]        netlink_rcv_skb+0x226/0x4a0
[  448.325645][T23296]        genl_rcv+0x28/0x40
[  448.327416][T23296]        netlink_unicast+0x7bd/0x940
[  448.329528][T23296]        netlink_sendmsg+0x813/0xb40
[  448.331632][T23296]        sock_sendmsg_nosec+0x13a/0x180
[  448.333897][T23296]        ____sys_sendmsg+0x54e/0x850
[  448.336018][T23296]        ___sys_sendmsg+0x2a5/0x360
[  448.338128][T23296]        __x64_sys_sendmsg+0x1b1/0x290
[  448.340322][T23296]        do_syscall_64+0x166/0x520
[  448.342395][T23296]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.344946][T23296] 
[  448.344946][T23296] other info that might help us debug this:
[  448.344946][T23296] 
[  448.348985][T23296] Chain exists of:
[  448.348985][T23296]   &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem
[  448.348985][T23296] 
[  448.354696][T23296]  Possible unsafe locking scenario:
[  448.354696][T23296] 
[  448.357648][T23296]        CPU0                    CPU1
[  448.359838][T23296]        ----                    ----
[  448.361994][T23296]   lock(&root->kernfs_rwsem);
[  448.363959][T23296]                                lock(cpuhp_state_mutex);
[  448.366779][T23296]                                lock(&root->kernfs_rwsem);
[  448.369729][T23296]   lock(&root->kernfs_iattr_rwsem);
[  448.371891][T23296] 
[  448.371891][T23296]  *** DEADLOCK ***
[  448.371891][T23296] 
[  448.375121][T23296] locks held by syz.2.7702/23296: 4, last CPU#1:
[  448.377666][T23296]  #0: ffffffff912c6388 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  448.381027][T23296]  #1: ffffffff912c61c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  448.384572][T23296]  #2: ffffffff9066bee8 (vdpa_dev_lock){++++}-{4:4}, at: vdpa_nl_cmd_dev_add_set_doit+0x582/0xbd0
[  448.388814][T23296]  #3: ffff8881012d4180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0
[  448.392715][T23296] 
[  448.392715][T23296] stack backtrace:
[  448.395063][T23296] CPU: 1 UID: 0 PID: 23296 Comm: syz.2.7702 Not tainted syzkaller #0 PREEMPT(full) 
[  448.398888][T23296] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  448.403013][T23296] Call Trace:
[  448.404384][T23296]  <TASK>
[  448.405570][T23296]  dump_stack_lvl+0xe8/0x150
[  448.407457][T23296]  print_circular_bug+0x2e2/0x300
[  448.409486][T23296]  check_noncircular+0x12f/0x150
[  448.411537][T23296]  __lock_acquire+0x164c/0x2de0
[  448.413565][T23296]  ? __lock_acquire+0x747/0x2de0
[  448.415644][T23296]  lock_acquire+0x115/0x350
[  448.417527][T23296]  ? kernfs_link_sibling+0x4c7/0x5a0
[  448.419750][T23296]  down_write+0x96/0x200
[  448.421490][T23296]  ? kernfs_link_sibling+0x4c7/0x5a0
[  448.423565][T23296]  ? __pfx_down_write+0x10/0x10
[  448.425542][T23296]  ? kernfs_root+0x1c/0x230
[  448.427373][T23296]  ? kernfs_root+0x1c/0x230
[  448.429269][T23296]  ? kernfs_root+0x1c/0x230
[  448.431152][T23296]  ? kernfs_root+0x1ea/0x230
[  448.433097][T23296]  kernfs_link_sibling+0x4c7/0x5a0
[  448.435232][T23296]  kernfs_add_one+0x2db/0x6f0
[  448.437110][T23296]  kernfs_create_dir_ns+0x1a1/0x230
[  448.439197][T23296]  sysfs_create_dir_ns+0x12f/0x2a0
[  448.441234][T23296]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  448.443505][T23296]  ? do_raw_spin_unlock+0x4d/0x200
[  448.445611][T23296]  kobject_add_internal+0x622/0xcd0
[  448.447808][T23296]  kobject_add+0x163/0x240
[  448.449657][T23296]  ? __pfx_kobject_add+0x10/0x10
[  448.451723][T23296]  ? bus_get_dev_root+0x127/0x160
[  448.453774][T23296]  ? get_device_parent+0x38c/0x3a0
[  448.455861][T23296]  ? __pfx_klist_children_get+0x10/0x10
[  448.458056][T23296]  device_add+0x3fa/0xb80
[  448.459819][T23296]  vdpasim_net_dev_add+0x2c0/0x3d0
[  448.461895][T23296]  ? __pfx_vdpasim_net_dev_add+0x10/0x10
[  448.464154][T23296]  ? __pfx_vdpasim_net_work+0x10/0x10
[  448.466338][T23296]  ? __pfx_vdpasim_net_get_config+0x10/0x10
[  448.468712][T23296]  ? __pfx_vdpasim_net_get_stats+0x10/0x10
[  448.471097][T23296]  ? __pfx_vdpasim_net_free+0x10/0x10
[  448.473278][T23296]  ? vdpa_mgmtdev_get_from_attr+0x26c/0x280
[  448.475597][T23296]  vdpa_nl_cmd_dev_add_set_doit+0xa8b/0xbd0
[  448.478033][T23296]  ? __pfx_vdpa_nl_cmd_dev_add_set_doit+0x10/0x10
[  448.480604][T23296]  ? __nla_parse+0x40/0x60
[  448.482443][T23296]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  448.485053][T23296]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  448.487580][T23296]  genl_family_rcv_msg_doit+0x233/0x340
[  448.489768][T23296]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  448.492284][T23296]  ? bpf_lsm_capable+0x9/0x20
[  448.494196][T23296]  ? security_capable+0x7e/0x2c0
[  448.496174][T23296]  genl_rcv_msg+0x614/0x7a0
[  448.498007][T23296]  ? __pfx_genl_rcv_msg+0x10/0x10
[  448.500077][T23296]  ? __pfx_vdpa_nl_cmd_dev_add_set_doit+0x10/0x10
[  448.502702][T23296]  netlink_rcv_skb+0x226/0x4a0
[  448.504700][T23296]  ? __pfx_genl_rcv_msg+0x10/0x10
[  448.506755][T23296]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  448.508908][T23296]  ? down_read+0x2be/0x330
[  448.510713][T23296]  genl_rcv+0x28/0x40
[  448.512406][T23296]  netlink_unicast+0x7bd/0x940
[  448.514403][T23296]  netlink_sendmsg+0x813/0xb40
[  448.516392][T23296]  ? __pfx_netlink_sendmsg+0x10/0x10
[  448.518468][T23296]  ? apparmor_socket_sendmsg+0x98/0x360
[  448.520656][T23296]  ? __pfx_netlink_sendmsg+0x10/0x10
[  448.522838][T23296]  sock_sendmsg_nosec+0x13a/0x180
[  448.524869][T23296]  ____sys_sendmsg+0x54e/0x850
[  448.526762][T23296]  ? __pfx_____sys_sendmsg+0x10/0x10
[  448.528894][T23296]  ? import_iovec+0x73/0xa0
[  448.530726][T23296]  ___sys_sendmsg+0x2a5/0x360
[  448.532669][T23296]  ? __lock_acquire+0x747/0x2de0
[  448.534668][T23296]  ? __pfx____sys_sendmsg+0x10/0x10
[  448.536770][T23296]  ? futex_wait+0x2a2/0x390
[  448.538648][T23296]  ? __fget_files+0x2a/0x420
[  448.540534][T23296]  ? __fget_files+0x3a2/0x420
[  448.542452][T23296]  __x64_sys_sendmsg+0x1b1/0x290
[  448.544460][T23296]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  448.546651][T23296]  do_syscall_64+0x166/0x520
[  448.548548][T23296]  ? trace_irq_disable+0x3b/0x140
[  448.550575][T23296]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.553060][T23296]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.555440][T23296] RIP: 0033:0x7fded919e559
[  448.557259][T23296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  448.565097][T23296] RSP: 002b:00007fdeda043028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  448.568459][T23296] RAX: ffffffffffffffda RBX: 00007fded9426090 RCX: 00007fded919e559
[  448.571630][T23296] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c
[  448.574811][T23296] RBP: 00007fded92358b0 R08: 0000000000000000 R09: 0000000000000000
[  448.578016][T23296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  448.581178][T23296] R13: 00007fded9426128 R14: 00007fded9426090 R15: 00007fffdc4e4648
[  448.584367][T23296]  </TASK>
[  448.666037][T23300] netlink: 'syz.1.7703': attribute type 1 has an invalid length.
[  448.697403][T23300] 8021q: adding VLAN 0 to HW filter on device bond15
[  448.716966][T23300] bond15: (slave geneve4): making interface the new active one
[  448.718002][T23300] bond15: (slave geneve4): Enslaving as an active interface with an up link
[  448.801045][    C0] Dropped outbound packet type=88ca
[  449.841026][    C0] Dropped outbound packet type=88ca
[  450.881097][    C0] Dropped outbound packet type=88ca
[  451.921059][    C0] Dropped outbound packet type=88ca
[  452.971062][    C0] Dropped outbound packet type=88ca
[  453.721401][T13276] veth7: left promiscuous mode
[  454.001038][    C0] Dropped outbound packet type=88ca
[  455.041039][    C0] Dropped outbound packet type=88ca
[  456.091012][    C0] Dropped outbound packet type=88ca
[  457.131015][    C0] Dropped outbound packet type=88ca
