last executing test programs:

2m26.719553771s ago: executing program 1 (id=5608):
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d70067e70efe742ee0a9f0ee13e15bceef06e070d09af68b09b6954565ae34d842b890a89326e19917288a0fc602f44112e61c0028ee5515afd6"], 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0)
socket(0xa, 0x5, 0x0) (async)
r1 = socket(0xa, 0x5, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x64, 0x6, 0x830, 0x0, 0x678, 0x350, 0x1d0, 0x350, 0x760, 0x760, 0x760, 0x760, 0x760, 0x6, 0x0, {[{{@ipv6={@mcast2, @loopback, [], [0xffffff00, 0x0, 0x0, 0xff], 'virt_wifi0\x00', 'hsr0\x00', {}, {}, 0x2, 0x0, 0x6}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [0xffffff00], [], 'batadv_slave_0\x00', 'macvlan1\x00', {0xff}, {}, 0x3b, 0x0, 0x0, 0x12}, 0x0, 0x138, 0x180, 0x7400, {}, [@common=@srh1={{0x90}, {0x0, 0x92, 0x9, 0x7, 0x6, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], [0xffffffff, 0xffffffff, 0xff000000, 0xffffffff], [0xff0001fe, 0x0, 0x0, 0xffffffff], 0x400, 0x2}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa010101, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x38, 0x12, 0xd7}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@local, 0x38, 0x20, 0x32}}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@rt={{0x138}, {0x2, [0x401, 0x1ff], 0x9, 0x2, 0x0, [@local, @empty, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x35}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @ipv4={'\x00', '\xff\xff', @empty}], 0x9}}, @common=@frag={{0x30}, {[0x80000000, 0x7], 0x7, 0xa}}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@private1={0xfc, 0x1, '\x00', 0xff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x890)

2m26.663638741s ago: executing program 1 (id=5610):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r1, &(0x7f000000fa00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x1b0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x1148}}], 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0xd0, 0x1a0, 0x270, 0x340, 0x0, 0xd0, 0x1a0, 0x270, 0x430, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@empty, 0x40, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
r2 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x200b, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefcb)

2m26.59959043s ago: executing program 1 (id=5612):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0xd0, 0x1a0, 0x270, 0x340, 0x0, 0xd0, 0x1a0, 0x270, 0x430, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@empty, 0x40, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) (async)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0xd0, 0x1a0, 0x270, 0x340, 0x0, 0xd0, 0x1a0, 0x270, 0x430, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@empty, 0x40, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
r1 = socket$kcm(0xa, 0x1, 0x106)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50)
close(0x3) (async)
close(0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(0xffffffffffffffff)
r4 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3, <r5=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20)
recvmsg$kcm(r4, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x10000)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r5, &(0x7f00000000c0)}, 0x20) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r5, &(0x7f00000000c0)}, 0x20)
syz_emit_ethernet(0xde, &(0x7f0000000840)=ANY=[@ANYBLOB="0180c2000001ffffffffffff88a8110081004c00884700000900451800c40067000021019078ac1e0101ac1e010101890f3964010102e0000002e0000001441c1f71e000000100000009ac1414bb00000002ac1e0101008000008313b27f00000164010101e00000010a010100000c009078e80000004ae80003006500ff07650752ac1414227f000001940dbe1854aba6f3b316dda308010100890b96ac1414bb640101020723997f000001ac1414aa0a0101007f0000017f000001ffffffff640101000a010101860a8fd9b82ce84e116d830322866a25000003000000"], &(0x7f0000000940)={0x0, 0x3, [0x3ee, 0xdd1, 0xaad, 0x579]})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r3}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r2, @ANYRES8=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r3], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b01000000000000000000000100016e18852e9b", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000300"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{}, &(0x7f00000007c0), &(0x7f0000000640)=r6}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
pipe(&(0x7f0000000000)) (async)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r7, 0x0, r8, 0x0, 0x6, 0x0) (async)
splice(r7, 0x0, r8, 0x0, 0x6, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x84dff000) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x84dff000)
write$cgroup_devices(r8, 0x0, 0x6)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
pread64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff8) (async)
pread64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff8)
setsockopt$inet6_int(r10, 0x29, 0x4b, 0x0, 0xad)

2m23.533174152s ago: executing program 1 (id=5644):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0xd0, 0x1a0, 0x270, 0x340, 0x0, 0xd0, 0x1a0, 0x270, 0x430, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@empty, 0x40, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
socket$kcm(0xa, 0x1, 0x106)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0)
write(r2, &(0x7f0000000240)="94", 0x1)
vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7", 0x3}], 0x1, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
tee(r1, r5, 0x8f5, 0x0)
write(r3, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(0xffffffffffffffff)
r6 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20)
recvmsg$kcm(r6, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x10000)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r8, &(0x7f00000000c0)}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="9c8e00000000000000000000000000000000000000000000000000000000916b51e8dcfa2e8926b506381d5cee492ac51b65577589f9e6e6c18258393b7cf8a79e102e1ee840335ef677794bfce5565021"], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000100010000000000", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000300000000050000000000000000000055d89a0b"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{}, &(0x7f00000007c0), &(0x7f0000000640)=r9}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, <r10=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r10, &(0x7f00000004c0)}, 0x20)
socket$inet_sctp(0x2, 0x1, 0x84)

2m20.473250885s ago: executing program 1 (id=5663):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
ioctl$sock_ifreq(r1, 0x8920, &(0x7f0000000080)={'wlan0\x00', @ifru_mtu=0x6})
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0xd0, 0x1a0, 0x270, 0x340, 0x0, 0xd0, 0x1a0, 0x270, 0x430, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@empty, 0x40, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
r2 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x200b, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefcb)

2m20.466033624s ago: executing program 1 (id=5664):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x2, 0x6, 0x5d0, 0x148, 0x318, 0x318, 0x430, 0x238, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xff, 0xff000000, 0xffffff00], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x100, 0x148, 0x0, {0x7a00000010000000}, [@common=@ah={{0x30}, {[0x4d4, 0x4d3], 0x400, 0x5}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x41}, @ipv6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x29, 0x80, 0x2}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xffffff00], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x2}, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0xffff, 0x44, 0x4}, 0xfffffffe}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@loopback, 0x1, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x11, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1070bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x7, 0x4e82, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=@newqdisc={0x860, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xd, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x834, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x7, 0x80000000, 0x0, 0x1, 0x0, 0x5, 0x4a, 0x81, 0x3, 0x8, 0x100, 0x10001, 0x3, 0x5, 0x5, 0x184, 0x8, 0x7, 0x1, 0x1, 0x200009, 0x0, 0x8, 0x7, 0x4, 0x6, 0x7f, 0x10, 0xfffff9b9, 0x5, 0x7, 0x7, 0xf285, 0x7, 0x8, 0x5, 0x2, 0x7, 0x8, 0x1ff, 0x401, 0x9, 0x80000000, 0xd8fa, 0x8, 0x7, 0x7fff, 0x3, 0x0, 0x4, 0x3, 0x80000000, 0x6, 0xff, 0x8001, 0x3, 0xd, 0x40, 0x7, 0xf5a, 0xffffffff, 0x1, 0x2, 0x0, 0x800, 0xc, 0x6, 0x1000, 0x6, 0xa, 0x0, 0x1ff, 0x7, 0x4, 0x8, 0xffffffff, 0x80000001, 0x4d, 0x5, 0x7, 0x600, 0x7, 0x6, 0x9, 0x13bf, 0x97, 0x7, 0x9, 0x1, 0x9, 0x0, 0x401, 0x7d, 0x6, 0x80000001, 0x8, 0xdd0, 0xf577, 0x3ff, 0x6, 0x40, 0xfffffffc, 0x7, 0x6, 0xffffff4d, 0x7, 0x7fff, 0x8, 0x4, 0x9, 0x9, 0x475, 0x10, 0x1000, 0x9, 0x4, 0xff, 0x4, 0x1, 0x7, 0x4, 0xfffffff7, 0x2, 0x5, 0x99, 0x7, 0x4, 0x7fffffff, 0x6, 0x8, 0x1000, 0x8001, 0x100, 0x100, 0x2, 0x4, 0x25, 0x3ff, 0x2277, 0x9, 0xcc8f, 0xd, 0xce2, 0x1, 0x9, 0x7f, 0x3, 0x8000, 0x7, 0x0, 0x9, 0x8, 0x5, 0x8211, 0x80000001, 0x7b51, 0x74, 0x101, 0xfffffc62, 0x60000, 0x2, 0x3, 0x7ad7, 0x3, 0x2, 0x4, 0x5, 0x54, 0x0, 0x101, 0x4, 0xa2e, 0x7, 0x2, 0x8001, 0x4, 0x80, 0x2, 0xffff5609, 0x6ca98c39, 0x81, 0x0, 0x0, 0x0, 0x5, 0x55a, 0xd, 0x4, 0x1, 0x0, 0x2, 0xfffffffe, 0x101, 0x6, 0x6, 0xa, 0x10000, 0x4, 0x80000000, 0x2000cf1, 0x7, 0x10001, 0x6, 0x4, 0x200, 0x0, 0x8, 0x7, 0x9, 0x3, 0xffff, 0x7fffffff, 0x2000007, 0x7, 0x1ffffe, 0x5e0, 0xfffffff2, 0x7, 0x3, 0x9, 0x7, 0x5, 0x40000000, 0x4, 0x5, 0x2, 0x8, 0x9, 0x1000, 0x7, 0xbdb7, 0x3, 0xe, 0x7, 0x3, 0x6, 0x4, 0x1, 0x459, 0xd, 0x7, 0x68, 0x4, 0x4, 0x7fffffff, 0x7, 0x2, 0x80000000, 0x6, 0xbd, 0x0, 0x6, 0x40, 0x81]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0xfffe, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x4}, 0x8000040, 0xd, 0x8ef}}, @TCA_TBF_PTAB={0x404, 0x3, [0x7, 0x400, 0x8, 0x4, 0x0, 0x4, 0x9, 0xfffffff8, 0x1d, 0xff, 0x4, 0x7, 0x2, 0xfffffffc, 0x275d, 0xffffffff, 0x4, 0x5, 0x4b, 0x8, 0x7, 0x2, 0x100400, 0x9, 0x7d4, 0x6d59c30b, 0x6, 0x0, 0x9, 0x1, 0x1ff, 0xff, 0x1, 0xffff, 0x400, 0x20a, 0x200, 0xd8e9, 0xa48, 0xc70, 0x400, 0x7, 0x7a, 0x7fff, 0x7, 0x13, 0x4, 0xfffffffe, 0x7, 0x1800000, 0x4, 0xffff, 0x80000000, 0x3, 0x0, 0x4, 0x5, 0xd69, 0x7, 0x5, 0x2, 0x101, 0xd, 0x7, 0xffffffff, 0x9, 0x4, 0xc, 0x3, 0x3, 0x8, 0xe, 0x6, 0x5, 0x8, 0x2d, 0x0, 0x13, 0x10, 0x1ff, 0xa8, 0x2, 0x3, 0x401, 0x7, 0xf, 0x0, 0x4f, 0xffffffff, 0x7, 0x7fff, 0x6, 0xc5c, 0x5, 0xd, 0xb4, 0x80, 0x7, 0x7f, 0x4, 0x3d62, 0x7, 0x8, 0x200, 0x5, 0x100, 0xc2c, 0x6, 0x80, 0x63, 0x80, 0x6, 0x1, 0x4, 0x4, 0x4, 0xb, 0x5, 0x7, 0x9d, 0x120, 0x9, 0xfffffff6, 0x0, 0x0, 0x96, 0x1, 0xa2, 0x8, 0x3, 0x6, 0x7, 0x6, 0x3, 0x80, 0x6281, 0x125, 0x9, 0x10, 0xfffff000, 0x2, 0xfffffff8, 0x9, 0x9, 0x101, 0x6, 0x3, 0x2, 0x8, 0x7fff, 0x0, 0x0, 0x2f3, 0x4, 0x0, 0x0, 0x3, 0xa80, 0x8, 0x8, 0x7d2, 0x7f, 0x60000, 0x2, 0xfffffc01, 0x8, 0xfffffff9, 0x988, 0x101, 0xac3, 0x49da481b, 0x0, 0x0, 0x7fffffff, 0xa45, 0x7, 0xb, 0x9, 0x0, 0xffffffc0, 0x6b50, 0x0, 0xabd, 0x1, 0xef9c, 0x7, 0x6e, 0x9, 0x1, 0x9, 0x2, 0x7, 0x3, 0x80000001, 0x9, 0x7, 0x4, 0x6, 0x0, 0x2, 0x0, 0x4, 0x7fff, 0x81, 0x8, 0x80, 0x0, 0xfff, 0x4, 0xdb4d, 0x975, 0x2, 0x3fffc00, 0x0, 0x0, 0x6d, 0x9, 0x80000000, 0x2ad, 0xf4c, 0x9a27, 0x0, 0xfff, 0x6, 0x3ff, 0x10001, 0x0, 0x9, 0xc, 0x61c, 0x7, 0x3, 0x1ff, 0x10000, 0x9, 0xffffffff, 0x2, 0x9, 0x7e0995af, 0xfffffff9, 0x0, 0x7, 0xfff, 0x2, 0x5, 0x7, 0x8, 0x0, 0x80000001, 0x8, 0xa150, 0x4, 0x71, 0x9, 0x4, 0x7fe]}]}}]}, 0x860}, 0x1, 0x0, 0x0, 0x40098}, 0x40000)
getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000080)={@mcast2, <r6=>0x0}, &(0x7f00000000c0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', <r7=>0x0, 0x29, 0x3, 0xb, 0x62e, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x20, 0x40, 0x5bf2, 0x2}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r10, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000280)={'ip_vti0\x00', <r11=>0x0, 0x8, 0x8, 0xbe78, 0x80000001, {{0x1c, 0x4, 0x2, 0x4, 0x70, 0x66, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x10, 0x33, 0x0, 0x8, [0x0, 0x0, 0x3]}, @end, @ssrr={0x89, 0x13, 0xad, [@multicast2, @empty, @local, @empty]}, @noop, @lsrr={0x83, 0x17, 0x3b, [@multicast1, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x14}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x1b, 0x55, [@local, @empty, @multicast1, @rand_addr=0x64010101, @multicast2, @empty]}, @ra={0x94, 0x4, 0x1}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'syztnl1\x00', <r12=>0x0, 0x29, 0x0, 0x6, 0xc, 0x10, @mcast2, @dev={0xfe, 0x80, '\x00', 0x25}, 0x700, 0x8000, 0x3, 0x7}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', <r13=>0x0})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000004c0)=0x14)
r15 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r17, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001100010000ff0f000000000007000000", @ANYRES32=r16, @ANYBLOB="80010000091004000c001a800800058004000480"], 0x2c}}, 0x0)
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r19, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r20=>0x0})
sendmsg$nl_route_sched(r18, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r20, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r18, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r20, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', <r21=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r2, @ANYBLOB="000026bd7000fbdbdf2513000000280001801400020076657468315f766c616e000000000000080003000200000008000300030000003800018008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000140002006970766c616e3100000000000000000008000300020000005000018008000100", @ANYRES32=0x0, @ANYBLOB="140002007369743000000000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="080003000000000008000300020000006000018008000300010000001400020070696d726567300000000000000000001400020067656e6576653100000000000000000008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="1400020076657468300000000000000000000000280001801400020076657468315f766972745f7769666900080003000400000008000100", @ANYRES32=r14, @ANYBLOB="0c00018008000100", @ANYRES32=r16, @ANYBLOB="2800018008000100", @ANYRES32=r20, @ANYBLOB="140002007767320000000000000000000000000008000100", @ANYRES32=r21, @ANYBLOB], 0x180}, 0x1, 0x0, 0x0, 0x20040400}, 0x40004)

2m5.427807069s ago: executing program 32 (id=5664):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x2, 0x6, 0x5d0, 0x148, 0x318, 0x318, 0x430, 0x238, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xff, 0xff000000, 0xffffff00], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x100, 0x148, 0x0, {0x7a00000010000000}, [@common=@ah={{0x30}, {[0x4d4, 0x4d3], 0x400, 0x5}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x41}, @ipv6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x29, 0x80, 0x2}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xffffff00], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x2}, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0xffff, 0x44, 0x4}, 0xfffffffe}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@loopback, 0x1, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x11, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1070bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x7, 0x4e82, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=@newqdisc={0x860, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xd, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x834, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x7, 0x80000000, 0x0, 0x1, 0x0, 0x5, 0x4a, 0x81, 0x3, 0x8, 0x100, 0x10001, 0x3, 0x5, 0x5, 0x184, 0x8, 0x7, 0x1, 0x1, 0x200009, 0x0, 0x8, 0x7, 0x4, 0x6, 0x7f, 0x10, 0xfffff9b9, 0x5, 0x7, 0x7, 0xf285, 0x7, 0x8, 0x5, 0x2, 0x7, 0x8, 0x1ff, 0x401, 0x9, 0x80000000, 0xd8fa, 0x8, 0x7, 0x7fff, 0x3, 0x0, 0x4, 0x3, 0x80000000, 0x6, 0xff, 0x8001, 0x3, 0xd, 0x40, 0x7, 0xf5a, 0xffffffff, 0x1, 0x2, 0x0, 0x800, 0xc, 0x6, 0x1000, 0x6, 0xa, 0x0, 0x1ff, 0x7, 0x4, 0x8, 0xffffffff, 0x80000001, 0x4d, 0x5, 0x7, 0x600, 0x7, 0x6, 0x9, 0x13bf, 0x97, 0x7, 0x9, 0x1, 0x9, 0x0, 0x401, 0x7d, 0x6, 0x80000001, 0x8, 0xdd0, 0xf577, 0x3ff, 0x6, 0x40, 0xfffffffc, 0x7, 0x6, 0xffffff4d, 0x7, 0x7fff, 0x8, 0x4, 0x9, 0x9, 0x475, 0x10, 0x1000, 0x9, 0x4, 0xff, 0x4, 0x1, 0x7, 0x4, 0xfffffff7, 0x2, 0x5, 0x99, 0x7, 0x4, 0x7fffffff, 0x6, 0x8, 0x1000, 0x8001, 0x100, 0x100, 0x2, 0x4, 0x25, 0x3ff, 0x2277, 0x9, 0xcc8f, 0xd, 0xce2, 0x1, 0x9, 0x7f, 0x3, 0x8000, 0x7, 0x0, 0x9, 0x8, 0x5, 0x8211, 0x80000001, 0x7b51, 0x74, 0x101, 0xfffffc62, 0x60000, 0x2, 0x3, 0x7ad7, 0x3, 0x2, 0x4, 0x5, 0x54, 0x0, 0x101, 0x4, 0xa2e, 0x7, 0x2, 0x8001, 0x4, 0x80, 0x2, 0xffff5609, 0x6ca98c39, 0x81, 0x0, 0x0, 0x0, 0x5, 0x55a, 0xd, 0x4, 0x1, 0x0, 0x2, 0xfffffffe, 0x101, 0x6, 0x6, 0xa, 0x10000, 0x4, 0x80000000, 0x2000cf1, 0x7, 0x10001, 0x6, 0x4, 0x200, 0x0, 0x8, 0x7, 0x9, 0x3, 0xffff, 0x7fffffff, 0x2000007, 0x7, 0x1ffffe, 0x5e0, 0xfffffff2, 0x7, 0x3, 0x9, 0x7, 0x5, 0x40000000, 0x4, 0x5, 0x2, 0x8, 0x9, 0x1000, 0x7, 0xbdb7, 0x3, 0xe, 0x7, 0x3, 0x6, 0x4, 0x1, 0x459, 0xd, 0x7, 0x68, 0x4, 0x4, 0x7fffffff, 0x7, 0x2, 0x80000000, 0x6, 0xbd, 0x0, 0x6, 0x40, 0x81]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0xfffe, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x4}, 0x8000040, 0xd, 0x8ef}}, @TCA_TBF_PTAB={0x404, 0x3, [0x7, 0x400, 0x8, 0x4, 0x0, 0x4, 0x9, 0xfffffff8, 0x1d, 0xff, 0x4, 0x7, 0x2, 0xfffffffc, 0x275d, 0xffffffff, 0x4, 0x5, 0x4b, 0x8, 0x7, 0x2, 0x100400, 0x9, 0x7d4, 0x6d59c30b, 0x6, 0x0, 0x9, 0x1, 0x1ff, 0xff, 0x1, 0xffff, 0x400, 0x20a, 0x200, 0xd8e9, 0xa48, 0xc70, 0x400, 0x7, 0x7a, 0x7fff, 0x7, 0x13, 0x4, 0xfffffffe, 0x7, 0x1800000, 0x4, 0xffff, 0x80000000, 0x3, 0x0, 0x4, 0x5, 0xd69, 0x7, 0x5, 0x2, 0x101, 0xd, 0x7, 0xffffffff, 0x9, 0x4, 0xc, 0x3, 0x3, 0x8, 0xe, 0x6, 0x5, 0x8, 0x2d, 0x0, 0x13, 0x10, 0x1ff, 0xa8, 0x2, 0x3, 0x401, 0x7, 0xf, 0x0, 0x4f, 0xffffffff, 0x7, 0x7fff, 0x6, 0xc5c, 0x5, 0xd, 0xb4, 0x80, 0x7, 0x7f, 0x4, 0x3d62, 0x7, 0x8, 0x200, 0x5, 0x100, 0xc2c, 0x6, 0x80, 0x63, 0x80, 0x6, 0x1, 0x4, 0x4, 0x4, 0xb, 0x5, 0x7, 0x9d, 0x120, 0x9, 0xfffffff6, 0x0, 0x0, 0x96, 0x1, 0xa2, 0x8, 0x3, 0x6, 0x7, 0x6, 0x3, 0x80, 0x6281, 0x125, 0x9, 0x10, 0xfffff000, 0x2, 0xfffffff8, 0x9, 0x9, 0x101, 0x6, 0x3, 0x2, 0x8, 0x7fff, 0x0, 0x0, 0x2f3, 0x4, 0x0, 0x0, 0x3, 0xa80, 0x8, 0x8, 0x7d2, 0x7f, 0x60000, 0x2, 0xfffffc01, 0x8, 0xfffffff9, 0x988, 0x101, 0xac3, 0x49da481b, 0x0, 0x0, 0x7fffffff, 0xa45, 0x7, 0xb, 0x9, 0x0, 0xffffffc0, 0x6b50, 0x0, 0xabd, 0x1, 0xef9c, 0x7, 0x6e, 0x9, 0x1, 0x9, 0x2, 0x7, 0x3, 0x80000001, 0x9, 0x7, 0x4, 0x6, 0x0, 0x2, 0x0, 0x4, 0x7fff, 0x81, 0x8, 0x80, 0x0, 0xfff, 0x4, 0xdb4d, 0x975, 0x2, 0x3fffc00, 0x0, 0x0, 0x6d, 0x9, 0x80000000, 0x2ad, 0xf4c, 0x9a27, 0x0, 0xfff, 0x6, 0x3ff, 0x10001, 0x0, 0x9, 0xc, 0x61c, 0x7, 0x3, 0x1ff, 0x10000, 0x9, 0xffffffff, 0x2, 0x9, 0x7e0995af, 0xfffffff9, 0x0, 0x7, 0xfff, 0x2, 0x5, 0x7, 0x8, 0x0, 0x80000001, 0x8, 0xa150, 0x4, 0x71, 0x9, 0x4, 0x7fe]}]}}]}, 0x860}, 0x1, 0x0, 0x0, 0x40098}, 0x40000)
getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000080)={@mcast2, <r6=>0x0}, &(0x7f00000000c0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', <r7=>0x0, 0x29, 0x3, 0xb, 0x62e, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x20, 0x40, 0x5bf2, 0x2}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r10, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000280)={'ip_vti0\x00', <r11=>0x0, 0x8, 0x8, 0xbe78, 0x80000001, {{0x1c, 0x4, 0x2, 0x4, 0x70, 0x66, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x10, 0x33, 0x0, 0x8, [0x0, 0x0, 0x3]}, @end, @ssrr={0x89, 0x13, 0xad, [@multicast2, @empty, @local, @empty]}, @noop, @lsrr={0x83, 0x17, 0x3b, [@multicast1, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x14}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x1b, 0x55, [@local, @empty, @multicast1, @rand_addr=0x64010101, @multicast2, @empty]}, @ra={0x94, 0x4, 0x1}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'syztnl1\x00', <r12=>0x0, 0x29, 0x0, 0x6, 0xc, 0x10, @mcast2, @dev={0xfe, 0x80, '\x00', 0x25}, 0x700, 0x8000, 0x3, 0x7}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', <r13=>0x0})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000004c0)=0x14)
r15 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r17, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001100010000ff0f000000000007000000", @ANYRES32=r16, @ANYBLOB="80010000091004000c001a800800058004000480"], 0x2c}}, 0x0)
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r19, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r20=>0x0})
sendmsg$nl_route_sched(r18, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r20, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r18, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r20, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', <r21=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r2, @ANYBLOB="000026bd7000fbdbdf2513000000280001801400020076657468315f766c616e000000000000080003000200000008000300030000003800018008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000140002006970766c616e3100000000000000000008000300020000005000018008000100", @ANYRES32=0x0, @ANYBLOB="140002007369743000000000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="080003000000000008000300020000006000018008000300010000001400020070696d726567300000000000000000001400020067656e6576653100000000000000000008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="1400020076657468300000000000000000000000280001801400020076657468315f766972745f7769666900080003000400000008000100", @ANYRES32=r14, @ANYBLOB="0c00018008000100", @ANYRES32=r16, @ANYBLOB="2800018008000100", @ANYRES32=r20, @ANYBLOB="140002007767320000000000000000000000000008000100", @ANYRES32=r21, @ANYBLOB], 0x180}, 0x1, 0x0, 0x0, 0x20040400}, 0x40004)

6.676815288s ago: executing program 3 (id=6982):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0xd0, 0x1a0, 0x270, 0x340, 0x0, 0xd0, 0x1a0, 0x270, 0x430, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@empty, 0x40, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
socket$kcm(0xa, 0x4, 0x106)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00081f74fbb4a92119e19b8ab19d204087065cc707b152b33901ef8b220d6d9c026e82e758ec93047595f3868bd9c646ce533579a82c5ad5d6c620525200000800"/77], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(0xffffffffffffffff)
r2 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty, 0x10001}, 0x80, 0x0}, 0x20000001)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20)
recvmsg$kcm(r2, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x10002)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r4, &(0x7f00000000c0)}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x5, 0x4, 0x100, 0x2004, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000100010000000000", @ANYRES32=0x1, @ANYBLOB="06000000000000000000000000000000000000005dca6cda312627c8060764c62ae2150da33d1d60061f38baa19febdd9a9819695e376adc9d5955", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000300"/28], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{}, &(0x7f00000007c0), &(0x7f0000000640)=r5}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r6, &(0x7f00000004c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000060000000032447eb74000000000000028", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r7)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r10, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r8}, 0x20)
close(r10)

6.556176274s ago: executing program 3 (id=6983):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="ab87aedb", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="00009900060000003c0000000800050007000000"], 0x24}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRESOCT=r0, @ANYRES8=0x0, @ANYRES32=r2, @ANYRES64=r2], 0x30}}, 0x20000801)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00')
ioctl$NS_GET_OWNER_UID(r4, 0x8004b709, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000001300000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000000001004001300000000000000000000000000000000005a5da91db7d796659a2402d1fd3051ce8afde87a05e5dc2c394745326bf0b4e50d87da5116df63560c70751a0566a9879f6581d7607a9e5fafcb9bdd1b175cae82497c7b394dccade14f37dfbf1ca23280ea7baaa3641a82658c22d18a5adcd3f829d5c17648cb08e043ca7bcb208cdea4c2725c3b54e500a18e498b09414ac08f06533df4438fd2d1e05bba9f02000000000000e1a0b8f18b49442774a204ea68acdce5a4d2e31b579b2e315a74b71e5651748c8af1e9bd00000000"], 0x3c}}, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="0a001a0008021100000100000a0006d3ca02110000010000"], 0x34}}, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r8 = openat$cgroup_devices(r7, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r8, &(0x7f0000000100)={'b', ' *:* ', 'rw\x00'}, 0x9)
ioctl(r6, 0x8914, &(0x7f0000000040)='dummy0\x00'/40)
ioctl(r6, 0x8914, &(0x7f0000000080)="64756d6d7930000000000000000000000100"/40)
ioctl(r6, 0x8914, &(0x7f00000000c0)="6c6170623000000000000000000000000100"/40)
ioctl(r6, 0x890b, &(0x7f0000000100)="000000010000000000000000020000000f0000006c6170623000000000000000000000000000000000000000000000000000000000000000e000000000000000")
r9 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r9, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB='I'], 0x1)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)={0x48, r1, 0x8, 0x70bd2a, 0x25dfdbfa, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}], @NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x48}}, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r10}, 0xc)
bind$packet(r5, &(0x7f00000004c0)={0x11, 0x1a, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)

4.104447517s ago: executing program 3 (id=6986):
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000f00009500000000000000b1f8306e05d1e4aab09bf06b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca093f5024a110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bca4e9e5011201a2"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@fallback, r1, 0x11}, 0x20)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x300)
pipe(&(0x7f0000000140))
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0xfff5}}, 0xa8}}, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)

4.024627415s ago: executing program 3 (id=6988):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0xd0, 0x1a0, 0x270, 0x340, 0x0, 0xd0, 0x1a0, 0x270, 0x430, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@empty, 0x40, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
r1 = socket$igmp6(0xa, 0x3, 0x2)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newchain={0x24, 0x64, 0x800, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff1}, {0x3, 0xc}, {0x1b, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000845}, 0x2000c8c1)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000700)=<r5=>0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000013000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000034001a8006"], 0x54}}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054)
write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="400109"], 0x87)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x410, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x340, 0xffffffff, 0xffffffff, 0x340, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast2, [0x0, 0xffffffff, 0x164d2c527ac5db29], [], 'pimreg\x00', 'vlan1\x00', {}, {}, 0x1, 0x40, 0x0, 0x20}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x2e}, [0x0, 0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x2b}, 0x0, 0x230, 0x270, 0x0, {}, [@common=@srh={{0x30}, {0xd1, 0x8, 0x8, 0x8, 0xf, 0x4c, 0x400}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x52, 0x1, 0x0, 0x1000, 0x6, 0x3, 0x20, 0x961cf1a5bf380caf}}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x4, 0x1, 0x9, 0x9, 0x80000000, 0x52dc, 0x57b9, 0x80000000]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x470)
r8 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r8, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x200b, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefcb)

3.887373479s ago: executing program 0 (id=6991):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}]}], {0x14}}, 0xa4}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073", @ANYRES64=r1], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="28f80100", @ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c000000080003000400000034"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
r4 = socket$inet6(0xa, 0x3, 0x4)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x43, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000009000000000000000800000085000000af0000089500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x5, &(0x7f0000000500)=""/5, 0x40f00, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7429}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001bc6500850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4)
sendmsg$unix(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0xd0, 0x1a0, 0x270, 0x340, 0x0, 0xd0, 0x1a0, 0x270, 0x430, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@empty, 0x40, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
r11 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r11, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x200b, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefcb)

896.931831ms ago: executing program 2 (id=6993):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x18, 0x26, 0x109, 0x870bd22, 0xfffffffb, {0xb}, [@typed={0x4, 0x14e, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0700000004000000080000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000008e00f1ac9fae34e01333b4c88d618b419239183f48817413821854355d2217ae3a5d7e9841ffc3ed801f4c209654b47bebc0a2c5124a549b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r2, &(0x7f0000000140)="f78b", 0x0}, 0x20)
r3 = socket(0xa, 0x5, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x64, 0x6, 0x830, 0x0, 0x678, 0x350, 0x1d0, 0x350, 0x760, 0x760, 0x760, 0x760, 0x760, 0x6, 0x0, {[{{@ipv6={@mcast2, @loopback, [], [0xffffff00, 0x0, 0x0, 0xff], 'virt_wifi0\x00', 'hsr0\x00', {}, {}, 0x2, 0x0, 0x6}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [0xffffff00], [], 'batadv_slave_0\x00', 'macvlan1\x00', {0xff}, {}, 0x3b, 0x0, 0x0, 0x12}, 0x0, 0x138, 0x180, 0x7400, {}, [@common=@srh1={{0x90}, {0x0, 0x92, 0x9, 0x7, 0x6, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], [0xffffffff, 0xffffffff, 0xff000000, 0xffffffff], [0xff0001fe, 0x0, 0x0, 0xffffffff], 0x400, 0x2}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa010101, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x38, 0x12, 0xd7}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@local, 0x38, 0x20, 0x32}}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@rt={{0x138}, {0x2, [0x401, 0x1ff], 0x9, 0x2, 0x0, [@local, @empty, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x35}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @ipv4={'\x00', '\xff\xff', @empty}], 0x9}}, @common=@frag={{0x30}, {[0x80000000, 0x7], 0x7, 0xa}}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@private1={0xfc, 0x1, '\x00', 0xff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x890)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r3)

896.486563ms ago: executing program 3 (id=6994):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0xd0, 0x1a0, 0x270, 0x340, 0x0, 0xd0, 0x1a0, 0x270, 0x430, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x8000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@empty, 0x40, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)

894.048384ms ago: executing program 0 (id=6995):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b160000000000000000020000084000048018000180080001006f7366000c0002800800014000000004240001800b0001007470726f7879000014000280080001400000000208000340000000140900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
write$tun(r2, &(0x7f0000001500)=ANY=[@ANYBLOB="05800200b6441aa2e2e705000200451a00200068000008119078e0000001ac1414aa4e214e23000c9078"], 0x2a)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0xd0, 0x1a0, 0x270, 0x340, 0x0, 0xd0, 0x1a0, 0x270, 0x430, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@empty, 0x40, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
r3 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x0, 0x4}, 0x80, 0x0}, 0xe07e872420dfefcb)

835.870295ms ago: executing program 0 (id=6996):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x6, 0x3d832047, 0xfff, 0x7, 0x1b8e, 0x0, 0x9, 0x5}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff3}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0xd0, 0x1a0, 0x270, 0x340, 0x0, 0xd0, 0x1a0, 0x270, 0x430, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@empty, 0x40, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600894f00000c00030008000c0004"]}, 0x58}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000009000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a0001006d617463680000001c0002800b00010068656c7065720000040003000800024000000001140000001100010000000000000000000000000a"], 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_MSG_GETSET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)={0x20, 0xa, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x8080)
ioctl$XFS_IOC_FD_TO_HANDLE(r8, 0xc038586a, &(0x7f0000000700)={<r9=>r0, &(0x7f0000000580)='\x00', 0x60a81, &(0x7f0000000600)={@_ha_fsid={[0xfff, 0x6]}, {0x7f, 0x5, 0x5, 0x7f}}, 0x9, &(0x7f0000000680), &(0x7f00000006c0)=0xffffa121})
ioctl$VHOST_SET_LOG_FD(r9, 0x4004af07, &(0x7f0000000740)=r0)
r10 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r10, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x200b, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefcb)

833.973656ms ago: executing program 3 (id=6997):
r0 = socket$xdp(0x2c, 0x3, 0x0) (async)
r1 = socket$packet(0x11, 0x3, 0x300) (async)
r2 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x4}]}, 0x10) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) (async)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r4=>0x0}) (async)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x4}}, 0x10) (async)
bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x1, 0x4}, 0x3}}, 0x10) (async)
bind$tipc(r6, 0x0, 0x0)
bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) (async)
sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) (async)
sendmsg$xdp(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0x2c, 0x8, r4, 0x2c}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000200)="720c554bfb3983be70167ae2079bdad4952e047c4fed346a51f93bf78ba99574bb6695f0f0a64a0113e809b3e86fd4dad91ecc64e92ec1eff8ecfd8e57a0d7494f0274f4311ae38c6488b15736c6446dca1c71ea3363c13a92117e07d10e6f006b876967633b7f89cc33cac005bd101c7e59679c18fced9ff46e6c2bf78034284a4c35ba191c1b46fe85642ad5bfbff7f9e4da01c0393125dca108488230c986f8b5f556da656a4169459ddb6235cfc243f84b1f9f5bcfdf4500be57283cced4be00ee535e7f13034424e0b31289e2a8e64642212f407b170bde88e634efc64ac0099913f247f976943e3d37e6ae8f3073", 0xf1}, {&(0x7f0000000380)="7a727d53e336fb7cd4b72423fed64e13c63635efae4756fa2d98f70c511e828f399c742e5a751dcfd7ca54253884c12d42956249be51c192526c9dd6694396dd511c5190e9e612eff2cecf21c5d4fcc0a35c9a6e4f3b0d099307b86f325c75ad6853cc5f4854b3ddd7089371462955acfd0b2b1cd2ec6952438a583e67187f1238bc144c2c0eeddd89f919aad86979aff0fe598fb91a8828a3dfdf3daf1667785fb41706c448bfcdd4124f7b462bdd64f1ae13394d339f1177fbccf047ac60f7e4214c769721917f9b5f961a2be45f6ef6fe458cea408df871fe7d83282b5973db14e2a8808be791856a9903", 0xec}], 0x2}, 0x8800) (async)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/2, 0x1000000, 0x800, 0x7, 0x1}, 0x20)
getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) (async)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000000)=<r9=>0x0)
bind$nfc_llcp(r7, &(0x7f0000001040)={0x27, r9, 0xffffffffffffffff, 0x1, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) (async)
listen(r7, 0x40)
socket(0xa, 0x5, 0x0) (async)
r10 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', <r11=>0x0})
bind$packet(r10, &(0x7f0000000080)={0x11, 0x1a, r11, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) (async)
readv(r10, &(0x7f0000000680)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/23, 0x17}, {0x0}, {&(0x7f0000000480)=""/178, 0xb2}], 0x5)

767.134994ms ago: executing program 2 (id=6998):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async)
sendmmsg$inet6(r3, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="d91f00d608989c53f4aee0b60e8ce7ef2b9f1c88972e370a33fd463bf2f11fa395382b7fa6a582b644b9190efdc12b27434cebbd8c37822900b432a1e9406c745c08237bbbf0a589400e931e288c7020eb8d2ac516", 0x55}, {&(0x7f0000000440)="549cac65e6786ad82a84515185600984f451080ebf5df00f474514b2d6f77277295a8b6e020f44e167a9e8296e2bd665360c725ba570d62abd2c6e976c50c5d5d70f9644b99d60a49ded049ed05cbc9fcef9850c10d903bd0c7be81c9da8f2f547b7be0c65b65f18424e3030e207f7062b3530c1fd62038aa5e4ae52261efd4dd014f68ce709c79de5115551c8133a4043cdf88674ca2b5b4ff27c660fd294ac24f21432cb097b77b83792ea3b79aaebc682ea19894166727f5c187c3e08ba05b7306306accad133037d2ed2f0127e092d75f42a7b73d891e3dc184b", 0xdc}, {&(0x7f0000000640)="570c4e5b7827c2d241bedf3f5447169c3f2943fcbc1f47dfc22c0944e8f99f937677ce58575bfae935623fa9cb59045a49badcf8df0133473ccf852267a68bb2cad431f3d72665d216a1052ca37f26de2bffd89fbd871e69666af4194eee95df1698966092f11da0216222ab81b206053bbbc4ad9c83b0d1f183c43ceac2d2cbbfda4be7a23886d48ae081f83c720cf495f88d422cfe16b190250325f0d156a2dc26bdb3702c925ff58b2dbce7f77d8d85c61fcc4c03f47aebc55612c36dcb707f420d89d4fce018a8d61bd159c838df19898cb1c0dcfe6f24d9581d7ce282252a55e831d2", 0xe5}], 0x3}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000002380)="b9c615adb435cca0e14c99165991425bf6869feb5bc91d16faaa1e553b9ba9b8885e3132b577ed920350b853789a3c023c2b935ea8b2b9b98d4523acf27f4e45df6667b26b934bf4a2e10acf78417923dcef99d0ddb6becfb3766973d20a95ee7e83108308969fca595741c7f50e9d35d0462bc65c295881993cbc4dfd962af204ba800dd23f3721fd98b3f6121083f68f408363a4a8620d535c1b29fbbe546f4a2b0b7681251f3ecc7b782f3df90e2942f9e737bb561ddd15b4b6b5ece9448a616a5221828a7ea71dfaaa7cf64f26b41375972d28cd3db598fa5a5625b6b00f13f7d6c194f39cc639e8a5b0ab06d35935e856555504eb25395adec288f6ff8e99de0119f863a5dbf4e3b18cf049d3b70379a3131cd90f25bd5e2f1c3b83e72b8cc88226def21b7824f92cddbf8f4271315ab0ba1dcab80dc1068d3491baacbbc651ba06cfd8bf3cfecce1c0b25124e28f839f25c7d4e2ad533f8fb14c514de63a86e4f06e9799ecaf00f7ff665a2fed73e567536d1d6b1e929a51d3d682559d4dbc174d9d389e53866249e58ff31a1832f453d299e7a3c4e4b673b546f2f0b670183e77f56a17f07c279bae471ce38124d34b6cb40dd5ac278f173c1296d07653d60ed4c1b8ccf2f3d7ff820bacfa26e4086a7bb79e5a72dbed2e8fff1340a9b158b0da2541074be22c160213fea049286cd8da7fb115968c622063040f9b2fbebbd3bbef6eddb51a1c7a082cc76fc7a8348c01b71d87631363e56cba171a1b501af0e02bcf4c1aaebde108a68de36ed5bbfd8037776f1b265716ace9faf8dfc59235cadfecf04f7fb81d03f112cab7c0ff3075d58ffa492652dd110adca2dda9a430535b9474c4faed55e8428fac436dd9723fb98cae9396cd56339b1012b84ba5181dcb5baf6e6f4aeeca6d138592c8e11abf0057f22c99aa0f3c64dd39f97e99a7be65e4dc45a5ef85ecf7c015cda60ae91b2eb439cb67e69b6eb9dd0b61043557530353d72e0468560d4bafcca1bd7f9c6afe1a3a662fb025fc19369ffee064153cbbeec0570b8fe3409f8309cfe934bc5583874e5ba8fd5612c1686dea7433e35aff9ff0e21204915e5c1239de29a5f38f110c4bf26ad1d167f17152d032fa550e8b36c4a45ebddfdbbce0cc2d90e84818ad6884e515091407be569cf665ab7d9274d33ea803cc08c1b3bc542dc81ce88acfcb1229aa5e7ba6f9f1a16495c11829d97b6bef2cd8decd5add93a5574cb84d2c6bb932222909916b2aba380cef005032d404d28cc3ab15c2de814412fc5f35e783687174fc7f80851ace4ce383e8e998bf94f0f87a6bc18d89c0c97c1ebe6e9247922f8535a0d23d44a64f538afa58b3c7a1e8cb5ee501c8e9cb7f476c89c4716f726ac9563c2c8fa14c1a5dd4cc3aa39c6dc1c87995b4f0334fd1f33437af245eb2a40d7e44293390397ae728acb1bf9a77cb8344ac9e2fa5e992bdbfa09767d44c17712941a4f52d888cb4377ab447deff3fca6953dd13eb9737d99d760cade6a9a0918d4cdfeffc8a7d8641c26d5ab5b367122b0b27055f9fc5633e85fc438969ca0a242f0cd14eec12e99bd7d7f8ad802c452566a86d69b8499822c3d04661de7e52124499e574f9e4c0482de31c798568f00432af1e4f988ff4097037c8a1f02a2aa36f9410bbbd47d647c63f22d7d3e72a92ff70934fd18e4b14f9be799308ba42d58c759e2f66696ead711902070c8d1dda1de261e9881429c5c9b4e4625b37b621928112dba116245f8a541f20dde2b4b820a93f153315fc7894cd9195c9076bd8b5fa922a2cce6a9af29c9401a45893936a3ce9485ddf84d043da66f966deb11fb2657b3a06eec71413a4eb3f035080c7368c53c1ce460b51a179ce81442fefef656d13b3ea789befda32fb6d3eb42f75cdeb62f9cc73b2429745f4a8105c64683ecd90734913f94699859c346c7bce9c828b1e0a2d15b8dc2ae8e4449febfd168c5719c039eb44ed314e060b063d3b32ee017ab1a28acc0861da4ba15e9a71040bf106bb45fe3b719ce40a0649f4f73265235164e88563bed2960a35007e46a539f96234b36750643dd239e482359221a3e75332d5beb627fa9d84bc3a2eb7266c890d1b2295042916fb89e935e8fa6237555f931fb312849571d8889152de3338a5c30e611698e4612c8c2586c182d799428352f3a9ec290985e427312a8d3365a8819097b1697f29f7a207e1323d96207a4e46ba4e5b50d984135da9cca6bcf4c62ea0dc2c1ad88c45163c420da885a456a06384deacd39eff91ae124c33749f007c9c73b39b5ef456e06c7394a010066d72790606d39add005ae84bdda4104077b8a797e24d329071c6e4836a5451f4a043b1f71388bbfade35b0ac98ca8711ddfe042f28cb8f76bb8fff0870c67c2c1150a580a93cc16edf6e73d15319263e36723e76d2203a96cb438b6246a3ac4da6621a7e4c89133584341862d547d7bb885c4c169507e30a16170a242a32ead68bd9a5ab169f7460df9c7a135f8b6af647101cdaf6fbd9c3b849ab70bce5dea4cbf5959dad2a91a2dbc095dfc8960e4c3872eabb62565d420c8df1b44e05ab16c69109a4c07733340d59fd3f9853d0183355f05ddeaee5a4f9a5f03f5d84c76634db61b6d9a4aea51ddbdf43aee55e7f3780cd31ee799f6f33003606a5df9db08849da7bf884df395b50474b24b3527682a87968cd1be63ec8405d38cba5db9c943987eda334efac5ff30b137259babe08532e2a930262edf64c7364dc0d987374d6ca78e16a63d56a63a05b6cd9044abc8599b97aefd6460b13dbef9ff09bb15d419f542eae4a237b0fe376605d300467679c06c33aba623c903a559d0836d8353afed6e39e68be56b775a4952e3edbdc461ea3e6883b596ae6e66e0a92f18d48abf9a23eb5ce70ceed4a2ab6611ed70600a9fced116864dcbf43cb72ea3af69f6a47a9728950fbc7c8c71f6c75713423e2b39ea8ea8e2ebdf68fe639fa8b2577c675a4706343577c8237431e91bd6c2a423d774ebd06db324361a0c6857fa0038974761d178224545a326093d945453119e18be577add7dc62317989bbd4ccc5c962c7c31ef56b5126e92adf8899a1cb3416b4087cc034c29b3518bcf8fe105f6bd70cd766a0617ea45ebf9750ac99ef104a7e14405fbab6d7d735fb7ddf72bc368ba08c14ccd6a1f35fb894b030136a05d882a2613fbcea5f934dcab251d047185eaf8e7e349998ec3cd220251a13d63a6926a27314234e55bfe66b125b502c82c7c8e0a7f71ac8deb73a8731d127ff8722cbc2794b99b4594f90cd62afc53a217ff5860146ec98f422191349a5c252ec81ddb055936712d2edf152564cfc0dc98dca3d1d4a6dca380aee72a4f1d33594a16c9f4a27fca028f2f328fc358962bfdfeaa2e060e19cc8232937d5d2b713ee45d6cd7b5a8fb1450f81653eef0cd73bbda10318abbb30daa1cacd59d30722b5264175a8c3ef10426647afa6eecd7d2cebef58b721de10a1dfe4fe1a7735912c9dc68576d5d462b4aa039f350135e2ca8c4203f379ba0afd22fbe84df3611a359e58bc73529517ff2c2b5d6f4cc44df1f37bb6910d9eaff57306a785715a237543f1b2f16b2ae50b5018e0b8988feaa1b24a9106497f87eeb12cbf705c17d5c53b41b7b6ed022ea3ce572a23e22f689fdc517a0d9cc6a997cfb0eefd67162cd727422f4164837dd349c0214922dbfc50c3657b1913ea1f88778320913229432c6c73527876b553b0a6158063323a7f2f36e0216ebaf5e9ea52a85447d43c8a0cbccdfb0b453ca1df93951471cb72225b97b75f1e77225779657bf6d77313ef8bda668c914769b1c0c0dbc5587e4ace985996a4b9ff4071488684d96d131810baa439ad5f9254217142a5697dbb7abf05a3bbde089b2a2e94153edce47b334ec35572bab1cb551c3c76acb7bc1ab82a7cfc6177b2dea4bb012a0cb3f71117f963a5fcf777c6d03ae50e2ffea596d0c5fb821a585352eace44cae8698c51889f341fc68bf0c0ff565f23aca99fe2194e6066c756848d8ff68d5b62075a374c3441217eb2b9ca87263de59a6240ceae2f8a86b6c064dafc6fb9a669e53c5cf815657766d9903d613fdf6fe2957be15eab0af44c1a4a933f940bea2e46518b31c2a1faf9596d086e4f397b200b040c0e5d090142cf42f7de30c3f8a6deb9331d5ea338470df38689f4456ab8d243d381dc7c551784d6ff11a1bcae327fb72cb4de6f04f9e0cbb5a069633baf800ff676d8efa4471a0d412f1d449b797a3c35cf6904db713639974d6f3d157b7dccf1526e0c65598b656cfb30be0643058ac33d6e51bd720a3aa1efe72148d9b2a2c58e44e453feb31956d67119ca0d4a75db27fd62c207902d27b59f7947691d6ac234522c7722ba04aacafd795a0cfa9d01fc4eecb9233ba819a48e22b9b9d2541f843e28bcd80fc058797d99438d20d39af224727c38a72c8ec008c0d286227dcb4799c8b0096c220fc450f10b2e52f293b624e64cac03084cc2e2626215522980f4d19ef37406f534b1061fe9691e721a38e6854c318433c574b17a841af00195306e2209b46021dda5126cc88a49046c17ae48f0a890fa8c53c248d12f96b2f2abe3155026679bc19f8abb0c90f6554b818294bca0525f49e20eb0daafea45ae572a00bc3a8fae5cefc6d5b90c52f0dfe0de4873f1ebd2cf1ebbf09acc9c83d491d5c7e8612c0a7a12376da52246c6bbd548e81e005e466e7848b4bf348b06f09a2da11ea1102c585549b4b7244e999e10f8a89f31d3855ac706742612c815552c784b4e30d51a4dd5a5b92e6cb1e36c19e8e424b450d590925f8bc94133b7a45feea68cd48bfa165d04d2a83c1374066a7cb98f3bf92c226624749eb5ce340be1178baea230909842503ec5696f8976b535f31ca52ed17c5befecb94ba9ec214ac36c3b0c955f30352e57e469564df9ab96e688e2449e821d84814e5d062a631721a3950bf2243a205ead77188121e4b44ddd0ea9946f0a10d805dc18940263", 0xdea}], 0x1}}], 0x2, 0x8800) (async)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ab000) (async)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0xc80, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001ac0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x28) (async)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e20, @local}}}, &(0x7f0000000480)=0x84)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0xd0, 0x1a0, 0x270, 0x340, 0x0, 0xd0, 0x1a0, 0x270, 0x430, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@empty, 0x40, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) (async)
r7 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x200b, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefcb) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001600)=ANY=[@ANYBLOB="840000000001010400000000141a000002000010240001801400018008000100e0000001080002007f0000010c0002800500010000000000240002801400018008000100ac1414aa08000200ac1e00010c0002800500010000000000080007400000000120000d800c0003"], 0x84}}, 0x0) (async)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r9, 0x200000) (async)
setsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f0000000580)={0x10, 0xdd36, 0x6, 0xff97}, 0x8)

687.299234ms ago: executing program 0 (id=6999):
unshare(0x64000600)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0xd0, 0x1a0, 0x270, 0x340, 0x0, 0xd0, 0x1a0, 0x270, 0x430, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x4000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@empty, 0x40, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)

617.397132ms ago: executing program 2 (id=7000):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0xfffffffe, 0x200, {0x0, 0x0, 0x0, r1, 0x10227}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x840)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0xd0, 0x1a0, 0x270, 0x340, 0x0, 0xd0, 0x1a0, 0x270, 0x430, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@empty, 0x40, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
socket$kcm(0xa, 0x1, 0x106)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(0xffffffffffffffff)
r5 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000005c0)={0x42, 0x3}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20)
recvmsg$kcm(r5, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x10000)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r7, &(0x7f00000000c0)}, 0x20)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x10001, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0xffffffffffffffff, <r11=>0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r10}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, <r12=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r12, &(0x7f00000004c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r13=>r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
r14 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRESHEX, @ANYRES32=r11, @ANYRESDEC=r9, @ANYRES8=r4, @ANYRES64=r8, @ANYRESOCT=r13, @ANYRES8=r5, @ANYRES64], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r14}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

486.918103ms ago: executing program 2 (id=7001):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000580)={'veth1\x00', @random="b0eb094528af"})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r1, 0x8b27, &(0x7f00000005c0)="779efceba6513241df96ca15deb8d19a88824816c493039d6e383620d5636134fb4c23e62cde7d9ce0b100000000000000bb56efa812d4e4f389c688e13a4a731cb423772c09c2780858dd15279fd50188b7dd7a908e38f56692c7ea2aa704817ae01078d74de1bb4feadf973494cc77a6")
write(0xca, &(0x7f0000000040)="04046e000200faff04001a0001", 0xd)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0xd0, 0x1a0, 0x270, 0x340, 0x0, 0xd0, 0x1a0, 0x270, 0x430, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@empty, 0x40, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
socket$kcm(0xa, 0x1, 0x106)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$int_in(r2, 0x5421, &(0x7f00000001c0)=0xa96)
connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e24, @local}, 0x10)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0)
sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x2008, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, 0x0}, 0x4080)

357.180981ms ago: executing program 2 (id=7002):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x2, 0x6, 0x540, 0xf0, 0x2b0, 0x470, 0x0, 0x3a0, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0x0, 0x0, 0x0, 0xff000000], [0xff, 0xff000000, 0xffffff00, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000010000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}, 0x37, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x400000}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xffffff00], '\x00', 'ip6gretap0\x00', {}, {0xff}, 0x2f, 0x9}, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0xffff, 0x44, 0x2}, 0xfffffffe}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [0xffff00, 0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0x912a97ef168388c6, 0x0, 0xffffff00], 'pim6reg0\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0x4c, 0xff, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv4=@loopback, 0x4, 0xfe, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3ff, 0x9, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0)

265.638984ms ago: executing program 2 (id=7003):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0xd0, 0x1a0, 0x270, 0x340, 0x0, 0xd0, 0x1a0, 0x270, 0x430, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@empty, 0x40, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
socket$kcm(0xa, 0x1, 0x106)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(0xffffffffffffffff)
r2 = socket$kcm(0xa, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20)
recvmsg$kcm(r2, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x10000)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r4, &(0x7f00000000c0)}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="06000000040000000400000000010000000000008253d56f9d90ee3df6fc4c7f79a7e2332b3a8141843e8fb01e5ee3d13be50c88450b7ae6670a8821bcd179fc2934d1f6deb4d621966942017ec8c1c1f7bb2f02719babc8ba014f28e6617f6200e92ab092cda600000000000000748b0e83f7d838ef2b38f08c1659b4dc68d5bc93f5ef9ec117c73c088617d3b2952d22e782b668697d332086", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x10001, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$inet_sctp(0x2, 0x1, 0x84)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
r6 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
write$tun(0xffffffffffffffff, &(0x7f0000000940)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x6000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "04ab396f2fc7dc5d5228405fd43717b5ae8c3952fa8e88262d276612a5b79d48", "1085d015cb996488d154f3ec810fa80e", {"3b469f1260fa07e224edb9a58d9e2bc1", "1bc5105cb13741cadb66a4bbbfb652c1"}}}}}}}}, 0x8a)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{}, &(0x7f00000007c0), &(0x7f0000000640)=r7}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, <r8=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r8, &(0x7f00000004c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50)

76.775589ms ago: executing program 0 (id=7004):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000020000001400000008000300", @ANYRES32=r2, @ANYBLOB], 0x28}}, 0x0)

0s ago: executing program 0 (id=7005):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000240)={0x4001, 0x800, 0x1000, 0x5}, 0x10) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000001600156f27bd7000fddfdf270a0000"], 0x2c}, 0x1, 0x0, 0x0, 0x620080d4}, 0x24080)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0xd0, 0x1a0, 0x270, 0x340, 0x0, 0xd0, 0x1a0, 0x270, 0x430, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@empty, 0x40, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) (async)
r2 = socket(0x2000000000000021, 0x2, 0x2)
shutdown(r2, 0x2)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, &(0x7f0000005cc0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000180)='G', 0x1}], 0x1}}], 0x1, 0x40088d4) (async)
shutdown(r3, 0x1) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90)
sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x80)
r4 = socket$kcm(0xa, 0x1, 0x106)
ioctl$XFS_IOC_SCRUB_METADATA(r4, 0xc040583c, &(0x7f0000000580)={0xffffffff, 0xa, 0x40, 0xfc, 0x3}) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x6, 0x4, 0x1, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f0000000580)=0x2, &(0x7f00000001c0)=r5}, 0x20) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @local}}, 0x80, 0x0}, 0xe07e872424dfafcb)
r9 = accept(r1, &(0x7f00000005c0)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000640)=0x80)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async)
setsockopt$EBT_SO_SET_COUNTERS(r9, 0x0, 0x81, &(0x7f0000000980)={'broute\x00', 0x0, 0x0, 0x0, [0xffffffff, 0xfffffffffffffffe, 0x5, 0x7fffffffffffffff, 0x10000, 0xfffffffffffffffe], 0x1, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}]}, 0x88) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r9, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB='Xo\x00\x00', @ANYRES16=r10, @ANYBLOB="040025bd7000ffdbdf257000000008000300", @ANYRES32=r11, @ANYBLOB="0c009900f07f00000a0000000a00060008021100000100000a00060008021100000000000a00060008021100000000000a0006000802110000010000"], 0x58}, 0x1, 0x0, 0x0, 0x20040051}, 0x80f8)

kernel console output (not intermixed with test programs):

batadv0: Adding interface: syzkaller0
[  457.221812][T23929] batman_adv: batadv0: Interface activated: syzkaller0
[  457.269958][T23930] wlan1 speed is unknown, defaulting to 1000
[  457.436004][T23948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5115'.
[  457.440070][T23950] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5115'.
[  457.445792][T23948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5115'.
[  457.533722][T23953] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  457.543017][T23955] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  457.547471][T23955] nbd: must specify a size in bytes for the device
[  457.733027][T23968] x_tables: duplicate underflow at hook 2
[  457.842634][T23971] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  457.850834][T23971] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  457.979467][T23978] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  458.069944][T23984] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  458.095733][T23986] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  458.153098][T23990] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  458.212824][T23989] nbd: must specify an index to disconnect
[  458.304088][T24002] syzkaller1: entered promiscuous mode
[  458.304110][T24002] syzkaller1: entered allmulticast mode
[  458.309017][T24002] x_tables: duplicate underflow at hook 3
[  458.418665][T24013] Bluetooth: hci2: Opcode 0x0401 failed: -22
[  458.756949][T24055] ip6t_rt: address list match requested but addrnr is 0
[  458.829675][T24058] __nla_validate_parse: 8 callbacks suppressed
[  458.829689][T24058] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5143'.
[  458.834621][T24058] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5143'.
[  458.927715][T24077] batman_adv: batadv0: Adding interface: syzkaller0
[  458.927728][T24077] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  458.927776][T24077] batman_adv: batadv0: Interface activated: syzkaller0
[  459.104875][T24076] batman_adv: batadv0: Interface deactivated: syzkaller0
[  459.169860][T24076] batman_adv: batadv0: Removing interface: syzkaller0
[  459.455776][T24120] wlan1 speed is unknown, defaulting to 1000
[  459.646128][T24135] SET target dimension over the limit!
[  459.702150][T24133] wlan1 speed is unknown, defaulting to 1000
[  459.812342][T24140] wlan1 speed is unknown, defaulting to 1000
[  460.086673][T24153] netlink: 'syz.1.5159': attribute type 3 has an invalid length.
[  460.189581][T24165] ip6t_rt: address list match requested but addrnr is 0
[  460.340244][T24171] wlan1 speed is unknown, defaulting to 1000
[  460.505624][T24164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5163'.
[  461.083278][T24187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5168'.
[  461.188771][T24194] ip6t_rt: address list match requested but addrnr is 0
[  461.376365][T24203] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5174'.
[  462.501961][T24232] SET target dimension over the limit!
[  462.503537][T24235] net_ratelimit: 33 callbacks suppressed
[  462.503583][T24235] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  462.548623][T24238] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  462.611764][T24243] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  462.633019][T24242] wlan1 speed is unknown, defaulting to 1000
[  462.650262][T24248] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[  462.696827][T24252] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  462.697854][T24253] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  462.705308][T24253] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5190'.
[  462.790473][T24262] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  462.924420][T24270] SET target dimension over the limit!
[  462.985829][T24274] sctp: [Deprecated]: syz.1.5194 (pid 24274) Use of struct sctp_assoc_value in delayed_ack socket option.
[  462.985829][T24274] Use struct sctp_sack_info instead
[  462.992903][T24273] sctp: [Deprecated]: syz.1.5194 (pid 24273) Use of struct sctp_assoc_value in delayed_ack socket option.
[  462.992903][T24273] Use struct sctp_sack_info instead
[  463.084664][T24276] x_tables: duplicate underflow at hook 1
[  463.184341][T24278] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  463.228772][T24281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5197'.
[  463.288577][T24283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5198'.
[  463.330101][T24285] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  463.398863][T24287] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5200'.
[  463.424616][T24287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5200'.
[  463.661908][T24295] netlink: 'syz.2.5203': attribute type 1 has an invalid length.
[  463.663157][T24295] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  463.681820][T24296] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  463.688177][T24298] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bond, syncid = 3, id = 0
[  463.761071][T24306] syzkaller0: entered promiscuous mode
[  463.761086][T24306] syzkaller0: entered allmulticast mode
[  464.240051][T24333] __nla_validate_parse: 1 callbacks suppressed
[  464.240072][T24333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5212'.
[  464.240098][T24333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5212'.
[  464.240210][T24333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5212'.
[  464.240223][T24333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5212'.
[  464.315284][T24338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5214'.
[  464.315458][T24338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5214'.
[  464.315568][T24338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5214'.
[  464.315676][T24338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5214'.
[  464.315783][T24338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5214'.
[  464.315893][T24338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5214'.
[  464.329496][T24341] netlink: 'syz.1.5214': attribute type 4 has an invalid length.
[  464.602691][T24370] x_tables: unsorted underflow at hook 2
[  464.785615][T24386] wlan1 speed is unknown, defaulting to 1000
[  465.734027][T24420] wlan1 speed is unknown, defaulting to 1000
[  465.957211][T24430] ip6t_srh: unknown srh invflags 4000
[  465.997350][T24436] ip6t_ah: unknown flags 4
[  467.081392][T24463] wlan1 speed is unknown, defaulting to 1000
[  467.329166][T24467] wlan1 speed is unknown, defaulting to 1000
[  467.510674][T24475] wlan1 speed is unknown, defaulting to 1000
[  467.712094][T24487] net_ratelimit: 29 callbacks suppressed
[  467.712109][T24487] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  467.899926][T24495] wlan1 speed is unknown, defaulting to 1000
[  467.930004][T24498] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  467.998725][T24501] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  468.047054][T24504] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  468.111743][T24512] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  468.275410][T24517] wlan1 speed is unknown, defaulting to 1000
[  468.382232][T24523] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  468.429046][T24525] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  468.504435][T24532] ip6t_rt: `--rt-type 0' required before `--rt-0-*'
[  468.518308][T24531] wlan1 speed is unknown, defaulting to 1000
[  468.609397][T24517] x_tables: duplicate entry at hook 2
[  468.725042][T24536] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  468.741024][T24533] wlan1 speed is unknown, defaulting to 1000
[  468.805051][T24540] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  468.925279][T24544] bridge0: port 1(macsec0) entered blocking state
[  468.925339][T24544] bridge0: port 1(macsec0) entered disabled state
[  468.925405][T24544] macsec0: entered allmulticast mode
[  468.925414][T24544] bridge0: entered allmulticast mode
[  468.937039][T24544] macsec0: left allmulticast mode
[  468.937053][T24544] bridge0: left allmulticast mode
[  469.053185][T24547] batman_adv: batadv0: Adding interface: veth0
[  469.053200][T24547] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  469.053216][T24547] batman_adv: batadv0: Interface activated: veth0
[  469.074321][T24544] batman_adv: batadv0: Interface deactivated: syzkaller0
[  469.074347][T24544] batman_adv: batadv0: Removing interface: syzkaller0
[  469.085085][T24544] batman_adv: batadv0: Interface deactivated: veth0
[  469.085106][T24544] batman_adv: batadv0: Removing interface: veth0
[  469.249019][T24559] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  469.250098][T24559] batman_adv: batadv0: Interface activated: syzkaller0
[  469.326593][T24546] __nla_validate_parse: 15 callbacks suppressed
[  469.326611][T24546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5276'.
[  469.545276][T24566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5281'.
[  469.616119][T24577] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  470.053864][T24602] nbd: must specify an index to disconnect
[  470.109272][T24607] SET target dimension over the limit!
[  470.161448][T24611] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5294'.
[  470.349089][T24618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5297'.
[  470.349111][T24618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5297'.
[  470.349323][T24618] nbd: must specify an index to disconnect
[  470.606672][T24664] x_tables: duplicate underflow at hook 1
[  470.606672][T24666] x_tables: duplicate underflow at hook 1
[  470.782907][T24683] wlan1 speed is unknown, defaulting to 1000
[  471.271836][T24692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5312'.
[  471.273991][T24692] xt_check_target_common: 52 callbacks suppressed
[  471.274008][T24692] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  471.274008][T24692] 
[  471.479040][T24697] wlan1 speed is unknown, defaulting to 1000
[  471.532879][T24703] SET target dimension over the limit!
[  471.595613][   T34] audit: type=1804 audit(1791396878.553:8): pid=24705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5317" name="/newroot/1784/cgroup.controllers" dev="tmpfs" ino=9060 res=1 errno=0
[  471.599038][   T34] audit: type=1800 audit(1791396878.563:9): pid=24705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5317" name="cgroup.controllers" dev="tmpfs" ino=9060 res=0 errno=0
[  471.626668][T24708] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5318'.
[  471.634583][T24705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5317'.
[  471.920701][T24730] wlan1 speed is unknown, defaulting to 1000
[  471.949931][T24734] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[  472.000836][T24735] syzkaller0: left promiscuous mode
[  472.000855][T24735] syzkaller0: left allmulticast mode
[  472.384850][T24749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5328'.
[  472.627662][T24758] x_tables: duplicate underflow at hook 1
[  472.738119][T24764] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5331'.
[  472.908752][T24771] net_ratelimit: 57 callbacks suppressed
[  472.908767][T24771] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  472.908854][T24770] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  472.909453][T24772] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  472.924207][T24771] netlink: 'syz.1.5333': attribute type 16 has an invalid length.
[  472.924219][T24771] netlink: 'syz.1.5333': attribute type 17 has an invalid length.
[  472.924981][T24771] bond1: left promiscuous mode
[  472.925042][T24771] gtp0: left promiscuous mode
[  472.925120][T24771] mac80211_hwsim hwsim13 wlan4: left promiscuous mode
[  472.925215][T24771] mac80211_hwsim hwsim14 wlan5: left promiscuous mode
[  472.925285][T24771] mac80211_hwsim hwsim17 wlan6: left promiscuous mode
[  472.925459][T24771] vlan2: left promiscuous mode
[  472.925467][T24771] bond2: left promiscuous mode
[  472.925679][T24771] bridge2: left promiscuous mode
[  472.925790][T24771] ip6gretap1: left promiscuous mode
[  472.925864][T24771] bond3: left promiscuous mode
[  472.926006][T24771] bridge3: left promiscuous mode
[  472.926099][T24771] mac80211_hwsim hwsim21 wlan0: left promiscuous mode
[  472.927033][T24771] vxcan2: left promiscuous mode
[  472.927117][T24771] vxcan3: left promiscuous mode
[  472.927275][T24771] ip6gre1: left promiscuous mode
[  472.927397][T24771] bond4: left promiscuous mode
[  472.929045][T24771] ip6gre2: left promiscuous mode
[  472.931602][T24771] batman_adv: batadv0: Interface deactivated: syzkaller0
[  472.956597][T24771] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  472.956620][T24771] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  472.960328][T24771] geneve2: left promiscuous mode
[  473.020273][T24779] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  473.091304][T24784] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  473.092060][T24785] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  473.341633][T24793] pim6reg1: entered promiscuous mode
[  473.341659][T24793] pim6reg1: entered allmulticast mode
[  473.353990][T24794] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  473.388740][T24800] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  473.473939][T24806] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  473.478166][T24807] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  473.766478][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  474.439029][T24848] __nla_validate_parse: 5 callbacks suppressed
[  474.439045][T24848] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5356'.
[  474.602209][T24858] netlink: 284 bytes leftover after parsing attributes in process `syz.1.5359'.
[  474.708744][T24864] ip6t_rt: address list match requested but addrnr is 0
[  474.868567][T24875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5364'.
[  474.971059][T24878] wlan1 speed is unknown, defaulting to 1000
[  475.162614][T24893] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5370'.
[  475.171029][T24893] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5370'.
[  475.295343][T24908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5375'.
[  475.456147][T24912] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5377'.
[  475.566726][T24921] wlan1 speed is unknown, defaulting to 1000
[  475.616288][T24927] x_tables: duplicate underflow at hook 1
[  475.616362][T24927] x_tables: duplicate underflow at hook 1
[  475.616397][T24927] x_tables: duplicate underflow at hook 1
[  475.616430][T24927] x_tables: duplicate underflow at hook 1
[  475.616462][T24927] x_tables: duplicate underflow at hook 1
[  475.616495][T24927] x_tables: duplicate underflow at hook 1
[  475.616527][T24927] x_tables: duplicate underflow at hook 1
[  475.616558][T24927] x_tables: duplicate underflow at hook 1
[  475.616590][T24927] x_tables: duplicate underflow at hook 1
[  475.616642][T24927] x_tables: duplicate underflow at hook 1
[  475.954356][T24938] netlink: 'syz.0.5384': attribute type 16 has an invalid length.
[  475.954383][T24938] netlink: 'syz.0.5384': attribute type 17 has an invalid length.
[  475.976804][T24938] veth0_to_bridge: left promiscuous mode
[  475.979886][T24938] bridge_slave_1: left promiscuous mode
[  476.053630][T24938] bond3: left promiscuous mode
[  476.053657][T24938] bridge2: left promiscuous mode
[  476.063385][T24938] ip6erspan0: left allmulticast mode
[  476.067614][T24938] bond4: left promiscuous mode
[  476.069322][T24938] virt_wifi0: entered promiscuous mode
[  476.069338][T24938] virt_wifi0: entered allmulticast mode
[  476.069779][T24938] macsec2: left promiscuous mode
[  476.069946][T24938] macsec2: left allmulticast mode
[  476.069956][T24938] virt_wifi0: left allmulticast mode
[  476.074708][T24938] 8021q: adding VLAN 0 to HW filter on device bond5
[  476.090239][T24938] bond7: left promiscuous mode
[  476.092091][T24938] veth11: left allmulticast mode
[  476.120803][T24938] 8021q: adding VLAN 0 to HW filter on device bond10
[  476.122392][T24938] bond12: left promiscuous mode
[  476.122412][T24938] bond12: left allmulticast mode
[  476.126013][T24938] 8021q: adding VLAN 0 to HW filter on device bond13
[  476.132123][T24938] 8021q: adding VLAN 0 to HW filter on device bond14
[  476.154307][T23684] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  476.187588][T20347] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  476.187714][T20347] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  476.219296][ T8993] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  476.239001][   T12] bond6: (slave veth9): link status definitely up, 10000 Mbps full duplex
[  476.240181][   T12] bond6: (slave veth9): making interface the new active one
[  476.242365][   T12] bond6: active interface up!
[  476.397610][ T8993] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  476.441604][T24951] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5389'.
[  476.594184][T24961] tc_dump_action: action bad kind
[  476.651289][T24964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5393'.
[  476.813491][T24966] ip6t_rt: address list match requested but addrnr is 0
[  476.886694][T23684] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  476.886698][ T8993] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  477.041784][T24979] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5396'.
[  477.783269][T25023] netlink: 'syz.0.5411': attribute type 1 has an invalid length.
[  477.806096][T25023] bond15: entered promiscuous mode
[  477.807477][T25023] 8021q: adding VLAN 0 to HW filter on device bond15
[  477.855311][T25023] ipvlan1: entered allmulticast mode
[  477.855336][T25023] bond15: entered allmulticast mode
[  477.855584][T25023] bond15: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  477.855600][T25023] bond15: (slave ipvlan1): The slave device specified does not support setting the MAC address
[  477.855613][T25023] bond15: (slave ipvlan1): Setting fail_over_mac to active for active-backup mode
[  477.860461][T25023] 8021q: adding VLAN 0 to HW filter on device ipvlan1
[  477.914126][T25029] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20000
[  477.946760][T25029] tun0: tun_chr_ioctl cmd 1074025675
[  477.946815][T25029] tun0: persist enabled
[  477.946992][T25029] tun0: tun_chr_ioctl cmd 1074025675
[  477.947004][T25029] tun0: persist enabled
[  478.032254][T25035] net_ratelimit: 41 callbacks suppressed
[  478.032278][T25035] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  478.055267][T25037] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  478.121492][T25045] pim6reg99999999: entered allmulticast mode
[  478.122580][T25045] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  478.227463][T25051] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  478.435314][T25067] wlan1 speed is unknown, defaulting to 1000
[  478.447475][T25069] SET target dimension over the limit!
[  478.561664][T25075] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  478.644770][T25077] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  478.648142][T25077] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  478.648466][T25077] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  478.648755][T25077] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  478.658838][T25077] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  478.984187][T25097] ip6t_ah: unknown flags 4
[  479.045087][T25102] netlink: 'syz.1.5433': attribute type 58 has an invalid length.
[  479.072878][T25101] wlan1 speed is unknown, defaulting to 1000
[  479.235271][T25099] infiniband syz1: set down
[  479.235288][T25099] infiniband syz1: added ipvlan0
[  479.251280][T25099] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  479.251307][T25099] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  479.251325][T25099] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  479.317151][T25099] RDS/IB: syz1: added
[  479.326106][T25099] smc: adding ib device syz1 with port count 1
[  479.333712][T25099] smc:    ib device syz1 port 1 has no pnetid
[  480.081354][T25116] wlan1 speed is unknown, defaulting to 1000
[  480.166968][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  480.223945][T25126] __nla_validate_parse: 5 callbacks suppressed
[  480.223969][T25126] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5443'.
[  480.515246][T25140] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20004
[  480.630787][T25147] netlink: 'syz.0.5449': attribute type 13 has an invalid length.
[  480.630803][T25147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5449'.
[  480.632028][T25147] netlink: 'syz.0.5449': attribute type 12 has an invalid length.
[  480.632039][T25147] netlink: 'syz.0.5449': attribute type 5 has an invalid length.
[  480.632892][T25147] xt_check_table_hooks: 56 callbacks suppressed
[  480.632901][T25147] x_tables: duplicate underflow at hook 1
[  480.637778][T25156] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5451'.
[  480.637856][T25156] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5451'.
[  480.637919][T25156] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5451'.
[  480.637980][T25156] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5451'.
[  480.638041][T25156] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5451'.
[  480.638109][T25156] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5451'.
[  480.638176][T25156] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5451'.
[  480.638237][T25156] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5451'.
[  480.820276][T25168] IPVS: Error connecting to the multicast addr
[  480.949036][T25184] macsec0: entered promiscuous mode
[  480.950990][T25185] macsec0 (unregistering): left promiscuous mode
[  481.120906][T25202] ip6t_ah: unknown flags 4
[  481.763876][T25232] netlink: 'syz.0.5471': attribute type 1 has an invalid length.
[  481.800914][T25232] gretap1: entered allmulticast mode
[  481.808751][T25232] bond16: (slave gretap1): making interface the new active one
[  481.815748][T25232] bond16: (slave gretap1): Enslaving as an active interface with an up link
[  481.979387][T25240] wlan1 speed is unknown, defaulting to 1000
[  482.294131][T25256] x_tables: duplicate underflow at hook 1
[  482.495235][T25271] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  482.495750][T25272] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  483.129129][T25320] net_ratelimit: 45 callbacks suppressed
[  483.129154][T25320] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  483.482471][T25323] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  483.659433][T25329] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  483.699165][T25335] ip6t_rt: address list match requested but addrnr is 0
[  483.784547][T25341] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  483.840053][T25343] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  483.891459][T25345] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  483.951049][T25350] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  484.065524][T25354] ip_tables: iptables: counters copy to user failed while replacing table
[  484.070662][T25352] ip6t_ah: unknown flags 4
[  484.129557][T25356] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  484.162694][T25359] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  484.512242][T25378] xt_hashlimit: size too large, truncated to 1048576
[  484.551990][T25383] xt_hashlimit: size too large, truncated to 1048576
[  485.092870][T25401] sctp: [Deprecated]: syz.0.5519 (pid 25401) Use of int in maxseg socket option.
[  485.092870][T25401] Use struct sctp_assoc_value instead
[  485.260284][T25406] syzkaller0: entered promiscuous mode
[  485.260310][T25406] syzkaller0: entered allmulticast mode
[  485.303642][T25409] netlink: 'syz.2.5522': attribute type 10 has an invalid length.
[  485.317964][T25409] 8021q: adding VLAN 0 to HW filter on device team0
[  485.319609][T25409] .`: (slave team0): Enslaving as an active interface with an up link
[  485.548676][T25429] wlan1 speed is unknown, defaulting to 1000
[  486.035818][T25438] __nla_validate_parse: 22 callbacks suppressed
[  486.035873][T25438] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5528'.
[  486.099904][T25438] hsr_slave_1 (unregistering): left promiscuous mode
[  486.238769][T25445] netlink: 'syz.2.5530': attribute type 1 has an invalid length.
[  486.314999][T25445] 8021q: adding VLAN 0 to HW filter on device bond8
[  486.356295][T25445] bond8: (slave gretap1): making interface the new active one
[  486.358830][T25445] bond8: (slave gretap1): Enslaving as an active interface with an up link
[  486.471365][T25451] wlan1 speed is unknown, defaulting to 1000
[  486.698012][T25456] 8021q: VLANs not supported on nicvf0
[  487.035941][T25465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5537'.
[  487.254961][T25465] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5537'.
[  487.309003][T25479] wlan1 speed is unknown, defaulting to 1000
[  487.463083][T25484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5542'.
[  487.522627][T25490] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5543'.
[  487.764314][T25499] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  487.764314][T25499] 
[  487.815403][T25503] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5547'.
[  487.825584][T25505] SET target dimension over the limit!
[  487.980379][T25517] SET target dimension over the limit!
[  488.037194][T25520] IPVS: set_ctl: invalid protocol: 98 172.30.0.1:20003
[  488.081786][T25523] wlan1 speed is unknown, defaulting to 1000
[  488.421707][T25528] net_ratelimit: 95 callbacks suppressed
[  488.421728][T25528] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  488.486827][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  488.655832][T25538] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  488.668946][T25541] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  488.835305][T25552] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  488.844003][T25552] netlink: 3784 bytes leftover after parsing attributes in process `syz.0.5561'.
[  488.894682][T25554] veth0: Caught tx_queue_len zero misconfig
[  488.894919][T25556] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  488.977364][T25560] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  489.032321][T25562] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  489.043194][T25565] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  489.080427][T25569] wlan1 speed is unknown, defaulting to 1000
[  489.119127][T25571] netlink: 'syz.2.5568': attribute type 1 has an invalid length.
[  489.119940][T25573] netlink: 'syz.2.5568': attribute type 1 has an invalid length.
[  489.187897][T25573] veth5: entered allmulticast mode
[  489.199448][T25573] bond9: (slave veth5): Enslaving as an active interface with a down link
[  489.227030][T25571] veth7: entered allmulticast mode
[  489.234555][T25571] bond9: (slave veth7): Enslaving as an active interface with a down link
[  489.242660][T25573] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  489.284804][T25573] macvlan0: entered promiscuous mode
[  489.284830][T25573] macvlan0: entered allmulticast mode
[  489.291858][T25573] bond9: entered promiscuous mode
[  489.292409][T25573] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  489.302388][T25573] bond9: left promiscuous mode
[  489.355174][T25572] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  489.356873][T25571] macvlan0: entered promiscuous mode
[  489.356895][T25571] macvlan0: entered allmulticast mode
[  489.357548][T25571] bond9: entered promiscuous mode
[  489.363780][T25571] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  489.382524][T25571] bond9: left promiscuous mode
[  489.403082][T25578] nbd: couldn't find a device at index 0
[  489.707069][T25587] wlan1 speed is unknown, defaulting to 1000
[  489.771752][T25590] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  490.028972][T25597] syzkaller1: entered allmulticast mode
[  490.029542][T25596] ip6t_ah: unknown flags 4
[  490.220768][T25610] SET target dimension over the limit!
[  490.375194][T25627] ip6t_rt: address list match requested but addrnr is 0
[  490.625687][T25650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5590'.
[  490.662857][T25652] wlan1 speed is unknown, defaulting to 1000
[  490.845741][T25654] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5592'.
[  491.200900][T25669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5594'.
[  491.229479][T25669] syzkaller1: entered promiscuous mode
[  491.229502][T25669] syzkaller1: entered allmulticast mode
[  491.518834][T25674] bridge8: entered promiscuous mode
[  491.613395][T25681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5598'.
[  491.831570][T25704] ip6t_rt: address list match requested but addrnr is 0
[  492.041925][T25725] bond0: Error: Cannot enslave bond to itself.
[  492.114811][T25732] ip6t_ah: unknown flags 4
[  492.177910][T25741] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5614'.
[  492.267061][T25746] wlan1 speed is unknown, defaulting to 1000
[  492.302211][T25751] x_tables: unsorted underflow at hook 3
[  492.362696][T25753] wlan1 speed is unknown, defaulting to 1000
[  493.460084][T25785] netlink: 4564 bytes leftover after parsing attributes in process `syz.2.5627'.
[  493.460184][T25785] netlink: 4564 bytes leftover after parsing attributes in process `syz.2.5627'.
[  493.464220][T25785] net_ratelimit: 60 callbacks suppressed
[  493.464239][T25785] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  493.609642][T25794] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  493.728604][T25798] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  493.911730][T25799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5630'.
[  494.291870][T25809] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  494.428713][T25813] tc_dump_action: action bad kind
[  494.529749][T25819] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  494.533313][T25819] netlink: 'syz.2.5635': attribute type 1 has an invalid length.
[  494.601663][T25816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5635'.
[  494.617889][T25816] bond10: (slave bridge8): making interface the new active one
[  494.620027][T25816] bond10: (slave bridge8): Enslaving as an active interface with an up link
[  494.689364][T25828] ip6t_rt: address list match requested but addrnr is 0
[  494.692007][T25831] ip6t_rt: address list match requested but addrnr is 0
[  494.712103][T25833] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  494.712103][T25833] 
[  494.805122][T25841] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  494.860594][T25844] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  494.916913][T25847] x_tables: duplicate underflow at hook 1
[  495.114268][T25853] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  496.588538][T25863] wlan1 speed is unknown, defaulting to 1000
[  496.589610][T25865] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  496.625842][T25866] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  496.922614][T25888] sctp: [Deprecated]: syz.2.5655 (pid 25888) Use of struct sctp_assoc_value in delayed_ack socket option.
[  496.922614][T25888] Use struct sctp_sack_info instead
[  496.922746][T25888] sctp: [Deprecated]: syz.2.5655 (pid 25888) Use of struct sctp_assoc_value in delayed_ack socket option.
[  496.922746][T25888] Use struct sctp_sack_info instead
[  497.845849][T25904] ip6t_ah: unknown flags 4
[  497.879581][T25907] ip6t_ah: unknown flags 4
[  498.083337][   T13] nci: nci_rx_work: unknown MT 0x6
[  498.083433][   T13] nci: nci_rx_work: unknown MT 0x6
[  498.290959][T25929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5664'.
[  498.605511][T25939] net_ratelimit: 7 callbacks suppressed
[  498.605526][T25939] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  498.640244][T25941] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  498.715662][T25943] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5667'.
[  498.715745][T25944] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5667'.
[  501.006613][T25916] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  501.071982][T25948] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  501.140702][T25953] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  501.209081][T25955] SET target dimension over the limit!
[  501.231205][T25957] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  501.294593][T25961] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  501.360421][T25959] syzkaller0: left promiscuous mode
[  501.360674][T25963] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  501.372965][T25959] bond15: left promiscuous mode
[  501.375246][T25959] 8021q: adding VLAN 0 to HW filter on device bond16
[  501.387595][ T5664] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  501.412555][ T5664] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  501.546810][T25975] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  501.593799][T25977] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  501.628972][ T5664] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  501.644937][T25981] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  501.711205][T25988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5681'.
[  501.928395][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  502.104494][T26022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5687'.
[  502.158675][T26027] x_tables: duplicate underflow at hook 1
[  502.210194][T26031] x_tables: ip6_tables: DNPT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT
[  502.248003][ T5664] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  502.661479][T26076] wlan1 speed is unknown, defaulting to 1000
[  502.895234][T26082] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  503.228280][T26097] wlan1 speed is unknown, defaulting to 1000
[  503.450032][T26100] wlan1 speed is unknown, defaulting to 1000
[  503.820306][T26108] ip6t_ah: unknown flags 4
[  503.955735][T26112] x_tables: duplicate underflow at hook 1
[  504.001338][T26117] net_ratelimit: 35 callbacks suppressed
[  504.001353][T26117] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  504.068751][T26123] wlan1 speed is unknown, defaulting to 1000
[  504.094154][T26125] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  504.383916][T26134] x_tables: duplicate underflow at hook 1
[  504.468931][T26136] wlan1 speed is unknown, defaulting to 1000
[  504.487454][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  504.598890][T26137] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  504.684877][T26143] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  504.718924][T26145] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  504.847427][T26152] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  504.987551][T26162] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 3, id = 0
[  504.993796][T26161] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  504.995225][T26158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5728'.
[  504.995238][T26158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5728'.
[  505.070895][T26164] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  505.143972][T26168] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  505.147055][T26168] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5732'.
[  505.206068][T26170] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  506.218824][T26195] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5743'.
[  506.879934][T26215] wlan1 speed is unknown, defaulting to 1000
[  507.290287][T26227] ip6t_rt: address list match requested but addrnr is 0
[  507.421819][T26230] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5752'.
[  507.422562][T26230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5752'.
[  507.444594][T26232] ip6t_ah: unknown flags 4
[  507.481655][T26235] SET target dimension over the limit!
[  507.593840][T26239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5756'.
[  507.848694][T26285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5758'.
[  508.248802][T26311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5763'.
[  509.066998][T26323] net_ratelimit: 12 callbacks suppressed
[  509.067018][T26323] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  509.134022][T26328] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  509.143488][T26328] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5766'.
[  509.299917][T26337] wlan1 speed is unknown, defaulting to 1000
[  509.565090][T26342] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  509.565376][T26342] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  509.565555][T26342] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  509.565710][T26342] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  509.565856][T26342] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  509.566011][T26342] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  509.596361][T26342] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  509.779937][T26347] wlan1 speed is unknown, defaulting to 1000
[  509.946908][T26347] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  510.201581][T26365] SET target dimension over the limit!
[  510.289451][T26362] ip6t_ah: unknown flags 4
[  510.364340][T26372] veth0_macvtap: Caught tx_queue_len zero misconfig
[  510.365722][T26372] __nla_validate_parse: 2 callbacks suppressed
[  510.365735][T26372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5780'.
[  510.464979][T26380] wlan1 speed is unknown, defaulting to 1000
[  510.729400][T26380] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5783'.
[  510.781516][T26387] Cannot find map_set index 4 as target
[  511.477375][T26400] wlan1 speed is unknown, defaulting to 1000
[  512.085132][T26436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5795'.
[  512.153072][T26440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5795'.
[  512.272756][T26441] wlan1 speed is unknown, defaulting to 1000
[  512.505683][T26453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5799'.
[  512.505699][T26453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5799'.
[  512.518275][T26453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5799'.
[  512.518297][T26453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5799'.
[  512.681133][T26461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5802'.
[  512.704475][T26468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5803'.
[  513.001805][T26489] ip6t_ah: unknown flags 4
[  513.092598][T26494] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  513.092624][T26494] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.206966][T26494] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  513.206990][T26494] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.360384][T26494] .`: (slave netdevsim1): Releasing backup interface
[  513.360403][T26494] .`: (slave netdevsim1): the permanent HWaddr of slave - be:20:59:51:72:7d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  513.363668][T26494] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  513.363717][T26494] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.391127][T26507] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  513.394942][T26507] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  513.400274][T26507] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  513.406059][T26507] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  513.412931][T26507] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  513.442981][T26494] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  513.443022][T26494] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.677211][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  513.677233][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  513.707792][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  513.707814][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  513.707832][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  513.707844][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  513.716367][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  513.716389][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  513.745770][T26503] wlan1 speed is unknown, defaulting to 1000
[  513.845985][T26529] netlink: 'syz.0.5819': attribute type 2 has an invalid length.
[  514.097430][T26548] net_ratelimit: 95 callbacks suppressed
[  514.097453][T26548] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  514.182047][T26548] syzkaller0: entered promiscuous mode
[  514.201383][T26503] bridge0: port 1(bridge_slave_0) entered blocking state
[  514.201492][T26503] bridge0: port 1(bridge_slave_0) entered disabled state
[  514.201569][T26503] bridge_slave_0: entered allmulticast mode
[  514.202425][T26503] bridge_slave_0: entered promiscuous mode
[  514.213336][T26503] bridge0: port 2(bridge_slave_1) entered blocking state
[  514.213424][T26503] bridge0: port 2(bridge_slave_1) entered disabled state
[  514.213495][T26503] bridge_slave_1: entered allmulticast mode
[  514.214442][T26503] bridge_slave_1: entered promiscuous mode
[  514.232004][T26559] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  514.260576][T26503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  514.262897][T26503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  514.289969][T26503] team0: Port device team_slave_0 added
[  514.291914][T26503] team0: Port device team_slave_1 added
[  514.310108][T26503] batman_adv: batadv0: Adding interface: batadv_slave_0
[  514.310122][T26503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  514.310135][T26503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  514.311296][T26503] batman_adv: batadv0: Adding interface: batadv_slave_1
[  514.311304][T26503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  514.311316][T26503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  514.354255][T26562] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  514.362300][T26562] xt_nat: multiple ranges no longer supported
[  514.385638][T26503] hsr_slave_0: entered promiscuous mode
[  514.389083][T26503] hsr_slave_1: entered promiscuous mode
[  514.389709][T26503] debugfs: 'hsr0' already exists in 'hsr'
[  514.389728][T26503] Cannot create hsr debugfs directory
[  514.569744][T26503] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  514.572781][T26503] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  514.573600][T26503] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  514.576005][T26503] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  514.585863][T26503] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  514.592763][T26503] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  514.593505][T26503] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  514.595777][T26503] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  514.628919][T26503] bridge0: port 2(bridge_slave_1) entered blocking state
[  514.629014][T26503] bridge0: port 2(bridge_slave_1) entered forwarding state
[  514.629144][T26503] bridge0: port 1(bridge_slave_0) entered blocking state
[  514.629197][T26503] bridge0: port 1(bridge_slave_0) entered forwarding state
[  514.692165][T26503] 8021q: adding VLAN 0 to HW filter on device bond0
[  514.709925][T24368] bridge0: port 1(bridge_slave_0) entered disabled state
[  514.710858][T24368] bridge0: port 2(bridge_slave_1) entered disabled state
[  514.719427][T26503] 8021q: adding VLAN 0 to HW filter on device team0
[  514.729415][T24368] bridge0: port 1(bridge_slave_0) entered blocking state
[  514.729501][T24368] bridge0: port 1(bridge_slave_0) entered forwarding state
[  514.738759][T24368] bridge0: port 2(bridge_slave_1) entered blocking state
[  514.738854][T24368] bridge0: port 2(bridge_slave_1) entered forwarding state
[  515.045473][T26589] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  515.045864][T26589] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  515.053017][T26589] pim6reg1: left promiscuous mode
[  515.053052][T26589] pim6reg1: left allmulticast mode
[  515.244194][T26503] 8021q: adding VLAN 0 to HW filter on device batadv0
[  515.349345][T26503] veth0_vlan: entered promiscuous mode
[  515.433282][T26503] veth1_vlan: entered promiscuous mode
[  515.491716][T26503] veth0_macvtap: entered promiscuous mode
[  515.498847][T26503] veth1_macvtap: entered promiscuous mode
[  515.514469][T26503] batman_adv: batadv0: Interface activated: batadv_slave_0
[  515.528255][T26507] Bluetooth: hci3: command tx timeout
[  515.535296][T26503] batman_adv: batadv0: Interface activated: batadv_slave_1
[  515.543318][T13719] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  515.543358][T13719] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  515.543386][T13719] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  515.543414][T13719] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  515.600842][T26610] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  515.733935][T12770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  515.733951][T12770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  515.761826][T12770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  515.761842][T12770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  515.831909][T26614] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  516.006522][T26623] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  516.095628][T26626] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  516.128280][T26628] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  516.147945][T26630] __nla_validate_parse: 6 callbacks suppressed
[  516.147966][T26630] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5841'.
[  516.152109][T26630] netlink: 18 bytes leftover after parsing attributes in process `syz.2.5841'.
[  516.510913][T26651] ip6t_rt: address list match requested but addrnr is 0
[  516.604483][T26654] syzkaller0: entered promiscuous mode
[  516.604510][T26654] syzkaller0: entered allmulticast mode
[  516.988024][T26663] netlink: 'syz.3.5853': attribute type 4 has an invalid length.
[  516.993913][T26663] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  516.993913][T26663] 
[  517.131238][T26671] ip6t_ah: unknown flags 4
[  517.162999][T26668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5854'.
[  517.199543][T26673] ipt_REJECT: ECHOREPLY no longer supported.
[  517.576081][T26694] wlan1 speed is unknown, defaulting to 1000
[  517.617292][T26507] Bluetooth: hci3: command tx timeout
[  517.697058][T26701] ip6t_ah: unknown flags 4
[  517.697141][T26704] ip6t_ah: unknown flags 4
[  518.730132][T26724] netlink: 'syz.2.5867': attribute type 2 has an invalid length.
[  518.730159][T26724] netlink: 'syz.2.5867': attribute type 2 has an invalid length.
[  518.804565][T26728] sctp: [Deprecated]: syz.2.5867 (pid 26728) Use of int in max_burst socket option.
[  518.804565][T26728] Use struct sctp_assoc_value instead
[  518.812530][T26728] ieee802154 phy1 wpan1: encryption failed: -22
[  518.889371][T26734] netlink: 'syz.2.5869': attribute type 4 has an invalid length.
[  518.959905][T26736] netlink: 'syz.2.5870': attribute type 1 has an invalid length.
[  519.175196][T26742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5873'.
[  519.218714][T26746] net_ratelimit: 17 callbacks suppressed
[  519.218736][T26746] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  519.257874][T26746] sctp: [Deprecated]: syz.3.5875 (pid 26746) Use of struct sctp_assoc_value in delayed_ack socket option.
[  519.257874][T26746] Use struct sctp_sack_info instead
[  519.424504][T26757] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5877'.
[  519.505132][T26764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5878'.
[  519.580633][T26766] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  519.653682][T26771] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  519.686802][T26507] Bluetooth: hci3: command tx timeout
[  519.702599][T26773] ip6t_ah: unknown flags 4
[  519.933607][T26788] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  520.270024][T26803] wlan1 speed is unknown, defaulting to 1000
[  520.311382][T26805] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  520.315545][T26793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5885'.
[  520.484617][T26808] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  520.671281][T26811] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  520.812725][T26815] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5890'.
[  520.814049][T26817] netlink: 'syz.0.5891': attribute type 2 has an invalid length.
[  520.834063][T26815] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  520.866696][T26819] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  520.934222][T26822] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  521.022309][T26826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5895'.
[  521.045246][T26826] veth3: entered allmulticast mode
[  521.055594][T26830] netlink: 'syz.3.5895': attribute type 9 has an invalid length.
[  521.055771][T26830] netlink: 'syz.3.5895': attribute type 9 has an invalid length.
[  521.055960][T26830] netlink: 'syz.3.5895': attribute type 9 has an invalid length.
[  521.056113][T26830] netlink: 'syz.3.5895': attribute type 9 has an invalid length.
[  521.061124][T26830] netlink: 'syz.3.5895': attribute type 9 has an invalid length.
[  521.061314][T26830] netlink: 'syz.3.5895': attribute type 9 has an invalid length.
[  521.062227][T26830] netlink: 'syz.3.5895': attribute type 9 has an invalid length.
[  521.280731][T26841] syzkaller0: entered promiscuous mode
[  521.280755][T26841] syzkaller0: entered allmulticast mode
[  521.291424][T26841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5898'.
[  521.340793][T26843] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.5900'.
[  521.665682][T26862] x_tables: duplicate underflow at hook 1
[  521.763181][T26869] syzkaller0: left promiscuous mode
[  521.763205][T26869] syzkaller0: left allmulticast mode
[  521.764973][T26869] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[  521.793976][T26507] Bluetooth: hci3: command tx timeout
[  521.820050][T26869] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5907'.
[  521.908022][T26877] Cannot find add_set index 0 as target
[  522.535333][T26864] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  522.773327][T26892] wlan1 speed is unknown, defaulting to 1000
[  522.986830][T26887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5912'.
[  523.656926][T26906] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5915'.
[  523.656956][T26906] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5915'.
[  524.017734][T26920] validate_nla: 58 callbacks suppressed
[  524.017752][T26920] netlink: 'syz.2.5922': attribute type 1 has an invalid length.
[  524.034964][T26920] 8021q: adding VLAN 0 to HW filter on device bond12
[  524.054802][T26920] bond12: (slave geneve5): making interface the new active one
[  524.060244][T26920] bond12: (slave geneve5): Enslaving as an active interface with an up link
[  524.158540][T26927] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5924'.
[  524.334595][T26931] ip6t_ah: unknown flags 4
[  524.849913][T26938] wlan1 speed is unknown, defaulting to 1000
[  524.884242][T26939] net_ratelimit: 12 callbacks suppressed
[  524.884256][T26939] ip_tables: iptables: counters copy to user failed while replacing table
[  525.135658][T26942] wlan1 speed is unknown, defaulting to 1000
[  525.344513][T26945] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  525.570762][T26946] wlan1 speed is unknown, defaulting to 1000
[  526.531117][T26959] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  526.674473][T26961] wlan1 speed is unknown, defaulting to 1000
[  527.005847][T26962] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  527.060663][T26966] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  527.171882][T26968] wlan1 speed is unknown, defaulting to 1000
[  527.302702][T26971] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  527.398628][T26977] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  527.646535][T26984] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  527.883135][T26991] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5943'.
[  527.895084][T26991] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  527.907992][T26988] netlink: 'syz.2.5942': attribute type 1 has an invalid length.
[  527.997920][T26988] bond13: entered promiscuous mode
[  527.998854][T26988] 8021q: adding VLAN 0 to HW filter on device bond13
[  528.013695][T26995] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  528.070967][T26990] bond13: (slave bridge9): making interface the new active one
[  528.071024][T26990] bridge9: entered promiscuous mode
[  528.083011][T26990] bond13: (slave bridge9): Enslaving as an active interface with an up link
[  528.448605][T27005] ip6t_ah: unknown flags 4
[  528.512561][T27025] ip6t_ah: unknown flags 4
[  528.535184][T27027] ip6t_rt: address list match requested but addrnr is 0
[  528.539387][T27027] xt_socket: unknown flags 0x4
[  528.590999][T27030] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5953'.
[  528.662178][T27032] ip6t_rt: address list match requested but addrnr is 0
[  528.783090][T27034] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  528.823137][T27034] syzkaller0: entered promiscuous mode
[  528.823156][T27034] syzkaller0: entered allmulticast mode
[  528.823497][T27034] tipc: Resetting bearer <eth:syzkaller0>
[  528.834000][T27033] tipc: Resetting bearer <eth:syzkaller0>
[  528.950226][T27045] netlink: 'syz.0.5957': attribute type 4 has an invalid length.
[  529.008915][T27047] netlink: 'syz.0.5957': attribute type 4 has an invalid length.
[  529.284072][T27051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5957'.
[  529.284101][T27051] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5957'.
[  531.101386][T27033] tipc: Disabling bearer <eth:syzkaller0>
[  531.152868][T27048] wlan1 speed is unknown, defaulting to 1000
[  531.268586][T27062] net_ratelimit: 14 callbacks suppressed
[  531.268735][T27062] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  531.319702][T27066] SET target dimension over the limit!
[  531.339916][T27069] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  531.341065][T27066] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5961'.
[  531.385224][T27071] SET target dimension over the limit!
[  531.506125][T27077] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  531.571259][T27081] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  531.625513][T27083] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  531.679187][T27089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5968'.
[  531.782813][T27094] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  531.823387][T27100] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  531.904197][T27106] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  531.904358][T27106] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  531.904501][T27106] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  532.253407][T27132] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5976'.
[  532.259541][T27132] ip6t_ah: unknown flags 4
[  532.327360][T27137] tap0: tun_chr_ioctl cmd 35108
[  532.426397][T27143] wlan1 speed is unknown, defaulting to 1000
[  532.531163][T27153] netlink: 'syz.2.5986': attribute type 6 has an invalid length.
[  532.767628][T27168] netlink: 'syz.2.5988': attribute type 1 has an invalid length.
[  532.816036][T27168] bond14: entered promiscuous mode
[  532.818081][T27168] 8021q: adding VLAN 0 to HW filter on device bond14
[  533.550451][T27168] 8021q: adding VLAN 0 to HW filter on device bond14
[  533.550645][T27168] bond14: (slave xfrm2): The slave device specified does not support setting the MAC address
[  533.550656][T27168] bond14: (slave xfrm2): Setting fail_over_mac to active for active-backup mode
[  533.570760][T27168] bond14: (slave xfrm2): making interface the new active one
[  533.570780][T27168] xfrm2: entered promiscuous mode
[  533.586737][T27168] bond14: (slave xfrm2): Enslaving as an active interface with an up link
[  533.841874][T27180] Cannot find add_set index 0 as target
[  535.520771][T27159] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  535.627339][T27188] bridge0: port 3(batadv1) entered blocking state
[  535.627499][T27188] bridge0: port 3(batadv1) entered disabled state
[  535.627579][T27188] batadv1: entered allmulticast mode
[  535.628529][T27188] batadv1: entered promiscuous mode
[  535.697723][T27196] ip6t_rt: address list match requested but addrnr is 0
[  536.126601][T13719] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  536.126623][T13719] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  536.250898][T27220] x_tables: duplicate underflow at hook 1
[  536.253350][T27220] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6002'.
[  536.329226][T27220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6002'.
[  536.363594][T27220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6002'.
[  536.402697][T27227] net_ratelimit: 22 callbacks suppressed
[  536.402718][T27227] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  536.482825][T27235] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  536.486578][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  536.548790][T27237] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  536.567601][T27239] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  536.621363][T27241] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  536.652318][T27246] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  536.705474][T27248] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  536.754698][T27254] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  536.764518][T27252] wlan1 speed is unknown, defaulting to 1000
[  536.798888][T27256] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  536.966382][T27257] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  537.052988][T27267] wlan1 speed is unknown, defaulting to 1000
[  537.678127][T27293] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  537.679966][T27293] IPv6: NLM_F_CREATE should be set when creating new route
[  537.778605][T27296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6024'.
[  538.028950][T27303] ip6t_rt: address list match requested but addrnr is 0
[  538.438112][T27333] netlink: 'syz.2.6030': attribute type 1 has an invalid length.
[  538.450146][T27333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6030'.
[  539.141015][T27384] wlan1 speed is unknown, defaulting to 1000
[  539.439744][T27406] SET target dimension over the limit!
[  540.242881][T27424] syzkaller0: entered promiscuous mode
[  540.242900][T27424] syzkaller0: entered allmulticast mode
[  540.292156][T27426] x_tables: duplicate underflow at hook 1
[  542.282746][T27395] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  542.436417][T27444] net_ratelimit: 16 callbacks suppressed
[  542.436436][T27444] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  542.441264][T27447] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  542.467843][T27444] syzkaller0: left promiscuous mode
[  542.467866][T27444] syzkaller0: left allmulticast mode
[  542.484588][T27444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6051'.
[  542.532487][T27456] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  542.564469][T27458] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  542.612225][T27460] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  542.643940][T27463] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  542.645520][T27463] Bluetooth: hci0: unsupported parameter 5135
[  542.645535][T27463] Bluetooth: hci0: unsupported parameter 8192
[  542.645544][T27463] Bluetooth: hci0: unsupported parameter 5135
[  542.645551][T27463] Bluetooth: hci0: unsupported parameter 8192
[  542.695524][T27467] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  542.704626][T27469] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  542.705091][T27470] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  542.758788][T27472] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  542.886588][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  543.031890][T27484] wlan1 speed is unknown, defaulting to 1000
[  544.342644][T27498] sctp: [Deprecated]: syz.3.6066 (pid 27498) Use of struct sctp_assoc_value in delayed_ack socket option.
[  544.342644][T27498] Use struct sctp_sack_info instead
[  544.342887][T27498] sctp: [Deprecated]: syz.3.6066 (pid 27498) Use of struct sctp_assoc_value in delayed_ack socket option.
[  544.342887][T27498] Use struct sctp_sack_info instead
[  544.343526][T27498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6066'.
[  545.754826][T27472] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  546.035181][T27521] SET target dimension over the limit!
[  546.039294][T27521] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6071'.
[  546.051663][T27521] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20004
[  546.065528][T27521] nbd: must specify a size in bytes for the device
[  546.155693][T27525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6073'.
[  546.323068][T27536] Cannot find add_set index 0 as target
[  546.505425][T27539] sctp: [Deprecated]: syz.3.6077 (pid 27539) Use of int in max_burst socket option.
[  546.505425][T27539] Use struct sctp_assoc_value instead
[  546.735978][T27544] netlink: 192 bytes leftover after parsing attributes in process `syz.0.6079'.
[  546.857874][T27552] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6082'.
[  546.857908][T27552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6082'.
[  546.894843][T27552] can: request_module (can-proto-5) failed.
[  547.013896][T27568] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  547.450680][T27588] net_ratelimit: 81 callbacks suppressed
[  547.450703][T27588] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  549.372619][T27590] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  549.482741][T27599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6097'.
[  549.514989][T27603] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  549.531387][T27599] ip6t_rpfilter: unknown options
[  549.577228][T27609] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  549.643303][T27614] SET target dimension over the limit!
[  549.746637][T27616] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  549.785227][T27620] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  549.894341][T27625] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  550.000587][T27628] ip6t_rt: address list match requested but addrnr is 0
[  550.050607][T27631] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  550.134177][T27636] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  550.401252][T27641] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  550.695365][T27658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6116'.
[  550.839973][T27674] netlink: 3544 bytes leftover after parsing attributes in process `syz.0.6122'.
[  550.904585][T27676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6123'.
[  551.045015][T27685] syzkaller0: entered promiscuous mode
[  551.045042][T27685] syzkaller0: entered allmulticast mode
[  551.189062][T27688] ip6t_rt: address list match requested but addrnr is 0
[  551.584752][T27696] sctp: [Deprecated]: syz.2.6129 (pid 27696) Use of int in max_burst socket option deprecated.
[  551.584752][T27696] Use struct sctp_assoc_value instead
[  551.911726][T27703] netlink: 'syz.3.6131': attribute type 21 has an invalid length.
[  552.106349][T27706] netlink: 'syz.3.6132': attribute type 2 has an invalid length.
[  552.106378][T27706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6132'.
[  552.470020][T27713] net_ratelimit: 10 callbacks suppressed
[  552.470040][T27713] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  552.627483][T27720] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  552.671071][T27722] SET target dimension over the limit!
[  552.784744][T27727] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  552.833580][T27733] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  552.853909][T27733] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  553.573450][T27751] wlan1 speed is unknown, defaulting to 1000
[  553.591192][T27752] ip_tables: iptables: counters copy to user failed while replacing table
[  553.961518][T27757] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6146'.
[  553.961862][T27757] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  553.981112][T27760] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  554.087780][T27762] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  554.192829][T27769] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  554.194270][T27770] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  554.288692][T27777] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  554.292953][T27777] syzkaller0: entered promiscuous mode
[  554.292989][T27777] syzkaller0: entered allmulticast mode
[  554.436658][T27789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6157'.
[  554.533551][T27797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6161'.
[  554.535459][T27797] sctp: [Deprecated]: syz.3.6161 (pid 27797) Use of int in maxseg socket option.
[  554.535459][T27797] Use struct sctp_assoc_value instead
[  554.651004][T27804] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6165'.
[  554.959863][T27828] wlan1 speed is unknown, defaulting to 1000
[  555.023942][T27767] tipc: Resetting bearer <eth:syzkaller0>
[  555.047943][T27767] tipc: Disabling bearer <eth:syzkaller0>
[  555.310894][T27837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6176'.
[  555.632632][T27843] wlan1 speed is unknown, defaulting to 1000
[  555.643501][T27856] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  555.643501][T27856] 
[  556.048186][T27876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6185'.
[  556.721438][T27907] netlink: 'syz.2.6194': attribute type 3 has an invalid length.
[  556.721451][T27907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6194'.
[  556.845363][T27919] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6199'.
[  556.845383][T27919] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6199'.
[  556.845391][T27919] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6199'.
[  556.918436][T27924] netlink: 215 bytes leftover after parsing attributes in process `syz.2.6201'.
[  556.918956][T27924] x_tables: duplicate underflow at hook 1
[  557.274704][T27938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6204'.
[  557.325976][T27944] bond0: (slave bond_slave_1): Releasing backup interface
[  557.690454][T27963] net_ratelimit: 31 callbacks suppressed
[  557.690475][T27963] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  557.776790][T27966] wlan1 speed is unknown, defaulting to 1000
[  558.026988][T27975] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  558.075170][T27982] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  558.158979][T27991] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  558.393733][T27997] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  558.511705][T28003] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  558.549429][T28008] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  558.656021][T28012] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  559.262175][T28027] x_tables: duplicate underflow at hook 1
[  559.265373][T28027] netlink: 'syz.3.6227': attribute type 2 has an invalid length.
[  559.300135][T28029] wlan1 speed is unknown, defaulting to 1000
[  559.323921][T28031] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  559.441779][T28034] netlink: 'syz.3.6228': attribute type 1 has an invalid length.
[  559.467845][T28034] bond1: entered promiscuous mode
[  559.468129][T28034] 8021q: adding VLAN 0 to HW filter on device bond1
[  559.497811][T28032] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  559.501441][T28034] 8021q: adding VLAN 0 to HW filter on device bond2
[  559.505582][T28034] bond1: (slave bond2): making interface the new active one
[  559.505606][T28034] bond2: entered promiscuous mode
[  559.522189][T28034] bond1: (slave bond2): Enslaving as an active interface with an up link
[  559.653807][T28041] x_tables: duplicate underflow at hook 1
[  559.822763][T28050] __nla_validate_parse: 4 callbacks suppressed
[  559.822777][T28050] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6232'.
[  559.925574][T28054] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  559.978428][T28055] ip6t_ah: unknown flags 4
[  560.274548][T28061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6234'.
[  560.275489][T28061] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6234'.
[  560.827289][T28064] xt_esp: unknown flags DD
[  562.743967][T28045] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  562.839432][T28079] net_ratelimit: 5 callbacks suppressed
[  562.839455][T28079] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  562.841748][T28079] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6239'.
[  562.841773][T28079] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6239'.
[  562.880128][T28081] syzkaller0: entered promiscuous mode
[  562.880157][T28081] syzkaller0: entered allmulticast mode
[  562.900459][T28081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6238'.
[  562.952694][T28090] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6240'.
[  563.069996][T28097] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  563.080487][T28100] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  563.143556][T28107] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  563.155444][T28107] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6245'.
[  563.155458][T28107] netlink: 192 bytes leftover after parsing attributes in process `syz.2.6245'.
[  563.369182][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  563.455218][T28115] Bluetooth: ISO socket layer initialized
[  563.470362][T28122] tipc: Failed to remove unknown binding: 66,0,0/0:3360005430/3360005432
[  563.470391][T28122] tipc: Failed to remove unknown binding: 66,0,0/0:3360005430/3360005431
[  563.499842][T28116] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  563.522859][T28125] tipc: Failed to remove unknown binding: 66,0,0/0:3360005430/3360005432
[  563.522979][T28125] tipc: Failed to remove unknown binding: 66,0,0/0:3360005430/3360005431
[  563.523140][T28115] ipvlan0: entered promiscuous mode
[  563.523272][T28115] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  563.523287][T28115] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  563.524323][T28115] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[  563.555335][T28114] ipvlan0: entered promiscuous mode
[  563.555485][T28114] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  563.555500][T28114] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  563.557324][T28114] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[  563.639956][T28127] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  563.684373][T28130] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  564.351131][T28137] syzkaller1: entered promiscuous mode
[  564.351158][T28137] syzkaller1: entered allmulticast mode
[  564.363083][T28139] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6255'.
[  564.363645][T28137] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  564.481454][T28144] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  564.625524][T28149] syzkaller0: entered promiscuous mode
[  564.625543][T28149] syzkaller0: entered allmulticast mode
[  566.805439][T28179] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  566.867036][T28183] netlink: 'syz.2.6265': attribute type 8 has an invalid length.
[  567.731872][T28224] wlan1 speed is unknown, defaulting to 1000
[  568.118206][T28232] net_ratelimit: 9 callbacks suppressed
[  568.118227][T28232] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  568.119632][T28233] batadv_slave_1: entered promiscuous mode
[  568.139898][T28224] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  568.210213][T28231] batadv_slave_1: left promiscuous mode
[  568.280677][T28237] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  568.281088][T28237] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  568.281256][T28237] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  568.281514][T28237] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  568.281808][T28237] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  568.281962][T28237] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  568.285048][T28237] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  568.285217][T28237] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  568.853727][T28257] __nla_validate_parse: 2 callbacks suppressed
[  568.853742][T28257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6282'.
[  568.866144][T28257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6282'.
[  568.866833][T28257] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6282'.
[  569.027905][T28261] netlink: 'syz.2.6284': attribute type 1 has an invalid length.
[  569.211982][T28269] x_tables: duplicate underflow at hook 1
[  569.259320][T28271] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6289'.
[  570.317801][T28282] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  570.771007][T28314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6300'.
[  570.835239][T28316] xt_hashlimit: Unknown mode mask 80FF, kernel too old?
[  570.897334][T28309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6299'.
[  570.910035][T28329] Bluetooth: MGMT ver 1.23
[  571.084617][T28342] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6308'.
[  571.119348][T28342] netlink: 'syz.0.6308': attribute type 10 has an invalid length.
[  571.230494][T28347] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  571.290585][T28354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6313'.
[  571.291583][T28354] netlink: 'syz.2.6313': attribute type 2 has an invalid length.
[  571.291597][T28354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6313'.
[  571.361322][T28358] batman_adv: batadv0: Adding interface: dummy0
[  571.361343][T28358] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  571.361366][T28358] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  571.401174][T28361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6315'.
[  571.451294][T28363] ipvlan1: entered promiscuous mode
[  571.451417][T28363] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  571.451428][T28363] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address
[  571.478041][T28363] bond0: (slave ipvlan1): Error -95 calling set_mac_address
[  573.258252][T28447] net_ratelimit: 41 callbacks suppressed
[  573.258268][T28447] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  573.331157][T28450] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  573.374571][T28452] x_tables: duplicate underflow at hook 1
[  573.483586][T28457] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  573.611288][T28464] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  573.654045][T28466] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  573.734987][T28475] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  573.880622][T28473] __nla_validate_parse: 6 callbacks suppressed
[  573.880638][T28473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6350'.
[  573.979504][T28489] ip6t_ah: unknown flags 4
[  574.298201][T28497] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  574.559808][T28500] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  574.622136][T28503] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  574.622826][T28504] x_tables: duplicate underflow at hook 1
[  574.680858][T28508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6358'.
[  574.691218][T28508] netlink: 'syz.3.6358': attribute type 2 has an invalid length.
[  574.691769][T28509] netlink: 'syz.3.6358': attribute type 2 has an invalid length.
[  574.692066][T28508] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6358'.
[  574.745981][T28507] ip6t_ah: unknown flags 4
[  574.810867][T28517] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  574.813500][T28515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6360'.
[  575.040125][T28529] wlan1 speed is unknown, defaulting to 1000
[  575.145921][T28540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6369'.
[  575.234486][T28543] netlink: 'syz.2.6370': attribute type 1 has an invalid length.
[  575.234513][T28543] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6370'.
[  575.703398][T28565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6377'.
[  576.021427][T28605] x_tables: duplicate underflow at hook 1
[  576.052043][T28595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6381'.
[  576.329585][T28631] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6390'.
[  576.343225][T28631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6390'.
[  576.632179][T28647] wlan1 speed is unknown, defaulting to 1000
[  577.277190][T28660] x_tables: duplicate underflow at hook 2
[  577.277237][T28660] x_tables: duplicate underflow at hook 2
[  577.277279][T28660] x_tables: duplicate underflow at hook 2
[  577.277342][T28660] x_tables: duplicate underflow at hook 2
[  577.277379][T28660] x_tables: duplicate underflow at hook 2
[  577.277411][T28660] x_tables: duplicate underflow at hook 2
[  577.277444][T28660] x_tables: duplicate underflow at hook 2
[  577.277477][T28660] x_tables: duplicate underflow at hook 2
[  577.867468][T28704] ip6t_rt: address list match requested but addrnr is 0
[  578.004295][T28713] netlink: 'syz.3.6405': attribute type 1 has an invalid length.
[  578.029624][T28713] 8021q: adding VLAN 0 to HW filter on device bond3
[  578.047885][T28713] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  578.051085][T28713] Bluetooth: hci0: Invalid link key type 28 for 66:55:44:33:22:11
[  578.401653][T28734] net_ratelimit: 23 callbacks suppressed
[  578.401676][T28734] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  578.471195][T28736] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  578.474647][T28736] openvswitch: netlink: Duplicate key (type 3).
[  578.522461][T28738] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  578.698556][T28744] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  578.784070][T28758] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  578.895861][T28761] __nla_validate_parse: 10 callbacks suppressed
[  578.895876][T28761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6416'.
[  578.903603][T28761] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  579.008742][T28766] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  579.009595][T28766] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  579.009872][T28766] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  579.029569][T28766] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  579.029569][T28766] 
[  579.029686][T28766] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  579.029686][T28766] 
[  579.029773][T28766] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  579.029773][T28766] 
[  579.029870][T28766] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  579.029870][T28766] 
[  579.029951][T28766] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  579.029951][T28766] 
[  579.030043][T28766] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  579.030043][T28766] 
[  579.030163][T28766] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  579.030163][T28766] 
[  579.030254][T28766] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  579.030254][T28766] 
[  579.030342][T28766] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  579.030342][T28766] 
[  579.030465][T28766] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  579.030465][T28766] 
[  580.131070][T28822] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6431'.
[  580.207423][T28827] wlan1 speed is unknown, defaulting to 1000
[  580.491569][T28845] SET target dimension over the limit!
[  582.361580][T28873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6437'.
[  582.374516][T28873] xt_check_table_hooks: 58 callbacks suppressed
[  582.374596][T28873] x_tables: duplicate underflow at hook 1
[  583.479204][T28845] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  583.599915][T28881] net_ratelimit: 98 callbacks suppressed
[  583.599935][T28881] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  583.628207][T28887] openvswitch: netlink: IPv4 frag type 228 is out of range max 2
[  583.631668][T28887] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  583.635339][T28887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6442'.
[  583.764670][T28891] ip6t_rt: address list match requested but addrnr is 0
[  583.831266][T28901] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  583.833037][T28901] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6447'.
[  583.841676][T28901] netlink: 3544 bytes leftover after parsing attributes in process `syz.2.6447'.
[  583.871574][T28899] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input4
[  583.894775][T28907] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  583.979635][T28912] nbd: couldn't find a device at index 0
[  584.015933][T28915] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  584.091917][T28920] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6450'.
[  584.249843][T28926] Unsupported ieee802154 address type: 0
[  584.714375][T28936] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  584.775288][T28938] SET target dimension over the limit!
[  584.824486][T28941] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  584.940504][T28943] wlan1 speed is unknown, defaulting to 1000
[  585.104434][T28944] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  585.263713][T28953] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  585.741843][T28967] wlan1 speed is unknown, defaulting to 1000
[  585.857299][T28979] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6469'.
[  586.078153][T28981] syzkaller1: entered promiscuous mode
[  586.078168][T28981] syzkaller1: entered allmulticast mode
[  586.360346][T29006] ip6t_ah: unknown flags 4
[  586.735740][T29029] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6474'.
[  586.854014][T29042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6473'.
[  587.053231][T29054] wlan1 speed is unknown, defaulting to 1000
[  587.638068][T29068] xt_hashlimit: size too large, truncated to 1048576
[  587.706147][T29072] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6482'.
[  587.726907][T29074] bridge0: entered allmulticast mode
[  587.771447][T29074] wlan1 speed is unknown, defaulting to 1000
[  588.342787][T29085] syzkaller0: entered promiscuous mode
[  588.342803][T29085] syzkaller0: entered allmulticast mode
[  588.613139][T29107] net_ratelimit: 19 callbacks suppressed
[  588.613158][T29107] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  588.642052][T29110] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  588.672906][T29112] ip6t_ah: unknown flags 4
[  588.704940][T29114] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  588.758809][T29121] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  588.762783][T29116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6502'.
[  588.874178][T29118] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  588.882500][T29118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6502'.
[  588.882514][T29118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6502'.
[  589.022868][T29142] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  589.183844][T29157] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  589.228540][T29159] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  589.230666][T29161] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  589.389146][T29174] SET target dimension over the limit!
[  589.399640][T29176] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  589.505984][T29180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6517'.
[  589.520188][T29181] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6516'.
[  589.676767][T29186] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6519'.
[  589.676785][T29186] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6519'.
[  589.676947][T29186] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6519'.
[  589.676956][T29186] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6519'.
[  589.677038][T29186] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6519'.
[  589.677045][T29186] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6519'.
[  589.677130][T29186] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6519'.
[  589.677137][T29186] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6519'.
[  591.236827][T29291] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[  591.375950][T29299] ip6t_rt: address list match requested but addrnr is 0
[  591.454117][T29307] sch_fq: defrate 0 ignored.
[  591.455243][T29307] xt_check_target_common: 29 callbacks suppressed
[  591.455258][T29307] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 	
[  591.650967][T29326] ip6t_rt: address list match requested but addrnr is 0
[  591.700453][T29328] syzkaller1: entered promiscuous mode
[  591.700477][T29328] syzkaller1: entered allmulticast mode
[  591.900304][T29335] wlan1 speed is unknown, defaulting to 1000
[  592.515948][T29373] x_tables: duplicate underflow at hook 1
[  593.487076][T29405] netlink: 'syz.2.6574': attribute type 1 has an invalid length.
[  593.527356][T29405] 8021q: adding VLAN 0 to HW filter on device bond17
[  593.531696][T29405] bond16: (slave bond17): making interface the new active one
[  593.532123][T29405] bond16: (slave bond17): Enslaving as an active interface with an up link
[  593.552996][T29405] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  593.673066][T29413] net_ratelimit: 87 callbacks suppressed
[  593.673089][T29413] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  593.686805][T29415] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  594.052840][T29433] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  594.095954][T29437] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  594.149518][T29439] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  594.250295][T29443] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  594.383693][T29449] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  594.556601][T29453] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  594.564490][T29453] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  594.565377][T29453] __nla_validate_parse: 102 callbacks suppressed
[  594.565391][T29453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6593'.
[  594.565404][T29453] openvswitch: netlink: Flow actions attr not present in new flow.
[  594.778034][T29462] ip6gretap1: entered allmulticast mode
[  594.779742][T29462] batman_adv: batadv0: Adding interface: ip6gretap1
[  594.779755][T29462] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  594.779871][T29462] batman_adv: batadv0: Interface activated: ip6gretap1
[  594.802358][T29462] ip6t_rt: address list match requested but addrnr is 0
[  594.817064][T29464] syzkaller0: entered promiscuous mode
[  594.817084][T29464] syzkaller0: entered allmulticast mode
[  595.082103][T29490] bridge0: port 2(bridge_slave_1) entered disabled state
[  595.082502][T29490] bridge0: port 1(bridge_slave_0) entered disabled state
[  595.287769][T29500] netlink: 'syz.0.6611': attribute type 3 has an invalid length.
[  595.287793][T29500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6611'.
[  595.535817][T29510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6612'.
[  596.061810][T29520] wlan1 speed is unknown, defaulting to 1000
[  596.833921][T29542] ip6t_rt: address list match requested but addrnr is 0
[  596.995431][T29555] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6626'.
[  597.026937][T29559] sctp: [Deprecated]: syz.3.6627 (pid 29559) Use of int in max_burst socket option.
[  597.026937][T29559] Use struct sctp_assoc_value instead
[  597.460047][T29571] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6631'.
[  597.586148][T29576] ip6t_rt: address list match requested but addrnr is 0
[  598.316631][T29603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6640'.
[  601.088352][T29592] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  601.088789][T29599] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6639'.
[  601.201234][T29622] net_ratelimit: 41 callbacks suppressed
[  601.201257][T29622] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  601.201509][T29611] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  601.325642][T29627] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  601.381261][T29629] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  601.414188][T29633] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  601.414343][T29633] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  601.414492][T29633] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  601.415210][T29633] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  601.418538][T29635] atomic_op ffff8881200c81e0 conn xmit_atomic 0000000000000000
[  601.419231][T29635] atomic_op ffff8881153209e0 conn xmit_atomic 0000000000000000
[  601.419277][T29635] atomic_op ffff8881153261e0 conn xmit_atomic 0000000000000000
[  601.419318][T29635] atomic_op ffff8881153211e0 conn xmit_atomic 0000000000000000
[  601.419360][T29635] atomic_op ffff8881153259e0 conn xmit_atomic 0000000000000000
[  601.419408][T29635] atomic_op ffff8881153271e0 conn xmit_atomic 0000000000000000
[  601.420691][T29635] atomic_op ffff8881153279e0 conn xmit_atomic 0000000000000000
[  601.420736][T29635] atomic_op ffff8881153221e0 conn xmit_atomic 0000000000000000
[  601.420776][T29635] atomic_op ffff8881153249e0 conn xmit_atomic 0000000000000000
[  601.420816][T29635] atomic_op ffff8881153231e0 conn xmit_atomic 0000000000000000
[  601.456041][T29637] ip_tables: iptables: counters copy to user failed while replacing table
[  601.468004][T29631] wlan1 speed is unknown, defaulting to 1000
[  601.514882][T29642] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  601.670818][T29651] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  602.171896][T29683] wlan1 speed is unknown, defaulting to 1000
[  602.767579][T29700] Bluetooth: hci0: unsupported parameter 5161
[  602.767605][T29700] Bluetooth: hci0: unsupported parameter 8192
[  602.767614][T29700] Bluetooth: hci0: unsupported parameter 5161
[  602.767623][T29700] Bluetooth: hci0: unsupported parameter 8192
[  602.824411][T29706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6665'.
[  602.870650][T29717] wlan1 speed is unknown, defaulting to 1000
[  603.060076][T29720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6669'.
[  603.500312][T29741] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6674'.
[  603.694938][T29757] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6675'.
[  603.694958][T29757] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6675'.
[  603.695152][T29757] SET target dimension over the limit!
[  603.888735][T29770] ip6t_rt: address list match requested but addrnr is 0
[  604.327340][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  605.283866][T29694] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  605.450076][T29793] wlan1 speed is unknown, defaulting to 1000
[  605.536786][T29800] x_tables: duplicate underflow at hook 1
[  605.540116][T29800] netlink: 1244 bytes leftover after parsing attributes in process `syz.2.6689'.
[  606.170857][T29839] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6702'.
[  606.269668][T29847] net_ratelimit: 21 callbacks suppressed
[  606.269686][T29847] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  606.326561][T29849] wlan1 speed is unknown, defaulting to 1000
[  606.553479][T29852] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  606.758616][T29867] syzkaller1: entered promiscuous mode
[  606.758631][T29867] syzkaller1: entered allmulticast mode
[  606.959382][T29873] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  606.969490][T29875] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  607.001906][T29875] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6709'.
[  607.002147][T29875] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6709'.
[  607.161728][T29891] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  607.225829][T29895] wlan1 speed is unknown, defaulting to 1000
[  607.229684][T29896] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  607.453520][T29907] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  607.484307][T29907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6718'.
[  607.484345][T29907] netlink: 'syz.2.6718': attribute type 21 has an invalid length.
[  607.580370][T29895] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  607.716722][T29917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6719'.
[  607.921133][T29932] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  607.990155][T29938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6725'.
[  608.096732][   T34] audit: type=1800 audit(1791397015.063:10): pid=29946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6726" name=FFFFFFFF dev="tmpfs" ino=11935 res=0 errno=0
[  608.103398][   T34] audit: type=1804 audit(1791397015.063:11): pid=29946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.6726" name=2F6E6577726F6F742F323334382FFFFFFFFF dev="tmpfs" ino=11935 res=1 errno=0
[  608.165731][T29953] Bluetooth: hci0: unsupported parameter 5135
[  608.165784][T29953] Bluetooth: hci0: unsupported parameter 8192
[  608.165795][T29953] Bluetooth: hci0: unsupported parameter 5135
[  608.165805][T29953] Bluetooth: hci0: unsupported parameter 8192
[  608.238437][T29961] netlink: zone id is out of range
[  609.089982][T30017] netlink: 'syz.3.6737': attribute type 32 has an invalid length.
[  609.090007][T30017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6737'.
[  609.131011][T30017] bond4: Setting coupled_control to off (0)
[  609.140034][T30017] ip6t_ah: unknown flags 4
[  609.163081][T30017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6737'.
[  609.283557][T30024] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6738'.
[  609.645025][T30041] Bluetooth: hci0: unsupported parameter 5161
[  609.645056][T30041] Bluetooth: hci0: unsupported parameter 8192
[  609.645066][T30041] Bluetooth: hci0: unsupported parameter 5161
[  609.645078][T30041] Bluetooth: hci0: unsupported parameter 8192
[  609.682762][T30053] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  609.682762][T30053] 
[  609.682824][T30053] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  609.682824][T30053] 
[  609.683633][T30053] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  609.683633][T30053] 
[  609.683713][T30053] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  609.683713][T30053] 
[  609.683765][T30053] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  609.683765][T30053] 
[  609.683939][T30053] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  609.683939][T30053] 
[  609.683990][T30053] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  609.683990][T30053] 
[  609.684042][T30053] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  609.684042][T30053] 
[  609.684095][T30053] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  609.684095][T30053] 
[  609.684146][T30053] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  609.684146][T30053] 
[  609.805879][T30055] bond17: option resend_igmp: invalid value (2878)
[  609.805894][T30055] bond17: option resend_igmp: allowed values 0 - 255
[  609.809456][T30055] bond17 (unregistering): Released all slaves
[  609.903018][T30067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6747'.
[  609.978925][T30074] Bluetooth: hci0: invalid length 0, exp 2 for type 9
[  610.164219][T30093] netlink: 'syz.0.6759': attribute type 1 has an invalid length.
[  610.474730][T30129] wlan1 speed is unknown, defaulting to 1000
[  610.616029][T30142] ip6t_rt: address list match requested but addrnr is 0
[  610.716587][T30135] netlink: 'syz.3.6769': attribute type 21 has an invalid length.
[  610.850166][T30149] syzkaller1: entered promiscuous mode
[  610.850194][T30149] syzkaller1: entered allmulticast mode
[  611.561142][T30172] net_ratelimit: 210 callbacks suppressed
[  611.561165][T30172] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  611.651707][T30159] geneve3: entered promiscuous mode
[  611.651724][T30159] geneve3: entered allmulticast mode
[  611.657801][T30159] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  611.702453][T30187] netlink: 'syz.2.6783': attribute type 1 has an invalid length.
[  611.704536][T30189] netlink: 'syz.2.6783': attribute type 1 has an invalid length.
[  611.750379][T30193] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  611.781173][T30196] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  612.011446][T30211] x_tables: duplicate underflow at hook 1
[  612.033595][T30220] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  612.089229][T30223] netlink: 'syz.0.6792': attribute type 2 has an invalid length.
[  612.089454][T30223] netlink: 'syz.0.6792': attribute type 2 has an invalid length.
[  612.089612][T30223] netlink: 'syz.0.6792': attribute type 2 has an invalid length.
[  612.089771][T30223] netlink: 'syz.0.6792': attribute type 2 has an invalid length.
[  612.147494][T30223] bond17: option mode: invalid value (38)
[  612.151846][T30223] bond17 (unregistering): Released all slaves
[  612.164685][T30235] x_tables: duplicate underflow at hook 1
[  612.173432][T30226] __nla_validate_parse: 8 callbacks suppressed
[  612.173443][T30226] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6792'.
[  612.272388][T30225] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6791'.
[  612.324047][T30245] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  612.341639][T30242] wlan1 speed is unknown, defaulting to 1000
[  612.402698][T30249] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  612.470521][T30251] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  612.680099][T30265] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  612.837452][T30268] x_tables: duplicate underflow at hook 1
[  612.841550][T30268] validate_nla: 32 callbacks suppressed
[  612.841566][T30268] netlink: 'syz.0.6798': attribute type 1 has an invalid length.
[  612.841579][T30268] netlink: 1368 bytes leftover after parsing attributes in process `syz.0.6798'.
[  612.909679][T30270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6799'.
[  613.077085][T30274] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  613.374671][T30283] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6802'.
[  613.376129][T30283] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6802'.
[  613.443171][    C1] vcan0: j1939_tp_rxtimer: 0xffff88819e3d6400: rx timeout, send abort
[  613.446771][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88819e3d6400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session.
[  613.466738][T30283] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6802'.
[  613.466801][T30283] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6802'.
[  613.593949][T30283] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6802'.
[  613.593988][T30283] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6802'.
[  613.776937][T30306] xt_l2tp: wrong L2TP version: 0
[  613.902752][T30314] wlan1 speed is unknown, defaulting to 1000
[  615.992389][T30273] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  616.599213][T30381] net_ratelimit: 23 callbacks suppressed
[  616.599225][T30381] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  616.599690][T30381] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  616.725839][T30374] lo: entered promiscuous mode
[  616.750404][T30393] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  616.775956][T30397] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  616.814281][T30374] tunl0: entered promiscuous mode
[  616.816020][T30374] gre0: entered promiscuous mode
[  616.834471][T30374] gretap0: entered promiscuous mode
[  616.847302][T30374] erspan0: entered promiscuous mode
[  616.851463][T30374] ip_vti0: entered promiscuous mode
[  616.853337][T30374] ip6_vti0: entered promiscuous mode
[  616.855976][T30374] sit0: entered promiscuous mode
[  616.863853][T30374] ip6tnl0: entered promiscuous mode
[  616.868614][T30374] ip6gre0: entered promiscuous mode
[  616.871298][T30374] syz_tun: entered promiscuous mode
[  616.884300][T30374] ip6gretap0: entered promiscuous mode
[  616.890978][T30374] bridge0: entered promiscuous mode
[  616.891300][T30374] vcan0: entered promiscuous mode
[  616.892797][T30374] bond0: entered promiscuous mode
[  616.892809][T30374] bond_slave_0: entered promiscuous mode
[  616.904484][T30374] team0: entered promiscuous mode
[  616.904503][T30374] team_slave_0: entered promiscuous mode
[  616.904669][T30374] team_slave_1: entered promiscuous mode
[  616.920489][T30374] nlmon0: entered promiscuous mode
[  616.923404][T30374] batadv0: entered promiscuous mode
[  616.931257][T30374] vxcan0: entered promiscuous mode
[  616.932182][T30374] vxcan1: entered promiscuous mode
[  616.932601][T30374] veth0: entered promiscuous mode
[  616.936618][T30374] veth1: entered promiscuous mode
[  616.944875][T30374] wg0: entered promiscuous mode
[  616.949153][T30374] wg1: entered promiscuous mode
[  616.951139][T30374] veth0_to_bridge: entered promiscuous mode
[  616.957894][T30374] veth1_to_bridge: entered promiscuous mode
[  616.967284][T30374] veth0_to_bond: entered promiscuous mode
[  616.969897][T30374] veth0_to_team: entered promiscuous mode
[  616.977978][T30374] veth1_to_team: entered promiscuous mode
[  616.983038][T30374] veth0_to_batadv: entered promiscuous mode
[  616.985080][T30374] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  616.985107][T30374] batadv_slave_0: entered promiscuous mode
[  616.989507][T30374] veth1_to_batadv: entered promiscuous mode
[  616.995090][T30374] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  616.995118][T30374] batadv_slave_1: entered promiscuous mode
[  617.000447][T30374] xfrm0: entered promiscuous mode
[  617.002640][T30374] veth0_to_hsr: entered promiscuous mode
[  617.007506][T30374] veth1_to_hsr: entered promiscuous mode
[  617.013785][T30374] hsr0: entered promiscuous mode
[  617.017470][T30374] veth1_virt_wifi: entered promiscuous mode
[  617.024166][T30374] veth0_virt_wifi: entered promiscuous mode
[  617.026651][T30374] virt_wifi0: entered promiscuous mode
[  617.033840][T30374] vlan1: entered promiscuous mode
[  617.039501][T30374] macvlan0: entered promiscuous mode
[  617.042571][T30374] macvlan1: entered promiscuous mode
[  617.044833][T30374] ipvlan0: entered promiscuous mode
[  617.044917][T30374] ipvlan1: entered promiscuous mode
[  617.057461][T30374] macvtap0: entered promiscuous mode
[  617.069149][T30374] macsec0: entered promiscuous mode
[  617.071782][T30374] geneve0: entered promiscuous mode
[  617.074282][T30374] geneve1: entered promiscuous mode
[  617.081134][T30374] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  617.088201][T30374] netdevsim netdevsim3 netdevsim1: entered promiscuous mode
[  617.089636][T30374] netdevsim netdevsim3 netdevsim2: entered promiscuous mode
[  617.093448][T30374] netdevsim netdevsim3 netdevsim3: entered promiscuous mode
[  617.132543][T30374] mac80211_hwsim hwsim31 wlan0: entered promiscuous mode
[  617.144203][T30374] mac80211_hwsim hwsim32 wlan1: entered promiscuous mode
[  617.147947][T30374] mac80211_hwsim hwsim32 nicvf0: entered promiscuous mode
[  617.148140][T30374] gtp0: entered promiscuous mode
[  617.149516][T30374] veth2: entered promiscuous mode
[  617.150853][T30374] veth3: entered promiscuous mode
[  617.150979][T30374] ip6tnl1: entered promiscuous mode
[  617.160273][T30374] bridge1: entered promiscuous mode
[  617.168986][T30374] bond3: entered promiscuous mode
[  617.171914][T30374] geneve2: entered promiscuous mode
[  617.173856][T30374] bond4: entered promiscuous mode
[  617.174128][T30374] bridge2: entered promiscuous mode
[  617.186453][T20347] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  617.191868][T20347] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  617.191912][T20347] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  617.191941][T20347] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  617.302534][T30403] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  617.357872][T30413] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  617.454330][T30400] __nla_validate_parse: 4 callbacks suppressed
[  617.454344][T30400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6834'.
[  617.495258][T30420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6839'.
[  617.550273][T30422] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  617.598838][T30407] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  617.642255][T30425] ip6t_rt: address list match requested but addrnr is 0
[  617.698874][T30427] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6842'.
[  617.812672][T30432] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  617.845795][T30434] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  617.927537][T30437] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6845'.
[  617.928241][T30437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6845'.
[  618.154992][T30458] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6850'.
[  618.241457][T30467] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT
[  618.241712][T30468] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT
[  618.413866][T30486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6861'.
[  618.437936][T30488] mac80211_hwsim hwsim31 wlan0: left promiscuous mode
[  618.580157][T30498] netlink: 64915 bytes leftover after parsing attributes in process `syz.0.6865'.
[  618.711157][T30506] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6869'.
[  618.887538][T30515] wlan1 speed is unknown, defaulting to 1000
[  619.412352][T30530] wlan1 speed is unknown, defaulting to 1000
[  619.741599][T30540] SET target dimension over the limit!
[  619.967449][T30550] x_tables: duplicate underflow at hook 1
[  620.053671][T30561] netlink: 'syz.2.6883': attribute type 2 has an invalid length.
[  620.054685][T30561] ip6t_rt: address list match requested but addrnr is 0
[  620.127021][T30542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6879'.
[  620.292878][T30574] xt_l2tp: v2 doesn't support IP mode
[  620.846038][T30593] ip6t_ah: unknown flags 4
[  621.287746][T30624] Bluetooth: hci0: invalid length 0, exp 2 for type 6
[  621.548672][T30638] bond18: Removing last ns target with arp_interval on
[  621.562280][T30638] netlink: 'syz.0.6911': attribute type 1 has an invalid length.
[  621.570396][T30638] ip6t_ah: unknown flags 4
[  621.938581][T30664] net_ratelimit: 39 callbacks suppressed
[  621.938603][T30664] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  622.072449][T30672] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  624.808786][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  624.937662][T30664] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  625.044907][T30682] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  625.170922][T30696] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  625.171153][T30697] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  625.212757][T30700] netlink: 'syz.3.6921': attribute type 2 has an invalid length.
[  625.212809][T30700] netlink: 'syz.3.6921': attribute type 5 has an invalid length.
[  625.214428][T30700] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  625.228458][T30702] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  625.293534][T30706] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  625.307739][T30704] wlan1 speed is unknown, defaulting to 1000
[  625.449099][T30710] ip_tables: iptables: counters copy to user failed while replacing table
[  625.538405][T30715] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  625.539636][T30713] netlink: 'syz.3.6925': attribute type 4 has an invalid length.
[  625.555816][T30713] __nla_validate_parse: 12 callbacks suppressed
[  625.555833][T30713] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6925'.
[  625.563965][T30715] netlink: 'syz.0.6926': attribute type 1 has an invalid length.
[  625.628647][T30715] 8021q: adding VLAN 0 to HW filter on device bond19
[  625.699132][T30722] xt_MASQUERADE: bad MAP_IPS.
[  625.962161][T30735] wlan1 speed is unknown, defaulting to 1000
[  626.048839][T30738] ip6t_rt: address list match requested but addrnr is 0
[  626.316597][T30747] x_tables: duplicate underflow at hook 1
[  626.420276][T30744] wlan1 speed is unknown, defaulting to 1000
[  626.773360][ T5664] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  626.883043][ T8993] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  626.958734][T30757] net_ratelimit: 5 callbacks suppressed
[  626.958751][T30757] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  627.000393][T30759] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  627.219024][T30767] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  627.306693][ T8993] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  627.537100][T23684] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  627.784870][T30778] syzkaller0: entered promiscuous mode
[  627.784890][T30778] syzkaller0: entered allmulticast mode
[  627.796590][T30785] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  628.411270][T30797] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  630.179174][T30792] bridge12: entered promiscuous mode
[  630.179226][T30792] bridge12: entered allmulticast mode
[  630.258586][T30799] tipc: Started in network mode
[  630.258613][T30799] tipc: Node identity 1a213a54f3d2, cluster identity 4711
[  630.258728][T30799] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  630.259135][T30799] SET target dimension over the limit!
[  630.278837][T30803] SET target dimension over the limit!
[  630.298256][T30809] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  630.341879][T30798] tipc: Resetting bearer <eth:syzkaller0>
[  630.372960][T30798] tipc: Disabling bearer <eth:syzkaller0>
[  630.457988][T30817] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  630.472884][T30817] netlink: 324 bytes leftover after parsing attributes in process `syz.0.6954'.
[  630.543655][T30823] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  630.559615][T30825] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  630.564670][T30821] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6956'.
[  630.620035][T30831] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  630.664085][T30830] syzkaller1: entered promiscuous mode
[  630.664112][T30830] syzkaller1: entered allmulticast mode
[  630.671873][T30830] ip6t_ah: unknown flags 4
[  630.814560][T30839] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6963'.
[  631.102241][T30870] wlan1 speed is unknown, defaulting to 1000
[  631.104353][T30871] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6972'.
[  631.104369][T30871] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6972'.
[  631.104378][T30871] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6972'.
[  631.104386][T30871] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6972'.
[  631.203203][T30881] syz.0.6975 (30881) used obsolete PPPIOCDETACH ioctl
[  631.203492][T30884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6975'.
[  631.213857][T30880] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6975'.
[  634.435553][T30895] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  634.535980][T30939] xt_check_target_common: 9 callbacks suppressed
[  634.536002][T30939] x_tables: ip6_tables: SNPT target: only valid in mangle table, not ./cgroup.net/syz1
[  634.594254][T30944] ip6t_ah: unknown flags 4
[  634.609948][T30948] net_ratelimit: 16 callbacks suppressed
[  634.609969][T30948] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  634.614056][T30948] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  634.614329][T30948] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  634.614597][T30948] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  634.614863][T30948] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  634.615092][T30948] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  634.615323][T30948] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  634.629944][T30950] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6987'.
[  634.663048][T30953] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  634.716716][T30961] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  634.759740][T30966] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  637.649237][T30953] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  637.652478][T30968] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6991'.
[  637.916335][T30988] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6998'.
[  637.916358][T30988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6998'.
[  638.061412][T30996] wlan1 speed is unknown, defaulting to 1000
[  638.560759][T31019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7004'.
[  638.646147][T25929] unregister_netdevice: waiting for vcan0 to become free. Usage count = 3
[  638.647020][T25929] ref_tracker: netdev@ffff888112780700 has 1/2 users at
[  638.647020][T25929]      j1939_ecu_create_locked+0x1cd/0x400
[  638.647020][T25929]      j1939_local_ecu_get+0xeb/0x220
[  638.647020][T25929]      j1939_sk_bind+0x70a/0xc60
[  638.647020][T25929]      __sys_bind+0x2e3/0x410
[  638.647020][T25929]      __x64_sys_bind+0x7a/0x90
[  638.647020][T25929]      do_syscall_64+0x166/0x520
[  638.647020][T25929]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  638.647020][T25929] 
[  638.647084][T25929] ref_tracker: netdev@ffff888112780700 has 1/2 users at
[  638.647084][T25929]      j1939_netdev_start+0x387/0xb20
[  638.647084][T25929]      j1939_sk_bind+0x946/0xc60
[  638.647084][T25929]      __sys_bind+0x2e3/0x410
[  638.647084][T25929]      __x64_sys_bind+0x7a/0x90
[  638.647084][T25929]      do_syscall_64+0x166/0x520
[  638.647084][T25929]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  638.647084][T25929] 
