last executing test programs:

2.410128696s ago: executing program 2 (id=9242):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6000000, 0x4010, r0, 0x7288a000)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0xff06, 0x0)
read$nci(r3, &(0x7f0000000000)=""/234, 0xea)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8)
close(r5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r6, @ANYBLOB="0100000002"], 0x40)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r9}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r8}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r10}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r11 = socket$kcm(0x10, 0x2, 0x0)
r12 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r12, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'macvtap0\x00'}}, 0x1e)
sendmmsg(r12, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)
sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=@mangle={'mangle\x00', 0x10, 0x6, 0x6c0, 0x0, 0x3f0, 0x1e8, 0x1e8, 0x500, 0x5f0, 0x5f0, 0x5f0, 0x5f0, 0x5f0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe, 0x3f}}}, {{@ipv6={@dev, @loopback, [0x0, 0x0, 0xffffffff, 0xff], [], 'pimreg0\x00', 'veth1_macvtap\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x922], 0x0, 0x20, 0x0, [@empty, @private2, @loopback, @mcast2, @local, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @mcast1, @mcast2, @empty, @private1, @local, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0xa, 0x2, {0x8}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@empty, 0x0, 0x29}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720)

1.810937519s ago: executing program 1 (id=9247):
socket(0x27, 0x5, 0x7)

1.750265812s ago: executing program 1 (id=9248):
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newnexthop={0x18, 0x68, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x2, 0x0, 0x4}}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r3)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x2c}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x4, 0x1000, 0x3d, 0x41}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r5, &(0x7f0000000080), 0x0}, 0x20)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, r4, 0x301}, 0x14}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x98}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x34}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0x6, &(0x7f0000000580)=@raw=[@map_idx={0x18, 0x3, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @jmp={0x5, 0x0, 0xb, 0x4, 0xa, 0xffffffffffffffc0, 0x10}, @cb_func={0x18, 0xf, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f00000004c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x3040e, r1, 0x0, &(0x7f0000000540)=[r8, r6, r6, r6, r5, r5]}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000600)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003600010000000000fcdbdf250701f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r8, r8, 0x19, 0x0, @val=@netfilter={0x0, 0x0, 0x6}}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000068a00800000000004000000cb2004005100000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x5}, 0x94)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
r10 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', <r11=>0x0})
ioctl$sock_ifreq(r2, 0x8932, &(0x7f0000000080)={'veth0_to_bond\x00', @ifru_hwaddr=@remote})
sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newsa={0x15c, 0x1a, 0x713, 0x0, 0x25dfdbff, {{@in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in=@local, 0x104d2, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x38}, {0x5, 0x0, 0x800, 0xe91, 0xffffffff00000001, 0x10000000, 0x80000001, 0x543}, {0x1000000000004, 0x7fffffffffffffff, 0x100, 0xc}, {}, 0x70bd26, 0x3505, 0xa, 0x4, 0x40, 0x54}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r11}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014)

1.640373995s ago: executing program 1 (id=9249):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r2=>0x0})
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x4}}, 0x10)
bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x1, 0x4}, 0x3}}, 0x10)
bind$tipc(r4, 0x0, 0x0)
bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$xdp(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0x2c, 0x8, r2, 0x30}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000200)="720c554bfb3983be70167ae2079bdad4952e047c4fed346a51f93bf78ba99574bb6695f0f0a64a0113e809b3e86fd4dad91ecc64e92ec1eff8ecfd8e57a0d7494f0274f4311ae38c6488b15736c6446dca1c71ea3363c13a92117e07d10e6f006b876967633b7f89cc33cac005bd101c7e59679c18fced9ff46e6c2bf78034284a4c35ba191c1b46fe85642ad5bfbff7f9e4da01c0393125dca108488230c986f8b5f556da656a4169459ddb6235cfc243f84b1f9f5bcfdf4500be57283cced4be00ee535e7f13034424e0b31289e2a8e64642212f407b170bde88e634efc64ac0099913f247f976943e3d37e6ae8f3073", 0xf1}, {&(0x7f0000000380)="7a727d53e336fb7cd4b72423fed64e13c63635efae4756fa2d98f70c511e828f399c742e5a751dcfd7ca54253884c12d42956249be51c192526c9dd6694396dd511c5190e9e612eff2cecf21c5d4fcc0a35c9a6e4f3b0d099307b86f325c75ad6853cc5f4854b3ddd7089371462955acfd0b2b1cd2ec6952438a583e67187f1238bc144c2c0eeddd89f919aad86979aff0fe598fb91a8828a3dfdf3daf1667785fb41706c448bfcdd4124f7b462bdd64f1ae13394d339f1177fbccf047ac60f7e4214c769721917f9b5f961a2be45f6ef6fe458cea408df871fe7d83282b5973db14e2a8808be791856a9903", 0xec}], 0x2}, 0x8800)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/2, 0x1108000, 0x800, 0x7, 0x1}, 0x20)
getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000000)=<r7=>0x0)
bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, r7, 0xffffffffffffffff, 0x1, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
listen(r5, 0x40)
r8 = socket(0xa, 0x5, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', <r10=>0x0})
bind$packet(r9, &(0x7f0000000080)={0x11, 0x1a, r10, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14)
readv(r9, &(0x7f0000002200)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f0000000180), &(0x7f0000000300)=0x4)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b40)=@mangle={'mangle\x00', 0x64, 0x6, 0x640, 0x2c8, 0x3b8, 0x488, 0x3b8, 0x488, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@local, 0x38, 0x20, 0x32}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0)
close(r6)

1.540665081s ago: executing program 2 (id=9250):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4040) (async)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000a00)={<r1=>r0, 0xe, 0x4, 0x7}) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async, rerun: 64)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) (rerun: 64)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%ps    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r3}, 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff8500000071000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000640)=""/62, &(0x7f00000006c0)=0x3e) (async)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500b73b", @ANYRES16=r5, @ANYBLOB="01002dbd700000dcdf250c0000002c0001801400020076657468315f746f5f687372000000001400020070696d36726567000000000000000000080003801dff0380"], 0x48}, 0x1, 0x0, 0x0, 0x4818}, 0x20000004) (async)
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0076400d26e86db083490d13e98d4305fc4a09942970238e18026b433ca37733d8173b8f43f9eec65044f5b019e45ccdc886459e45e78925a44a5397d48271f67b4f33a917b7c6bd39e1d8c72867838ee3fd8463cd4c30c0fe748d212825322fd85bcaa94bf67bde404af963f03c23f939fe", @ANYRES16=r6, @ANYRESOCT=r1], 0x44}, 0x1, 0x0, 0x0, 0x40881}, 0x20010000)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1, 0x0, 0x0, 0x44800}, 0x4004810)
recvmmsg(r7, &(0x7f0000004300), 0x4000000000000e9, 0x60, 0x0) (async, rerun: 32)
socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000000d0a11010000000000000000010000050900010073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0xd0, 0x1a0, 0x270, 0x340, 0x0, 0xd0, 0x1a0, 0x270, 0x430, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@empty, 0x40, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r7, &(0x7f00000009c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x10) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r10, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async)
sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x2000)

1.260595863s ago: executing program 0 (id=9252):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0xd0, 0x1a0, 0x270, 0x340, 0x0, 0xd0, 0x1a0, 0x270, 0x430, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@empty, 0x40, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) (async)
socket$kcm(0xa, 0x1, 0x106) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) (rerun: 32)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x50) (async)
close(0xffffffffffffffff)
r2 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) (async, rerun: 64)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) (rerun: 64)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64)
r6 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r5, &(0x7f0000000280)={@val={0xa, 0x7}, @void, @eth={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @val={@void, {0x8100, 0x5, 0x1, 0x6}}, {@ipv6={0x86dd, @generic={0x7, 0x6, "dfcfdc", 0x0, 0x2c, 0xff, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}, 0x3e) (async)
recvmsg$kcm(r2, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x10000)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r4, &(0x7f00000000c0)}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x10001, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{}, &(0x7f00000007c0), &(0x7f0000000640)=r7}, 0x20) (async, rerun: 32)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, <r8=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20) (rerun: 32)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r8, &(0x7f00000004c0)}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3) (async, rerun: 64)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) (rerun: 64)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

980.416101ms ago: executing program 0 (id=9253):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a14000000000a010400000000000000000200000a74010000180a010800000000000000000700000a0c00054000000000000000011400038008000140000000000800024000000001400003802c0003801400010073797a6b616c6c657230000000000000140001006d6163766c616e3000000000000000000800014000000000080002401b730008000800024000000007a4000380140001006e657470636930000000000000000000140001006d6163766c616e3100000000000000001400010076657468315f746f5f627269646765001400010076657468315f746f5f62617461647600140001006272696467653000000000000000000014000100766c616e310000000000000000000000140001006970366772653000000000000000000014000100627269646765300000000000000000000800024000000005080002400000000008000240fffeffff180003801400010076657468315f746f5f7465616d0000000800024000000fff080001400000000008000740000000004c000000060a010400000000000000000200000a0900010073797a30000000000900020073797a3000000000200004801c0001800a00010071756575650000000c0002800800044000000003140000001100010000000000000000000200000a"], 0x1fc}, 0x1, 0x0, 0x0, 0x4044004}, 0x0)
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x200000)
pwritev(r1, &(0x7f0000001600)=[{&(0x7f00000005c0)="5bac60f0d0", 0x5}, {0x0}], 0x2, 0x5, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400006800e6d8758d000000000c000acd8000000046060707041fd3b695384540a900"], 0x24}, 0x1, 0x0, 0x0, 0x8002}, 0x1080)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x1}}, @NFQA_CFG_FLAGS={0xfd77, 0x5, 0x1, 0x0, 0x2}]}, 0x38}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = epoll_create1(0x80000)
r6 = socket(0x1, 0x1, 0x0)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0x8000000d})
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendfile(r8, r9, 0x0, 0x6)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)={0x10000001})
close(r6)
r10 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r10, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x200b, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefcb)

899.936849ms ago: executing program 0 (id=9254):
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001003800000008000a00", @ANYRES32=r0], 0x24}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x8cfd, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x24}, 0x0, 0x3c}, 0x0, @in6=@loopback, 0x2, 0x4, 0x1, 0x0, 0x2}]}]}, 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@getsa={0x14c, 0x12, 0x100, 0x70bd2b, 0x25dfdbfd, {@in=@private=0xa010101, 0x4d3, 0x2, 0x33}, [@algo_comp={0xe5, 0x3, {{'deflate\x00'}, 0x4e8, "9d9697fc737474202249855b24933f1d723c1bc3ec5c84970cd522431614f65e39424f7e9c6b27ff202a0e95e7e3b6dff04cda8ba7a8fb15223b8a4938d0dc93afac2a92349a4c15c1459c7160c7a057daea1c153243faeb48e94a7c6d1638a12d25049dd2febbfadeccd33f2ed54db9780601837e387783f07cb6c188052b11629fd035254f624a740331ea70c3ffdaa0092526b09dbbbc8b7277487a"}}, @coaddr={0x14, 0xe, @in=@rand_addr=0x64010101}, @address_filter={0x28, 0x1a, {@in=@private=0xa010101, @in6=@private2, 0x2, 0xa, 0x7}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40804}, 0x8008000)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00000000b5e6766258c5b8b28c1a1ff63688c161bf43830b8bf36bce2bab45bfaf9c1970707bb0ec07c5af5cf5f97b6b0a4ce4934f5f5adc7f62d62e", @ANYRES16=r2, @ANYBLOB="01002dbd700000dcdf250c0000002c0001801400020076657468315f746f5f687372000000001400020070696d36726567000000000000000000080003801dff0380"], 0x48}, 0x1, 0x0, 0x0, 0x4818}, 0x20000004)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1, 0x0, 0x0, 0x44800}, 0x4004810)
recvmmsg(r5, &(0x7f0000004300), 0x4000000000000e9, 0x60, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0xd0, 0x1a0, 0x270, 0x340, 0x0, 0xd0, 0x1a0, 0x270, 0x430, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@empty, 0x40, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r9 = socket(0x10, 0x1, 0x0)
sendto$inet6(r9, &(0x7f0000000180)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003b0000000a0000000d0085a168d0bf46d32345653600648d04000b000209000049935ade4a460c89b6ec0cffc6ff7f000000000000d89058ba86c902000020004a32000402160005000a0000000000e000e218d1ddf679d538", 0x79, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f0000000580)={0x1, 'veth0_to_bridge\x00', 0x3}, 0x18)
recvmsg$unix(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x2000)
ioctl$sock_inet_SIOCADDRT(r10, 0xff08, 0x0)

659.04709ms ago: executing program 1 (id=9255):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010400000000000000000200000a0900010073797a300000000040000000030a010400000000000000000200000a0900010073797a300000000009000300737a300000000014000480080001400000000308000240000000004c000000060a010400000000000000000200000a0900010073797a30000000000900020073797a3000000000200004801cec01800a00010071756575650000000c0002800600014000060000140000001100010000000000000000000200000a00"], 0xd4}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x38}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x200b, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefcb)

579.139746ms ago: executing program 1 (id=9256):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0xd0, 0x1a0, 0x270, 0x340, 0x0, 0xd0, 0x1a0, 0x270, 0x430, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@empty, 0x40, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
socket$kcm(0xa, 0x1, 0x106)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(0xffffffffffffffff)
r2 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20)
recvmsg$kcm(r2, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x10000)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r4, &(0x7f00000000c0)}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x10001, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{}, &(0x7f00000007c0), &(0x7f0000000640)=r5}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r6, &(0x7f00000004c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r8 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000005c0)={<r9=>0x0, @rand_addr, @multicast1}, &(0x7f0000000600)=0xc)
sendmsg$nl_route(r8, &(0x7f0000000900)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2002005}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=@ipv4_newroute={0x50, 0x18, 0x100, 0x70bd2c, 0x25dfdbfc, {0x2, 0x14, 0x20, 0x5, 0xfd, 0x1, 0x0, 0xa, 0x2c00}, [@RTA_PRIORITY={0x8, 0x6, 0x5}, @RTA_DPORT={0x6, 0x1d, 0x4e20}, @RTA_PRIORITY={0x8, 0x6, 0x7}, @RTA_DPORT={0x6, 0x1d, 0x4e23}, @RTA_MULTIPATH={0xc, 0x9, {0xb, 0x20, 0x6, r9}}, @RTA_FLOW={0x8, 0xb, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

460.501682ms ago: executing program 2 (id=9257):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
ioctl$sock_ifreq(r1, 0x8923, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue})
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x35}]}}}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x100}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x38}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000c00000008000500000000000800040000000014080006"], 0x2c}}, 0x0)
sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x3c, r5, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x780}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040889}, 0x4081)
socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x200b, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefcb)

459.850287ms ago: executing program 0 (id=9258):
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x150, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3a0, 0xffffffff, 0xffffffff, 0x3a0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00', {}, {}, 0x0, 0x8, 0x2, 0x21}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x2, 0x3}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x62, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x1, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1f, 0x5, 0xb) (async)
r2 = socket(0x1f, 0x5, 0xb)
getsockopt(r2, 0x200000000114, 0x8, &(0x7f0000019580)=""/102400, &(0x7f0000000400)=0x19000)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000640)) (async)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000640))
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYRES8, @ANYRES32, @ANYRES32, @ANYRES8=r2, @ANYRESDEC=r0], 0x48}, 0x1, 0x0, 0x0, 0x4818}, 0x20000004)
r3 = socket$netlink(0x10, 0x3, 0x0)
read$alg(r2, &(0x7f0000000580)=""/123, 0x7b)
sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1, 0x0, 0x0, 0x44800}, 0x4004810)
recvmmsg(r3, &(0x7f0000004300), 0x4000000000000e9, 0x60, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0xd0, 0x1a0, 0x270, 0x340, 0x0, 0xd0, 0x1a0, 0x270, 0x430, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@empty, 0x40, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4)
r7 = socket$inet(0x2, 0x1, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r7, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) (async)
recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x2000)
ioctl$sock_inet_SIOCADDRT(r8, 0xff08, 0x0)
socket$kcm(0xa, 0x1, 0x106) (async)
r9 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r9, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x200b, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefcb) (async)
sendmsg$kcm(r9, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x200b, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefcb)

443.152294ms ago: executing program 2 (id=9259):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYRESDEC=r0, @ANYRES32=r5, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}, 0x1, 0x17, 0x0, 0x844}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xcbb12fba663d5a97}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xe8, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x100}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xdc0b}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x8c, 0x3, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x75, 0x1, "62f03076a8235d0b8c49587a88c19bb4c55dc74c9f2f3cfb84428fcd2f612868236390e9055d6146ede682c70ecbcd34a91360a8824e81283dcdbad9aa1596f6a02de65085c6b5d9fd0fe3694d9783686b17b8d7ec0a6543b8f47e2c700811a7aca79bb3288d707bae84bc9c3d65bd4030"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x10001}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xc403}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8010}, 0x80)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x38}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x200b, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefcb)

380.102802ms ago: executing program 2 (id=9260):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x1b0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2b706572665f6576656e74202d726c696d6974202d667265657a65722064696f202a6e6574202b72646d61202d706572665f6576656e742006696f20"], 0x3c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000fdffffff00000000f9ffffff91116800000000009520000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000140)=@ethtool_gfeatures})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0xb8765000)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(0xffffffffffffffff, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007f00)={0x58, 0x19, 0x1, 0x70bd28, 0x25dfdbfb, {0x6, 0xd601, 0x9}, [@nested={0x2c, 0x12, 0x0, 0x1, [@nested={0x27, 0xd5, 0x0, 0x1, [@generic="33ac20d9db2597515873def3351bf11d66e8632c47544ac4a8a74aec90d7faba3dc1cd"]}]}, @nested={0x18, 0x6, 0x0, 0x1, [@nested={0x14, 0x41, 0x0, 0x1, [@nested={0x10, 0x13e, 0x0, 0x1, [@nested={0xc, 0xa0, 0x0, 0x1, [@nested={0x8, 0x61, 0x0, 0x1, [@nested={0x4, 0x6d, 0x0, 0x1, [@generic]}]}]}]}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x0)
recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x2000)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f0000000040)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@rr={0x7, 0x3, 0x47}]}}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r1, 0x40786e88, &(0x7f0000000f00)={{&(0x7f00000004c0)=[{0x51b2163, 0x3b, 0xbed, {0x4, 0x4}, 0x272, 0xffffffffffff116c, 0x8000}, {0xc7, 0x7, 0x5, {0x7, 0x9}, 0x4, 0x9, 0xfffffff7}, {0x1, 0x6, 0x4, {0x6, 0x200}, 0x0, 0x100, 0x101}, {0x3, 0x100000001, 0x800, {0x0, 0x4}, 0x6, 0x6, 0x6}, {0xd, 0x7f, 0xf, {0x6, 0x7fffffff}, 0x7, 0x1, 0x9614}, {0x4, 0x5, 0x6, {0xba2, 0xffffffff80000000}, 0x1ff, 0x2, 0x4}, {0x0, 0x7, 0x8, {0x6, 0x3}, 0xc6, 0x3, 0x8}, {0x81, 0x400, 0x8, {0x7ff, 0x9}, 0x8000000000000000, 0x8, 0xfffffffa}, {0x812, 0x1, 0x1, {0x275, 0x1ff}, 0x8, 0xffffffffffffffff, 0x38000}], 0x9, 0x40, 0x200, 0x4}, {&(0x7f0000000740)=[{0x9, 0x5}, {0xffffffffffffffff, 0x4}, {0x4, 0x3}, {0x2, 0x100000001}, {0x8000000000000001, 0x2}], 0x5, 0x10, 0x3, 0x8000000000000001}, {&(0x7f00000007c0)=[0x1], 0x1, 0x8, 0x1, 0x9}, {&(0x7f0000000e80)=[{0x10, 0xff8f, 0xfffffffffffffff8, 0x3, 0x1}], 0x1, 0x28, 0x3, 0xf}, {&(0x7f0000000240)=[0x8, 0x8], 0x2, 0x8, 0x2, 0x3}})

378.750444ms ago: executing program 2 (id=9261):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWOBJ={0x18, 0x12, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_DATA={0x4}}], {0x14}}, 0x8c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x4000}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x16, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001000010429bd700000000000e0000000", @ANYRES32=0x0, @ANYBLOB="00010000316f0600300012800b00010067656e65766500002000028008001100"], 0x64}}, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x50, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x700, 0x7, 0x9, 0x0, {{0x6, 0x4, 0x2, 0x1, 0x18, 0x64, 0x0, 0xfe, 0x29, 0x0, @local, @multicast1, {[@rr={0x7, 0x3, 0xc1}]}}}}})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x11c, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x100, 0x33, @beacon={{{}, {0xde1}, @broadcast, @device_a, @random="4529ea1307c5"}, 0x100000, @random=0x3b, 0x5b04, @void, @val, @val={0x3, 0x1, 0xe}, @void, @val={0x6, 0x2, 0x4}, @val={0x5, 0xb6, {0x10, 0x98, 0x4, "1cb60e89ba081f13b6d760c94f1123a181ccf6ea20be13ac2f1ea2a3cc4846025eca29f85f81210fb24a48f1efc8d7fba2d62caaf0362cadd57c019104b007a9c54f618cc641bc994c614536ed870aa79d7ff92680c764e3b920ae946c6a7a266bf688f1d130ad142101ac2206a7669c750f123edd1b7b236a1405eebe05ea832ce670171d19a1bc521b45b5185a3924d372f5f55c13dea4f319c6b36d4c296e04ecb1168ce729035373a8e77ee15455d7cdee"}}, @val={0x25, 0x3, {0x0, 0x3}}, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0xe9, 0x1, 0x10}}, @void, @void, @val={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x4, 0x68}}, @void}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x880}, 0x400c0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r7, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x60, r9, 0x1, 0xffffffff, 0xfffffffe, {0x37}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x15}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004000}, 0x20040100)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0xd0, 0x1a0, 0x270, 0x340, 0x0, 0xd0, 0x1a0, 0x270, 0x430, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@empty, 0x40, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)

280.112453ms ago: executing program 1 (id=9262):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
unshare(0x400)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0)={0x70004, 0x200}, 0x8)
shutdown(r1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x1, 0x70bd2d, 0x25dfdc00, {}, [@ETHTOOL_A_FEATURES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xff1d}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4818}, 0x20000004)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1, 0x0, 0x0, 0x44800}, 0x4004810)
recvmmsg(r6, &(0x7f0000004300), 0x4000000000000e9, 0x60, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94)
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400001d000080000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32, @ANYBLOB="080004"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0xd0, 0x1a0, 0x270, 0x340, 0x0, 0xd0, 0x1a0, 0x270, 0x430, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@empty, 0x40, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)

60.170693ms ago: executing program 0 (id=9263):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ef00000000bfa201000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0xfffffffffffffdf5, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xff85, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 0 (id=9264):
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002dbd700000dcdf250c0000002c0001801400020076657468315f746f5f687372000000001400020070696d36726567000000000000000000080003801dff0380"], 0x48}, 0x1, 0x0, 0x0, 0x4818}, 0x20000004)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1, 0x0, 0x0, 0x44800}, 0x4004810)
recvmmsg(r2, &(0x7f0000004300), 0x4000000000000e9, 0x60, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000640)={'wg0\x00'})
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x24dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x0, 0x9}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0xd0, 0x1a0, 0x270, 0x340, 0x0, 0xd0, 0x1a0, 0x270, 0x430, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@empty, 0x40, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)

0s ago: executing program 2 (id=9265):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
socket(0x10, 0x2, 0x0) (async)
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl1\x00', <r1=>0x0, 0x0, 0x0, 0x0, 0x9, 0x21, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x8, 0x8000, 0x5b30, 0x1}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x0, 0x10}})
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000004, 0x42072, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x201, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r2}, &(0x7f00000002c0), &(0x7f00000001c0)='%pK    \x00'}, 0x20) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r2}, &(0x7f00000002c0), &(0x7f00000001c0)='%pK    \x00'}, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0xcc411eaf6a585b1f, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040095}, 0x40) (async)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0xcc411eaf6a585b1f, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040095}, 0x40)
unshare(0x8040480) (async)
unshare(0x8040480)
getsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000140), &(0x7f0000000280)=0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x48052)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x4010, r0}, 0x18)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x3, 0x8)
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r7, &(0x7f00000006c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf1d, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x8100)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r5, r1, 0x30, 0x3, @void}, 0x10) (async)
r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r5, r1, 0x30, 0x3, @void}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r9, 0x4)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) (async)
bind$alg(r10, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r11 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x18000000000002a0, 0xc, 0x0, &(0x7f0000000480)="b9ff03076003008cb89e08f0", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

led while replacing table
[  923.056625][ T5387] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  923.229806][ T5393] __nla_validate_parse: 3 callbacks suppressed
[  923.229823][ T5393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7494'.
[  923.230050][ T5393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7494'.
[  923.403545][ T5401] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  923.891851][ T5411] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7499'.
[  923.892349][ T5411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7499'.
[  923.899030][ T5411] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  924.129720][ T5417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7501'.
[  924.129758][ T5417] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7501'.
[  924.130732][ T5418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7501'.
[  924.130765][ T5418] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7501'.
[  924.162615][ T5417] bond15: Removing last ns target with arp_interval on
[  924.186532][ T5418] bond16: Removing last ns target with arp_interval on
[  924.400603][ T5432] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7504'.
[  924.521634][ T5433] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7504'.
[  924.765331][ T5439] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  924.784155][ T5441] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  927.862727][ T5547] net_ratelimit: 10 callbacks suppressed
[  927.862746][ T5547] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  927.903288][ T5549] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  928.352654][ T5553] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  928.376651][ T5554] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  928.390569][ T5566] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  928.736408][ T5582] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  928.742385][ T5582] IPVS: Unknown mcast interface: macsec0
[  928.832768][ T5595] SET target dimension over the limit!
[  928.859285][ T5597] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  928.950905][ T5603] netlink: 'syz.2.7544': attribute type 4 has an invalid length.
[  928.961863][ T5605] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  929.021814][ T5607] __nla_validate_parse: 4 callbacks suppressed
[  929.021826][ T5607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7545'.
[  929.164245][ T5612] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  929.241289][ T5614] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  929.370504][ T5620] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7550'.
[  929.832325][ T5647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7556'.
[  929.971905][ T5654] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7558'.
[  930.067309][ T5658] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7558'.
[  930.067355][ T5658] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7558'.
[  930.307208][ T5668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7560'.
[  930.330291][ T5674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7561'.
[  930.330309][ T5674] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7561'.
[  930.578718][ T5687] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  930.578718][ T5687] 
[  930.578830][ T5687] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  930.578830][ T5687] 
[  930.578925][ T5687] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  930.578925][ T5687] 
[  930.579024][ T5687] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  930.579024][ T5687] 
[  930.579418][ T5687] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  930.579418][ T5687] 
[  930.579627][ T5687] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  930.579627][ T5687] 
[  930.579781][ T5687] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  930.579781][ T5687] 
[  930.579905][ T5687] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  930.579905][ T5687] 
[  930.583542][ T5687] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  930.583542][ T5687] 
[  930.583658][ T5687] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  930.583658][ T5687] 
[  930.595639][ T5688] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7562'.
[  931.188655][ T5716] ip6t_rt: address list match requested but addrnr is 0
[  931.228011][ T5719] SET target dimension over the limit!
[  932.311992][ T5780] netlink: 'syz.1.7585': attribute type 9 has an invalid length.
[  933.001933][ T5817] can: request_module (can-proto-0) failed.
[  933.200137][ T5824] syzkaller1: entered promiscuous mode
[  933.200183][ T5824] syzkaller1: entered allmulticast mode
[  933.305456][ T5828] netlink: 'syz.1.7595': attribute type 21 has an invalid length.
[  933.426888][ T5837] SET target dimension over the limit!
[  933.583006][ T5830] net_ratelimit: 33 callbacks suppressed
[  933.583017][ T5830] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  933.788808][ T5842] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  933.810585][ T5843] syzkaller1: entered promiscuous mode
[  933.810598][ T5843] syzkaller1: entered allmulticast mode
[  934.040907][ T5863] __nla_validate_parse: 10 callbacks suppressed
[  934.040925][ T5863] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7599'.
[  934.410963][ T5866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7600'.
[  934.721418][ T5894] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  934.794947][ T5898] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  934.853586][ T5901] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20000
[  934.853626][ T5900] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20000
[  935.290962][ T5920] xt_CT: You must specify a L4 protocol and not use inversions on it
[  935.302079][ T5917] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  935.318769][ T5921] xt_CT: You must specify a L4 protocol and not use inversions on it
[  935.339513][ T5913] 8021q: VLANs not supported on sit0
[  935.485869][ T5933] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  935.781912][ T5949] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7614'.
[  935.882769][ T5955] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7617'.
[  935.976616][ T5964] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7620'.
[  936.160116][ T5955] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  936.174831][ T5973] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  936.294634][ T5981] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  936.294815][ T5981] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  936.297584][ T5981] xt_check_target_common: 1 callbacks suppressed
[  936.297593][ T5981] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  936.297604][ T5982] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  936.297657][ T5981] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  936.297711][ T5981] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  936.297763][ T5981] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  936.297845][ T5981] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  936.297902][ T5981] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  936.297954][ T5981] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  936.298006][ T5981] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  936.298059][ T5981] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  936.298112][ T5981] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[  936.298227][ T5982] tipc: Resetting bearer <eth:syzkaller0>
[  936.462266][ T5997] ip6t_rt: address list match requested but addrnr is 0
[  936.463329][ T5997] netlink: 2136 bytes leftover after parsing attributes in process `syz.2.7629'.
[  936.870016][ T6016] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7635'.
[  936.976783][ T6017] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7635'.
[  937.208492][ T6027] ip6t_rt: address list match requested but addrnr is 0
[  937.391872][ T6036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7641'.
[  937.403477][ T6036] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7641'.
[  937.627065][ T6058] macsec0: entered promiscuous mode
[  937.644473][ T6058] macsec0 (unregistering): left promiscuous mode
[  940.484886][ T6046] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  940.785105][ T6086] No such timeout policy "syz1"
[  940.792307][ T6086] net_ratelimit: 14 callbacks suppressed
[  940.792317][ T6086] ip_tables: iptables: counters copy to user failed while replacing table
[  940.820716][ T6086] Bluetooth: hci0: unsupported parameter 5161
[  940.820729][ T6086] Bluetooth: hci0: unsupported parameter 8192
[  940.820735][ T6086] Bluetooth: hci0: unsupported parameter 5161
[  940.820741][ T6086] Bluetooth: hci0: unsupported parameter 8192
[  941.522044][ T6077] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  941.825864][ T6111] __nla_validate_parse: 4 callbacks suppressed
[  941.825883][ T6111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7661'.
[  941.825928][ T6111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7661'.
[  941.915594][ T6116] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7662'.
[  941.966865][ T6109] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  941.995544][ T6120] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  941.995612][ T6120] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  941.996072][ T6120] tipc: Resetting bearer <eth:syzkaller0>
[  942.043325][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7657'.
[  942.055670][ T6102] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  942.085396][ T6124] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  942.485724][ T6135] netlink: 524 bytes leftover after parsing attributes in process `syz.2.7666'.
[  942.492602][ T6135] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  942.597264][ T6139] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  942.615301][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7669'.
[  943.006151][ T6150] tipc: Enabling of bearer <h:m> rejected, media not registered
[  943.072333][ T6149] syzkaller1: entered promiscuous mode
[  943.072354][ T6149] syzkaller1: entered allmulticast mode
[  943.247206][ T6156] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7671'.
[  943.437232][ T6168] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  943.534760][ T6171] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  943.949274][ T6178] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  944.150523][ T6182] syzkaller1: entered promiscuous mode
[  944.150545][ T6182] syzkaller1: entered allmulticast mode
[  944.214647][ T6185] ip6t_ah: unknown flags 4
[  944.460157][ T6196] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  944.516228][ T6198] x_tables: duplicate underflow at hook 1
[  944.521013][ T6198] netlink: 'syz.2.7681': attribute type 1 has an invalid length.
[  944.569205][ T6198] bond22: entered promiscuous mode
[  944.569601][ T6198] 8021q: adding VLAN 0 to HW filter on device bond22
[  944.573256][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7681'.
[  944.630005][ T6198] 8021q: adding VLAN 0 to HW filter on device bond22
[  944.630313][ T6198] bond22: (slave wireguard1): The slave device specified does not support setting the MAC address
[  944.630330][ T6198] bond22: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  944.673251][ T6198] bond22: (slave wireguard1): making interface the new active one
[  944.673276][ T6198] wireguard1: entered promiscuous mode
[  944.688036][ T6198] bond22: (slave wireguard1): Enslaving as an active interface with an up link
[  944.821296][ T6206] netlink: 260 bytes leftover after parsing attributes in process `syz.2.7682'.
[  945.541594][ T6224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7688'.
[  946.212161][ T6232] net_ratelimit: 4 callbacks suppressed
[  946.212184][ T6232] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  946.328856][ T6232] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check.
[  946.512232][ T6246] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  947.091563][ T6261] xt_socket: unknown flags 0x8
[  947.400352][ T6264] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  947.588139][ T6276] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  947.726941][ T6282] netlink: 'syz.2.7700': attribute type 4 has an invalid length.
[  947.728363][ T6282] __nla_validate_parse: 54 callbacks suppressed
[  947.728379][ T6282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7700'.
[  947.728392][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7700'.
[  947.728604][ T6282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7700'.
[  947.728617][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7700'.
[  947.731148][ T6282] netlink: 480 bytes leftover after parsing attributes in process `syz.2.7700'.
[  947.731200][ T6282] netlink: 480 bytes leftover after parsing attributes in process `syz.2.7700'.
[  947.754673][ T6278] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  947.853125][ T6286] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7702'.
[  947.932915][ T6290] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  947.958110][ T6287] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7702'.
[  947.980359][ T6293] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  948.310563][ T6302] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  948.333376][ T6302] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7706'.
[  948.333431][ T6302] netlink: 43 bytes leftover after parsing attributes in process `syz.2.7706'.
[  948.333445][ T6302] netlink: 'syz.2.7706': attribute type 6 has an invalid length.
[  948.333455][ T6302] netlink: 'syz.2.7706': attribute type 5 has an invalid length.
[  948.603406][ T6303] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  948.803908][ T6316] ip6t_ah: unknown flags 4
[  950.412295][ T6372] syzkaller1: entered promiscuous mode
[  950.412316][ T6372] syzkaller1: entered allmulticast mode
[  951.254794][ T6397] syzkaller1: entered promiscuous mode
[  951.254817][ T6397] syzkaller1: entered allmulticast mode
[  951.315902][ T6402] syzkaller1: left promiscuous mode
[  951.315923][ T6402] syzkaller1: left allmulticast mode
[  951.319472][ T6402] ip6t_rt: address list match requested but addrnr is 0
[  951.513499][ T6411] net_ratelimit: 8 callbacks suppressed
[  951.513518][ T6411] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  951.922014][ T6422] ip6t_ah: unknown flags 4
[  952.299906][ T6438] ip6t_ah: unknown flags 4
[  952.307678][ T6439] ip_tables: iptables: counters copy to user failed while replacing table
[  952.316890][ T6443] ip6t_ah: unknown flags 4
[  952.415959][ T6439] x_tables: duplicate underflow at hook 1
[  952.421983][ T6424] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  952.662299][ T6451] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  952.789337][ T6465] netlink: 'syz.2.7750': attribute type 1 has an invalid length.
[  952.836134][ T6465] 8021q: adding VLAN 0 to HW filter on device bond23
[  952.874385][ T6471] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  952.888259][ T6465] bond23: (slave macvlan0): making interface the new active one
[  952.897943][ T6465] bond23: (slave macvlan0): Enslaving as an active interface with an up link
[  952.981570][ T6474] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  953.047798][ T6476] __nla_validate_parse: 17 callbacks suppressed
[  953.047818][ T6476] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7755'.
[  953.116565][ T6476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7755'.
[  953.766734][ T6517] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  953.949651][ T6527] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  953.950396][ T6528] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  953.953338][ T6527] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  954.113554][ T6536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7767'.
[  954.202111][ T6539] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7768'.
[  954.281501][ T6543] macvtap0: entered promiscuous mode
[  954.460371][ T6549] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7770'.
[  954.460563][ T6548] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7770'.
[  954.826981][ T6567] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  954.930486][ T6572] SET target dimension over the limit!
[  955.441295][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7781'.
[  956.131996][ T6617] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7789'.
[  956.248129][ T6624] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7789'.
[  956.563120][ T6649] Bluetooth: hci0: unsupported parameter 5134
[  956.563141][ T6649] Bluetooth: hci0: unsupported parameter 8192
[  956.563152][ T6649] Bluetooth: hci0: unsupported parameter 5134
[  956.563163][ T6649] Bluetooth: hci0: unsupported parameter 8192
[  956.668260][ T6642] net_ratelimit: 38 callbacks suppressed
[  956.668279][ T6642] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  956.689111][ T6642] netlink: 'syz.2.7795': attribute type 1 has an invalid length.
[  956.693167][ T6653] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  956.711211][ T6655] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  956.831902][ T6661] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7799'.
[  957.089490][ T6670] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  957.306921][ T6675] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  957.346577][ T6675] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  957.346602][ T6675] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  957.347034][ T6675] tipc: Resetting bearer <eth:syzkaller0>
[  957.659842][ T6689] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  957.876555][ T6699] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  958.150318][ T6702] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  958.225689][ T6702] syzkaller1: entered promiscuous mode
[  958.225702][ T6702] syzkaller1: entered allmulticast mode
[  958.443188][ T6707] xt_check_target_common: 19 callbacks suppressed
[  958.443200][ T6707] x_tables: ip6_tables: SNPT target: only valid in mangle table, not le
[  958.885806][ T6723] __nla_validate_parse: 2 callbacks suppressed
[  958.885818][ T6723] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7815'.
[  958.888254][ T6719] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  958.891735][ T6723] netlink: 'syz.0.7815': attribute type 29 has an invalid length.
[  958.891745][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7815'.
[  958.892091][ T6723] netlink: 'syz.0.7815': attribute type 29 has an invalid length.
[  958.892099][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7815'.
[  958.925430][ T6714] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1005.136016][ T6775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7827'.
[ 1005.136060][ T6775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7827'.
[ 1005.359887][ T6787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7831'.
[ 1005.360842][ T6787] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7831'.
[ 1005.575624][ T6791] net_ratelimit: 5 callbacks suppressed
[ 1005.575645][ T6791] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1005.866851][ T6803] x_tables: duplicate underflow at hook 1
[ 1006.089204][ T6814] sctp: [Deprecated]: syz.2.7836 (pid 6814) Use of int in max_burst socket option.
[ 1006.089204][ T6814] Use struct sctp_assoc_value instead
[ 1006.389891][ T6807] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1006.399561][ T6822] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.7839'.
[ 1006.538116][ T6834] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1006.581284][ T6837] sctp: [Deprecated]: syz.1.7843 (pid 6837) Use of int in max_burst socket option.
[ 1006.581284][ T6837] Use struct sctp_assoc_value instead
[ 1006.692871][ T6841] netlink: Failed to add  helper -22
[ 1006.692906][ T6841] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1006.737038][ T6824] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1006.753456][ T6846] syzkaller0: entered promiscuous mode
[ 1006.753478][ T6846] syzkaller0: entered allmulticast mode
[ 1006.902471][ T6852] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1007.152497][ T6873] netlink: 'syz.1.7853': attribute type 1 has an invalid length.
[ 1007.176519][ T6875] netlink: 'syz.1.7853': attribute type 1 has an invalid length.
[ 1007.179259][ T6872] gretap2: entered allmulticast mode
[ 1008.143279][ T6891] syzkaller1: entered promiscuous mode
[ 1008.143302][ T6891] syzkaller1: entered allmulticast mode
[ 1008.488423][ T6895] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1008.492940][ T6895] xt_nat: multiple ranges no longer supported
[ 1008.978732][ T6900] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1009.024243][ T6904] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1009.161780][ T6909] lo: left promiscuous mode
[ 1009.162211][ T6909] tunl0: left promiscuous mode
[ 1009.163078][ T6909] gre0: left promiscuous mode
[ 1009.186780][ T6909] gretap0: left promiscuous mode
[ 1009.191017][ T6909] bridge3: port 1(erspan0) entered blocking state
[ 1009.191153][ T6909] bridge3: port 1(erspan0) entered forwarding state
[ 1009.192639][ T6909] ip6_vti0: left promiscuous mode
[ 1009.203299][ T6909] sit0: left promiscuous mode
[ 1009.264779][ T6909] ip6tnl0: left promiscuous mode
[ 1009.269515][ T6909] ip6gre0: left promiscuous mode
[ 1009.288450][ T6909] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1009.290103][ T6909] 8021q: adding VLAN 0 to HW filter on device team0
[ 1009.290875][ T6909] dummy0: left promiscuous mode
[ 1009.297667][ T6909] team_slave_1: left promiscuous mode
[ 1009.299515][ T6909] hsr0: left promiscuous mode
[ 1009.300452][ T6909] 8021q: adding VLAN 0 to HW filter on device hsr0
[ 1009.302459][ T6909] macvlan0: left promiscuous mode
[ 1009.310973][ T6909] macvtap0: left promiscuous mode
[ 1009.326214][ T6910] xt_IDLETIMER: label is empty or not nul-terminated
[ 1009.328923][ T6909] macsec1: left promiscuous mode
[ 1009.351732][ T6909] geneve2: left promiscuous mode
[ 1009.352453][ T6909] syzkaller0: left promiscuous mode
[ 1009.383110][ T6908] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7862'.
[ 1009.389168][ T6909] gre2: left promiscuous mode
[ 1009.391148][ T6909] veth0_to_team: entered promiscuous mode
[ 1009.398772][ T6909] macvlan5: left promiscuous mode
[ 1009.399253][ T6909] macsec3: left promiscuous mode
[ 1009.407770][ T6909] bond2: left promiscuous mode
[ 1009.407785][ T6909] ip6gre1: left promiscuous mode
[ 1009.417314][ T6909] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1009.418871][ T6909] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1009.419450][ T6909] bond7: left promiscuous mode
[ 1009.419461][ T6909] xfrm1: left promiscuous mode
[ 1009.476013][ T6909] bridge0: port 1(batadv1) entered blocking state
[ 1009.476126][ T6909] bridge0: port 1(batadv1) entered forwarding state
[ 1009.476386][ T6909] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 1009.478096][ T6909] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1009.502919][ T6909] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1009.581002][ T6909] 8021q: adding VLAN 0 to HW filter on device bond11
[ 1009.591490][ T6909] 8021q: adding VLAN 0 to HW filter on device bond14
[ 1009.592644][ T6909] bridge0: port 3(vlan0) entered blocking state
[ 1009.592760][ T6909] bridge0: port 3(vlan0) entered forwarding state
[ 1009.604635][ T6909] 8021q: adding VLAN 0 to HW filter on device bond15
[ 1009.608054][ T6909] 8021q: adding VLAN 0 to HW filter on device bond16
[ 1009.613608][ T6909] 8021q: adding VLAN 0 to HW filter on device bond17
[ 1009.635052][T11935] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1009.635159][T11935] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1009.814497][T15717] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1009.871153][T26502] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[ 1009.898697][ T6939] ip6t_rt: address list match requested but addrnr is 0
[ 1009.900118][ T6939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7865'.
[ 1009.911392][ T6935] syzkaller0: left allmulticast mode
[ 1010.029569][ T6948] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7866'.
[ 1010.037023][T26502] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[ 1010.382341][T15716] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[ 1010.518824][ T6971] lo speed is unknown, defaulting to 1000
[ 1010.674110][ T6972] lo speed is unknown, defaulting to 1000
[ 1010.753493][ T6966] net_ratelimit: 3 callbacks suppressed
[ 1010.753507][ T6966] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1010.961733][ T6982] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1010.962456][ T6982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7875'.
[ 1010.985710][ T6986] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1010.987042][ T6986] netlink: 'syz.1.7876': attribute type 11 has an invalid length.
[ 1011.059368][ T6988] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1011.087543][ T6992] ipvlan0: entered promiscuous mode
[ 1011.087713][ T6992] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1011.087725][ T6992] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[ 1011.087807][ T6992] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[ 1011.114464][ T6989] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7877'.
[ 1011.183597][ T6996] bond0: Error: Cannot enslave bond to itself.
[ 1011.320510][ T7006] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1011.416607][ T7711] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[ 1011.416795][ T7711] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[ 1011.762878][ T7025] syzkaller1: entered promiscuous mode
[ 1011.762905][ T7025] syzkaller1: entered allmulticast mode
[ 1011.864117][T26502] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[ 1012.253377][ T7038] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1012.259958][ T7042] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1012.272669][ T7042] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7884'.
[ 1012.731286][ T7052] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1012.810246][ T7054] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7888'.
[ 1012.898771][ T7058] lo speed is unknown, defaulting to 1000
[ 1013.212586][ T7061] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1013.401377][ T7072] netlink: 'syz.0.7892': attribute type 30 has an invalid length.
[ 1013.426804][ T7072] bond22: option arp_missed_max: invalid value (0)
[ 1013.426821][ T7072] bond22: option arp_missed_max: allowed values 1 - 255
[ 1013.428138][ T7072] bond22 (unregistering): Released all slaves
[ 1013.435969][ T7059] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1013.500392][ T7075] ipvlan0: entered promiscuous mode
[ 1013.500508][ T7075] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1013.500523][ T7075] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[ 1013.500616][ T7075] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[ 1013.508821][ T7072] netlink: 'syz.0.7892': attribute type 30 has an invalid length.
[ 1013.674971][ T7072] bond22: option arp_missed_max: invalid value (0)
[ 1013.674997][ T7072] bond22: option arp_missed_max: allowed values 1 - 255
[ 1013.681575][ T7072] bond22 (unregistering): Released all slaves
[ 1013.821149][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1013.823351][ T7077] ipvlan0: entered promiscuous mode
[ 1013.823492][ T7077] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1013.823508][ T7077] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[ 1013.823608][ T7077] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[ 1014.373394][ T7092] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[ 1014.373459][ T7092] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[ 1014.378081][ T7092] tipc: Resetting bearer <eth:syzkaller0>
[ 1014.544875][ T7099] pimreg: entered allmulticast mode
[ 1014.560917][ T7099] xt_l2tp: v2 tid > 0xffff: 4294901760
[ 1014.567314][ T7098] pimreg: left allmulticast mode
[ 1014.727624][ T7103] tipc: Resetting bearer <eth:syzkaller0>
[ 1014.800620][ T7106] netlink: 'syz.0.7900': attribute type 1 has an invalid length.
[ 1014.839316][ T7106] bond22: entered promiscuous mode
[ 1014.839633][ T7106] 8021q: adding VLAN 0 to HW filter on device bond22
[ 1014.947131][ T7119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7903'.
[ 1015.264207][    C1] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[ 1016.149759][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7909'.
[ 1016.150107][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7909'.
[ 1016.150296][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7909'.
[ 1016.150473][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7909'.
[ 1016.150728][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7909'.
[ 1016.152494][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7909'.
[ 1016.152799][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7909'.
[ 1016.152967][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7909'.
[ 1016.153117][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7909'.
[ 1016.153265][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7909'.
[ 1016.186926][ T7163] net_ratelimit: 6 callbacks suppressed
[ 1016.186946][ T7163] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1016.260869][ T7159] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1016.260981][ T7160] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1016.486359][ T7175] ip6t_rt: address list match requested but addrnr is 0
[ 1016.488479][ T7175] ip6t_rt: address list match requested but addrnr is 0
[ 1016.570434][ T7182] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1016.748989][ T7193] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1016.928544][ T7180] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1017.087765][ T7208] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1017.387086][ T7222] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1017.491786][ T7214] bridge0: entered allmulticast mode
[ 1017.517319][ T7214] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1017.615578][ T7219] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1018.287437][ T7248] netlink: 'syz.2.7933': attribute type 83 has an invalid length.
[ 1019.267919][ T7302] lo speed is unknown, defaulting to 1000
[ 1020.216530][T26504] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[ 1020.252882][ T7342] x_tables: ip6_tables: DNPT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT
[ 1020.607808][ T7357] x_tables: duplicate underflow at hook 1
[ 1020.735006][T26504] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[ 1020.770082][ T7361] syzkaller1: entered promiscuous mode
[ 1020.770107][ T7361] syzkaller1: entered allmulticast mode
[ 1021.187378][ T7375] xt_l2tp: unknown flags: e7
[ 1021.200300][ T7377] net_ratelimit: 13 callbacks suppressed
[ 1021.200318][ T7377] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1021.227471][ T7379] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1021.515474][ T7390] __nla_validate_parse: 94 callbacks suppressed
[ 1021.515488][ T7390] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7971'.
[ 1021.515507][ T7390] openvswitch: netlink: Missing key (keys=c0, expected=100)
[ 1021.598885][ T7391] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7970'.
[ 1021.715268][ T7396] SET target dimension over the limit!
[ 1021.831850][ T7399] ip6t_ah: unknown flags 4
[ 1021.975205][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1022.062918][ T7405] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[ 1022.062937][ T7405] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[ 1022.063338][ T7405] tipc: Resetting bearer <eth:syzkaller0>
[ 1022.203943][ T7400] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1022.723551][ T7449] x_tables: duplicate underflow at hook 1
[ 1022.868159][ T7414] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1023.207788][ T7472] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1023.210537][ T7472] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7986'.
[ 1023.255351][    C1] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[ 1023.785895][ T7500] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7995'.
[ 1023.999425][ T7511] netlink: 172 bytes leftover after parsing attributes in process `syz.1.7998'.
[ 1024.002262][ T7511] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7998'.
[ 1024.002936][ T7511] netlink: 45 bytes leftover after parsing attributes in process `syz.1.7998'.
[ 1024.023211][ T7511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7998'.
[ 1024.218595][ T7518] netlink: 7 bytes leftover after parsing attributes in process `syz.2.8001'.
[ 1024.275844][ T7522] lo speed is unknown, defaulting to 1000
[ 1024.300332][ T7524] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1024.588108][ T7537] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1024.706751][ T7541] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1024.892825][ T7547] netlink: zone id is out of range
[ 1025.362657][ T7581] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8011'.
[ 1026.107076][ T7575] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1026.107393][ T7580] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1026.234678][ T7588] net_ratelimit: 4 callbacks suppressed
[ 1026.234792][ T7588] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1026.708015][ T7616] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1026.899291][ T7629] __nla_validate_parse: 1 callbacks suppressed
[ 1026.899305][ T7629] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8022'.
[ 1026.979802][ T7632] SET target dimension over the limit!
[ 1027.212590][ T7635] x_tables: duplicate underflow at hook 1
[ 1027.242259][ T7624] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1027.375238][ T7646] bond23: (slave macvlan0): Releasing active interface
[ 1027.439845][ T7646] tipc: Resetting bearer <eth:ipvlan1>
[ 1027.503591][ T7646] tipc: Disabling bearer <eth:ipvlan1>
[ 1027.525982][ T7659] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[ 1027.532651][ T7660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8029'.
[ 1027.649568][ T7660] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1027.844380][ T7674] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8033'.
[ 1027.861934][ T7675] ip_tables: iptables: counters copy to user failed while replacing table
[ 1027.986188][ T7665] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1028.145735][ T7684] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1028.148539][ T7682] syzkaller0: entered promiscuous mode
[ 1028.148559][ T7682] syzkaller0: entered allmulticast mode
[ 1028.229130][ T7684] netlink: 'syz.0.8034': attribute type 2 has an invalid length.
[ 1028.268824][ T7688] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8036'.
[ 1028.273014][ T7688] IPVS: set_ctl: invalid protocol: 29 100.1.1.2:20003
[ 1028.283326][ T7690] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1028.291943][ T7694] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8036'.
[ 1028.296768][ T7688] IPVS: set_ctl: invalid protocol: 29 100.1.1.2:20003
[ 1028.396269][ T7702] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1028.642240][ T7699] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1028.728439][ T7710] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8041'.
[ 1030.354649][ T7767] netlink: 766 bytes leftover after parsing attributes in process `syz.1.8055'.
[ 1030.507736][ T7778] netlink: 164 bytes leftover after parsing attributes in process `syz.1.8057'.
[ 1030.622014][ T7766] netlink: 7 bytes leftover after parsing attributes in process `syz.0.8056'.
[ 1030.953038][ T7785] xt_TCPMSS: Only works on TCP SYN packets
[ 1031.265363][ T7806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8066'.
[ 1031.278996][ T7805] netlink: 'syz.0.8066': attribute type 11 has an invalid length.
[ 1031.400056][ T7814] netlink: 'syz.1.8067': attribute type 9 has an invalid length.
[ 1031.515871][ T7816] net_ratelimit: 11 callbacks suppressed
[ 1031.515887][ T7816] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1031.657364][ T7823] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1031.703021][ T7816] netlink: 'syz.1.8068': attribute type 49 has an invalid length.
[ 1031.738077][ T7828] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1031.935762][ T7837] bridge3: port 1(erspan0) entered disabled state
[ 1031.958294][ T7837] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1031.974865][ T7838] netlink: 'syz.1.8073': attribute type 16 has an invalid length.
[ 1031.974885][ T7838] netlink: 'syz.1.8073': attribute type 17 has an invalid length.
[ 1032.033796][ T7837] tipc: Resetting bearer <eth:syzkaller0>
[ 1032.034070][ T7837] tipc: Resetting bearer <eth:syzkaller0>
[ 1032.082395][ T7840] __nla_validate_parse: 3 callbacks suppressed
[ 1032.082414][ T7840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8073'.
[ 1032.139961][ T7837] bridge0: port 1(batadv1) entered disabled state
[ 1032.151705][ T7841] netlink: 'syz.1.8073': attribute type 1 has an invalid length.
[ 1032.237439][ T7837] bridge0: port 3(vlan0) entered disabled state
[ 1032.275558][ T7838] bridge3: port 1(erspan0) entered blocking state
[ 1032.275724][ T7838] bridge3: port 1(erspan0) entered forwarding state
[ 1032.297844][ T7838] team0: left allmulticast mode
[ 1032.297867][ T7838] team_slave_0: left allmulticast mode
[ 1032.297883][ T7838] team_slave_1: left allmulticast mode
[ 1032.326870][ T7838] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1032.326972][ T7838] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1032.328942][ T7838] veth0_to_bond: left allmulticast mode
[ 1032.401296][ T7838] macsec2: left allmulticast mode
[ 1032.401319][ T7838] ip6gretap0: left allmulticast mode
[ 1032.412329][ T7838] syzkaller0: left promiscuous mode
[ 1032.412350][ T7838] syzkaller0: left allmulticast mode
[ 1032.412771][ T7838] tipc: Resetting bearer <eth:syzkaller0>
[ 1032.441879][ T7838] veth5: left allmulticast mode
[ 1032.447124][ T7838] vlan3: left allmulticast mode
[ 1032.447142][ T7838] bridge3: left allmulticast mode
[ 1032.452071][ T7838] sit1: left allmulticast mode
[ 1032.465420][ T7838] veth7: left allmulticast mode
[ 1032.472343][ T7838] macvlan5: left allmulticast mode
[ 1032.472363][ T7838] geneve1: left allmulticast mode
[ 1032.505474][ T7838] veth9: left allmulticast mode
[ 1032.530840][ T7838] veth14: left allmulticast mode
[ 1032.596046][ T7838] bridge0: port 1(batadv1) entered blocking state
[ 1032.596146][ T7838] bridge0: port 1(batadv1) entered forwarding state
[ 1032.716765][ T7846] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1032.765202][ T7838] ip6erspan1: left allmulticast mode
[ 1032.767527][ T7838] bridge0: port 3(vlan0) entered blocking state
[ 1032.767586][ T7838] bridge0: port 3(vlan0) entered forwarding state
[ 1032.771890][ T7838] gretap2: left allmulticast mode
[ 1032.804372][T26502] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[ 1032.996372][ T7843] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1033.014232][ T5593] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1033.099119][ T7865] lo speed is unknown, defaulting to 1000
[ 1033.354533][T26504] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[ 1033.424144][ T7871] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1033.530127][ T7886] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1033.542128][ T7886] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0
[ 1033.542425][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8085'.
[ 1033.605163][ T7865] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1033.983426][ T7905] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1034.019260][ T7905] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8089'.
[ 1034.019289][ T7905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8089'.
[ 1034.065831][ T7895] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1034.904434][ T7949] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8094'.
[ 1036.432472][ T8024] netlink: 'syz.0.8109': attribute type 1 has an invalid length.
[ 1036.448302][ T8024] 8021q: adding VLAN 0 to HW filter on device bond23
[ 1036.458872][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8109'.
[ 1036.463481][ T8024] smc: adding net device vlan1 with user defined pnetid SYZ2
[ 1036.529346][ T8012] net_ratelimit: 8 callbacks suppressed
[ 1036.529360][ T8012] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1036.560434][ T8031] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8112'.
[ 1036.606242][ T8035] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8111'.
[ 1036.652161][ T8035] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1036.663548][ T8035] tipc: Resetting bearer <eth:syzkaller0>
[ 1036.941475][ T8056] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8116'.
[ 1036.962470][ T8058] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8116'.
[ 1037.041714][ T8059] ip_tables: iptables: counters copy to user failed while replacing table
[ 1037.080368][ T8063] netlink: 'syz.2.8117': attribute type 1 has an invalid length.
[ 1037.101700][ T8044] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1037.103307][ T8044] __nla_validate_parse: 32 callbacks suppressed
[ 1037.103316][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8115'.
[ 1037.336652][ T8078] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1037.345297][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1037.519674][ T8087] SET target dimension over the limit!
[ 1037.520153][ T8088] SET target dimension over the limit!
[ 1037.890003][ T8121] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1037.921497][ T8118] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1038.822565][ T8137] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1038.938142][ T8141] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1039.037228][ T8150] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8136'.
[ 1039.039833][ T8150] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8136'.
[ 1039.068762][ T8147] atomic_op ffff8881bde441e0 conn xmit_atomic 0000000000000000
[ 1039.255433][    C1] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[ 1039.301315][ T8163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8138'.
[ 1039.308995][ T8163] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8138'.
[ 1039.309075][ T8163] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[ 1039.310027][ T8163] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8138'.
[ 1039.362261][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8138'.
[ 1039.492200][ T8157] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1039.492453][ T8147] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1040.398422][ T8194] ip6t_ah: unknown flags 4
[ 1040.433108][ T8179] mac80211_hwsim hwsim8 wlan0: left promiscuous mode
[ 1040.510517][ T8199] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[ 1040.510517][ T8199] 
[ 1040.510617][ T8199] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[ 1040.510617][ T8199] 
[ 1040.510792][ T8199] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[ 1040.510792][ T8199] 
[ 1040.510879][ T8199] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[ 1040.510879][ T8199] 
[ 1040.751502][ T8207] x_tables: unsorted entry at hook 2
[ 1040.752144][ T8207] netlink: 'syz.1.8149': attribute type 12 has an invalid length.
[ 1041.157843][ T8232] x_tables: duplicate underflow at hook 1
[ 1041.252047][ T8237] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode
[ 1041.252076][ T8237] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode
[ 1041.636732][ T8257] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[ 1041.652306][ T8256] netlink: 292 bytes leftover after parsing attributes in process `syz.0.8164'.
[ 1041.733842][ T8263] net_ratelimit: 33 callbacks suppressed
[ 1041.733868][ T8263] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1041.734230][ T8263] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1041.734497][ T8263] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1041.734902][ T8263] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1041.735217][ T8263] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1041.735471][ T8263] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1041.735816][ T8263] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1041.736093][ T8263] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1041.736339][ T8263] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1041.736583][ T8263] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1042.038887][ T8273] netlink: 'syz.2.8167': attribute type 2 has an invalid length.
[ 1042.713591][ T8300] atomic_op ffff88819ba589e0 conn xmit_atomic 0000000000000000
[ 1042.830109][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8175'.
[ 1043.793006][ T8320] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[ 1044.074318][ T8334] sit0: entered promiscuous mode
[ 1044.092414][ T8334] netlink: 'syz.2.8181': attribute type 1 has an invalid length.
[ 1044.092431][ T8334] netlink: 1 bytes leftover after parsing attributes in process `syz.2.8181'.
[ 1044.167027][ T8342] x_tables: duplicate underflow at hook 1
[ 1044.218414][ T8343] netlink: 'syz.1.8183': attribute type 21 has an invalid length.
[ 1044.223610][ T8344] netlink: 'syz.1.8183': attribute type 21 has an invalid length.
[ 1044.670558][ T8355] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode
[ 1044.670648][ T8355] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode
[ 1044.740585][ T8361] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1044.838982][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8192'.
[ 1044.839101][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8192'.
[ 1044.871940][ T8365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8192'.
[ 1044.872562][ T8364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8192'.
[ 1045.274135][ T8382] netlink: 192 bytes leftover after parsing attributes in process `syz.2.8197'.
[ 1045.274234][ T8382] netlink: 'syz.2.8197': attribute type 1 has an invalid length.
[ 1045.634754][ T8401] syzkaller0: entered promiscuous mode
[ 1045.634769][ T8401] syzkaller0: entered allmulticast mode
[ 1045.946943][ T8415] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8206'.
[ 1045.949992][ T8415] lo: entered promiscuous mode
[ 1045.961066][ T8415] tunl0: entered promiscuous mode
[ 1045.977448][ T8415] gre0: entered promiscuous mode
[ 1045.981742][ T8415] gretap0: entered promiscuous mode
[ 1046.007079][ T8415] erspan0: entered promiscuous mode
[ 1046.012182][ T8415] ip_vti0: entered promiscuous mode
[ 1046.026509][ T8415] v: entered promiscuous mode
[ 1046.033481][ T8415] sit0: entered promiscuous mode
[ 1046.084385][ T8415] ip6tnl0: entered promiscuous mode
[ 1046.089133][ T8415] ip6gre0: entered promiscuous mode
[ 1046.107356][ T8415] ip6gretap0: entered promiscuous mode
[ 1046.110378][ T8415] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1046.110665][ T8415] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1046.111092][ T8415] bridge0: entered promiscuous mode
[ 1046.115385][ T8415] vcan0: entered promiscuous mode
[ 1046.140585][ T8415] bond0: entered promiscuous mode
[ 1046.140601][ T8415] bond_slave_0: entered promiscuous mode
[ 1046.140700][ T8415] netdevsim netdevsim0 netdevsim1: entered promiscuous mode
[ 1046.145367][ T8415] dummy0: entered promiscuous mode
[ 1046.154550][ T8415] nlmon0: entered promiscuous mode
[ 1046.171605][ T8415] batadv0: entered promiscuous mode
[ 1046.194960][ T8415] vxcan0: entered promiscuous mode
[ 1046.203338][ T8415] vxcan1: entered promiscuous mode
[ 1046.208524][ T8415] veth0: entered promiscuous mode
[ 1046.213121][ T8415] veth1: entered promiscuous mode
[ 1046.222288][ T8415] wg0: entered promiscuous mode
[ 1046.229531][ T8415] wg2: entered promiscuous mode
[ 1046.236415][ T8415] veth0_to_bridge: entered promiscuous mode
[ 1046.256212][ T8415] veth1_to_bridge: entered promiscuous mode
[ 1046.270384][ T8415] veth0_to_bond: entered promiscuous mode
[ 1046.284984][ T8415] veth0_to_team: entered promiscuous mode
[ 1046.291826][ T8415] team_slave_0: entered promiscuous mode
[ 1046.302590][ T8415] veth1_to_team: entered promiscuous mode
[ 1046.311631][ T8415] team_slave_1: entered promiscuous mode
[ 1046.320041][ T8415] veth0_to_batadv: entered promiscuous mode
[ 1046.327578][ T8415] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1046.328310][ T8415] batadv_slave_0: entered promiscuous mode
[ 1046.337624][ T8415] veth1_to_batadv: entered promiscuous mode
[ 1046.345116][ T8415] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1046.346886][ T8415] batadv_slave_1: entered promiscuous mode
[ 1046.356787][ T8415] xfrm0: entered promiscuous mode
[ 1046.366950][ T8415] veth0_to_hsr: entered promiscuous mode
[ 1046.382768][ T8415] tipc: Resetting bearer <eth:hsr0>
[ 1046.383110][ T8415] tipc: Resetting bearer <eth:hsr0>
[ 1046.383176][ T8415] hsr0: entered promiscuous mode
[ 1046.398750][ T8415] veth1_virt_wifi: entered promiscuous mode
[ 1046.408946][ T8415] veth0_virt_wifi: entered promiscuous mode
[ 1046.422638][ T8415] virt_wifi0: entered promiscuous mode
[ 1046.434646][ T8415] geneve0: entered promiscuous mode
[ 1046.440712][ T8415] geneve1: entered promiscuous mode
[ 1046.459494][ T8415] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[ 1046.470347][ T8415] netdevsim netdevsim0 netdevsim2: entered promiscuous mode
[ 1046.482742][ T8415] netdevsim netdevsim0 netdevsim3: entered promiscuous mode
[ 1046.496372][ T8415] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[ 1046.496504][ T8415] bond1: entered promiscuous mode
[ 1046.496589][ T8415] bridge1: entered promiscuous mode
[ 1046.496754][ T8415] veth2: entered promiscuous mode
[ 1046.496847][ T8415] veth3: entered promiscuous mode
[ 1046.497016][ T8415] vxlan0: entered promiscuous mode
[ 1046.497120][ T8415] wireguard0: entered promiscuous mode
[ 1046.497210][ T8415] ip6gre1: entered promiscuous mode
[ 1046.497283][ T8415] vti0: entered promiscuous mode
[ 1046.497370][ T8415] vti60: entered promiscuous mode
[ 1046.497437][ T8415] tun0: entered promiscuous mode
[ 1046.497847][ T8415] ip6tnl1: entered promiscuous mode
[ 1046.497923][ T8415] ip6tnl2: entered promiscuous mode
[ 1046.497995][ T8415] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[ 1046.498123][ T8415] mac80211_hwsim hwsim11 nicvf0: entered promiscuous mode
[ 1046.498214][ T8415] bridge2: entered promiscuous mode
[ 1046.498290][ T8415] bond2: entered promiscuous mode
[ 1046.498363][ T8415] xfrm1: entered promiscuous mode
[ 1046.498462][ T8415] ip6tnl3: entered promiscuous mode
[ 1046.498529][ T8415] ip6tnl4: entered promiscuous mode
[ 1046.498595][ T8415] bridge3: entered promiscuous mode
[ 1046.546257][ T8415] bond3: entered promiscuous mode
[ 1046.546274][ T8415] batadv1: entered promiscuous mode
[ 1046.546460][ T8415] veth4: entered promiscuous mode
[ 1046.546531][ T8415] veth5: entered promiscuous mode
[ 1046.546725][ T8415] ip6gre2: entered promiscuous mode
[ 1046.546786][ T8415] ip6tnl5: entered promiscuous mode
[ 1046.546843][ T8415] ip6erspan0: entered promiscuous mode
[ 1046.546902][ T8415] bond4: entered promiscuous mode
[ 1046.546958][ T8415] bond5: entered promiscuous mode
[ 1046.547103][ T8415] bridge4: entered promiscuous mode
[ 1046.548830][ T8415] bridge5: entered promiscuous mode
[ 1046.548894][ T8415] bridge6: entered promiscuous mode
[ 1046.548956][ T8415] : entered promiscuous mode
[ 1046.549016][ T8415] ip6tnl6: entered promiscuous mode
[ 1046.549102][ T8415] bond6: entered promiscuous mode
[ 1046.549171][ T8415] veth6: entered promiscuous mode
[ 1046.549457][ T8415] veth7: entered promiscuous mode
[ 1046.552368][ T8415] bond7: entered promiscuous mode
[ 1046.601825][ T8415] veth8: entered promiscuous mode
[ 1046.601926][ T8415] veth9: entered promiscuous mode
[ 1046.602032][ T8415] gre1: entered promiscuous mode
[ 1046.623560][ T8415] bond10: entered promiscuous mode
[ 1046.623647][ T8415] veth10: entered promiscuous mode
[ 1046.623834][ T8415] veth11: entered promiscuous mode
[ 1046.623903][ T8415] bond11: entered promiscuous mode
[ 1046.632271][ T8415] bond12: entered promiscuous mode
[ 1046.632343][ T8415] veth12: entered promiscuous mode
[ 1046.632420][ T8415] veth13: entered promiscuous mode
[ 1046.632487][ T8415] bond13: entered promiscuous mode
[ 1046.641838][ T8415] bond15: entered promiscuous mode
[ 1046.642264][ T8415] pim6reg1: entered promiscuous mode
[ 1046.646454][ T8415] gre2: entered promiscuous mode
[ 1046.650149][ T8415] bond16: entered promiscuous mode
[ 1046.653225][ T8415] bridge9: entered promiscuous mode
[ 1046.659028][ T8415] bond18: entered promiscuous mode
[ 1046.659077][ T8415] bond19: entered promiscuous mode
[ 1046.666509][ T8415] bridge10: entered promiscuous mode
[ 1046.670482][ T8415] syztnl0: entered promiscuous mode
[ 1046.670583][ T8415] ip6tnl7: entered promiscuous mode
[ 1046.677535][ T8415] gre3: entered promiscuous mode
[ 1046.677652][ T8415] sit1: entered promiscuous mode
[ 1046.704349][ T8415] erspan1: entered promiscuous mode
[ 1046.764830][ T8415] vti61: entered promiscuous mode
[ 1046.764926][ T8415] geneve2: entered promiscuous mode
[ 1046.765150][ T8415] veth14: entered promiscuous mode
[ 1046.765222][ T8415] veth15: entered promiscuous mode
[ 1046.765292][ T8415] bridge11: entered promiscuous mode
[ 1046.765547][ T8415] macvtap0: entered promiscuous mode
[ 1046.770953][ T8415] vlan0: entered promiscuous mode
[ 1046.775299][ T8415] veth16: entered promiscuous mode
[ 1046.775385][ T8415] veth17: entered promiscuous mode
[ 1046.797552][ T8415] sit2: entered promiscuous mode
[ 1046.816548][ T8415] vlan4: entered promiscuous mode
[ 1046.818365][ T8415] bond23: entered promiscuous mode
[ 1046.869064][ T8415] vlan1: entered promiscuous mode
[ 1046.869266][T26504] lo speed is unknown, defaulting to 1000
[ 1046.869302][T26504] syz0: Port: 1 Link DOWN
[ 1046.874113][T26508] lo speed is unknown, defaulting to 1000
[ 1046.884105][T15716] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1046.884132][T15716] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1046.884148][T15716] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1047.109589][ T8437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8211'.
[ 1047.234153][ T8429] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode
[ 1047.234187][ T8429] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode
[ 1047.268589][ T8443] net_ratelimit: 34 callbacks suppressed
[ 1047.268618][ T8443] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1047.387432][ T8446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8213'.
[ 1047.389570][ T8446] ip6t_rt: address list match requested but addrnr is 0
[ 1047.401134][ T8446] ip6t_rt: address list match requested but addrnr is 0
[ 1047.452175][ T8450] SET target dimension over the limit!
[ 1047.488891][ T8452] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1047.508362][ T8452] netlink: 'syz.2.8215': attribute type 2 has an invalid length.
[ 1047.661722][ T8460] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1047.661898][ T8460] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1047.662078][ T8460] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1047.662227][ T8460] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1047.662387][ T8460] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1047.662572][ T8460] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1047.662780][ T8460] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1047.690537][ T8460] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1047.882311][ T8471] syzkaller1: entered promiscuous mode
[ 1047.882327][ T8471] syzkaller1: entered allmulticast mode
[ 1048.138192][ T8490] __nla_validate_parse: 2 callbacks suppressed
[ 1048.138206][ T8490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8224'.
[ 1048.165321][ T8490] bond24: entered promiscuous mode
[ 1048.165338][ T8490] bond24: entered allmulticast mode
[ 1048.250108][ T8493] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8223'.
[ 1048.250389][ T8492] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8223'.
[ 1048.252926][ T8492] bridge0: port 4(veth0) entered blocking state
[ 1048.252999][ T8492] bridge0: port 4(veth0) entered disabled state
[ 1048.253156][ T8492] veth0: entered allmulticast mode
[ 1048.272963][ T8484] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[ 1048.272963][ T8484] 
[ 1048.283156][ T8492] veth0: entered promiscuous mode
[ 1048.288393][ T8492] bridge0: port 4(veth0) entered blocking state
[ 1048.288467][ T8492] bridge0: port 4(veth0) entered forwarding state
[ 1048.332364][ T8495] ip6t_ah: unknown flags 4
[ 1048.542131][ T8506] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8227'.
[ 1048.542889][ T8506] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 1048.559974][ T8513] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 1048.597911][ T8516] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8229'.
[ 1048.622162][ T8518] IPVS: set_ctl: invalid protocol: 58 100.1.1.2:20003
[ 1048.679958][ T8524] netlink: 3 bytes leftover after parsing attributes in process `syz.0.8231'.
[ 1048.931901][ T8534] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8235'.
[ 1049.347286][ T8558] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8242'.
[ 1049.415263][ T8554] lo speed is unknown, defaulting to 1000
[ 1049.985233][ T8583] tun0: tun_chr_ioctl cmd 1074025675
[ 1049.985247][ T8583] tun0: persist enabled
[ 1049.986438][ T8583] tun0: tun_chr_ioctl cmd 1074025678
[ 1049.986505][ T8583] tun0: group set to 0
[ 1050.206618][ T8585] netlink: 'syz.0.8249': attribute type 1 has an invalid length.
[ 1050.207372][ T8585] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8249'.
[ 1050.207388][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8249'.
[ 1050.664214][ T8599] gre0: entered promiscuous mode
[ 1050.664229][ T8599] gre0: entered allmulticast mode
[ 1051.089762][T14997] block nbd0: Receive control failed (result -107)
[ 1051.120395][ T8624] ip6t_ah: unknown flags 4
[ 1051.245171][ T8628] syzkaller1: entered promiscuous mode
[ 1051.245192][ T8628] syzkaller1: entered allmulticast mode
[ 1051.647589][ T8642] lo speed is unknown, defaulting to 1000
[ 1051.887326][ T8641] lo speed is unknown, defaulting to 1000
[ 1052.394995][ T8669] netlink: 'syz.2.8271': attribute type 1 has an invalid length.
[ 1052.417364][ T8672] net_ratelimit: 30 callbacks suppressed
[ 1052.417414][ T8672] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1052.844270][ T8690] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1052.925260][ T8679] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1053.043108][ T8677] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1053.380503][ T8706] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1053.382563][ T8708] ip6t_ah: unknown flags 4
[ 1053.622384][ T8723] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1053.790332][ T8745] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1054.618480][ T8784] __nla_validate_parse: 6 callbacks suppressed
[ 1054.618492][ T8784] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8296'.
[ 1054.666042][ T8785] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode
[ 1054.666413][ T8785] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode
[ 1054.745656][ T8789] ip6t_rt: address list match requested but addrnr is 0
[ 1055.050919][ T8781] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1055.532516][ T8824] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1055.538332][ T8824] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8307'.
[ 1055.539699][ T8824] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8307'.
[ 1055.634522][ T8830] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8306'.
[ 1056.074790][ T8854] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1056.623997][ T8857] IPVS: Unknown mcast interface: syz_tun
[ 1058.611544][ T8831] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1058.623128][ T8840] netlink: 'syz.1.8308': attribute type 2 has an invalid length.
[ 1058.623147][ T8840] netlink: 232 bytes leftover after parsing attributes in process `syz.1.8308'.
[ 1058.758283][ T8862] x_tables: duplicate underflow at hook 1
[ 1058.793898][ T8867] x_tables: duplicate underflow at hook 1
[ 1058.837958][ T8869] netlink: 'syz.1.8316': attribute type 1 has an invalid length.
[ 1058.859375][ T8872] netlink: 'syz.0.8317': attribute type 8 has an invalid length.
[ 1058.859517][ T8872] netlink: 'syz.0.8317': attribute type 8 has an invalid length.
[ 1058.862393][ T8872] net_ratelimit: 1 callbacks suppressed
[ 1058.862406][ T8872] openvswitch: netlink: Missing key (keys=40, expected=100)
[ 1058.862542][ T8873] openvswitch: netlink: Missing key (keys=40, expected=100)
[ 1058.883726][ T8869] 8021q: adding VLAN 0 to HW filter on device bond18
[ 1058.903344][ T8869] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8316'.
[ 1058.959240][ T8878] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1059.151289][ T8888] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1059.367278][ T8875] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1059.537528][ T8894] ip_tables: iptables: counters copy to user failed while replacing table
[ 1059.780369][ T8896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8322'.
[ 1059.968048][ T8911] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1059.997466][ T8894] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1060.360414][ T8928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8328'.
[ 1060.360440][ T8928] openvswitch: netlink: Key type 8199 is out of range max 32
[ 1060.366231][ T8932] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1060.380946][ T8931] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[ 1060.380946][ T8931] 
[ 1060.443623][ T8934] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8331'.
[ 1060.443659][ T8934] netlink: 'syz.1.8331': attribute type 7 has an invalid length.
[ 1060.460096][ T8934] netlink: 'syz.1.8331': attribute type 8 has an invalid length.
[ 1060.460116][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8331'.
[ 1060.486422][ T8936] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8330'.
[ 1060.618791][ T8939] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8332'.
[ 1060.758462][ T8944] ip6t_rt: address list match requested but addrnr is 0
[ 1061.025820][ T8951] syzkaller1: entered promiscuous mode
[ 1061.025846][ T8951] syzkaller1: entered allmulticast mode
[ 1061.291062][ T8957] xt_CT: No such helper "snmp_trap"
[ 1061.369313][ T8962] SET target dimension over the limit!
[ 1061.572227][ T8976] lo speed is unknown, defaulting to 1000
[ 1061.818726][ T8973] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8342'.
[ 1062.137873][ T8981] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8345'.
[ 1062.315917][ T8981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8345'.
[ 1062.438052][ T8993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8347'.
[ 1062.968035][ T9019] lo speed is unknown, defaulting to 1000
[ 1066.172876][ T9030] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1066.317381][ T9054] __nla_validate_parse: 1 callbacks suppressed
[ 1066.317402][ T9054] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8361'.
[ 1066.513198][ T9067] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8364'.
[ 1066.534312][ T9072] net_ratelimit: 24 callbacks suppressed
[ 1066.534342][ T9072] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1067.043398][ T9077] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1067.459180][ T9101] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8374'.
[ 1067.526521][ T9106] netlink: 'syz.2.8375': attribute type 7 has an invalid length.
[ 1067.526542][ T9106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8375'.
[ 1067.526568][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8375'.
[ 1067.574898][ T9095] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1068.160050][ T9124] ip6t_ah: unknown flags 4
[ 1068.214493][ T9126] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1068.429817][ T9142] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8383'.
[ 1068.694594][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1068.784051][ T9136] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1069.119017][ T9181] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8393'.
[ 1069.249337][ T9183] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1069.262445][ T9183] netlink: Conntrack attr has 2 unknown bytes
[ 1069.376796][ T9189] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8396'.
[ 1069.392010][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8396'.
[ 1069.430115][ T9185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8390'.
[ 1069.432134][ T9185] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1069.781919][ T9201] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1069.916126][ T9209] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1070.614449][    C1] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[ 1071.464920][ T9294] __nla_validate_parse: 8 callbacks suppressed
[ 1071.464944][ T9294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8429'.
[ 1071.742110][ T9306] pim6reg: entered allmulticast mode
[ 1071.827445][ T9314] net_ratelimit: 8 callbacks suppressed
[ 1071.827584][ T9314] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1071.909223][ T9317] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1072.820350][ T9331] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1073.207927][ T9343] netlink: 'syz.2.8440': attribute type 1 has an invalid length.
[ 1073.207947][ T9343] netlink: 1368 bytes leftover after parsing attributes in process `syz.2.8440'.
[ 1073.583051][ T9334] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1073.583104][ T9351] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1073.765541][ T9355] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1073.769492][ T9355] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8443'.
[ 1073.918386][ T9346] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1074.151180][ T9363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8445'.
[ 1074.175582][ T9363] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1074.320466][ T9376] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1074.321036][ T9374] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1074.489759][ T9381] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8450'.
[ 1074.551213][ T9383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8451'.
[ 1074.707095][ T9394] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1074.947511][ T9403] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8456'.
[ 1075.486467][ T9413] bridge0: left allmulticast mode
[ 1075.690132][ T9413] tipc: Resetting bearer <eth:syzkaller0>
[ 1075.841578][ T9413] geneve1: left allmulticast mode
[ 1075.913471][ T9416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8459'.
[ 1075.923850][   T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1075.923870][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[ 1075.923881][   T12] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[ 1075.923908][   T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1075.923919][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[ 1075.923929][   T12] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[ 1075.923991][   T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1075.924003][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[ 1075.924013][   T12] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[ 1075.924030][   T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1075.924041][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[ 1075.924051][   T12] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[ 1076.268118][ T9432] netlink: 'syz.2.8461': attribute type 3 has an invalid length.
[ 1076.432230][ T9446] netlink: 'syz.2.8467': attribute type 3 has an invalid length.
[ 1076.912586][ T9457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8471'.
[ 1076.925025][ T9457] net_ratelimit: 9 callbacks suppressed
[ 1076.925038][ T9457] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1077.046713][ T9463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8473'.
[ 1077.047592][ T9463] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8473'.
[ 1077.212344][ T9485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8477'.
[ 1077.399356][ T9498] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1077.456243][ T9500] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1077.640420][ T9493] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1077.642780][ T9493] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8481'.
[ 1077.643134][ T9494] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8481'.
[ 1077.769927][ T9514] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8484'.
[ 1077.855116][ T9517] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1077.917577][ T9521] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[ 1078.007387][ T9523] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1078.089215][ T9526] bond24: option ad_select: invalid value (34)
[ 1078.091105][ T9526] bond24 (unregistering): Released all slaves
[ 1078.260457][ T9530] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1078.670783][ T9539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8492'.
[ 1078.686113][ T9539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8492'.
[ 1078.688254][   T58] block nbd0: Receive control failed (result -107)
[ 1078.691224][ T9539] block nbd0: reconnected socket
[ 1078.692427][ T9539] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1078.888792][ T9545] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1078.990544][ T9550] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8495'.
[ 1079.121539][ T9541] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1079.580548][ T9569] xt_LOG: level 8 >= 8
[ 1080.148355][ T9588] netlink: 'syz.2.8503': attribute type 29 has an invalid length.
[ 1080.162977][ T9588] netlink: 'syz.2.8503': attribute type 29 has an invalid length.
[ 1080.346044][ T9599] sctp: [Deprecated]: syz.2.8505 (pid 9599) Use of int in maxseg socket option.
[ 1080.346044][ T9599] Use struct sctp_assoc_value instead
[ 1082.628181][ T9500] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0
[ 1083.102921][ T9583] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1083.279112][ T9622] __nla_validate_parse: 4 callbacks suppressed
[ 1083.279126][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8509'.
[ 1083.280865][ T9622] ip6t_ah: unknown flags 4
[ 1083.524500][ T9636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8512'.
[ 1083.605819][ T9636] net_ratelimit: 3 callbacks suppressed
[ 1083.605832][ T9636] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1083.627970][ T9649] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1083.659100][ T9646] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1083.998284][ T9652] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1084.157816][ T9659] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1084.212220][ T9663] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8518'.
[ 1084.308464][ T9666] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1084.439262][ T9677] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8522'.
[ 1084.442598][ T9677] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1084.484471][ T9680] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1084.675100][ T9696] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8526'.
[ 1084.995080][ T9724] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1085.013253][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8530'.
[ 1085.021885][ T9724] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8530'.
[ 1085.141983][ T9726] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[ 1085.187316][ T9730] SET target dimension over the limit!
[ 1085.451597][ T9751] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1085.675424][ T9761] netlink: 124 bytes leftover after parsing attributes in process `syz.1.8538'.
[ 1085.675443][ T9761] netlink: 124 bytes leftover after parsing attributes in process `syz.1.8538'.
[ 1086.404763][ T9798] netlink: 'syz.1.8546': attribute type 10 has an invalid length.
[ 1086.415408][ T9798] netlink: 'syz.1.8546': attribute type 10 has an invalid length.
[ 1086.491964][ T9810] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8548'.
[ 1086.637495][ T9817] veth20: entered allmulticast mode
[ 1086.681245][ T9820] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode
[ 1086.681294][ T9820] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode
[ 1086.682256][ T9820] netlink: 'syz.0.8549': attribute type 21 has an invalid length.
[ 1086.687197][ T9822] netlink: 'syz.0.8549': attribute type 21 has an invalid length.
[ 1086.859538][ T9819] xt_AUDIT: Audit type out of range (valid range: 0..2)
[ 1088.349109][ T9875] ip6t_rt: address list match requested but addrnr is 0
[ 1088.400940][ T9877] netlink: 'syz.1.8566': attribute type 2 has an invalid length.
[ 1088.721086][ T9882] __nla_validate_parse: 13 callbacks suppressed
[ 1088.721112][ T9882] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8568'.
[ 1088.739987][ T9879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8567'.
[ 1088.775450][ T9879] net_ratelimit: 13 callbacks suppressed
[ 1088.775476][ T9879] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1088.984049][ T9887] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1088.998469][ T9887] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1089.001007][ T9887] ip6t_rt: address list match requested but addrnr is 0
[ 1089.466023][ T9889] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1089.846096][ T9905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8574'.
[ 1089.992865][ T9897] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1090.023008][ T9918] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1090.299471][ T9925] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1090.358095][ T9928] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8578'.
[ 1090.470579][ T9932] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1090.513246][ T9935] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8580'.
[ 1090.661618][ T9939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8580'.
[ 1090.680219][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8579'.
[ 1091.251489][ T9958] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1091.323738][ T9965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8582'.
[ 1091.529848][ T9974] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1091.535410][ T9974] netlink: 'syz.2.8587': attribute type 30 has an invalid length.
[ 1091.613370][ T9978] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8588'.
[ 1091.689483][ T9978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8588'.
[ 1091.934061][ T9989] caif0: port 1(vxlan2) entered blocking state
[ 1091.934138][ T9989] caif0: port 1(vxlan2) entered disabled state
[ 1091.934234][ T9989] vxlan2: entered allmulticast mode
[ 1091.938878][ T9989] vxlan2: entered promiscuous mode
[ 1091.974408][T15716] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1091.974454][T15716] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1091.974484][T15716] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1091.974519][T15716] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1092.234793][T10002] IPVS: set_ctl: invalid protocol: 205 224.0.0.1:20000
[ 1093.352508][T10043] netlink: 'syz.0.8605': attribute type 1 has an invalid length.
[ 1093.862505][T10069] net_ratelimit: 10 callbacks suppressed
[ 1093.862519][T10069] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1094.030797][T10066] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1094.031887][T10071] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1094.247452][T10073] SET target dimension over the limit!
[ 1094.363591][T10079] __nla_validate_parse: 7 callbacks suppressed
[ 1094.363615][T10079] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8613'.
[ 1094.438384][T10080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8614'.
[ 1094.440864][T10085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8613'.
[ 1094.492306][T10083] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.8614'.
[ 1094.493879][T10080] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.8614'.
[ 1094.740201][T10094] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8615'.
[ 1094.802070][T10075] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8612'.
[ 1094.852543][T10096] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1095.123602][T10101] x_tables: duplicate underflow at hook 1
[ 1095.157017][T10104] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1095.158647][T10104] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1095.159072][T10104] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1095.159335][T10104] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1095.159628][T10104] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1095.161809][T10104] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1096.048115][T10143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8619'.
[ 1096.677988][T10148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8622'.
[ 1096.892306][T10155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8625'.
[ 1097.467378][T10172] bond0: (slave gretap0): Opening slave failed
[ 1097.988619][T10203] netlink: 'syz.2.8635': attribute type 1 has an invalid length.
[ 1097.988642][T10203] netlink: 'syz.2.8635': attribute type 7 has an invalid length.
[ 1097.988653][T10203] netlink: 'syz.2.8635': attribute type 8 has an invalid length.
[ 1097.988744][T10203] NCSI netlink: No device for ifindex 1073545264
[ 1098.207022][T10175] syzkaller1: entered promiscuous mode
[ 1098.207038][T10175] syzkaller1: entered allmulticast mode
[ 1098.696402][T10246] ip6t_rt: address list match requested but addrnr is 0
[ 1098.762173][T10249] netlink: 'syz.2.8644': attribute type 1 has an invalid length.
[ 1098.762971][T10251] netlink: 'syz.2.8644': attribute type 1 has an invalid length.
[ 1098.824759][T10249] bond24: option mode: invalid value (11)
[ 1098.831713][T10249] bond24 (unregistering): Released all slaves
[ 1098.906716][T10251] bond24: option mode: invalid value (11)
[ 1098.929249][T10251] bond24 (unregistering): Released all slaves
[ 1098.988917][T10256] tc_dump_action: action bad kind
[ 1099.534249][T10304] lo speed is unknown, defaulting to 1000
[ 1099.591904][T10309] net_ratelimit: 59 callbacks suppressed
[ 1099.591920][T10309] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1099.663975][T10295] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1099.888436][T10316] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[ 1099.907851][T10312] __nla_validate_parse: 7 callbacks suppressed
[ 1099.907863][T10312] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8649'.
[ 1099.925101][T10312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8649'.
[ 1099.933204][T10313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8649'.
[ 1100.200167][T10326] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8653'.
[ 1100.362756][T10339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8654'.
[ 1100.547410][T10346] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8655'.
[ 1100.667515][T10346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8655'.
[ 1100.853169][T10335] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1100.865684][T10349] lo speed is unknown, defaulting to 1000
[ 1101.118224][T10352] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1101.177580][T10373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8659'.
[ 1101.240130][T10375] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1101.246583][T10375] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8660'.
[ 1101.251974][T10375] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8660'.
[ 1101.392558][T10387] SET target dimension over the limit!
[ 1101.637224][T10395] netlink: Failed to add  helper -22
[ 1101.637273][T10395] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1102.249594][T10428] x_tables: duplicate underflow at hook 1
[ 1102.423868][T10422] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1102.486222][T10447] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1104.202723][T10532] netlink: 'syz.2.8685': attribute type 1 has an invalid length.
[ 1104.718400][T10552] net_ratelimit: 4 callbacks suppressed
[ 1104.718416][T10552] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1104.735077][T10537] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1104.791949][T10558] ip6t_rt: address list match requested but addrnr is 0
[ 1105.034391][T15716] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1105.034419][T15716] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1105.034434][T15716] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1105.034449][T15716] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1105.103245][T10567] lo speed is unknown, defaulting to 1000
[ 1105.173153][T10575] af_packet: tpacket_rcv: packet too big, clamped from 3992 to 3952. macoff=96
[ 1105.317631][T10580] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1105.665965][T10584] __nla_validate_parse: 4 callbacks suppressed
[ 1105.665986][T10584] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.8697'.
[ 1105.668530][T10578] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1105.817647][T10569] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1106.398090][T10597] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1106.477357][T10589] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1106.652409][T10611] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1106.787273][T10599] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1107.029315][T10635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8708'.
[ 1107.030292][T10635] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8708'.
[ 1107.121463][T10642] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1107.386543][T10655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1107.415001][T10655] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1107.491072][T10657] lo speed is unknown, defaulting to 1000
[ 1107.561288][T10658] netlink: 'syz.0.8710': attribute type 12 has an invalid length.
[ 1107.592375][T10658] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1108.681857][T10684] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8717'.
[ 1108.778916][T10691] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8718'.
[ 1108.953565][T10701] IPVS: set_ctl: invalid protocol: 52 0.0.0.0:20004
[ 1108.999891][T10703] netlink: 4612 bytes leftover after parsing attributes in process `syz.0.8721'.
[ 1109.006774][T10699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8721'.
[ 1109.141619][T10710] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8723'.
[ 1109.153101][T10712] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8723'.
[ 1109.408220][T10728] netlink: 67 bytes leftover after parsing attributes in process `syz.2.8727'.
[ 1109.526103][T10732] IPv6: NLM_F_REPLACE set, but no existing node found!
[ 1110.031815][T10756] net_ratelimit: 7 callbacks suppressed
[ 1110.031829][T10756] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1110.155071][T10753] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1110.271002][T10763] netlink: 'syz.2.8737': attribute type 1 has an invalid length.
[ 1110.299755][T10775] SET target dimension over the limit!
[ 1110.312764][T10780] SET target dimension over the limit!
[ 1110.323331][T10763] bond24: entered promiscuous mode
[ 1110.323618][T10763] 8021q: adding VLAN 0 to HW filter on device bond24
[ 1110.811857][T10811] SET target dimension over the limit!
[ 1110.880359][T10816] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1110.915816][T10816] xt_TCPMSS: Only works on TCP SYN packets
[ 1111.158782][T10819] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1111.418187][T10830] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 1111.420886][T10830] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1111.508751][T10836] __nla_validate_parse: 2 callbacks suppressed
[ 1111.508766][T10836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8753'.
[ 1111.508773][T10836] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8753'.
[ 1111.528986][T10836] IPVS: Unknown mcast interface: vcan0
[ 1111.535828][T10838] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1111.772979][T10836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8753'.
[ 1111.800797][T10836] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1111.811090][T10851] SET target dimension over the limit!
[ 1111.902991][T10855] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8758'.
[ 1111.903141][T10855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8758'.
[ 1111.903176][T10855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8758'.
[ 1111.940903][T10855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8758'.
[ 1111.940946][T10855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8758'.
[ 1111.979380][T10840] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1112.039994][T10855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8758'.
[ 1112.040043][T10855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8758'.
[ 1112.216965][T10875] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1112.820036][T10909] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[ 1112.820073][T10909] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[ 1112.821631][T10909] tipc: Resetting bearer <eth:syzkaller0>
[ 1113.227895][T10923] netlink: 'syz.0.8775': attribute type 5 has an invalid length.
[ 1113.290882][T10926] Cannot find map_set index 4 as target
[ 1113.297214][T10926] ip6t_rt: address list match requested but addrnr is 0
[ 1114.139949][T10985] lo speed is unknown, defaulting to 1000
[ 1114.162873][T15716] nci: nci_rsp_packet: unknown rsp opcode 0x7
[ 1115.014490][T30466] IPVS: ip_vs_send_async error -101
[ 1117.086481][T10979] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1117.335635][T11005] net_ratelimit: 8 callbacks suppressed
[ 1117.335655][T11005] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1117.456803][T11001] ip_tables: iptables: counters copy to user failed while replacing table
[ 1117.517228][T11009] __nla_validate_parse: 14 callbacks suppressed
[ 1117.517249][T11009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8792'.
[ 1117.574756][T11011] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8796'.
[ 1117.690639][T11007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8795'.
[ 1117.708305][T11007] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1117.918350][T11026] netlink: zone id is out of range
[ 1117.918445][T11026] netlink: zone id is out of range
[ 1117.918450][T11026] netlink: zone id is out of range
[ 1117.918454][T11026] netlink: zone id is out of range
[ 1117.918457][T11026] netlink: zone id is out of range
[ 1117.918461][T11026] netlink: zone id is out of range
[ 1117.918464][T11026] netlink: zone id is out of range
[ 1117.920149][T11025] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8799'.
[ 1117.920161][T11025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8799'.
[ 1118.059513][T11028] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8800'.
[ 1118.177147][T11029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8800'.
[ 1118.596872][T11042] SET target dimension over the limit!
[ 1118.598831][T11042] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8803'.
[ 1121.642825][T11048] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1121.960876][T11095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8807'.
[ 1122.370382][T11104] net_ratelimit: 10 callbacks suppressed
[ 1122.370408][T11104] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1122.371619][T11104] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified.
[ 1122.371647][T11104] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1122.910769][T11120] ip6t_rt: address list match requested but addrnr is 0
[ 1122.982283][T11122] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1123.008823][T11127] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1123.021903][T11117] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1123.301687][T11136] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8819'.
[ 1123.673079][T11138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8820'.
[ 1123.714437][T11146] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1123.726945][T11138] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1123.755633][T11160] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1123.757449][T11160] x_tables: duplicate entry at hook 4
[ 1123.993021][T11168] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1124.209940][T11180] SET target dimension over the limit!
[ 1124.289794][T11182] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8830'.
[ 1124.291196][T11182] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8830'.
[ 1124.686809][T11208] netlink: 'syz.2.8836': attribute type 83 has an invalid length.
[ 1124.904440][T11188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8832'.
[ 1125.086175][T11226] x_tables: ip6_tables: SNPT target: only valid in mangle table, not 
[ 1125.086175][T11226] 
[ 1125.545365][T11254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8841'.
[ 1125.567282][T11251] netlink: 84 bytes leftover after parsing attributes in process `syz.1.8841'.
[ 1125.621829][T11254] syzkaller0: left promiscuous mode
[ 1125.621846][T11254] syzkaller0: left allmulticast mode
[ 1125.632062][T11256] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8840'.
[ 1125.789996][T11260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8842'.
[ 1125.940096][T11273] lo speed is unknown, defaulting to 1000
[ 1126.022320][T11281] netlink: 'syz.0.8847': attribute type 2 has an invalid length.
[ 1126.022337][T11281] netlink: 'syz.0.8847': attribute type 2 has an invalid length.
[ 1126.092359][T11285] netlink: 27 bytes leftover after parsing attributes in process `syz.0.8848'.
[ 1126.558842][T11298] bridge13: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[ 1126.569389][T11298] ip6t_ah: unknown flags 4
[ 1127.318139][T11321] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[ 1127.318201][T11321] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[ 1127.621966][T11342] net_ratelimit: 16 callbacks suppressed
[ 1127.621988][T11342] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1127.623391][T11313] x_tables: ip6_tables: SNPT target: only valid in mangle table, not SMC_PNETID
[ 1127.984408][T11337] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1128.017920][T11348] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1131.019187][T11359] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1131.201877][T11381] __nla_validate_parse: 2 callbacks suppressed
[ 1131.201905][T11381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8867'.
[ 1131.292782][T11393] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1131.417625][    C1] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[ 1131.807443][T11410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8874'.
[ 1131.809288][T11414] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1131.850309][T11410] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1131.935848][T11418] netlink: 'syz.2.8876': attribute type 21 has an invalid length.
[ 1131.935866][T11418] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8876'.
[ 1131.935902][T11418] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8876'.
[ 1132.191901][T11433] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1132.275926][T11440] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8880'.
[ 1132.275953][T11440] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8880'.
[ 1132.276444][T11441] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8880'.
[ 1132.276457][T11441] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8880'.
[ 1132.397224][T11420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8877'.
[ 1132.397339][T11420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8877'.
[ 1132.802999][T11462] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode
[ 1132.803068][T11462] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode
[ 1133.791652][T11476] lo speed is unknown, defaulting to 1000
[ 1134.036158][T11479] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1134.438961][T11476] netlink: 'syz.2.8888': attribute type 16 has an invalid length.
[ 1134.438984][T11476] netlink: 'syz.2.8888': attribute type 17 has an invalid length.
[ 1134.461217][T11476] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 1134.537167][T11500] x_tables: duplicate underflow at hook 1
[ 1134.605031][T11503] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1134.895586][T11511] netlink: 'syz.1.8897': attribute type 1 has an invalid length.
[ 1135.254414][T11520] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1135.503123][T11530] ip6t_ah: unknown flags 4
[ 1135.531852][T11532] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1135.830118][T11545] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1135.933576][T11549] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1135.954416][T11541] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1136.539174][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1136.550053][T11556] __nla_validate_parse: 69 callbacks suppressed
[ 1136.550070][T11556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8908'.
[ 1136.847827][T11577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8913'.
[ 1137.146951][T11588] SET target dimension over the limit!
[ 1137.186472][T11573] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1137.260481][T11595] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1137.660201][T11611] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8920'.
[ 1137.708603][T11621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8921'.
[ 1138.288031][T11642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8925'.
[ 1138.290102][T11642] ip6t_rt: address list match requested but addrnr is 0
[ 1138.306786][T11647] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8926'.
[ 1138.471956][T11656] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[ 1138.471981][T11656] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[ 1138.606758][T11659] netlink: 'syz.2.8930': attribute type 1 has an invalid length.
[ 1138.606784][T11659] netlink: 248 bytes leftover after parsing attributes in process `syz.2.8930'.
[ 1138.974481][T11666] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8931'.
[ 1138.981209][T11668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8932'.
[ 1138.985109][T11666] syzkaller1: entered promiscuous mode
[ 1138.985121][T11666] syzkaller1: entered allmulticast mode
[ 1139.055862][T11672] netlink: 380 bytes leftover after parsing attributes in process `syz.2.8933'.
[ 1139.211734][T11677] net_ratelimit: 10 callbacks suppressed
[ 1139.211754][T11677] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1139.617566][T11705] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1139.640073][T11707] SET target dimension over the limit!
[ 1139.699220][T11712] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1139.770151][T11723] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1139.875220][T11733] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1140.434936][T11753] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1140.438174][T11753] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1140.440449][T11768] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1140.495872][T11770] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1140.649889][T11785] xt_hashlimit: size too large, truncated to 1048576
[ 1140.686407][T11786] tipc: MTU too low for tipc bearer
[ 1140.687641][T11786] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1141.105955][T11810] IPVS: set_ctl: invalid protocol: 50 172.20.20.41:20003
[ 1141.522348][T11822] x_tables: ip_tables: osf match: only valid for protocol 6
[ 1141.715130][T11827] __nla_validate_parse: 14 callbacks suppressed
[ 1141.715154][T11827] netlink: 964 bytes leftover after parsing attributes in process `syz.2.8974'.
[ 1141.821841][T11834] team0: Device macvlan5 failed to change mtu
[ 1142.057008][T11840] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8978'.
[ 1142.563313][T11878] tc_dump_action: action bad kind
[ 1143.007317][T11890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8991'.
[ 1143.117818][T11895] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8993'.
[ 1143.125645][T11895] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8993'.
[ 1143.852170][T11930] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8999'.
[ 1144.132902][T11967] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9005'.
[ 1144.455272][T11958] net_ratelimit: 19 callbacks suppressed
[ 1144.455290][T11958] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1144.602971][T11984] x_tables: ip6_tables: SNPT target: only valid in mangle table, not le
[ 1145.409030][T11999] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1145.448579][T12015] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1145.579531][T12018] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1145.615898][T12020] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1145.866094][T12033] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9020'.
[ 1145.909399][T12035] lo speed is unknown, defaulting to 1000
[ 1146.360127][T12037] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1146.466589][T12059] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1146.528400][T12057] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1146.829971][T12070] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1147.044370][T12072] lo speed is unknown, defaulting to 1000
[ 1147.215901][T12079] macsec0: entered promiscuous mode
[ 1147.216007][T12079] macsec0: entered allmulticast mode
[ 1147.264527][T12081] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9030'.
[ 1147.410206][T12090] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9031'.
[ 1147.419308][T12073] netlink: 3660 bytes leftover after parsing attributes in process `syz.2.9028'.
[ 1147.419725][T12089] netlink: 'syz.1.9032': attribute type 1 has an invalid length.
[ 1147.433311][T12073] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1147.570976][T12092] gre0: left promiscuous mode
[ 1147.922227][T12092] 8021q: adding VLAN 0 to HW filter on device bond19
[ 1147.934911][ T6915] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[ 1147.961503][T12089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9032'.
[ 1148.582727][T12113] ip6t_rt: `--rt-type 0' required before `--rt-0-*'
[ 1148.613956][ T6915] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[ 1149.548282][T12149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9047'.
[ 1149.607470][T12168] net_ratelimit: 7 callbacks suppressed
[ 1149.607492][T12168] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1149.658331][T12172] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1149.877439][T12193] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1150.002354][T12196] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9052'.
[ 1150.206065][T12209] netlink: 'syz.1.9055': attribute type 10 has an invalid length.
[ 1150.270179][T12212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9056'.
[ 1150.270738][T12213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9056'.
[ 1150.331487][T12212] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9056'.
[ 1150.379482][T12198] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1150.411136][T12221] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1150.512517][   T34] audit: type=1804 audit(1791401133.566:10): pid=12228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.9060" name="/newroot/2660/cgroup.controllers" dev="tmpfs" ino=13592 res=1 errno=0
[ 1150.512564][   T34] audit: type=1800 audit(1791401133.566:11): pid=12228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9060" name="cgroup.controllers" dev="tmpfs" ino=13592 res=0 errno=0
[ 1150.607799][T12233] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1150.625932][T12233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9061'.
[ 1150.763535][T12230] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1151.107329][T12246] SET target dimension over the limit!
[ 1151.167367][T12249] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1151.346861][T12251] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1151.641230][T12269] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1151.971494][T12284] tipc: Resetting bearer <eth:syzkaller0>
[ 1152.391204][T12303] __nla_validate_parse: 4 callbacks suppressed
[ 1152.391223][T12303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9079'.
[ 1152.529217][T12286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9076'.
[ 1153.159369][T12330] ip6t_rt: address list match requested but addrnr is 0
[ 1153.160863][T12329] ip6t_rt: address list match requested but addrnr is 0
[ 1153.802039][T12348] SET target dimension over the limit!
[ 1154.022397][T12353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9091'.
[ 1154.033248][T12353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9091'.
[ 1154.062483][T12353] lo: entered allmulticast mode
[ 1154.071304][T12353] lo: left allmulticast mode
[ 1154.251039][T12360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9094'.
[ 1154.323248][T12360] tipc: New replicast peer: 255.255.255.255
[ 1154.337349][T12360] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1154.501945][T12374] lo speed is unknown, defaulting to 1000
[ 1154.777261][T12390] net_ratelimit: 7 callbacks suppressed
[ 1154.777275][T12390] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1155.301080][T12406] SET target dimension over the limit!
[ 1155.405963][T11920] bridge0: port 4(veth0) entered disabled state
[ 1155.425706][T12411] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1155.457289][T12395] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1155.627971][T12422] x_tables: duplicate underflow at hook 1
[ 1155.663541][T12427] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1155.796362][T12431] netlink: 164 bytes leftover after parsing attributes in process `syz.0.9106'.
[ 1155.901389][T12442] SET target dimension over the limit!
[ 1155.986899][T12450] ip6t_rt: address list match requested but addrnr is 0
[ 1156.008529][T12450] netlink: 'syz.0.9110': attribute type 1 has an invalid length.
[ 1156.008545][T12450] netlink: 'syz.0.9110': attribute type 2 has an invalid length.
[ 1156.065622][T12455] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1156.095104][T12455] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1156.236696][T12457] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1156.471091][T12464] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1156.502833][T12461] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1156.895525][T12482] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1156.950565][T12485] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9119'.
[ 1156.952992][T12481] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1156.953013][T12481] syzkaller1: Linktype set failed because interface is up
[ 1157.062326][T12481] ip6t_ah: unknown flags 4
[ 1157.660673][   T34] audit: type=1804 audit(1791401140.716:12): pid=12511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.9124" name="/newroot/3098/cgroup.controllers" dev="tmpfs" ino=15777 res=1 errno=0
[ 1157.660723][   T34] audit: type=1800 audit(1791401140.716:13): pid=12511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9124" name="cgroup.controllers" dev="tmpfs" ino=15777 res=0 errno=0
[ 1157.897592][T12519] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9126'.
[ 1157.899768][T12518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9127'.
[ 1157.968847][T12518] netlink: 92 bytes leftover after parsing attributes in process `syz.1.9127'.
[ 1158.020443][T12522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9126'.
[ 1158.181592][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9129'.
[ 1158.184535][T12526] netlink: 'syz.2.9129': attribute type 1 has an invalid length.
[ 1158.295645][T12533] netlink: 'syz.2.9131': attribute type 5 has an invalid length.
[ 1158.341004][ T5454] nci: nci_rsp_packet: unknown rsp opcode 0x9
[ 1158.508808][T12541] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[ 1158.508836][T12541] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[ 1158.512451][T12541] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[ 1158.512787][T12541] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[ 1158.536351][T12541] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9133'.
[ 1158.686297][T12549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9135'.
[ 1158.686322][T12549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9135'.
[ 1158.706939][T12545] 8021q: adding VLAN 0 to HW filter on device bond25
[ 1158.717676][T12549] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1158.721991][T12549] bond25: (slave bond0): Enslaving as an active interface with a down link
[ 1158.862314][T12553] bond25 (unregistering): (slave bond0): Releasing active interface
[ 1158.887529][T12553] bond25 (unregistering): Released all slaves
[ 1158.915747][T12554] netlink: 'syz.2.9135': attribute type 2 has an invalid length.
[ 1158.915774][T12554] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9135'.
[ 1158.998682][T12554] : entered promiscuous mode
[ 1161.201558][T12528] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1161.490548][T12566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9141'.
[ 1161.531466][T12566] ip6t_ah: unknown flags 4
[ 1161.703272][T12584] SET target dimension over the limit!
[ 1162.043047][T12578] net_ratelimit: 5 callbacks suppressed
[ 1162.043064][T12578] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1162.256452][T12596] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1162.350254][T12620] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1162.405425][T12611] x_tables: duplicate underflow at hook 2
[ 1162.699105][T12647] lo speed is unknown, defaulting to 1000
[ 1162.968270][T12656] __nla_validate_parse: 47 callbacks suppressed
[ 1162.968284][T12656] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9156'.
[ 1162.972644][T12659] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9157'.
[ 1163.192879][T12668] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1163.549357][T12691] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1164.091458][T12697] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1164.106282][T12697] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1164.151515][T12705] lo speed is unknown, defaulting to 1000
[ 1164.461056][T12710] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1164.837651][T12713] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1164.919305][T12721] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1165.385047][T12812] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9173'.
[ 1165.486953][T12837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9173'.
[ 1167.731532][T12903] net_ratelimit: 20 callbacks suppressed
[ 1167.731546][T12903] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1167.826923][T12918] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20003
[ 1168.040060][T12925] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1168.065855][T12923] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9185'.
[ 1168.090535][ T6915] bridge0: port 3(vlan0) entered disabled state
[ 1168.112844][T12925] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9186'.
[ 1168.222990][T12929] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1168.225722][T12929] netlink: 300 bytes leftover after parsing attributes in process `syz.0.9187'.
[ 1168.500903][T12935] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[ 1168.500921][T12935] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[ 1168.552446][T12934] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9189'.
[ 1168.557680][T12935] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9189'.
[ 1168.824698][T12951] netlink: Failed to add  helper -22
[ 1168.824732][T12951] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1168.938309][T12957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9194'.
[ 1169.295180][T12978] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1169.499775][T12977] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1169.875474][T12984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9201'.
[ 1169.887688][T12984] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1170.108329][T12987] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1170.400914][T12991] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1170.950821][T13019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9210'.
[ 1170.950840][T13019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9210'.
[ 1170.959848][T13019] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9210'.
[ 1171.019299][T13037] bond25: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[ 1171.020298][T13037] bond25 (unregistering): Released all slaves
[ 1171.128460][T13048] netlink: 'syz.2.9215': attribute type 28 has an invalid length.
[ 1171.567098][T13057] netlink: 'syz.2.9218': attribute type 1 has an invalid length.
[ 1171.567113][T13057] nbd: error processing sock list
[ 1171.567254][T13057] block nbd2: shutting down sockets
[ 1171.612292][T13060] netlink: 'syz.2.9218': attribute type 1 has an invalid length.
[ 1171.612310][T13060] nbd: error processing sock list
[ 1171.612516][T13060] block nbd2: shutting down sockets
[ 1171.927767][T13073] bridge_slave_0: entered promiscuous mode
[ 1172.155984][T13085] ip6t_rt: address list match requested but addrnr is 0
[ 1172.739350][T13119] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1172.963851][T13141] ip6t_rt: address list match requested but addrnr is 0
[ 1173.250807][T13145] ip6t_rt: address list match requested but addrnr is 0
[ 1173.321144][T13151] __nla_validate_parse: 8 callbacks suppressed
[ 1173.321167][T13151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9231'.
[ 1173.379296][T13151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9231'.
[ 1173.491063][T13155] netlink: 236 bytes leftover after parsing attributes in process `syz.2.9232'.
[ 1173.491081][T13155] netlink: 236 bytes leftover after parsing attributes in process `syz.2.9232'.
[ 1173.511151][T13159] netlink: 136 bytes leftover after parsing attributes in process `syz.2.9232'.
[ 1173.511179][T13159] netlink: 136 bytes leftover after parsing attributes in process `syz.2.9232'.
[ 1173.666707][T13164] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9234'.
[ 1173.779616][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9236'.
[ 1173.780088][T13170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9236'.
[ 1173.795612][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9236'.
[ 1173.801541][T13164] xt_hashlimit: size too large, truncated to 1048576
[ 1173.831010][T13165] xt_hashlimit: size too large, truncated to 1048576
[ 1173.957194][T13178] net_ratelimit: 5 callbacks suppressed
[ 1173.957207][T13178] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1173.992755][T13182] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1174.066813][T13184] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1174.264892][T13193] netlink: 'syz.2.9242': attribute type 10 has an invalid length.
[ 1174.265132][T13193] ip6t_rt: address list match requested but addrnr is 0
[ 1174.281599][T13195] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1174.411608][T13197] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1174.411775][T13197] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1174.411920][T13197] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1174.412111][T13197] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1174.412269][T13197] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1174.412465][T13197] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1174.670377][T13203] netlink: 'syz.1.9246': attribute type 1 has an invalid length.
[ 1174.714651][T13203] bond21: entered promiscuous mode
[ 1174.714895][T13203] 8021q: adding VLAN 0 to HW filter on device bond21
[ 1174.903979][T13211] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication
[ 1175.333821][T30466] IPVS: ip_vs_send_async error -101
[ 1176.283346][T13268] netlink: 'syz.2.9261': attribute type 1 has an invalid length.
[ 1176.304476][T13268] geneve0: entered promiscuous mode
[ 1176.733261][T13283] 
[ 1176.734076][T13283] ======================================================
[ 1176.736194][T13283] WARNING: possible circular locking dependency detected
[ 1176.738522][T13283] syzkaller #0 Not tainted
[ 1176.740116][T13283] ------------------------------------------------------
[ 1176.742586][T13283] syz.2.9265/13283 is trying to acquire lock:
[ 1176.744442][T13283] ffffffff8ee90400 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x149/0x600
[ 1176.747105][T13283] 
[ 1176.747105][T13283] but task is already holding lock:
[ 1176.749201][T13283] ffff888103e86858 (&hugetlb_fault_mutex_table[i]){+.+.}-{4:4}, at: hugetlb_fault+0x3b5/0x1440
[ 1176.752282][T13283] 
[ 1176.752282][T13283] which lock already depends on the new lock.
[ 1176.752282][T13283] 
[ 1176.755363][T13283] 
[ 1176.755363][T13283] the existing dependency chain (in reverse order) is:
[ 1176.757932][T13283] 
[ 1176.757932][T13283] -> #7 (&hugetlb_fault_mutex_table[i]){+.+.}-{4:4}:
[ 1176.760517][T13283]        __mutex_lock+0x19d/0x1550
[ 1176.762138][T13283]        hugetlb_fault+0x3b5/0x1440
[ 1176.763786][T13283]        handle_mm_fault+0x24fc/0x3750
[ 1176.765632][T13283]        do_user_addr_fault+0x746/0x1340
[ 1176.767471][T13283]        exc_page_fault+0x6a/0xc0
[ 1176.769109][T13283]        asm_exc_page_fault+0x26/0x30
[ 1176.770980][T13283]        rep_movs_alternative+0x75/0xa0
[ 1176.772875][T13283]        _copy_from_iter+0x21b/0x1660
[ 1176.774547][T13283]        sk_msg_memcopy_from_iter+0x35e/0x700
[ 1176.776448][T13283]        tls_sw_sendmsg+0x1c20/0x2c00
[ 1176.778257][T13283]        sock_sendmsg_nosec+0x90/0x190
[ 1176.779905][T13283]        __sys_sendto+0x408/0x5a0
[ 1176.781452][T13283]        __x64_sys_sendto+0xde/0x100
[ 1176.783220][T13283]        do_syscall_64+0x166/0x520
[ 1176.784913][T13283]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1176.786862][T13283] 
[ 1176.786862][T13283] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[ 1176.789198][T13283]        lock_sock_nested+0x41/0x100
[ 1176.790822][T13283]        inet_shutdown+0x6a/0x390
[ 1176.792458][T13283]        nbd_mark_nsock_dead+0x2cb/0x550
[ 1176.794201][T13283]        recv_work+0x1cee/0x1e10
[ 1176.795688][T13283]        process_scheduled_works+0xc3d/0x1630
[ 1176.797527][T13283]        worker_thread+0xa47/0xfb0
[ 1176.799221][T13283]        kthread+0x38b/0x480
[ 1176.800887][T13283]        ret_from_fork+0x514/0xb70
[ 1176.802729][T13283]        ret_from_fork_asm+0x1a/0x30
[ 1176.804327][T13283] 
[ 1176.804327][T13283] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[ 1176.806618][T13283]        __mutex_lock+0x19d/0x1550
[ 1176.808170][T13283]        nbd_queue_rq+0x373/0xff0
[ 1176.809686][T13283]        blk_mq_dispatch_rq_list+0x499/0x1990
[ 1176.811518][T13283]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[ 1176.813661][T13283]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1176.815685][T13283]        blk_mq_run_work_fn+0x16c/0x300
[ 1176.817501][T13283]        process_scheduled_works+0xc3d/0x1630
[ 1176.819378][T13283]        worker_thread+0xa47/0xfb0
[ 1176.820981][T13283]        kthread+0x38b/0x480
[ 1176.822461][T13283]        ret_from_fork+0x514/0xb70
[ 1176.824026][T13283]        ret_from_fork_asm+0x1a/0x30
[ 1176.825631][T13283] 
[ 1176.825631][T13283] -> #4 (&cmd->lock){+.+.}-{4:4}:
[ 1176.827825][T13283]        __mutex_lock+0x19d/0x1550
[ 1176.829375][T13283]        nbd_queue_rq+0xc1/0xff0
[ 1176.830877][T13283]        blk_mq_dispatch_rq_list+0x499/0x1990
[ 1176.832771][T13283]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[ 1176.834825][T13283]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1176.836784][T13283]        blk_mq_run_work_fn+0x16c/0x300
[ 1176.838450][T13283]        process_scheduled_works+0xc3d/0x1630
[ 1176.840260][T13283]        worker_thread+0xa47/0xfb0
[ 1176.841821][T13283]        kthread+0x38b/0x480
[ 1176.843300][T13283]        ret_from_fork+0x514/0xb70
[ 1176.844858][T13283]        ret_from_fork_asm+0x1a/0x30
[ 1176.846489][T13283] 
[ 1176.846489][T13283] -> #3 (set->srcu){.+.+}-{0:0}:
[ 1176.848607][T13283]        __synchronize_srcu+0xc9/0x2f0
[ 1176.850246][T13283]        elevator_switch+0x1e8/0x7b0
[ 1176.851901][T13283]        elevator_change+0x2fa/0x480
[ 1176.853804][T13283]        elevator_set_default+0x375/0x440
[ 1176.855599][T13283]        blk_register_queue+0x3f3/0x4e0
[ 1176.857302][T13283]        __add_disk+0x6b8/0xdb0
[ 1176.858788][T13283]        add_disk_fwnode+0x100/0x3a0
[ 1176.860419][T13283]        nbd_dev_add+0x733/0xb60
[ 1176.862026][T13283]        nbd_init+0x168/0x1f0
[ 1176.863500][T13283]        do_one_initcall+0x250/0x870
[ 1176.865129][T13283]        do_initcall_level+0x10a/0x1a0
[ 1176.866776][T13283]        do_initcalls+0x59/0xa0
[ 1176.868260][T13283]        kernel_init_freeable+0x29d/0x3e0
[ 1176.869975][T13283]        kernel_init+0x22/0x1d0
[ 1176.871469][T13283]        ret_from_fork+0x514/0xb70
[ 1176.873069][T13283]        ret_from_fork_asm+0x1a/0x30
[ 1176.874661][T13283] 
[ 1176.874661][T13283] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[ 1176.877068][T13283]        __mutex_lock+0x19d/0x1550
[ 1176.878966][T13283]        elevator_change+0x1af/0x480
[ 1176.880792][T13283]        elevator_set_none+0xb5/0x140
[ 1176.882550][T13283]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[ 1176.884563][T13283]        nbd_start_device+0x189/0xb30
[ 1176.886141][T13283]        nbd_genl_connect+0x167d/0x1cd0
[ 1176.887806][T13283]        genl_family_rcv_msg_doit+0x233/0x340
[ 1176.889619][T13283]        genl_rcv_msg+0x614/0x7a0
[ 1176.891367][T13283]        netlink_rcv_skb+0x226/0x4a0
[ 1176.893067][T13283]        genl_rcv+0x28/0x40
[ 1176.894446][T13283]        netlink_unicast+0x7bd/0x940
[ 1176.896050][T13283]        netlink_sendmsg+0x813/0xb40
[ 1176.897633][T13283]        sock_sendmsg_nosec+0x14e/0x190
[ 1176.899315][T13283]        ____sys_sendmsg+0x54e/0x850
[ 1176.900942][T13283]        ___sys_sendmsg+0x2a5/0x360
[ 1176.902595][T13283]        __x64_sys_sendmsg+0x1b1/0x290
[ 1176.904288][T13283]        do_syscall_64+0x166/0x520
[ 1176.905846][T13283]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1176.907788][T13283] 
[ 1176.907788][T13283] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}:
[ 1176.910391][T13283]        blk_alloc_queue+0x544/0x690
[ 1176.912096][T13283]        __blk_mq_alloc_disk+0x194/0x390
[ 1176.913828][T13283]        nbd_dev_add+0x494/0xb60
[ 1176.915423][T13283]        nbd_init+0x168/0x1f0
[ 1176.916920][T13283]        do_one_initcall+0x250/0x870
[ 1176.918636][T13283]        do_initcall_level+0x10a/0x1a0
[ 1176.920339][T13283]        do_initcalls+0x59/0xa0
[ 1176.921845][T13283]        kernel_init_freeable+0x29d/0x3e0
[ 1176.923627][T13283]        kernel_init+0x22/0x1d0
[ 1176.925225][T13283]        ret_from_fork+0x514/0xb70
[ 1176.926800][T13283]        ret_from_fork_asm+0x1a/0x30
[ 1176.928422][T13283] 
[ 1176.928422][T13283] -> #0 (fs_reclaim){+.+.}-{0:0}:
[ 1176.930602][T13283]        __lock_acquire+0x164c/0x2de0
[ 1176.932318][T13283]        lock_acquire+0x115/0x350
[ 1176.933845][T13283]        fs_reclaim_acquire+0x71/0x100
[ 1176.935514][T13283]        prepare_alloc_pages+0x149/0x600
[ 1176.937231][T13283]        __alloc_frozen_pages_noprof+0x185/0x5a0
[ 1176.939163][T13283]        alloc_pages_mpol+0x21e/0x390
[ 1176.940785][T13283]        alloc_pages_noprof+0xb1/0x2b0
[ 1176.942508][T13283]        __pud_alloc+0x3a/0x460
[ 1176.944011][T13283]        huge_pte_alloc+0x4f6/0x630
[ 1176.945579][T13283]        hugetlb_fault+0x412/0x1440
[ 1176.947219][T13283]        handle_mm_fault+0x24fc/0x3750
[ 1176.948981][T13283]        do_user_addr_fault+0xa4f/0x1340
[ 1176.950728][T13283]        exc_page_fault+0x6a/0xc0
[ 1176.952325][T13283]        asm_exc_page_fault+0x26/0x30
[ 1176.954009][T13283] 
[ 1176.954009][T13283] other info that might help us debug this:
[ 1176.954009][T13283] 
[ 1176.957436][T13283] Chain exists of:
[ 1176.957436][T13283]   fs_reclaim --> sk_lock-AF_INET6 --> &hugetlb_fault_mutex_table[i]
[ 1176.957436][T13283] 
[ 1176.961797][T13283]  Possible unsafe locking scenario:
[ 1176.961797][T13283] 
[ 1176.964315][T13283]        CPU0                    CPU1
[ 1176.965975][T13283]        ----                    ----
[ 1176.967574][T13283]   lock(&hugetlb_fault_mutex_table[i]);
[ 1176.969255][T13283]                                lock(sk_lock-AF_INET6);
[ 1176.971350][T13283]                                lock(&hugetlb_fault_mutex_table[i]);
[ 1176.973841][T13283]   lock(fs_reclaim);
[ 1176.975060][T13283] 
[ 1176.975060][T13283]  *** DEADLOCK ***
[ 1176.975060][T13283] 
[ 1176.977578][T13283] locks held by syz.2.9265/13283: 2, last CPU#1:
[ 1176.979508][T13283]  #0: ffff888160788688 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[ 1176.982324][T13283]  #1: ffff888103e86858 (&hugetlb_fault_mutex_table[i]){+.+.}-{4:4}, at: hugetlb_fault+0x3b5/0x1440
[ 1176.985574][T13283] 
[ 1176.985574][T13283] stack backtrace:
[ 1176.987373][T13283] CPU: 1 UID: 0 PID: 13283 Comm: syz.2.9265 Not tainted syzkaller #0 PREEMPT(full) 
[ 1176.990137][T13283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1176.994304][T13283] Call Trace:
[ 1176.995661][T13283]  <TASK>
[ 1176.996825][T13283]  dump_stack_lvl+0xe8/0x150
[ 1176.998600][T13283]  print_circular_bug+0x2e2/0x300
[ 1177.000550][T13283]  check_noncircular+0x12f/0x150
[ 1177.002450][T13283]  __lock_acquire+0x164c/0x2de0
[ 1177.004312][T13283]  ? __lock_acquire+0x747/0x2de0
[ 1177.006207][T13283]  lock_acquire+0x115/0x350
[ 1177.007914][T13283]  ? prepare_alloc_pages+0x149/0x600
[ 1177.009899][T13283]  ? lock_acquire+0x115/0x350
[ 1177.011707][T13283]  fs_reclaim_acquire+0x71/0x100
[ 1177.013566][T13283]  ? prepare_alloc_pages+0x149/0x600
[ 1177.015610][T13283]  prepare_alloc_pages+0x149/0x600
[ 1177.017555][T13283]  __alloc_frozen_pages_noprof+0x185/0x5a0
[ 1177.019505][T13283]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1177.021458][T13283]  ? __pfx_policy_nodemask+0x10/0x10
[ 1177.023531][T13283]  ? __mutex_lock+0x30b/0x1550
[ 1177.025422][T13283]  ? filemap_map_pages+0x1d14/0x2170
[ 1177.027532][T13283]  ? page_table_check_set+0x4c8/0x530
[ 1177.029297][T13283]  alloc_pages_mpol+0x21e/0x390
[ 1177.030800][T13283]  alloc_pages_noprof+0xb1/0x2b0
[ 1177.032365][T13283]  __pud_alloc+0x3a/0x460
[ 1177.034005][T13283]  huge_pte_alloc+0x4f6/0x630
[ 1177.035762][T13283]  ? hugetlb_vma_lock_read+0x86/0x2d0
[ 1177.037616][T13283]  hugetlb_fault+0x412/0x1440
[ 1177.039327][T13283]  ? __pfx___css_rstat_updated+0x10/0x10
[ 1177.041115][T13283]  ? __pfx_hugetlb_fault+0x10/0x10
[ 1177.042698][T13283]  handle_mm_fault+0x24fc/0x3750
[ 1177.044450][T13283]  ? reacquire_held_locks+0x117/0x1a0
[ 1177.046306][T13283]  ? lock_vma_under_rcu+0x1d1/0x500
[ 1177.047960][T13283]  ? handle_mm_fault+0xf1/0x3750
[ 1177.049512][T13283]  ? lock_vma_under_rcu+0x116/0x500
[ 1177.051140][T13283]  ? __pfx_handle_mm_fault+0x10/0x10
[ 1177.052789][T13283]  ? lock_vma_under_rcu+0x45a/0x500
[ 1177.054379][T13283]  ? __pfx_do_futex+0x10/0x10
[ 1177.055804][T13283]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[ 1177.057518][T13283]  do_user_addr_fault+0xa4f/0x1340
[ 1177.059126][T13283]  ? trace_page_fault_user+0x84/0x1e0
[ 1177.060813][T13283]  exc_page_fault+0x6a/0xc0
[ 1177.062270][T13283]  asm_exc_page_fault+0x26/0x30
[ 1177.063785][T13283] RIP: 0033:0x7f525ed6efd8
[ 1177.065202][T13283] Code: 10 8a 0e 74 0a 0f b7 74 16 fe 66 89 74 17 fe 88 0f c3 8b 4c 16 fc 8b 36 89 4c 17 fc 89 37 c3 0f 1f 00 48 8b 4c 16 f8 48 8b 36 <48> 89 37 48 89 4c 17 f8 c3 0f 10 54 16 f0 0f 10 5c 16 e0 0f 11 07
[ 1177.070960][T13283] RSP: 002b:00007ffe92988388 EFLAGS: 00010206
[ 1177.072767][T13283] RAX: 0000200000000540 RBX: 0000000000000004 RCX: 0a00000004000000
[ 1177.075145][T13283] RDX: 000000000000000d RSI: 0000000400000003 RDI: 0000200000000540
[ 1177.077560][T13283] RBP: fffffffffffffffe R08: 0000001b31720000 R09: 000000000000001a
[ 1177.079971][T13283] R10: 000000000000000d R11: 0000000000000000 R12: 00007ffe929884b0
[ 1177.082384][T13283] R13: 00007f525f025fac R14: 000000000011f42a R15: 00007f525f025fa0
[ 1177.085138][T13283]  </TASK>
