last executing test programs:

2.38900806s ago: executing program 1 (id=1776):
socket$packet(0x11, 0x2, 0x300)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r3)
sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008005}, 0x20044040)
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) (async)
write$tun(r0, &(0x7f0000000300)={@void, @void, @eth={@multicast, @local, @val={@void, {0x8100, 0x6, 0x1}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x9c, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "786b8afe8ef6c8e90c1e350689fcd4d61b4576015011084c54b22430637a2838", "563c538774ee22ce2bb8f46f7373cb97218dd5ee5af3108bd6d195c614d44230e598e0731465bf4fcdfa004c93ce4b4e", "02833533ce8152a09040f08bd2892b7233376dcda3f0b6962e66f617", {"2e7c8cbccc480860f94cd609888bc51a", "59aef8a800000000000000002000"}}}}}}}}}, 0xd6) (async)
socket$inet_sctp(0x2, 0x4, 0x84)

2.288811218s ago: executing program 1 (id=1777):
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="160000000000000061b100001a2daf7b07749c3f030200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20001000)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback, 0x2f, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300100000000019078ac1e0001ac1414aa030190781200183f2500000000640000003200007fb62874d3629c15fb55469e0000017f000001"], 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x111000, 0x0)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000003400), r5)
sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000003500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000ffdbdf250600000008000100", @ANYRES32=0x0, @ANYBLOB="08000e00d998"], 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x802)
syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r5)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f00000006c0)={0x0, @in={{0x2, 0x4e24, @multicast2}}, [0x2, 0x6, 0x9, 0xfc9, 0xa, 0xf, 0x4, 0x0, 0x1, 0x69c020bf, 0x0, 0x5769bf7a, 0xef1, 0x8000000000000000, 0x4]}, &(0x7f00000007c0)=0x100)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="64a465e8c8b19b44ba4dea57970686c91b493ce03f82124b84ddbf2653a98ea3217f2b957cf30e84d68a03b3c29dc13fba42c25d98a3974d4bd7d1302be820437b", 0x41)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000a40)=ANY=[], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804)
r8 = socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180), 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r9 = socket$netlink(0x10, 0x3, 0x0)
writev(r9, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00010000000700000025000000040016000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="01980000000000001c001201000000000000deffffffffff0b0002"], 0x3c}}, 0x0)

2.189722177s ago: executing program 1 (id=1780):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r2, r2, 0x2f}, 0x20)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r3=>0x0}, 0x8)
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r3, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r4, 0x4)
r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r1, 0x0, r0}, 0x10)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4)
sendmmsg$inet6(r6, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c, 0x0}}], 0x1, 0xc040)
writev(r6, &(0x7f0000000340)=[{0x0}], 0x1)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000000c0)={r10, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c)
syz_emit_ethernet(0x46, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3786dd6700000000103aff00000000000000000000ffffac1414aaff02000000000000000000000000000102009078ffff000100000000000005968cca347e24746c536053ff56423fbc7ccb296e32a4f1b3526bb144f124c5d440fd6486f724bc3a518030a7ca4a6892ef3498ee469515e7e271e8bf877b91119edde083dcce6b94cbc30a22bd678f4e806f5c9b45d3157c3414"], 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x10, 0x80002, 0x0)

2.001336861s ago: executing program 2 (id=1784):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000080)=0x40000001) (async)
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000080)=0x40000001)
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x18, 0x1411, 0x1, 0x709d29, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x26}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4044190) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x18, 0x1411, 0x1, 0x709d29, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x26}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4044190)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd03000a000020140000006c07010033d43afffec00000000000000000000000000010ff020000000000000000000000000001"], 0x340a)

1.919799157s ago: executing program 2 (id=1785):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, 0x0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r2, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1)
syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0)
write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="000022f0ffffffffffffaaaaaaaaaaaa080045dc0024000000000011907800000000e0000001000017c108000000e204000100000000"], 0x36)

1.269136803s ago: executing program 1 (id=1786):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0xffffffffffffff9f, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0x5, 0xa, 0x0, 0x6, 0x6}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010)
syz_emit_ethernet(0x4a, &(0x7f0000001280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x4, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010108, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x5, 0x0, 0x20, {[@md5sig={0x13, 0x12, "3cf8d8b9d377f922754884b4daf8a62a"}]}}}}}}}, 0x0)

1.261744297s ago: executing program 1 (id=1787):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000200))
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0xd0, 0x270, 0xd0, 0x340, 0x340, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x44}, @private1, [], [], 'ipvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@local, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0xffffffff], 'tunl0\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x322}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @private1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xffffff00], 'wg1\x00', 'team_slave_1\x00', {0xff}, {}, 0x2f, 0x6b, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffffe}, 0x1c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000042104020008001b000000000038001a8004002d8030000a80050008"], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x3}, @dev, @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0x4e22, 0x8}}}}}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r6, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000}, 0x8005)

1.200280854s ago: executing program 2 (id=1788):
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
unshare(0x22020600)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x20040894)
getsockopt$inet_tcp_buf(r1, 0x6, 0x13, 0x0, &(0x7f00000000c0))
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000140), r2)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000125bd7000fddbdf2549000000080001001700000008000300", @ANYRES32=r5, @ANYRES64=r3], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000001)
socket$netlink(0x10, 0x3, 0x10) (async)
socket$netlink(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x50) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(0x3)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0) (async)
r7 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0xbf, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x5, 0x8, 0x18, 0xa, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xbc5100, 0x0)
close(r11)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
socket$kcm(0x11, 0x3, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)

726.748994ms ago: executing program 1 (id=1791):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180", 0x38}, {&(0x7f0000000340)="f96bb755b40a77d6d9902373076976c1c35626c55117a6553bc462cc8f6e156c5fc2a1db018f9bbb17c786034d64f3ec25f2548fc1e7e012451510f5ef4c58493bb5ff9e565b299ee50c642da7150bdffe98c57c1d8713e876416930baff160fc59af3bed0b5daa61b88587e0b28db8765d0e91088e979c548fe024074a4a4ae6576e5db79b93d1161b7d7bbba4e401fafec8572fecaa81613d8ac4de939806966d48a55e596d125613d", 0xaa}, {&(0x7f0000000400)="ff70eb2fa56dda68f0f6cf6ea498b51d5812852d9ee18699ac8371efe98f9b1bdd0ffdfe79acf1258bd012bd2151bd7cd4f420e42ced89ec32c90c9df85d3caed88c8613131963e87debec5f633e30983497d84fede7ebb9d6cbd1d6d5fe3c2967138b4a6b78d5a620e31eb0d3adc08d4777e96f0afc24bb3211e4016a66b6ba84b9d0f0fcf1846640beceadc2d1d6ec3d29ef", 0x93}], 0x3}, 0x4044004)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e34, @multicast2}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r2, 0x29, 0x49, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a)

725.962255ms ago: executing program 2 (id=1792):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x8}, 0x1c) (async)
recvmmsg(r0, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x1, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async, rerun: 32)
r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$netlink(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)={0x34, 0x13, 0x1, 0x70bd2a, 0x25dfdbf8, "", [@nested={0x4, 0x4f}, @typed={0x8, 0x33, 0x0, 0x0, @fd}, @nested={0x18, 0x125, 0x0, 0x1, [@typed={0x14, 0x29, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x34}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32)
r3 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 64)
write$tun(r1, &(0x7f0000000340)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x4a) (async, rerun: 64)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a1c010000180a05000000000000000000010000090c00054000000000000000010900020073797a31000000000000054000000000000000030c000380080002400000000008000740000000021c000380180003801400010070696d726567300000000000000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657875686472000024000280080001400000000cf5fe02008300000008000440000000220500020089000000380001800c000100626974776973650028000280080003400000000408000140000000140800024000000012040005800800048004000100000002800000020073797a3100000000000003400000000400000340000000010000020073797a320000000000000180ffffffff000001003ace098de3d5b28982047d2842ff86bf62fb364d8eea259355a0033fd40fc47588e530c4291490b7ef5ab4dc3c841c8b1e10de909a33efe78374207d510c7450a0c9cb2a234a3c26ad3d006aa90d9a3bbcae0919371062950fdb98f764fc76f0ebc764974f6db0388252a4a4469b00000000028000000180fffffffd000002800000020073797a30000000000000020073797a300000000000000180fffffffe0000034000000003000003400000000300000340000000030000020073797a30000000000000020073797a300000000000000180fffffffe000002800000034000000002000003400000000200000180ffffffff00000180ffffffff000001002d13cd83d6d73de053ebed689b1f35e68fb25dabb8088efd451b4e136794dfe45a1b1b9f9bf86a6b6478061fb0948507f19e3657ac8fdb9622aabd78ce1d3949eaba33db4c9ee7848772d66d2ff2d4f3262dc44a0900010073797a3000000000140000001100010000000000000000000000000a6f025122b7722cbaba9aae9a1ed2155cfc018493d733fb3d88bf498d83df76384bfef33982f0d475e596aede72cf8e46fee83fc6186cfd96e68a62062368c9753e8f01b22717853ad2dfac119746cc431d5f9a9e08353cba9ab71c8f2f"], 0x208}}, 0x0) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000780)=ANY=[@ANYRES16], 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x3, 0x1, 0x0, 0x8}, 0x0) (async)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r7, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0)
ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) (async)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731315806f1301"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async, rerun: 64)
bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x11}, 0x11) (async, rerun: 64)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x3, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4040080)
sendto$inet(r8, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10)
recvmmsg(r8, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000120, 0x0)

638.328699ms ago: executing program 2 (id=1793):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r7=>0x0})
sendto$packet(r6, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x5, 0x4) (async)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a)

529.540319ms ago: executing program 2 (id=1795):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0xe, 0x0, &(0x7f0000000680)="00882bd0269cd8209319417b6ca6", 0x0, 0x0, 0x0, 0xb9, 0x0, &(0x7f0000000a40)="d580a67cd67831c9f16041b021b29fb3183fff11edb3d73df0548a9ca5d9bdf23cadf9255b0689c039f35371fe0f709b536d0b0901193c19d3c0a1b38c7fd63ebb2b20d9ae7b403f05ca637e344c29200f863c642d3fb488450c0e4d4a8b5b529d647e44c68cd9758b79a36622ac8d49c011ec34f60ba673d8626fc1f1669b6a47a02a79eb6c8bb7d05007d6ed2467d7173a2f5207599a9d0c255ab64ea1bc8cd350db318477bbcb01c58945f1a0220f05349d8b024e5e8d65", 0x0}, 0x50)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'ip6tnl0\x00'})
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe6b, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffbc, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0xffffffff, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0x1001, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x1, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x4, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x3, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x3, 0x40007023, 0x1ff, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x10001, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x1, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x8, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0x9, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x55, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0xf9, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x2, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x7, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d3, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xebd8}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="4be88fa3027b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0xff, @local, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x71, 0x7}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x3, 0x1, 0x0, 0x8}, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100))
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731315806f1301"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendto$inet(r4, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10)
r6 = socket$inet6_icmp(0xa, 0x2, 0x3a)
getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x486, &(0x7f0000000340), &(0x7f0000000680)=0xc)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, &(0x7f0000000200)=0x20)
recvmmsg(r4, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000120, 0x0)

428.449985ms ago: executing program 0 (id=1797):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180", 0x38}], 0x1}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x44810)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xc8, 0x1, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa8}, @CTA_EXPECT_MASTER={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c045)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2f0000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e621a63f1}, 0x4000010)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a)

258.847016ms ago: executing program 0 (id=1798):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd70395cdbdf987000000008000300", @ANYRES32=r5], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4004004)
sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r1, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000884)
syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @random="a9d7918181aa", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x20, 0x0, 0x68, 0x0, 0x0, 0x89, 0x0, @empty, @dev, {[@timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {@local}, {@empty}, {@dev}, {@broadcast}, {@dev}]}, @end]}}}}}}}, 0x0)

254.514985ms ago: executing program 0 (id=1799):
syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2030000aaaaaaaaaa0086dd6001010000081100fc020000000000000000000000000000ff02000000000017040000000000000100004e2200089078"], 0x0)

254.068422ms ago: executing program 0 (id=1800):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$nci(0xffffffffffffffff, 0x0, 0x4)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x44094, &(0x7f0000000500)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a580000000c0a3d0100000000000000150a0000060900020073797a31000000000900010073797a31000000002c0003801c0000840c00018006000100d10300000c000440000000002df31ab30c000080080003400000000214000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000800010000000000140000004500801614000000000190780a010100ac14147ec26a359dfa3684b0aa0400907800000000450000000000001100110000ac1414aa7f000001"], 0xfdef)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20008090)
close(0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r8, 0x20, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x8080)
r9 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
close(r9)
sendmsg$IPVS_CMD_SET_INFO(r5, 0x0, 0x0)
getsockname$packet(r5, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0)

79.688667ms ago: executing program 0 (id=1801):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
syz_emit_ethernet(0x52, &(0x7f0000000500)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9eebf9", 0x18, 0x6, 0xff, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0x4e22, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x10, 0x1, 0x0, 0xffd, {[@eol]}}}}}}}}, 0x0)

0s ago: executing program 0 (id=1802):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
accept$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f0000000300)=0x1c)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x6d47}], 0x1}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0x7, 0x2)
ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000080)=0x1)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r5, &(0x7f0000001ec0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x65, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, {[@timestamp_prespec={0x44, 0x4, 0xbe, 0x3, 0xe}]}}, {0x4e20, 0x4e20, 0x4d, 0x0, @gue={{0x1, 0x1, 0x3, 0x7, 0x100, @void}, "e24f82d681079ea7a4e87616ec93ff3299ed88d29741d161f504c73dcab29b8c8bb6bd8ee37e9d73eacb24c20d9d92e5f83e219b0692a1a8fb9c1dea766ac3456d"}}}}, 0x73)
syz_80211_join_ibss(&(0x7f00000001c0)='wlan0\x00', &(0x7f0000000200)=@random="7be1a9ec3cae37886f", 0x9, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000457470d901855bd6bb0700", @ANYRES16=r3, @ANYBLOB="00042abd7000fcdbdf251400000008000300", @ANYRES32=r7, @ANYBLOB="06001401050000000800a4000200000006001401020000000600140102000000050029000a000000060036000600000006001201ff7f00001000bd000500020000b8070006000010"], 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x20004810)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a01"], 0x24}}, 0x0)
bind$tipc(r1, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:64460' (ED25519) to the list of known hosts.
syzkaller login: [   48.300882][ T5537] cgroup: Unknown subsys name 'net'
[   48.380792][ T5537] cgroup: Unknown subsys name 'cpuset'
[   48.390997][ T5537] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.637831][ T5537] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.208132][ T5609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.211229][ T5609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.214145][ T5609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.217342][ T5609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.219948][ T5609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.249021][ T5609] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.253312][ T5609] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.256650][ T5609] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.261834][ T5609] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.265716][ T5609] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.279484][ T5616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.283801][ T5616] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.291866][ T5616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.296466][ T5616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.300263][ T5616] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.683004][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.686752][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.690143][ T5606] bridge_slave_0: entered allmulticast mode
[   53.693345][ T5606] bridge_slave_0: entered promiscuous mode
[   53.709143][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.711892][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.714257][ T5606] bridge_slave_1: entered allmulticast mode
[   53.717035][ T5606] bridge_slave_1: entered promiscuous mode
[   53.739021][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.755593][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.792170][ T5606] team0: Port device team_slave_0 added
[   53.810376][ T5606] team0: Port device team_slave_1 added
[   53.840138][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.842505][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.850410][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.868148][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.870480][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.878657][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.897243][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.900410][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.902954][ T5612] bridge_slave_0: entered allmulticast mode
[   53.905614][ T5612] bridge_slave_0: entered promiscuous mode
[   53.922787][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.925125][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.927730][ T5612] bridge_slave_1: entered allmulticast mode
[   53.930603][ T5612] bridge_slave_1: entered promiscuous mode
[   53.968484][ T5606] hsr_slave_0: entered promiscuous mode
[   53.971209][ T5606] hsr_slave_1: entered promiscuous mode
[   53.975413][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.990239][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.001111][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.003591][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.005940][ T5614] bridge_slave_0: entered allmulticast mode
[   54.009328][ T5614] bridge_slave_0: entered promiscuous mode
[   54.047596][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.050503][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.053236][ T5614] bridge_slave_1: entered allmulticast mode
[   54.056172][ T5614] bridge_slave_1: entered promiscuous mode
[   54.060593][ T5612] team0: Port device team_slave_0 added
[   54.079766][ T5612] team0: Port device team_slave_1 added
[   54.106683][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.126513][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.141611][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.144568][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.155197][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.172852][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.175680][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.184706][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.199081][ T5614] team0: Port device team_slave_0 added
[   54.210963][ T5614] team0: Port device team_slave_1 added
[   54.228530][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.231338][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.242123][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.257803][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.260533][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.270111][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.295350][ T5612] hsr_slave_0: entered promiscuous mode
[   54.299678][ T5612] hsr_slave_1: entered promiscuous mode
[   54.301793][ T5612] debugfs: 'hsr0' already exists in 'hsr'
[   54.303656][ T5612] Cannot create hsr debugfs directory
[   54.346061][ T5614] hsr_slave_0: entered promiscuous mode
[   54.349283][ T5614] hsr_slave_1: entered promiscuous mode
[   54.352187][ T5614] debugfs: 'hsr0' already exists in 'hsr'
[   54.354559][ T5614] Cannot create hsr debugfs directory
[   54.429085][ T5606] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.438653][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   54.453963][ T5606] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.458918][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   54.478445][ T5606] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.484774][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   54.511787][ T5606] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.519234][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   54.635188][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.647343][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   54.650331][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.654852][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   54.657970][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.663147][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   54.668907][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.673077][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   54.739282][ T5614] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.743631][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   54.751796][ T5614] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.756051][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   54.760181][ T5614] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.764086][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   54.772323][ T5614] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.776251][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   54.801108][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.833434][ T5606] 8021q: adding VLAN 0 to HW filter on device team0
[   54.848566][   T81] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.851825][   T81] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.869962][   T81] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.873006][   T81] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.890354][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.907526][ T5612] 8021q: adding VLAN 0 to HW filter on device team0
[   54.920809][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.923124][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.936220][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.938504][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.965017][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.994662][ T5614] 8021q: adding VLAN 0 to HW filter on device team0
[   55.008692][ T3408] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.010977][ T3408] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.028926][   T81] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.031325][   T81] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.249057][   T54] Bluetooth: hci0: command tx timeout
[   55.312883][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.328852][   T54] Bluetooth: hci2: command tx timeout
[   55.336869][   T54] Bluetooth: hci1: command tx timeout
[   55.394938][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.440816][ T5612] veth0_vlan: entered promiscuous mode
[   55.489050][ T5612] veth1_vlan: entered promiscuous mode
[   55.502706][ T5606] veth0_vlan: entered promiscuous mode
[   55.518168][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.521673][ T5606] veth1_vlan: entered promiscuous mode
[   55.560425][ T5606] veth0_macvtap: entered promiscuous mode
[   55.566179][ T5612] veth0_macvtap: entered promiscuous mode
[   55.574680][ T5606] veth1_macvtap: entered promiscuous mode
[   55.593466][ T5612] veth1_macvtap: entered promiscuous mode
[   55.599365][ T5614] veth0_vlan: entered promiscuous mode
[   55.611806][ T5614] veth1_vlan: entered promiscuous mode
[   55.620812][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.628190][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.634373][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.640701][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.660000][ T5686] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.663628][ T5686] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.675537][ T5686] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.690990][ T5686] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.696030][ T5686] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.715536][ T5686] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.719962][ T5686] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.735652][ T5686] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.803576][ T5614] veth0_macvtap: entered promiscuous mode
[   55.820302][ T5614] veth1_macvtap: entered promiscuous mode
[   55.837745][ T3408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.847571][ T3408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.871800][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.878657][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.900720][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.921865][ T3408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.926673][ T3408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.929979][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.940488][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.944820][ T5686] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.949175][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.952806][ T5686] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.958660][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.981797][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.040257][ T5606] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.074800][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.090383][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.125829][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.133894][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.178881][ T5723] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET)
[   56.238217][    T9] IPVS: starting estimator thread 0...
[   56.326429][ T5727] IPVS: using max 80 ests per chain, 192000 per kthread
[   57.119134][ T5747] xt_hashlimit: size too large, truncated to 1048576
[   57.178302][ T5750] xt_hashlimit: size too large, truncated to 1048576
[   57.274850][ T5754] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[   57.316704][ T5759] syzkaller1: entered promiscuous mode
[   57.318553][ T5759] syzkaller1: entered allmulticast mode
[   57.326607][   T54] Bluetooth: hci0: command tx timeout
[   57.343937][ T5756] Zero length message leads to an empty skb
[   57.408061][ T5616] Bluetooth: hci2: command tx timeout
[   57.412193][   T54] Bluetooth: hci1: command tx timeout
[   58.114760][ T5770] netlink: 'syz.0.13': attribute type 1 has an invalid length.
[   58.118065][ T5770] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   58.122954][ T5770] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13'.
[   58.126639][ T5770] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13'.
[   58.673987][ T5801] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.24'.
[   58.914670][ T5822] syzkaller1: entered promiscuous mode
[   58.917785][ T5822] syzkaller1: entered allmulticast mode
[   58.968861][ T5818] netlink: 'syz.1.29': attribute type 1 has an invalid length.
[   58.971351][ T5818] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.124169][ T5830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.31'.
[   59.166115][   T56] block nbd0: Receive control failed (result -1)
[   59.407345][ T5616] Bluetooth: hci0: command tx timeout
[   59.487680][ T5616] Bluetooth: hci2: command tx timeout
[   59.496746][ T5616] Bluetooth: hci1: command tx timeout
[   59.523399][ T5842] xt_hashlimit: size too large, truncated to 1048576
[   59.965311][ T5849] netlink: 56 bytes leftover after parsing attributes in process `syz.1.34'.
[   60.016371][ T5851] syzkaller1: entered promiscuous mode
[   60.018725][ T5851] syzkaller1: entered allmulticast mode
[   60.147246][ T5860] TCP: TCP_TX_DELAY enabled
[   60.161943][ T5860] xt_hashlimit: size too large, truncated to 1048576
[   60.231101][ T5870] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[   60.242835][ T5870] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[   60.248504][ T5870] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[   60.352887][ T5882] Bluetooth: MGMT ver 1.23
[   60.360837][ T5880] syzkaller1: entered promiscuous mode
[   60.363015][ T5880] syzkaller1: entered allmulticast mode
[   61.214146][ T5896] netlink: 'syz.2.46': attribute type 1 has an invalid length.
[   61.220124][ T5896] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   61.293094][ T5898] netlink: 'syz.0.47': attribute type 1 has an invalid length.
[   61.295500][ T5898] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   61.486777][ T5616] Bluetooth: hci0: command tx timeout
[   61.568473][ T5616] Bluetooth: hci1: command tx timeout
[   61.569543][   T54] Bluetooth: hci2: command tx timeout
[   61.719887][ T5909] netlink: 240 bytes leftover after parsing attributes in process `syz.1.50'.
[   62.228446][ T5922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'.
[   62.229309][ T5923] netlink: 'syz.2.54': attribute type 4 has an invalid length.
[   62.400940][ T5933] Dead loop on virtual device ip6_vti0 (net 27), fix it urgently!
[   62.556403][ T5942] 5n: entered promiscuous mode
[   62.623377][ T5948] netlink: 'syz.1.63': attribute type 4 has an invalid length.
[   62.675608][ T5955] xt_hashlimit: size too large, truncated to 1048576
[   62.807149][ T5960] netlink: 210768 bytes leftover after parsing attributes in process `syz.1.66'.
[   62.851802][ T5962] syzkaller1: entered promiscuous mode
[   62.853723][ T5962] syzkaller1: entered allmulticast mode
[   63.254359][ T5964] syzkaller1: entered promiscuous mode
[   63.256622][ T5964] syzkaller1: entered allmulticast mode
[   63.370213][ T5966] netlink: 28 bytes leftover after parsing attributes in process `syz.0.69'.
[   63.376072][ T5966] xt_hashlimit: size too large, truncated to 1048576
[   63.503108][ T5977] xt_hashlimit: size too large, truncated to 1048576
[   63.663584][ T5989] syzkaller1: entered promiscuous mode
[   63.665513][ T5989] syzkaller1: entered allmulticast mode
[   63.835717][ T5998] netlink: 28 bytes leftover after parsing attributes in process `syz.2.77'.
[   64.068789][ T6015] netlink: 28 bytes leftover after parsing attributes in process `syz.1.83'.
[   64.431314][ T6017] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[   64.431323][ T6018] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[   64.598319][ T6022] xt_hashlimit: size too large, truncated to 1048576
[   64.714911][ T6028] netlink: 'syz.0.88': attribute type 1 has an invalid length.
[   64.731166][ T6028] bond1 (unregistering): Released all slaves
[   64.781199][ T6031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.89'.
[   64.791838][ T6031] xt_hashlimit: size too large, truncated to 1048576
[   64.880561][ T6036] syzkaller1: entered promiscuous mode
[   64.884296][ T6036] syzkaller1: entered allmulticast mode
[   64.904082][ T6040] netlink: 40 bytes leftover after parsing attributes in process `syz.1.91'.
[   64.950588][ T6043] nftables ruleset with unbound set
[   65.152080][ T6052] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.155142][ T6052] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.255030][ T6052] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.273904][ T6052] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.401212][ T5686] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.408589][ T5686] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.418335][ T5686] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.424461][ T5686] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.871635][ T6076] netlink: 'syz.1.97': attribute type 1 has an invalid length.
[   65.874111][ T6076] netlink: 'syz.1.97': attribute type 4 has an invalid length.
[   65.876898][ T6076] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.97'.
[   65.879994][ T6076] netlink: 'syz.1.97': attribute type 1 has an invalid length.
[   65.882465][ T6076] netlink: 'syz.1.97': attribute type 4 has an invalid length.
[   65.884881][ T6076] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.97'.
[   65.944302][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.98'.
[   65.944345][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.98'.
[   65.947805][ T6078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.98'.
[   65.957472][ T6078] geneve2: entered promiscuous mode
[   65.959440][ T6078] geneve2: entered allmulticast mode
[   66.128886][ T6089] syzkaller0: entered promiscuous mode
[   66.133014][ T6089] syzkaller0: entered allmulticast mode
[   66.548713][   T24] IPVS: starting estimator thread 0...
[   66.638916][ T6121] IPVS: using max 80 ests per chain, 192000 per kthread
[   66.690963][ T6138] syzkaller0: entered promiscuous mode
[   66.692717][ T6138] syzkaller0: entered allmulticast mode
[   66.701767][ T6138] syzkaller1: entered promiscuous mode
[   66.703516][ T6138] syzkaller1: entered allmulticast mode
[   67.538410][ T6162] syzkaller0: entered promiscuous mode
[   67.540223][ T6162] syzkaller0: entered allmulticast mode
[   67.630793][ T6166] xt_hashlimit: size too large, truncated to 1048576
[   67.669457][ T6168] netlink: 'syz.2.122': attribute type 7 has an invalid length.
[   67.676166][ T6168] netlink: 'syz.2.122': attribute type 8 has an invalid length.
[   67.760373][ T6175] vxcan2: entered allmulticast mode
[   67.764905][ T6178] xt_hashlimit: size too large, truncated to 1048576
[   67.773670][ T6176] vxcan2: entered allmulticast mode
[   67.794421][ T6180] xt_hashlimit: size too large, truncated to 1048576
[   67.911782][ T6203] syzkaller1: entered promiscuous mode
[   67.913761][ T6203] syzkaller1: entered allmulticast mode
[   67.940993][ T6205] netlink: 'syz.2.132': attribute type 3 has an invalid length.
[   67.944683][ T6205] netlink: 'syz.2.132': attribute type 11 has an invalid length.
[   68.010799][ T6216] xt_hashlimit: size too large, truncated to 1048576
[   68.031084][ T5686] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   68.235393][ T6240] xt_hashlimit: size too large, truncated to 1048576
[   68.256084][ T6243] warning: `syz.1.139' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   68.266934][ T6243] Driver unsupported XDP return value 0 on prog  (id 83) dev N/A, expect packet loss!
[   68.705029][ T6253] __nla_validate_parse: 8 callbacks suppressed
[   68.705042][ T6253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.142'.
[   69.109006][ T6262] syzkaller1: entered promiscuous mode
[   69.111493][ T6262] syzkaller1: entered allmulticast mode
[   70.934795][ T6205] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   70.998816][ T6268] syzkaller1: entered promiscuous mode
[   71.002791][ T6268] syzkaller1: entered allmulticast mode
[   71.080945][ T6277] netlink: zone id is out of range
[   71.083187][ T6277] netlink: zone id is out of range
[   71.084952][ T6277] netlink: zone id is out of range
[   71.087375][ T6277] netlink: zone id is out of range
[   71.089014][ T6277] netlink: zone id is out of range
[   71.091208][ T6277] netlink: zone id is out of range
[   71.092918][ T6277] netlink: zone id is out of range
[   71.094603][ T6277] netlink: zone id is out of range
[   71.097459][ T6277] netlink: zone id is out of range
[   71.100681][ T6277] netlink: zone id is out of range
[   71.137506][ T6061] IPVS: starting estimator thread 0...
[   71.246397][ T6284] IPVS: using max 80 ests per chain, 192000 per kthread
[   71.319130][ T6300] netlink: 28 bytes leftover after parsing attributes in process `syz.0.155'.
[   71.754008][ T6323] netlink: 64 bytes leftover after parsing attributes in process `syz.2.164'.
[   71.759419][ T6323] netlink: 'syz.2.164': attribute type 4 has an invalid length.
[   71.762112][ T6323] netlink: 'syz.2.164': attribute type 4 has an invalid length.
[   72.148991][ T6331] syzkaller1: entered promiscuous mode
[   72.151533][ T6331] syzkaller1: entered allmulticast mode
[   72.172291][ T6333] netlink: 'syz.0.166': attribute type 1 has an invalid length.
[   72.313444][ T6346] netem: change failed
[   72.412037][ T6351] syzkaller1: entered promiscuous mode
[   72.414352][ T6351] syzkaller1: entered allmulticast mode
[   72.791676][ T6380] xt_hashlimit: size too large, truncated to 1048576
[   73.643634][ T6385] syzkaller1: entered promiscuous mode
[   73.645755][ T6385] syzkaller1: entered allmulticast mode
[   75.143582][ T6333] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   75.225742][ T6393] netlink: 4244 bytes leftover after parsing attributes in process `syz.2.184'.
[   75.248129][ T6395] nbd: must specify a device to reconfigure
[   75.254215][ T6398] xt_hashlimit: max too large, truncated to 1048576
[   75.259406][ T6398] Cannot find set identified by id 1 to match
[   75.451362][ T6413] xt_hashlimit: size too large, truncated to 1048576
[   75.543315][ T6420] xt_hashlimit: size too large, truncated to 1048576
[   75.713692][ T6433] netlink: 52 bytes leftover after parsing attributes in process `syz.0.194'.
[   75.716841][ T6431] netlink: 28 bytes leftover after parsing attributes in process `syz.1.193'.
[   75.722183][ T6433] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.725538][ T6433] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.742809][ T6433] netlink: 76 bytes leftover after parsing attributes in process `syz.0.194'.
[   75.746965][ T6433] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.749580][ T6433] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.753242][ T6433] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.755996][ T6433] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.761501][ T6433] netlink: 52 bytes leftover after parsing attributes in process `syz.0.194'.
[   75.767310][ T6433] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.769661][ T6433] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.779816][ T6433] netlink: 28 bytes leftover after parsing attributes in process `syz.0.194'.
[   75.783294][ T6433] netlink: 32 bytes leftover after parsing attributes in process `syz.0.194'.
[   75.786169][ T6433] netlink: 28 bytes leftover after parsing attributes in process `syz.0.194'.
[   76.249134][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'.
[   76.251960][ T6448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.198'.
[   76.260364][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   76.263637][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   76.267985][ T5686] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   76.276047][ T5686] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   76.323644][ T6455] xt_hashlimit: size too large, truncated to 1048576
[   76.352702][ T6455] xt_hashlimit: size too large, truncated to 1048576
[   76.379413][ T6455] xt_hashlimit: size too large, truncated to 1048576
[   76.413183][ T6455] xt_hashlimit: size too large, truncated to 1048576
[   76.435195][ T6455] xt_hashlimit: size too large, truncated to 1048576
[   76.459380][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[   76.465109][ T6455] xt_hashlimit: size too large, truncated to 1048576
[   76.489513][ T6455] xt_hashlimit: size too large, truncated to 1048576
[   76.989437][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   79.792102][ T6496] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   79.904879][ T6540] hashlimit_mt_check_common: 31 callbacks suppressed
[   79.904890][ T6540] xt_hashlimit: size too large, truncated to 1048576
[   79.952571][ T6541] netlink: 'syz.2.210': attribute type 1 has an invalid length.
[   79.955550][ T6541] net_ratelimit: 110 callbacks suppressed
[   79.955562][ T6541] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.612911][ T6581] __nla_validate_parse: 6 callbacks suppressed
[   80.612920][ T6581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.222'.
[   80.619263][ T6581] netlink: 7 bytes leftover after parsing attributes in process `syz.0.222'.
[   80.639140][ T6582] netlink: 136 bytes leftover after parsing attributes in process `syz.1.220'.
[   80.649095][ T6572] netlink: 136 bytes leftover after parsing attributes in process `syz.1.220'.
[   80.743467][ T6587] smc: net device wlan0 applied user defined pnetid SYZ0
[   80.756751][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.224'.
[   80.759827][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.224'.
[   80.946501][ T6595] x_tables: duplicate underflow at hook 1
[   80.961022][ T6595] netlink: 'syz.2.225': attribute type 1 has an invalid length.
[   80.969209][ T6595] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.313401][ T6602] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048)
[   81.474172][ T6611] syzkaller1: entered promiscuous mode
[   81.478973][ T6611] syzkaller1: entered allmulticast mode
[   81.575922][ T6616] nftables ruleset with unbound chain
[   81.646724][ T6620] netlink: 240 bytes leftover after parsing attributes in process `syz.1.231'.
[   82.434399][ T6635] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.237'.
[   82.692972][ T6646] syzkaller1: entered promiscuous mode
[   82.695264][ T6646] syzkaller1: entered allmulticast mode
[   82.700142][ T6646] netlink: 24 bytes leftover after parsing attributes in process `syz.2.241'.
[   82.825192][ T6651] xt_hashlimit: size too large, truncated to 1048576
[   82.857317][ T6651] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   82.954176][ T6658] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   83.163093][ T6675] netlink: 28 bytes leftover after parsing attributes in process `syz.2.248'.
[   83.166868][ T6675] netlink: 'syz.2.248': attribute type 6 has an invalid length.
[   83.179723][ T6676] syzkaller1: entered promiscuous mode
[   83.183011][ T6676] syzkaller1: entered allmulticast mode
[   83.195046][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.200920][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.665910][ T6696] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.701025][ T6696] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.705200][ T6696] 8021q: adding VLAN 0 to HW filter on device team0
[   83.713807][ T6696] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.748015][ T6696] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.752802][ T6696] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.763024][ T1037] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.766089][ T1037] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.770982][ T1037] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.773931][ T1037] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.881172][ T6699] Cannot find add_set index 0 as target
[   83.929878][ T6702] syzkaller1: entered promiscuous mode
[   83.932380][ T6702] syzkaller1: entered allmulticast mode
[   84.158964][ T6707] syzkaller1: entered promiscuous mode
[   84.161099][ T6707] syzkaller1: entered allmulticast mode
[   84.409759][ T6716] netlink: 'syz.2.263': attribute type 3 has an invalid length.
[   84.441988][ T6716] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   84.698577][ T6729] syzkaller1: entered allmulticast mode
[   84.756694][ T6731] xt_hashlimit: size too large, truncated to 1048576
[   85.290589][ T6745] netlink: 'syz.2.269': attribute type 1 has an invalid length.
[   85.346872][ T6745] bond1: entered promiscuous mode
[   85.349727][ T6745] 8021q: adding VLAN 0 to HW filter on device bond1
[   85.365713][ T6746] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[   85.683658][ T6765] xt_hashlimit: size too large, truncated to 1048576
[   85.738603][ T6768] netlink: 'syz.0.274': attribute type 1 has an invalid length.
[   85.779063][ T6768] 8021q: adding VLAN 0 to HW filter on device bond1
[   85.797258][ T6765] bond1: (slave ip6gretap1): making interface the new active one
[   85.802275][ T6765] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[   85.808120][ T6771] xt_hashlimit: size too large, truncated to 1048576
[   85.881671][ T6774] syzkaller1: entered promiscuous mode
[   85.886277][ T6774] syzkaller1: entered allmulticast mode
[   86.003659][ T6777] __nla_validate_parse: 4 callbacks suppressed
[   86.003669][ T6777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.277'.
[   86.012707][ T5686] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   86.012854][ T6777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.277'.
[   86.021250][ T5686] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   86.024616][ T5686] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   86.031017][ T5686] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   86.114935][ T6784] syzkaller0: entered promiscuous mode
[   86.117122][ T6784] syzkaller0: entered allmulticast mode
[   86.389696][ T6788] bond2: option updelay: invalid value (18446744073709518847)
[   86.393834][ T6788] bond2: option updelay: allowed values 0 - 2147483647
[   86.399470][ T6788] bond2 (unregistering): Released all slaves
[   86.402974][ T6791] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.282'.
[   86.425428][ T6792] netlink: 'syz.0.281': attribute type 1 has an invalid length.
[   86.519655][ T6802] bond2: entered promiscuous mode
[   86.521392][ T6802] bond2: entered allmulticast mode
[   86.523310][ T6802] 8021q: adding VLAN 0 to HW filter on device bond2
[   86.606917][ T6811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'.
[   86.697288][  T918] cfg80211: failed to load regulatory.db
[   87.183392][ T6840] netlink: 28 bytes leftover after parsing attributes in process `syz.1.293'.
[   87.274063][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.296'.
[   87.645415][ T6870] netlink: 152 bytes leftover after parsing attributes in process `syz.0.302'.
[   87.681951][ T6872] syzkaller1: entered promiscuous mode
[   87.683912][ T6872] syzkaller1: entered allmulticast mode
[   88.410625][ T6882] netlink: 24 bytes leftover after parsing attributes in process `syz.2.306'.
[   88.550554][ T6888] netlink: 'syz.0.307': attribute type 1 has an invalid length.
[   88.553861][ T6888] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.687949][ T6892] netlink: 32 bytes leftover after parsing attributes in process `syz.2.309'.
[   88.703962][ T6892] netlink: 24 bytes leftover after parsing attributes in process `syz.2.309'.
[   89.615275][ T6917] tipc: Can't bind to reserved service type 0
[   89.771854][ T6925] syzkaller1: entered promiscuous mode
[   89.775040][ T6925] syzkaller1: entered allmulticast mode
[   89.780819][ T6925] netlink: 'syz.1.317': attribute type 298 has an invalid length.
[   89.818745][ T6926] netlink: 'syz.2.318': attribute type 1 has an invalid length.
[   89.824837][ T6926] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.940385][ T6928] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   89.944287][ T6928] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   90.351491][ T6934] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[   90.727095][ T6939] syzkaller0: entered promiscuous mode
[   90.729281][ T6939] syzkaller0: entered allmulticast mode
[   90.993218][ T6955] netlink: 'syz.1.326': attribute type 3 has an invalid length.
[   91.278177][ T6961] __nla_validate_parse: 1 callbacks suppressed
[   91.278186][ T6961] netlink: 16 bytes leftover after parsing attributes in process `syz.2.328'.
[   91.568708][ T6972] netlink: 'syz.1.330': attribute type 11 has an invalid length.
[   92.359100][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.330'.
[   92.501350][ T6984] xt_hashlimit: size too large, truncated to 1048576
[   92.501767][ T6988] netlink: 'syz.2.334': attribute type 1 has an invalid length.
[   92.506074][ T6988] netlink: 240 bytes leftover after parsing attributes in process `syz.2.334'.
[   92.597477][ T6996] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[   92.867677][ T7014] netlink: 'syz.1.341': attribute type 1 has an invalid length.
[   93.004500][ T7033] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[   93.033932][ T7037] netlink: 44 bytes leftover after parsing attributes in process `syz.2.345'.
[   93.084973][ T7040] netlink: 24 bytes leftover after parsing attributes in process `syz.0.346'.
[   93.137901][ T7042] IPv6: NLM_F_CREATE should be specified when creating new route
[   93.171278][ T7044] syzkaller1: entered promiscuous mode
[   93.173014][ T7044] syzkaller1: entered allmulticast mode
[   93.379466][ T7068] syzkaller1: entered promiscuous mode
[   93.381607][ T7068] syzkaller1: entered allmulticast mode
[   93.938914][ T7082] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.950894][ T7082] xt_hashlimit: size too large, truncated to 1048576
[   94.077824][ T7086] netlink: 36 bytes leftover after parsing attributes in process `syz.0.359'.
[   94.431235][ T7105] netlink: 'syz.2.364': attribute type 1 has an invalid length.
[   94.435330][ T7105] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.492496][ T7106] tipc: Enabling <eth:lo> not permitted
[   94.495808][ T7106] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[   95.223852][ T7114] netlink: 128 bytes leftover after parsing attributes in process `syz.1.367'.
[   95.239896][ T7114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   95.264416][ T7114] netlink: 'syz.1.367': attribute type 4 has an invalid length.
[   95.315144][ T7117] syzkaller1: entered promiscuous mode
[   95.327375][ T7117] syzkaller1: entered allmulticast mode
[   95.468971][ T7130] netlink: 5 bytes leftover after parsing attributes in process `syz.2.373'.
[   95.475853][ T7131] xt_hashlimit: size too large, truncated to 1048576
[   95.488964][ T7130] netlink: 'syz.2.373': attribute type 3 has an invalid length.
[   95.492987][ T7130] netlink: 'syz.2.373': attribute type 3 has an invalid length.
[   95.566960][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'.
[   95.583831][ T7140] netlink: 24 bytes leftover after parsing attributes in process `syz.0.376'.
[   95.658680][ T7130] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[   95.719003][ T7149] netlink: 'syz.2.379': attribute type 1 has an invalid length.
[   95.793842][ T7149] 8021q: adding VLAN 0 to HW filter on device bond2
[   95.812980][ T7149] macvlan2: entered promiscuous mode
[   95.815782][ T7149] macvlan2: entered allmulticast mode
[   96.002262][ T7174] xt_hashlimit: size too large, truncated to 1048576
[   96.045303][ T7174] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[   96.059975][ T7174] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   96.224787][ T7193] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20000
[   96.241709][ T7194] xt_hashlimit: size too large, truncated to 1048576
[   97.201878][ T7220] xt_hashlimit: size too large, truncated to 1048576
[   97.272314][ T7223] __nla_validate_parse: 4 callbacks suppressed
[   97.272331][ T7223] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.399'.
[   97.428744][ T7231] ieee802154 phy1 wpan1: encryption failed: -22
[   97.535145][ T7245] syzkaller1: entered promiscuous mode
[   97.859435][ T7288] netlink: 'syz.1.416': attribute type 1 has an invalid length.
[   97.861842][ T7288] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.969103][ T7283] xt_hashlimit: size too large, truncated to 1048576
[   98.133384][ T7295] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[   98.249663][ T7301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.420'.
[   98.293768][ T7301] raw_sendmsg: syz.2.420 forgot to set AF_INET. Fix it!
[   98.299558][ T7301] netlink: 'syz.2.420': attribute type 4 has an invalid length.
[   98.491357][ T7310] syzkaller0: entered promiscuous mode
[   98.493729][ T7310] syzkaller0: entered allmulticast mode
[   98.724865][ T7318] netlink: 220 bytes leftover after parsing attributes in process `syz.1.426'.
[   98.743084][ T7320] netlink: 220 bytes leftover after parsing attributes in process `syz.1.426'.
[   98.752792][ T7319] xt_hashlimit: size too large, truncated to 1048576
[   98.763886][ T7318] netlink: 'syz.1.426': attribute type 1 has an invalid length.
[   98.766730][ T7322] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   98.771155][ T7318] netlink: 108 bytes leftover after parsing attributes in process `syz.1.426'.
[   99.042314][ T7341] syzkaller1: entered promiscuous mode
[   99.044853][ T7341] syzkaller1: entered allmulticast mode
[   99.868372][ T7362] syzkaller1: entered promiscuous mode
[   99.969969][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.436'.
[  100.110953][ T7377] netlink: 'syz.1.440': attribute type 10 has an invalid length.
[  100.129762][ T7377] team0: Failed to send options change via netlink (err -105)
[  100.132217][ T7377] team0: Port device dummy0 added
[  100.299813][ T7395] netlink: 68 bytes leftover after parsing attributes in process `syz.1.446'.
[  100.363323][ T7403] netlink: 'syz.2.447': attribute type 1 has an invalid length.
[  100.366658][ T7403] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.467619][ T7405] netlink: 68 bytes leftover after parsing attributes in process `syz.1.449'.
[  101.324922][ T7445] syzkaller1: entered promiscuous mode
[  101.331266][ T7445] syzkaller1: entered allmulticast mode
[  101.340996][ T7447] xt_hashlimit: size too large, truncated to 1048576
[  101.827504][ T7478] syzkaller1: entered promiscuous mode
[  101.829936][ T7478] syzkaller1: entered allmulticast mode
[  103.663047][ T7485] netlink: 28 bytes leftover after parsing attributes in process `syz.0.468'.
[  104.129984][ T7434] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  104.261843][ T7490] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  104.275813][ T7493] netlink: 28 bytes leftover after parsing attributes in process `syz.2.469'.
[  104.280409][ T7490] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  104.602213][ T7509] bond3: (slave bond_slave_1): Device is not our slave
[  104.615097][ T7509] bond3: option active_slave: invalid value (bond_slave_1)
[  104.635387][ T7509] bond3 (unregistering): Released all slaves
[  104.708698][ T7523] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[  104.715960][ T7524] xt_hashlimit: size too large, truncated to 1048576
[  104.858401][ T7529] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[  104.877228][ T7532] netlink: set zone limit has 8 unknown bytes
[  105.136039][ T7542] IPVS: length: 15 != 8
[  105.201706][ T7544] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[  105.331584][ T7547] netlink: 'syz.2.487': attribute type 1 has an invalid length.
[  105.334113][ T7547] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.539184][ T7551] syzkaller1: entered promiscuous mode
[  105.541011][ T7551] syzkaller1: entered allmulticast mode
[  106.159801][ T7580] netlink: 'syz.0.495': attribute type 1 has an invalid length.
[  106.162246][ T7580] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.162907][ T7579] xt_hashlimit: size too large, truncated to 1048576
[  106.200477][ T7584] netlink: 56 bytes leftover after parsing attributes in process `syz.1.496'.
[  106.204893][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.496'.
[  106.208705][ T7584] netlink: 20 bytes leftover after parsing attributes in process `syz.1.496'.
[  106.216538][ T7585] openvswitch: netlink: IPv4 tun info is not correct
[  106.230344][ T7585] xt_hashlimit: size too large, truncated to 1048576
[  106.361782][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.498'.
[  107.022033][ T7597] netlink: 256 bytes leftover after parsing attributes in process `syz.0.501'.
[  107.044582][ T7599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.502'.
[  107.049127][ T7599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.502'.
[  107.310972][ T7608] netlink: 'syz.1.505': attribute type 1 has an invalid length.
[  107.347807][ T7608] 8021q: adding VLAN 0 to HW filter on device bond1
[  107.391368][ T7611] bond1: (slave geneve3): making interface the new active one
[  107.395170][ T7611] bond1: (slave geneve3): Enslaving as an active interface with an up link
[  107.398376][ T5652] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.401824][ T5652] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.407052][ T5652] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.415382][ T5652] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.027411][ T7626] sctp: [Deprecated]: syz.0.510 (pid 7626) Use of struct sctp_assoc_value in delayed_ack socket option.
[  108.027411][ T7626] Use struct sctp_sack_info instead
[  108.033306][ T7626] sctp: [Deprecated]: syz.0.510 (pid 7626) Use of struct sctp_assoc_value in delayed_ack socket option.
[  108.033306][ T7626] Use struct sctp_sack_info instead
[  108.163727][ T7629] netlink: 24 bytes leftover after parsing attributes in process `syz.0.511'.
[  108.487412][ T7653] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  108.499686][ T7653] bond3: (slave lo): Enslaving as an active interface with an up link
[  108.505039][ T7653] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  108.523533][ T7650] syzkaller1: entered promiscuous mode
[  108.529379][ T7650] syzkaller1: entered allmulticast mode
[  108.706182][ T7668] __nla_validate_parse: 1 callbacks suppressed
[  108.706196][ T7668] netlink: 16 bytes leftover after parsing attributes in process `syz.0.522'.
[  108.715303][ T7667] netlink: 16 bytes leftover after parsing attributes in process `syz.0.522'.
[  108.860245][ T7681] syzkaller1: entered promiscuous mode
[  108.864624][ T7681] syzkaller1: entered allmulticast mode
[  108.972001][ T7685] batman_adv: batadv0: Adding interface: gretap3
[  108.975636][ T7686] netlink: 'syz.0.527': attribute type 4 has an invalid length.
[  108.980185][ T7685] batman_adv: batadv0: The MTU of interface gretap3 is too small (1482) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1552 would solve the problem.
[  109.000392][ T7685] batman_adv: batadv0: Interface activated: gretap3
[  109.144243][ T7698] netlink: 24 bytes leftover after parsing attributes in process `syz.2.532'.
[  109.280304][ T7712] x_tables: duplicate underflow at hook 3
[  109.284791][ T7712] netlink: 228 bytes leftover after parsing attributes in process `syz.2.536'.
[  109.551983][ T7731] xt_hashlimit: size too large, truncated to 1048576
[  109.660843][ T7737] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  109.664418][ T7737] netlink: 40 bytes leftover after parsing attributes in process `syz.0.540'.
[  109.793820][ T7741] x_tables: duplicate underflow at hook 1
[  110.028791][ T7748] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.544'.
[  110.140730][ T7757] netlink: 84 bytes leftover after parsing attributes in process `syz.2.546'.
[  110.337558][ T7762] netlink: 196 bytes leftover after parsing attributes in process `syz.2.547'.
[  110.538614][ T7766] SET target dimension over the limit!
[  110.569154][ T7768] netlink: 'syz.2.550': attribute type 8 has an invalid length.
[  110.739197][ T7774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.552'.
[  110.758794][ T7774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.552'.
[  110.937340][ T7779] netlink: 'syz.2.553': attribute type 1 has an invalid length.
[  110.939844][ T7779] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.970997][ T7797] xt_hashlimit: size too large, truncated to 1048576
[  110.997597][ T7799] xt_hashlimit: size too large, truncated to 1048576
[  111.136829][ T7808] syzkaller0: entered promiscuous mode
[  111.139023][ T7808] syzkaller0: entered allmulticast mode
[  111.143152][ T7808] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  111.231010][ T7812] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[  111.301198][ T7814] netlink: 'syz.1.562': attribute type 2 has an invalid length.
[  111.503955][ T7824] xt_hashlimit: size too large, truncated to 1048576
[  111.680662][ T7839] Bluetooth: MGMT ver 1.23
[  112.179086][ T7872] syzkaller0: entered promiscuous mode
[  112.180869][ T7872] syzkaller0: entered allmulticast mode
[  112.498217][ T7880] ip6gre1: entered promiscuous mode
[  112.508127][ T7880] ip6gre1: entered allmulticast mode
[  112.631710][ T7886] netpci0: tun_chr_ioctl cmd 1074025678
[  112.633962][ T7886] netpci0: group set to 0
[  112.711799][ T7892] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  112.749983][ T7895] syzkaller1: entered promiscuous mode
[  112.757115][ T7895] syzkaller1: entered allmulticast mode
[  113.238093][ T7914] xt_hashlimit: size too large, truncated to 1048576
[  113.439060][ T7923] syzkaller0: entered promiscuous mode
[  113.446533][ T7923] syzkaller0: entered allmulticast mode
[  113.619216][ T7935] syzkaller1: entered promiscuous mode
[  113.621565][ T7935] syzkaller1: entered allmulticast mode
[  113.811287][ T7940] __nla_validate_parse: 7 callbacks suppressed
[  113.811297][ T7940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.591'.
[  116.403861][ T7925] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  116.523317][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.594'.
[  116.527171][ T7946] netlink: 56 bytes leftover after parsing attributes in process `syz.1.594'.
[  116.553011][ T7948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.593'.
[  116.564673][ T7948] netlink: 36 bytes leftover after parsing attributes in process `syz.0.593'.
[  116.610290][ T7944] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  116.613793][ T7944] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  116.823503][ T7972] netlink: 'syz.2.600': attribute type 21 has an invalid length.
[  116.828309][ T7972] netlink: 132 bytes leftover after parsing attributes in process `syz.2.600'.
[  116.880181][ T7974] tun0: tun_chr_ioctl cmd 1074025675
[  116.884471][ T7974] tun0: persist enabled
[  116.888342][ T7974] tun0: tun_chr_ioctl cmd 1074025675
[  116.891427][ T7974] tun0: persist enabled
[  116.897309][ T7974] tun0: tun_chr_ioctl cmd 1074025673
[  117.687854][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'.
[  117.861176][ T7989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.605'.
[  117.991566][ T7994] netlink: 'syz.1.606': attribute type 1 has an invalid length.
[  117.994798][ T7994] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.151732][ T7997] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[  118.151745][ T7996] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[  118.263566][ T8000] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[  118.648948][ T8011] netlink: 'syz.0.612': attribute type 1 has an invalid length.
[  118.653976][ T8011] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.870250][ T8020] netlink: 'syz.1.615': attribute type 1 has an invalid length.
[  119.163561][ T8028] bond2: invalid ARP target 0.0.0.0 specified for addition
[  119.165954][ T8028] bond2: option arp_ip_target: invalid value (0)
[  119.170939][ T8028] bond2 (unregistering): Released all slaves
[  119.218440][ T8029] bond2: invalid ARP target 0.0.0.0 specified for addition
[  119.228820][ T8029] bond2: option arp_ip_target: invalid value (0)
[  119.240629][ T8029] bond2 (unregistering): Released all slaves
[  119.302443][ T8034] xt_hashlimit: size too large, truncated to 1048576
[  119.820600][ T8055] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  120.047628][ T8057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.627'.
[  120.051317][ T8057] netlink: 'syz.0.627': attribute type 1 has an invalid length.
[  120.054034][ T8057] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.724420][ T8068] syzkaller1: entered promiscuous mode
[  120.728324][ T8068] syzkaller1: entered allmulticast mode
[  120.976063][ T8082] xt_TCPMSS: Only works on TCP SYN packets
[  121.007381][ T5616] Bluetooth: hci0: command 0x0c1a tx timeout
[  121.007684][   T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  121.058056][ T8086] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.634'.
[  121.319873][ T8093] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  121.459147][ T8107] xt_CT: You must specify a L4 protocol and not use inversions on it
[  121.481487][ T8109] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[  121.693234][ T8121] xt_hashlimit: size too large, truncated to 1048576
[  122.002400][ T8138] netlink: 'syz.0.649': attribute type 1 has an invalid length.
[  122.004968][ T8138] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.623280][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.654'.
[  122.849696][ T8238] IPVS: set_ctl: invalid protocol: 167 100.1.1.1:20002
[  122.853064][ T8235] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[  122.857785][ T8237] xt_hashlimit: size too large, truncated to 1048576
[  122.971965][ T8242] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.658'.
[  122.993873][ T8245] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  123.326021][ T8266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.664'.
[  123.335526][ T8266] netlink: 20 bytes leftover after parsing attributes in process `syz.0.664'.
[  123.457316][ T8270] netlink: 460 bytes leftover after parsing attributes in process `syz.0.665'.
[  123.712443][ T8279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.667'.
[  123.719751][ T8279] netlink: 'syz.0.667': attribute type 1 has an invalid length.
[  123.722255][ T8279] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.914135][ T8282] netlink: 28 bytes leftover after parsing attributes in process `syz.1.668'.
[  124.064211][ T8284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.669'.
[  124.090378][ T8284] 8021q: adding VLAN 0 to HW filter on device bond4
[  124.106277][ T8284] bond4: entered promiscuous mode
[  124.109161][ T8284] bond4: entered allmulticast mode
[  124.118412][ T8284] 8021q: adding VLAN 0 to HW filter on device bond4
[  124.122369][ T8284] team0: Port device bond4 added
[  124.127839][ T8284] team_slave_1: entered promiscuous mode
[  124.137344][ T8284] team0: Port device team_slave_1 removed
[  124.144035][ T8284] team_slave_1: entered allmulticast mode
[  124.146733][ T8284] bond4: (slave team_slave_1): Enslaving as an active interface with an up link
[  125.524624][ T8318] netlink: 'syz.0.682': attribute type 1 has an invalid length.
[  125.527381][ T8318] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.842687][ T8320] __nla_validate_parse: 1 callbacks suppressed
[  125.842702][ T8320] netlink: 56 bytes leftover after parsing attributes in process `syz.1.683'.
[  125.849432][ T8320] netlink: 19 bytes leftover after parsing attributes in process `syz.1.683'.
[  125.853135][ T8320] netlink: 19 bytes leftover after parsing attributes in process `syz.1.683'.
[  125.858627][ T8321] netlink: 56 bytes leftover after parsing attributes in process `syz.1.683'.
[  125.862284][ T8321] netlink: 19 bytes leftover after parsing attributes in process `syz.1.683'.
[  125.865967][ T8321] netlink: 19 bytes leftover after parsing attributes in process `syz.1.683'.
[  125.872020][ T8320] netlink: 24 bytes leftover after parsing attributes in process `syz.1.683'.
[  125.872038][ T8321] netlink: 24 bytes leftover after parsing attributes in process `syz.1.683'.
[  125.881242][ T8320] netlink: 'syz.1.683': attribute type 1 has an invalid length.
[  125.885354][ T8320] netlink: 'syz.1.683': attribute type 3 has an invalid length.
[  125.889957][ T8320] netlink: 224 bytes leftover after parsing attributes in process `syz.1.683'.
[  125.893837][ T8321] netlink: 'syz.1.683': attribute type 1 has an invalid length.
[  125.897090][ T8321] netlink: 'syz.1.683': attribute type 3 has an invalid length.
[  125.900240][ T8321] netlink: 224 bytes leftover after parsing attributes in process `syz.1.683'.
[  126.091891][ T8326] openvswitch: netlink: Flow actions attr not present in new flow.
[  126.094871][ T8326] openvswitch: netlink: Tunnel attr 78 out of range max 16
[  126.237467][ T8340] veth1_to_bond: entered allmulticast mode
[  126.257501][ T8340] veth1_to_bond (unregistering): left allmulticast mode
[  126.272616][ T8340] bond0: (slave bond_slave_1): Releasing backup interface
[  126.361019][ T8345] syzkaller1: entered promiscuous mode
[  126.373041][ T8345] syzkaller1: entered allmulticast mode
[  126.384262][ T8347] openvswitch: netlink: Key type 243 is out of range max 32
[  126.395838][ T8347] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  126.775947][ T8365] xt_hashlimit: size too large, truncated to 1048576
[  126.901489][ T8369] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.455572][ T8371] xt_hashlimit: size too large, truncated to 1048576
[  127.541119][ T8375] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  129.058821][ T8447] gtp1: entered promiscuous mode
[  129.060573][ T8447] gtp1: entered allmulticast mode
[  129.068403][ T8447] syzkaller1: entered promiscuous mode
[  129.070423][ T8447] syzkaller1: entered allmulticast mode
[  129.511130][ T8461] bridge: RTM_NEWNEIGH with invalid state 0x8
[  129.519179][ T8461] syzkaller1: entered promiscuous mode
[  129.523787][ T8461] syzkaller1: entered allmulticast mode
[  129.669883][ T8458] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.672466][ T8458] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.911874][ T8458] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  129.951728][ T8458] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.391148][ T8458] syz.2.720 (8458) used greatest stack depth: 20064 bytes left
[  130.423220][ T5686] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.432530][ T5686] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.441317][ T5686] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.450133][ T5686] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.470221][ T5686] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.476443][ T5686] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.478444][ T8475] xt_hashlimit: size too large, truncated to 1048576
[  130.481363][ T5686] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.484733][ T5686] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.680694][ T8498] syzkaller1: entered promiscuous mode
[  130.682562][ T8498] syzkaller1: entered allmulticast mode
[  130.695519][ T8498] netlink: 'syz.1.731': attribute type 298 has an invalid length.
[  130.788829][ T8511] syzkaller1: entered promiscuous mode
[  130.790705][ T8511] syzkaller1: entered allmulticast mode
[  130.859591][ T8514] syzkaller0: entered promiscuous mode
[  130.861368][ T8514] syzkaller0: entered allmulticast mode
[  130.892640][ T8516] __nla_validate_parse: 188 callbacks suppressed
[  130.892658][ T8516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.736'.
[  131.037191][ T8526] netlink: 'syz.1.738': attribute type 1 has an invalid length.
[  131.039640][ T8526] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.062666][ T8528] xt_hashlimit: size too large, truncated to 1048576
[  131.143606][ T8532] syzkaller1: entered promiscuous mode
[  131.145485][ T8532] syzkaller1: entered allmulticast mode
[  131.151934][ T8532] netlink: 'syz.0.740': attribute type 298 has an invalid length.
[  131.743252][ T8562] xt_TPROXY: Can be used only with -p tcp or -p udp
[  131.966909][ T8572] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.752'.
[  132.337738][ T8587] syzkaller1: entered promiscuous mode
[  132.339521][ T8587] syzkaller1: entered allmulticast mode
[  132.343363][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.348605][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.542582][ T8590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.757'.
[  132.801708][ T8604] netlink: 52 bytes leftover after parsing attributes in process `syz.1.762'.
[  132.811224][ T8606] xt_hashlimit: size too large, truncated to 1048576
[  133.095097][ T8627] xt_hashlimit: size too large, truncated to 1048576
[  133.131460][ T8631] netlink: 'syz.1.770': attribute type 6 has an invalid length.
[  133.302605][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.773'.
[  133.309413][ T8639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.773'.
[  133.385329][ T8645] netlink: 'syz.0.775': attribute type 9 has an invalid length.
[  133.392116][ T8645] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.775'.
[  133.480079][ T8650] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.776'.
[  133.562660][ T8658] netlink: 32 bytes leftover after parsing attributes in process `syz.0.778'.
[  133.684854][ T8665] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20002
[  133.690802][ T8665] IPVS: set_ctl: invalid protocol: 140 255.255.255.255:20000
[  133.735665][ T8667] netlink: 116 bytes leftover after parsing attributes in process `syz.2.781'.
[  133.918381][ T8678] syzkaller1: entered promiscuous mode
[  133.920170][ T8678] syzkaller1: entered allmulticast mode
[  134.449369][ T8690] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[  134.699358][ T8700] netlink: 'syz.1.790': attribute type 1 has an invalid length.
[  134.708012][ T8700] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.846862][ T8710] xt_hashlimit: size too large, truncated to 1048576
[  135.106254][ T8738] bridge2: entered promiscuous mode
[  135.110986][ T8738] bridge2: entered allmulticast mode
[  135.424897][ T8742] batadv0: entered promiscuous mode
[  135.428272][ T8742] macsec1: entered promiscuous mode
[  135.430279][ T8742] macsec1: entered allmulticast mode
[  135.432432][ T8742] batadv0: entered allmulticast mode
[  135.434788][ T8742] 8021q: adding VLAN 0 to HW filter on device macsec1
[  135.437957][ T8742] batadv0: left allmulticast mode
[  135.439743][ T8742] batadv0: left promiscuous mode
[  135.528778][ T8745] xt_hashlimit: size too large, truncated to 1048576
[  135.823241][ T8762] syzkaller1: entered promiscuous mode
[  135.825734][ T8762] syzkaller1: entered allmulticast mode
[  135.917051][ T8769] bond4: option lp_interval: invalid value (0)
[  135.919293][ T8769] bond4: option lp_interval: allowed values 1 - 2147483647
[  135.923383][ T8769] bond4 (unregistering): Released all slaves
[  135.939390][ T8773] syzkaller1: entered promiscuous mode
[  135.941637][ T8773] syzkaller1: entered allmulticast mode
[  136.150870][ T8778] __nla_validate_parse: 5 callbacks suppressed
[  136.150884][ T8778] netlink: 280 bytes leftover after parsing attributes in process `syz.2.812'.
[  136.839494][ T8817] netlink: 36 bytes leftover after parsing attributes in process `syz.0.821'.
[  136.903081][ T8819] x_tables: duplicate underflow at hook 1
[  136.956073][ T8823] netlink: 20 bytes leftover after parsing attributes in process `syz.0.824'.
[  137.213930][ T8834] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  137.217529][ T8834] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  137.267820][ T8832] netlink: 'syz.1.827': attribute type 1 has an invalid length.
[  137.270437][ T8832] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.881429][ T8837] netem: change failed
[  137.888813][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[  137.948113][ T8840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.829'.
[  137.952238][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.829'.
[  138.138141][ T8852] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.832'.
[  138.196263][ T8853] netlink: 28 bytes leftover after parsing attributes in process `syz.2.832'.
[  138.716865][ T8855] netlink: 'syz.0.833': attribute type 298 has an invalid length.
[  138.883307][ T8867] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  138.991278][ T8873] xt_hashlimit: size too large, truncated to 1048576
[  139.031079][ T8879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.837'.
[  139.072615][ T8884] netlink: 20 bytes leftover after parsing attributes in process `syz.0.840'.
[  139.076607][ T8883] netlink: 20 bytes leftover after parsing attributes in process `syz.0.840'.
[  139.087543][ T8883] syzkaller1: entered promiscuous mode
[  139.089288][ T8883] syzkaller1: entered allmulticast mode
[  139.105726][   T33] audit: type=1804 audit(1778610659.054:2): pid=8884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.840" name="/newroot/285/memory.events" dev="tmpfs" ino=1463 res=1 errno=0
[  139.119273][   T33] audit: type=1800 audit(1778610659.054:3): pid=8884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.840" name="memory.events" dev="tmpfs" ino=1463 res=0 errno=0
[  139.136587][   T33] audit: type=1800 audit(1778610659.064:4): pid=8883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.840" name="memory.events" dev="tmpfs" ino=1463 res=0 errno=0
[  139.148949][   T33] audit: type=1804 audit(1778610659.064:5): pid=8883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.840" name="/newroot/285/memory.events" dev="tmpfs" ino=1463 res=1 errno=0
[  140.308247][ T8908] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  141.698470][ T8966] __nla_validate_parse: 3 callbacks suppressed
[  141.698481][ T8966] netlink: 10 bytes leftover after parsing attributes in process `syz.0.863'.
[  142.182652][ T8972] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  142.347241][ T8999] syzkaller1: entered promiscuous mode
[  142.349080][ T8999] syzkaller1: entered allmulticast mode
[  142.477650][ T9013] netlink: 'syz.0.872': attribute type 1 has an invalid length.
[  142.495597][ T9013] 8021q: adding VLAN 0 to HW filter on device bond4
[  142.583995][ T9023] syzkaller1: entered promiscuous mode
[  142.585828][ T9023] syzkaller1: entered allmulticast mode
[  142.597732][ T5652] tipc: Subscription rejected, illegal request
[  142.758893][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.878'.
[  142.890299][ T9041] bridge0: port 3(syz_tun) entered blocking state
[  142.892446][ T9041] bridge0: port 3(syz_tun) entered disabled state
[  142.894785][ T9041] syz_tun: entered allmulticast mode
[  142.897644][ T9041] syz_tun: entered promiscuous mode
[  142.901762][ T9041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.879'.
[  143.467702][ T9045] ipip0: entered promiscuous mode
[  143.711903][ T9059] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  143.750248][ T9061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.884'.
[  143.753255][ T9061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.884'.
[  144.302563][ T9047] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  144.379471][ T9068] xt_hashlimit: size too large, truncated to 1048576
[  144.391330][ T9071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.887'.
[  144.414574][ T9068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.886'.
[  144.420448][ T9068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.886'.
[  144.433347][ T9076] netlink: 20 bytes leftover after parsing attributes in process `syz.1.885'.
[  144.441995][ T9075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.886'.
[  144.623248][ T9083] tipc: Failed to remove unknown binding: 66,0,0/0:2669175775/2669175777
[  144.627881][ T9083] tipc: Failed to remove unknown binding: 66,0,0/0:2669175775/2669175776
[  144.708337][ T9096] netlink: 'syz.2.891': attribute type 1 has an invalid length.
[  144.710887][ T9096] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.270897][ T9102] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[  145.341702][ T9104] netlink: 'syz.1.894': attribute type 11 has an invalid length.
[  145.375262][ T9106] syzkaller1: entered promiscuous mode
[  145.379574][ T9106] syzkaller1: entered allmulticast mode
[  145.800286][ T9130] x_tables: duplicate underflow at hook 2
[  146.810793][ T9154] syzkaller1: entered promiscuous mode
[  146.813160][ T9154] syzkaller1: entered allmulticast mode
[  147.670786][ T9092] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  147.885990][ T9169] syzkaller1: entered promiscuous mode
[  147.887935][ T9169] syzkaller1: entered allmulticast mode
[  148.052949][ T9178] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  148.061962][ T9178] netlink: 'syz.2.911': attribute type 1 has an invalid length.
[  148.064627][ T9178] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.214618][ T9187] __nla_validate_parse: 6 callbacks suppressed
[  148.214633][ T9187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.913'.
[  148.321320][ T9194] xt_hashlimit: size too large, truncated to 1048576
[  148.584827][ T9214] xt_hashlimit: size too large, truncated to 1048576
[  148.827000][ T9222] netlink: 24 bytes leftover after parsing attributes in process `syz.2.919'.
[  149.295185][ T9207] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  149.473099][ T9250] xt_hashlimit: size too large, truncated to 1048576
[  149.555435][ T9261] xt_hashlimit: size too large, truncated to 1048576
[  149.633986][ T9267] netlink: 104 bytes leftover after parsing attributes in process `syz.0.931'.
[  150.497453][ T9308] syzkaller1: entered promiscuous mode
[  150.499346][ T9308] syzkaller1: entered allmulticast mode
[  151.110457][ T9336] netlink: 260 bytes leftover after parsing attributes in process `syz.0.950'.
[  151.346940][ T9353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.953'.
[  151.397367][ T9358] tipc: Started in network mode
[  151.399007][ T9358] tipc: Node identity b2e07e1fffdb, cluster identity 4711
[  151.401467][ T9358] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.404803][ T9358] syzkaller0: entered promiscuous mode
[  151.410226][ T9358] syzkaller0: entered allmulticast mode
[  151.984265][ T9360] tipc: Resetting bearer <eth:syzkaller0>
[  152.003955][ T9357] tipc: Resetting bearer <eth:syzkaller0>
[  152.031279][ T9357] tipc: Disabling bearer <eth:syzkaller0>
[  152.240173][ T9402] ip6gre2: entered promiscuous mode
[  152.252906][ T9402] ip6gre2: entered allmulticast mode
[  152.268891][ T9378] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[  152.427534][ T9403] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.549295][ T9402] syz.0.958 (9402) used greatest stack depth: 19680 bytes left
[  152.668058][ T9424] netlink: 'syz.2.964': attribute type 3 has an invalid length.
[  152.707650][ T9426] syzkaller1: entered promiscuous mode
[  152.709398][ T9426] syzkaller1: entered allmulticast mode
[  152.755288][ T9428] netlink: 240 bytes leftover after parsing attributes in process `syz.0.963'.
[  153.114493][ T9449] syzkaller0: entered promiscuous mode
[  153.120101][ T9449] syzkaller0: entered allmulticast mode
[  153.363337][ T9459] xt_hashlimit: size too large, truncated to 1048576
[  153.392264][ T9457] syzkaller0: entered promiscuous mode
[  153.394391][ T9457] syzkaller0: entered allmulticast mode
[  153.650711][ T9477] syzkaller1: entered promiscuous mode
[  153.652594][ T9477] syzkaller1: entered allmulticast mode
[  153.852489][ T9484] xt_hashlimit: size too large, truncated to 1048576
[  154.165307][ T9506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.990'.
[  154.372431][ T9534] netlink: 'syz.2.995': attribute type 1 has an invalid length.
[  154.404835][ T9534] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address
[  154.408465][ T9534] bond5: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[  154.414161][ T9534] bond5: (slave vxcan1): making interface the new active one
[  154.416886][ T9534] bond5: (slave vxcan1): Enslaving as an active interface with an up link
[  154.421813][ T9534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.995'.
[  154.428567][ T9539] netlink: 240 bytes leftover after parsing attributes in process `syz.0.994'.
[  154.428604][ T9534] bond5 (unregistering): (slave vxcan1): Releasing backup interface
[  154.440929][ T9534] bond5 (unregistering): Released all slaves
[  154.951116][ T9548] syz.0.999 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  154.964802][ T9548] CPU: 1 UID: 0 PID: 9548 Comm: syz.0.999 Not tainted syzkaller #0 PREEMPT(full) 
[  154.964821][ T9548] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  154.964827][ T9548] Call Trace:
[  154.964833][ T9548]  <TASK>
[  154.964838][ T9548]  dump_stack_lvl+0xe8/0x150
[  154.964857][ T9548]  dump_header+0xd3/0x4c0
[  154.964878][ T9548]  oom_kill_process+0x3ab/0x970
[  154.964897][ T9548]  out_of_memory+0x106c/0x1410
[  154.964911][ T9548]  ? try_charge_memcg+0xbb9/0x1570
[  154.964930][ T9548]  ? __pfx___mutex_lock+0x10/0x10
[  154.964948][ T9548]  ? __pfx_out_of_memory+0x10/0x10
[  154.964960][ T9548]  ? do_raw_spin_unlock+0x4d/0x210
[  154.964984][ T9548]  try_charge_memcg+0xc77/0x1570
[  154.965014][ T9548]  ? __pfx_try_charge_memcg+0x10/0x10
[  154.965029][ T9548]  ? percpu_ref_tryget+0x15/0x180
[  154.965061][ T9548]  ? charge_memcg+0x23/0x2b0
[  154.965079][ T9548]  charge_memcg+0x1a2/0x2b0
[  154.965096][ T9548]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  154.965112][ T9548]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  154.965131][ T9548]  __swap_cache_prepare_and_add+0xdc/0x700
[  154.965149][ T9548]  ? page_rmappable_folio+0x9a/0x170
[  154.965166][ T9548]  swap_cache_alloc_folio+0xf1/0x240
[  154.965203][ T9548]  swap_cluster_readahead+0x355/0x670
[  154.965223][ T9548]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  154.965246][ T9548]  ? get_vma_policy+0x27b/0x3c0
[  154.965266][ T9548]  swapin_readahead+0x196/0xc50
[  154.965283][ T9548]  ? swap_table_get+0x1e/0x260
[  154.965300][ T9548]  ? __pfx_swapin_readahead+0x10/0x10
[  154.965341][ T9548]  ? swap_table_get+0x1e/0x260
[  154.965356][ T9548]  ? swap_table_get+0x1e/0x260
[  154.965367][ T9548]  ? swap_table_get+0x1e/0x260
[  154.965380][ T9548]  ? swap_table_get+0x216/0x260
[  154.965394][ T9548]  ? swap_cache_get_folio+0x2e4/0x2f0
[  154.965412][ T9548]  do_swap_page+0x555/0x5120
[  154.965429][ T9548]  ? __pte_offset_map+0x29/0x240
[  154.965444][ T9548]  ? __pte_offset_map+0x29/0x240
[  154.965470][ T9548]  ? do_swap_page+0x128/0x5120
[  154.965483][ T9548]  ? __pfx_do_swap_page+0x10/0x10
[  154.965495][ T9548]  ? __pte_offset_map+0x1ae/0x240
[  154.965511][ T9548]  ? pte_offset_map_rw_nolock+0xea/0x160
[  154.965528][ T9548]  handle_mm_fault+0x12d2/0x3170
[  154.965550][ T9548]  ? handle_mm_fault+0xee/0x3170
[  154.965568][ T9548]  ? __pfx_handle_mm_fault+0x10/0x10
[  154.965580][ T9548]  ? lock_vma_under_rcu+0x45a/0x500
[  154.965611][ T9548]  do_user_addr_fault+0xa73/0x1340
[  154.965629][ T9548]  ? rcu_is_watching+0x15/0xb0
[  154.965643][ T9548]  ? trace_page_fault_user+0x84/0x1e0
[  154.965659][ T9548]  exc_page_fault+0x6a/0xc0
[  154.965679][ T9548]  asm_exc_page_fault+0x26/0x30
[  154.965692][ T9548] RIP: 0033:0x7f649c757f03
[  154.965705][ T9548] Code: 25 00 03 00 00 e8 9d 50 06 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 <80> 3d ae 67 29 00 00 75 44 a8 01 75 40 a8 10 75 3c 41 51 4c 8d 9b
[  154.965715][ T9548] RSP: 002b:00007ffe8d90e410 EFLAGS: 00010246
[  154.965726][ T9548] RAX: 0000000000000000 RBX: 000055558df14500 RCX: 0000000000000000
[  154.965734][ T9548] RDX: 00007ffe8d90e450 RSI: 0000000000000000 RDI: 0000000000000000
[  154.965741][ T9548] RBP: 00007f649ca17da0 R08: 0000000000000000 R09: 0000000000000000
[  154.965748][ T9548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000025eb0
[  154.965756][ T9548] R13: 00007f649ca1609c R14: 0000000000025c11 R15: 00007f649ca16090
[  154.965776][ T9548]  </TASK>
[  155.108619][ T9548] memory: usage 301220kB, limit 307200kB, failcnt 2076
[  155.111603][ T9548] memory+swap: usage 299324kB, limit 9007199254740988kB, failcnt 0
[  155.114910][ T9548] kmem: usage 296672kB, limit 9007199254740988kB, failcnt 0
[  155.118974][ T9548] Memory cgroup stats for /syz0:
[  155.119284][ T9548] cache 0
[  155.122858][ T9548] rss 0
[  155.124128][ T9548] rss_huge 0
[  155.125580][ T9548] shmem 0
[  155.127506][ T9548] mapped_file 0
[  155.129151][ T9548] dirty 0
[  155.130519][ T9548] writeback 0
[  155.132052][ T9548] workingset_refault_anon 7
[  155.134081][ T9548] workingset_refault_file 0
[  155.136094][ T9548] swap 188416
[  155.138244][ T9548] swapcached 233472
[  155.140125][ T9548] pgpgin 29440
[  155.141701][ T9548] pgpgout 29436
[  155.143289][ T9548] pgfault 74335
[  155.144873][ T9548] pgmajfault 4
[  155.146919][ T9548] inactive_anon 0
[  155.148569][ T9548] active_anon 16384
[  155.150336][ T9548] inactive_file 0
[  155.152009][ T9548] active_file 0
[  155.153617][ T9548] unevictable 0
[  155.155224][ T9548] hierarchical_memory_limit 314572800
[  155.158328][ T9548] hierarchical_memsw_limit 9223372036854771712
[  155.161075][ T9548] total_cache 0
[  155.162683][ T9548] total_rss 0
[  155.164201][ T9548] total_rss_huge 0
[  155.165897][ T9548] total_shmem 0
[  155.169813][ T9548] total_mapped_file 0
[  155.171625][ T9548] total_dirty 0
[  155.173195][ T9548] total_writeback 0
[  155.174991][ T9548] total_workingset_refault_anon 7
[  155.177616][ T9548] total_workingset_refault_file 0
[  155.179855][ T9548] total_swap 188416
[  155.181605][ T9548] total_swapcached 233472
[  155.183684][ T9548] total_pgpgin 29440
[  155.185454][ T9548] total_pgpgout 29436
[  155.187893][ T9548] total_pgfault 74335
[  155.189634][ T9548] total_pgmajfault 4
[  155.191357][ T9548] total_inactive_anon 0
[  155.193147][ T9548] total_active_anon 16384
[  155.195102][ T9548] total_inactive_file 0
[  155.197482][ T9548] total_active_file 0
[  155.199283][ T9548] total_unevictable 0
[  155.201093][ T9548] anon_cost 0
[  155.202658][ T9548] file_cost 0
[  155.204142][ T9548] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.999,pid=9548,uid=0
[  155.227444][ T9548] Memory cgroup out of memory: Killed process 9548 (syz.0.999) total-vm:102292kB, anon-rss:1244kB, file-rss:23456kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  155.451555][ T9572] xt_hashlimit: size too large, truncated to 1048576
[  155.483602][ T9575] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1002'.
[  155.534800][ T9574] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[  155.643326][ T9583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1005'.
[  155.850441][ T9596] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1007'.
[  155.855768][ T9596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1007'.
[  155.998771][ T9604] netlink: 'syz.0.1010': attribute type 1 has an invalid length.
[  156.002759][ T9604] syzkaller1: entered promiscuous mode
[  156.004643][ T9604] syzkaller1: entered allmulticast mode
[  156.172501][ T9616] netlink: 'syz.2.1014': attribute type 11 has an invalid length.
[  156.190682][ T9618] IPv6: NLM_F_CREATE should be specified when creating new route
[  156.260193][ T9622] netlink: 'syz.2.1018': attribute type 10 has an invalid length.
[  156.315407][ T9631] xt_hashlimit: size too large, truncated to 1048576
[  156.338313][ T9632] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[  156.471401][ T9645] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1022'.
[  156.568019][ T9651] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1025'.
[  156.583102][ T9651] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1025'.
[  156.629474][ T9642] netlink: 'syz.1.1023': attribute type 142 has an invalid length.
[  156.928630][ T9672] netlink: 'syz.1.1028': attribute type 1 has an invalid length.
[  156.931682][ T9672] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  157.518313][ T9653] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  157.596090][ T9687] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  157.624375][ T9691] syzkaller1: entered promiscuous mode
[  157.626857][ T9691] syzkaller1: entered allmulticast mode
[  157.809613][ T9695] netlink: 'syz.1.1035': attribute type 1 has an invalid length.
[  157.812096][ T9695] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  157.819591][ T9699] sctp: [Deprecated]: syz.2.1037 (pid 9699) Use of int in max_burst socket option.
[  157.819591][ T9699] Use struct sctp_assoc_value instead
[  157.901914][ T9707] xt_hashlimit: size too large, truncated to 1048576
[  157.953537][ T9709] syzkaller0: entered promiscuous mode
[  157.955660][ T9709] syzkaller0: entered allmulticast mode
[  158.058578][ T9711] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.962880][ T9741] syzkaller1: entered promiscuous mode
[  158.967511][ T9741] syzkaller1: entered allmulticast mode
[  159.098248][ T9753] xt_hashlimit: size too large, truncated to 1048576
[  159.489739][ T9767] openvswitch: netlink: IP tunnel dst address not specified
[  159.494183][ T9767] syzkaller1: entered promiscuous mode
[  159.495896][ T9767] syzkaller1: entered allmulticast mode
[  160.099320][ T9789] xt_hashlimit: size too large, truncated to 1048576
[  160.977563][ T9830] xt_hashlimit: size too large, truncated to 1048576
[  161.019068][ T9833] __nla_validate_parse: 3 callbacks suppressed
[  161.019077][ T9833] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1067'.
[  161.177970][ T9833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1067'.
[  161.294040][ T9844] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20001
[  161.360003][ T9849] ip6erspan0: entered allmulticast mode
[  161.530710][ T9866] xt_hashlimit: size too large, truncated to 1048576
[  161.625978][ T9873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1076'.
[  161.928070][ T9880] syzkaller0: entered promiscuous mode
[  161.929977][ T9880] syzkaller0: entered allmulticast mode
[  162.350068][ T9909] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1086'.
[  162.582908][ T9918] bond3: up delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[  162.585827][ T9918] bond3: down delay (128) is not a multiple of miimon (100), value rounded to 100 ms
[  162.607026][ T9918] xt_hashlimit: size too large, truncated to 1048576
[  162.624854][ T9921] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1091'.
[  162.653758][ T9925] netlink: 'syz.2.1092': attribute type 2 has an invalid length.
[  163.212158][ T9955] xt_hashlimit: size too large, truncated to 1048576
[  163.289296][ T9962] xt_hashlimit: size too large, truncated to 1048576
[  163.659083][ T9976] syzkaller1: entered promiscuous mode
[  163.660901][ T9976] syzkaller1: entered allmulticast mode
[  163.704280][ T9978] netlink: 'syz.1.1107': attribute type 3 has an invalid length.
[  163.707961][ T9979] netlink: 'syz.1.1107': attribute type 3 has an invalid length.
[  163.834323][ T9994] 8021q: VLANs not supported on ip6_vti0
[  164.022103][T10008] netlink: 'syz.1.1112': attribute type 1 has an invalid length.
[  164.070917][T10013] syzkaller1: entered promiscuous mode
[  164.073117][T10013] syzkaller1: entered allmulticast mode
[  164.503909][T10060] netlink: 'syz.1.1119': attribute type 15 has an invalid length.
[  164.514326][T10051] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[  164.624775][T10069] syzkaller1: entered promiscuous mode
[  164.627325][T10069] syzkaller1: entered allmulticast mode
[  164.633343][T10070] veth0: entered promiscuous mode
[  164.646682][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1120'.
[  164.652985][T10070] veth0: left promiscuous mode
[  164.739401][T10075] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[  164.903506][T10084] syzkaller1: entered promiscuous mode
[  164.905695][T10084] syzkaller1: entered allmulticast mode
[  165.813496][T10112] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1135'.
[  166.761298][T10118] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[  167.712206][T10129] netlink: 'syz.0.1140': attribute type 1 has an invalid length.
[  167.726211][T10129] 8021q: adding VLAN 0 to HW filter on device bond5
[  167.749666][T10129] bond5: (slave veth7): Enslaving as an active interface with a down link
[  167.767273][T10129] bond5: (slave dummy0): making interface the new active one
[  167.770469][T10129] dummy0: entered promiscuous mode
[  167.773346][T10129] bond5: (slave dummy0): Enslaving as an active interface with an up link
[  167.779475][T10129] netlink: 'syz.0.1140': attribute type 10 has an invalid length.
[  167.781993][T10129] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1140'.
[  167.787611][T10129] bond5: (slave dummy0): Releasing active interface
[  168.576148][T10103] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  168.773800][T10153] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  168.777503][T10153] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.858763][T10157] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  168.911800][T10166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1151'.
[  168.931732][T10166] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1151'.
[  169.011659][T10176] openvswitch: netlink: Unknown key attributes 2
[  169.114049][T10184] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) !
[  169.386781][T10204] syzkaller1: entered promiscuous mode
[  169.391100][T10204] syzkaller1: entered allmulticast mode
[  171.526505][T10254] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1163'.
[  171.618436][T10256] xt_hashlimit: size too large, truncated to 1048576
[  171.859108][T10264] syzkaller1: entered promiscuous mode
[  171.860899][T10264] syzkaller1: entered allmulticast mode
[  172.569860][T10221] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  172.632396][T10266] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1166'.
[  172.636219][T10266] netlink: 'syz.1.1166': attribute type 1 has an invalid length.
[  172.639517][T10266] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1166'.
[  172.652247][T10266] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1166'.
[  172.689122][T10266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1166'.
[  172.951265][T10296] netlink: 'syz.0.1176': attribute type 1 has an invalid length.
[  172.954806][T10296] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.996886][T10294] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  173.262900][T10305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1178'.
[  173.626238][T10321] syzkaller0: entered promiscuous mode
[  173.628704][T10321] syzkaller0: entered allmulticast mode
[  173.865924][T10329] netlink: 'syz.1.1187': attribute type 1 has an invalid length.
[  175.279293][T10383] xt_hashlimit: size too large, truncated to 1048576
[  175.809178][ T5001] Bluetooth: hci0: command 0x0c1a tx timeout
[  175.811892][ T5001] Bluetooth: hci1: command 0x0406 tx timeout
[  175.926728][T10412] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1205'.
[  175.943632][T10415] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  176.098385][T10419] syzkaller0: entered promiscuous mode
[  176.100496][T10419] syzkaller0: entered allmulticast mode
[  176.112893][T10421] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.1210'.
[  176.121958][T10421] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.1210'.
[  176.232326][T10429] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[  176.270737][T10431] syzkaller1: entered promiscuous mode
[  176.277367][T10431] syzkaller1: entered allmulticast mode
[  176.359762][T10439] netlink: 'syz.1.1214': attribute type 1 has an invalid length.
[  176.363355][T10439] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.472306][T10445] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  176.623226][T10455] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1216'.
[  176.665943][T10462] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993
[  176.807018][T10469] syzkaller1: entered promiscuous mode
[  176.809275][T10469] syzkaller1: entered allmulticast mode
[  176.960262][T10473] xt_hashlimit: size too large, truncated to 1048576
[  176.989056][T10475] netlink: 'syz.2.1219': attribute type 11 has an invalid length.
[  177.156221][T10487] syzkaller1: entered promiscuous mode
[  177.158119][T10487] syzkaller1: entered allmulticast mode
[  177.164271][T10487] netlink: 'syz.1.1223': attribute type 298 has an invalid length.
[  177.248177][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1224'.
[  177.250924][T10489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1224'.
[  177.253612][T10489] netlink: 'syz.1.1224': attribute type 14 has an invalid length.
[  177.288288][T10495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1225'.
[  177.417715][T10497] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1226'.
[  177.831181][T10510] netlink: 'syz.1.1230': attribute type 1 has an invalid length.
[  177.835211][T10510] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  178.097180][T10526] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1235'.
[  178.131458][T10529] netlink: 'syz.2.1233': attribute type 1 has an invalid length.
[  178.134222][T10529] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.070103][T10549] netlink: 'syz.2.1241': attribute type 1 has an invalid length.
[  179.074057][T10549] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.190816][T10556] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1242'.
[  179.731147][T10558] netlink: 'syz.1.1243': attribute type 1 has an invalid length.
[  179.755408][T10558] 8021q: adding VLAN 0 to HW filter on device bond5
[  179.778259][T10558] bond5: (slave veth5): Enslaving as an active interface with a down link
[  179.789026][T10558] xt_hashlimit: size too large, truncated to 1048576
[  179.863305][T10563] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1244'.
[  179.866830][T10563] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1244'.
[  179.869648][T10563] netlink: 'syz.1.1244': attribute type 5 has an invalid length.
[  179.872740][T10563] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1244'.
[  179.875839][T10563] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1244'.
[  180.143241][T10592] syzkaller1: entered promiscuous mode
[  180.145230][T10592] syzkaller1: entered allmulticast mode
[  180.538764][T10601] ip6erspan0: entered promiscuous mode
[  180.540615][T10601] ip6erspan0: entered allmulticast mode
[  180.546942][T10601] xt_hashlimit: size too large, truncated to 1048576
[  180.625187][T10605] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1256'.
[  180.881792][T10617] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  180.895803][T10633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1263'.
[  180.901267][T10633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1263'.
[  181.007773][T10638] bond6: option resend_igmp: invalid value (2878)
[  181.010663][T10638] bond6: option resend_igmp: allowed values 0 - 255
[  181.015394][T10638] bond6 (unregistering): Released all slaves
[  181.054919][T10644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1264'.
[  181.348187][ T5686] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x25
[  181.852609][T10677] "syz.1.1274" (10677) uses obsolete ecb(arc4) skcipher
[  181.881364][T10684] netlink: 'syz.1.1275': attribute type 1 has an invalid length.
[  182.093519][T10686] netlink: 115 bytes leftover after parsing attributes in process `syz.1.1276'.
[  182.113646][T10668] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  182.673127][T10725] syzkaller0: entered promiscuous mode
[  182.675007][T10725] syzkaller0: entered allmulticast mode
[  182.681965][T10725] TC_ACT_REPEAT abuse ?
[  182.813901][T10728] syzkaller0: entered promiscuous mode
[  182.815694][T10728] syzkaller0: entered allmulticast mode
[  183.764093][T10770] xt_hashlimit: size too large, truncated to 1048576
[  183.915988][T10781] xt_hashlimit: size too large, truncated to 1048576
[  184.023379][T10787] syzkaller0: entered promiscuous mode
[  184.025192][T10787] syzkaller0: entered allmulticast mode
[  184.825035][T10803] __nla_validate_parse: 4 callbacks suppressed
[  184.825045][T10803] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1307'.
[  185.129521][T10806] xt_hashlimit: size too large, truncated to 1048576
[  185.184941][T10811] Cannot find add_set index 4 as target
[  185.217856][T10819] netlink: 'syz.1.1312': attribute type 3 has an invalid length.
[  185.241710][T10815] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[  185.289967][T10833] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1315'.
[  185.293570][T10833] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1315'.
[  185.357985][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1314'.
[  185.368541][T10835] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.370830][T10835] bridge0: port 2(bridge_slave_1) entered forwarding state
[  185.373991][T10835] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.376931][T10835] bridge0: port 1(bridge_slave_0) entered forwarding state
[  185.460670][T10842] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1317'.
[  185.822335][T10870] syzkaller1: entered promiscuous mode
[  185.824178][T10870] syzkaller1: entered allmulticast mode
[  185.830227][T10870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1327'.
[  185.833519][T10870] netlink: 'syz.2.1327': attribute type 298 has an invalid length.
[  186.206253][T10878] netlink: 'syz.1.1329': attribute type 1 has an invalid length.
[  186.214718][T10878] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  186.807461][T10898] syzkaller1: entered promiscuous mode
[  186.809923][T10898] syzkaller1: entered allmulticast mode
[  186.956884][T10904] netlink: 'syz.2.1333': attribute type 1 has an invalid length.
[  186.959480][T10904] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.585671][T10914] ieee802154 phy1 wpan1: encryption failed: -22
[  187.832318][T10930] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  188.024495][T10940] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1342'.
[  188.199017][T10948] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1346'.
[  188.248385][T10948] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1346'.
[  188.328055][T10955] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1348'.
[  188.345453][T10955] xt_hashlimit: size too large, truncated to 1048576
[  188.529179][T10960] syzkaller0: entered promiscuous mode
[  188.532485][T10960] syzkaller0: entered allmulticast mode
[  188.946137][T10974] syzkaller1: entered promiscuous mode
[  188.948093][T10974] syzkaller1: entered allmulticast mode
[  188.952622][T10974] syzkaller1: left promiscuous mode
[  188.954525][T10974] syzkaller1: left allmulticast mode
[  189.875603][   T54] Bluetooth: hci2: link tx timeout
[  189.879048][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  189.883577][   T54] Bluetooth: hci2: link tx timeout
[  189.885713][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  189.888969][   T54] Bluetooth: hci2: link tx timeout
[  189.890683][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  189.949030][T10998] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[  190.039012][T11001] netlink: 'syz.0.1360': attribute type 142 has an invalid length.
[  190.042390][T11001] wg1: entered promiscuous mode
[  190.044190][T11001] wg1: entered allmulticast mode
[  190.216576][T11004] xt_hashlimit: size too large, truncated to 1048576
[  190.442525][T11011] netlink: 'syz.1.1363': attribute type 2 has an invalid length.
[  190.445128][T11011] netlink: 'syz.1.1363': attribute type 2 has an invalid length.
[  190.627437][T11013] syzkaller1: entered promiscuous mode
[  190.629308][T11013] syzkaller1: entered allmulticast mode
[  191.096682][T11044] netlink: 'syz.0.1371': attribute type 1 has an invalid length.
[  191.104462][T11044] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.966459][ T5616] Bluetooth: hci2: command 0x0406 tx timeout
[  192.065611][T11060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1375'.
[  192.071931][T11060] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  192.077385][T11060] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1375'.
[  192.085097][T11060] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[  192.616073][T11080] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1379'.
[  193.507710][T11093] xt_hashlimit: size too large, truncated to 1048576
[  193.532417][T11093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1384'.
[  193.547258][T11093] bond6: entered promiscuous mode
[  193.549553][T11093] 8021q: adding VLAN 0 to HW filter on device bond6
[  193.560008][T11093] bond6 (unregistering): Released all slaves
[  193.654315][T11098] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1385'.
[  193.661132][T11098] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1385'.
[  193.664770][T11098] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1385'.
[  193.828728][T11108] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1387'.
[  193.831183][T11111] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1388'.
[  193.910516][T11113] xt_hashlimit: size too large, truncated to 1048576
[  193.935486][T11120] xt_hashlimit: size too large, truncated to 1048576
[  193.963250][T11125] xt_hashlimit: size too large, truncated to 1048576
[  194.173760][T11137] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.1392'.
[  194.177713][T11137] netlink: Unknown conntrack attr (type=2304, max=9)
[  194.771136][T11169] veth0: entered promiscuous mode
[  194.815042][T11169] lo: entered allmulticast mode
[  194.823492][T11169] lo: left allmulticast mode
[  194.900307][T11168] veth0: left promiscuous mode
[  195.054527][T11180] xt_hashlimit: size too large, truncated to 1048576
[  195.252314][T11192] syzkaller1: entered promiscuous mode
[  195.258863][T11192] syzkaller1: entered allmulticast mode
[  195.654806][T11209] syzkaller1: entered promiscuous mode
[  195.657170][T11209] syzkaller1: entered allmulticast mode
[  195.803784][T11218] ipip0: entered promiscuous mode
[  196.703356][T11245] syzkaller1: entered promiscuous mode
[  196.707803][T11245] syzkaller1: entered allmulticast mode
[  196.785394][T11254] trusted_key: syz.2.1424 sent an empty control message without MSG_MORE.
[  196.786976][T11252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  196.980313][T11274] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20001
[  197.043986][T11282] syzkaller1: entered promiscuous mode
[  197.045815][T11282] syzkaller1: entered allmulticast mode
[  197.104367][T11284] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20003
[  197.254808][T11290] syzkaller1: entered promiscuous mode
[  197.258238][T11290] syzkaller1: entered allmulticast mode
[  197.748688][T11311] __nla_validate_parse: 6 callbacks suppressed
[  197.748699][T11311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1443'.
[  197.834151][T11317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1444'.
[  197.937221][T11325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1446'.
[  198.230813][T11331] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1448'.
[  198.258652][T11331] syzkaller1: entered promiscuous mode
[  198.260586][T11331] syzkaller1: entered allmulticast mode
[  198.348475][T11333] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1449'.
[  198.408834][T11333] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1449'.
[  198.823847][T11335] bond6: entered promiscuous mode
[  198.869284][T11338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1451'.
[  198.913792][T11338] netlink: 'syz.2.1451': attribute type 1 has an invalid length.
[  198.922320][T11338] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  199.234226][T11349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1453'.
[  199.328245][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[  199.684562][T11363] syzkaller0: entered promiscuous mode
[  199.688210][T11363] syzkaller0: entered allmulticast mode
[  200.111316][T11375] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[  200.207390][T11377] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993
[  200.252585][T11379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1462'.
[  200.261485][T11379] netlink: 'syz.0.1462': attribute type 12 has an invalid length.
[  200.264697][T11379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1462'.
[  200.634841][T11411] netlink: 'syz.0.1471': attribute type 1 has an invalid length.
[  200.695149][T11413] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[  200.874954][T11421] syzkaller1: entered promiscuous mode
[  200.876996][T11421] syzkaller1: entered allmulticast mode
[  201.449559][T11445] netlink: 'syz.1.1484': attribute type 18 has an invalid length.
[  201.557359][T11457] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[  202.573795][T11494] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.577127][T11494] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.815255][T11494] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  202.838042][T11494] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  202.998057][T11503] xt_hashlimit: size too large, truncated to 1048576
[  203.414816][ T8471] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  203.428171][ T8471] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  203.435080][ T8471] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  203.438991][ T8471] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  203.444025][ T8471] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  203.448246][ T8471] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  203.451599][ T8471] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  203.455032][ T8471] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  203.492289][T11516] __nla_validate_parse: 8 callbacks suppressed
[  203.492299][T11516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1502'.
[  203.590748][T11524] netlink: 'syz.0.1503': attribute type 1 has an invalid length.
[  203.593624][T11524] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1503'.
[  203.651944][T11528] xt_hashlimit: size too large, truncated to 1048576
[  203.676747][T11528] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1504'.
[  203.805416][T11542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1508'.
[  204.131276][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1514'.
[  204.134526][T11562] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1514'.
[  204.257971][T11568] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1516'.
[  204.306875][T11570] syzkaller1: entered promiscuous mode
[  204.309102][T11570] syzkaller1: entered allmulticast mode
[  204.396101][T11574] syzkaller1: entered promiscuous mode
[  204.398778][T11574] syzkaller1: entered allmulticast mode
[  204.937179][T11582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1520'.
[  204.941171][T11582] netlink: 'syz.0.1520': attribute type 1 has an invalid length.
[  205.005911][T11587] xt_hashlimit: size too large, truncated to 1048576
[  205.048929][T11590] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1522'.
[  205.292052][T11609] xt_hashlimit: size too large, truncated to 1048576
[  205.498323][T11630] syzkaller1: entered promiscuous mode
[  205.500328][T11630] syzkaller1: entered allmulticast mode
[  205.504576][T11630] Cannot find set identified by id 0 to match
[  206.304111][T11632] tun1: tun_chr_ioctl cmd 1074812118
[  206.307674][T11632] tun1: tun_chr_ioctl cmd 1074033169
[  206.425523][T11643] wg2: entered promiscuous mode
[  206.482881][T11649] veth0_vlan: entered allmulticast mode
[  206.525007][T11652] xt_hashlimit: size too large, truncated to 1048576
[  206.789339][T11690] IPVS: set_ctl: invalid protocol: 221 224.0.0.1:20003
[  206.882532][T11696] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1547'.
[  207.194454][T11718] x_tables: duplicate underflow at hook 1
[  207.201703][T11718] 8021q: VLANs not supported on ip6gre0
[  208.515877][T11758] __nla_validate_parse: 3 callbacks suppressed
[  208.515887][T11758] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1559'.
[  208.587049][T11763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1560'.
[  208.797355][T11774] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1564'.
[  209.361241][T11809] netlink: 'syz.0.1572': attribute type 1 has an invalid length.
[  209.363694][T11809] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  209.587169][T11818] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1574'.
[  210.004407][T11841] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1583'.
[  210.021304][T11841] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  210.029745][T11841] xt_hashlimit: size too large, truncated to 1048576
[  210.031322][T11843] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1584'.
[  210.035423][T11843] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1584'.
[  210.068730][T11846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1585'.
[  210.078496][T11846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1585'.
[  210.078520][ T8471] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  210.084126][ T8471] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  210.089474][ T8471] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  210.092393][ T8471] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  210.135221][T11848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1586'.
[  210.326506][T11879] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  211.469708][T11937] netlink: 'syz.2.1608': attribute type 4 has an invalid length.
[  211.529092][T11947] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  211.779411][T11959] netlink: 'syz.2.1616': attribute type 19 has an invalid length.
[  211.785259][T11959] netlink: 'syz.2.1616': attribute type 19 has an invalid length.
[  211.861923][T11961] xt_hashlimit: size too large, truncated to 1048576
[  212.046243][T11964] xt_hashlimit: size too large, truncated to 1048576
[  212.185663][T11970] xt_hashlimit: size too large, truncated to 1048576
[  212.283946][T11978] xt_hashlimit: size too large, truncated to 1048576
[  212.283997][T11977] xt_hashlimit: size too large, truncated to 1048576
[  212.342404][T11977] syzkaller0: entered promiscuous mode
[  212.345100][T11977] syzkaller0: entered allmulticast mode
[  212.473036][T11998] openvswitch: netlink: Missing valid actions attribute.
[  212.475849][T11998] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  212.516179][T12003] xt_hashlimit: size too large, truncated to 1048576
[  212.729891][T12021] netlink: 'syz.1.1632': attribute type 89 has an invalid length.
[  212.892451][T12038] netlink: 'syz.1.1635': attribute type 12 has an invalid length.
[  213.275697][T12068] bridge0: entered allmulticast mode
[  213.278773][T12069] bridge0: left allmulticast mode
[  213.552061][T12082] syzkaller1: entered promiscuous mode
[  213.554272][T12082] syzkaller1: entered allmulticast mode
[  213.645019][T12090] __nla_validate_parse: 8 callbacks suppressed
[  213.645033][T12090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1643'.
[  213.675064][T12092] syzkaller1: entered promiscuous mode
[  213.678567][T12092] syzkaller1: entered allmulticast mode
[  213.735431][T12093] ip6t_srh: unknown srh match flags  4000
[  213.914817][T12112] syzkaller1: entered promiscuous mode
[  213.916961][T12112] syzkaller1: entered allmulticast mode
[  213.933974][T12115] netlink: 'syz.0.1648': attribute type 1 has an invalid length.
[  213.940447][T12115] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  213.949840][T12114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  214.050982][T12120] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1655'.
[  214.085325][T12128] sctp: [Deprecated]: syz.2.1658 (pid 12128) Use of int in max_burst socket option.
[  214.085325][T12128] Use struct sctp_assoc_value instead
[  214.422888][T12158] xt_hashlimit: size too large, truncated to 1048576
[  214.518266][T12162] netlink: 'syz.2.1670': attribute type 16 has an invalid length.
[  214.784367][T12170] netlink: 'syz.0.1672': attribute type 1 has an invalid length.
[  214.787186][T12170] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  215.509794][T12178] syzkaller1: entered promiscuous mode
[  215.511708][T12178] syzkaller1: entered allmulticast mode
[  215.648655][T12184] netlink: 'syz.1.1678': attribute type 1 has an invalid length.
[  215.734491][T12190] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1681'.
[  215.804193][T12195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1682'.
[  216.679439][T12224] bond7 (unregistering): Released all slaves
[  217.192284][T12254] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1698'.
[  217.237748][T12258] syzkaller0: entered promiscuous mode
[  217.239775][T12258] syzkaller0: entered allmulticast mode
[  217.385947][T12265] x_tables: duplicate underflow at hook 4
[  217.518818][T12273] xt_hashlimit: size too large, truncated to 1048576
[  217.625876][T12285] netlink: 'syz.1.1707': attribute type 4 has an invalid length.
[  217.629822][T12285] netlink: 'syz.1.1707': attribute type 4 has an invalid length.
[  218.037648][T12289] netlink: 'syz.2.1708': attribute type 6 has an invalid length.
[  218.457634][T12309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1713'.
[  218.474042][T12311] xt_hashlimit: size too large, truncated to 1048576
[  218.535878][T12316] xt_l2tp: invalid flags combination: 8
[  218.539263][T12316] netlink: 'syz.0.1713': attribute type 1 has an invalid length.
[  218.733311][T12326] netlink: 'syz.0.1717': attribute type 1 has an invalid length.
[  218.743601][T12326] netlink: 'syz.0.1717': attribute type 1 has an invalid length.
[  218.749521][T12326] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  218.857888][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1718'.
[  219.602732][T12338] netlink: 'syz.0.1720': attribute type 21 has an invalid length.
[  219.613652][T12338] netlink: 'syz.0.1720': attribute type 1 has an invalid length.
[  219.779795][T12344] IPVS: set_ctl: invalid protocol: 31091 97.108.108.101:29184
[  219.784326][T12344] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  219.816943][T12347] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1723'.
[  220.088056][T12351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1724'.
[  220.214391][T12356] x_tables: duplicate underflow at hook 1
[  220.533818][T12361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1727'.
[  220.538723][T12361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1727'.
[  220.574625][T12363] xt_hashlimit: size too large, truncated to 1048576
[  220.773183][T12385] syzkaller1: entered promiscuous mode
[  220.775203][T12385] syzkaller1: entered allmulticast mode
[  220.862147][T12392] syzkaller1: entered promiscuous mode
[  220.864289][T12392] syzkaller1: entered allmulticast mode
[  221.079145][T12412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1740'.
[  221.312578][T12432] xt_hashlimit: size too large, truncated to 1048576
[  221.317919][T12428] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  221.425944][T12439] syzkaller1: entered promiscuous mode
[  221.429872][T12439] syzkaller1: entered allmulticast mode
[  221.787869][T12460] netlink: 'syz.0.1754': attribute type 1 has an invalid length.
[  221.792543][T12460] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  221.804184][T12462] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1753'.
[  221.807964][T12462] syzkaller1: entered promiscuous mode
[  221.809949][T12462] syzkaller1: entered allmulticast mode
[  222.264829][T12473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1758'.
[  222.269060][T12473] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1758'.
[  222.443301][T12476] netlink: 'syz.1.1759': attribute type 1 has an invalid length.
[  222.446912][T12476] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  222.580020][T12479] Cannot find add_set index 2 as target
[  222.586907][T12479] batadv0: entered allmulticast mode
[  222.640997][T12483] netlink: 'syz.0.1761': attribute type 4 has an invalid length.
[  222.644932][T12483] netlink: 'syz.0.1761': attribute type 4 has an invalid length.
[  222.665667][T12479] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1760'.
[  222.849261][T12497] veth8: entered allmulticast mode
[  222.956267][T12507] netlink: 'syz.2.1768': attribute type 1 has an invalid length.
[  222.960645][T12507] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  223.264835][T12524] xt_hashlimit: size too large, truncated to 1048576
[  223.544655][T12536] digital: digital_start_poll: Unknown protocol
[  223.550608][T12536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  223.764193][ T5649] nci: nci_rx_work: unknown MT 0x4
[  224.519690][T12548] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  224.566928][T12564] __nla_validate_parse: 7 callbacks suppressed
[  224.566938][T12564] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1786'.
[  224.607279][T12566] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1787'.
[  224.626971][T12566] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1787'.
[  224.635871][T12566] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1787'.
[  224.640201][T12566] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1787'.
[  224.653137][T12566] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1787'.
[  224.660209][T12566] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1787'.
[  224.671247][T12566] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1787'.
[  224.682204][T12566] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1787'.
[  224.692731][T12566] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1787'.
[  224.767269][T12566] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.769850][T12566] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.915463][T12566] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  224.934001][T12566] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  225.016158][T12566] batman_adv: batadv0: Interface deactivated: gretap3
[  225.073036][ T5686] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.076940][ T5686] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.087054][ T5686] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.090730][ T5686] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.199981][T12597] syzkaller0: entered promiscuous mode
[  225.202008][T12597] syzkaller0: entered allmulticast mode
[  225.332771][T12603] netlink: 'syz.2.1795': attribute type 1 has an invalid length.
[  225.335467][T12603] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  225.606162][T12614] syzkaller1: entered promiscuous mode
[  225.608096][T12614] syzkaller1: entered allmulticast mode
[  225.732642][T12616] xt_hashlimit: size too large, truncated to 1048576
[  225.840698][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.843789][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.852042][T12620] netlink: 'syz.0.1802': attribute type 298 has an invalid length.
[  225.876628][    T9] ------------[ cut here ]------------
[  225.879482][    T9] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  225.882574][    T9] WARNING: net/mac80211/rate.c:404 at __rate_control_send_low+0x524/0x800, CPU#0: kworker/0:0/9
[  225.885923][    T9] Modules linked in:
[  225.888179][    T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) 
[  225.891007][    T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  225.894124][    T9] Workqueue: mld mld_ifc_work
[  225.895664][    T9] RIP: 0010:__rate_control_send_low+0x5bb/0x800
[  225.897734][    T9] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80
[  225.903700][    T9] RSP: 0018:ffffc900000e66f8 EFLAGS: 00010246
[  225.905668][    T9] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000
[  225.908221][    T9] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90426270
[  225.910674][    T9] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000
[  225.913113][    T9] R10: 0000000000000004 R11: 0000000000000000 R12: ffff888120ad1b28
[  225.915654][    T9] R13: 0000000000000000 R14: ffffffff90426270 R15: ffff8881bb5d3258
[  225.918355][    T9] FS:  0000000000000000(0000) GS:ffff88818dc86000(0000) knlGS:0000000000000000
[  225.921189][    T9] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  225.923363][    T9] CR2: 0000200000001ec0 CR3: 00000001749e8000 CR4: 00000000000006f0
[  225.926518][    T9] Call Trace:
[  225.927817][    T9]  <TASK>
[  225.928755][    T9]  rate_control_send_low+0x1a7/0x7b0
[  225.930358][    T9]  rate_control_get_rate+0x20b/0x5d0
[  225.931985][    T9]  ieee80211_tx_h_rate_ctrl+0xaf6/0x1760
[  225.933790][    T9]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  225.935923][    T9]  ? __skb_flow_dissect+0x668e/0x6e80
[  225.937708][    T9]  invoke_tx_handlers_late+0xba/0x18a0
[  225.939440][    T9]  ? ieee80211_tx_h_select_key+0xd1b/0x1ab0
[  225.941264][    T9]  ieee80211_tx_dequeue+0x403e/0x54d0
[  225.942982][    T9]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[  225.944933][    T9]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  225.946737][    T9]  ? ieee80211_queue_skb+0x182d/0x22c0
[  225.948435][    T9]  ieee80211_hwsim_wake_tx_queue+0xbb/0x150
[  225.950236][    T9]  ieee80211_queue_skb+0x1a1f/0x22c0
[  225.951891][    T9]  ieee80211_tx+0x2c2/0x4b0
[  225.953444][    T9]  ? __pfx_ieee80211_tx+0x10/0x10
[  225.955034][    T9]  ? ieee80211_xmit+0x315/0x400
[  225.956651][    T9]  __ieee80211_subif_start_xmit+0xd12/0x1660
[  225.958599][    T9]  ? __ieee80211_subif_start_xmit+0x2cf/0x1660
[  225.960605][    T9]  ? process_scheduled_works+0xb5d/0x1860
[  225.962447][    T9]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[  225.964474][    T9]  ? skb_network_protocol+0x23d/0x400
[  225.966155][    T9]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[  225.968177][    T9]  ieee80211_subif_start_xmit+0xf3/0x570
[  225.970009][    T9]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[  225.971957][    T9]  ? __pfx_netif_skb_features+0x10/0x10
[  225.973730][    T9]  dev_hard_start_xmit+0x2cd/0x830
[  225.975358][    T9]  __dev_queue_xmit+0x14d9/0x3950
[  225.977011][    T9]  ? __dev_queue_xmit+0x2b6/0x3950
[  225.978617][    T9]  ? __pfx___dev_queue_xmit+0x10/0x10
[  225.980280][    T9]  ? neigh_resolve_output+0x438/0x750
[  225.981957][    T9]  ? eth_header+0x11b/0x200
[  225.983475][    T9]  ? __asan_memcpy+0x40/0x70
[  225.985050][    T9]  ? ip6_output+0x126/0x550
[  225.986648][    T9]  ip6_output+0x340/0x550
[  225.988024][    T9]  ? __pfx_ip6_output+0x10/0x10
[  225.989597][    T9]  NF_HOOK+0x177/0x4f0
[  225.990865][    T9]  ? __pfx_NF_HOOK+0x10/0x10
[  225.992350][    T9]  ? __pfx_dst_output+0x10/0x10
[  225.993948][    T9]  ? lockdep_hardirqs_on+0x7a/0x110
[  225.995607][    T9]  ? __local_bh_enable_ip+0xd0/0x130
[  225.997378][    T9]  ? icmp6_dst_alloc+0x3a6/0x440
[  225.998916][    T9]  mld_sendpack+0x8b4/0xe40
[  226.000375][    T9]  ? mld_sendpack+0x213/0xe40
[  226.001887][    T9]  ? __pfx_mld_sendpack+0x10/0x10
[  226.003533][    T9]  mld_ifc_work+0x835/0xe70
[  226.005019][    T9]  ? process_scheduled_works+0xa70/0x1860
[  226.006866][    T9]  process_scheduled_works+0xb5d/0x1860
[  226.008643][    T9]  ? __pfx_process_scheduled_works+0x10/0x10
[  226.010518][    T9]  ? assign_work+0x3d5/0x5e0
[  226.011962][    T9]  worker_thread+0xa53/0xfc0
[  226.013521][    T9]  kthread+0x388/0x470
[  226.014912][    T9]  ? __pfx_worker_thread+0x10/0x10
[  226.016592][    T9]  ? __pfx_kthread+0x10/0x10
[  226.018032][    T9]  ret_from_fork+0x514/0xb70
[  226.019523][    T9]  ? __pfx_ret_from_fork+0x10/0x10
[  226.021149][    T9]  ? __switch_to+0xc79/0x1410
[  226.022619][    T9]  ? __pfx_kthread+0x10/0x10
[  226.024407][    T9]  ret_from_fork_asm+0x1a/0x30
[  226.026111][    T9]  </TASK>
[  226.027233][    T9] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  226.029513][    T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) 
[  226.032370][    T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  226.035577][    T9] Workqueue: mld mld_ifc_work
[  226.037071][    T9] Call Trace:
[  226.038144][    T9]  <TASK>
[  226.039073][    T9]  vpanic+0x56c/0xa60
[  226.040361][    T9]  ? __pfx__printk+0x10/0x10
[  226.041798][    T9]  ? __pfx_vpanic+0x10/0x10
[  226.043267][    T9]  ? is_bpf_text_address+0x292/0x2b0
[  226.045067][    T9]  ? is_bpf_text_address+0x26/0x2b0
[  226.046645][    T9]  panic+0xc5/0xd0
[  226.047810][    T9]  ? __pfx_panic+0x10/0x10
[  226.049193][    T9]  ? ret_from_fork_asm+0x1a/0x30
[  226.050792][    T9]  __warn+0x315/0x4c0
[  226.052033][    T9]  ? __rate_control_send_low+0x524/0x800
[  226.053897][    T9]  ? __rate_control_send_low+0x524/0x800
[  226.055645][    T9]  __report_bug+0x29a/0x540
[  226.057108][    T9]  ? __rate_control_send_low+0x524/0x800
[  226.058854][    T9]  ? __pfx___report_bug+0x10/0x10
[  226.060441][    T9]  report_bug_entry+0x19a/0x290
[  226.061971][    T9]  ? __rate_control_send_low+0x5bb/0x800
[  226.063802][    T9]  ? __rate_control_send_low+0x5c0/0x800
[  226.065560][    T9]  handle_bug+0xce/0x200
[  226.066877][    T9]  exc_invalid_op+0x1a/0x50
[  226.068346][    T9]  asm_exc_invalid_op+0x1a/0x20
[  226.069860][    T9] RIP: 0010:__rate_control_send_low+0x5bb/0x800
[  226.071752][    T9] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80
[  226.077724][    T9] RSP: 0018:ffffc900000e66f8 EFLAGS: 00010246
[  226.079637][    T9] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000
[  226.082093][    T9] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90426270
[  226.084603][    T9] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000
[  226.087097][    T9] R10: 0000000000000004 R11: 0000000000000000 R12: ffff888120ad1b28
[  226.089545][    T9] R13: 0000000000000000 R14: ffffffff90426270 R15: ffff8881bb5d3258
[  226.092049][    T9]  ? __rate_control_send_low+0x58d/0x800
[  226.093768][    T9]  rate_control_send_low+0x1a7/0x7b0
[  226.095429][    T9]  rate_control_get_rate+0x20b/0x5d0
[  226.097125][    T9]  ieee80211_tx_h_rate_ctrl+0xaf6/0x1760
[  226.098902][    T9]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  226.100821][    T9]  ? __skb_flow_dissect+0x668e/0x6e80
[  226.102524][    T9]  invoke_tx_handlers_late+0xba/0x18a0
[  226.104245][    T9]  ? ieee80211_tx_h_select_key+0xd1b/0x1ab0
[  226.106088][    T9]  ieee80211_tx_dequeue+0x403e/0x54d0
[  226.107746][    T9]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[  226.109634][    T9]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  226.111343][    T9]  ? ieee80211_queue_skb+0x182d/0x22c0
[  226.113021][    T9]  ieee80211_hwsim_wake_tx_queue+0xbb/0x150
[  226.115018][    T9]  ieee80211_queue_skb+0x1a1f/0x22c0
[  226.116701][    T9]  ieee80211_tx+0x2c2/0x4b0
[  226.118139][    T9]  ? __pfx_ieee80211_tx+0x10/0x10
[  226.119871][    T9]  ? ieee80211_xmit+0x315/0x400
[  226.121498][    T9]  __ieee80211_subif_start_xmit+0xd12/0x1660
[  226.123538][    T9]  ? __ieee80211_subif_start_xmit+0x2cf/0x1660
[  226.125537][    T9]  ? process_scheduled_works+0xb5d/0x1860
[  226.127250][    T9]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[  226.129193][    T9]  ? skb_network_protocol+0x23d/0x400
[  226.130828][    T9]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[  226.132739][    T9]  ieee80211_subif_start_xmit+0xf3/0x570
[  226.134602][    T9]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[  226.136595][    T9]  ? __pfx_netif_skb_features+0x10/0x10
[  226.138289][    T9]  dev_hard_start_xmit+0x2cd/0x830
[  226.139902][    T9]  __dev_queue_xmit+0x14d9/0x3950
[  226.141452][    T9]  ? __dev_queue_xmit+0x2b6/0x3950
[  226.143034][    T9]  ? __pfx___dev_queue_xmit+0x10/0x10
[  226.144795][    T9]  ? neigh_resolve_output+0x438/0x750
[  226.146506][    T9]  ? eth_header+0x11b/0x200
[  226.147917][    T9]  ? __asan_memcpy+0x40/0x70
[  226.149362][    T9]  ? ip6_output+0x126/0x550
[  226.150780][    T9]  ip6_output+0x340/0x550
[  226.152119][    T9]  ? __pfx_ip6_output+0x10/0x10
[  226.153670][    T9]  NF_HOOK+0x177/0x4f0
[  226.155026][    T9]  ? __pfx_NF_HOOK+0x10/0x10
[  226.156482][    T9]  ? __pfx_dst_output+0x10/0x10
[  226.158001][    T9]  ? lockdep_hardirqs_on+0x7a/0x110
[  226.159634][    T9]  ? __local_bh_enable_ip+0xd0/0x130
[  226.161262][    T9]  ? icmp6_dst_alloc+0x3a6/0x440
[  226.162801][    T9]  mld_sendpack+0x8b4/0xe40
[  226.164287][    T9]  ? mld_sendpack+0x213/0xe40
[  226.166206][    T9]  ? __pfx_mld_sendpack+0x10/0x10
[  226.167809][    T9]  mld_ifc_work+0x835/0xe70
[  226.169235][    T9]  ? process_scheduled_works+0xa70/0x1860
[  226.170995][    T9]  process_scheduled_works+0xb5d/0x1860
[  226.172703][    T9]  ? __pfx_process_scheduled_works+0x10/0x10
[  226.174589][    T9]  ? assign_work+0x3d5/0x5e0
[  226.176037][    T9]  worker_thread+0xa53/0xfc0
[  226.177493][    T9]  kthread+0x388/0x470
[  226.178792][    T9]  ? __pfx_worker_thread+0x10/0x10
[  226.180447][    T9]  ? __pfx_kthread+0x10/0x10
[  226.181886][    T9]  ret_from_fork+0x514/0xb70
[  226.183361][    T9]  ? __pfx_ret_from_fork+0x10/0x10
[  226.184980][    T9]  ? __switch_to+0xc79/0x1410
[  226.186444][    T9]  ? __pfx_kthread+0x10/0x10
[  226.187873][    T9]  ret_from_fork_asm+0x1a/0x30
[  226.189382][    T9]  </TASK>
[  226.191054][    T9] Kernel Offset: disabled
[  226.192404][    T9] Rebooting in 86400 seconds..
