last executing test programs:

3.745671178s ago: executing program 2 (id=6257):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x2c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}}, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10002, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0)
r4 = socket(0xa, 0x80000, 0x101)
sendmsg$inet6(r4, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0xa, 0x4, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14"], 0x18}, 0x922bac8576b92dde)
r5 = socket$inet6(0xa, 0x80002, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r7=>0x0})
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000280))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x3}, {0xfff3}}}, 0x24}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000005c0)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x6, 0x0, 0x3, 0x1, 0x0, 0xffff, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc74, 0x0, 0xffffffff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x1, 0x7, 0x0, 0x0, {0x87, 0x2, 0xfff4, 0x10, 0x6, 0x331}, {0xb, 0x0, 0x6, 0xd967, 0x6, 0x9}, 0x1, 0xd}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0)
sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd29, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x448db}, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x8000000}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)

2.826012648s ago: executing program 2 (id=6267):
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840)

2.532255791s ago: executing program 2 (id=6270):
r0 = socket$inet6(0xa, 0x2, 0x0)
close(0xffffffffffffffff)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000200)='`', 0x1)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
recvmmsg(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)=""/35, 0x23}, 0x7}], 0x1, 0x40000100, 0x0)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80)

1.685280484s ago: executing program 2 (id=6282):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7)
mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff)
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x180102, 0x0)
mkdirat$cgroup(r1, &(0x7f0000000100)='syz0\x00', 0x1ff)
sendfile(r2, r2, 0x0, 0x9)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

1.5967449s ago: executing program 2 (id=6283):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2c, 0x1, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r4=>0x0})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20010000", @ANYRES16=r2, @ANYBLOB="6d0425bd7000fbdbdf251500000048002b801c0003800c0004000201aaaaaaaaaaaa0c000400000000000000000008000400fbffffff0c000500000000800000000014000380080002000300000006000300a3aa000008000300", @ANYRES32, @ANYBLOB="94002b802400038006000100ffff00000600010001000000060001000200000006000100030000000c000500010000000000000050000380060003000000000006000100ffff00000800020003000000060001000100000008000200020000000c00040000000000000000000600010002000000060003000000000006000100030000000500020001000000080004000b00000008000300", @ANYRES32=r4, @ANYBLOB="08002c0007000000050029"], 0x120}, 0x1, 0x0, 0x0, 0x480c0}, 0x0)
clock_gettime(0x9, &(0x7f0000000280))
shutdown(r1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r6], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
recvmmsg(r10, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}, 0x32c1}], 0x1, 0x2, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r11, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r7, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000080)
r13 = socket(0x10, 0x803, 0x0)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r16=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r15, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r16}, @val={0xc, 0x99, {0x8, 0x2c}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_macvtap\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={<r17=>0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={r17, @in6={{0xa, 0x4e23, 0x5, @empty, 0x9}}, 0x5, 0x4, 0x624e, 0xa, 0x55, 0x3e}, 0x9c)

1.236929822s ago: executing program 1 (id=6289):
r0 = socket$netlink(0x10, 0x3, 0xe)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa4000000060a0b0400000000000000000200000078000480740001800a0001006d617463680000006400028008000240000000000c00010072617465657374004c0003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870b81e92a630900010073797a30000000000900020073797a32000000001400000011002050a105d6f46728dd1d00a709bc"], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800)
writev(r0, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000001070058000b480400945f640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x4, r3}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd5000fbdbdf2547a98ca20e006a165e657673696d0000001f0002006e657464657673696d300000050000000000000098fd0b008700000006001100040000001d001500090000008444040c8e36a25350427e71f164e88834a166ff823ec9cf9ec392ee2ea5c2fbda79989c6edd8d5c52b4a7aedb483711f85dfef5598117b27d84dbfdfccadf1a6413ef4778307ff10731fae3cbfcbf7f75cbc29753b5b111f2c64596e74d3beebbd46fc957f481071c5f7c6334b8e059a7e35539e81ae336688bfef28ec7b482cce9a0f5755551"], 0x54}, 0x1, 0x0, 0x0, 0x4004808}, 0x20008000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000002e00090027bd700000000000040000001400180008ac0f0006ac0f0009ac0f0006ac0f00", @ANYRES32=r0], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000680)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYRES64=r4, @ANYRES32=r2, @ANYBLOB="0c00990008000000300000001400040073797a6b616c6c657230000000000000080005000400000005005300010000002775cbcc054d1df5a898314448ef533052058c62e29066eb2a4699ee47b8f3a17267c583599377a6981d807b0185fb19a94ee9d84611ba8c238ee3132b6148e7958a5373e1599930330a9ef9432fcb19038b2293c4cacaeb9084834adaff65fd0de3672cf7bae7"], 0x4c}, 0x1, 0x0, 0x0, 0x20044885}, 0x24044884)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00'})
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a4619ae0bfb3a45f9ccb6bfc28f73a1c00", @ANYRES16=r8, @ANYBLOB="00002b4ae9579ab0642cc9ee510592305915388d9e04000800030000", @ANYRES16=r8, @ANYRESHEX=r8], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x2c04c000)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@getchain={0x34, 0x66, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0xfff3, 0xffe0}, {0x2, 0xfffe}}, [{0x8, 0xb, 0x7ff}, {0x8, 0xb, 0x4}]}, 0x34}}, 0x0)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r10 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000240)={0x4001, 0x7ff, 0x1000, 0x5}, 0x10)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="48000000140002002abd7000fddbdf2502e851fe", @ANYRES32=0x0, @ANYBLOB="08000a0004000000080002000000000008000200ac1e01010800090005000000080002000a0101020800090002ea990d"], 0x48}, 0x1, 0x0, 0x0, 0x620080d4}, 0x24080)

1.107244895s ago: executing program 1 (id=6290):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000001200)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf8c, 0x2c, 0x0, @local, @private1={0xfc, 0x1, '\x00', 0x1}, {[@fragment={0x6}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, "ab9400", 0xf08, 0x2f, 0xb9e02c7ea3376920, @mcast2, @mcast2, [@dstopts={0x16, 0x1e3, '\x00', [@jumbo, @enc_lim, @jumbo={0xc2, 0x4, 0x40}, @calipso={0x7, 0x10, {0x4, 0x2, 0x4, 0x6c8, [0xffffffffffffff8d]}}, @generic={0x2, 0xef6, "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"}]}, @hopopts={0x4fb560df2bad385d, 0x2, '\x00', [@hao={0xc9, 0x10, @loopback}]}], "d53354e0f167b1d8f8ed2a07"}}}}}}, 0xfc2)

976.97546ms ago: executing program 1 (id=6291):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r1 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1)
sendmmsg$alg(r1, &(0x7f0000009000)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="9c2e044eb4", 0x5}], 0x1, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8010}], 0x1, 0x4) (async)
sendmmsg$alg(r1, &(0x7f0000009000)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="9c2e044eb4", 0x5}], 0x1, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8010}], 0x1, 0x4)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x2}, 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="77d2bcbdedb6eddc072584bc4ed3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) (async)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa0100fe, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) (async)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa0100fe, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) (async)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0)
sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4f23, 0x6, @loopback, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x20000000)
socket$tipc(0x1e, 0x2, 0x0) (async)
socket$tipc(0x1e, 0x2, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_DATA_DIR(r7, 0x0, 0x1, &(0x7f00000003c0), 0x4)
r8 = socket$inet(0x2, 0x1, 0x6cf)
getsockopt$EBT_SO_GET_ENTRIES(r8, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0x0, [0xb, 0xffffffffffffffff, 0xe, 0xc0000000000000, 0x8000, 0xc], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x78)

885.735975ms ago: executing program 1 (id=6292):
syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="757e938fd660aaaaaaaaaabb86dd6012000800183afffe8000000000000000000000000000bbff02000000f57b1fd6b86e429233cc00000000000000000000018800907808000000ff010000000000000000000000000001"], 0x0)
r0 = socket(0x10, 0x803, 0x2)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
getsockopt(r2, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000100)=ANY=[], 0x34}}, 0x20040004)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3ff}}, {{0xa, 0x3, 0x0, @private0, 0x4}}}, 0x108)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20)
socketpair(0x18, 0x4, 0x0, &(0x7f0000000000))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x1, @empty}, 0x10)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="02040000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000100000007000300000000005cae641872319dfae5a988272763a36abcf1f74cfd4bf988531a30a528c1c044813d8205fd8b1fdf1c2ccd79b5fb7f9e096fbd1c7eeee4b6646c0b2fc39d3fe20000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x296)
getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e)
close(0x4)

737.345093ms ago: executing program 2 (id=6294):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket(0x2a, 0x5, 0x6)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000100)={@empty, @multicast1}, &(0x7f0000000140)=0xc) (async)
connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e23, 0x2, @private2, 0x106}, 0x1c) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20048841}, 0x8094) (async, rerun: 32)
r3 = socket(0x8000000010, 0x2, 0x0) (rerun: 32)
write(r3, &(0x7f00000002c0)="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", 0xfc) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) (async, rerun: 64)
r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="3000000018000100000000000000f4ff01000000fe000600000007224e22e8938482080000000600157ec7e57b0064010100"], 0x30}}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="8b67f73793fb7012824944a600410303160f627753b28c5500d914d4eedc5950be87f5d6337b34844dc2c407cb6ecf2e93fa3cefbdf0c1c2be09d4276433e55d88025a607400"], 0xb8}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) (async)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x2000c095, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000640)=""/96, 0x60}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/118, 0x76}, {&(0x7f0000000440)=""/42, 0x2a}, {&(0x7f00000007c0)=""/77, 0x4d}, {&(0x7f0000000880)=""/148, 0x94}, {&(0x7f00000001c0)}, {&(0x7f0000000a00)=""/125, 0x7d}], 0x9}, 0x1}], 0x1, 0x0, &(0x7f0000000240))
sendto$x25(r6, &(0x7f00000006c0)="816ef4c6f92a7ce837613cd90c3ca91b1179f99c4dda5e3057d75b07cf7468afb8c45d649308ff0d296329140c1acb79516a7acf54213232996c3918238be0c7a1c230839e6f5d2f748eae20b6ddce473fa7531a1081c9ca8c999dea75f5a363201629edbb146df4ebf214b9bddc17f3af586f44583f7e2ff8c3de01f3151bdf7bcb3bb0b02046eefcd26bcd09629aea53e4a4a7d85829f8f8aafc40b565e850510ea7bf0610178c402ff9b69eed348a431ff22eae5021de9eeab977a77450ed95d9966b3fb2b49e3a6dc5b8760e669133e1382adba039dcc62641f978f3b7b312a74698", 0xe4, 0x0, &(0x7f0000000540)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) (async)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000840)=[@in6={0xa, 0x4e22, 0x297, @local, 0x9}]}, &(0x7f0000000140)=0x10)
setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000180)=0x90000202, 0x4)
socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)

367.083101ms ago: executing program 0 (id=6298):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x10001, 0x5, 0x2, 0x7, 0x1d, 0xf, 0x2}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010)

365.806517ms ago: executing program 0 (id=6299):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x144}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465"], 0xfc}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000400006803c00040067"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x10000000}, 0xc)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r9)
sendmsg$L2TP_CMD_TUNNEL_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001a6456f68fa9b6ba19b2b19f5e75f80ef7e522228926f40ce6e99e0278c56462ff0300008c3f07350700000000000000ff7f99fd5c6936465f0aec391bbe000000003cbbc416785c0a56d214742b9ec07765915c8cb23c7e284f33d170093e84740d24b8bdef732a6964bed2529d3e7c7195371cc600fbc9e11ab8ac7d83a5804d49d28dc85c0e4ebbc6f730dfbca7745e6688ac30f56fc6cdd8f5138f", @ANYRES16=r10, @ANYRES16=r2], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800)
r11 = epoll_create(0x3fa)
r12 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r12, &(0x7f0000000240)={0xa0000000})
epoll_ctl$EPOLL_CTL_MOD(r11, 0x3, r12, &(0x7f0000000280)={0x2000000})
epoll_ctl$EPOLL_CTL_MOD(r11, 0x3, r12, &(0x7f0000000000)={0x20000001})
r13 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r13, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
connect$unix(r13, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
sendmsg$NFT_BATCH(r0, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1c0000000b0a010200000000000000000100000308000c400000ae6520000000080a05000000000000000000000000020c0003400000000000000001140000000000000500000aab40e118df2fdab30c3bcb88a2b9"], 0x64}, 0x1, 0x0, 0x0, 0x803}, 0x40480c0)

164.181859ms ago: executing program 0 (id=6300):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000300)={<r3=>0x0, 0x7d, "c9ed9403ea98e53b34d347d844dfe216416ab9fc18e401519464e6f164a4f6f246a3a04090c6dd0d2fcbd85cdc5adeaa7529f255a05497599a3c1fab3411468abd4ec57cab84d26f4eedbd34d6d1deb74c49cf1ca4d6210d12a61b1154790da400a5ba4e8bba7d7cc69c90e035ccd55d3e74927f82733b5691f521dc1e"}, &(0x7f00000003c0)=0x85)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={r3, 0x20, &(0x7f0000000400)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @private=0xa010100}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)={0x1, [<r4=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000004c0)={r4, 0x3, 0x1000, 0x7fffffff}, 0x10)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={r4, 0x8}, &(0x7f0000000080)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b000000180100002020692500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="b543080afb161a8d714452"], 0x14}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c001980080002002e"], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r8=>0xffffffffffffffff})
sendmmsg$unix(r8, &(0x7f0000001200)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r5]}}], 0x18, 0x4040}}], 0x2, 0x4040080)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r9, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x48, 0x88010}], 0x1, 0x0)
connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r9, &(0x7f0000004d00), 0x4000000000002d1, 0xf00)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'veth0_to_team\x00'})
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
close(r0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000010027bd700402d4df2500000000", @ANYRES32=0x0, @ANYBLOB="904e0600c16a006c00128011e601006272696467655f736c6c7665000000001400058005001b000000000005081c000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000580)={'wg0\x00', <r10=>0x0})
sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="080007000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784308000100", @ANYRES32=0x0, @ANYBLOB="140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54208000100", @ANYRES32=r10, @ANYBLOB="14000200776731000000000000000000000000001400020077673100"/40], 0x3cc}, 0x1, 0x0, 0x0, 0x1}, 0x40000)

163.135881ms ago: executing program 0 (id=6301):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r0, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xce, &(0x7f0000000240)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x2f, 0x8, 0x8, &(0x7f0000000300)}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYRES16=r1], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x8e, &(0x7f0000000100)=""/142, 0x41000, 0xa, '\x00', r1}, 0x94)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x438, 0x128, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x368, 0xffffffff, 0xffffffff, 0x368, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x81, 0x0, 0x7}}, @common=@ah={{0x30}, {[0x4d2, 0x4d3], 0x8, 0xc, 0x3}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x3, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x87, 0x0, 0x0, 0x41}, 0x0, 0x208, 0x240, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'ip_vti0\x00', {0xff}, 'pim6reg\x00', {}, 0x2f, 0x15}}, @common=@inet=@recent0={{0xf8}, {0xffff, 0x40, 0x10, 0x1, 'syz0\x00', 0x7}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x0, 0x3}, {0xffffffffffffffff, 0x5, 0x4}, {0x2, 0x1, 0x2}, 0x30c, 0x7f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x498)

66.516852ms ago: executing program 0 (id=6302):
syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x3, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e1f, 0x20002, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x10, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0x40, 0x0, 0x3}, 0x3c)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x0, "4f6fb4d1af0f72b0efcdf5a284da144a011a00", 0x4, 0x1}, 0x3c)
setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0x6}, 0x3c)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000900)=@nat={'nat\x00', 0x19, 0x3, 0x6aa, [0x200000000240, 0x0, 0x0, 0x2000000004f4, 0x20000000088a], 0x0, &(0x7f0000000200), &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x0, 0x88f5, 'bond_slave_1\x00', 'sit0\x00', 'pimreg\x00', 'nicvf0\x00', @remote, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0xb6, 0x136, 0x16e, [@limit={{'limit\x00', 0x0, 0x20}, {{0x9, 0x9, 0x39, 0xc, 0xffffffff, 0x1}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0xfc, 0x8, {0x4}}}}, @snat={'snat\x00', 0x10, {{@empty, 0xffffffffffffffee}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast, 0xfffffffffffffffc}}}}, {0x9, 0x1c, 0x88a8, 'ip6gre0\x00', 'veth1_macvtap\x00', 'ip6erspan0\x00', 'bridge_slave_1\x00', @multicast, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], @local, [0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0xde, 0x116, [], [@arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, 0xfffffffffffffffe}}}, @arpreply={'arpreply\x00', 0x10, {{@remote, 0xfffffffffffffffe}}}], @arpreply={'arpreply\x00', 0x10, {{@remote, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x3, 0x56, 0x88a2, 'veth0_to_team\x00', 'vlan0\x00', 'caif0\x00', 'veth1_macvtap\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], @empty, [0x0, 0x0, 0xff, 0xff, 0xff], 0x2e6, 0x31e, 0x366, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x1}, {0x6}], 0x1, 0x1}}}, @bpf0={{'bpf\x00', 0x0, 0x210}, {{0x8, [{0x4, 0x10, 0x1, 0x7f}, {0x2, 0x4, 0xf}, {0x7ff, 0x4, 0x5, 0xb}, {0x5252, 0x7, 0x6, 0x25ac}, {0x1ff, 0x99, 0x5}, {0x7ff, 0x9}, {0x8d96, 0x3, 0x40, 0x1}, {0x8e9d, 0x1, 0x7, 0x8}, {0x5, 0x81, 0x46, 0x8}, {0x4, 0x8, 0x9, 0x2}, {0xb, 0x8, 0x9, 0x8}, {0x0, 0xf, 0x8, 0x2}, {0x0, 0x9, 0xe2, 0x3}, {0x8, 0x5, 0x2, 0x9}, {0x3b55, 0x2, 0x2, 0xd}, {0xc, 0xc, 0x7, 0x1}, {0x0, 0x3, 0x6, 0xd2}, {0x1, 0x4b, 0x9, 0x11}, {0x1f3, 0x7, 0x3, 0x401}, {0x4, 0x0, 0x1, 0x8}, {0x6, 0x0, 0x7f, 0x6}, {0x4, 0x81, 0x8, 0xfa1d}, {0x1ff, 0x7, 0x0, 0x1}, {0x5, 0x40, 0x9, 0xffff}, {0x2, 0x18, 0x7, 0xe8}, {0x9, 0x24, 0x0, 0x1}, {0xfe7, 0xfc, 0x6, 0x80}, {0x3, 0x3, 0x79, 0x6}, {0x6, 0x8, 0x4}, {0x6, 0x7, 0x8, 0xa6}, {0x3, 0x0, 0x4, 0x7bbc}, {0x4000, 0x6, 0x3, 0x3}, {0x2, 0x9, 0xf, 0xe29}, {0x400, 0x0, 0xbb, 0x8}, {0x0, 0x0, 0xc, 0x81}, {0x7, 0x6, 0x9, 0x1}, {0x1, 0x30, 0x1, 0x3}, {0x2, 0x4, 0xb, 0x7}, {0x7, 0x5, 0x3, 0x4}, {0xfffe, 0x0, 0xb, 0xb469}, {0x0, 0x9, 0x99, 0x600}, {0x5, 0x5, 0x9, 0x3ff}, {0x7ff, 0xe2, 0x65, 0x4}, {0x1, 0x59, 0xff, 0x5}, {0x4ef, 0x9, 0x0, 0x6}, {0x7fff, 0x1, 0x9, 0x3}, {0x2, 0xa1, 0xa, 0x3}, {0x100, 0x8, 0x5, 0x1}, {0x2, 0x2, 0x7, 0x6b8}, {0x9, 0x35, 0xf7, 0x5}, {0x863e, 0x86, 0x22}, {0xc, 0x81, 0x8, 0x80000000}, {0x6, 0x8, 0x39, 0x4}, {0x0, 0x0, 0xe, 0x4}, {0x400, 0x3c, 0x4, 0x1c85}, {0x6, 0xee, 0x0, 0x5}, {0x3ff, 0xc0, 0x9d, 0x3}, {0x4f, 0x5, 0x9d, 0x7}, {0x0, 0x0, 0xd, 0x8}, {0x43, 0x2, 0xff, 0x6}, {0x9, 0xd, 0x9, 0x3}, {0x9, 0x8, 0x9, 0x3a5}, {0xff, 0x0, 0x2, 0xffff}, {0x2, 0x6, 0x8, 0x1f40c0d}], {0x4}}}}], [@arpreply={'arpreply\x00', 0x10, {{@remote, 0x8000000000000000}}}], @common=@ERROR={'ERROR\x00', 0x20, {"3778725aff96b9ff6ad48c883dee4b6dbd59354f0fb4f91bebfddcedf145"}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0x722)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
pwrite64(r4, &(0x7f0000000380)='k', 0x1, 0xc)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r2, 0x4008af03, &(0x7f0000000040)=[0x1, 0xfffffffffffffffb])
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0)

65.696416ms ago: executing program 0 (id=6303):
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x27}}}, 0x0, 0x0, 0x1a, 0x0, "bb02a3c364ca41d6357e544508474204000b5aa201ecffffffffffffff0f0000000000000034a632ab7193fcf19b2df3ee050000000000000041d269776df1228328cf0a007bbe6c0000000000b800"}, 0xd8)
r0 = socket$kcm(0x23, 0x5, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4)
listen(r0, 0x8)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78)
r3 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001a80)=@raw={'raw\x00', 0x8, 0x3, 0x12d8, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1208, 0xffffffff, 0xffffffff, 0x1208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0xfd}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x30, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000], [], 'wg1\x00', 'ip6gretap0\x00', {}, {}, 0x3b, 0x0, 0x0, 0x3}, 0x0, 0x1108, 0x1138, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0x2, {0x8}}}, @common=@srh={{0x30}, {0x1, 0x4, 0x7, 0x3, 0x8001, 0x1000, 0x302c}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1338)
syz_emit_ethernet(0x6a, &(0x7f0000000a40)=ANY=[], 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x360, 0x280, 0x280, 0xfeffffff, 0x280, 0x98, 0x358, 0x358, 0xffffffff, 0x358, 0x358, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x13, @multicast1, @multicast1, @icmp_id=0x67, @icmp_id=0x67}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @broadcast, @multicast1, @gre_key=0x6, @gre_key=0x7}}}}, {{@ip={@private=0xa010101, @broadcast, 0x0, 0x0, 'veth0_virt_wifi\x00', 'wlan0\x00', {}, {}, 0x0, 0x0, 0x48}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev, @port, @icmp_id=0x65}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0)
connect$netlink(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x44c43000)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0xa000000, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x11, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000ffff0000c99d2ec35243652def90139c74bea6d37556000000000600000018010000c3e624f93f3bd02c3e3f3dfe0400293b45fdf2659760b1549812a4e64c2c458c2721adc5fe2348ef538ec15ae984fa3223402c4955ca32378941d7d3560e49303d6eea6a3cb775bf", @ANYRES64=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018390000030000000000000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='htcp', 0x4)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x1d, 0x0, 0x23)
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r8=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000980)={'syztnl1\x00', &(0x7f0000000d00)={'syztnl1\x00', r8, 0x10, 0x7800, 0x6, 0x53d0, {{0x2b, 0x4, 0x0, 0x2d, 0xac, 0x65, 0x0, 0xff, 0x71, 0x0, @loopback, @broadcast, {[@lsrr={0x83, 0x13, 0xeb, [@multicast1, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x33}]}, @rr={0x7, 0x7, 0x19, [@loopback]}, @timestamp={0x44, 0x18, 0x9f, 0x0, 0xc, [0x3, 0xffffc179, 0x4, 0x7ff, 0x81]}, @lsrr={0x83, 0x13, 0x4, [@empty, @private=0xa010100, @broadcast, @remote]}, @lsrr={0x83, 0x17, 0x6d, [@dev={0xac, 0x14, 0x14, 0x12}, @multicast1, @broadcast, @loopback, @empty]}, @lsrr={0x83, 0x13, 0xe9, [@dev={0xac, 0x14, 0x14, 0x27}, @loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @timestamp={0x44, 0x1c, 0x47, 0x0, 0x6, [0x3, 0x9, 0x400, 0x1, 0x7ff, 0x4]}, @ra={0x94, 0x4}, @generic={0x88, 0x8, "5a8969da176d"}]}}}}})
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x4040)
socket$key(0xf, 0x3, 0x2)
r9 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000e00)=@newtaction={0x11c, 0x30, 0x53b, 0x70bd26, 0x25dfdbff, {}, [{0x108, 0x1, [@m_tunnel_key={0x104, 0x7, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x200, 0x2, 0x20000000, 0x234d0a03, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}]}, {0xa6, 0x6, "b4c322bf77574d79313f985135ad06df2ca58d85d8daab292ce8ab51a113b03fa69d83f20859ab42df5dd3eb7832951c76463a5e901b317451acfb0805cd1e44718be48214e0c303b41e7aaed9e2b13794232ff7a2ac2afa4a648d9f96abda8a14d02f1c34b1356f9fe91ec23f3118e9fcdd65ccda0a851c5857bdbfb0156c0600ce10d437c8f5e70cb3ae585f9361eb14c49022a94873929b3a453cad0000000000"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4060040}, 0x400408cd)

7.198663ms ago: executing program 1 (id=6304):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x4, 0x2}, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={0x34, r3, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x200}]]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xb, r0, 0x4}, 0x38)
r4 = socket(0xa, 0x3, 0x8)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'wlan0\x00', &(0x7f0000000680)=@ethtool_regs={0x4, 0x2}})
syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r4)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x480, 0x0, 0x310, 0xfeffffff, 0x240, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x3e8, 0x3e8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x0, 0x100], 0x0, 0x40}}, @common=@inet=@multiport={{0x50}, {0x1, 0x1, [0x4e20, 0x4e22, 0x4e20, 0x4e20, 0x4e24, 0x4e20, 0x4e24, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e20, 0x4e24, 0x4e24, 0x4e22], [0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x3]}}}, @common=@set={{0x40}, {{0x0, [], 0x0, 0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x40, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e24}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@ip={@local, @empty, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x6}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0)

0s ago: executing program 1 (id=6305):
socket$rxrpc(0x21, 0x2, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r0=>0x0}, &(0x7f0000000200)=0xc)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYRES8=r0], &(0x7f0000000040)='GPL\x00'}, 0x94)
clock_gettime(0x0, &(0x7f0000000000))
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
mmap(&(0x7f00000a3000/0x3000)=nil, 0x3000, 0x3, 0x1010, r2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0x70bd2d, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)
r4 = socket(0x10, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x34, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0x1}}, [@TCA_RATE={0xffffffffffffff64}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x34}}, 0x0)
readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1)
sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0)
r6 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x30, 0x7, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x30}}, 0x4040010)
socket$nl_route(0x10, 0x3, 0x0)
recvmsg(r7, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)

kernel console output (not intermixed with test programs):

unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.230609][T23226] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  509.363407][T23226] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  509.367776][T23226] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.372170][T23226] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  509.481851][T23226] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  509.486014][T23226] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.494413][T23226] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  509.647020][ T5666] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  509.650523][ T5666] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  509.653526][ T5666] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  509.671494][ T5666] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  509.674521][ T5666] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  509.677880][ T5666] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  509.695985][ T5666] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  509.699017][ T5666] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  509.702043][ T5666] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  509.718285][ T5666] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  509.721060][ T5666] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  509.723883][ T5666] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  509.787573][T23254] x_tables: duplicate underflow at hook 3
[  509.855363][T23251] __nla_validate_parse: 1 callbacks suppressed
[  509.855378][T23251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4490'.
[  509.875266][T23252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4490'.
[  509.954711][T23261] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4492'.
[  509.963655][T23261] ksmbd: Unknown IPC event: 0, ignore.
[  510.061049][T23264] netlink: 'syz.2.4493': attribute type 13 has an invalid length.
[  510.064765][T23264] netlink: 'syz.2.4493': attribute type 17 has an invalid length.
[  510.157638][T23267] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4494'.
[  510.163791][T23268] xt_l2tp: missing protocol rule (udp|l2tpip)
[  510.219464][T23264] erspan0: left promiscuous mode
[  510.247899][T23264] bridge0: left promiscuous mode
[  510.252471][T23264] 8021q: adding VLAN 0 to HW filter on device `
[  510.260914][T23264] 8021q: adding VLAN 0 to HW filter on device batadv0
[  510.304495][T23264] veth0_macvtap: left promiscuous mode
[  510.308711][T23264] veth0_macvtap: entered promiscuous mode
[  510.323411][T23264] 8021q: adding VLAN 0 to HW filter on device batadv1
[  510.334441][T23264] 8021q: adding VLAN 0 to HW filter on device bond1
[  510.341647][T23264] 8021q: adding VLAN 0 to HW filter on device bond2
[  510.348290][T23264] 8021q: adding VLAN 0 to HW filter on device bond3
[  510.353031][T23264] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  510.380810][   T12] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20004 - 0
[  510.384409][   T12] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20004 - 0
[  510.390213][ T6353] bridge0: entered promiscuous mode
[  510.394186][   T12] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20004 - 0
[  510.401400][   T12] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20004 - 0
[  510.833343][T23281] xt_TPROXY: Can be used only with -p tcp or -p udp
[  511.311660][T23294] SET target dimension over the limit!
[  511.355136][T23297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4502'.
[  511.404343][T23300] netlink: 'syz.2.4503': attribute type 1 has an invalid length.
[  511.407098][T23300] netlink: 169184 bytes leftover after parsing attributes in process `syz.2.4503'.
[  511.732308][T23312] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4506'.
[  512.192181][T23322] xt_hashlimit: max too large, truncated to 1048576
[  512.194327][T23322] xt_hashlimit: overflow, try lower: 2/0
[  512.200887][T23322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4508'.
[  512.399709][T23327] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4510'.
[  512.444547][T23331] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4511'.
[  512.615514][T23337] xt_CT: You must specify a L4 protocol and not use inversions on it
[  512.699382][T23341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  512.720540][T23341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  512.737887][T23341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  512.743314][T23343] netlink: 'syz.2.4515': attribute type 1 has an invalid length.
[  512.787285][T23341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  512.792569][T23343] netlink: 'syz.2.4515': attribute type 1 has an invalid length.
[  512.795789][T23342] workqueue: Failed to create a rescuer kthread for wq "bond20": -EINTR
[  512.796478][T23343] workqueue: Failed to create a rescuer kthread for wq "bond20": -EINTR
[  512.842458][T23335] syzkaller0: entered promiscuous mode
[  512.848136][T23335] syzkaller0: entered allmulticast mode
[  513.112713][T23354] netlink: 'syz.0.4517': attribute type 1 has an invalid length.
[  514.084691][T23368] xt_hashlimit: invalid rate
[  514.215786][T23379] syzkaller1: entered promiscuous mode
[  514.223277][T23379] syzkaller1: entered allmulticast mode
[  514.335144][T23388] SET target dimension over the limit!
[  514.470045][T23399] xt_TPROXY: Can be used only with -p tcp or -p udp
[  514.479885][T23399] syzkaller1: entered promiscuous mode
[  514.481716][T23399] syzkaller1: entered allmulticast mode
[  514.534479][T23402] xt_TCPMSS: Only works on TCP SYN packets
[  514.690393][T23421] Cannot find set identified by id 65534 to match
[  514.742552][T23425] x_tables: unsorted entry at hook 2
[  514.864019][T23437] __nla_validate_parse: 6 callbacks suppressed
[  514.864037][T23437] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4542'.
[  514.881495][T23439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4543'.
[  514.887852][T23440] SET target dimension over the limit!
[  514.942246][T23446] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  515.018929][T23452] xt_hashlimit: size too large, truncated to 1048576
[  515.204932][T23458] netlink: 'syz.1.4548': attribute type 1 has an invalid length.
[  515.231990][T23458] 8021q: adding VLAN 0 to HW filter on device bond27
[  515.251539][T23458] bond27: (slave geneve0): making interface the new active one
[  515.255617][T23458] bond27: (slave geneve0): Enslaving as an active interface with an up link
[  515.259107][T10295] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 20004 - 0
[  515.264501][T10295] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 20004 - 0
[  515.273088][T10295] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 20004 - 0
[  515.280730][T10295] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 20004 - 0
[  515.538754][T23477] SET target dimension over the limit!
[  515.871509][T23491] syzkaller0: entered promiscuous mode
[  515.874041][T23491] syzkaller0: entered allmulticast mode
[  516.297053][T23502] xt_hl: Unknown Hop Limit match mode: 206
[  516.353752][T23504] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4562'.
[  516.360720][T23504] netlink: 'syz.2.4562': attribute type 1 has an invalid length.
[  516.423621][T23507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4563'.
[  516.429230][T23507] netlink: 'syz.2.4563': attribute type 1 has an invalid length.
[  516.640546][T23517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4566'.
[  516.945692][T23523] xt_l2tp: invalid flags combination: 0
[  517.647136][T23544] openvswitch: netlink: Key type 29 is not supported
[  517.719191][T23549] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4575'.
[  517.740986][T23549] netlink: 'syz.2.4575': attribute type 3 has an invalid length.
[  517.966912][   T33] audit: type=1800 audit(1778081019.354:4): pid=23557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4576" name="memory.events" dev="tmpfs" ino=8214 res=0 errno=0
[  518.087886][T23577] gretap0: left promiscuous mode
[  518.101259][T23577] 8021q: adding VLAN 0 to HW filter on device bond0
[  518.105714][T23577] 8021q: adding VLAN 0 to HW filter on device `
[  518.111813][T23577] 8021q: adding VLAN 0 to HW filter on device batadv0
[  518.148467][T23577] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  518.233874][T23582] xt_ecn: cannot match TCP bits for non-tcp packets
[  518.264864][T23584] SET target dimension over the limit!
[  518.315502][T23588] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  518.380995][T23588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4583'.
[  518.411481][T23593] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  518.749394][T23615] netlink: 'syz.1.4588': attribute type 1 has an invalid length.
[  518.753500][T23615] xt_hashlimit: max too large, truncated to 1048576
[  519.342576][T23625] SET target dimension over the limit!
[  519.389907][T23627] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.4592'.
[  519.401992][T23627] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4592'.
[  519.852239][T23641] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4595'.
[  519.880318][T23641] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  520.515389][T23655] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  520.874451][T23664] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  520.881279][T23667] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4600'.
[  520.889344][T23667] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4600'.
[  521.031405][T23676] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4604'.
[  521.036202][T23676] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4604'.
[  521.150718][T23682] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4606'.
[  521.197514][T23684] netlink: 'syz.0.4607': attribute type 21 has an invalid length.
[  521.259775][T23684] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  521.584043][T23701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  522.148904][T23714] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4615'.
[  522.154896][T23716] x_tables: ip_tables: icmp match: only valid for protocol 1
[  522.157247][T23714] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4615'.
[  522.164483][T23721] x_tables: ip_tables: icmp match: only valid for protocol 1
[  522.219953][T23727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4617'.
[  522.664867][T23735] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4619'.
[  522.941467][T23747] xt_CT: No such helper "netbios-ns"
[  523.089957][T23754] --map-set only usable from mangle table
[  523.150041][T23758] Cannot find add_set index 1 as target
[  523.302416][T23774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4629'.
[  523.450531][T23783] x_tables: ip6_tables: dccp match: only valid for protocol 33
[  523.662050][T23790] ip6t_rpfilter: unknown options
[  523.767547][T23794] x_tables: ip_tables: osf match: only valid for protocol 6
[  524.594889][T23796] netlink: 'syz.0.4635': attribute type 3 has an invalid length.
[  524.675445][T23802] xt_NFQUEUE: number of total queues is 0
[  524.703558][T23804] x_tables: duplicate underflow at hook 1
[  524.728239][T23807] xt_CT: You must specify a L4 protocol and not use inversions on it
[  524.746624][T23810] nft_compat: unsupported protocol 5
[  524.982001][T23829] netlink: 'syz.2.4647': attribute type 1 has an invalid length.
[  524.982307][T23823] bond42: option fail_over_mac: invalid value (127)
[  524.985304][T23829] netlink: 'syz.2.4647': attribute type 22 has an invalid length.
[  524.992942][T23823] bond42 (unregistering): Released all slaves
[  525.149748][T23837] syzkaller0: entered promiscuous mode
[  525.152178][T23837] syzkaller0: entered allmulticast mode
[  525.194585][T23841] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  525.242156][T23843] netlink: 'syz.0.4652': attribute type 1 has an invalid length.
[  525.314887][T23843] 8021q: adding VLAN 0 to HW filter on device bond42
[  525.345110][T23843] tipc: Resetting bearer <ib:geneve0>
[  525.624813][T23858] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  525.630645][T23858] netlink: 'syz.1.4656': attribute type 5 has an invalid length.
[  525.634351][T23858] netlink: 'syz.1.4656': attribute type 5 has an invalid length.
[  525.649015][T23858] xt_socket: unknown flags 0x4
[  526.151192][T23882] xt_cgroup: path and classid specified
[  526.161647][T23882] __nla_validate_parse: 9 callbacks suppressed
[  526.161657][T23882] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4662'.
[  526.188128][T23882] xt_cgroup: path and classid specified
[  526.274631][T23889] syzkaller1: entered promiscuous mode
[  526.282996][T23889] syzkaller1: entered allmulticast mode
[  526.331098][T23892] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4664'.
[  526.809104][T23924] x_tables: ip_tables: tcp match: only valid for protocol 6
[  526.826774][T23924] x_tables: ip_tables: tcp match: only valid for protocol 6
[  526.836599][T23924] x_tables: ip_tables: tcp match: only valid for protocol 6
[  526.846694][T23924] x_tables: ip_tables: tcp match: only valid for protocol 6
[  526.849846][T23924] x_tables: ip_tables: tcp match: only valid for protocol 6
[  526.852881][T23924] x_tables: ip_tables: tcp match: only valid for protocol 6
[  526.928916][T23930] netlink: 'syz.2.4673': attribute type 61 has an invalid length.
[  526.939264][T23930] netlink: 'syz.2.4673': attribute type 21 has an invalid length.
[  526.947374][T23930] netlink: 'syz.2.4673': attribute type 7 has an invalid length.
[  526.953263][T23926] xt_limit: Overflow, try lower: 268435456/134217728
[  526.974233][T23926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4671'.
[  527.064460][T23933] xt_hashlimit: overflow, rate too high: 0
[  527.197713][T23931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4672'.
[  527.258639][T23944] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  527.843073][T23957] xt_TCPMSS: Only works on TCP SYN packets
[  528.182774][   T33] audit: type=1800 audit(1778081029.564:5): pid=23967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4681" name="memory.events" dev="tmpfs" ino=7759 res=0 errno=0
[  528.195064][T23972] x_tables: duplicate underflow at hook 2
[  528.369936][T23975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4684'.
[  528.375025][T23977] netlink: 'syz.2.4685': attribute type 1 has an invalid length.
[  528.385439][T23975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4684'.
[  528.444965][T23978] SET target dimension over the limit!
[  528.476023][T23977] 8021q: adding VLAN 0 to HW filter on device bond20
[  528.510170][T23979] bond20: (slave veth15): Enslaving as an active interface with a down link
[  528.553157][T23979] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4685'.
[  528.656172][T23977] bond20: (slave veth17): Enslaving as an active interface with a down link
[  528.824168][T23994] xt_TCPMSS: Only works on TCP SYN packets
[  529.000823][T24005] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4694'.
[  529.008000][T24005] x_tables: duplicate entry at hook 2
[  529.770536][T24024] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4700'.
[  529.823673][T24028] SET target dimension over the limit!
[  529.941358][T24036] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING
[  530.093734][T24046] xt_nfacct: accounting object `syz0' does not exist
[  530.422170][T24064] validate_nla: 1 callbacks suppressed
[  530.422186][T24064] netlink: 'syz.0.4710': attribute type 1 has an invalid length.
[  530.446314][T24064] 8021q: adding VLAN 0 to HW filter on device bond43
[  530.472299][T24064] bond43: (slave veth21): Enslaving as an active interface with a down link
[  530.489241][T24064] netlink: 77 bytes leftover after parsing attributes in process `syz.0.4710'.
[  530.653848][T24074] xt_hashlimit: size too large, truncated to 1048576
[  530.833301][T24085] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621
[  531.018268][T24097] xt_CT: You must specify a L4 protocol and not use inversions on it
[  531.848071][T24130] __nla_validate_parse: 2 callbacks suppressed
[  531.848093][T24130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4729'.
[  531.869006][T24115] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  532.243548][T24143] xt_hashlimit: max too large, truncated to 1048576
[  532.255402][T24143] xt_ecn: cannot match TCP bits for non-tcp packets
[  533.228682][T24187] Cannot find del_set index 14804 as target
[  533.416898][T24190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  533.438909][T24199] Cannot find del_set index 2 as target
[  533.733183][T24209] netlink: 'syz.2.4747': attribute type 1 has an invalid length.
[  533.764194][T24209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4747'.
[  533.773759][T24209] 8021q: adding VLAN 0 to HW filter on device bond21
[  533.785092][T24209] macvlan1: entered promiscuous mode
[  533.787798][T24209] macvlan1: entered allmulticast mode
[  533.791304][T24209] bond21: entered promiscuous mode
[  533.794307][T24209] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  533.802301][T24209] bond21: left promiscuous mode
[  533.917808][T24213] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4748'.
[  533.920879][T24213] netlink: 47 bytes leftover after parsing attributes in process `syz.0.4748'.
[  533.923707][T24213] netlink: 'syz.0.4748': attribute type 6 has an invalid length.
[  533.931044][T24213] netlink: 'syz.0.4748': attribute type 6 has an invalid length.
[  533.935050][T24213] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  534.212087][T24231] xt_CT: You must specify a L4 protocol and not use inversions on it
[  534.235685][T24233] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4752'.
[  534.241759][T24233] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4752'.
[  534.252686][T24233] xt_hashlimit: size too large, truncated to 1048576
[  534.310369][T24240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4752'.
[  534.351658][T24243] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  534.365437][T24243] netlink: 'syz.0.4754': attribute type 1 has an invalid length.
[  534.371654][T24243] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4754'.
[  534.706127][T24259] ip6t_rpfilter: unknown options
[  534.710635][T24260] ip6t_rpfilter: unknown options
[  534.760771][T24263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4759'.
[  534.765646][T24262] xt_hashlimit: size too large, truncated to 1048576
[  534.914145][T24269] openvswitch: netlink: IP tunnel TTL not specified.
[  535.320324][T24279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4763'.
[  535.631771][T24288] syzkaller0: entered promiscuous mode
[  535.634245][T24288] syzkaller0: entered allmulticast mode
[  535.693609][T24288] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  535.865118][T24294] x_tables: duplicate underflow at hook 1
[  536.043031][T24305] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0
[  536.101836][T24311] SET target dimension over the limit!
[  536.217867][T24321] netlink: 'syz.1.4774': attribute type 11 has an invalid length.
[  536.260063][T24324] xt_TCPMSS: Only works on TCP SYN packets
[  536.749639][T24342] netlink: 'syz.2.4781': attribute type 1 has an invalid length.
[  536.995494][T24357] xt_l2tp: unknown flags: 51
[  537.119993][T24244] block nbd2: NBD_DISCONNECT
[  537.129129][T24244] block nbd2: Disconnected due to user request.
[  537.135943][T24244] block nbd2: shutting down sockets
[  537.205095][T24362] xt_hashlimit: size too large, truncated to 1048576
[  537.234675][T24365] __nla_validate_parse: 2 callbacks suppressed
[  537.234697][T24365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4786'.
[  537.245349][T24365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4786'.
[  537.706959][T24376] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  538.083836][T24391] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20002
[  538.573916][T24407] syzkaller1: entered promiscuous mode
[  538.577313][T24407] syzkaller1: entered allmulticast mode
[  538.660096][T24413] Cannot find del_set index 14804 as target
[  538.692309][T24417] ip6t_REJECT: ECHOREPLY is not supported
[  538.867721][T24425] syzkaller0: entered promiscuous mode
[  538.875206][T24425] syzkaller0: entered allmulticast mode
[  538.876097][T24429] IPVS: ip_vs_add_dest(): server weight less than zero
[  538.925917][T24425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4799'.
[  538.937094][T24425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4799'.
[  538.940908][T24425] netlink: 'syz.0.4799': attribute type 11 has an invalid length.
[  539.000375][T24432] tipc: Resetting bearer <eth:ip6tnl0>
[  539.218566][T24432] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  539.242731][T24432] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  540.212266][ T5470] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  540.218169][ T5470] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  540.226498][ T5470] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  540.232757][ T5470] netdevsim netdevsim1 eth0: unset [1, 2] type 2 family 0 port 20004 - 0
[  540.240510][ T5470] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  540.244886][ T5470] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  540.248339][ T5470] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  540.251179][ T5470] netdevsim netdevsim1 eth1: unset [1, 2] type 2 family 0 port 20004 - 0
[  540.289403][ T5470] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  540.292754][ T5470] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  540.297043][ T5470] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  540.300746][ T5470] netdevsim netdevsim1 eth2: unset [1, 2] type 2 family 0 port 20004 - 0
[  540.303899][ T5470] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  540.307285][ T5470] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  540.310049][ T5470] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  540.312845][ T5470] netdevsim netdevsim1 eth3: unset [1, 2] type 2 family 0 port 20004 - 0
[  540.453858][T24452] netlink: 'syz.2.4805': attribute type 1 has an invalid length.
[  540.462820][T24452] netlink: 476 bytes leftover after parsing attributes in process `syz.2.4805'.
[  540.471869][T24452] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.4805'.
[  540.566919][T24466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4808'.
[  540.621218][T24463] No such timeout policy "syz1"
[  540.831303][T24484] Cannot find set identified by id 3 to match
[  541.175143][T24496] Cannot find add_set index 3 as target
[  541.183180][T24497] Cannot find add_set index 3 as target
[  541.349296][T24507] tap0: tun_chr_ioctl cmd 1074812118
[  541.479281][T24509] tun0: tun_chr_ioctl cmd 1074025672
[  541.489175][T24509] tun0: ignored: set checksum disabled
[  541.669229][T24521] x_tables: duplicate underflow at hook 2
[  541.733831][T24525] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  541.748270][T24527] xt_hashlimit: overflow, rate too high: 0
[  541.825455][T24530] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  541.983858][T24541] Cannot find del_set index 14804 as target
[  542.264721][T24559] netlink: 'syz.1.4833': attribute type 2 has an invalid length.
[  542.270745][T24559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4833'.
[  542.274476][T24559] openvswitch: netlink: Flow actions attr not present in new flow.
[  542.281373][T24559] xt_HMARK: proto mask must be zero with L3 mode
[  542.347182][T24563] netlink: 'syz.1.4835': attribute type 13 has an invalid length.
[  542.362075][T24563] xt_check_match_common: 59 callbacks suppressed
[  542.362091][T24563] x_tables: ip_tables: osf match: only valid for protocol 6
[  542.404988][T24569] xt_hashlimit: max too large, truncated to 1048576
[  542.479694][T24567] ip6t_srh: unknown srh invflags BA61
[  542.481705][T24566] ip6t_srh: unknown srh invflags BA61
[  542.852006][T24597] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4844'.
[  542.875399][T24597] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  542.881861][T24597] netlink: 'syz.2.4844': attribute type 5 has an invalid length.
[  543.514761][T24640] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4857'.
[  543.523714][T24640] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4857'.
[  543.534830][T24640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4857'.
[  543.601773][T24640] xt_hashlimit: size too large, truncated to 1048576
[  543.672407][T24649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4857'.
[  543.732086][T24650] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4858'.
[  543.745335][T24650] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4858'.
[  544.017559][T24671] xt_policy: output policy not valid in PREROUTING and INPUT
[  544.106132][T24678] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4865'.
[  544.121141][T24678] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  544.522450][T24698] IPVS: set_ctl: invalid protocol: 22 10.1.0.254:20004
[  544.915006][T24701] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check.
[  545.593444][T24720] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  545.599656][T24720] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  545.731496][T24727] xt_hashlimit: max too large, truncated to 1048576
[  545.742633][T24727] xt_hashlimit: Unknown mode mask 300, kernel too old?
[  545.841139][T24734] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4880'.
[  546.016577][T24734] bond28: entered promiscuous mode
[  546.019348][T24734] 8021q: adding VLAN 0 to HW filter on device bond28
[  546.030560][T24734] bond28 (unregistering): Released all slaves
[  546.097495][T24739] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  546.272260][T24751] netlink: 'syz.1.4883': attribute type 2 has an invalid length.
[  546.335074][T24755] x_tables: ip6_tables: tcp match: only valid for protocol 6
[  546.458613][T24766] Cannot find del_set index 3 as target
[  546.560034][T24775] geneve1: entered promiscuous mode
[  546.703627][T24775] syzkaller1: entered promiscuous mode
[  546.708788][T24775] syzkaller1: entered allmulticast mode
[  547.146207][T24796] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  547.396681][T24807] : entered promiscuous mode
[  547.406150][T24807] __nla_validate_parse: 6 callbacks suppressed
[  547.406164][T24807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4897'.
[  547.658230][T24816] veth0_macvtap: entered allmulticast mode
[  547.661126][T24816] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  547.672098][T24820] No such timeout policy "syz1"
[  547.741022][T24823] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4902'.
[  547.751529][T24823] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  548.415666][T24845] geneve1: left promiscuous mode
[  548.494713][T24860] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4908'.
[  548.604774][T24865] netlink: 'syz.1.4910': attribute type 1 has an invalid length.
[  548.652172][T24865] 8021q: adding VLAN 0 to HW filter on device bond28
[  548.656196][T24867] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4910'.
[  548.670133][T24865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4910'.
[  548.849805][T24879] xt_hashlimit: size too large, truncated to 1048576
[  548.936167][T24884] xt_l2tp: wrong L2TP version: 0
[  549.140750][T24891] xt_l2tp: v2 doesn't support IP mode
[  549.144539][T24893] xt_l2tp: v2 doesn't support IP mode
[  549.306166][T24904] xt_l2tp: invalid flags combination: 0
[  549.440323][T24913] Cannot find add_set index 4 as target
[  549.510175][T24921] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  549.739298][T24933] netlink: 'syz.0.4927': attribute type 15 has an invalid length.
[  549.743562][T24934] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  549.748573][T24933] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4927'.
[  549.881084][T24945] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4929'.
[  549.953401][T24945] netlink: 'syz.1.4929': attribute type 1 has an invalid length.
[  549.964831][T24945] netlink: 'syz.1.4929': attribute type 1 has an invalid length.
[  550.069838][T24960] netlink: 'syz.1.4931': attribute type 2 has an invalid length.
[  550.624116][T24974] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  550.924081][T24985] bond29: entered promiscuous mode
[  550.928293][T24985] bond29: entered allmulticast mode
[  550.931091][T24985] 8021q: adding VLAN 0 to HW filter on device bond29
[  551.100548][T24997] veth19: entered promiscuous mode
[  551.119146][T24998] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  551.295349][T25005] netlink: 1084 bytes leftover after parsing attributes in process `syz.2.4943'.
[  551.338123][T25007] xt_l2tp: missing protocol rule (udp|l2tpip)
[  551.401754][T25020] block nbd3: Unsupported socket: should be TCP or UNIX.
[  551.440693][T25022] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4948'.
[  551.443135][T25024] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4949'.
[  551.520320][T25026] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  551.752918][T25038] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  551.760872][T25039] x_tables: duplicate underflow at hook 1
[  551.948452][T25068] xt_time: invalid argument - start or stop time greater than 23:59:59
[  551.952121][T25069] xt_time: invalid argument - start or stop time greater than 23:59:59
[  552.088740][T25080] syzkaller0: entered promiscuous mode
[  552.090611][T25080] syzkaller0: entered allmulticast mode
[  555.985131][T25112] syzkaller0: entered promiscuous mode
[  555.987669][T25112] syzkaller0: entered allmulticast mode
[  558.529170][T25127] __nla_validate_parse: 4 callbacks suppressed
[  558.529182][T25127] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4978'.
[  558.534758][T25128] ipt_REJECT: TCP_RESET invalid for non-tcp
[  558.684144][T25139] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4981'.
[  558.697944][T25139] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4981'.
[  558.711022][T25135] Timeout policy `syz0' can only be used by L3 protocol number 0
[  558.713493][T25141] netlink: 'syz.0.4982': attribute type 1 has an invalid length.
[  558.731276][T25141] bond44: entered promiscuous mode
[  558.733539][T25141] 8021q: adding VLAN 0 to HW filter on device bond44
[  558.747855][T25141] 8021q: adding VLAN 0 to HW filter on device bond44
[  558.750446][T25141] bond44: (slave wireguard0): The slave device specified does not support setting the MAC address
[  558.754057][T25141] bond44: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  558.764966][T25141] bond44: (slave wireguard0): making interface the new active one
[  558.769848][T25141] wireguard0: entered promiscuous mode
[  558.772889][T25141] bond44: (slave wireguard0): Enslaving as an active interface with an up link
[  558.785995][T25141] bond44: (slave wireguard1): The slave device specified does not support setting the MAC address
[  558.798324][T25141] bond44: (slave wireguard1): Enslaving as a backup interface with an up link
[  558.802016][T25141] x_tables: unsorted entry at hook 1
[  558.890487][T25160] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4986'.
[  558.893470][T25160] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4986'.
[  558.903003][T25158] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4985'.
[  558.930739][T25163] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4984'.
[  558.961808][T25160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4986'.
[  558.971158][T25160] bond0: entered promiscuous mode
[  558.972810][T25160] bond_slave_0: entered promiscuous mode
[  558.975308][T25160] bond0: left promiscuous mode
[  558.977578][T25160] bond_slave_0: left promiscuous mode
[  559.184361][T25170] netlink: 'syz.0.4990': attribute type 1 has an invalid length.
[  559.238499][T25170] bond45: entered promiscuous mode
[  559.241175][T25170] 8021q: adding VLAN 0 to HW filter on device bond45
[  559.245331][T25170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4990'.
[  559.249606][T25170] bond45: entered allmulticast mode
[  559.273326][T25176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4989'.
[  559.299122][T25176] SET target dimension over the limit!
[  559.315807][T25170] bond45: (slave bridge19): making interface the new active one
[  559.319982][T25170] bridge19: entered promiscuous mode
[  559.322704][T25170] bridge19: entered allmulticast mode
[  559.327901][T25170] bond45: (slave bridge19): Enslaving as an active interface with an up link
[  559.412543][T25180] x_tables: ip_tables: icmp match: only valid for protocol 1
[  559.440106][T25180] bridge20: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  559.525583][T25182] xt_hashlimit: size too large, truncated to 1048576
[  559.838770][T25193] netlink: 'syz.0.4996': attribute type 7 has an invalid length.
[  559.850127][T25193] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  560.003119][T25198] xt_CT: You must specify a L4 protocol and not use inversions on it
[  560.080628][T25201] netlink: 'syz.1.4999': attribute type 1 has an invalid length.
[  560.100419][T25201] bond30: entered promiscuous mode
[  560.102558][T25201] 8021q: adding VLAN 0 to HW filter on device bond30
[  560.129397][T25201] bond30: (slave bridge16): making interface the new active one
[  560.132742][T25201] bridge16: entered promiscuous mode
[  560.138231][T25201] bond30: (slave bridge16): Enslaving as an active interface with an up link
[  560.891261][T25223] xt_bpf: check failed: parse error
[  561.227128][T25228] netlink: 'syz.2.5005': attribute type 4 has an invalid length.
[  561.230919][T25228] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  561.437847][T25236] xt_nat: multiple ranges no longer supported
[  561.508159][T25242] xt_socket: unknown flags 0x50
[  561.785722][T25261] ipt_REJECT: ECHOREPLY no longer supported.
[  561.895185][T25266] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  562.829367][T25283] xt_hashlimit: max too large, truncated to 1048576
[  562.831668][T25283] xt_hashlimit: Unknown mode mask 300, kernel too old?
[  562.859202][T25285] netlink: 'syz.1.5016': attribute type 12 has an invalid length.
[  562.917362][T25295] x_tables: ip_tables: icmp match: only valid for protocol 1
[  563.018549][T25300] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  563.027267][T25300] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  563.030486][T25300] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  563.033382][T25300] tipc: Invalid UDP bearer configuration
[  563.033418][T25300] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  563.260538][T25314] xt_l2tp: unknown flags: 51
[  563.664383][T25340] __nla_validate_parse: 22 callbacks suppressed
[  563.664401][T25340] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5029'.
[  564.197623][T25352] xt_HMARK: spi-set and port-set can't be combined
[  564.311707][T25354] x_tables: duplicate underflow at hook 2
[  564.873348][T25398] syzkaller0: entered promiscuous mode
[  564.875330][T25398] syzkaller0: entered allmulticast mode
[  564.882579][T25398] tcf_pedit_act: 7 callbacks suppressed
[  564.882590][T25398] tc action pedit offset must be on 32 bit boundaries
[  564.891514][T25396] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  564.895196][T25399] xt_hashlimit: max too large, truncated to 1048576
[  564.901864][T25399] xt_hashlimit: overflow, try lower: 2/0
[  565.518785][T25435] 8021q: adding VLAN 0 to HW filter on device `
[  565.531127][T25435] 8021q: adding VLAN 0 to HW filter on device batadv0
[  565.550777][T25435] veth0_to_team: left promiscuous mode
[  565.555602][T25435] batman_adv: batadv0: Interface activated: batadv_slave_0
[  565.560889][T25435] batman_adv: batadv0: Interface activated: batadv_slave_1
[  565.565994][T25435] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  565.569936][T25435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  565.577322][T25435] veth0_macvtap: left promiscuous mode
[  565.583524][T25435] veth0_macvtap: entered promiscuous mode
[  565.590853][T25435] veth0_to_team: entered promiscuous mode
[  565.599716][T25435] 8021q: adding VLAN 0 to HW filter on device bond1
[  565.603321][T25435] 8021q: adding VLAN 0 to HW filter on device bond2
[  565.615729][T25435] 8021q: adding VLAN 0 to HW filter on device bond3
[  565.623093][T25435] 8021q: adding VLAN 0 to HW filter on device bond4
[  565.628332][T25435] 8021q: adding VLAN 0 to HW filter on device bond5
[  565.635287][T25435] 8021q: adding VLAN 0 to HW filter on device bond6
[  565.639699][T25435] 8021q: adding VLAN 0 to HW filter on device bond7
[  565.645358][T25440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5059'.
[  565.652377][T25440] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5059'.
[  565.652585][T25435] 8021q: adding VLAN 0 to HW filter on device batadv1
[  565.660092][T25435] 8021q: adding VLAN 0 to HW filter on device bond8
[  565.664090][T25435] 8021q: adding VLAN 0 to HW filter on device bond9
[  565.668991][T25435] 8021q: adding VLAN 0 to HW filter on device bond10
[  565.675388][T25435] 8021q: adding VLAN 0 to HW filter on device bond11
[  565.680308][T25435] 8021q: adding VLAN 0 to HW filter on device bond12
[  565.685476][T25435] 8021q: adding VLAN 0 to HW filter on device bond13
[  565.691161][T25435] 8021q: adding VLAN 0 to HW filter on device bond14
[  565.695806][T25435] 8021q: adding VLAN 0 to HW filter on device bond15
[  565.700572][T25435] 8021q: adding VLAN 0 to HW filter on device bond16
[  565.703538][T25435] 8021q: adding VLAN 0 to HW filter on device bond17
[  565.717285][T25435] 8021q: adding VLAN 0 to HW filter on device bond18
[  565.721248][T25435] 8021q: adding VLAN 0 to HW filter on device bond19
[  565.729347][T25435] 8021q: adding VLAN 0 to HW filter on device bond20
[  565.733815][T25435] 8021q: adding VLAN 0 to HW filter on device bond21
[  565.740611][T25435] 8021q: adding VLAN 0 to HW filter on device bond22
[  565.743974][T25435] hsr1: Slave B (veth0_to_batadv) is not up; please bring it up to get a fully working HSR network
[  565.772811][T25435] 8021q: adding VLAN 0 to HW filter on device bond23
[  565.775938][T25435] 8021q: adding VLAN 0 to HW filter on device bond24
[  565.785646][T25435] 8021q: adding VLAN 0 to HW filter on device bond25
[  565.791241][T25435] 8021q: adding VLAN 0 to HW filter on device bond26
[  565.800881][T25435] 8021q: adding VLAN 0 to HW filter on device eth0
[  565.805255][T25435] 8021q: adding VLAN 0 to HW filter on device eth1
[  565.813018][T25435] 8021q: adding VLAN 0 to HW filter on device eth2
[  565.817169][T25435] 8021q: adding VLAN 0 to HW filter on device eth3
[  565.823307][T25435] 8021q: adding VLAN 0 to HW filter on device bond27
[  565.833587][T25435] bond29: left promiscuous mode
[  565.837104][T25435] bond30: left promiscuous mode
[  565.839310][T25435] bridge16: left promiscuous mode
[  565.878615][T25450] netlink: 'syz.0.5059': attribute type 21 has an invalid length.
[  565.881866][T25450] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5059'.
[  565.883754][ T5666] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  565.888887][ T5666] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  565.891746][ T5666] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  565.894441][ T5666] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 20004 - 0
[  565.897905][ T5666] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  565.900882][ T5666] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  565.903847][ T5666] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  565.908650][ T5666] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 20004 - 0
[  565.937143][T25450] netlink: 'syz.0.5059': attribute type 5 has an invalid length.
[  565.940033][T25450] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5059'.
[  565.946536][ T5666] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  565.949805][ T5666] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  565.952549][ T5666] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  565.955483][ T5666] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 20004 - 0
[  565.980483][ T5666] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  565.984413][ T5666] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  565.988789][ T5666] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  565.992153][ T5666] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 20004 - 0
[  566.209395][T25452] xt_hashlimit: size too large, truncated to 1048576
[  567.297838][T25507] bond46 (unregistering): Released all slaves
[  567.711137][T25534] tipc: Disabling bearer <udp:syz2>
[  567.841570][T25549] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  567.983863][T25556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5081'.
[  567.991775][T25556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5081'.
[  568.064445][T25557] netlink: 'syz.1.5077': attribute type 1 has an invalid length.
[  568.132116][T25566] netlink: 'syz.0.5082': attribute type 1 has an invalid length.
[  568.229064][T25566] 8021q: adding VLAN 0 to HW filter on device bond46
[  568.273944][T25570] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5084'.
[  568.281640][T25570] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5084'.
[  568.287620][T25570] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5084'.
[  569.468667][T25621] __nla_validate_parse: 3 callbacks suppressed
[  569.468682][T25621] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5093'.
[  569.482412][T25622] xt_l2tp: wrong L2TP version: 0
[  569.761310][T25625] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  569.778653][T25625] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  569.985079][T25634] syzkaller0: entered promiscuous mode
[  569.987357][T25634] syzkaller0: entered allmulticast mode
[  572.593874][T25644] netlink: 'syz.0.5097': attribute type 1 has an invalid length.
[  572.599227][T25645] x_tables: duplicate underflow at hook 1
[  572.602094][T25644] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5097'.
[  572.771853][T25648] xt_NFQUEUE: number of queues (2644) out of range (got 68171)
[  573.068858][T25655] netlink: 'syz.1.5100': attribute type 3 has an invalid length.
[  573.084328][T25660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5099'.
[  573.115277][T25660] netlink: 'syz.0.5099': attribute type 13 has an invalid length.
[  573.122353][T25660] netlink: 'syz.0.5099': attribute type 17 has an invalid length.
[  573.131318][T25660] : left promiscuous mode
[  573.151157][T25660] batman_adv: batadv0: Interface activated: batadv_slave_0
[  573.164290][T25660] batman_adv: batadv0: Interface activated: batadv_slave_1
[  573.177324][T25664] xt_l2tp: missing protocol rule (udp|l2tpip)
[  573.182997][T25660] veth1_vlan: left promiscuous mode
[  573.188392][T25660] veth0_vlan: left promiscuous mode
[  573.191893][T25660] veth0_vlan: entered promiscuous mode
[  573.200226][T25660] veth1_vlan: entered promiscuous mode
[  573.208817][T25660] veth0_macvtap: left promiscuous mode
[  573.212292][T25660] veth0_macvtap: entered promiscuous mode
[  573.218332][T25660] tipc: Resetting bearer <ib:geneve0>
[  573.226188][T25660] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  573.230692][T25660] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  573.235283][T25660] 8021q: adding VLAN 0 to HW filter on device hsr1
[  573.235721][T25667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5102'.
[  573.243294][T25660] 8021q: adding VLAN 0 to HW filter on device bond1
[  573.245645][T25667] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5102'.
[  573.250089][T25660] 8021q: adding VLAN 0 to HW filter on device bond2
[  573.282093][T25660] 8021q: adding VLAN 0 to HW filter on device bond3
[  573.287744][T25660] A link change request failed with some changes committed already. Interface pimreg may have been left with an inconsistent configuration, please check.
[  573.314960][T18142] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  573.319736][T18142] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  573.340926][T18142] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  573.344934][T18142] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  573.357596][T18142] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  573.361512][T18142] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  573.371529][T18142] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  573.377331][T18142] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  573.433007][T25676] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  573.682012][T25691] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5109'.
[  573.704176][T25682] bond29: left allmulticast mode
[  573.719016][T25691] bond0: entered promiscuous mode
[  573.722466][T25691] bond0: left promiscuous mode
[  573.734166][T25693] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  573.860273][T25696] netlink: 'syz.2.5110': attribute type 13 has an invalid length.
[  573.869391][T25696] netlink: 'syz.2.5110': attribute type 17 has an invalid length.
[  574.028200][T25696] 8021q: adding VLAN 0 to HW filter on device `
[  574.062374][T25696] 8021q: adding VLAN 0 to HW filter on device batadv0
[  574.125867][T25696] veth0_macvtap: left promiscuous mode
[  574.129462][T25696] veth0_macvtap: left allmulticast mode
[  574.141635][T25696] veth0_macvtap: entered promiscuous mode
[  574.154646][T25696] 8021q: adding VLAN 0 to HW filter on device batadv1
[  574.164132][T25696] 8021q: adding VLAN 0 to HW filter on device bond1
[  574.172079][T25696] 8021q: adding VLAN 0 to HW filter on device bond2
[  574.180370][T25696] 8021q: adding VLAN 0 to HW filter on device bond3
[  574.185158][T25696] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  574.564380][T25737] xt_CT: You must specify a L4 protocol and not use inversions on it
[  574.742454][T25750] syzkaller1: entered promiscuous mode
[  574.745998][T25750] syzkaller1: entered allmulticast mode
[  574.848575][T25758] IPVS: Error binding to the multicast addr
[  574.855582][T25755] xt_CT: You must specify a L4 protocol and not use inversions on it
[  574.899262][T25760] IPVS: Error binding to the multicast addr
[  574.912366][T25764] xt_time: invalid argument - start or stop time greater than 23:59:59
[  575.114886][T25772] netlink: 'syz.1.5124': attribute type 4 has an invalid length.
[  575.120895][T25772] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5124'.
[  575.230490][T25780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5125'.
[  575.779642][T25787] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5126'.
[  577.234669][T25811] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  577.741755][T25836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5138'.
[  577.953273][T25849] Cannot find add_set index 4 as target
[  577.961472][T25849] Cannot find add_set index 4 as target
[  577.966648][T25849] Cannot find add_set index 4 as target
[  577.973876][T25849] Cannot find add_set index 4 as target
[  577.981990][T25849] Cannot find add_set index 4 as target
[  577.984950][T25849] Cannot find add_set index 4 as target
[  577.989236][T25849] Cannot find add_set index 4 as target
[  577.995445][T25849] Cannot find add_set index 4 as target
[  578.000837][T25849] Cannot find add_set index 4 as target
[  578.003644][T25849] Cannot find add_set index 4 as target
[  578.285058][T25871] netlink: 'syz.2.5145': attribute type 2 has an invalid length.
[  578.362036][T25877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5148'.
[  578.535656][T25889] netlink: 'syz.0.5150': attribute type 10 has an invalid length.
[  578.544155][T25889] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5150'.
[  578.647290][T25895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5152'.
[  578.655759][T25895] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5152'.
[  578.981191][T25909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5155'.
[  578.988485][T25906] xt_CT: No such helper "netbios-ns"
[  579.590278][T25942] SET target dimension over the limit!
[  579.614117][T25939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5160'.
[  579.745430][T25955] xt_cgroup: invalid path, errno=-2
[  579.750195][T25955] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  579.970194][T25966] netlink: 'syz.1.5164': attribute type 1 has an invalid length.
[  580.251992][T25976] xt_HMARK: proto mask must be zero with L3 mode
[  580.565697][T25579] hsr0: entered promiscuous mode
[  580.569759][T25984] __nla_validate_parse: 1 callbacks suppressed
[  580.569777][T25984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5172'.
[  580.678987][T25992] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5175'.
[  580.924203][T26005] netlink: 'syz.1.5178': attribute type 39 has an invalid length.
[  581.879462][T26042] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  582.039759][T26048] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  582.448733][T26075] Cannot find add_set index 1 as target
[  582.550684][T26087] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5194'.
[  582.650934][T26086] netlink: 'syz.0.5195': attribute type 13 has an invalid length.
[  582.659120][T26086] netlink: 'syz.0.5195': attribute type 12 has an invalid length.
[  582.662537][T26088] netlink: 'syz.0.5195': attribute type 13 has an invalid length.
[  582.665990][T26088] netlink: 'syz.0.5195': attribute type 12 has an invalid length.
[  582.672129][T26086] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  582.811238][T26094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5197'.
[  582.853990][T26099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5199'.
[  582.892530][T26103] xt_CT: You must specify a L4 protocol and not use inversions on it
[  582.989770][T26115] openvswitch: netlink: Flow key attribute not present in set flow.
[  583.031371][T26118] netlink: 'syz.2.5204': attribute type 1 has an invalid length.
[  583.083693][T26118] 8021q: adding VLAN 0 to HW filter on device bond23
[  583.129439][T26122] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5205'.
[  583.201949][T26126] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5207'.
[  583.205646][T26126] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5207'.
[  583.211062][T26126] netlink: 'syz.2.5207': attribute type 5 has an invalid length.
[  583.213931][T26126] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5207'.
[  583.914814][T26144] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5211'.
[  583.990329][T26150] x_tables: unsorted entry at hook 1
[  584.069793][T26161] x_tables: unsorted underflow at hook 3
[  584.220650][T26176] netlink: 'syz.2.5219': attribute type 1 has an invalid length.
[  584.263327][T26179] Cannot find del_set index 3 as target
[  584.282919][T26176] bond24: (slave vxcan5): The slave device specified does not support setting the MAC address
[  584.293508][T26176] bond24: (slave vxcan5): Error -95 calling set_mac_address
[  584.339377][T26185] bond24: (slave bridge0): Enslaving as an active interface with a down link
[  584.796322][T26203] tipc: New replicast peer: 255.255.255.255
[  584.799733][T26203] tipc: Enabled bearer <udp:syz2>, priority 10
[  584.973510][   T56] block nbd3: Receive control failed (result -32)
[  585.171599][T26231] xt_TPROXY: Can be used only with -p tcp or -p udp
[  585.270752][T26236] SET target dimension over the limit!
[  585.942383][T26273] xt_CT: You must specify a L4 protocol and not use inversions on it
[  586.010173][T26277] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  586.066002][T26278] hm3): entered promiscuous mode
[  586.077559][T26277] __nla_validate_parse: 6 callbacks suppressed
[  586.077575][T26277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5241'.
[  586.209240][T26289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5242'.
[  586.881324][T26317] xt_HMARK: proto mask must be zero with L3 mode
[  587.027036][T26324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  587.041292][T26325] set match dimension is over the limit!
[  587.230054][T26352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5255'.
[  587.276092][T26360] xt_hashlimit: max too large, truncated to 1048576
[  587.281705][T26360] xt_hashlimit: overflow, try lower: 2/0
[  587.315370][T26364] Cannot find del_set index 3 as target
[  587.319902][T26363] Cannot find del_set index 3 as target
[  587.362074][T26367] netlink: 'syz.2.5258': attribute type 1 has an invalid length.
[  587.370091][   T33] audit: type=1800 audit(1778081088.754:6): pid=26357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5254" name="memory.events" dev="tmpfs" ino=9449 res=0 errno=0
[  587.413859][T26366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5258'.
[  587.462841][T26380] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  587.509923][T26388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5264'.
[  587.514417][T26388] xt_policy: neither incoming nor outgoing policy selected
[  587.521580][T26388] netlink: 'syz.0.5264': attribute type 33 has an invalid length.
[  587.524826][T26388] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5264'.
[  587.547916][T26393] atomic_op ffff8881b7cd0998 conn xmit_atomic 0000000000000000
[  587.625354][T26400] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5268'.
[  587.628675][T26400] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5268'.
[  587.632710][T26400] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5268'.
[  587.637318][T26400] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5268'.
[  587.707743][T26403] xt_TPROXY: Can be used only with -p tcp or -p udp
[  587.766483][T26415] netlink: 'syz.2.5271': attribute type 1 has an invalid length.
[  588.988922][T26441] xt_hashlimit: size too large, truncated to 1048576
[  589.040204][T26446] xt_hashlimit: size too large, truncated to 1048576
[  589.064368][T26446] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  589.200319][T26450] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  589.292273][T26463] x_tables: duplicate underflow at hook 3
[  589.422293][T26480] xt_hashlimit: size too large, truncated to 1048576
[  589.947387][T26508] x_tables: ip_tables: ah match: only valid for protocol 51
[  590.356878][T26518] openvswitch: netlink: Key type 146 is out of range max 32
[  591.223801][T26551] xt_TPROXY: Can be used only with -p tcp or -p udp
[  591.359801][T26567] __nla_validate_parse: 33 callbacks suppressed
[  591.359820][T26567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5309'.
[  591.492901][T26572] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5310'.
[  591.498841][T26572] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5310'.
[  591.659121][T26584] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5313'.
[  591.676198][T26585] xt_CT: You must specify a L4 protocol and not use inversions on it
[  591.891505][T26596] xt_hashlimit: overflow, rate too high: 0
[  592.018923][T26599] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5317'.
[  592.490771][T26607] xt_TCPMSS: Only works on TCP SYN packets
[  593.172870][T26619] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5321'.
[  593.422889][T26624] lo: entered allmulticast mode
[  593.426535][T26624] IPVS: length: 34 != 206581052192
[  593.623074][T26631] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5323'.
[  593.683698][T26634] Timeout policy `syz1' can only be used by L3 protocol number 41216
[  593.932224][T26662] xt_hashlimit: size too large, truncated to 1048576
[  593.958382][T26662] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[  594.051407][T18142] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  594.051798][T26667] netlink: 'syz.1.5334': attribute type 21 has an invalid length.
[  594.059040][T26667] IPv6: NLM_F_CREATE should be specified when creating new route
[  594.062204][T18142] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  594.069981][T18142] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  594.075968][T18142] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  594.091016][T18142] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  594.094696][T18142] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  594.100664][T18142] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  594.109939][T18142] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  594.274365][T26669] tipc: Resetting bearer <ib:geneve0>
[  594.301343][T26669] A link change request failed with some changes committed already. Interface pimreg may have been left with an inconsistent configuration, please check.
[  594.463588][T26687] xt_l2tp: missing protocol rule (udp|l2tpip)
[  594.584522][T26696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5338'.
[  594.595679][T26692] xt_cgroup: path and classid specified
[  594.722057][T26707] set_target_v0_checkentry: 23 callbacks suppressed
[  594.722071][T26707] Cannot find add_set index 2 as target
[  595.143828][T26714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5343'.
[  595.148675][T26714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5343'.
[  595.300899][T26725] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  595.412928][ T5667] tipc: Subscription rejected, illegal request
[  595.433519][T26737] ip6t_REJECT: ECHOREPLY is not supported
[  595.518939][T26742] netlink: 'syz.0.5350': attribute type 1 has an invalid length.
[  595.527687][T26742] workqueue: Failed to create a rescuer kthread for wq "bond48": -EINTR
[  595.945750][T26767] xt_l2tp: invalid flags combination: 8
[  596.026133][T26777] syzkaller1: entered promiscuous mode
[  596.030266][T26777] syzkaller1: entered allmulticast mode
[  596.171833][T26783] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  596.269115][T26778] dvmrp6: left allmulticast mode
[  596.315031][T26790] xt_limit: Overflow, try lower: 268435456/134217728
[  596.520295][T26799] xt_l2tp: v2 doesn't support IP mode
[  596.581903][T26803] netlink: 'syz.2.5367': attribute type 1 has an invalid length.
[  596.594177][T26803] __nla_validate_parse: 66 callbacks suppressed
[  596.594192][T26803] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5367'.
[  597.664178][T26880] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  597.674777][T26880] SET target dimension over the limit!
[  597.728605][T26877] netlink: 'syz.0.5380': attribute type 1 has an invalid length.
[  597.741268][T26877] netlink: 'syz.0.5380': attribute type 1 has an invalid length.
[  597.753399][T26877] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5380'.
[  597.759931][T26886] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  597.954312][T26901] SET target dimension over the limit!
[  598.119959][T26910] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  598.123730][T26908] xt_TCPMSS: Only works on TCP SYN packets
[  598.376511][T26922] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  598.404039][T26922] x_tables: ip_tables: osf match: only valid for protocol 6
[  598.404834][T26923] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  598.522275][T26939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5397'.
[  598.734317][T26962] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  598.931557][T26978] netlink: 496 bytes leftover after parsing attributes in process `syz.1.5406'.
[  598.939170][T26969] netlink: 'syz.0.5405': attribute type 2 has an invalid length.
[  598.942563][T26969] netlink: 'syz.0.5405': attribute type 2 has an invalid length.
[  599.029722][T26980] veth1_macvtap: entered promiscuous mode
[  599.033578][T26980] macsec0: entered promiscuous mode
[  599.041564][T26980] veth1_macvtap: left promiscuous mode
[  599.705230][T26996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5412'.
[  599.712534][T26996] netlink: 240 bytes leftover after parsing attributes in process `syz.0.5412'.
[  599.731202][T26996] xt_limit: Overflow, try lower: 324382443/0
[  599.840503][T27016] netlink: 'syz.0.5415': attribute type 4 has an invalid length.
[  599.940501][T27004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5413'.
[  599.954173][T27024] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  600.067242][T27030] dvmrp6: entered allmulticast mode
[  600.080200][T27030] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5419'.
[  600.103093][T27031] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  600.140226][T27035] xt_hl: Unknown Hop Limit match mode: 206
[  600.204202][T27037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5421'.
[  600.388580][T27048] syzkaller1: entered promiscuous mode
[  600.390722][T27048] syzkaller1: entered allmulticast mode
[  600.818014][T27053] x_tables: ip_tables: ah match: only valid for protocol 51
[  600.845659][T27056] xt_policy: output policy not valid in PREROUTING and INPUT
[  600.930173][T27061] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5427'.
[  601.565287][T27074] xt_recent: hitcount (134217728) is larger than allowed maximum (65535)
[  601.633607][T27077] __nla_validate_parse: 1 callbacks suppressed
[  601.633624][T27077] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5431'.
[  601.735799][T27079] xt_bpf: check failed: parse error
[  601.745436][T27080] xt_bpf: check failed: parse error
[  601.916346][T27084] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5433'.
[  602.300403][T27088] xt_bpf: check failed: parse error
[  602.707858][T27098] xt_bpf: check failed: parse error
[  602.749407][T27098] xt_ecn: cannot match TCP bits for non-tcp packets
[  602.762814][   T33] audit: type=1800 audit(1778081104.144:7): pid=27099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5439" name="memory.events" dev="tmpfs" ino=9020 res=0 errno=0
[  602.788625][T27114] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5444'.
[  602.795695][T27114] netlink: 'syz.1.5444': attribute type 1 has an invalid length.
[  602.823423][T27114] 8021q: adding VLAN 0 to HW filter on device bond31
[  602.955452][T27125] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5446'.
[  602.959364][T27124] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  602.962956][T27125] netlink: 'syz.1.5446': attribute type 2 has an invalid length.
[  602.965670][T27125] netlink: 780 bytes leftover after parsing attributes in process `syz.1.5446'.
[  602.969337][T27125] netlink: 'syz.1.5446': attribute type 2 has an invalid length.
[  602.980558][T27125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5446'.
[  603.360157][T27150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5454'.
[  603.459279][T27156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5456'.
[  603.506070][T27156] xt_hl: Unknown TTL match mode: 237
[  603.560617][T27162] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5457'.
[  603.565695][T27162] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5457'.
[  603.752073][T27185] x_tables: duplicate underflow at hook 1
[  604.632570][T27200] syzkaller1: entered promiscuous mode
[  604.636057][T27200] syzkaller1: entered allmulticast mode
[  605.826046][T27249] netlink: 'syz.1.5475': attribute type 16 has an invalid length.
[  605.830457][T27249] netlink: 'syz.1.5475': attribute type 17 has an invalid length.
[  606.083066][T27257] x_tables: unsorted underflow at hook 4
[  606.108326][T27257] netlink: 'syz.2.5478': attribute type 3 has an invalid length.
[  606.809401][T27287] __nla_validate_parse: 2 callbacks suppressed
[  606.809422][T27287] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5486'.
[  606.863344][T27291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5487'.
[  606.877428][T27291] SET target dimension over the limit!
[  607.118408][T27302] sctp: [Deprecated]: syz.1.5491 (pid 27302) Use of struct sctp_assoc_value in delayed_ack socket option.
[  607.118408][T27302] Use struct sctp_sack_info instead
[  607.135209][T27302] sctp: [Deprecated]: syz.1.5491 (pid 27302) Use of struct sctp_assoc_value in delayed_ack socket option.
[  607.135209][T27302] Use struct sctp_sack_info instead
[  607.381734][T27312] openvswitch: netlink: IP tunnel dst address not specified
[  607.419531][T27312] xt_hashlimit: size too large, truncated to 1048576
[  607.458390][T27316] xt_hashlimit: size too large, truncated to 1048576
[  607.467361][T27316] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  607.927901][T27343] IPVS: ip_vs_add_dest(): server weight less than zero
[  608.043892][T27348] netlink: 548 bytes leftover after parsing attributes in process `syz.0.5503'.
[  608.049136][T27348] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5503'.
[  608.090676][T27350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5504'.
[  608.099115][T27350] xt_l2tp: missing protocol rule (udp|l2tpip)
[  608.138951][T27355] xt_ipcomp: unknown flags 1D
[  608.211159][T27363] netlink: 'syz.2.5507': attribute type 1 has an invalid length.
[  608.235505][T27363] 8021q: adding VLAN 0 to HW filter on device bond26
[  608.242695][T27363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5507'.
[  608.258802][T27363] bond26 (unregistering): Released all slaves
[  608.294239][T27366] : renamed from sit0 (while UP)
[  608.298882][T27366] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xee
[  608.343844][T27363] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  608.559335][T27392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5511'.
[  608.664592][T27401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5515'.
[  608.868835][T27414] netlink: 4356 bytes leftover after parsing attributes in process `syz.1.5518'.
[  608.889233][T27414] netlink: 4356 bytes leftover after parsing attributes in process `syz.1.5518'.
[  608.898559][T27414] veth1_to_batadv: entered promiscuous mode
[  608.904303][T27414] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  608.944000][T27414] batman_adv: batadv0: Removing interface: batadv_slave_1
[  609.034038][T27421] xt_l2tp: invalid flags combination: 0
[  609.054333][T27423] ipt_ECN: cannot use operation on non-tcp rule
[  609.083396][T27425] xt_bpf: check failed: parse error
[  609.301597][T27437] xt_CT: You must specify a L4 protocol and not use inversions on it
[  609.322722][   T33] audit: type=1800 audit(1778081110.704:8): pid=27435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5525" name="memory.events" dev="tmpfs" ino=9252 res=0 errno=0
[  609.379414][T27440] netlink: 'syz.2.5528': attribute type 13 has an invalid length.
[  609.382330][T27440] netlink: 'syz.2.5528': attribute type 17 has an invalid length.
[  609.489277][T27447] xt_hashlimit: size too large, truncated to 1048576
[  609.540065][T27453] bond0: entered promiscuous mode
[  609.541749][T27453] bond_slave_0: entered promiscuous mode
[  609.544220][T27453] bond0: left promiscuous mode
[  609.545918][T27453] bond_slave_0: left promiscuous mode
[  609.591401][T27457] veth1_to_hsr: entered allmulticast mode
[  609.604109][T27457] SET target dimension over the limit!
[  609.620153][T27459] ip6t_rpfilter: unknown options
[  609.654404][T27461] netlink: Unknown conntrack attr (type=2304, max=9)
[  609.707200][T27467] syzkaller0: entered promiscuous mode
[  609.709025][T27467] syzkaller0: entered allmulticast mode
[  609.714971][T27469] xt_CT: You must specify a L4 protocol and not use inversions on it
[  609.773389][T27473] sctp: [Deprecated]: syz.2.5537 (pid 27473) Use of int in max_burst socket option deprecated.
[  609.773389][T27473] Use struct sctp_assoc_value instead
[  609.783659][T27471] xt_bpf: check failed: parse error
[  609.786011][T27475] ip6t_REJECT: ECHOREPLY is not supported
[  609.923809][T27481] tipc: Bearer <udp:s>: already 2 bearers with priority 10
[  609.930920][T27481] tipc: Bearer <udp:s>: trying with adjusted priority
[  609.934070][T27481] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  610.310852][T27497] xt_hashlimit: size too large, truncated to 1048576
[  611.112144][T27511] ipt_rpfilter: unknown options
[  611.130584][T27517] xt_TCPMSS: Only works on TCP SYN packets
[  611.222245][T27519] Cannot find del_set index 3 as target
[  611.821882][T27557] xt_policy: output policy not valid in PREROUTING and INPUT
[  611.901371][   T54] Bluetooth: hci2: link tx timeout
[  611.903499][   T54] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  612.000586][T27572] erspan0: entered promiscuous mode
[  612.023092][T27571] erspan0: left promiscuous mode
[  612.088586][T27575] __nla_validate_parse: 21 callbacks suppressed
[  612.088598][T27575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5566'.
[  612.108448][T27575] No such timeout policy "syz1"
[  612.351530][T27586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5570'.
[  612.500074][T27586] veth1_to_hsr: left allmulticast mode
[  612.511008][T27586] bond17: left promiscuous mode
[  612.512749][T27586] bond17: left allmulticast mode
[  612.773508][T27592] netlink: 'syz.0.5571': attribute type 9 has an invalid length.
[  612.776057][T27592] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5571'.
[  612.783895][T27592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5571'.
[  612.864577][T27594] xt_TCPMSS: Only works on TCP SYN packets
[  612.997882][T27601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5573'.
[  613.006326][T27601] No such timeout policy "syz1"
[  613.335403][T27616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5578'.
[  613.340563][T27615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5578'.
[  613.344878][T27615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5578'.
[  613.349575][T27615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5578'.
[  613.355026][T27615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5578'.
[  613.368959][T27621] syzkaller0: entered promiscuous mode
[  613.370895][T27621] syzkaller0: entered allmulticast mode
[  613.422965][T27623] netlink: 'syz.2.5580': attribute type 1 has an invalid length.
[  613.521757][T27630] Timeout policy `syz1' can only be used by L3 protocol number 41216
[  613.839983][T27649] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  613.960576][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  614.319378][T27677] xt_limit: Overflow, try lower: 324382443/0
[  614.392431][T27685] xt_CT: You must specify a L4 protocol and not use inversions on it
[  614.435424][T27691] xt_CT: You must specify a L4 protocol and not use inversions on it
[  614.548040][T27698] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  614.945045][T27711] set match dimension is over the limit!
[  615.037920][T27715] netlink: 'syz.1.5600': attribute type 11 has an invalid length.
[  615.095446][T27717] IPVS: set_ctl: invalid protocol: 136 172.30.0.2:20004
[  615.452536][T27720] x_tables: ip_tables: icmp match: only valid for protocol 1
[  615.571575][T27731] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  615.575375][T27734] x_tables: duplicate entry at hook 2
[  615.587687][T27733] atomic_op ffff88817427d198 conn xmit_atomic 0000000000000000
[  615.593658][T27735] atomic_op ffff88817427b198 conn xmit_atomic 0000000000000000
[  615.903881][T27755] IPVS: length: 167 != 8
[  615.980885][T27760] xt_hashlimit: size too large, truncated to 1048576
[  616.015182][T27762] SET target dimension over the limit!
[  616.036965][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  616.705217][T27782] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  616.960048][T27798] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  617.321478][T27808] netlink: 'syz.1.5622': attribute type 1 has an invalid length.
[  617.716669][T27820] __nla_validate_parse: 18 callbacks suppressed
[  617.716700][T27820] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5624'.
[  617.785175][T27821] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5625'.
[  617.856182][T27823] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  617.921088][T27825] xt_TCPMSS: Only works on TCP SYN packets
[  619.240143][T27879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5640'.
[  619.597524][T27903] netem: change failed
[  619.680870][T27909] Cannot find del_set index 2044 as target
[  619.714048][T27917] xt_CONNSECMARK: invalid mode: 254
[  619.764595][T27922] xt_TCPMSS: Only works on TCP SYN packets
[  619.778343][T27923] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5651'.
[  619.927346][T27943] netlink: 'syz.2.5656': attribute type 2 has an invalid length.
[  619.935770][T27943] netlink: 'syz.2.5656': attribute type 5 has an invalid length.
[  619.935821][T27944] netlink: 'syz.2.5656': attribute type 5 has an invalid length.
[  619.940613][T27943] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.5656'.
[  619.944117][T27944] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.5656'.
[  619.944798][T27944] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5656'.
[  620.079806][T27953] xt_cgroup: xt_cgroup: no path or classid specified
[  620.129305][T27955] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5659'.
[  620.143291][T27955] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  620.188307][T27957] netlink: 'syz.2.5660': attribute type 6 has an invalid length.
[  620.195711][T27957] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5660'.
[  620.621575][T27973] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5664'.
[  620.743710][T27980] xt_CT: No such helper "snmp_trap"
[  621.805369][T28024] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[  621.860230][T28031] xt_l2tp: invalid flags combination: 8
[  621.899299][T28034] netlink: 'syz.1.5679': attribute type 29 has an invalid length.
[  621.906104][T28036] batadv_slave_1: entered promiscuous mode
[  621.911580][T28036] xt_TCPMSS: Only works on TCP SYN packets
[  621.916161][T28035] batadv_slave_1: left promiscuous mode
[  621.967917][T28042] lo: entered allmulticast mode
[  621.971632][T28042] lo: left allmulticast mode
[  621.977618][T28043] xt_hashlimit: max too large, truncated to 1048576
[  621.981114][T28043] xt_hashlimit: Unknown mode mask 300, kernel too old?
[  622.733855][T28066] __nla_validate_parse: 5 callbacks suppressed
[  622.733869][T28066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5687'.
[  622.797501][T28067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5687'.
[  622.830217][T28069] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5688'.
[  623.000853][T28080] xt_bpf: check failed: parse error
[  623.376000][T28095] SET target dimension over the limit!
[  623.780150][T28113] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5699'.
[  623.783768][T28113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5699'.
[  624.193974][T28128] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5703'.
[  624.236790][T28130] netlink: 'syz.1.5705': attribute type 1 has an invalid length.
[  624.320297][T28130] 8021q: adding VLAN 0 to HW filter on device bond32
[  624.335679][T28130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5705'.
[  624.354651][T28130] bond32 (unregistering): Released all slaves
[  624.541475][T28136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5706'.
[  624.574845][T28139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5706'.
[  624.594955][T28138] tipc: Resetting bearer <ib:geneve0>
[  624.602657][T28138] A link change request failed with some changes committed already. Interface pimreg may have been left with an inconsistent configuration, please check.
[  624.875565][T28157] netlink: 'syz.1.5712': attribute type 1 has an invalid length.
[  625.013925][T28166] xt_hashlimit: overflow, rate too high: 0
[  625.016784][T28166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5715'.
[  625.032398][T28166] bond0: Unable to set up delay as MII monitoring is disabled
[  625.235015][T28168] x_tables: duplicate underflow at hook 4
[  625.511471][T28184] "syz.0.5718" (28184) uses obsolete ecb(arc4) skcipher
[  625.908720][T28207] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  625.918512][T28206] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  626.022997][T28212] netlink: 'syz.0.5725': attribute type 83 has an invalid length.
[  626.043579][T28213] Cannot find del_set index 3 as target
[  626.463324][T28223] syzkaller1: entered promiscuous mode
[  626.472581][T28223] syzkaller1: entered allmulticast mode
[  627.012289][T28260] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 4
[  627.260817][T28275] ip6t_REJECT: ECHOREPLY is not supported
[  627.299496][T28277] xt_hashlimit: size too large, truncated to 1048576
[  627.352580][T28279] SET target dimension over the limit!
[  627.536797][T28292] xt_TPROXY: Can be used only with -p tcp or -p udp
[  627.650439][T28304] xt_hashlimit: size too large, truncated to 1048576
[  627.656452][T28304] xt_hashlimit: max too large, truncated to 1048576
[  627.754069][T28304] netlink: 'syz.1.5749': attribute type 1 has an invalid length.
[  627.759066][T28304] __nla_validate_parse: 9 callbacks suppressed
[  627.759078][T28304] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5749'.
[  627.943979][T28316] netlink: 192 bytes leftover after parsing attributes in process `syz.0.5751'.
[  628.117301][T28326] netlink: zone id is out of range
[  628.119673][T28326] netlink: zone id is out of range
[  628.122109][T28326] netlink: zone id is out of range
[  628.124441][T28326] netlink: zone id is out of range
[  628.129507][T28326] netlink: zone id is out of range
[  628.131802][T28326] netlink: zone id is out of range
[  628.134056][T28326] netlink: zone id is out of range
[  628.139060][T28326] netlink: zone id is out of range
[  628.142684][T28326] netlink: zone id is out of range
[  628.330526][T28336] ip6t_REJECT: ECHOREPLY is not supported
[  628.424497][T28341] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 4
[  628.438978][T28341] syzkaller0: entered promiscuous mode
[  628.441304][T28341] syzkaller0: entered allmulticast mode
[  628.633359][T28355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5762'.
[  628.727784][T28359] xt_policy: too many policy elements
[  629.011074][   T33] audit: type=1800 audit(1778081130.394:9): pid=28356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5761" name="memory.events" dev="tmpfs" ino=9690 res=0 errno=0
[  629.140231][T28382] xt_HMARK: spi-set and port-set can't be combined
[  629.150820][T28385] xt_HMARK: spi-set and port-set can't be combined
[  629.202111][T28386] nbd: couldn't find device at index 0
[  629.212750][T28377] dvmrp6: left allmulticast mode
[  629.220887][T28377] bond10: left allmulticast mode
[  629.532237][T28408] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5776'.
[  629.535802][T28408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5776'.
[  629.544783][T28408] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5776'.
[  629.551772][T28408] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5776'.
[  629.746844][T28422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5779'.
[  629.750887][T28422] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5779'.
[  629.790295][T28426] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5780'.
[  629.811185][T28426] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  630.240692][T28450] block nbd2: server does not support multiple connections per device.
[  630.244637][T28450] block nbd2: shutting down sockets
[  630.344334][T28460] netlink: 'syz.1.5791': attribute type 1 has an invalid length.
[  630.606097][T28487] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  630.608704][T28484] bond49: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  630.613497][T28484] bond49 (unregistering): Released all slaves
[  630.653514][T28491] xt_socket: unknown flags 0x50
[  630.658927][T28489] syzkaller0: entered promiscuous mode
[  630.663167][T28489] syzkaller0: entered allmulticast mode
[  631.130032][T28519] Cannot find del_set index 4 as target
[  631.180745][T28521] net_ratelimit: 346 callbacks suppressed
[  631.180759][T28521] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048)
[  631.433630][   T33] audit: type=1800 audit(1778081132.814:10): pid=28518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5805" name="memory.events" dev="tmpfs" ino=9710 res=0 errno=0
[  631.545283][T28546] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  631.683161][T28554] xt_TPROXY: Can be used only with -p tcp or -p udp
[  631.824092][T28559] netlink: 'syz.2.5814': attribute type 4 has an invalid length.
[  631.828411][T28559] netlink: 'syz.2.5814': attribute type 4 has an invalid length.
[  631.949742][T28566] xt_CT: You must specify a L4 protocol and not use inversions on it
[  632.050067][T28574] SET target dimension over the limit!
[  632.134973][T28580] netlink: 'syz.0.5820': attribute type 1 has an invalid length.
[  632.138935][T28580] netlink: 'syz.0.5820': attribute type 7 has an invalid length.
[  632.141991][T28580] netlink: 'syz.0.5820': attribute type 8 has an invalid length.
[  632.145017][T28580] NCSI netlink: No device for ifindex 1073545264
[  632.168743][T28582] netlink: 'syz.2.5819': attribute type 15 has an invalid length.
[  632.299444][T28584] --map-set only usable from mangle table
[  632.409194][T28586] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  632.420415][T28586] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.424055][T28586] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  632.427979][T28586] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0
[  632.435997][T28594] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  632.480647][T28596] Unknown options in mask 6
[  632.503806][T28586] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  632.511916][T28586] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.515411][T28586] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  632.519652][T28586] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0
[  632.591353][T28586] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  632.594854][T28586] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.598870][T28586] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  632.601945][T28586] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0
[  632.645322][T28586] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  632.648573][T28586] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.651723][T28586] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  632.655836][T28586] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0
[  632.740476][ T5667] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  632.743439][ T5667] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  632.749946][ T5667] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  632.755585][ T5667] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 20000 - 0
[  632.773698][ T5667] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  632.779062][ T5667] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  632.781652][ T5667] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  632.784119][ T5667] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 20000 - 0
[  632.824607][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  632.828455][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  632.831245][   T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  632.833855][   T13] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 20000 - 0
[  632.855658][ T5470] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  632.856592][T28617] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  632.859620][ T5470] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  632.865422][T28618] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  632.868697][ T5470] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  632.871905][ T5470] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 20000 - 0
[  633.146140][T28645] xt_hashlimit: size too large, truncated to 1048576
[  633.149293][T28645] xt_hashlimit: invalid interval
[  633.503684][T28653] netlink: 'syz.0.5839': attribute type 1 has an invalid length.
[  633.588804][T28659] netlink: 'syz.2.5840': attribute type 5 has an invalid length.
[  633.648115][T28653] macvlan3: entered promiscuous mode
[  633.650393][T28653] macvlan3: entered allmulticast mode
[  633.653931][T28653] bond49: entered promiscuous mode
[  633.659124][T28653] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  633.680964][T28653] bond49: left promiscuous mode
[  633.821118][T28668] syzkaller0: entered promiscuous mode
[  633.836823][T28668] syzkaller0: entered allmulticast mode
[  633.862894][T28668] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  633.924577][T28670] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  634.011442][T28676] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  634.063415][T28683] syzkaller0: entered promiscuous mode
[  634.065412][T28683] syzkaller0: entered allmulticast mode
[  634.115879][T28685] SET target dimension over the limit!
[  634.666195][T28716] __nla_validate_parse: 14 callbacks suppressed
[  634.671368][T28716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5858'.
[  634.682631][T28719] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  634.932906][T28192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  634.938455][T28192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  635.031443][T28744] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  635.046542][T28744] nbd: couldn't find a device at index 0
[  635.532511][T28760] x_tables: duplicate underflow at hook 1
[  635.618147][T28760] x_tables: duplicate underflow at hook 1
[  635.960620][T28783] syzkaller0: entered promiscuous mode
[  635.969364][T28783] syzkaller0: entered allmulticast mode
[  635.973460][T28782] sch_tbf: burst 6 is lower than device syzkaller0 mtu (1500) !
[  635.999313][T28787] syzkaller1: entered promiscuous mode
[  636.001822][T28787] syzkaller1: entered allmulticast mode
[  636.911258][T28808] xt_bpf: check failed: parse error
[  636.977559][T28816] syzkaller0: entered promiscuous mode
[  636.979784][T28816] syzkaller0: entered allmulticast mode
[  637.078777][ T1160] wlan1: Trigger new scan to find an IBSS to join
[  637.184724][T28820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5882'.
[  637.191011][T28820] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5882'.
[  637.554816][T28837] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5887'.
[  637.562775][T28837] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5887'.
[  637.583026][T28837] xt_hashlimit: size too large, truncated to 1048576
[  637.599296][T28836] netlink: 'syz.1.5886': attribute type 1 has an invalid length.
[  637.635110][T28836] bond33: entered promiscuous mode
[  637.639913][T28836] bond33: entered allmulticast mode
[  637.646048][T28836] 8021q: adding VLAN 0 to HW filter on device bond33
[  637.656636][T28843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5887'.
[  637.811732][T28846] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  637.831032][T28846] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  637.835724][T28846] syzkaller0: entered promiscuous mode
[  637.837916][T28846] syzkaller0: entered allmulticast mode
[  637.856551][T28845] tipc: Resetting bearer <eth:syzkaller0>
[  637.876681][T28845] tipc: Disabling bearer <eth:syzkaller0>
[  638.139350][T28852] Timeout policy `syz0' can only be used by L3 protocol number 0
[  638.500848][T28889] netlink: 62967 bytes leftover after parsing attributes in process `syz.1.5897'.
[  638.753824][T28882] netlink: 'syz.2.5895': attribute type 5 has an invalid length.
[  638.790944][T28882] bridge22: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  638.830393][T28913] syzkaller0: entered promiscuous mode
[  638.832952][T28913] syzkaller0: entered allmulticast mode
[  639.066128][T28924] xt_addrtype: ipv6 does not support BROADCAST matching
[  640.037596][T28193] wlan1: Trigger new scan to find an IBSS to join
[  642.029395][T28927] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  642.185649][T28935] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5902'.
[  642.713505][T28972] batadv_slave_1: entered promiscuous mode
[  642.755373][T28981] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  642.764633][T28975] batadv_slave_1: left promiscuous mode
[  642.883220][T28983] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5912'.
[  642.965421][T28989] netlink: 'syz.2.5914': attribute type 1 has an invalid length.
[  642.997166][T23155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  643.001952][T28993] dvmrp6: entered allmulticast mode
[  643.049552][T28996] SET target dimension over the limit!
[  643.174630][T29002] set match dimension is over the limit!
[  643.434344][T29011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5921'.
[  643.505881][T29013] xt_hashlimit: size too large, truncated to 1048576
[  643.592224][T29018] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5923'.
[  643.600177][T29018] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5923'.
[  643.629946][T29018] xt_hashlimit: size too large, truncated to 1048576
[  644.397518][T29048] x_tables: ip_tables: osf match: only valid for protocol 6
[  644.619638][T29051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5931'.
[  644.812498][T29062] set match dimension is over the limit!
[  644.815715][T29063] set match dimension is over the limit!
[  645.143347][T29073] xt_l2tp: missing protocol rule (udp|l2tpip)
[  645.514436][T29091] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  645.824102][T29095] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5942'.
[  645.827551][T29095] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5942'.
[  645.902755][T29126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5948'.
[  645.909748][T29126] sctp: [Deprecated]: syz.1.5948 (pid 29126) Use of struct sctp_assoc_value in delayed_ack socket option.
[  645.909748][T29126] Use struct sctp_sack_info instead
[  645.928619][T29135] x_tables: ip_tables: osf match: only valid for protocol 6
[  646.062153][T29148] x_tables: duplicate underflow at hook 2
[  646.101811][T29152] xt_TCPMSS: Only works on TCP SYN packets
[  646.141372][T29157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5957'.
[  646.195770][T29157] xt_TPROXY: Can be used only with -p tcp or -p udp
[  646.282019][T29166] xt_hashlimit: size too large, truncated to 1048576
[  646.283349][T29169] No such timeout policy "syz0"
[  646.433540][T29181] xt_bpf: check failed: parse error
[  646.436790][T29181] xt_bpf: check failed: parse error
[  646.439561][T29181] xt_bpf: check failed: parse error
[  646.442166][T29181] xt_bpf: check failed: parse error
[  646.446154][T29181] xt_bpf: check failed: parse error
[  646.451123][T29181] xt_bpf: check failed: parse error
[  646.456553][T29181] xt_bpf: check failed: parse error
[  646.462288][T29181] xt_bpf: check failed: parse error
[  646.465099][T29181] xt_bpf: check failed: parse error
[  646.470636][T29181] xt_bpf: check failed: parse error
[  646.525074][T29179] set match dimension is over the limit!
[  647.405926][T29222] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  647.680813][T29240] Cannot find del_set index 49151 as target
[  647.802089][T29243] __nla_validate_parse: 6 callbacks suppressed
[  647.802111][T29243] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5979'.
[  647.938306][T29256] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5983'.
[  647.955547][T29256] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5983'.
[  647.959141][T29256] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5983'.
[  648.143074][T29266] netlink: 'syz.2.5986': attribute type 12 has an invalid length.
[  648.222022][T29264] netlink: 'syz.1.5985': attribute type 5 has an invalid length.
[  648.350609][T29274] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  648.355020][T29274] IPVS: set_ctl: invalid protocol: 11822 101.116.0.0:0
[  648.542245][T29291] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  648.603311][T29297] netlink: 'syz.2.5996': attribute type 29 has an invalid length.
[  648.628646][T29302] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  648.710876][T29314] dvmrp6: left allmulticast mode
[  648.712931][T29315] x_tables: duplicate underflow at hook 4
[  648.733997][T29318] Cannot find del_set index 3 as target
[  648.772207][T29320] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6000'.
[  648.880554][T29326] netlink: 192 bytes leftover after parsing attributes in process `syz.0.6003'.
[  648.910312][T29328] Cannot find add_set index 1 as target
[  649.072092][T29336] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6006'.
[  649.171316][T29340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6008'.
[  649.219875][T29340] syzkaller0: entered promiscuous mode
[  649.222053][T29340] syzkaller0: entered allmulticast mode
[  649.276394][T29341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  649.362296][T29340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6008'.
[  649.464674][T29353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6012'.
[  649.470274][T29354] xt_policy: neither incoming nor outgoing policy selected
[  649.862228][T29384] xt_policy: output policy not valid in PREROUTING and INPUT
[  649.935881][T29382] --map-set only usable from mangle table
[  650.023405][T29401] 8021q: adding VLAN 0 to HW filter on device `
[  650.030801][T29401] 8021q: adding VLAN 0 to HW filter on device batadv0
[  650.065233][T29401] veth0_macvtap: left promiscuous mode
[  650.069792][T29401] veth0_macvtap: entered promiscuous mode
[  650.086163][T29401] 8021q: adding VLAN 0 to HW filter on device batadv1
[  650.093890][T29401] 8021q: adding VLAN 0 to HW filter on device bond1
[  650.100234][T29401] 8021q: adding VLAN 0 to HW filter on device bond2
[  650.105626][T29401] 8021q: adding VLAN 0 to HW filter on device bond3
[  650.110576][T29401] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  650.142036][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  650.145937][T29405] Cannot find del_set index 49151 as target
[  650.149038][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  650.152005][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  650.155169][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  650.170136][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  650.174202][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  650.180467][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  650.183571][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  650.223779][T29409] syzkaller1: entered promiscuous mode
[  650.226165][T29409] syzkaller1: entered allmulticast mode
[  650.390430][T29420] 8021q: VLANs not supported on lo
[  650.392433][T29420] x_tables: unsorted entry at hook 3
[  650.985755][T29449] dvmrp6: left allmulticast mode
[  651.207656][   T33] audit: type=1800 audit(1778081152.594:11): pid=29443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6034" name="memory.events" dev="tmpfs" ino=10767 res=0 errno=0
[  651.654641][T29488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  651.660860][T29488] xt_l2tp: v2 tid > 0xffff: 37482740
[  652.021112][T29506] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  652.224274][T29523] syzkaller0: entered promiscuous mode
[  652.226377][T29523] syzkaller0: entered allmulticast mode
[  652.410307][T29530] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  652.689894][T29534] ipt_rpfilter: unknown options
[  652.933878][T29547] __nla_validate_parse: 7 callbacks suppressed
[  652.933892][T29547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6065'.
[  652.963395][T29549] xt_TCPMSS: Only works on TCP SYN packets
[  653.651097][T29579] Cannot find add_set index 4 as target
[  653.722146][T29586] netlink: 'syz.1.6074': attribute type 1 has an invalid length.
[  653.737632][T29586] bond34: entered promiscuous mode
[  653.740176][T29586] 8021q: adding VLAN 0 to HW filter on device bond34
[  653.765440][T29586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6074'.
[  653.779067][T29586] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6074'.
[  653.838690][T29591] xt_HMARK: proto mask must be zero with L3 mode
[  653.869795][T29591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6075'.
[  653.947165][T29594] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  654.088871][T29604] xt_TPROXY: Can be used only with -p tcp or -p udp
[  654.258633][T29617] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  654.268319][T29617] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  654.392110][T29623] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6083'.
[  654.660907][T29637] xt_l2tp: missing protocol rule (udp|l2tpip)
[  654.975768][T29644] tipc: Resetting bearer <ib:geneve0>
[  654.984261][T29644] tipc: Resetting bearer <ib:geneve0>
[  654.989317][T29654] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  654.993087][T29655] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  655.063650][T29657] netlink: 'syz.1.6090': attribute type 29 has an invalid length.
[  655.071106][T29657] netlink: 'syz.1.6090': attribute type 29 has an invalid length.
[  655.078866][T29657] netlink: 500 bytes leftover after parsing attributes in process `syz.1.6090'.
[  655.228207][T29662] netlink: 'syz.2.6091': attribute type 1 has an invalid length.
[  655.230832][T29662] nbd: couldn't find device at index -427251215
[  655.266095][T29662] bond26: option lacp_active: invalid value (8)
[  655.269393][T29662] bond26 (unregistering): Released all slaves
[  655.283400][T29665] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6092'.
[  655.313552][T29665] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6092'.
[  655.371863][T29665] syzkaller0: entered promiscuous mode
[  655.374129][T29665] syzkaller0: entered allmulticast mode
[  656.083285][T29673] xt_CT: You must specify a L4 protocol and not use inversions on it
[  659.433403][T29681] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  659.439491][T29683] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  659.527179][T29686] x_tables: ip_tables: osf match: only valid for protocol 6
[  659.598263][T29688] x_tables: duplicate underflow at hook 4
[  659.653809][T29690] ipt_ECN: cannot use operation on non-tcp rule
[  659.750392][T29699] tls_set_device_offload_rx: netdev not found
[  659.842228][T29703] ip6t_rpfilter: unknown options
[  659.893727][T29709] --map-set only usable from mangle table
[  659.919940][T29705] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6103'.
[  659.958713][T29714] netlink: 'syz.0.6105': attribute type 1 has an invalid length.
[  659.971660][T29714] veth25: entered promiscuous mode
[  659.983856][T29716] netlink: 'syz.2.6106': attribute type 4 has an invalid length.
[  659.987714][T29717] netlink: 'syz.2.6106': attribute type 4 has an invalid length.
[  659.990983][T29716] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6106'.
[  659.993960][T29717] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6106'.
[  660.070872][T29717] syzkaller1: tun_chr_ioctl cmd 1074025677
[  660.073677][T29717] syzkaller1: linktype set to 270
[  660.077767][T29723] syzkaller1: tun_chr_ioctl cmd 1074025677
[  660.083511][T29723] syzkaller1: linktype set to 270
[  660.117442][T29727] netlink: 'syz.1.6108': attribute type 13 has an invalid length.
[  660.121451][T29727] netlink: 'syz.1.6108': attribute type 17 has an invalid length.
[  660.125128][T29727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6108'.
[  660.185768][T29726] tipc: Resetting bearer <eth:ip6tnl0>
[  660.249298][T29732] x_tables: ip6_tables: dccp match: only valid for protocol 33
[  660.261224][T29726] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  660.555583][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  660.560929][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  660.569928][   T13] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  660.579155][   T13] netdevsim netdevsim1 eth0: unset [1, 2] type 2 family 0 port 20000 - 0
[  660.586931][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  660.590077][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  660.593183][   T13] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  660.595898][   T13] netdevsim netdevsim1 eth1: unset [1, 2] type 2 family 0 port 20000 - 0
[  660.605753][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  660.610312][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  660.613299][   T13] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  660.616197][   T13] netdevsim netdevsim1 eth2: unset [1, 2] type 2 family 0 port 20000 - 0
[  660.620401][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  660.624005][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  660.627267][   T13] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  660.630427][   T13] netdevsim netdevsim1 eth3: unset [1, 2] type 2 family 0 port 20000 - 0
[  660.635313][T29734] xt_HMARK: spi-set and port-set can't be combined
[  660.875865][T29757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6117'.
[  660.999861][T29771] netlink: 'syz.2.6121': attribute type 4 has an invalid length.
[  661.015198][T29771] netlink: 'syz.2.6121': attribute type 4 has an invalid length.
[  661.261978][T29792] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6124'.
[  661.530917][T29810] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6127'.
[  661.993832][T29845] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6135'.
[  662.003876][T29845] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6135'.
[  662.019446][T29853] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6137'.
[  662.300255][T29887] xt_hashlimit: overflow, try lower: 18446744073709551615/32
[  662.700010][T29913] dvmrp6: entered allmulticast mode
[  662.723481][T29913] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  663.050056][T29930] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  663.070767][T29930] netlink: 'syz.0.6156': attribute type 4 has an invalid length.
[  663.094059][T29930] netlink: 'syz.0.6156': attribute type 4 has an invalid length.
[  663.180383][T29938] pim6reg1: entered promiscuous mode
[  663.185673][T29938] pim6reg1: entered allmulticast mode
[  663.455733][T29962] x_tables: duplicate underflow at hook 2
[  663.727496][T29983] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  663.731597][T29982] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  663.876681][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.250231][T30011] ip6gre3: entered promiscuous mode
[  664.252704][T30011] ip6gre3: entered allmulticast mode
[  664.870776][ T7673] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  664.874556][ T7673] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  664.885738][ T7673] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  664.892605][ T7673] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  664.905913][ T7673] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  664.911630][ T7673] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  664.921501][ T7673] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  664.928632][ T7673] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  665.020843][ T7673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  665.122883][T30047] nbd: couldn't find a device at index 1
[  665.127596][T30047] __nla_validate_parse: 12 callbacks suppressed
[  665.127607][T30047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6178'.
[  665.140699][T30047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6178'.
[  665.319419][T30055] netlink: 'syz.1.6179': attribute type 32 has an invalid length.
[  665.463485][T30063] geneve7: entered promiscuous mode
[  665.466146][ T7673] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  665.477483][T28192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  665.480309][ T7673] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  665.480330][ T7673] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  665.480344][ T7673] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  665.632887][T30067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6183'.
[  665.885582][T30080] 8021q: adding VLAN 0 to HW filter on device `
[  665.893551][T30080] 8021q: adding VLAN 0 to HW filter on device batadv0
[  665.905333][T30081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6185'.
[  665.928588][T30080] veth0_to_team: left promiscuous mode
[  665.933584][T30080] batman_adv: batadv0: Interface activated: batadv_slave_0
[  665.941018][T30080] veth0_macvtap: left promiscuous mode
[  665.943265][T30080] veth0_macvtap: entered promiscuous mode
[  665.948252][T30080] veth0_to_team: entered promiscuous mode
[  665.952468][T30080] 8021q: adding VLAN 0 to HW filter on device bond1
[  665.955472][T30080] 8021q: adding VLAN 0 to HW filter on device bond2
[  665.962330][T30083] sctp: [Deprecated]: syz.0.6185 (pid 30083) Use of struct sctp_assoc_value in delayed_ack socket option.
[  665.962330][T30083] Use struct sctp_sack_info instead
[  665.962708][T30080] 8021q: adding VLAN 0 to HW filter on device bond3
[  665.979639][T30080] 8021q: adding VLAN 0 to HW filter on device bond4
[  665.983234][T30080] 8021q: adding VLAN 0 to HW filter on device bond5
[  665.990622][T30080] 8021q: adding VLAN 0 to HW filter on device bond6
[  665.993258][T30080] 8021q: adding VLAN 0 to HW filter on device bond7
[  665.998369][T30080] 8021q: adding VLAN 0 to HW filter on device batadv1
[  666.002137][T30080] 8021q: adding VLAN 0 to HW filter on device bond8
[  666.008337][T30080] 8021q: adding VLAN 0 to HW filter on device bond9
[  666.012773][T30080] 8021q: adding VLAN 0 to HW filter on device bond10
[  666.021837][T30080] 8021q: adding VLAN 0 to HW filter on device bond11
[  666.026015][T30084] netlink: 'syz.0.6185': attribute type 1 has an invalid length.
[  666.028435][T30080] 8021q: adding VLAN 0 to HW filter on device bond12
[  666.029830][T30084] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6185'.
[  666.049174][T30080] 8021q: adding VLAN 0 to HW filter on device bond13
[  666.053364][T30080] 8021q: adding VLAN 0 to HW filter on device bond14
[  666.060067][T30080] 8021q: adding VLAN 0 to HW filter on device bond15
[  666.065055][T30080] 8021q: adding VLAN 0 to HW filter on device bond16
[  666.069074][T30080] 8021q: adding VLAN 0 to HW filter on device bond17
[  666.075983][T30080] 8021q: adding VLAN 0 to HW filter on device bond18
[  666.080871][T30080] 8021q: adding VLAN 0 to HW filter on device bond19
[  666.084373][T30080] 8021q: adding VLAN 0 to HW filter on device bond20
[  666.089649][T30080] 8021q: adding VLAN 0 to HW filter on device bond21
[  666.092881][T30080] 8021q: adding VLAN 0 to HW filter on device bond22
[  666.095908][T30080] hsr1: Slave B (veth0_to_batadv) is not up; please bring it up to get a fully working HSR network
[  666.112921][T30080] 8021q: adding VLAN 0 to HW filter on device bond23
[  666.116051][T30080] 8021q: adding VLAN 0 to HW filter on device bond24
[  666.122625][T30080] 8021q: adding VLAN 0 to HW filter on device bond25
[  666.127117][T30080] 8021q: adding VLAN 0 to HW filter on device bond26
[  666.129699][ T5666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  666.131773][T30080] 8021q: adding VLAN 0 to HW filter on device bond27
[  666.137208][T30080] 8021q: adding VLAN 0 to HW filter on device bond28
[  666.139775][T30080] 8021q: adding VLAN 0 to HW filter on device bond29
[  666.142793][T30080] 8021q: adding VLAN 0 to HW filter on device bond30
[  666.167977][T30080] 8021q: adding VLAN 0 to HW filter on device bond31
[  666.178027][T30080] 8021q: adding VLAN 0 to HW filter on device bond32
[  666.189342][T30080] 8021q: adding VLAN 0 to HW filter on device eth0
[  666.193429][T30080] 8021q: adding VLAN 0 to HW filter on device eth1
[  666.199564][T30080] 8021q: adding VLAN 0 to HW filter on device eth2
[  666.207928][T30080] 8021q: adding VLAN 0 to HW filter on device eth3
[  666.211134][T30080] bond33: left promiscuous mode
[  666.213039][T30080] 8021q: adding VLAN 0 to HW filter on device bond33
[  666.217406][T30080] bond34: left promiscuous mode
[  666.219399][T30080] 8021q: adding VLAN 0 to HW filter on device bond34
[  666.261212][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  666.265884][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  666.269953][   T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  666.272763][   T13] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 20004 - 0
[  666.275605][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  666.280205][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  666.283044][   T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  666.286184][   T13] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 20004 - 0
[  666.300457][T30091] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  666.305309][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  666.308987][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  666.311789][   T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  666.314869][   T13] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 20004 - 0
[  666.318049][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  666.320780][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  666.323893][   T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  666.328306][   T13] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 20004 - 0
[  666.336199][T30091] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  666.340641][T30091] syzkaller0: entered promiscuous mode
[  666.342941][T30091] syzkaller0: entered allmulticast mode
[  666.390821][T30091] tipc: Resetting bearer <eth:syzkaller0>
[  666.425690][T30090] tipc: Resetting bearer <eth:syzkaller0>
[  666.439267][T30090] tipc: Disabling bearer <eth:syzkaller0>
[  666.866060][T30112] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  667.162217][T15228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  667.165904][T15228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  667.226829][ T7673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  667.293844][T30135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6199'.
[  667.297645][T30136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6199'.
[  667.301677][T30136] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6199'.
[  667.310656][T30135] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6199'.
[  667.358168][T30139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  667.525417][T30143] x_tables: ip6_tables: mh match: only valid for protocol 135
[  667.591397][T30145] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6202'.
[  667.806690][T30157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  667.817775][T30157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  668.055590][T30160] syzkaller0: entered promiscuous mode
[  668.061079][T30160] syzkaller0: entered allmulticast mode
[  668.071374][T30165] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  668.074353][T30165] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  668.081865][T30165] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  668.086122][T30165] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  668.090765][T30165] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  668.094172][T30165] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  668.097890][T30165] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  668.105155][T30165] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  668.109164][T30165] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  668.113970][T30165] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  668.182376][T30167] openvswitch: netlink: Missing key (keys=40, expected=80)
[  668.203095][T30167] x_tables: duplicate underflow at hook 4
[  668.351851][T10295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  669.457217][T18142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  670.579385][T30173] xt_hashlimit: size too large, truncated to 1048576
[  670.588017][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  670.589138][T30173] xt_hashlimit: max too large, truncated to 1048576
[  670.600530][T28192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  670.694431][T30180] xt_HMARK: spi-set and port-set can't be combined
[  670.734479][T30184] netlink: 'syz.2.6213': attribute type 2 has an invalid length.
[  670.825192][T30188] __nla_validate_parse: 2 callbacks suppressed
[  670.825207][T30188] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6214'.
[  670.838464][T30188] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6214'.
[  670.852266][T30188] xt_hashlimit: size too large, truncated to 1048576
[  670.868851][T30192] xt_TPROXY: Can be used only with -p tcp or -p udp
[  670.899559][T30198] ipt_REJECT: TCP_RESET invalid for non-tcp
[  670.929305][T30201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6218'.
[  671.008799][T30208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6222'.
[  671.136930][T30225] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  671.180285][T30215] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[  671.188167][T30225] xt_CT: No such helper "syz0"
[  671.248519][T30233] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6228'.
[  671.281348][T30238] xt_HMARK: spi-set and port-set can't be combined
[  671.328829][T30240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6229'.
[  671.522627][T30260] xt_TCPMSS: Only works on TCP SYN packets
[  671.583669][T30264] SET target dimension over the limit!
[  671.646961][T30268] netlink: 548 bytes leftover after parsing attributes in process `syz.0.6238'.
[  671.650886][T30268] netlink: 180 bytes leftover after parsing attributes in process `syz.0.6238'.
[  671.659787][T30268] netlink: 388 bytes leftover after parsing attributes in process `syz.0.6238'.
[  671.709719][T18142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  671.950144][T30283] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6242'.
[  671.984484][T30283] gretap0: entered promiscuous mode
[  671.988346][T30283] 0{X: renamed from gretap0
[  672.004431][T30283] 0{X: left promiscuous mode
[  672.008355][T30283] 0{X: entered allmulticast mode
[  672.012705][T30283] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  672.385340][T30290] x_tables: ip_tables: osf match: only valid for protocol 6
[  672.676109][T30303] syzkaller1: entered promiscuous mode
[  672.678043][T30303] syzkaller1: entered allmulticast mode
[  672.827781][ T5666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  672.834848][T30316] xt_hashlimit: size too large, truncated to 1048576
[  673.305443][T30338] xt_socket: unknown flags 0x4
[  673.345321][T30340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  673.596099][T30357] xt_limit: Overflow, try lower: 268435456/134217728
[  673.777455][T30364] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  673.814732][T30367] xt_recent: hitcount (134217728) is larger than allowed maximum (65535)
[  674.242030][T30382] reject_tg6_check: 23 callbacks suppressed
[  674.242046][T30382] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  674.317294][T30387] xt_hashlimit: size too large, truncated to 1048576
[  674.337565][T30389] syzkaller1: entered allmulticast mode
[  675.042595][T30425] x_tables: unsorted entry at hook 3
[  675.141928][T30433] xt_hashlimit: size too large, truncated to 1048576
[  675.192397][T30435] xt_hashlimit: size too large, truncated to 1048576
[  675.214761][T30435] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  675.715637][T30457] x_tables: unsorted entry at hook 2
[  675.852038][T30462] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  676.364644][T30484] __nla_validate_parse: 14 callbacks suppressed
[  676.364659][T30484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6293'.
[  676.406127][T30486] netlink: 'syz.2.6294': attribute type 12 has an invalid length.
[  676.467836][T30490] x_tables: ip_tables: icmp match: only valid for protocol 1
[  676.471246][T30490] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6295'.
[  676.474806][T30490] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6295'.
[  676.480857][T30491] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6295'.
[  676.490250][T30491] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6295'.
[  676.695737][T30495] xt_TCPMSS: Only works on TCP SYN packets
[  676.771661][T30499] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6298'.
[  676.812416][T30501] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6299'.
[  676.815378][T30501] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6299'.
[  676.824212][T30501] xt_hashlimit: size too large, truncated to 1048576
[  676.874810][T30503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6299'.
[  677.232063][T30518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6305'.
[  677.247015][ T5470] 
[  677.247896][ T5470] ============================================
[  677.249891][ T5470] WARNING: possible recursive locking detected
[  677.252042][ T5470] syzkaller #0 Not tainted
[  677.253645][ T5470] --------------------------------------------
[  677.255610][ T5470] kworker/u8:2/5470 is trying to acquire lock:
[  677.257590][ T5470] ffff8881b7cac158 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  677.260843][ T5470] 
[  677.260843][ T5470] but task is already holding lock:
[  677.263229][ T5470] ffff8881135ea158 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  677.266373][ T5470] 
[  677.266373][ T5470] other info that might help us debug this:
[  677.268929][ T5470]  Possible unsafe locking scenario:
[  677.268929][ T5470] 
[  677.271403][ T5470]        CPU0
[  677.272524][ T5470]        ----
[  677.273659][ T5470]   lock(&qdisc_xmit_lock_key#3);
[  677.275563][ T5470]   lock(&qdisc_xmit_lock_key#3);
[  677.277612][ T5470] 
[  677.277612][ T5470]  *** DEADLOCK ***
[  677.277612][ T5470] 
[  677.280829][ T5470]  May be due to missing lock nesting notation
[  677.280829][ T5470] 
[  677.284199][ T5470] 11 locks held by kworker/u8:2/5470:
[  677.286401][ T5470]  #0: ffff88810e6db940 ((wq_completion)bond21){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  677.290859][ T5470]  #1: ffffc90003f37c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  677.296026][ T5470]  #2: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf8/0x17e0
[  677.300010][ T5470]  #3: ffffffff8e95cdc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950
[  677.304057][ T5470]  #4: ffff888108e36228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950
[  677.309169][ T5470]  #5: ffff8881135ea158 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  677.313366][ T5470]  #6: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450
[  677.316960][ T5470]  #7: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070
[  677.320856][ T5470]  #8: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270
[  677.324424][ T5470]  #9: ffffffff8e95cdc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950
[  677.328489][ T5470]  #10: ffff8881b814f228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950
[  677.333633][ T5470] 
[  677.333633][ T5470] stack backtrace:
[  677.336010][ T5470] CPU: 1 UID: 0 PID: 5470 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  677.336026][ T5470] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  677.336035][ T5470] Workqueue: bond21 bond_alb_monitor
[  677.336054][ T5470] Call Trace:
[  677.336060][ T5470]  <TASK>
[  677.336067][ T5470]  dump_stack_lvl+0xe8/0x150
[  677.336082][ T5470]  print_deadlock_bug+0x279/0x290
[  677.336096][ T5470]  __lock_acquire+0x253f/0x2cf0
[  677.336109][ T5470]  ? unwind_next_frame+0xa6/0x2550
[  677.336125][ T5470]  ? sch_direct_xmit+0x15f/0x4c0
[  677.336135][ T5470]  lock_acquire+0x106/0x350
[  677.336144][ T5470]  ? sch_direct_xmit+0x15f/0x4c0
[  677.336158][ T5470]  _raw_spin_lock+0x2e/0x40
[  677.336168][ T5470]  ? sch_direct_xmit+0x15f/0x4c0
[  677.336178][ T5470]  sch_direct_xmit+0x15f/0x4c0
[  677.336190][ T5470]  ? __pfx_sch_direct_xmit+0x10/0x10
[  677.336200][ T5470]  ? arp_create+0xd0/0x980
[  677.336215][ T5470]  __dev_queue_xmit+0x180f/0x3950
[  677.336232][ T5470]  ? __dev_queue_xmit+0x2b6/0x3950
[  677.336247][ T5470]  ? arpt_do_table+0x256/0x1e30
[  677.336267][ T5470]  ? __pfx___dev_queue_xmit+0x10/0x10
[  677.336283][ T5470]  ? __pfx_arpt_do_table+0x10/0x10
[  677.336294][ T5470]  ? trace_kmem_cache_alloc+0x29/0xe0
[  677.336312][ T5470]  ? NF_HOOK+0xa2/0x3c0
[  677.336326][ T5470]  NF_HOOK+0x33a/0x3c0
[  677.336339][ T5470]  ? __pfx_arp_xmit_finish+0x10/0x10
[  677.336353][ T5470]  ? NF_HOOK+0xa2/0x3c0
[  677.336365][ T5470]  ? __pfx_NF_HOOK+0x10/0x10
[  677.336377][ T5470]  ? lock_acquire+0x106/0x350
[  677.336388][ T5470]  ? __pfx_arp_xmit_finish+0x10/0x10
[  677.336401][ T5470]  ? inet_addr_type_dev_table+0x25/0x190
[  677.336417][ T5470]  arp_xmit+0x16c/0x270
[  677.336429][ T5470]  ? arp_xmit+0x23/0x270
[  677.336442][ T5470]  arp_solicit+0xbe0/0xe40
[  677.336458][ T5470]  ? arp_solicit+0x119/0xe40
[  677.336472][ T5470]  ? __pfx_arp_solicit+0x10/0x10
[  677.336488][ T5470]  ? __pfx_arp_solicit+0x10/0x10
[  677.336502][ T5470]  __neigh_event_send+0xf05/0x14d0
[  677.336517][ T5470]  neigh_resolve_output+0x198/0x750
[  677.336560][ T5470]  ? __pfx_ip_neigh_gw4+0x10/0x10
[  677.336579][ T5470]  ? ip_finish_output2+0x3c2/0x1070
[  677.336593][ T5470]  ip_finish_output2+0xca9/0x1070
[  677.336607][ T5470]  ? ip_skb_dst_mtu+0x80b/0xa50
[  677.336622][ T5470]  ? ip_finish_output+0x40e/0x530
[  677.336636][ T5470]  ip_output+0x29f/0x450
[  677.336650][ T5470]  ? ip_output+0x5b/0x450
[  677.336663][ T5470]  iptunnel_xmit+0x621/0xd10
[  677.336678][ T5470]  ip_tunnel_xmit+0x193a/0x1f20
[  677.336698][ T5470]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  677.336713][ T5470]  ? __pfx_gre_build_header+0x10/0x10
[  677.336727][ T5470]  ? kfree+0x1c5/0x640
[  677.336739][ T5470]  ? pskb_expand_head+0x458/0x1390
[  677.336754][ T5470]  __gre_xmit+0x19e/0x240
[  677.336767][ T5470]  ? __pfx___gre_xmit+0x10/0x10
[  677.336781][ T5470]  erspan_xmit+0xa41/0x14d0
[  677.336797][ T5470]  ? ret_from_fork_asm+0x1a/0x30
[  677.336810][ T5470]  ? __pfx_erspan_xmit+0x10/0x10
[  677.336825][ T5470]  dev_hard_start_xmit+0x2cd/0x830
[  677.336843][ T5470]  sch_direct_xmit+0x251/0x4c0
[  677.336856][ T5470]  ? __pfx_sch_direct_xmit+0x10/0x10
[  677.336867][ T5470]  ? kthread+0x370/0x470
[  677.336882][ T5470]  __dev_queue_xmit+0x180f/0x3950
[  677.336898][ T5470]  ? __dev_queue_xmit+0x2b6/0x3950
[  677.336915][ T5470]  ? __pfx___dev_queue_xmit+0x10/0x10
[  677.336930][ T5470]  ? rcu_is_watching+0x15/0xb0
[  677.336943][ T5470]  ? trace_kmem_cache_alloc+0x29/0xe0
[  677.336957][ T5470]  ? kmem_cache_alloc_node_noprof+0x3ce/0x690
[  677.336975][ T5470]  ? alb_send_lp_vid+0x14e/0x550
[  677.336990][ T5470]  alb_send_lp_vid+0x348/0x550
[  677.337005][ T5470]  ? __pfx_alb_send_lp_vid+0x10/0x10
[  677.337022][ T5470]  alb_send_learning_packets+0x12c/0x300
[  677.337036][ T5470]  ? __pfx_alb_send_learning_packets+0x10/0x10
[  677.337048][ T5470]  ? bond_alb_monitor+0xf8/0x17e0
[  677.337062][ T5470]  ? netdev_lower_get_next_private_rcu+0x9f/0x100
[  677.337075][ T5470]  bond_alb_monitor+0x3d5/0x17e0
[  677.337090][ T5470]  ? bond_alb_monitor+0xf8/0x17e0
[  677.337118][ T5470]  ? __pfx_bond_alb_monitor+0x10/0x10
[  677.337132][ T5470]  ? process_scheduled_works+0xa70/0x1860
[  677.337143][ T5470]  ? process_scheduled_works+0xa70/0x1860
[  677.337153][ T5470]  process_scheduled_works+0xb5d/0x1860
[  677.337172][ T5470]  ? __pfx_process_scheduled_works+0x10/0x10
[  677.337184][ T5470]  ? assign_work+0x3d5/0x5e0
[  677.337195][ T5470]  worker_thread+0xa53/0xfc0
[  677.337213][ T5470]  kthread+0x388/0x470
[  677.337226][ T5470]  ? __pfx_worker_thread+0x10/0x10
[  677.337236][ T5470]  ? __pfx_kthread+0x10/0x10
[  677.337249][ T5470]  ret_from_fork+0x514/0xb70
[  677.337269][ T5470]  ? __pfx_ret_from_fork+0x10/0x10
[  677.337280][ T5470]  ? __switch_to+0xc79/0x1410
[  677.337295][ T5470]  ? __pfx_kthread+0x10/0x10
[  677.337309][ T5470]  ret_from_fork_asm+0x1a/0x30
[  677.337326][ T5470]  </TASK>
[  677.582725][T30517] tipc: Resetting bearer <eth:ip6tnl0>
[  677.741028][T30517] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  678.669766][ T5666] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  678.674220][ T5666] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  678.678886][ T5666] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  678.681520][ T5666] netdevsim netdevsim1 eth0: unset [1, 2] type 2 family 0 port 20004 - 0
[  678.684085][ T5666] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  678.687549][ T5666] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  678.690872][ T5666] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  678.694180][ T5666] netdevsim netdevsim1 eth1: unset [1, 2] type 2 family 0 port 20004 - 0
[  678.697719][ T5666] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  678.701258][ T5666] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  678.704621][ T5666] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  678.709190][ T5666] netdevsim netdevsim1 eth2: unset [1, 2] type 2 family 0 port 20004 - 0
[  678.712692][ T5666] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  678.716046][ T5666] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  678.719460][ T5666] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  678.723005][ T5666] netdevsim netdevsim1 eth3: unset [1, 2] type 2 family 0 port 20004 - 0
