last executing test programs:

1.153964669s ago: executing program 0 (id=9142):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdc02, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gre0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc890}, 0x20000000)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000008082295", @ANYRES64=0x0, @ANYRESOCT=r1], &(0x7f00000002c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0xa}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000840)="b9ff0200000028eeb5845591b318", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x12)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x23, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x1, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x40003, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x50)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x2c, 0x0, 0x0, 0xfffff024}, {0x80000006, 0x0, 0x0, 0xb}]}, 0x10)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
shutdown(r5, 0x1)
recvmmsg(r5, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r6, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r6, 0x0, 0x0, 0x20004008, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x6baa, 0x4)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}], 0x1, 0x4000800)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={<r7=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r7, 0x4, 0x8}, 0xc)
setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r7, 0x0, 0x6, 0xfff, 0x1, 0x3}, 0x14)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000300)={r7, 0xe4, "81a3a15f6529a70b09a8549819560ada828ea6313bd78336871827c77f7e334c06c5e1e10ed1ef5923a48814025e8d8dffbb4cf0ca92498c8293f7efa28be0992b79f1a7c62d62b10031212236408ebe195588ad9fe0bb4f9fcae8ff627e8a1981291b9069cd539ed520bb0a140ed62286dd7ea06820bbada86548d487488c60fc2d95125b46d81037f5f88348352ca2f763ea0011ae509d46ff46b6a23b31a94d4005d29459994c9598a43e4c1dcebcd62c88dd61fca9620c566e35a1aacc162aa6fcda34aff950f890fdba75b843725fad2f5273da5a5dc1b9b083fafa59f55e64265d"}, &(0x7f0000000440)=0xec)
sendto$inet6(r6, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xac}}, 0xe540b15cc18a2f34)

1.007653857s ago: executing program 2 (id=9145):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x54}}, 0x24008844)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x5, 0x1, 0x1, 0x80000000}, 0x4, r2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbffffa, 0x0, 0x0, 0x0, 0x40}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9e}}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r5 = socket(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="18010000", @ANYRES16=r6, @ANYBLOB="0107000001005600000008000300000000001e00000000000000", @ANYRES32=0x0, @ANYBLOB="eb00c500b2bc8799f6e09d7656143cc76d8056193737cf0d3539e04490466ca7f9392e36f0a48d445f2488d7ae64c591a65936f2312c4cfe6529ddf545ea3a089f3f28b0740975596f73d2cc2f9fed6d55b11e5088e52bf1d899b14d8c2144aa044ee7b64986e7047592b96866789030f72da4923ec036b62326e99c918fece908b85f9371852747152bf12d085557b2d6389f5f2360179546872cd69d53e3000d76638bc170d0eea05f01dea63d3b83598b78aca858a6ce4441887df0e4abff8726ef7858b54f79e300de5a0a852fa139e2dfcb7a7f55a44278813d6bfdd31cd4014f7d28000000000000000800c40001400000"], 0x118}, 0x1, 0x0, 0x0, 0x804}, 0x40) (async)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="18010000", @ANYRES16=r6, @ANYBLOB="0107000001005600000008000300000000001e00000000000000", @ANYRES32=0x0, @ANYBLOB="eb00c500b2bc8799f6e09d7656143cc76d8056193737cf0d3539e04490466ca7f9392e36f0a48d445f2488d7ae64c591a65936f2312c4cfe6529ddf545ea3a089f3f28b0740975596f73d2cc2f9fed6d55b11e5088e52bf1d899b14d8c2144aa044ee7b64986e7047592b96866789030f72da4923ec036b62326e99c918fece908b85f9371852747152bf12d085557b2d6389f5f2360179546872cd69d53e3000d76638bc170d0eea05f01dea63d3b83598b78aca858a6ce4441887df0e4abff8726ef7858b54f79e300de5a0a852fa139e2dfcb7a7f55a44278813d6bfdd31cd4014f7d28000000000000000800c40001400000"], 0x118}, 0x1, 0x0, 0x0, 0x804}, 0x40)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x84, 0x0, 0x0) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x84, 0x0, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYRES8, @ANYRES16=r0], 0x40}}, 0x2400c814)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
r11 = socket(0x10, 0x80003, 0x0)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25ac1414bb000000000000000000000000ac1414bb0000000000000000000000000003000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, <r13=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000240)}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001900)={0xffffffffffffffff, 0x20, &(0x7f00000018c0)={&(0x7f0000001780)=""/144, 0x90, 0x0, &(0x7f0000001840)=""/65, 0x41}}, 0x10) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001900)={0xffffffffffffffff, 0x20, &(0x7f00000018c0)={&(0x7f0000001780)=""/144, 0x90, <r14=>0x0, &(0x7f0000001840)=""/65, 0x41}}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, <r15=>0xffffffffffffffff}, &(0x7f0000001940), &(0x7f0000001980)=r4}, 0x20)
r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001a80)={0xffffffffffffffff, 0x8, 0x8}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000080000000000020000000000182b0000", @ANYRES32=r13, @ANYBLOB="00000000090000000a1f0900000800001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000060000009500000000000000"], &(0x7f00000006c0)='GPL\x00', 0x7ff, 0x1000, &(0x7f0000000700)=""/4096, 0x41000, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000001700)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001740)={0x1, 0x3, 0x1, 0xfffffffd}, 0x10, r14, 0xffffffffffffffff, 0xa, &(0x7f0000003040)=[0x1, r15, 0xffffffffffffffff, r16, r15, 0xffffffffffffffff, r3], &(0x7f0000001b00)=[{0x0, 0x1, 0x8, 0xc}, {0x1, 0x4, 0xc}, {0x0, 0x5, 0x6, 0xb}, {0x3, 0x1, 0xd, 0x8}, {0x2, 0x1, 0x2, 0x6}, {0x3, 0x5, 0x7, 0x9}, {0x4, 0x4, 0x3, 0x5}, {0x2, 0x2, 0x6, 0xc}, {0x5, 0x5, 0xd, 0x9}, {0x0, 0x4, 0x9, 0x3}]}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x1f, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0xd3}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff8}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, @alu={0x7, 0x1, 0xd, 0xe, 0xb, 0xffffffffffffffe0}, @alu={0x4, 0x1, 0x3, 0xf, 0xa, 0x80, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff8}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000800)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x52, '\x00', r2, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000009c0)={0x3, 0x7, 0xb}, 0x10, r14, r4, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'lo\x00', <r17=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r17, {}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400000b00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r17, 0x25, 0x2, @void}, 0x10)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x60, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x108}}, 0x0) (async)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x60, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x108}}, 0x0)

899.551183ms ago: executing program 1 (id=9146):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a9c000000060a050c0000000000000000050000000900010073797e30000000000900020073797a3000000000700004803c0001800c0001007061796c6f6164002c00028008000240000000010800034000000000080004400000000608000140000000010800064000000000300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c0002800800018000000001140000001100010000000000000000000500000a"], 0xc4}}, 0x0)

898.976409ms ago: executing program 0 (id=9147):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={&(0x7f0000000440), 0xc, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0xffffffffffffff8d, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x76, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}, @NFT_MSG_DELOBJ={0x0, 0x14, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_OBJ_TYPE, @NFTA_OBJ_HANDLE={0x0, 0x6, 0x1, 0x0, 0x8}, @NFTA_OBJ_NAME={0x0, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x0, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TYPE={0x0, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_USERDATA={0x0, 0x8, "9c59f3d3f7835bc3dd5a56a731c1ef581475b5ee4e8c9f4a80b39ad66e8ee0269b3d8ec0bcaa8a6513bd10013debb320b442c41cda56d0645eefe5ed928291e63789fcdbcc09a5011889c17ef9cfaddc961bd709de8e4072ad1c42babf2ec784c91c32d4167c25b7f3643353bc00e962813e71a3d3ff6d64d72d9ce9f6f615a78c755a0b93183a20b8d311c525b8c215f4bbd97219f0e5f0676e81a56e32cd14d908eb09b513c7f654d65f67cb00537179eb392fd168dcefa1714620926bd5742d10df281a8ec0ea64c331d60a12b3f156ea4de21fd0bc6f775c"}, @NFTA_OBJ_TYPE={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x0, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_NAME={0x0, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0x0, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWOBJ={0x0, 0x12, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TYPE}, @NFT_MSG_NEWOBJ={0x0, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_DATA={0x0, 0x4, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x0, 0x3, 0x1, 0x0, 0xffffffff}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}}, 0x48000)

809.698279ms ago: executing program 0 (id=9148):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000000000000000000d0aaa00000000000001000006"], &(0x7f0000000f40)=""/4089, 0x3c, 0xff9, 0x1, 0xfffffffa}, 0x28)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2)
sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf252100000009001f00706879320000000005002000000000000a000100"], 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x60, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x17, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}}, 0x0)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), r2)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, r5, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0)
ioctl$FS_IOC_SETFSLABEL(r7, 0x4008af04, &(0x7f0000000000)="58fe07d85b4e4664fb77e727705bca66007f1ca74331023041bcdf05e1a19e70c84082a9ce93795605cf9489fe09f35051090e1928f3c3c2c34c511f0d3b4555add78851cb58dd98778e8fa8e40411701ff316d396f7b1521a8fc166c21aa18de86c0112d619f78ae7b51a024b2d1640c29a5f3de3c0df48d95ca40e21faeea1022a531385734ceff4e19db5cd13cfdd159787d087cdac2b0c03c396c5a426395233fc0f3f93ae4252d8fd80caac0ee907ce07bae321b8f6e844220115bfffd027d7388cf2bcf57a7987e8498837d6e16cdd00e698fc74737b8afc4f72368039b9c4644dd13573acaad5c1951a594d20f458f759d27aa36ef35e657a49e05b87")
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r8=>0x0}, 0x8)
r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r8, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r9, 0x0, 0x0}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}, 0x1, 0x0, 0x0, 0x8d0}, 0x0)

808.540155ms ago: executing program 1 (id=9149):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6b7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

742.157203ms ago: executing program 1 (id=9150):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xb, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x85, 0x0, 0x0, 0x93}}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a7}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x18, 0x1, 0x0, 0x1, @dynset={{}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0)

741.413614ms ago: executing program 2 (id=9151):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xac}}, 0x20000000)

669.848439ms ago: executing program 2 (id=9152):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x6, 0x0, 0x9, 0xf5aa, 0x8}) (async)
getsockopt$inet6_int(r1, 0x29, 0x48, 0x0, &(0x7f0000000280)) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0)

668.370498ms ago: executing program 1 (id=9153):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x1, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x26, 0x6, "354ee601ecc11cdd14fd24c9cd3f2b6c48172f9a234295ccb723c790ef205d089811"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0)

667.412763ms ago: executing program 0 (id=9154):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x120, 0x0, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_SEQ_ADJ_ORIG={0x4}, @CTA_NAT_SRC={0xc8, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}]}, @CTA_TUPLE_ORIG={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}]}, 0x120}, 0x1, 0x0, 0x0, 0x80}, 0x4084)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000001c0)={0x2, 0x3, 0x10, 0x9, 0xf, 0x0, 0x4, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e24, 0xfffffffd, @remote, 0x7fffffff}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x40000000}, @sadb_address={0x5, 0x5, 0x6c, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @mcast1, 0x7ff}}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x78}}, 0x4000000)
sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={&(0x7f0000000440), 0xc, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}}, 0x0)

598.507223ms ago: executing program 1 (id=9155):
unshare(0x4020b00)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
unshare(0x10000000)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000006c0)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="94028d82dd159fea147ff578a8b0b77864cc9599ecf4fab1f01fe9c1b48ce1ce6777fbe6c94110d6790294cbc307c705ce081e8a07077a8eeee93649a5d574405758a4a15b4458c84ab743ee5dbfa93d3d731b093d805648cbb7d810a5ebe33dca1017400868845e0104d283de3cf4bd5200753caa559964533813ebf057a1c5879b050fcde0eeb93e62a41e1e6eda567a4a67537e632104017c9cc80d27031cce7af13efae2dfc5dba96305cd377e70e7c6415b27acc676eef8fced0c1edda93c675e0b7cef70992a4781bfc7cb7983fb7fa14e878e1c5148dd7b836ed0b5b3a8aefcd53c12288486", @ANYRES64=0x0], 0x20)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="2f0000001820000004000000", @ANYRES32=r6, @ANYBLOB="061feb0ddc4e3ba942aa81fc0fc8a80f97dab479acfeccfc773aabfd87e527e146f55aac765a58a4168ff3334e7524ae415930af7847fb67b4012ef48e5828b3cb2be5f211b351aa4c89de1f2abc18b66719406cf7736430b2517ee3743bf6cd48f9c015d3ffe9fa4eb6d35a673421d552994e962f325620e082b9ffb4f24052dfa30e51689cf559236739031a27afe1921aa74b92f6bf51d5c159aaf7a05ef7f50de959d930bc75cd256216bee0c9b468968b318da253ec821ed9b03942c606a87b", @ANYRES64=0x0], 0x20)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(r7)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x11, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x6c, 0x28, 0x1, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x800, 0x3, 0x8, 0x4, 0x9, 0xa904, 0x800, 0x400, 0xfffffffc, 0x8, 0x1c, 0x1c, 0xd, 0x2, 0x9, 0xffff}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x40000)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x2, 0xfffff000}, {0x6, 0x0, 0x0, 0x6}]}, 0x10)

594.836375ms ago: executing program 2 (id=9156):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000002000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}}, 0x0)

371.384241ms ago: executing program 0 (id=9157):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_sa={0x2, 0x1, 0x0, 0x5, 0x0, 0x7, 0x7, 0xffffff7f}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}]}, 0x60}, 0x1, 0x7}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300100000000000fbdbdf2500000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x20004000)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001})
ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000200)=0xc)
r6 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', <r7=>0x0})
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x0, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x94}, 0x80)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r7})
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41})
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x40, 0x0, 0x7, 0x10}]})
write$tun(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="0105300007002800060000006000000000308440fe800000000000000000300000000001fe800000000000000000000000000002"], 0x64)
sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000)
unshare(0x20000400)
r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r8, r9, 0x4, 0x0, @val=@tracing={0x0, 0x1}}, 0x20)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}}, 0x0)

370.822769ms ago: executing program 2 (id=9158):
r0 = socket(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000c07825a500ffa4524c5dba0034158c7b8e09d2185e76838b0f4db1fd8e2af64416eb4d152595bbd16c34c961c8f854b5b5097f8256979dbdad2772af67f279410cf0c7a680ea993e65e0a80a3efe1bb9bb02bf40b5e47a64de9f4c3a28704da36094f7b5921fefd4393b1637047e098ad1b2311a90dae6d84a99b145b2d787783b9fcec002e766bb33a59df9aab38f770a40aa3f416aaee508efd7b302e5999de6aa60470b211e1e11bd38b352fe3d6295a11ca00e70cfb3"], 0x8)
setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="071404"], 0xa8)
socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}}, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000040)=0x7, 0x4)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r6, &(0x7f0000000240)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x201}, 0x14}}, 0x0)
getsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, &(0x7f00000002c0)=0x8000, &(0x7f0000000300)=0x2)
syz_emit_ethernet(0x5e, &(0x7f0000000280)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ']\x00', 0x28, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x4}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @remote}}}}}}, 0x0)
r8 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'syzkaller1\x00', <r9=>0x0})
setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000100), 0x4)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
socket$alg(0x26, 0x5, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x3c}}, 0x20000000)
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xa, 0x1d}, {0xfff1, 0xffff}, {0x0, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x2c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)

210.304569ms ago: executing program 1 (id=9159):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x3}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000880)={@in6={{0xa, 0x4e24, 0xf37, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8000}}, 0x0, 0x0, 0x1e, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e24740bd4c0b42a21d7214bff16d2ccd00"}, 0xd8)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x45, 0x0, 0x0, 0xffffff4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffefffe, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000006000000", @ANYRES32, @ANYRES32=0x0], 0x50)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x64)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
shutdown(0xffffffffffffffff, 0x1)
write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
socket$inet6_sctp(0xa, 0x1, 0x84)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x3377}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x4, 0x9, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0)
write$rfkill(r6, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bond0\x00', <r8=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8=<r9=>r2], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x7}, 0x10}, 0x94)
sendmsg$nl_route(r7, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x40, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r10, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES16=r8, @ANYRES8=r1, @ANYRES32, @ANYRES64=r3, @ANYRES16=r4, @ANYRESDEC=r9, @ANYRES32=r5, @ANYBLOB="8ccebb854c540c955307d4f5673ba1be01e03b3936155139c8e6a8bf19fdfb598df302b3e29671a170f9eaabd5"], 0x48)

151.777294ms ago: executing program 2 (id=9160):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'dummy0\x00', {0x2, 0x0, @initdev}})
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a050029473b3fe0f1580000000000000000050000050900010073797a3100000000140000001100010000000000000000000500000a0698c8c844e23ce50e3aa71dc4d3bc16b4278a6b22"], 0x48}}, 0x80)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r3=>0x0}) (async)
r4 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async, rerun: 32)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x20, 0x1, {{0x0, 0x0, 0x2}}}]}}}]}]}}]}, 0x8c}}, 0x0)
write$tun(r1, &(0x7f0000000400)=ANY=[], 0xdf41)
write$tun(r1, &(0x7f0000000140)={@void, @void, @x25={0x3, 0x7, 0xff, "579dbb46cb4f0293d04e0f"}}, 0xe)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64)
r6 = socket(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x403, 0x3, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xd}]}}}, @IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x50}}, 0x0) (async)
close(r5)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) (async)
sendmsg$inet(r7, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x24000000) (async)
setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000b}, 0x1c) (async)
sendto$inet6(r7, 0x0, 0x0, 0x4040054, 0x0, 0x0) (async, rerun: 64)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000000020601020000000000000000000000000500051b000000000900020073797a3000000000100003006269746d61703a706f727400140007800600054000000000060004400000000005000100070000000500040200000000"], 0x5c}}, 0x0) (async)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x298, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x80}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_NG_DREG={0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0x140, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x23}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0xe4, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xd4, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_NAME={0xd, 0x1, 'CLASSIFY\x00'}, @NFTA_TARGET_NAME={0x7, 0x1, 'HL\x00'}, @NFTA_TARGET_INFO={0x39, 0x3, "7f7a5aac16939bdd13e52fd1ceb6734b8fd247b61b449f229e7dd69366ea87160b004c3d7abaca741b466ba75054d0c37ca6e2fc68"}, @NFTA_TARGET_INFO={0x73, 0x3, "ff3540625705911e34cf259955ee84f11cc636acdad2dbf38e04791c52cf2a12a6579f1a695da3c6d1eac1b67cdb2466154b744a964e4b1b45e9f9fe46b8ab527e995374dc3573ea34e843f77ca77cf3b43ed52b31db9f08200cf06a70b12dd809bdfd0a726c475fcf64e90dca8f81"}]}}}]}, @NFTA_RULE_USERDATA={0xc1, 0x7, 0x1, 0x0, "fa80a9dd12052b34898926ae2bb1a74451a36f5f0cf0defd15ff8f0f9af109ac494fde77beeb41c16746c77eda76b7f439d8ffd27e12ba8557a468af4ca77a1a02f169754f3bb4972641f5a2e31b1d45a5474fa9420be77b82c424424446df8dba7d8dc6d49319c6a1a4adfb67d7007bf057eefc8302ce97034c615bd7bca815522a96090027b43fdb6fb0e9c6fe8cd43fb92fbde19bccc5e87eecd8ec7bc79349e5f579350ab5c4cc17bd8c04a7b03e7fd4ca52c481478c038e33a656"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x2c0}, 0x1, 0x0, 0x0, 0x4850}, 0x0)

0s ago: executing program 0 (id=9161):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000040)={@any, 0x3})
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x801, 0xfffffffd, 0x8000000, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0x2d, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3e}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x28, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x8001}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x0)
select(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000021000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x404c080}, 0x4008840)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000e29b00000008000300", @ANYRES32=r6, @ANYBLOB="080005"], 0x24}}, 0x0)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r7, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @remote, 0x4}, 0x1c)
recvmmsg(r7, &(0x7f00000002c0), 0x220, 0x100, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r5, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}}, 0x0)

kernel console output (not intermixed with test programs):

istent configuration, please check.
[  722.706473][T29103] netlink: 'syz.0.6396': attribute type 3 has an invalid length.
[  722.710097][T29103] netlink: 'syz.0.6396': attribute type 3 has an invalid length.
[  722.745230][T29104] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6395'.
[  722.957493][T29114] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6399'.
[  723.473725][T29138] syzkaller0: entered promiscuous mode
[  723.481924][T29138] syzkaller0: entered allmulticast mode
[  723.688453][T17283] veth7: left promiscuous mode
[  723.765488][T29161] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6411'.
[  724.814057][T29217] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  724.879905][T29224] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  724.899391][T29229] netlink: 'syz.2.6431': attribute type 3 has an invalid length.
[  724.983393][T29234] netlink: 'syz.1.6433': attribute type 15 has an invalid length.
[  725.002351][T29234] netlink: 'syz.1.6433': attribute type 15 has an invalid length.
[  725.006512][T17283] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0
[  725.011374][T17283] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0
[  725.016900][T17283] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0
[  725.021177][T17283] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0
[  725.103541][T29236] netlink: 'syz.0.6432': attribute type 31 has an invalid length.
[  725.362490][T29252] syzkaller1: entered promiscuous mode
[  725.373871][T29252] syzkaller1: entered allmulticast mode
[  726.008537][T29296] rdma_op ffff88801d5439f0 conn xmit_rdma 0000000000000000
[  726.420246][T29323] sctp: [Deprecated]: syz.0.6454 (pid 29323) Use of int in max_burst socket option deprecated.
[  726.420246][T29323] Use struct sctp_assoc_value instead
[  726.708416][T29335] syzkaller0: left promiscuous mode
[  726.710528][T29335] syzkaller0: left allmulticast mode
[  726.783460][T29342] netlink: 'syz.0.6460': attribute type 1 has an invalid length.
[  726.991025][T29350] __nla_validate_parse: 24 callbacks suppressed
[  726.991047][T29350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6461'.
[  727.108838][T29355] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6463'.
[  727.114037][T29356] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6463'.
[  727.121803][T29357] netlink: 'syz.2.6463': attribute type 6 has an invalid length.
[  727.131548][T29357] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6463'.
[  727.174095][T29357] bridge0: port 2(bridge_slave_1) entered disabled state
[  727.179809][T29357] bridge0: port 1(bridge_slave_0) entered disabled state
[  727.496332][T29371] netlink: 'syz.1.6466': attribute type 1 has an invalid length.
[  727.518778][T29371] bond0: option mode: invalid value (8)
[  727.522661][T29371] bond0 (unregistering): Released all slaves
[  727.556627][T29372] : renamed from dummy0
[  727.745959][T29382] tipc: Can't bind to reserved service type 2
[  727.896406][T29384] bond0: option miimon: invalid value (18446744073357230079)
[  727.899554][T29384] bond0: option miimon: allowed values 0 - 2147483647
[  727.909120][T29384] bond0 (unregistering): Released all slaves
[  728.090524][T29398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6474'.
[  728.225381][T29412] 8021q: VLANs not supported on ip6gre0
[  728.364077][T29414] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6477'.
[  728.542229][T29426] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6478'.
[  728.614708][T29426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6478'.
[  728.638847][T29426] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6478'.
[  728.655048][T29429] ip6t_REJECT: ECHOREPLY is not supported
[  728.734813][   T54] block nbd17: Receive control failed (result -32)
[  728.889554][T29439] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6484'.
[  729.223581][T29453] netlink: 'syz.1.6488': attribute type 1 has an invalid length.
[  729.256187][T29453] macvtap2: entered allmulticast mode
[  729.377643][T29463] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  729.540645][T29474] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  730.216731][T29493] geneve4: entered promiscuous mode
[  730.228039][T17283] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 38875 - 0
[  730.234829][T17283] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 38875 - 0
[  730.247701][T17283] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 38875 - 0
[  730.250663][T17283] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 38875 - 0
[  732.093216][T29541] __nla_validate_parse: 12 callbacks suppressed
[  732.093872][T29541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6514'.
[  732.228028][T29543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6514'.
[  732.512796][T29554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6515'.
[  732.523167][T29554] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  732.531020][T29554] batman_adv: batadv0: Removing interface: batadv_slave_0
[  732.577335][T29554] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  732.581409][T29554] batman_adv: batadv0: Removing interface: batadv_slave_1
[  732.752664][T29569] netlink: 'syz.0.6521': attribute type 8 has an invalid length.
[  732.785380][T29567] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  732.887329][T29579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6521'.
[  732.908793][T29580] syzkaller0: entered promiscuous mode
[  732.920022][T29580] syzkaller0: entered allmulticast mode
[  732.936773][T29581] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  733.093191][T29596] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6526'.
[  733.147410][T29598] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6526'.
[  733.961751][T29648] syzkaller0: entered promiscuous mode
[  733.963816][T29648] syzkaller0: entered allmulticast mode
[  739.105313][T29662] Cannot find add_set index 2 as target
[  739.118464][T29662] syzkaller1: entered promiscuous mode
[  739.120391][T29662] syzkaller1: entered allmulticast mode
[  739.140866][T29664] Cannot find add_set index 2 as target
[  739.281501][T29669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6543'.
[  739.477652][T29677] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6544'.
[  740.034830][T29695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6548'.
[  740.248513][T29707] netlink: 'syz.0.6551': attribute type 2 has an invalid length.
[  740.343474][T29710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6550'.
[  740.376307][T29710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6550'.
[  740.488956][T29716] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6553'.
[  741.007598][T29724] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6555'.
[  741.015244][T29724] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0
[  741.312324][T29737] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6557'.
[  741.396783][T29745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6561'.
[  741.555067][T29755] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  741.675672][T29768] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  741.689903][T29768] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6567'.
[  742.003706][T29786] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  742.014355][T29786] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  742.024333][T29786] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  748.187897][ T1376] ieee802154 phy1 wpan1: encryption failed: -22
[  762.130846][T29812] __nla_validate_parse: 7 callbacks suppressed
[  762.130860][T29812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6580'.
[  762.140469][T29812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6580'.
[  762.200114][T29822] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6578'.
[  762.213636][T29822] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6578'.
[  762.271723][T29827] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6583'.
[  762.280932][T29827] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6583'.
[  762.289911][T29829] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6582'.
[  762.291226][T29827] netlink: 31 bytes leftover after parsing attributes in process `syz.1.6583'.
[  762.310426][T29829] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6582'.
[  762.970592][T29855] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  762.982605][T29861] netlink: 'syz.1.6591': attribute type 3 has an invalid length.
[  762.997785][T29861] netlink: 'syz.1.6591': attribute type 3 has an invalid length.
[  763.060020][T29871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6594'.
[  763.622001][T29899] tipc: Resetting bearer <eth:team0>
[  763.628817][T29899] tipc: Resetting bearer <eth:team0>
[  763.652434][T29897] bond18: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  763.658395][T29897] bond18 (unregistering): Released all slaves
[  763.706945][T29903] netlink: 'syz.1.6602': attribute type 3 has an invalid length.
[  763.709930][T29903] netlink: 'syz.1.6602': attribute type 1 has an invalid length.
[  763.713275][T29901] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[  763.734053][T29903] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  763.748269][T29903] netlink: 'syz.1.6602': attribute type 3 has an invalid length.
[  763.751313][T29903] netlink: 'syz.1.6602': attribute type 3 has an invalid length.
[  764.093184][T29897] netlink: 'syz.2.6600': attribute type 15 has an invalid length.
[  765.301184][T29948] xt_CT: You must specify a L4 protocol and not use inversions on it
[  765.497783][T29954] netlink: 'syz.2.6613': attribute type 4 has an invalid length.
[  766.099501][T29989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  766.112298][T29991] syzkaller0: Caught tx_queue_len zero misconfig
[  766.187723][T29999] syzkaller0: Caught tx_queue_len zero misconfig
[  766.756111][T30025] netlink: 'syz.2.6638': attribute type 1 has an invalid length.
[  766.764046][T30025] netlink: 'syz.2.6638': attribute type 2 has an invalid length.
[  767.011638][T30036] IPVS: Scheduler module ip_vs_sip not found
[  767.182620][T30046] bond15: option arp_interval: invalid value (18446744073709551615)
[  767.188732][T30046] bond15: option arp_interval: allowed values 0 - 2147483647
[  767.198184][T30046] bond15 (unregistering): Released all slaves
[  767.269226][T30044] __nla_validate_parse: 27 callbacks suppressed
[  767.269238][T30044] netlink: 7 bytes leftover after parsing attributes in process `syz.1.6645'.
[  767.518539][    C1] sched: DL replenish lagged too much
[  767.551401][T30068] syzkaller0: entered promiscuous mode
[  767.583246][T30068] syzkaller0: entered allmulticast mode
[  767.743314][T30082] bridge0: port 2(bridge_slave_1) entered blocking state
[  767.746028][T30082] bridge0: port 2(bridge_slave_1) entered listening state
[  767.748706][T30082] bridge0: port 1(bridge_slave_0) entered blocking state
[  767.750980][T30082] bridge0: port 1(bridge_slave_0) entered listening state
[  767.808923][T30086] ip_tables: iptables: counters copy to user failed while replacing table
[  767.832801][T30082] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  767.858783][T30089] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6656'.
[  767.881665][T30082] syzkaller1: entered promiscuous mode
[  767.883545][T30082] syzkaller1: entered allmulticast mode
[  767.891619][T30082] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6654'.
[  767.924591][T30091] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6655'.
[  767.998809][T30093] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6657'.
[  768.171966][T30100] xt_CT: You must specify a L4 protocol and not use inversions on it
[  768.342786][T30110] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6664'.
[  768.364131][T30110] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6664'.
[  768.682374][T30123] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  768.837926][T30127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6671'.
[  769.020408][T30133] IPVS: Unknown mcast interface: lo
[  769.051206][T30136] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6675'.
[  769.056791][T30135] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6675'.
[  769.411511][T30159] ipt_rpfilter: unknown options
[  769.913868][T30185] validate_nla: 4 callbacks suppressed
[  769.913879][T30185] netlink: 'syz.1.6692': attribute type 6 has an invalid length.
[  770.103180][T30203] xt_CT: You must specify a L4 protocol and not use inversions on it
[  770.571292][T30243] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0
[  770.597846][T30245] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  771.013731][T30266] netlink: 'syz.1.6712': attribute type 3 has an invalid length.
[  771.202353][T30272] geneve0: left promiscuous mode
[  771.229614][T30278] netlink: 'syz.0.6717': attribute type 23 has an invalid length.
[  771.233036][T30278] netlink: 'syz.0.6717': attribute type 21 has an invalid length.
[  771.237038][T30278] IPv6: NLM_F_CREATE should be specified when creating new route
[  771.407455][T30285] geneve4: entered promiscuous mode
[  771.922294][T30312] xt_HMARK: proto mask must be zero with L3 mode
[  771.923670][T30308] netlink: 'syz.0.6726': attribute type 5 has an invalid length.
[  771.934838][T30308] netlink: 'syz.0.6726': attribute type 4 has an invalid length.
[  772.435711][T30329] syzkaller0: entered promiscuous mode
[  772.448607][T30329] syzkaller0: entered allmulticast mode
[  772.616316][T30340] __nla_validate_parse: 27 callbacks suppressed
[  772.616331][T30340] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6734'.
[  772.628577][T30343] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6734'.
[  772.775644][T30348] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6736'.
[  772.786514][T30348] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6736'.
[  773.023875][T30355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6738'.
[  773.031710][T30355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6738'.
[  773.043969][T30355] netlink: 51 bytes leftover after parsing attributes in process `syz.0.6738'.
[  773.353794][T15274] tipc: Resetting bearer <eth:team0>
[  773.397368][T30376] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  773.723344][T30391] netlink: 'syz.0.6751': attribute type 1 has an invalid length.
[  773.759291][T30391] nft_compat: unsupported protocol 0
[  774.162856][T30404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6755'.
[  774.318986][T30418] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6760'.
[  774.369329][T30421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6759'.
[  774.489937][T30426] netlink: 'syz.1.6762': attribute type 3 has an invalid length.
[  774.496511][T30426] netlink: 'syz.1.6762': attribute type 3 has an invalid length.
[  774.563427][T30431] tipc: Resetting bearer <eth:team0>
[  774.593208][T30431] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  774.598500][T30433] netlink: 'syz.1.6764': attribute type 3 has an invalid length.
[  774.605339][T30431] tipc: Resetting bearer <eth:team0>
[  774.615890][T30431] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  774.771444][T30440] ip_tables: iptables: counters copy to user failed while replacing table
[  774.932701][T30445] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  775.783770][T30501] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  775.811906][T30501] validate_nla: 1 callbacks suppressed
[  775.811916][T30501] netlink: 'syz.0.6780': attribute type 3 has an invalid length.
[  775.830482][T30501] netlink: 'syz.0.6780': attribute type 3 has an invalid length.
[  775.908055][T30513] netlink: 'syz.1.6781': attribute type 1 has an invalid length.
[  775.910778][T30513] netlink: 'syz.1.6781': attribute type 2 has an invalid length.
[  775.978516][T30514] netlink: 'syz.2.6782': attribute type 1 has an invalid length.
[  775.999164][T30514] bond18: entered promiscuous mode
[  776.001372][T30514] 8021q: adding VLAN 0 to HW filter on device bond18
[  776.030392][T30514] 8021q: adding VLAN 0 to HW filter on device bond18
[  776.032876][T30514] bond18: (slave gre4): The slave device specified does not support setting the MAC address
[  776.040089][T30514] bond18: (slave gre4): Setting fail_over_mac to active for active-backup mode
[  776.048766][T30514] bond18: (slave gre4): making interface the new active one
[  776.051018][T30514] gre4: entered promiscuous mode
[  776.054030][T30514] bond18: (slave gre4): Enslaving as an active interface with an up link
[  776.480523][T30538] nbd: socks must be embedded in a SOCK_ITEM attr
[  776.742897][T30557] Cannot find del_set index 0 as target
[  776.761159][T30558] netlink: 'syz.2.6792': attribute type 1 has an invalid length.
[  776.774316][T30553] vlan5: entered promiscuous mode
[  776.827354][T30561] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  777.319613][T30572] syzkaller0: entered promiscuous mode
[  777.321440][T30572] syzkaller0: entered allmulticast mode
[  777.693325][T30595] netlink: 'syz.0.6808': attribute type 11 has an invalid length.
[  777.713596][T30595] __nla_validate_parse: 34 callbacks suppressed
[  777.713611][T30595] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6808'.
[  777.841036][T30606] netlink: 'syz.1.6811': attribute type 1 has an invalid length.
[  777.844797][T30606] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6811'.
[  777.977248][T30614] IPVS: set_ctl: invalid protocol: 137 10.1.1.0:20000
[  778.006777][T30617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6814'.
[  778.023227][T30617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6814'.
[  778.066895][T30617] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6814'.
[  778.074993][T30621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6817'.
[  778.203147][T30634] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  778.415382][T30644] netlink: 'syz.2.6822': attribute type 30 has an invalid length.
[  778.511772][T30643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6822'.
[  778.776897][T30667] xt_CT: You must specify a L4 protocol and not use inversions on it
[  778.874373][T30669] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6829'.
[  778.980988][T30674] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6832'.
[  779.238605][T30681] netlink: 840 bytes leftover after parsing attributes in process `syz.0.6833'.
[  779.318735][T30680] tipc: Resetting bearer <eth:team0>
[  779.337399][T30680] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  779.465704][T30690] xt_CT: You must specify a L4 protocol and not use inversions on it
[  779.692823][T30705] netlink: 'syz.0.6844': attribute type 3 has an invalid length.
[  779.801666][T30704] syzkaller0: entered promiscuous mode
[  779.808252][T30704] syzkaller0: entered allmulticast mode
[  779.908873][T30714] xt_hashlimit: size too large, truncated to 1048576
[  780.657793][T30769] xt_CT: You must specify a L4 protocol and not use inversions on it
[  781.431047][T30788] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  781.450225][T30793] netlink: 'syz.0.6865': attribute type 3 has an invalid length.
[  781.456507][T30800] netlink: 'syz.2.6868': attribute type 1 has an invalid length.
[  781.467072][T30793] netlink: 'syz.0.6865': attribute type 3 has an invalid length.
[  784.315041][T30800] 8021q: adding VLAN 0 to HW filter on device bond20
[  784.342844][T30815] __nla_validate_parse: 9 callbacks suppressed
[  784.342856][T30815] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6870'.
[  784.397872][T30802] bond16: (slave veth0_to_bond): Releasing active interface
[  784.407543][T30802] bond20: (slave veth0_to_bond): making interface the new active one
[  784.412173][T30802] bond20: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  784.581359][T30827] xt_CT: You must specify a L4 protocol and not use inversions on it
[  784.759323][T30838] netlink: 71 bytes leftover after parsing attributes in process `syz.0.6877'.
[  785.216432][T30860] xt_CT: You must specify a L4 protocol and not use inversions on it
[  785.747708][T30875] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6888'.
[  785.953832][T30882] tipc: Trying to set illegal importance in message
[  786.202013][T30893] openvswitch: netlink: Key type 130 is out of range max 32
[  786.501994][T30906] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  786.681162][T30920] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6901'.
[  786.738489][T30922] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6902'.
[  786.741967][T30922] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6902'.
[  786.745813][T30923] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6902'.
[  786.748717][T30923] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6902'.
[  787.146746][T30962] netlink: 'syz.1.6914': attribute type 1 has an invalid length.
[  787.168516][T30962] 8021q: adding VLAN 0 to HW filter on device bond22
[  787.241465][T30965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6915'.
[  787.409212][T30970] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6916'.
[  787.761816][T30982] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  787.883607][T30979] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled!
[  788.161911][T31008] netlink: 'syz.2.6928': attribute type 1 has an invalid length.
[  790.932723][T31020] __nla_validate_parse: 2 callbacks suppressed
[  790.932734][T31020] netlink: 3560 bytes leftover after parsing attributes in process `syz.1.6936'.
[  791.026862][T31027] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  791.044167][T31031] Bluetooth: hci0: unsupported parameter 5135
[  791.047018][T31031] Bluetooth: hci0: invalid length 1, exp 2 for type 11
[  792.105019][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  793.144933][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  794.068669][T31037] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.6940'.
[  794.396782][T31057] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6947'.
[  794.672964][T31067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6950'.
[  794.713897][T31067] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6950'.
[  794.719460][T31067] netlink: 254 bytes leftover after parsing attributes in process `syz.0.6950'.
[  794.722410][T31067] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6950'.
[  794.955951][T31078] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6954'.
[  794.965907][T31080] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6954'.
[  794.988517][T31078] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6954'.
[  795.046560][T31083] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[  795.146706][T31085] tipc: Bearer <ib:veth1_to_team>: already 2 bearers with priority 10
[  795.153303][T31085] tipc: Bearer <ib:veth1_to_team>: trying with adjusted priority
[  795.164532][T31085] tipc: Enabling of bearer <ib:veth1_to_team> rejected, max 3 bearers permitted
[  795.173583][T31085] tipc: Disabling bearer <udp:syz0>
[  795.539258][T31107] xt_l2tp: unknown flags: e7
[  795.669043][T31112] macsec1: entered promiscuous mode
[  795.683400][T31112] macsec1: entered allmulticast mode
[  795.688291][T31118] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  795.933536][T31149] netlink: 'syz.2.6971': attribute type 3 has an invalid length.
[  795.988980][T31153] netlink: 'syz.2.6972': attribute type 21 has an invalid length.
[  796.454162][T31161] veth0: entered promiscuous mode
[  796.477351][T31160] veth0: left promiscuous mode
[  796.889391][T31187] netdevsim netdevsim2 netdevsim2: left allmulticast mode
[  797.108748][T31203] __nla_validate_parse: 131 callbacks suppressed
[  797.108762][T31203] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6981'.
[  797.201883][T31208] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6982'.
[  797.241747][T31208] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6982'.
[  797.257567][T31208] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6982'.
[  797.339557][T31203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6981'.
[  797.530451][T31220] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6987'.
[  797.540058][T31219] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6987'.
[  797.649005][T31234] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6990'.
[  797.699869][T31229] block nbd18: Unsupported socket: should be TCP or UNIX.
[  797.716106][T31230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6989'.
[  797.729422][T31241] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6990'.
[  798.114400][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  798.117153][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  798.142143][T31249] ieee802154 phy1 wpan1: encryption failed: -22
[  798.233413][T31255] syzkaller0: entered promiscuous mode
[  798.244955][T31255] syzkaller0: entered allmulticast mode
[  800.616046][T31229] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  800.853154][T31269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  800.908216][T31275] bridge13: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  801.493543][T31330] xt_TCPMSS: Only works on TCP SYN packets
[  801.747607][T31350] netlink: 'syz.1.7018': attribute type 1 has an invalid length.
[  801.935047][T31359] xt_CT: You must specify a L4 protocol and not use inversions on it
[  802.237861][T31378] )fl: entered promiscuous mode
[  802.265909][T31378] A link change request failed with some changes committed already. Interface 04)fl may have been left with an inconsistent configuration, please check.
[  802.686097][T31395] xt_ipcomp: unknown flags 1D
[  802.693853][T31393] xt_CT: You must specify a L4 protocol and not use inversions on it
[  803.812699][T31427] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  803.832678][T31427] 8021q: adding VLAN 0 to HW filter on device bond16
[  803.860719][T31427] 8021q: adding VLAN 0 to HW filter on device bond17
[  803.893954][T31427] 8021q: adding VLAN 0 to HW filter on device bond19
[  803.904889][T31427] virt_wifi0: entered allmulticast mode
[  803.914138][T31429] netlink: 'syz.2.7037': attribute type 3 has an invalid length.
[  803.918732][T31429] netlink: 'syz.2.7037': attribute type 3 has an invalid length.
[  804.172250][T31449] __nla_validate_parse: 7 callbacks suppressed
[  804.172267][T31449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7044'.
[  804.291397][T31451] syzkaller0: left promiscuous mode
[  804.298340][T31451] syzkaller0: left allmulticast mode
[  805.020319][T31462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  805.033461][T31462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  805.381556][T31467] netlink: 'syz.0.7048': attribute type 21 has an invalid length.
[  806.495012][T31507] : entered allmulticast mode
[  806.527310][T31513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7060'.
[  806.532779][T31513] netlink: 'syz.0.7060': attribute type 1 has an invalid length.
[  806.745055][T31526] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7062'.
[  806.860836][T31526] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7062'.
[  807.034535][T31537] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7065'.
[  807.037986][T31537] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7065'.
[  808.317278][T31552] netlink: 'syz.0.7070': attribute type 2 has an invalid length.
[  808.422127][T31554] netlink: 55 bytes leftover after parsing attributes in process `syz.0.7071'.
[  809.625591][ T1376] ieee802154 phy1 wpan1: encryption failed: -22
[  810.212647][T31560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7072'.
[  810.339329][T31570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7075'.
[  810.978705][T31609] syzkaller1: entered promiscuous mode
[  810.982174][T31609] syzkaller1: entered allmulticast mode
[  811.078081][T31621] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7087'.
[  811.097519][T31620] netlink: 'syz.2.7087': attribute type 1 has an invalid length.
[  811.110671][T31624] netlink: 'syz.1.7086': attribute type 1 has an invalid length.
[  811.129454][T31621] netlink: 'syz.2.7087': attribute type 4 has an invalid length.
[  811.149058][T31619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7087'.
[  811.267680][T31630] netlink: 'syz.2.7090': attribute type 7 has an invalid length.
[  811.271783][   T33] audit: type=1800 audit(1789681790.205:10): pid=31626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7088" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=11370 res=0 errno=0
[  811.328573][   T33] audit: type=1804 audit(1789681790.205:11): pid=31626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.7088" name=2F6E6577726F6F742F323233302F3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=11370 res=1 errno=0
[  811.512230][T31648] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7094'.
[  811.596436][T31655] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7097'.
[  811.604044][T31656] netlink: 'syz.1.7096': attribute type 1 has an invalid length.
[  811.644045][T31656] bond23: option mode: invalid value (11)
[  811.651185][T31656] bond23 (unregistering): Released all slaves
[  811.900448][T31678] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7101'.
[  811.923062][T31676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7101'.
[  811.943747][T31676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7101'.
[  811.968151][T31676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7101'.
[  812.381130][T31698] syzkaller0: left promiscuous mode
[  812.384819][T31698] syzkaller0: left allmulticast mode
[  813.348553][T31761] xt_hashlimit: size too large, truncated to 1048576
[  813.359196][T31761] xt_hashlimit: invalid interval
[  814.084135][T31792] macsec0: left promiscuous mode
[  814.097700][T31792] netlink: 'syz.2.7132': attribute type 9 has an invalid length.
[  814.780985][T31814] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  814.803146][T31814] netlink: 'syz.0.7138': attribute type 3 has an invalid length.
[  814.807869][T31814] netlink: 'syz.0.7138': attribute type 3 has an invalid length.
[  815.449060][T31829] xt_CT: You must specify a L4 protocol and not use inversions on it
[  815.461298][T31831] tipc: Resetting bearer <eth:team0>
[  815.583473][T23663] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  815.588048][T31831] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  815.603147][T31835] netlink: 'syz.1.7146': attribute type 3 has an invalid length.
[  815.612782][T31835] netlink: 'syz.1.7146': attribute type 3 has an invalid length.
[  815.741461][T31864] syzkaller0: entered promiscuous mode
[  815.743365][T31864] syzkaller0: entered allmulticast mode
[  816.154578][T23665] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  816.355515][T31910] Bluetooth: hci0: unsupported parameter 5161
[  816.358151][T31910] Bluetooth: hci0: unsupported parameter 8192
[  816.360769][T31910] Bluetooth: hci0: unsupported parameter 5161
[  816.362915][T31910] Bluetooth: hci0: unsupported parameter 8192
[  816.498004][T31912] __nla_validate_parse: 73 callbacks suppressed
[  816.498016][T31912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7159'.
[  816.513080][T31915] bond21: invalid NS target :: specified for addition
[  816.533507][T31915] bond21: option ns_ip6_target: invalid value (18446744073709551615)
[  816.668363][T31915] bond21 (unregistering): Released all slaves
[  816.822065][T31926] netlink: 112 bytes leftover after parsing attributes in process `syz.1.7162'.
[  816.827789][T31925] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7161'.
[  816.841693][T31926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  816.853652][T31928] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7163'.
[  816.856797][T31926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7162'.
[  816.952137][T31941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7166'.
[  817.250238][T31960] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  817.297969][T31975] netlink: 'syz.2.7175': attribute type 1 has an invalid length.
[  817.400372][T31975] veth17: entered allmulticast mode
[  817.411758][T31975] bond21: (slave veth17): Enslaving as an active interface with a down link
[  817.457503][T31974] veth19: entered allmulticast mode
[  817.461884][T31974] bond21: (slave veth19): Enslaving as an active interface with a down link
[  817.545380][T31988] nbd: must specify at least one socket
[  817.593329][T31988] bond22: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  817.611241][T31988] bond22 (unregistering): Released all slaves
[  817.803362][T32000] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7180'.
[  817.821740][T32000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7180'.
[  817.830589][T31859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  817.840377][T31859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  818.161381][T32016] xt_hashlimit: size too large, truncated to 1048576
[  818.228146][T32022] sctp: [Deprecated]: syz.0.7185 (pid 32022) Use of int in maxseg socket option.
[  818.228146][T32022] Use struct sctp_assoc_value instead
[  818.480778][T32039] netlink: 'syz.0.7190': attribute type 3 has an invalid length.
[  818.489973][T32039] netlink: 'syz.0.7190': attribute type 3 has an invalid length.
[  818.606518][T32048] netlink: 232 bytes leftover after parsing attributes in process `syz.1.7193'.
[  818.620413][T32048] netlink: 88 bytes leftover after parsing attributes in process `syz.1.7193'.
[  820.157502][T32107] tipc: Enabling of bearer <ib:veth1_to_team> rejected, failed to enable media
[  820.209230][T32112] tipc: Enabling of bearer <ib:veth1_to_team> rejected, failed to enable media
[  820.345822][T32121] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  820.386385][T32121] geneve7: entered promiscuous mode
[  820.522092][T32131] xt_CT: You must specify a L4 protocol and not use inversions on it
[  820.920699][T32144] netlink: 'syz.2.7214': attribute type 4 has an invalid length.
[  820.945343][T32144] netlink: 'syz.2.7214': attribute type 3 has an invalid length.
[  820.959647][T32144] netlink: 'syz.2.7214': attribute type 4 has an invalid length.
[  821.166562][T32154] netlink: 'syz.0.7218': attribute type 1 has an invalid length.
[  821.290064][T32164] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  821.707120][T32183] sctp: [Deprecated]: syz.2.7226 (pid 32183) Use of int in maxseg socket option.
[  821.707120][T32183] Use struct sctp_assoc_value instead
[  821.869274][T32192] netlink: 'syz.2.7228': attribute type 2 has an invalid length.
[  821.884158][T32192] netlink: 'syz.2.7228': attribute type 2 has an invalid length.
[  821.900068][ T6705] block nbd18: Receive control failed (result -32)
[  821.903688][   T54] block nbd18: Receive control failed (result -32)
[  821.922230][T32192] netlink: 'syz.2.7228': attribute type 2 has an invalid length.
[  822.021251][T32192] netlink: 'syz.2.7228': attribute type 2 has an invalid length.
[  822.027309][T32192] netlink: 'syz.2.7228': attribute type 2 has an invalid length.
[  822.030588][T32192] netlink: 'syz.2.7228': attribute type 2 has an invalid length.
[  822.151953][T32207] __nla_validate_parse: 10 callbacks suppressed
[  822.151964][T32207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7230'.
[  822.322779][T32190] 8021q: adding VLAN 0 to HW filter on device bond21
[  822.359023][T32190] 8021q: adding VLAN 0 to HW filter on device bond22
[  822.387630][T32201] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7230'.
[  822.438759][T17283] bond21: (slave veth17): link status definitely up, 10000 Mbps full duplex
[  822.449807][T17283] bond21: (slave veth19): link status definitely up, 10000 Mbps full duplex
[  822.458879][T17283] bond21: (slave veth17): making interface the new active one
[  822.468256][T17283] bond21: active interface up!
[  822.607615][T32222] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7233'.
[  822.615315][T32223] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7233'.
[  822.624286][T32222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7233'.
[  822.655880][T32223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7233'.
[  822.661115][T32228] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7233'.
[  822.694944][T32229] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7233'.
[  822.847244][T32245] xt_CT: You must specify a L4 protocol and not use inversions on it
[  822.886978][T32247] wireguard: wg0: Could not create IPv4 socket
[  822.927543][T32247] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7237'.
[  823.088375][T32255] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7242'.
[  823.219226][T32268] xt_CT: You must specify a L4 protocol and not use inversions on it
[  823.292329][   T33] audit: type=1800 audit(1789681802.225:12): pid=32272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7248" name="memory.events" dev="tmpfs" ino=12612 res=0 errno=0
[  823.412034][T32277] IPVS: Unknown mcast interface: vcan0
[  823.769375][T32287] xt_CT: You must specify a L4 protocol and not use inversions on it
[  824.946865][T32357] tipc: Disabling bearer <udp:syz2>
[  826.776578][T32453] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  827.142773][T32483] IPVS: persistence engine module ip_vs_pe_ not found
[  827.273604][T32488] __nla_validate_parse: 29 callbacks suppressed
[  827.273621][T32488] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7300'.
[  827.670880][T32498] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7304'.
[  827.730798][T32508] netlink: 880 bytes leftover after parsing attributes in process `syz.1.7307'.
[  827.743775][T32508] netlink: 880 bytes leftover after parsing attributes in process `syz.1.7307'.
[  827.803749][T32516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7308'.
[  827.827159][T32516] atomic_op ffff888030520198 conn xmit_atomic 0000000000000000
[  827.844111][T32522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7308'.
[  827.861078][T32525] atomic_op ffff88816f159998 conn xmit_atomic 0000000000000000
[  827.952477][T32537] Cannot find set identified by id 65534 to match
[  827.957903][T32539] veth0_to_bond: entered allmulticast mode
[  828.053203][T32543] macsec2: entered promiscuous mode
[  828.184563][    C0] bridge0: port 2(bridge_slave_1) entered forwarding state
[  828.186961][    C0] bridge0: topology change detected, propagating
[  828.189143][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  828.191527][    C0] bridge0: topology change detected, propagating
[  828.351732][T32574] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  828.449536][T32561] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7323'.
[  828.457252][T32561] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7323'.
[  829.020477][T32597] validate_nla: 68 callbacks suppressed
[  829.020494][T32597] netlink: 'syz.0.7332': attribute type 10 has an invalid length.
[  829.092765][T32598] netlink: 'syz.0.7332': attribute type 10 has an invalid length.
[  829.135895][T32606] netlink: 'syz.1.7334': attribute type 8 has an invalid length.
[  829.143309][T32606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7334'.
[  829.423728][T32618] xt_CT: You must specify a L4 protocol and not use inversions on it
[  829.581881][T32621] netlink: 'syz.2.7339': attribute type 3 has an invalid length.
[  829.591545][T32621] netlink: 'syz.2.7339': attribute type 3 has an invalid length.
[  829.821049][T32632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7342'.
[  829.975475][T32638] syzkaller0: entered promiscuous mode
[  829.979145][T32638] syzkaller0: entered allmulticast mode
[  830.357943][T32649] netlink: 'syz.1.7350': attribute type 18 has an invalid length.
[  830.367278][ T5666] netdevsim netdevsim1 netdevsim0: set [0, 2] type 1 family 0 port 4352 - 0
[  830.370794][ T5666] netdevsim netdevsim1 netdevsim1: set [0, 2] type 1 family 0 port 4352 - 0
[  830.377537][ T5666] netdevsim netdevsim1 netdevsim2: set [0, 2] type 1 family 0 port 4352 - 0
[  830.381188][ T5666] netdevsim netdevsim1 netdevsim3: set [0, 2] type 1 family 0 port 4352 - 0
[  830.432618][T32652] syzkaller0: entered promiscuous mode
[  830.434928][T32652] syzkaller0: entered allmulticast mode
[  830.711516][T32662] syzkaller1: entered promiscuous mode
[  830.713486][T32662] syzkaller1: entered allmulticast mode
[  831.059510][T32676] xt_hashlimit: size too large, truncated to 1048576
[  831.944844][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  832.027365][T32707] x_tables: duplicate underflow at hook 2
[  832.056395][T32707] IPVS: Unknown mcast interface: lo
[  832.076601][T32711] xt_CT: You must specify a L4 protocol and not use inversions on it
[  832.454883][T32726] __nla_validate_parse: 10 callbacks suppressed
[  832.454901][T32726] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7375'.
[  832.899703][T32739] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7378'.
[  832.932180][T32741] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7379'.
[  833.234976][T32756] netlink: 'syz.1.7383': attribute type 2 has an invalid length.
[  833.246543][T32756] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7383'.
[  833.261959][T32756] netlink: 112 bytes leftover after parsing attributes in process `syz.1.7383'.
[  833.375698][T32761] block nbd0: reconnected socket
[  833.378856][T32761] netlink: 'syz.2.7386': attribute type 9 has an invalid length.
[  833.382206][T32760] netlink: 'syz.2.7386': attribute type 9 has an invalid length.
[  833.608143][ T6705] block nbd0: Receive control failed (result -32)
[  834.026858][  T316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7393'.
[  834.593471][  T337] tipc: Bearer <eth:syzkaller0>: already 2 bearers with priority 10
[  834.606042][  T337] tipc: Bearer <eth:syzkaller0>: trying with adjusted priority
[  834.613525][  T337] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  834.623944][  T337] tipc: Bearer <eth:syzkaller0>: already 2 bearers with priority 10
[  834.628940][  T337] tipc: Bearer <eth:syzkaller0>: trying with adjusted priority
[  834.633495][  T337] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  834.640447][  T337] tipc: Bearer <eth:syzkaller0>: already 2 bearers with priority 10
[  834.643090][  T337] tipc: Bearer <eth:syzkaller0>: trying with adjusted priority
[  834.645990][  T337] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  834.649032][  T337] tipc: Bearer <eth:syzkaller0>: already 2 bearers with priority 10
[  834.652785][  T337] tipc: Bearer <eth:syzkaller0>: trying with adjusted priority
[  834.662294][  T337] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  834.671861][  T337] tipc: Bearer <eth:syzkaller0>: already 2 bearers with priority 10
[  834.680261][  T337] tipc: Bearer <eth:syzkaller0>: trying with adjusted priority
[  834.686551][  T337] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  834.690760][  T337] tipc: Bearer <eth:syzkaller0>: already 2 bearers with priority 10
[  834.701315][  T337] tipc: Bearer <eth:syzkaller0>: trying with adjusted priority
[  834.708725][  T337] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  834.730892][  T337] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7398'.
[  835.021749][  T360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7402'.
[  835.048505][  T370] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7401'.
[  835.052732][  T369] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7403'.
[  835.132813][  T371] netlink: 'syz.2.7403': attribute type 3 has an invalid length.
[  835.138589][  T371] netlink: 'syz.2.7403': attribute type 3 has an invalid length.
[  835.418790][  T396] xt_CT: You must specify a L4 protocol and not use inversions on it
[  835.420400][  T395] netlink: 'syz.2.7408': attribute type 8 has an invalid length.
[  835.880262][  T412] netlink: 'syz.1.7412': attribute type 1 has an invalid length.
[  835.885375][  T413] netlink: 'syz.1.7412': attribute type 1 has an invalid length.
[  836.836952][  T459] bridge0: entered allmulticast mode
[  837.403598][  T479] netlink: 'syz.1.7431': attribute type 1 has an invalid length.
[  837.506045][  T486] IPVS: length: 15 != 8
[  837.599246][  T490] __nla_validate_parse: 15 callbacks suppressed
[  837.599256][  T490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7436'.
[  837.609244][  T490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7436'.
[  837.643907][  T490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7436'.
[  837.647627][  T490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7436'.
[  837.705965][  T490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7436'.
[  837.709021][  T490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7436'.
[  837.716305][ T5645] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xd
[  837.723024][  T503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7438'.
[  837.748850][  T503] bond15: Invalid ad_actor_system MAC address.
[  837.751021][  T503] bond15: option ad_actor_system: invalid value (7)
[  837.758176][  T503] bond15 (unregistering): Released all slaves
[  838.090207][  T515] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7441'.
[  838.149951][  T515] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7441'.
[  838.205771][  T521] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  838.208952][  T521] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  838.286100][  T526] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7443'.
[  838.629388][  T547] vlan4: entered promiscuous mode
[  838.640264][  T547] bridge0: entered promiscuous mode
[  839.468392][  T584] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  839.708603][  T598] netlink: 'syz.0.7457': attribute type 1 has an invalid length.
[  839.830749][  T598] block nbd19: Unsupported socket: should be TCP or UNIX.
[  840.146731][  T614] netlink: 'syz.2.7462': attribute type 10 has an invalid length.
[  840.471691][  T628] xt_CT: You must specify a L4 protocol and not use inversions on it
[  840.524782][  T630] netlink: 'syz.2.7469': attribute type 4 has an invalid length.
[  840.534588][  T631] netlink: 'syz.2.7469': attribute type 4 has an invalid length.
[  841.013621][  T656] netlink: 'syz.1.7479': attribute type 7 has an invalid length.
[  841.030996][  T660] netlink: 'syz.2.7480': attribute type 54 has an invalid length.
[  841.051608][  T664] netlink: 'syz.2.7480': attribute type 54 has an invalid length.
[  844.251921][  T679] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  844.421284][  T740] __nla_validate_parse: 21 callbacks suppressed
[  844.421297][  T740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7501'.
[  844.436287][  T740] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7501'.
[  844.440778][  T740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7501'.
[  844.443541][  T740] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7501'.
[  844.572683][  T754] netlink: 'syz.0.7507': attribute type 4 has an invalid length.
[  844.578702][  T754] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7507'.
[  844.592446][  T754] syz_tun: entered allmulticast mode
[  844.606550][  T753] syz_tun: left allmulticast mode
[  844.897981][  T772] netlink: 'syz.1.7511': attribute type 16 has an invalid length.
[  844.906660][  T772] netlink: 'syz.1.7511': attribute type 17 has an invalid length.
[  844.933875][  T776] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7513'.
[  844.950941][  T772] tipc: Resetting bearer <eth:team0>
[  844.989463][  T772] veth0_to_bond: left allmulticast mode
[  845.018737][  T772] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  845.041010][  T782] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7511'.
[  845.082437][  T772] veth15: left promiscuous mode
[  845.085832][  T772] bond11: left promiscuous mode
[  845.087511][  T772] bond11: left allmulticast mode
[  845.090819][  T772] bond12: left promiscuous mode
[  845.097505][T23661] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  845.114182][  T772] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  845.123301][  T778] ip6gre0: left promiscuous mode
[  845.126046][  T778] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  845.165299][T23665] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  845.303346][  T795] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7516'.
[  845.605671][  T816] netlink: 'syz.1.7521': attribute type 4 has an invalid length.
[  845.624797][  T816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  845.865108][  T830] netlink: 'syz.1.7528': attribute type 4 has an invalid length.
[  845.868020][  T830] netlink: 3581 bytes leftover after parsing attributes in process `syz.1.7528'.
[  845.872524][  T830] netlink: 264 bytes leftover after parsing attributes in process `syz.1.7528'.
[  846.175236][  T846] netlink: 'syz.0.7535': attribute type 1 has an invalid length.
[  846.509911][  T868] tipc: Enabled bearer <eth:bridge_slave_0>, priority 10
[  846.621433][  T881] xt_cgroup: path and classid specified
[  846.852883][  T899] netlink: 'syz.0.7548': attribute type 5 has an invalid length.
[  846.854348][  T895] netlink: 'syz.0.7548': attribute type 5 has an invalid length.
[  848.106097][  T959] bond23: (slave 04): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  848.159651][  T959] bond23: (slave 04): Enslaving as an active interface with an up link
[  848.202255][  T959] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  848.557608][  T994] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  848.638228][  T993] netlink: 'syz.0.7565': attribute type 3 has an invalid length.
[  848.641026][  T993] netlink: 'syz.0.7565': attribute type 3 has an invalid length.
[  848.713566][ T1006] xt_hashlimit: size too large, truncated to 1048576
[  848.766379][ T1014] xt_hashlimit: size too large, truncated to 1048576
[  849.778767][ T1080] __nla_validate_parse: 71 callbacks suppressed
[  849.778787][ T1080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7580'.
[  850.069808][ T1110] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  850.201878][ T1116] xt_CT: You must specify a L4 protocol and not use inversions on it
[  850.272119][ T1125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7587'.
[  850.624513][ T1106] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7583'.
[  850.646136][ T1106] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7583'.
[  850.666496][ T1158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7590'.
[  850.669820][ T1106] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7583'.
[  850.678955][ T1158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7590'.
[  850.685975][ T1158] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7590'.
[  851.062013][ T1171] bond0: option min_links: invalid value (18446744073709551615)
[  851.070007][ T1171] bond0: option min_links: allowed values 0 - 2147483647
[  851.107838][ T1175] netlink: 'syz.2.7597': attribute type 1 has an invalid length.
[  851.113350][ T1175] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7597'.
[  851.137907][ T1175] bridge14: entered promiscuous mode
[  851.239183][ T1179] netlink: 760 bytes leftover after parsing attributes in process `syz.2.7597'.
[  851.279885][ T1178] bridge14: entered promiscuous mode
[  851.673963][ T1207] xt_CT: You must specify a L4 protocol and not use inversions on it
[  851.762100][ T1214] tc action pedit offset must be on 32 bit boundaries
[  851.768827][ T1214] tc action pedit offset must be on 32 bit boundaries
[  851.770921][ T1214] tc action pedit offset must be on 32 bit boundaries
[  851.773039][ T1214] tc action pedit offset must be on 32 bit boundaries
[  851.775201][ T1214] tc action pedit offset must be on 32 bit boundaries
[  851.777506][ T1214] tc action pedit offset must be on 32 bit boundaries
[  851.779868][ T1214] tc action pedit offset must be on 32 bit boundaries
[  851.782265][ T1214] tc action pedit offset must be on 32 bit boundaries
[  851.784787][ T1214] tc action pedit offset must be on 32 bit boundaries
[  851.787100][ T1214] tc action pedit offset must be on 32 bit boundaries
[  851.789258][ T1214] 0: reclassify loop, rule prio 0, protocol 800
[  853.076014][ T1243] xt_CT: You must specify a L4 protocol and not use inversions on it
[  853.380321][ T1255] sit3: entered promiscuous mode
[  853.711941][ T1268] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  854.147522][ T1282] xt_CT: You must specify a L4 protocol and not use inversions on it
[  854.490363][ T1272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  854.746167][ T1295] syzkaller1: entered promiscuous mode
[  854.754300][ T1295] syzkaller1: entered allmulticast mode
[  854.769161][ T1299] siw: device registration error -23
[  854.818805][ T1295] __nla_validate_parse: 42 callbacks suppressed
[  854.818822][ T1295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7631'.
[  854.831823][ T1299] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7632'.
[  854.956585][ T1306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7634'.
[  855.222130][ T1316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7636'.
[  855.268699][ T1316] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.7636'.
[  855.602613][ T1336] netlink: 848 bytes leftover after parsing attributes in process `syz.2.7641'.
[  855.613942][ T1336] netlink: 848 bytes leftover after parsing attributes in process `syz.2.7641'.
[  855.629560][ T1336] netlink: 848 bytes leftover after parsing attributes in process `syz.2.7641'.
[  855.639729][ T1336] netlink: 848 bytes leftover after parsing attributes in process `syz.2.7641'.
[  855.650040][ T1336] netlink: 848 bytes leftover after parsing attributes in process `syz.2.7641'.
[  856.131541][ T1369] openvswitch: netlink: EtherType 50a is less than min 600
[  856.162097][ T1369] tipc: Resetting bearer <eth:team0>
[  856.299939][ T1369] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  856.317428][T23661] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  856.321370][ T1375] netlink: 'syz.1.7650': attribute type 3 has an invalid length.
[  856.361466][ T1375] netlink: 'syz.1.7650': attribute type 3 has an invalid length.
[  856.500743][ T1382] bridge_slave_0: default FDB implementation only supports local addresses
[  856.693303][ T1391] netlink: 'syz.1.7653': attribute type 21 has an invalid length.
[  856.702932][ T1391] IPv6: NLM_F_CREATE should be specified when creating new route
[  857.152502][T23663] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  857.930462][ T1440] sctp: [Deprecated]: syz.2.7664 (pid 1440) Use of struct sctp_assoc_value in delayed_ack socket option.
[  857.930462][ T1440] Use struct sctp_sack_info instead
[  858.037090][ T1452] xt_CT: You must specify a L4 protocol and not use inversions on it
[  858.141124][ T1448] batadv0: entered promiscuous mode
[  858.154957][ T1448] batadv0: entered allmulticast mode
[  858.176137][ T1461] x_tables: duplicate underflow at hook 3
[  859.102330][ T1480] xt_CT: You must specify a L4 protocol and not use inversions on it
[  859.208905][ T1482] syzkaller1: entered promiscuous mode
[  859.224902][ T1482] syzkaller1: entered allmulticast mode
[  859.929319][ T1508] netlink: 'syz.1.7685': attribute type 1 has an invalid length.
[  859.932426][ T1508] __nla_validate_parse: 41 callbacks suppressed
[  859.932438][ T1508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7685'.
[  860.459706][ T1546] IPVS: sh: TCP 127.0.0.1:21 - no destination available
[  860.650991][ T1554] netlink: 'syz.1.7692': attribute type 12 has an invalid length.
[  860.658274][ T1557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7692'.
[  860.662549][ T1554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7692'.
[  860.670118][ T1555] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7692'.
[  860.690603][ T1554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7692'.
[  860.741325][ T1555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7692'.
[  861.112912][ T1584] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7698'.
[  861.492902][ T1597] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7702'.
[  861.576839][ T1594] netlink: 'syz.2.7701': attribute type 1 has an invalid length.
[  861.661203][ T1594] 8021q: adding VLAN 0 to HW filter on device bond24
[  861.684870][ T1603] bond24: (slave dummy0): making interface the new active one
[  861.691518][ T1603] bond24: (slave dummy0): Enslaving as an active interface with an up link
[  863.782041][ T1563] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  864.157902][ T1617] bond24: entered promiscuous mode
[  864.160614][ T1617] 8021q: adding VLAN 0 to HW filter on device bond24
[  864.165768][ T1621] sctp: [Deprecated]: syz.0.7708 (pid 1621) Use of struct sctp_assoc_value in delayed_ack socket option.
[  864.165768][ T1621] Use struct sctp_sack_info instead
[  864.351047][ T1638] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7715'.
[  864.358110][ T1638] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7715'.
[  864.396191][ T1631] 8021q: adding VLAN 0 to HW filter on device bond23
[  864.413606][ T1631] geneve0: entered promiscuous mode
[  864.461342][ T1631] netlink: 'syz.2.7714': attribute type 3 has an invalid length.
[  864.470276][ T1631] netlink: 'syz.2.7714': attribute type 3 has an invalid length.
[  864.966406][ T1678] __nla_validate_parse: 5 callbacks suppressed
[  864.966418][ T1678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7726'.
[  865.508831][ T1704] 8021q: VLANs not supported on ip_vti0
[  865.821824][ T1721] tipc: Resetting bearer <eth:team0>
[  865.922848][ T1721] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  865.939032][ T1726] netlink: 'syz.1.7732': attribute type 3 has an invalid length.
[  865.943109][T23665] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  865.957719][ T1726] netlink: 'syz.1.7732': attribute type 3 has an invalid length.
[  866.199809][ T1747] xt_CT: You must specify a L4 protocol and not use inversions on it
[  866.219640][ T1742] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7735'.
[  866.244662][T23665] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  866.445159][ T1756] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7738'.
[  867.243931][ T1777] xt_CT: You must specify a L4 protocol and not use inversions on it
[  867.356855][ T1779] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  867.399202][ T1779] syzkaller0: mtu less than device minimum
[  867.493008][ T1793] xt_l2tp: invalid flags combination: 8
[  867.706477][ T1796] tipc: Resetting bearer <eth:syzkaller0>
[  867.938335][ T1808] IPVS: stopping master sync thread 30243 ...
[  868.448930][ T1832] IPVS: sh: TCP 127.0.0.1:21 - no destination available
[  868.581248][ T1842] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7765'.
[  868.589949][ T1842] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7765'.
[  868.946273][ T1854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7770'.
[  869.011475][ T1857] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7771'.
[  869.081146][ T1860] ip6t_srh: unknown srh invflags 4000
[  869.203127][ T1869] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20000
[  869.208721][ T1870] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20000
[  869.281463][ T1874] netlink: 'syz.2.7776': attribute type 1 has an invalid length.
[  869.589207][ T1889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7783'.
[  869.594067][ T1888] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7781'.
[  869.756888][ T1895] xt_CT: You must specify a L4 protocol and not use inversions on it
[  869.800186][ T1891] syzkaller0: entered promiscuous mode
[  869.813744][ T1891] syzkaller0: entered allmulticast mode
[  870.289484][ T1912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7789'.
[  870.297381][ T1912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7789'.
[  870.541135][ T1922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7794'.
[  870.567517][ T1922] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7794'.
[  870.745923][ T1940] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7799'.
[  870.776085][ T1943] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7797'.
[  870.835156][ T1937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7798'.
[  870.854636][ T1937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7798'.
[  870.868532][ T1943] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7797'.
[  870.883830][ T1937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7798'.
[  871.068130][ T1376] ieee802154 phy1 wpan1: encryption failed: -22
[  871.079729][ T1954] xt_CT: You must specify a L4 protocol and not use inversions on it
[  871.433115][ T1961] netlink: 'syz.0.7803': attribute type 1 has an invalid length.
[  871.480906][ T1961] 8021q: adding VLAN 0 to HW filter on device bond15
[  871.656066][ T1975] sock: sock_timestamping_bind_phc: sock not bind to device
[  871.848244][ T1979] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  871.867128][ T1981] netlink: 'syz.0.7809': attribute type 3 has an invalid length.
[  871.872994][ T1981] netlink: 'syz.0.7809': attribute type 3 has an invalid length.
[  872.163265][ T2003] Bluetooth: hci0: unsupported parameter 5135
[  872.180835][ T2003] Bluetooth: hci0: unsupported parameter 8192
[  872.209957][ T2003] Bluetooth: hci0: unsupported parameter 5135
[  872.221708][ T2003] Bluetooth: hci0: unsupported parameter 8192
[  874.919285][ T2112] syzkaller1: entered promiscuous mode
[  874.921077][ T2112] syzkaller1: entered allmulticast mode
[  875.350179][ T2133] __nla_validate_parse: 75 callbacks suppressed
[  875.350195][ T2133] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7852'.
[  875.656523][ T2151] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7862'.
[  875.659518][ T2151] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7862'.
[  875.927809][ T2179] netlink: 'syz.0.7864': attribute type 4 has an invalid length.
[  878.695245][ T2158] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  879.139013][ T2216] netlink: 'syz.1.7876': attribute type 2 has an invalid length.
[  879.142096][ T2216] netlink: 'syz.1.7876': attribute type 2 has an invalid length.
[  879.612357][ T2232] netlink: 'syz.2.7882': attribute type 1 has an invalid length.
[  879.616716][ T2232] netlink: 'syz.2.7882': attribute type 2 has an invalid length.
[  879.630173][ T2232] x_tables: duplicate underflow at hook 2
[  879.715599][ T2235] netlink: 'syz.1.7883': attribute type 62 has an invalid length.
[  880.359365][ T2260] x_tables: duplicate underflow at hook 2
[  880.599118][ T2274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7894'.
[  880.731826][ T2278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7895'.
[  880.749873][ T2280] netlink: 'syz.1.7896': attribute type 11 has an invalid length.
[  880.813435][ T2281] tipc: Resetting bearer <eth:team0>
[  880.841702][ T2281] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  880.851424][ T2278] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7895'.
[  880.865934][T23662] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  881.077883][ T2285] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  881.113199][ T2285] netlink: 'syz.0.7897': attribute type 3 has an invalid length.
[  881.121657][ T2285] netlink: 'syz.0.7897': attribute type 3 has an invalid length.
[  881.164506][ T2291] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  881.178705][ T2285] netlink: 'syz.0.7897': attribute type 3 has an invalid length.
[  881.188935][ T2285] netlink: 'syz.0.7897': attribute type 3 has an invalid length.
[  881.374755][T23661] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  881.568554][ T2322] tcf_pedit_act: 7 callbacks suppressed
[  881.568595][ T2322] tc action pedit offset must be on 32 bit boundaries
[  881.574555][ T2322] tc action pedit offset must be on 32 bit boundaries
[  881.576995][ T2322] tc action pedit offset must be on 32 bit boundaries
[  881.579057][ T2322] tc action pedit offset must be on 32 bit boundaries
[  881.581116][ T2322] tc action pedit offset must be on 32 bit boundaries
[  881.583201][ T2322] tc action pedit offset must be on 32 bit boundaries
[  881.585331][ T2322] tc action pedit offset must be on 32 bit boundaries
[  881.587387][ T2322] tc action pedit offset must be on 32 bit boundaries
[  881.589406][ T2322] tc action pedit offset must be on 32 bit boundaries
[  881.591452][ T2322] tc action pedit offset must be on 32 bit boundaries
[  881.593508][ T2322] 0: reclassify loop, rule prio 0, protocol 800
[  881.609365][ T2317] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7904'.
[  882.095403][ T2332] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  882.232241][ T2334] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7912'.
[  882.247665][ T2334] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.7912'.
[  882.810721][ T2366] syzkaller1: entered promiscuous mode
[  882.817350][ T2366] syzkaller1: entered allmulticast mode
[  882.983583][ T2383] syzkaller0: entered promiscuous mode
[  882.993079][ T2383] syzkaller0: entered allmulticast mode
[  883.081738][ T2390] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7925'.
[  883.260218][ T2403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7930'.
[  883.263930][ T2401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7930'.
[  883.663328][ T2434] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7939'.
[  884.124904][ T2457] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  884.128821][ T2457] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  886.022110][ T2546] __nla_validate_parse: 8 callbacks suppressed
[  886.022124][ T2546] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7965'.
[  886.200155][ T2572] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7971'.
[  886.235112][ T2572] netlink: 'syz.2.7971': attribute type 4 has an invalid length.
[  886.241041][ T2572] netlink: 9 bytes leftover after parsing attributes in process `syz.2.7971'.
[  886.249390][ T2572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7971'.
[  886.464722][ T2576] tipc: Resetting bearer <eth:team0>
[  886.490682][ T2576] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  886.508352][T23661] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  886.520329][ T2576] netlink: 'syz.1.7972': attribute type 3 has an invalid length.
[  886.523224][ T2576] netlink: 'syz.1.7972': attribute type 3 has an invalid length.
[  886.797004][ T2589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7975'.
[  886.952236][ T2593] xt_CT: You must specify a L4 protocol and not use inversions on it
[  887.083717][ T2605] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7979'.
[  887.102741][ T2607] sctp: [Deprecated]: syz.0.7981 (pid 2607) Use of int in max_burst socket option deprecated.
[  887.102741][ T2607] Use struct sctp_assoc_value instead
[  887.212141][ T2614] netlink: 'syz.2.7982': attribute type 4 has an invalid length.
[  887.216776][ T2622] xt_CT: You must specify a L4 protocol and not use inversions on it
[  887.224329][ T2614] netlink: 17 bytes leftover after parsing attributes in process `syz.2.7982'.
[  887.225182][T23661] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  887.252938][ T2614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7982'.
[  887.267697][ T2614] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7982'.
[  890.267901][ T2634] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  890.533005][ T2681] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8001'.
[  890.542367][ T2681] syzkaller1: entered promiscuous mode
[  890.548518][ T2681] syzkaller1: entered allmulticast mode
[  891.257083][ T2719] netlink: 'syz.0.8008': attribute type 1 has an invalid length.
[  891.260402][ T2719] __nla_validate_parse: 3 callbacks suppressed
[  891.260417][ T2719] netlink: 92 bytes leftover after parsing attributes in process `syz.0.8008'.
[  891.483874][ T2704] tipc: Resetting bearer <eth:syzkaller0>
[  891.519257][ T2713] netlink: 'syz.2.8005': attribute type 3 has an invalid length.
[  891.527528][ T2713] netlink: 'syz.2.8005': attribute type 3 has an invalid length.
[  891.818638][ T2749] netlink: 3536 bytes leftover after parsing attributes in process `syz.0.8015'.
[  891.823286][ T2749] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8015'.
[  892.146598][ T2768] syzkaller0: left promiscuous mode
[  892.151115][ T2768] syzkaller0: left allmulticast mode
[  892.370909][ T2778] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8022'.
[  892.767865][ T2807] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8027'.
[  892.770920][ T2807] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8027'.
[  892.797702][ T2807] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8027'.
[  892.802376][ T2807] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8027'.
[  892.862079][ T2807] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8027'.
[  892.866178][ T2807] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8027'.
[  893.466320][ T2831] xt_CT: You must specify a L4 protocol and not use inversions on it
[  893.875771][ T2867] netlink: 'syz.2.8041': attribute type 1 has an invalid length.
[  893.910045][ T2867] bond25: option mode: invalid value (9)
[  893.921388][ T2867] bond25 (unregistering): Released all slaves
[  894.813854][ T2968] syzkaller0: Caught tx_queue_len zero misconfig
[  895.326807][ T3007] IPVS: set_ctl: invalid protocol: 26467 117.112.0.0:0
[  895.342594][ T3010] tipc: Resetting bearer <eth:team0>
[  895.342829][ T3007] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  895.434006][ T3010] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  895.445046][T23662] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  895.604649][T23662] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  895.747551][ T3030] IPVS: length: 15 != 3496504344
[  898.318469][ T3010] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  898.921301][ T3075] __nla_validate_parse: 106 callbacks suppressed
[  898.921316][ T3075] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8084'.
[  899.709427][ T3116] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8090'.
[  899.967821][ T3120] bond16: entered promiscuous mode
[  899.970996][ T3120] 8021q: adding VLAN 0 to HW filter on device bond16
[  900.678121][ T3160] xt_hl: Unknown Hop Limit match mode: 4
[  900.688181][ T3160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8097'.
[  900.925690][ T3171] netlink: 184 bytes leftover after parsing attributes in process `syz.1.8100'.
[  900.935014][ T3171] netlink: 5 bytes leftover after parsing attributes in process `syz.1.8100'.
[  900.951516][ T3172] netlink: 184 bytes leftover after parsing attributes in process `syz.1.8100'.
[  900.969294][ T3172] netlink: 5 bytes leftover after parsing attributes in process `syz.1.8100'.
[  900.998265][ T3142] infiniband syz0: set down
[  901.015064][ T3142] infiniband syz0: added bond0
[  901.117132][ T3142] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  901.141227][ T3142] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  901.156115][ T3142] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  901.450575][ T3142] RDS/IB: syz0: added
[  901.468291][ T3142] smc: adding ib device syz0 with port count 1
[  901.474128][ T3142] smc:    ib device syz0 port 1 has no pnetid
[  901.828192][ T3187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8105'.
[  901.968883][ T3185] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8104'.
[  902.232989][ T3196] syzkaller0: entered promiscuous mode
[  902.245647][ T3196] syzkaller0: entered allmulticast mode
[  902.677947][ T3205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8112'.
[  907.492100][ T3219] netlink: 'syz.2.8116': attribute type 1 has an invalid length.
[  907.543084][ T3219] bond25: entered promiscuous mode
[  907.546789][ T3219] 8021q: adding VLAN 0 to HW filter on device bond25
[  907.612988][ T3224] netlink: 'syz.1.8117': attribute type 1 has an invalid length.
[  907.641676][ T3219] 8021q: adding VLAN 0 to HW filter on device bond25
[  907.668170][ T3219] bond25: (slave ipip2): The slave device specified does not support setting the MAC address
[  907.696944][ T3219] bond25: (slave ipip2): Setting fail_over_mac to active for active-backup mode
[  907.804313][ T3219] bond25: (slave ipip2): making interface the new active one
[  907.817410][ T3219] ipip2: entered promiscuous mode
[  907.869313][ T3219] bond25: (slave ipip2): Enslaving as an active interface with an up link
[  908.072475][ T3235] tipc: Enabling of bearer <eth:lo> rejected, max 3 bearers permitted
[  908.110739][ T3235] __nla_validate_parse: 1 callbacks suppressed
[  908.110763][ T3235] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8121'.
[  908.121455][ T3235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8121'.
[  908.128365][ T3235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8121'.
[  908.258965][ T3246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8124'.
[  908.290693][ T3250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8123'.
[  908.453648][    C0] vcan0: j1939_tp_rxtimer: 0xffff888115ca1400: rx timeout, send abort
[  908.458702][ T3255] netlink: 588 bytes leftover after parsing attributes in process `syz.2.8125'.
[  908.631875][ T3259] xt_CT: You must specify a L4 protocol and not use inversions on it
[  909.137927][ T3294] netlink: 2732 bytes leftover after parsing attributes in process `syz.0.8132'.
[  909.150658][ T3294] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8132'.
[  910.125669][ T3324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8138'.
[  910.260133][ T3329] netlink: 'syz.2.8140': attribute type 3 has an invalid length.
[  910.429203][ T3340] tipc: Resetting bearer <eth:team0>
[  910.516936][ T3340] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  910.527427][T23662] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  910.546802][ T3340] netlink: 'syz.1.8143': attribute type 3 has an invalid length.
[  910.557565][ T3340] netlink: 'syz.1.8143': attribute type 3 has an invalid length.
[  910.574716][ T3341] netlink: 'syz.1.8143': attribute type 3 has an invalid length.
[  910.578626][ T3341] netlink: 'syz.1.8143': attribute type 3 has an invalid length.
[  910.985306][T23661] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  911.293057][ T3376] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8154'.
[  911.366668][ T3380] netlink: 'syz.1.8155': attribute type 30 has an invalid length.
[  911.570408][ T3393] IPVS: sh: TCP 127.0.0.1:21 - no destination available
[  911.662503][ T3401] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[  911.774400][ T3401] sch_tbf: burst 10 is lower than device syzkaller0 mtu (65589) !
[  911.951044][   T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  911.966144][   T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  912.000411][   T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  912.010938][   T12] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  912.137858][ T3425] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[  912.219596][ T3428] syzkaller0: entered promiscuous mode
[  912.221938][ T3428] syzkaller0: entered allmulticast mode
[  912.271573][ T3425] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  912.589445][ T3449] IPVS: set_ctl: invalid protocol: 33 172.20.20.30:20003
[  913.139652][ T3469] __nla_validate_parse: 11 callbacks suppressed
[  913.139664][ T3469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8179'.
[  913.158079][ T3469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8179'.
[  913.328110][ T3468] tipc: Resetting bearer <eth:team0>
[  913.463167][ T3468] bridge0: port 1(1x9) entered disabled state
[  913.543588][ T3479] xt_CT: You must specify a L4 protocol and not use inversions on it
[  914.987379][   T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  914.998802][   T13] netdevsim netdevsim1 netdevsim0: unset [0, 1] type 1 family 0 port 256 - 0
[  915.005563][   T13] netdevsim netdevsim1 netdevsim0: unset [0, 2] type 1 family 0 port 4352 - 0
[  915.013360][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  915.020794][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  915.042061][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 2] type 2 family 0 port 38875 - 0
[  915.053930][   T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  915.063958][   T13] netdevsim netdevsim1 netdevsim1: unset [0, 1] type 1 family 0 port 256 - 0
[  915.076918][   T13] netdevsim netdevsim1 netdevsim1: unset [0, 2] type 1 family 0 port 4352 - 0
[  915.087298][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  915.094892][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  915.109238][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 2] type 2 family 0 port 38875 - 0
[  915.119818][   T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  915.128425][   T13] netdevsim netdevsim1 netdevsim2: unset [0, 1] type 1 family 0 port 256 - 0
[  915.140167][   T13] netdevsim netdevsim1 netdevsim2: unset [0, 2] type 1 family 0 port 4352 - 0
[  915.147246][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  915.154960][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  915.164166][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 2] type 2 family 0 port 38875 - 0
[  915.198483][ T3502] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8185'.
[  915.237521][   T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  915.248392][   T13] netdevsim netdevsim1 netdevsim3: unset [0, 1] type 1 family 0 port 256 - 0
[  915.260484][   T13] netdevsim netdevsim1 netdevsim3: unset [0, 2] type 1 family 0 port 4352 - 0
[  915.267768][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  915.274213][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  915.284941][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 2] type 2 family 0 port 38875 - 0
[  915.788672][ T3524] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  915.793634][ T3533] tipc: Resetting bearer <eth:syz_tun>
[  915.799250][ T3533] tipc: Resetting bearer <eth:syz_tun>
[  915.826927][ T3533] tipc: Resetting bearer <eth:syzkaller0>
[  915.829623][ T3533] tipc: Resetting bearer <eth:syzkaller0>
[  915.841687][ T3538] tipc: Resetting bearer <eth:syz_tun>
[  915.857594][ T3538] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  915.882360][ T3524] netlink: 316 bytes leftover after parsing attributes in process `syz.2.8193'.
[  915.891371][ T3524] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8193'.
[  915.998659][ T3545] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8198'.
[  916.093882][ T3548] syzkaller0: left promiscuous mode
[  916.112646][ T3548] syzkaller0: left allmulticast mode
[  916.120768][ T3548] tipc: Resetting bearer <eth:syzkaller0>
[  916.183237][ T3556] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8204'.
[  916.203672][ T3556] syzkaller1: entered promiscuous mode
[  916.215407][ T3556] syzkaller1: entered allmulticast mode
[  916.652958][ T3569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8208'.
[  917.788722][ T3623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8222'.
[  917.804731][ T3623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8222'.
[  918.143436][ T3649] sctp: [Deprecated]: syz.2.8228 (pid 3649) Use of int in max_burst socket option deprecated.
[  918.143436][ T3649] Use struct sctp_assoc_value instead
[  918.333054][ T3655] xt_TPROXY: Can be used only with -p tcp or -p udp
[  918.560592][ T3660] ipt_REJECT: TCP_RESET invalid for non-tcp
[  918.714592][ T3660] __nla_validate_parse: 10 callbacks suppressed
[  918.714612][ T3660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8233'.
[  919.034159][ T3689] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8244'.
[  919.044051][ T3689] x_tables: duplicate underflow at hook 1
[  919.050474][ T3689] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.8244'.
[  919.577878][ T3720] sctp: [Deprecated]: syz.0.8254 (pid 3720) Use of struct sctp_assoc_value in delayed_ack socket option.
[  919.577878][ T3720] Use struct sctp_sack_info instead
[  919.585746][ T3720] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8254'.
[  919.771495][ T3735] netlink: 'syz.0.8259': attribute type 5 has an invalid length.
[  919.951031][ T3741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8262'.
[  919.955937][ T3739] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8261'.
[  919.960075][ T3741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8262'.
[  921.342627][ T3790] sctp: [Deprecated]: syz.2.8274 (pid 3790) Use of int in maxseg socket option.
[  921.342627][ T3790] Use struct sctp_assoc_value instead
[  921.361856][ T3795] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8275'.
[  921.387851][ T3795] netlink: 'syz.0.8275': attribute type 2 has an invalid length.
[  921.403307][ T3795] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8275'.
[  921.408498][ T3795] netlink: 'syz.0.8275': attribute type 2 has an invalid length.
[  921.418035][ T3795] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8275'.
[  921.608742][ T3799] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  921.626648][ T3799] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  921.771866][ T3809] netlink: 'syz.0.8278': attribute type 1 has an invalid length.
[  921.876207][ T3809] 8021q: adding VLAN 0 to HW filter on device bond17
[  922.133619][ T3829] xt_HMARK: proto mask must be zero with L3 mode
[  922.146070][ T3828] xt_HMARK: proto mask must be zero with L3 mode
[  922.152550][ T3828] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  922.203106][ T3828] 8021q: adding VLAN 0 to HW filter on device bond25
[  922.772525][ T3867] tipc: Resetting bearer <eth:syz_tun>
[  922.813844][ T3867] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  922.836415][ T3877] xt_CT: You must specify a L4 protocol and not use inversions on it
[  922.839019][ T3870] netlink: 'syz.0.8296': attribute type 3 has an invalid length.
[  922.858656][ T3870] netlink: 'syz.0.8296': attribute type 3 has an invalid length.
[  922.901379][ T3879] tipc: Resetting bearer <eth:syzkaller0>
[  923.033692][ T3891] netlink: 'syz.0.8301': attribute type 1 has an invalid length.
[  923.047114][ T3885] netlink: 'syz.0.8301': attribute type 2 has an invalid length.
[  923.060781][ T3885] syzkaller0: left promiscuous mode
[  923.067833][ T3885] syzkaller0: left allmulticast mode
[  923.073128][ T3885] tipc: Resetting bearer <eth:syzkaller0>
[  923.315781][ T3907] ip_tables: iptables: counters copy to user failed while replacing table
[  923.892687][ T3938] __nla_validate_parse: 7 callbacks suppressed
[  923.892705][ T3938] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8315'.
[  924.137692][ T3946] syzkaller0: entered promiscuous mode
[  924.140139][ T3946] syzkaller0: entered allmulticast mode
[  924.463584][ T3975] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8325'.
[  924.478898][ T3975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8325'.
[  924.486308][ T3975] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  924.514477][ T3975] netlink: 84 bytes leftover after parsing attributes in process `syz.1.8325'.
[  924.613947][ T3988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8331'.
[  924.653357][ T3992] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8332'.
[  924.666388][ T3993] tc_dump_action: action bad kind
[  924.837425][ T4002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8333'.
[  924.905925][ T4006] netlink: 88 bytes leftover after parsing attributes in process `syz.0.8334'.
[  924.957252][ T4013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8335'.
[  925.202477][ T4021] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8337'.
[  925.337448][ T4027] xt_CT: You must specify a L4 protocol and not use inversions on it
[  926.292882][ T4079] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[  926.322747][ T4079] syzkaller0: entered promiscuous mode
[  926.324891][ T4079] syzkaller0: entered allmulticast mode
[  926.329475][ T4079] tipc: Resetting bearer <eth:syzkaller0>
[  926.594407][ T4088] netlink: 'syz.1.8354': attribute type 4 has an invalid length.
[  926.857536][ T4101] Unsupported ieee802154 address type: 0
[  927.107766][ T4125] syzkaller0: entered promiscuous mode
[  927.109808][ T4125] syzkaller0: entered allmulticast mode
[  927.113782][ T4125] tipc: Resetting bearer <eth:syzkaller0>
[  927.235741][ T4130] IPVS: sh: TCP 127.0.0.1:21 - no destination available
[  927.623576][ T4156] Bluetooth: hci0: unsupported parameter 5135
[  927.629632][ T4156] Bluetooth: hci0: unsupported parameter 8192
[  927.632801][ T4156] Bluetooth: hci0: unsupported parameter 5135
[  927.640249][ T4156] Bluetooth: hci0: unsupported parameter 8192
[  927.706471][ T4159] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  927.741170][ T4162] netlink: 'syz.1.8377': attribute type 9 has an invalid length.
[  927.904817][ T4171] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  928.116986][ T4177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  928.365840][ T4198] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20002
[  928.973015][ T4225] netlink: 'syz.0.8400': attribute type 3 has an invalid length.
[  929.562156][ T4236] __nla_validate_parse: 59 callbacks suppressed
[  929.562171][ T4236] netlink: 271 bytes leftover after parsing attributes in process `syz.0.8403'.
[  929.736458][ T4244] netlink: 'syz.0.8407': attribute type 9 has an invalid length.
[  929.833701][ T4250] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8409'.
[  929.861158][ T4249] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8408'.
[  929.901544][ T4252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8410'.
[  929.917111][ T4252] 8021q: adding VLAN 0 to HW filter on device bond0
[  929.999414][ T4258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8411'.
[  930.416931][ T4276] tc_dump_action: action bad kind
[  930.452559][ T4276] netlink: 'syz.1.8418': attribute type 2 has an invalid length.
[  930.462585][ T4276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8418'.
[  930.540740][ T4284] netlink: 'syz.1.8421': attribute type 6 has an invalid length.
[  931.150661][ T4319] tipc: Resetting bearer <eth:syz_tun>
[  931.168144][ T4319] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  931.182737][ T4320] tipc: Resetting bearer <eth:syz_tun>
[  931.210493][ T4320] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  931.221488][ T4319] netlink: 'syz.0.8429': attribute type 3 has an invalid length.
[  931.227875][ T4319] netlink: 'syz.0.8429': attribute type 3 has an invalid length.
[  931.235386][ T4320] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8429'.
[  931.772373][ T4348] netlink: 'syz.1.8436': attribute type 1 has an invalid length.
[  932.202475][ T4364] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8438'.
[  932.530780][ T1376] ieee802154 phy1 wpan1: encryption failed: -22
[  932.568295][ T4384] ip_tables: iptables: counters copy to user failed while replacing table
[  932.581442][ T4381] ip_tables: iptables: counters copy to user failed while replacing table
[  932.962943][ T4390] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8444'.
[  933.018209][ T4399] openvswitch: netlink: Missing valid actions attribute.
[  933.023553][ T4399] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  933.122259][ T4401] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8448'.
[  933.413898][ T4430] syzkaller1: entered promiscuous mode
[  933.418402][ T4430] syzkaller1: entered allmulticast mode
[  934.956893][ T4523] __nla_validate_parse: 6 callbacks suppressed
[  934.956938][ T4523] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8478'.
[  935.167671][ T4539] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8482'.
[  935.662894][ T4548] dvmrp8: left allmulticast mode
[  935.761489][ T4553] tipc: Resetting bearer <eth:syz_tun>
[  935.791749][ T4553] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  936.042366][ T4571] xt_CT: You must specify a L4 protocol and not use inversions on it
[  936.112440][ T4576] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8493'.
[  936.126472][ T4576] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8493'.
[  936.144046][ T4576] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8493'.
[  936.145705][ T4575] netlink: 7 bytes leftover after parsing attributes in process `syz.0.8492'.
[  936.160088][ T4576] syzkaller1: entered promiscuous mode
[  936.163622][ T4576] syzkaller1: entered allmulticast mode
[  936.620439][ T4591] xt_CT: You must specify a L4 protocol and not use inversions on it
[  936.742282][ T4595] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8500'.
[  936.807706][ T4600] ieee802154 phy1 wpan1: encryption failed: -22
[  936.817561][ T4597] netlink: 120 bytes leftover after parsing attributes in process `syz.1.8499'.
[  936.820501][ T4600] ieee802154 phy1 wpan1: encryption failed: -22
[  936.824162][ T4597] netlink: 120 bytes leftover after parsing attributes in process `syz.1.8499'.
[  937.012863][ T4615] tipc: Failed to remove unknown binding: 66,0,0/2886997162:4270877820/4270877822
[  937.032253][ T4615] tipc: Failed to remove unknown binding: 66,0,0/2886997162:4270877820/4270877821
[  937.509075][ T4650] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8514'.
[  937.639612][ T4655] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  937.683618][ T4660] syzkaller1: entered promiscuous mode
[  937.690079][ T4660] syzkaller1: entered allmulticast mode
[  938.099441][ T4678] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[  938.590302][ T4688] netlink: 'syz.0.8530': attribute type 1 has an invalid length.
[  938.610875][ T4690] netlink: 'syz.0.8530': attribute type 1 has an invalid length.
[  938.736973][ T4694] A link change request failed with some changes committed already. Interface 04)fl may have been left with an inconsistent configuration, please check.
[  939.723098][ T4718] xt_CT: You must specify a L4 protocol and not use inversions on it
[  940.250135][ T4732] __nla_validate_parse: 1 callbacks suppressed
[  940.250158][ T4732] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8546'.
[  940.315854][ T4735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8547'.
[  940.389696][ T4738] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8548'.
[  940.399414][ T4738] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8548'.
[  940.410950][ T4738] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8548'.
[  940.437516][ T4738] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8548'.
[  940.469807][ T4738] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8548'.
[  940.510980][ T4738] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8548'.
[  940.530580][ T4738] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8548'.
[  940.546369][ T4738] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8548'.
[  941.902104][ T4794] xt_CT: You must specify a L4 protocol and not use inversions on it
[  941.954115][ T4796] block nbd0: reconnected socket
[  941.961091][ T6705] block nbd0: Receive control failed (result -32)
[  943.053011][ T4856] ip_tables: iptables: counters copy to user failed while replacing table
[  943.059490][ T4858] ip_tables: iptables: counters copy to user failed while replacing table
[  944.454315][ T4921] netlink: 'syz.2.8602': attribute type 1 has an invalid length.
[  944.585015][ T4923] bond20: (slave veth0_to_bond): Releasing active interface
[  944.649189][ T4925] bond26: (slave veth0_to_bond): making interface the new active one
[  944.652695][ T4925] bond26: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  944.661024][ T4924] macvlan5: entered promiscuous mode
[  944.663086][ T4924] macvlan5: entered allmulticast mode
[  944.669287][ T4924] bond26: entered promiscuous mode
[  944.671320][ T4924] veth0_to_bond: entered promiscuous mode
[  944.674031][ T4924] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  944.681713][ T4924] bond26: (slave macvlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  944.688978][ T4924] bond26: left promiscuous mode
[  944.690861][ T4924] veth0_to_bond: left promiscuous mode
[  945.062132][ T4954] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  945.066267][ T4954] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  946.198379][ T4997] xt_CT: You must specify a L4 protocol and not use inversions on it
[  948.211730][ T4972] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  948.353412][ T5016] __nla_validate_parse: 142 callbacks suppressed
[  948.353426][ T5016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8626'.
[  948.458213][ T5021] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8626'.
[  948.584748][ T5033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8628'.
[  948.588692][ T5023] tipc: Enabling of bearer <udp:s	> rejected, max 3 bearers permitted
[  949.106629][ T5059] netlink: 'syz.0.8633': attribute type 32 has an invalid length.
[  949.117055][ T5059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8633'.
[  949.447763][ T5072] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8637'.
[  950.506733][ T5128] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  950.522002][ T5128] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8648'.
[  950.532274][ T5128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8648'.
[  950.632812][ T5132] netlink: 88 bytes leftover after parsing attributes in process `syz.0.8649'.
[  950.702565][ T5134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8650'.
[  950.921628][ T5145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8651'.
[  951.794212][ T5170] xt_CT: You must specify a L4 protocol and not use inversions on it
[  952.913146][ T5207] bond27: entered allmulticast mode
[  952.932963][ T5207] 8021q: adding VLAN 0 to HW filter on device bond28
[  952.945834][ T5207] bond28: entered allmulticast mode
[  952.950723][ T5207] bond27: (slave bond28): Enslaving as an active interface with an up link
[  952.957590][ T5207] bond27 (unregistering): (slave bond28): Releasing backup interface
[  952.960851][ T5207] bond28: left allmulticast mode
[  952.969940][ T5207] bond27 (unregistering): Released all slaves
[  953.433412][ T5237] tipc: Resetting bearer <eth:syz_tun>
[  953.472031][ T5237] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  953.532237][ T5237] __nla_validate_parse: 7 callbacks suppressed
[  953.532249][ T5237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8678'.
[  953.733320][ T5261] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.8687'.
[  953.749933][ T5262] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.8687'.
[  953.889802][ T5273] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8692'.
[  953.981711][ T5283] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8694'.
[  953.992881][ T5283] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8694'.
[  954.008525][ T5285] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8694'.
[  954.028733][ T5286] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8694'.
[  954.097187][ T5290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8695'.
[  954.110198][ T5290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8695'.
[  954.283985][ T5303] syzkaller0: left promiscuous mode
[  954.289467][ T5303] syzkaller0: left allmulticast mode
[  954.292273][ T5303] tipc: Resetting bearer <eth:syzkaller0>
[  954.410332][ T5307] xt_CT: No such helper "snmp"
[  954.876960][ T5332] xt_CT: You must specify a L4 protocol and not use inversions on it
[  954.967329][ T5327] syzkaller1: entered allmulticast mode
[  955.036069][ T5343] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  955.469948][ T5373] xt_CT: You must specify a L4 protocol and not use inversions on it
[  955.654883][ T5386] ieee802154 phy1 wpan1: encryption failed: -22
[  955.798654][ T5399] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2
[  955.932056][   T33] audit: type=1804 audit(1789681934.865:13): pid=5403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.8725" name="/newroot/2739/cgroup.controllers" dev="tmpfs" ino=13969 res=1 errno=0
[  955.950535][   T33] audit: type=1800 audit(1789681934.875:14): pid=5403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8725" name="cgroup.controllers" dev="tmpfs" ino=13969 res=0 errno=0
[  956.033106][ T5407] block nbd0: reconnected socket
[  956.041658][ T6705] block nbd0: Receive control failed (result -32)
[  956.210912][ T5413] pimreg: entered allmulticast mode
[  956.649865][ T5436] netlink: 'syz.0.8735': attribute type 5 has an invalid length.
[  956.844681][ T5445] can: request_module (can-proto-0) failed.
[  958.084195][ T5487] netlink: 'syz.2.8748': attribute type 1 has an invalid length.
[  958.233292][ T5506] x_tables: duplicate underflow at hook 1
[  958.721933][ T5552] __nla_validate_parse: 40 callbacks suppressed
[  958.721944][ T5552] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8766'.
[  959.000605][ T5568] netlink: 'syz.1.8772': attribute type 27 has an invalid length.
[  959.004020][ T5568] netlink: 'syz.1.8772': attribute type 6 has an invalid length.
[  959.374995][ T5580] syzkaller1: entered promiscuous mode
[  959.377524][ T5580] syzkaller1: entered allmulticast mode
[  959.496147][ T5585] xt_CT: You must specify a L4 protocol and not use inversions on it
[  959.662993][ T5604] syzkaller0: entered promiscuous mode
[  959.678317][ T5604] syzkaller0: entered allmulticast mode
[  959.686122][ T5604] tipc: Resetting bearer <eth:syzkaller0>
[  960.825235][ T3604] wlan1: Trigger new scan to find an IBSS to join
[  962.090683][ T5725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8802'.
[  962.125240][ T5728] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8804'.
[  962.187521][ T5721] ip6gretap0: left promiscuous mode
[  962.220899][ T5721] 8021q: adding VLAN 0 to HW filter on device team0
[  962.231125][ T5721] tipc: Resetting bearer <eth:team0>
[  962.374179][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  962.379250][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  962.383374][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  962.388661][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  962.392388][ T5721] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  962.420834][ T5721] 8021q: adding VLAN 0 to HW filter on device bond1
[  962.436596][ T5721] 8021q: adding VLAN 0 to HW filter on device bond2
[  962.479183][ T5721] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  962.542266][ T5721] 8021q: adding VLAN 0 to HW filter on device bond3
[  962.559181][T29425] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  962.596883][ T5721] hsr1: Slave A (C) is not up; please bring it up to get a fully working HSR network
[  962.623396][ T5721] 8021q: adding VLAN 0 to HW filter on device bond4
[  962.630814][ T5721] 8021q: adding VLAN 0 to HW filter on device bond5
[  962.637005][ T5721] 8021q: adding VLAN 0 to HW filter on device bond6
[  962.649026][ T5721] 8021q: adding VLAN 0 to HW filter on device bond7
[  962.656228][ T5721] 8021q: adding VLAN 0 to HW filter on device bond8
[  962.661782][ T5721] 8021q: adding VLAN 0 to HW filter on device bond9
[  962.681931][ T5721] ip6gretap0: entered promiscuous mode
[  962.688628][ T5743] netlink: 'syz.0.8805': attribute type 10 has an invalid length.
[  962.728958][ T5721] 8021q: adding VLAN 0 to HW filter on device bond10
[  962.733132][ T5721] 8021q: adding VLAN 0 to HW filter on device bond11
[  962.746330][ T5721] 8021q: adding VLAN 0 to HW filter on device bond12
[  962.750232][ T5721] 8021q: adding VLAN 0 to HW filter on device bond13
[  962.759780][ T5721] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  962.779607][ T3602] bridge0: port 1(1x9) entered blocking state
[  962.782378][ T3602] bridge0: port 1(1x9) entered listening state
[  962.826879][T17283] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  962.839076][T17283] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  962.852631][T17283] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  962.863976][T17283] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  962.873815][T17283] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  962.879875][T17283] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  962.892297][T17283] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  962.897071][T17283] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  962.903267][T17283] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  962.914171][T17283] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  962.923292][T17283] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  962.938405][T17283] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  962.990108][ T5719] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  963.003415][ T5719] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  963.088222][ T5757] sctp: [Deprecated]: syz.0.8808 (pid 5757) Use of struct sctp_assoc_value in delayed_ack socket option.
[  963.088222][ T5757] Use struct sctp_sack_info instead
[  963.317888][ T5765] netlink: 'syz.0.8809': attribute type 1 has an invalid length.
[  963.437113][ T5772] netlink: 'syz.0.8810': attribute type 1 has an invalid length.
[  963.483877][ T5772] 8021q: adding VLAN 0 to HW filter on device bond19
[  963.525446][T23665] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  963.541053][ T1221] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  963.561997][ T5775] bond19: (slave veth27): Enslaving as an active interface with a down link
[  963.566275][ T5772] )fl: left promiscuous mode
[  963.571832][ T5772] tipc: Resetting bearer <eth:syz_tun>
[  963.573707][ T5772] tipc: Resetting bearer <eth:syz_tun>
[  963.577549][ T5772] batadv0: left promiscuous mode
[  963.579399][ T5772] batadv0: left allmulticast mode
[  963.592616][ T5772] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  963.611242][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv3
[  963.615624][ T5772] bond19: (slave batadv3): making interface the new active one
[  963.620280][ T5772] batadv3: entered promiscuous mode
[  963.622987][ T5772] bond19: (slave batadv3): Enslaving as an active interface with an up link
[  963.675766][ T5777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8811'.
[  963.793835][ T5779] sit0: left promiscuous mode
[  963.819531][ T5779] netlink: 136 bytes leftover after parsing attributes in process `syz.2.8812'.
[  963.828784][ T5779] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  963.858030][ T5779] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8812'.
[  963.867867][ T3602] wlan1: Trigger new scan to find an IBSS to join
[  963.964279][ T5785] tipc: Resetting bearer <eth:syz_tun>
[  964.045479][ T5792] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8817'.
[  964.178066][ T5785] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  964.211796][ T5788] netlink: 'syz.0.8814': attribute type 3 has an invalid length.
[  964.221157][ T5788] netlink: 'syz.0.8814': attribute type 3 has an invalid length.
[  964.263304][ T5801] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8818'.
[  964.319221][ T5806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8820'.
[  964.496090][ T5814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8822'.
[  964.507651][ T5817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8821'.
[  964.726845][ T5833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8826'.
[  964.741966][ T5833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8826'.
[  964.807851][ T5836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8827'.
[  965.301065][ T5860] netlink: 'syz.1.8837': attribute type 61 has an invalid length.
[  965.757995][ T5876] syzkaller1: entered promiscuous mode
[  965.767136][ T5876] syzkaller1: entered allmulticast mode
[  966.745089][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  966.825246][T31856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  968.975764][ T6006] tipc: Resetting bearer <eth:syz_tun>
[  969.010701][ T6006] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  969.023451][ T6008] netlink: 'syz.0.8883': attribute type 3 has an invalid length.
[  969.034916][ T6008] netlink: 'syz.0.8883': attribute type 3 has an invalid length.
[  969.659800][ T6023] __nla_validate_parse: 7 callbacks suppressed
[  969.659826][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8886'.
[  969.769414][ T6025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8887'.
[  969.778390][ T6025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8887'.
[  969.782391][ T6025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8887'.
[  970.046708][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8890'.
[  970.050477][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8890'.
[  970.073177][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8890'.
[  970.083321][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8890'.
[  970.141033][ T6045] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8892'.
[  970.229133][ T6051] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8894'.
[  970.415935][ T6067] netlink: 'syz.0.8899': attribute type 11 has an invalid length.
[  970.581357][ T6070] xt_CT: You must specify a L4 protocol and not use inversions on it
[  970.794130][ T6083] IPVS: length: 24 != 1176
[  970.817512][ T6088] netlink: 'syz.2.8905': attribute type 39 has an invalid length.
[  970.883906][ T6091] 8021q: VLANs not supported on syzkaller0
[  970.939937][ T6091] syzkaller0: left promiscuous mode
[  970.945902][ T6091] syzkaller0: left allmulticast mode
[  970.951181][ T6091] tipc: Resetting bearer <eth:syzkaller0>
[  971.230792][ T6102] tipc: Resetting bearer <eth:syz_tun>
[  971.307380][ T6102] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  971.332581][ T6103] netlink: 'syz.0.8911': attribute type 3 has an invalid length.
[  971.364084][ T6103] netlink: 'syz.0.8911': attribute type 3 has an invalid length.
[  971.626583][ T6117] xt_CT: You must specify a L4 protocol and not use inversions on it
[  971.957772][ T6142] 8021q: adding VLAN 0 to HW filter on device macsec3
[  972.263799][ T6155] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  973.256643][ T6195] syzkaller0: left promiscuous mode
[  973.259355][ T6195] syzkaller0: left allmulticast mode
[  973.263337][ T6195] tipc: Resetting bearer <eth:syzkaller0>
[  973.961904][ T6208] netlink: 'syz.1.8948': attribute type 10 has an invalid length.
[  974.104738][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  974.677646][ T6228] tipc: Resetting bearer <eth:syz_tun>
[  974.689782][ T6228] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  974.777873][ T5666] batadv3: left promiscuous mode
[  975.191797][ T6261] __nla_validate_parse: 6 callbacks suppressed
[  975.191941][ T6261] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8961'.
[  975.251295][ T6263] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  975.262706][ T6265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8963'.
[  975.268715][ T6263] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20003
[  975.526535][ T6280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8969'.
[  975.703009][ T6284] netlink: 116 bytes leftover after parsing attributes in process `syz.1.8970'.
[  976.111652][ T6282] tipc: Resetting bearer <eth:syz_tun>
[  976.182238][ T6282] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  976.189175][ T6293] netlink: 116 bytes leftover after parsing attributes in process `syz.1.8972'.
[  976.462561][ T6291] virtio_blk virtio1: 1/0/0 default/read/poll queues
[  976.521050][ T6291] virtio_blk virtio1: [vda] 262144 512-byte logical blocks (134 MB/128 MiB)
[  976.979148][ T6314] tc_dump_action: action bad kind
[  976.990769][ T6314] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8977'.
[  976.993201][ T6318] tipc: Resetting bearer <eth:team0>
[  977.002148][ T6314] netlink: 'syz.0.8977': attribute type 2 has an invalid length.
[  977.006231][ T6318] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  977.009452][ T6314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8977'.
[  977.040903][ T6318] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  977.046384][T23661] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  977.059364][ T6319] netlink: 'syz.1.8979': attribute type 3 has an invalid length.
[  977.066443][ T6319] netlink: 'syz.1.8979': attribute type 3 has an invalid length.
[  977.263473][ T6336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8981'.
[  977.336956][ T6331] tipc: Resetting bearer <eth:syzkaller0>
[  977.357420][ T6340] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  977.401615][ T6341] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  977.510886][ T6353] IPVS: sh: TCP 127.0.0.1:21 - no destination available
[  977.640873][ T6362] x_tables: duplicate underflow at hook 2
[  977.707032][T23661] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  977.819379][ T6371] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8991'.
[  977.827804][ T6371] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8991'.
[  979.863563][ T6436] netlink: 'syz.2.9008': attribute type 1 has an invalid length.
[  980.137614][ T6456] xt_CT: You must specify a L4 protocol and not use inversions on it
[  980.202734][ T6460] netlink: 'syz.0.9017': attribute type 12 has an invalid length.
[  980.797256][ T6491] netlink: 'syz.0.9028': attribute type 1 has an invalid length.
[  981.417565][ T6518] __nla_validate_parse: 6 callbacks suppressed
[  981.417581][ T6518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9036'.
[  981.469091][ T6523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9037'.
[  981.503455][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9036'.
[  981.674182][ T6529] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9039'.
[  981.684109][ T6529] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9039'.
[  981.723898][ T6531] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9041'.
[  981.793007][ T6537] xt_CT: You must specify a L4 protocol and not use inversions on it
[  981.859321][ T6542] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9043'.
[  982.082639][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9046'.
[  982.904883][ T6599] netlink: 'syz.2.9052': attribute type 15 has an invalid length.
[  982.913072][ T6599] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9052'.
[  983.539780][ T6619] netlink: 'syz.0.9060': attribute type 5 has an invalid length.
[  984.177221][ T6659] bond27: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  984.376463][ T6659] bond27 (unregistering): Released all slaves
[  984.562882][ T6682] syzkaller1: entered promiscuous mode
[  984.565795][ T6682] syzkaller1: entered allmulticast mode
[  984.862970][ T6687] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9071'.
[  985.000047][ T6694] netlink: 'syz.0.9074': attribute type 3 has an invalid length.
[  985.120227][ T6706] ip6t_srh: unknown srh match flags  4000
[  985.657507][ T6733] batman_adv: batadv0: Adding interface: veth0
[  985.659818][ T6733] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  985.674986][ T6733] batman_adv: batadv0: Interface activated: veth0
[  985.688659][ T6733] batman_adv: batadv0: Interface deactivated: veth0
[  985.691363][ T6733] batman_adv: batadv0: Removing interface: veth0
[  985.921801][ T6751] xt_CT: You must specify a L4 protocol and not use inversions on it
[  986.607383][ T6802] tipc: Resetting bearer <eth:syzkaller0>
[  988.726949][ T6952] __nla_validate_parse: 39 callbacks suppressed
[  988.726968][ T6952] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9118'.
[  988.891067][ T6963] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9124'.
[  989.193809][ T6977] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9129'.
[  989.253122][ T6972] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  989.379137][ T6972] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  989.676777][ T6988] tipc: Resetting bearer <eth:syzkaller0>
[  990.089923][ T6988] 8021q: adding VLAN 0 to HW filter on device bond26
[  990.101408][ T6988] 8021q: adding VLAN 0 to HW filter on device bond28
[  990.105569][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  990.133494][ T6972] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  990.187125][ T6989] netlink: 'syz.2.9131': attribute type 3 has an invalid length.
[  990.194009][ T6989] netlink: 'syz.2.9131': attribute type 3 has an invalid length.
[  990.409332][ T6994] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9133'.
[  990.440388][ T6997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9132'.
[  990.541847][ T7002] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  990.601545][ T7004] netlink: 'syz.0.9136': attribute type 4 has an invalid length.
[  990.607216][ T7004] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9136'.
[  990.660289][ T7006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9137'.
[  990.666720][ T7004] tipc: Resetting bearer <eth:syz_tun>
[  990.702408][ T7004] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  990.731165][ T7009] netlink: 'syz.0.9136': attribute type 3 has an invalid length.
[  990.735247][ T7009] netlink: 'syz.0.9136': attribute type 3 has an invalid length.
[  991.081885][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9144'.
[  991.091546][ T7029] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  991.181945][ T7038] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9147'.
[  991.320065][ T7045] nbd: must specify at least one socket
[  991.345885][ T7050] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9150'.
[  992.121323][ T7081] ------------[ cut here ]------------
[  992.123434][ T7081] !chanctx_conf
[  992.123445][ T7081] WARNING: net/mac80211/tx.c:6386 at ieee80211_tx_skb_tid+0x3b4/0x470, CPU#1: syz.1.9159/7081
[  992.129263][ T7081] Modules linked in:
[  992.130861][ T7081] CPU: 1 UID: 0 PID: 7081 Comm: syz.1.9159 Not tainted syzkaller #0 PREEMPT(full) 
[  992.133752][ T7081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  992.136945][ T7081] RIP: 0010:ieee80211_tx_skb_tid+0x3b4/0x470
[  992.138819][ T7081] Code: fb 69 f6 e9 b1 fe ff ff e8 29 b0 8d f6 90 0f 0b 90 e9 e2 fe ff ff e8 1b b0 8d f6 90 0f 0b 90 e9 2a fe ff ff e8 0d b0 8d f6 90 <0f> 0b 90 e8 e4 c1 fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4
[  992.145635][ T7081] RSP: 0018:ffffc900042ef338 EFLAGS: 00010287
[  992.147530][ T7081] RAX: ffffffff8b382fc3 RBX: ffffffff8b382c3f RCX: 0000000000080000
[  992.150534][ T7081] RDX: ffffc90020001000 RSI: 000000000000e98a RDI: 000000000000e98b
[  992.153696][ T7081] RBP: 00000000ffffffff R08: ffffffff8b382c3f R09: 0000000000000000
[  992.156899][ T7081] R10: 0000000000000000 R11: ffffffff8e95c680 R12: ffff8881b8738e40
[  992.160081][ T7081] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000
[  992.162703][ T7081] FS:  00007f011b8706c0(0000) GS:ffff8882a91f9000(0000) knlGS:0000000000000000
[  992.166064][ T7081] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  992.168512][ T7081] CR2: 000000110c2cd8d5 CR3: 000000016c744000 CR4: 00000000000006f0
[  992.171065][ T7081] Call Trace:
[  992.172101][ T7081]  <TASK>
[  992.173003][ T7081]  mesh_plink_frame_tx+0x73d/0xc30
[  992.174645][ T7081]  ? __pfx_mesh_plink_frame_tx+0x10/0x10
[  992.176432][ T7081]  ? mesh_rx_plink_frame+0x560/0x26a0
[  992.178481][ T7081]  mesh_plink_deactivate+0x18b/0x2f0
[  992.180544][ T7081]  mesh_sta_cleanup+0x42/0x150
[  992.182450][ T7081]  cleanup_single_sta+0x3ff/0x660
[  992.184555][ T7081]  __sta_info_flush+0x5bb/0x700
[  992.186474][ T7081]  ? __pfx___sta_info_flush+0x10/0x10
[  992.188584][ T7081]  ieee80211_do_stop+0x3cb/0x2220
[  992.190577][ T7081]  ? rcu_is_watching+0x15/0xb0
[  992.192471][ T7081]  ? __mutex_lock+0x30f/0x1590
[  992.194454][ T7081]  ? __pfx_ieee80211_do_stop+0x10/0x10
[  992.196572][ T7081]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  992.198813][ T7081]  ieee80211_stop+0x1af/0x220
[  992.200665][ T7081]  ? __pfx_ieee80211_stop+0x10/0x10
[  992.202665][ T7081]  __dev_close_many+0x366/0x6e0
[  992.204509][ T7081]  ? __pfx___dev_close_many+0x10/0x10
[  992.206233][ T7081]  netif_close_many+0x222/0x410
[  992.207758][ T7081]  ? __pfx_netif_close_many+0x10/0x10
[  992.209501][ T7081]  ? __mutex_lock+0x30f/0x1590
[  992.210999][ T7081]  netif_close+0x160/0x220
[  992.212492][ T7081]  ? __pfx_netif_close+0x10/0x10
[  992.214459][ T7081]  ? __pfx___mutex_lock+0x10/0x10
[  992.216481][ T7081]  ? do_raw_spin_lock+0x12b/0x2f0
[  992.218314][ T7081]  dev_close+0xf7/0x210
[  992.219670][ T7081]  cfg80211_shutdown_all_interfaces+0xb0/0x200
[  992.221608][ T7081]  ? __pfx_cfg80211_rfkill_set_block+0x10/0x10
[  992.223521][ T7081]  cfg80211_rfkill_set_block+0x2d/0x50
[  992.225433][ T7081]  rfkill_set_block+0x19f/0x4d0
[  992.226988][ T7081]  rfkill_fop_write+0x43b/0x560
[  992.228502][ T7081]  ? apparmor_file_permission+0x1f4/0x300
[  992.230275][ T7081]  ? __pfx_rfkill_fop_write+0x10/0x10
[  992.231972][ T7081]  ? __pfx_security_file_permission+0x10/0x10
[  992.233867][ T7081]  ? rw_verify_area+0x203/0x4c0
[  992.235891][ T7081]  ? __pfx_rfkill_fop_write+0x10/0x10
[  992.238084][ T7081]  vfs_write+0x296/0xba0
[  992.239785][ T7081]  ? __pfx_vfs_write+0x10/0x10
[  992.241550][ T7081]  ? __fget_files+0x2a/0x420
[  992.243010][ T7081]  ? __fget_files+0x2a/0x420
[  992.244864][ T7081]  ? __fget_files+0x3a2/0x420
[  992.246794][ T7081]  ? __fget_files+0x2a/0x420
[  992.248376][ T7081]  ksys_write+0x150/0x270
[  992.249899][ T7081]  ? __pfx_ksys_write+0x10/0x10
[  992.251834][ T7081]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  992.254342][ T7081]  do_syscall_64+0x174/0x580
[  992.256128][ T7081]  ? trace_irq_disable+0x3b/0x140
[  992.257706][ T7081]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  992.259542][ T7081] RIP: 0033:0x7f011a99e159
[  992.260933][ T7081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  992.266966][ T7081] RSP: 002b:00007f011b870028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  992.269535][ T7081] RAX: ffffffffffffffda RBX: 00007f011ac25fa0 RCX: 00007f011a99e159
[  992.271991][ T7081] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000b
[  992.274512][ T7081] RBP: 00007f011aa3506b R08: 0000000000000000 R09: 0000000000000000
[  992.276952][ T7081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  992.279380][ T7081] R13: 00007f011ac26038 R14: 00007f011ac25fa0 R15: 00007ffc9611db68
[  992.281829][ T7081]  </TASK>
[  992.282819][ T7081] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  992.285110][ T7081] CPU: 1 UID: 0 PID: 7081 Comm: syz.1.9159 Not tainted syzkaller #0 PREEMPT(full) 
[  992.288107][ T7081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  992.291795][ T7081] Call Trace:
[  992.293158][ T7081]  <TASK>
[  992.294325][ T7081]  vpanic+0x56c/0xa60
[  992.295885][ T7081]  ? __pfx__printk+0x10/0x10
[  992.297774][ T7081]  ? __pfx_vpanic+0x10/0x10
[  992.299588][ T7081]  ? is_bpf_text_address+0x292/0x2b0
[  992.301648][ T7081]  ? is_bpf_text_address+0x26/0x2b0
[  992.303729][ T7081]  panic+0xc5/0xd0
[  992.305238][ T7081]  ? __pfx_panic+0x10/0x10
[  992.307056][ T7081]  __warn+0x315/0x4c0
[  992.308394][ T7081]  ? ieee80211_tx_skb_tid+0x3b4/0x470
[  992.310117][ T7081]  ? ieee80211_tx_skb_tid+0x3b4/0x470
[  992.311813][ T7081]  __report_bug+0x28e/0x530
[  992.313273][ T7081]  ? do_syscall_64+0x174/0x580
[  992.314733][ T7081]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  992.316730][ T7081]  ? ieee80211_tx_skb_tid+0x3b4/0x470
[  992.318537][ T7081]  ? __pfx___report_bug+0x10/0x10
[  992.320127][ T7081]  ? __lock_acquire+0x683/0x2cd0
[  992.321665][ T7081]  ? ieee80211_tx_skb_tid+0x3b4/0x470
[  992.323350][ T7081]  report_bug+0x16a/0x220
[  992.324772][ T7081]  ? ieee80211_tx_skb_tid+0x3b4/0x470
[  992.326479][ T7081]  ? ieee80211_tx_skb_tid+0x3b6/0x470
[  992.328140][ T7081]  handle_bug+0x9c/0x200
[  992.329432][ T7081]  exc_invalid_op+0x1a/0x50
[  992.330830][ T7081]  asm_exc_invalid_op+0x1a/0x20
[  992.332379][ T7081] RIP: 0010:ieee80211_tx_skb_tid+0x3b4/0x470
[  992.334271][ T7081] Code: fb 69 f6 e9 b1 fe ff ff e8 29 b0 8d f6 90 0f 0b 90 e9 e2 fe ff ff e8 1b b0 8d f6 90 0f 0b 90 e9 2a fe ff ff e8 0d b0 8d f6 90 <0f> 0b 90 e8 e4 c1 fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4
[  992.340178][ T7081] RSP: 0018:ffffc900042ef338 EFLAGS: 00010287
[  992.342184][ T7081] RAX: ffffffff8b382fc3 RBX: ffffffff8b382c3f RCX: 0000000000080000
[  992.344858][ T7081] RDX: ffffc90020001000 RSI: 000000000000e98a RDI: 000000000000e98b
[  992.347484][ T7081] RBP: 00000000ffffffff R08: ffffffff8b382c3f R09: 0000000000000000
[  992.349921][ T7081] R10: 0000000000000000 R11: ffffffff8e95c680 R12: ffff8881b8738e40
[  992.352306][ T7081] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000
[  992.354779][ T7081]  ? ieee80211_tx_skb_tid+0x2f/0x470
[  992.356423][ T7081]  ? ieee80211_tx_skb_tid+0x2f/0x470
[  992.358064][ T7081]  ? ieee80211_tx_skb_tid+0x3b3/0x470
[  992.359720][ T7081]  ? ieee80211_tx_skb_tid+0x3b3/0x470
[  992.361396][ T7081]  mesh_plink_frame_tx+0x73d/0xc30
[  992.363029][ T7081]  ? __pfx_mesh_plink_frame_tx+0x10/0x10
[  992.364765][ T7081]  ? mesh_rx_plink_frame+0x560/0x26a0
[  992.366448][ T7081]  mesh_plink_deactivate+0x18b/0x2f0
[  992.368106][ T7081]  mesh_sta_cleanup+0x42/0x150
[  992.369591][ T7081]  cleanup_single_sta+0x3ff/0x660
[  992.371165][ T7081]  __sta_info_flush+0x5bb/0x700
[  992.372763][ T7081]  ? __pfx___sta_info_flush+0x10/0x10
[  992.374460][ T7081]  ieee80211_do_stop+0x3cb/0x2220
[  992.376144][ T7081]  ? rcu_is_watching+0x15/0xb0
[  992.377887][ T7081]  ? __mutex_lock+0x30f/0x1590
[  992.379411][ T7081]  ? __pfx_ieee80211_do_stop+0x10/0x10
[  992.381111][ T7081]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  992.382848][ T7081]  ieee80211_stop+0x1af/0x220
[  992.384314][ T7081]  ? __pfx_ieee80211_stop+0x10/0x10
[  992.385925][ T7081]  __dev_close_many+0x366/0x6e0
[  992.387467][ T7081]  ? __pfx___dev_close_many+0x10/0x10
[  992.389169][ T7081]  netif_close_many+0x222/0x410
[  992.390790][ T7081]  ? __pfx_netif_close_many+0x10/0x10
[  992.392548][ T7081]  ? __mutex_lock+0x30f/0x1590
[  992.394069][ T7081]  netif_close+0x160/0x220
[  992.395449][ T7081]  ? __pfx_netif_close+0x10/0x10
[  992.396983][ T7081]  ? __pfx___mutex_lock+0x10/0x10
[  992.398506][ T7081]  ? do_raw_spin_lock+0x12b/0x2f0
[  992.400133][ T7081]  dev_close+0xf7/0x210
[  992.401395][ T7081]  cfg80211_shutdown_all_interfaces+0xb0/0x200
[  992.403444][ T7081]  ? __pfx_cfg80211_rfkill_set_block+0x10/0x10
[  992.405523][ T7081]  cfg80211_rfkill_set_block+0x2d/0x50
[  992.407502][ T7081]  rfkill_set_block+0x19f/0x4d0
[  992.409015][ T7081]  rfkill_fop_write+0x43b/0x560
[  992.410609][ T7081]  ? apparmor_file_permission+0x1f4/0x300
[  992.412732][ T7081]  ? __pfx_rfkill_fop_write+0x10/0x10
[  992.414652][ T7081]  ? __pfx_security_file_permission+0x10/0x10
[  992.416841][ T7081]  ? rw_verify_area+0x203/0x4c0
[  992.418387][ T7081]  ? __pfx_rfkill_fop_write+0x10/0x10
[  992.420099][ T7081]  vfs_write+0x296/0xba0
[  992.421540][ T7081]  ? __pfx_vfs_write+0x10/0x10
[  992.423224][ T7081]  ? __fget_files+0x2a/0x420
[  992.425067][ T7081]  ? __fget_files+0x2a/0x420
[  992.426571][ T7081]  ? __fget_files+0x3a2/0x420
[  992.428266][ T7081]  ? __fget_files+0x2a/0x420
[  992.429914][ T7081]  ksys_write+0x150/0x270
[  992.431344][ T7081]  ? __pfx_ksys_write+0x10/0x10
[  992.432956][ T7081]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  992.434847][ T7081]  do_syscall_64+0x174/0x580
[  992.436341][ T7081]  ? trace_irq_disable+0x3b/0x140
[  992.437989][ T7081]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  992.439826][ T7081] RIP: 0033:0x7f011a99e159
[  992.441325][ T7081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  992.447323][ T7081] RSP: 002b:00007f011b870028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  992.450088][ T7081] RAX: ffffffffffffffda RBX: 00007f011ac25fa0 RCX: 00007f011a99e159
[  992.452944][ T7081] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000b
[  992.455753][ T7081] RBP: 00007f011aa3506b R08: 0000000000000000 R09: 0000000000000000
[  992.458197][ T7081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  992.460529][ T7081] R13: 00007f011ac26038 R14: 00007f011ac25fa0 R15: 00007ffc9611db68
[  992.463038][ T7081]  </TASK>
[  992.464733][ T7081] Kernel Offset: disabled
[  992.466099][ T7081] Rebooting in 86400 seconds..
