last executing test programs:

929.528602ms ago: executing program 0 (id=4501):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0)

926.701156ms ago: executing program 0 (id=4503):
socket(0x10, 0x803, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000500)={@void, @void, @ipv6=@tipc_packet={0x4, 0x6, "e62057", 0x19f, 0x6, 0x1, @remote, @remote, {[@srh={0x32, 0x0, 0x4, 0x0, 0x0, 0x40, 0x2}, @routing={0x2b, 0xa, 0x0, 0xff, 0x0, [@mcast1, @remote, @mcast1, @dev={0xfe, 0x80, '\x00', 0x25}, @remote]}, @routing={0x2c, 0x8, 0x0, 0x3, 0x0, [@rand_addr=' \x01\x00', @mcast1, @private2, @loopback]}, @routing={0x6, 0x14, 0x1, 0x2, 0x0, [@loopback, @remote, @mcast1, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @private2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}]}, @fragment={0x62, 0x0, 0x1, 0x1, 0x0, 0x1, 0x65}, @hopopts={0x5fcfc40313ff35, 0x2, '\x00', [@hao={0xc9, 0x10, @private2}, @enc_lim={0x4, 0x1, 0x8}]}, @fragment={0x1, 0x0, 0x9, 0x0, 0x0, 0x5, 0x65}], @payload_conn={{{0x1f, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, 0x2, 0xb, 0x0, 0x0, 0x5, 0x1, 0x0, 0x4, 0xfffd, 0x1, 0x4e23, 0x4e21}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}, 0x1c7)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100000008000b40000000000900010073797a3000000000050007400800000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0)
recvmmsg(r0, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

829.585509ms ago: executing program 0 (id=4506):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0xff, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000280)="90", 0x1}], 0x1}}], 0x2, 0x4000000)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r3, 0x6}, 0x8)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0)

689.000705ms ago: executing program 0 (id=4508):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
unshare(0x22020600) (async)
unshare(0x4000000) (async)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000007000a01040000000000000000010000030900010073797a30000000002c000000030ae9000000000000000000010000000900010073797a30000000000900030073797a3200000000a0000000060a010400000000000000000100000008000b400000000078000480340001800b000102657874686472000024000280080001400000000c0800034000f0000008000440000000220500020007000000400001800c0001006269747769736500300002800800034000000002080001400000001408000240000000120c000780060001002b66000008000640000000030900010073797a300000000014000000110001"], 0x114}}, 0x0)

619.335534ms ago: executing program 0 (id=4512):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a3100000000ec000000030a01040000000000000000010000040900030073797a3100000000bf000c00c618f03400f09419583ff7685919f0568119d9d14430cd4cf58c1dfd7388628bf5f3de6a380f8d8125bd18f3fc2da65ca40a2e034f2effc6760206b9fa54c9a3bb56d2de7b0e1f812b220dbbf2f19e5b8cda6b41301252936b3cfb63639324267c6755e81c6c85de1f625f5c68ac073ecc7689e762b96ba9e9bdf03192cb04a68b01dd12ceadde690d698e276d9df2338382acb1645661d568c7cd968849149f88a064133899c1b91ade7186461131748ba7b73bbfa3ded72096e0000900010073797a310000000014000000110001"], 0x134}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50)
unshare(0x6a040000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, 0x0, 0x810)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip6tnl0\x00', 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000010003b0c00"/20, @ANYRES32=0x0, @ANYBLOB="000000800000000054f56f156f9f06431b784ed647b03a7e357c264a15dee644263bc2ca6f6dcce88b214d889c2191b11c5e39263cae1dd07f6ef7622a914092acac25c10856641986f847b2f527e7bf844f321214c98b1cbd65f265dfe49f4c416339fda7df3c12e0d6619dd8b6606174d0d0ba073f5b2f4a758676598a12a1a864b675962e80f882854a2b4d0a3d40a4d1986adcc06883cddf90e9a1696ae703e8d266d844"], 0x20}}, 0x40080)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
write$tun(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0003110004000000a60c6eec00be00442c2f"], 0xfdef)
socket(0x10, 0x3, 0x0)
r7 = socket(0x27, 0x4, 0x7f)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0x100, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0xfff2}, {0xb, 0x1}, {0x0, 0x9}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x80200a, 0x0, 0x1, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x6, 0xc, 0x18, 0xd, 0x0, 0x7, 0xffffffff}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c012}, 0x0)

618.125101ms ago: executing program 1 (id=4513):
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={<r0=>0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x2, &(0x7f0000000040)={@_ha_fsid={[0xbc5, 0x4]}, {0xd, 0xb, 0x4, 0x5}}, 0x3, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x6})
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000140)) (async)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000180)=0x2, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @broadcast}, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r1=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>0x0, 0x8, 0x0, 0x8, 0x3, {{0x12, 0x4, 0x0, 0x35, 0x48, 0x67, 0x0, 0x6, 0x4, 0x0, @multicast1, @local, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x2b, 0x3, [{0x7, 0xf, "a2ec5f96b3a16f93ac71f4e7cb"}, {0x0, 0x2}, {0x0, 0x2}, {0x7, 0x12, "d90e98e3f6ec14629826c761ad623b80"}]}]}}}}})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000340)=<r3=>0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=@getlink={0x90, 0x12, 0x10, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r1, 0x2c000, 0x10020}, [@IFLA_VFINFO_LIST={0x24, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0xfff, 0x6}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0xb}}]}]}, @IFLA_WEIGHT={0x8, 0xf, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xc310}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_CARRIER={0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x1c2}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xc42a}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x3}, @IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x90}, 0x1, 0x0, 0x0, 0x20008000}, 0x4005) (async, rerun: 64)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x7f, 0x4, 0x100, 0x10, 0x1, 0x0, '\x00', 0x0, r0, 0x4, 0x0, 0x1}, 0x50) (async, rerun: 64)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000600)={'ip_vti0\x00', <r5=>r2, 0x7800, 0x700, 0x5, 0x5, {{0x17, 0x4, 0x2, 0x20, 0x5c, 0x66, 0x0, 0x1, 0x4, 0x0, @multicast2, @local, {[@timestamp_prespec={0x44, 0x2c, 0x3a, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x33}, 0x7f}, {@rand_addr=0x64010100, 0x35e}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x6}, {@empty, 0x3}, {@empty, 0x100}]}, @lsrr={0x83, 0x1b, 0x69, [@remote, @loopback, @loopback, @broadcast, @multicast2, @empty]}]}}}}})
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0x15, &(0x7f0000000740)=@raw=[@ldst={0x2, 0x0, 0x2, 0x3, 0x6, 0xffffffffffffffff, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], &(0x7f0000000800)='GPL\x00', 0x1, 0x79, &(0x7f0000000840)=""/121, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x4, 0xb, 0x40}, 0x10, 0x28b14, 0xffffffffffffffff, 0x4, &(0x7f0000000900)=[r4, r0], &(0x7f0000000940)=[{0x2, 0x3, 0xc, 0x3}, {0x2, 0x1, 0x2}, {0x1, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x10, 0xb}], 0x10, 0x4}, 0x94) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r4, <r7=>0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x4, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000580)='GPL\x00', 0x6c2, 0x17, &(0x7f00000005c0)=""/23, 0x41000, 0x25, '\x00', r5, @fallback=0x14, r0, 0x8, &(0x7f00000006c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0x0, 0x1, 0xd}, 0x10, 0xffffffffffffffff, r6, 0x3, &(0x7f0000000b00)=[r0, r0, r4, r4, r0, r7, r4], &(0x7f0000000b40)=[{0x1, 0x4, 0x5, 0x6}, {0x3, 0x3, 0x6, 0xa}, {0x5, 0x3, 0xe, 0x8}], 0x10, 0x5}, 0x94) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000c40)="17919b7d10c894e0d8b041a87ae7b9d995433f0cd2ae32c62f73cd8237ecab306768bd337c150efa8054fead9f88aadaba37a1aabaa65a15aad105018fc98d9a425fffbe8369996afa369b7e2be3ca1ff42657f8f266398db36c0df45d4d8c55f6613c54def28aea6feacfa9dbf4ce0130b89803161939c03c1ed62d0409114d2f8cf2baa947b1d9e07d8f224e7622c049", 0x91)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000012c0)=@nat={'nat\x00', 0x19, 0x3, 0x54a, [0x200000000d40, 0x0, 0x0, 0x200000000fa6, 0x200000001184], 0x0, &(0x7f0000000d00), &(0x7f0000000d40)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0xa0, 0x86dd, 'gre0\x00', 'pimreg1\x00', 'batadv0\x00', 'netpci0\x00', @remote, [0x0, 0x90351de604432bcc, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0x196, 0x1fe, 0x236, [@comment={{'comment\x00', 0x0, 0x100}}], [@arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xffffffffffffffff}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast, 0x3}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{0x3, 0x10, 0x6003, 'lo\x00', 'veth1_macvtap\x00', 'pimreg\x00', 'veth1_to_bridge\x00', @empty, [0x0, 0x0, 0xff, 0xff], @multicast, [0xff, 0xff, 0xff, 0x1273d1c183148c2f, 0xff, 0xff], 0xae, 0x15e, 0x1ae, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x0, 0x1, 0x3, 0x7, 0x5, {0x3}}}}], [@common=@nflog={'nflog\x00', 0x50, {{0xed7, 0x5bb, 0x8, 0x0, 0x0, "caf6aab5cc904754855661495bd5d2001419031a17598a6c15fca56499d50e9c9d6991047ecc46fb5ae7077798982904c4ec852484e8ee35edcf0537fb1f9ef4"}}}, @snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xffffffffffffffff}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x9, {0x4}}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x11, 0x4, 0x88e7, 'vlan1\x00', 'vlan0\x00', 'veth1_to_bond\x00', 'macvlan0\x00', @broadcast, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @random="02e1ca6235c3", [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0x9e, 0x9e, 0xd6, [@state={{'state\x00', 0x0, 0x8}, {{0x6}}}], [], @arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffd}}}}]}]}, 0x5c2) (async)
ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f0000001340)={<r8=>0xffffffffffffffff})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x48}}, 0x40004) (async)
syz_genetlink_get_family_id$smc(&(0x7f0000001500), r8) (async, rerun: 32)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001580), r8) (rerun: 32)
sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x4100}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x38, r9, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0xe}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async)
pipe(&(0x7f0000001680)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r4, <r11=>0xffffffffffffffff}, &(0x7f0000001840), &(0x7f0000001880)='%ps    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x6, 0x20, &(0x7f00000016c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@map_val={0x18, 0x6, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x5}, @map_fd={0x18, 0x6, 0x1, 0x0, r7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000017c0)='syzkaller\x00', 0x14, 0x0, 0x0, 0x40f00, 0x10, '\x00', r2, @fallback=0x4, r8, 0x8, &(0x7f0000001800)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x8, &(0x7f0000001900)=[r8, r8, r8, r0, r11, r8, r7], &(0x7f0000001940)=[{0x1, 0x3, 0x0, 0x6506f0252162a217}, {0x2, 0x3, 0xa, 0xa}, {0x0, 0x2, 0x7}, {0x4, 0x1, 0xe, 0x2}, {0x3, 0x3, 0x3, 0x6}, {0x4, 0x4, 0xb, 0x7}, {0x5, 0x1, 0x0, 0x8}, {0x6, 0x5, 0xc, 0x1}], 0x10, 0x3}, 0x94)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000001b00)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(r11, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x808b20}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x28, r12, 0x600, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x9, 0x54}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001c00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r11, 0xc0c89425, &(0x7f0000001e00)={"dff1f6aa3bdc0e6dc1421ff0dde1c22e", r14, 0x0, {0x7ff, 0x71}, {0x9, 0x20}, 0x95, [0x3f2, 0x5, 0x8, 0x2, 0xa, 0xe2a, 0xbc, 0x2400000, 0x8, 0x6, 0x9, 0x6, 0x2, 0x1, 0x7fff, 0x5]})
close(r8) (async)
socket$packet(0x11, 0x3, 0x300)

456.918485ms ago: executing program 1 (id=4516):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x22000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0x402, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x48195)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
r1 = socket$kcm(0x29, 0x5, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x4}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="b102", 0x1}], 0x371, 0x0, 0x0, 0x8080}, 0x40800)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={<r4=>0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r4}, 0x8)
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe880000000000000000000000000001ff01000000000000000000000000000100000000000000820000000033000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000001e308bba0100000000019f2b"], 0xf8}}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000180)=0x4c, 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206030000000000000023b3352de70533e7e54bcb797a310000000005000100070000001400070000000500050002000000050004000000000011000300686173683a6e65742c6e657400000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x8004)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000)
r9 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000140))
connect$unix(r9, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e)
setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f0000000000)={0x2, 0x8}, 0x2)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000800000000000000010073797a30000000000900030073797a320000000058000000060a010400000000000000000100000008000b4000000000300004802c0001800c00010062697477697365001c0002800800014000000012080002400000001208000340000000bf0900010073797a3000000000140000001100010000000000000000000000000a07e16e6da98daa469a6ea61955eb08e45b640a15f0d30fc3e4ad500fcfb6dc345f14e6318d50ec2119c4d32954bbd13c84120c3a63467d146697244095df92dd8976e0f85e371eb7bd4acf795ceb03ad148aea24f84a81c66371b6177ce89304570d297c8bde1de02dd5e61821281fa8651469fcfdd8fd6c470ee350739ec4876aa663cf2271fe5fb24d095280362da8e528"], 0xcc}}, 0x0)

454.976406ms ago: executing program 2 (id=4517):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000190a0102", @ANYRESOCT=r0], 0x14}}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r0, 0x7, 0x1, 0x7})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100000008000b40000000000900010073797a3000000000050007400800000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0)
recvmmsg(r1, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

330.198792ms ago: executing program 2 (id=4518):
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000000f80)=[{}], 0x1}}], 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="50000000480011012abd7000fedbdf250a006000", @ANYRES32=0x0, @ANYBLOB="02000000080002000700000008000200070000000800020000000000140001"], 0x50}}, 0x10)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r4)
sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044080}, 0x4000000)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffd1d, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x134}}, 0x20000000)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c000280080001800000000014000000020a01"], 0xf4}}, 0x4)

248.697269ms ago: executing program 2 (id=4519):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0)

247.921869ms ago: executing program 1 (id=4520):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4000082)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x480, 0x278, 0x98, 0x278, 0x278, 0x278, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1e0}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0xe8, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x10}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xa, 0x1, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000100000018010000756c6c250000000000202020c31af8ffa10000005e000000000000000701000000feffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f00000000c0)=0xffff, 0x4)
write(r3, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24)
recvmmsg(r3, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=""/17, 0x11}}], 0x1, 0x2002, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@ccm_128={{0x303}, "27225a2148133ffb", "00000003098c5cf36a79f0000000006b", "6b38e6b1", "ce1216602926c810"}, 0x28)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
sendfile(r1, r4, 0x0, 0xffffffff004)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x2ec}}, 0x0)
close(r5)

246.245671ms ago: executing program 2 (id=4521):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x6, 0x0, 0x8, 0x4, 0x40})
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000010000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
syz_emit_ethernet(0x36, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @local}}}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x50)
sendmsg$inet6(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="18cdaa8c58ac47a6a304eabe19f885983dfc7ec29781ed89a548e9947fb56d8cd31c28e4ea0d4eb87e468ab2d297ba707fca3943bc55dcabba6475b56e4028ae8d31", 0x42}, {&(0x7f0000000340)="7dbbcee4f1d1a0a68a56279bbde6c01ad137cc999c6adf2a234c6cb0d5505b37f4c8206f582cadd302ea736ec3884f2eb887957447cc5591b462ca39084df40d70b3932b04218525059f189716c16cee16c915c5b876f3414188dada94cb4b678d92b38137ac0d8ea5758c113d65c3595cd16cb0d318c4821d82580088400266264b924d4c380a1fd621caa43fea11ebcddee61bf31fc8e96ef8f3323565f1f17169a0e230e8ab47d714aff8e4c0fe749eb1e930252a8b826237fa2fc69cbf7a74", 0xc1}], 0x2, &(0x7f0000000480)=[@dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3c, 0x1, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x5}, @pad1]}}}], 0x40}, 0x84010)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r4, 0x0, 0xa0028000}, 0x38)
writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2f}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_BITWISE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0)

169.980132ms ago: executing program 1 (id=4522):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000001c0), 0x12)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
unshare(0x8040600)
r5 = socket$netlink(0x10, 0x3, 0x9)
bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000005b80)={@loopback={0xfec0ffffffffffff}, 0x4c, r4})
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r4], 0x7c}}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005d40), r6)
sendmsg$IEEE802154_ASSOCIATE_REQ(r6, &(0x7f0000005e00)={0x0, 0x0, &(0x7f0000005dc0)={&(0x7f0000005d80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fbdadf250100000006000a00020000000c0009000200aaaaaaaaaaaa050007000d000000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r8)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r11, 0x89fb, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@empty, @empty, 0x18, 0x19}})
sendmsg$NFC_CMD_LLC_SET_PARAMS(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r10, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xff}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140))
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0xffffffffffffff31, 0x1, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x55}, 0x0)

169.109962ms ago: executing program 2 (id=4523):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000300), &(0x7f0000000380)}, 0x20)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipmr_getroute={0x1c, 0x1a, 0x10, 0x70bd2a, 0x25dfdbfc, {0x80, 0x0, 0x20, 0x7f, 0xfd, 0x2, 0xff, 0x6, 0x380}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000004}, 0x2)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=@newsa={0x144, 0x10, 0x1, 0x0, 0x25dfdbff, {{@in=@empty, @in=@loopback, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {0x1, 0x0, 0x2}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'morus640-generic\x00'}, 0x0, 0x80}}, @extra_flags={0x8, 0x18, 0x5}]}, 0x144}}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x40, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x880)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={<r6=>0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}]}, &(0x7f0000000040)=0x10)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), r2)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x11, 0x25, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe}, 0x40)
shutdown(r5, 0x2)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000080)={<r8=>r6, 0x8001}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000200)={r8}, 0x8)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0xf0, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_USERDATA={0xcd, 0x6, "261988ab0717169539829db0c17a0be79b3c19d2190cbd46b94d77c89633814d2c5b1ec0265bb7929a9880becf500bc738d1ed917893bf520c6cad7382fdaec92f2e6d2b9d33969145f59a37b46721b3653296616c404367cfe60c8ce3d4b69f5ca9a172be1a7f8fb99f3bc468c68e41c6c7bb3fa951289eb995d7ba33335a5c19386a10fa491f9aa7cc8ce86fb81fd8d9620fb3b72feb530499a781c10ee6c4e8295a9d531791891e032a5e364000f67ae21ee45c886aadfcd7556b4b0854bfaf3a86c16b10bc6896"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x28, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1d8}, 0x1, 0x0, 0x0, 0x4040}, 0x0)

120.096154ms ago: executing program 2 (id=4524):
unshare(0x28000600)
pipe(&(0x7f0000000140))
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0))
ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
pread64(r0, 0x0, 0x0, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x104}}, 0x0)

119.420528ms ago: executing program 1 (id=4525):
r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xa1}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x1f}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}}, 0x4008050)

59.995611ms ago: executing program 1 (id=4526):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000580)={0x0, 0x39, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000010007240101000000000000000001000003"], 0x20}, 0x1, 0x0, 0x0, 0x4801}, 0x4049000)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x204e20}, 0x6e)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="cbb70000", @ANYRESOCT=r1, @ANYRES64=r1, @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20008040}, 0x20000000)
r4 = socket(0x1e, 0x4, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r5, 0xfffffffc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r4)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYRESDEC=r1], 0x30}, 0x1, 0xff07}, 0x2000000)
sendmsg$kcm(r4, 0x0, 0x20040000)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000480), 0x4)
recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001e40)=""/174, 0xae}, {&(0x7f0000000840)=""/144, 0x82}], 0x2, &(0x7f0000001fc0)=""/65, 0xfffffffffffffe76}, 0x1}], 0x1, 0x40002122, 0x0)
sendmsg$tipc(r4, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1}, 0x4800)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, r6)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
close(r9)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r10}, &(0x7f0000000040), &(0x7f0000000140)=r9}, 0x20)

0s ago: executing program 0 (id=4527):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$alg(0x26, 0x5, 0x0) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', <r3=>0x0, 0x8000, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, @local, @private}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000001a80)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', <r4=>r3, 0x20, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x27, 0x0, 0x0, 0x0, 0x0, @multicast2, @empty}}}})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000240)={'wpan0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r8, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x40, r7, 0x637, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008041}, 0x4000000)
socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket$netlink(0x10, 0x3, 0xb)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r9, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000004) (async)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r9, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000004)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f00000005c0)='GPL\x00', 0x8, 0xda, &(0x7f0000003e40)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000004600)=ANY=[@ANYBLOB="18000000041401002cbd9b00fbdbdf250800010001000000"], 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) (async)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000004600)=ANY=[@ANYBLOB="18000000041401002cbd9b00fbdbdf250800010001000000"], 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r11 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r11, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}, {&(0x7f0000000780)="5b06c70461fab92b3d952a0a0b5eca7d6b21f62c4f56ea9109a00b742eab4a7fdac90ab7c51a813cc4d693127d10c4e7234944e9410ad19c43ca9751c1b97aca344e5bf77fde23184af0b7e160e7a9a681f6391270dedc2978f7d1b9a913801beaa52e1eedf0ae71021e0d40864fc63603f1d6d94f55d23fb15eebc780292ee4be48a9036dcb83345a4285e043439e95b3f23b6edf199cea092725d6f7fab0f975cc42bd279f5de21d08a38091edbb34b32c6cd53373651fd3343aa6b228a996d957c556694dc3a26b68b38093a92eb192aa973bda1b51c61b6cc2b49a54550085e8d8270d889cefe65f62c975815b1b1208ed"}], 0x3f}], 0x1, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20040080}, 0x8004) (async)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20040080}, 0x8004)
sendmsg$tipc(r11, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004050}, 0x60040804)
sendmsg$IPSET_CMD_SWAP(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r10, @ANYRES16=r4, @ANYRES64=r10, @ANYBLOB='t', @ANYRES16=r10], 0x20}, 0x1, 0x0, 0x0, 0x80c1}, 0x20000080) (async)
sendmsg$IPSET_CMD_SWAP(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r10, @ANYRES16=r4, @ANYRES64=r10, @ANYBLOB='t', @ANYRES16=r10], 0x20}, 0x1, 0x0, 0x0, 0x80c1}, 0x20000080)
r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r5)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x1c, r12, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x19}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r11, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x140c, 0x20, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x2000c045) (async)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r11, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x140c, 0x20, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x2000c045)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x104}}, 0x0)

kernel console output (not intermixed with test programs):

 has 5 unknown bytes.
[  200.948538][T12154] ipt_rpfilter: unknown options
[  201.522143][T12180] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  201.542151][T12180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1959'.
[  201.775005][T12184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1961'.
[  201.842131][T12188] netlink: 'syz.2.1962': attribute type 1 has an invalid length.
[  201.861442][T12188] 8021q: adding VLAN 0 to HW filter on device bond4
[  201.867825][T12188] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20002
[  202.137112][T12207] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  202.163774][T12207] syzkaller1: entered promiscuous mode
[  202.166696][T12207] syzkaller1: entered allmulticast mode
[  202.480209][T12239] ipt_rpfilter: unknown options
[  205.299978][T12220] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  205.363627][T12269] ipt_rpfilter: unknown options
[  205.567441][T12291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1985'.
[  205.570653][T12293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1986'.
[  205.801072][T12319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1993'.
[  205.888264][T12321] SET target dimension over the limit!
[  205.975369][T12331] --map-set only usable from mangle table
[  205.991788][T12331] syzkaller1: entered promiscuous mode
[  205.993911][T12331] syzkaller1: entered allmulticast mode
[  205.996950][T12331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1997'.
[  206.094749][T12342] x_tables: duplicate entry at hook 3
[  206.098721][T12342] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2001'.
[  206.666828][T12360] ipt_rpfilter: unknown options
[  209.073384][T12337] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  209.168402][T12375] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  209.181938][T12381] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2013'.
[  209.405198][T12405] netlink: 'syz.1.2018': attribute type 1 has an invalid length.
[  209.446378][T12407] netlink: 'syz.2.2020': attribute type 1 has an invalid length.
[  209.449606][T12407] netlink: 'syz.2.2020': attribute type 2 has an invalid length.
[  209.594857][T12419] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  209.600998][T12419] netlink: 'syz.1.2025': attribute type 16 has an invalid length.
[  209.603612][T12419] netlink: 'syz.1.2025': attribute type 17 has an invalid length.
[  209.627482][T12419] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.631535][T12419] 8021q: adding VLAN 0 to HW filter on device team0
[  209.636752][T12419] 8021q: adding VLAN 0 to HW filter on device batadv0
[  209.679299][T12419] batman_adv: batadv0: Interface activated: batadv_slave_0
[  209.684069][T12419] batman_adv: batadv0: Interface activated: batadv_slave_1
[  209.690075][T12419] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  209.693264][T12419] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  209.699471][T12419] veth1_macvtap: left promiscuous mode
[  209.701873][T12419] veth0_macvtap: left promiscuous mode
[  209.704344][T12419] veth0_macvtap: entered promiscuous mode
[  209.707523][T12419] veth1_macvtap: entered promiscuous mode
[  209.721986][T12419] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  209.728345][T12419] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  209.733887][T12419] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  209.737269][T12419] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  209.741200][T12419] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  209.749735][T12419] A link change request failed with some changes committed already. Interface pimreg may have been left with an inconsistent configuration, please check.
[  209.765104][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2028'.
[  209.765809][ T8570] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.771601][ T8570] bridge0: port 2(bridge_slave_1) entered forwarding state
[  209.799312][ T5672] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  209.803361][ T5672] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  209.817487][T12429] vxcan4: entered allmulticast mode
[  209.824152][T12429] vxcan5: entered allmulticast mode
[  209.828712][ T5672] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  209.836661][ T5672] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  209.844132][ T5672] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  209.850400][ T5672] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  209.860405][ T5672] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  209.863892][ T5672] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  209.892108][T12432] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  209.898131][T12432] batman_adv: batadv0: Removing interface: batadv_slave_0
[  209.905379][T12432] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  209.907881][T12432] batman_adv: batadv0: Removing interface: batadv_slave_1
[  210.029818][T12438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2030'.
[  210.788619][T12467] syzkaller0: entered promiscuous mode
[  210.792248][T12467] syzkaller0: entered allmulticast mode
[  210.802153][T12467] netlink: 'syz.1.2038': attribute type 62 has an invalid length.
[  211.366018][T12513] netlink: 488 bytes leftover after parsing attributes in process `syz.2.2049'.
[  211.369144][T12513] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.2049'.
[  211.372990][T12513] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2049'.
[  211.376279][T12513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2049'.
[  211.476316][T12519] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  211.503678][T12525] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2054'.
[  211.614951][T12534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2056'.
[  211.652186][T12534] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2056'.
[  211.691301][T12536] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2057'.
[  211.812019][T12549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2061'.
[  211.824926][T12552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2062'.
[  214.109017][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  215.278504][T12589] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  215.282097][T12593] netlink: 'syz.1.2076': attribute type 1 has an invalid length.
[  215.371856][T12621] ipt_rpfilter: unknown options
[  215.402549][T12624] netlink: 'syz.0.2086': attribute type 1 has an invalid length.
[  215.427078][T12624] bond8: entered promiscuous mode
[  215.429798][T12624] 8021q: adding VLAN 0 to HW filter on device bond8
[  215.443705][T12624] ipvlan0: entered allmulticast mode
[  215.445477][T12624] bond8: entered allmulticast mode
[  215.452502][T12624] ipvlan2: entered allmulticast mode
[  215.466238][T12624] bond8: (slave bridge3): making interface the new active one
[  215.468969][T12624] bridge3: entered promiscuous mode
[  215.470760][T12624] bridge3: entered allmulticast mode
[  215.474079][T12624] bond8: (slave bridge3): Enslaving as an active interface with an up link
[  215.638269][T12641] syzkaller0: entered promiscuous mode
[  215.640640][T12641] syzkaller0: entered allmulticast mode
[  217.217973][T12670] __nla_validate_parse: 10 callbacks suppressed
[  217.217985][T12670] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2095'.
[  217.251117][T12672] sock: sock_set_timeout: `syz.1.2096' (pid 12672) tries to set negative timeout
[  217.364005][T12681] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2097'.
[  217.371860][T12681] pim6reg1: entered promiscuous mode
[  217.373686][T12681] pim6reg1: entered allmulticast mode
[  217.458993][T12685] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2098'.
[  217.499356][T12688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2099'.
[  217.507928][T12688] gtp0: entered promiscuous mode
[  217.510474][T12688] gtp0: entered allmulticast mode
[  217.573663][T12690] Bluetooth: MGMT ver 1.23
[  218.580249][T12730] netlink: zone id is out of range
[  218.593243][T12730] netlink: get zone limit has 4 unknown bytes
[  218.873950][T12737] netlink: 'syz.0.2118': attribute type 3 has an invalid length.
[  218.881046][T12737] netlink: 'syz.0.2118': attribute type 3 has an invalid length.
[  219.163564][T12759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2124'.
[  219.204581][T12762] --map-set only usable from mangle table
[  219.207891][T12762] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2125'.
[  219.246186][T12765] team_slave_0: Caught tx_queue_len zero misconfig
[  219.252206][T12765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2127'.
[  219.304604][T12775] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  219.346850][T12777] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2130'.
[  219.555779][T12787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2134'.
[  219.556466][T12789] batadv_slave_0: Caught tx_queue_len zero misconfig
[  219.595933][T12794] netlink: 'syz.1.2136': attribute type 1 has an invalid length.
[  219.598483][T12794] netlink: 280 bytes leftover after parsing attributes in process `syz.1.2136'.
[  219.690554][T12800] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  219.693211][T12800] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  219.982099][T12832] xt_ecn: cannot match TCP bits for non-tcp packets
[  220.069306][ T5679] bridge0: entered promiscuous mode
[  220.098048][T12846] netlink: 'syz.0.2152': attribute type 61 has an invalid length.
[  220.100642][T12846] netlink: 'syz.0.2152': attribute type 62 has an invalid length.
[  220.188195][T12859] tc action pedit 'at' offset 6 out of bounds
[  220.551839][T12891] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!Y
[  220.551839][T12891] 3UH5rBn
[  220.725482][T12905] veth1_virt_wifi: Caught tx_queue_len zero misconfig
[  220.728355][T12905] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  221.520111][T12963] veth1_macvtap: left promiscuous mode
[  221.521887][T12963] macsec0: entered allmulticast mode
[  221.655121][T12972] syzkaller1: tun_chr_ioctl cmd 1074025677
[  221.657232][T12972] syzkaller1: linktype set to 260
[  221.964505][T12995] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  221.968404][T12995] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  222.155934][T13015] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  222.234961][T13017] netlink: 'syz.1.2205': attribute type 21 has an invalid length.
[  222.238152][T13017] IPv6: NLM_F_CREATE should be specified when creating new route
[  222.372853][T13021] __nla_validate_parse: 8 callbacks suppressed
[  222.372868][T13021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2206'.
[  222.378150][T13021] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2206'.
[  222.420835][T13023] gre2: entered promiscuous mode
[  222.693941][T13037] syzkaller0: entered promiscuous mode
[  222.696379][T13037] syzkaller0: entered allmulticast mode
[  223.016071][T13058] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  223.105297][T13067] ipt_rpfilter: unknown options
[  223.128406][T13069] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2219'.
[  223.170340][T13069] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  223.180927][T13069] bond4 (unregistering): Released all slaves
[  223.438451][T13101] ipt_rpfilter: unknown options
[  223.542971][T13108] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2229'.
[  223.797353][T13121] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2230'.
[  223.805334][T13121] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2230'.
[  224.165883][T13089] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  224.384312][T13135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2236'.
[  224.426842][T13140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2237'.
[  224.620093][T13159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2243'.
[  224.633512][T13158] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2244'.
[  224.656800][T13155] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.930132][T13178] netlink: 'syz.0.2251': attribute type 4 has an invalid length.
[  224.932703][T13178] netlink: 'syz.0.2251': attribute type 1 has an invalid length.
[  225.914877][T13195] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  225.922949][T13195] bond4: (slave lo): Enslaving as an active interface with an up link
[  225.927794][T13195] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  225.935020][T13196] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  225.976855][T13205] netlink: 'syz.1.2258': attribute type 16 has an invalid length.
[  226.015135][T13207] netlink: 'syz.1.2260': attribute type 1 has an invalid length.
[  226.075533][T13212] bridge8: the hash_elasticity option has been deprecated and is always 16
[  226.829960][T13244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.434244][T13255] __nla_validate_parse: 6 callbacks suppressed
[  227.434263][T13255] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2275'.
[  227.496591][T13257] ipt_rpfilter: unknown options
[  227.665395][T13262] xt_l2tp: v2 doesn't support IP mode
[  227.856053][T13276] bond0: entered promiscuous mode
[  227.858430][T13276] bond_slave_0: entered promiscuous mode
[  227.862380][T13276] batadv0: entered promiscuous mode
[  227.866932][T13276] debugfs: 'hsr1' already exists in 'hsr'
[  227.871392][T13276] Cannot create hsr debugfs directory
[  227.877032][T13276] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  227.889524][T13276] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  227.906293][T13276] 8021q: adding VLAN 0 to HW filter on device hsr1
[  227.911281][T13276] bond0: left promiscuous mode
[  227.913621][T13276] bond_slave_0: left promiscuous mode
[  227.925497][T13276] batadv0: left promiscuous mode
[  228.014446][T13294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2288'.
[  228.016256][T13285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2283'.
[  228.143560][T13301] macvtap2: entered promiscuous mode
[  228.145736][T13301] syz_tun: entered promiscuous mode
[  228.153437][T13301] syz_tun: left promiscuous mode
[  228.265194][T13311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2292'.
[  228.422743][T13330] sctp: [Deprecated]: syz.2.2298 (pid 13330) Use of int in maxseg socket option.
[  228.422743][T13330] Use struct sctp_assoc_value instead
[  228.565954][T13346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2302'.
[  228.571300][T13346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2302'.
[  228.574593][T13346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2302'.
[  228.577783][T13346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2302'.
[  228.581338][T13346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2302'.
[  228.584438][T13346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2302'.
[  229.056895][T13397] netlink: 'syz.2.2318': attribute type 1 has an invalid length.
[  229.066572][T13398] netlink: 'syz.2.2318': attribute type 1 has an invalid length.
[  229.183529][T13410] syzkaller0: entered promiscuous mode
[  229.192697][T13410] netlink: Unknown conntrack attr (type=2304, max=9)
[  229.253081][T13416] sctp: [Deprecated]: syz.2.2325 (pid 13416) Use of int in max_burst socket option.
[  229.253081][T13416] Use struct sctp_assoc_value instead
[  229.682094][T13459] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  230.276026][T13502] netlink: 'syz.0.2348': attribute type 11 has an invalid length.
[  230.279763][T13502] netlink: 'syz.0.2348': attribute type 5 has an invalid length.
[  230.385077][T13509] geneve1: Caught tx_queue_len zero misconfig
[  231.357970][T13539] lo speed is unknown, defaulting to 1000
[  232.105904][T13575] ipt_rpfilter: unknown options
[  232.494667][T13618] __nla_validate_parse: 49 callbacks suppressed
[  232.494684][T13618] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2380'.
[  232.685389][T13629] bridge0: port 1(syz_tun) entered blocking state
[  232.687570][T13629] bridge0: port 1(syz_tun) entered disabled state
[  232.690127][T13629] syz_tun: entered allmulticast mode
[  232.693034][T13629] syz_tun: entered promiscuous mode
[  232.695317][T13629] bridge0: port 1(syz_tun) entered blocking state
[  232.697469][T13629] bridge0: port 1(syz_tun) entered forwarding state
[  232.812990][   T33] audit: type=1804 audit(1778534266.988:10): pid=13635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2388" name="/newroot/857/memory.events" dev="tmpfs" ino=4409 res=1 errno=0
[  232.824786][   T33] audit: type=1800 audit(1778534266.998:11): pid=13635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2388" name="memory.events" dev="tmpfs" ino=4409 res=0 errno=0
[  232.832771][   T33] audit: type=1804 audit(1778534266.998:12): pid=13635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2388" name="/newroot/857/memory.events" dev="tmpfs" ino=4409 res=1 errno=0
[  233.066471][T13650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2391'.
[  233.105262][T13650] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2391'.
[  233.236639][T13654] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[  233.401716][T13669] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2394'.
[  233.554859][T13681] netlink: 'syz.0.2400': attribute type 29 has an invalid length.
[  233.557468][T13680] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2399'.
[  233.563327][T13681] netlink: 'syz.0.2400': attribute type 29 has an invalid length.
[  233.566286][T13681] netlink: 508 bytes leftover after parsing attributes in process `syz.0.2400'.
[  233.572411][T13681] xt_hashlimit: size too large, truncated to 1048576
[  233.631017][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2400'.
[  233.642711][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2400'.
[  233.655813][T13688] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2400'.
[  233.715299][T13693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2405'.
[  234.329941][T13759] syzkaller1: entered promiscuous mode
[  234.331819][T13759] syzkaller1: entered allmulticast mode
[  234.865490][T13796] netlink: 'syz.1.2435': attribute type 11 has an invalid length.
[  234.880286][T13796] netlink: 'syz.1.2435': attribute type 11 has an invalid length.
[  234.886853][T13801] netlink: 'syz.0.2437': attribute type 58 has an invalid length.
[  234.943736][T13805] netlink: 'syz.0.2437': attribute type 3 has an invalid length.
[  234.959118][T13804] netlink: 'syz.1.2438': attribute type 13 has an invalid length.
[  235.056704][T13811] netlink: 'syz.2.2440': attribute type 1 has an invalid length.
[  235.067010][T13810] netlink: 'syz.2.2440': attribute type 1 has an invalid length.
[  235.372598][T13830] xt_hashlimit: size too large, truncated to 1048576
[  235.525843][T13846] ipt_rpfilter: unknown options
[  235.859128][T13872] netlink: 'syz.2.2463': attribute type 1 has an invalid length.
[  236.022826][T13825] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  236.025849][T13825] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  236.079329][T13887] netlink: 'syz.1.2467': attribute type 1 has an invalid length.
[  236.124449][T13887] 8021q: adding VLAN 0 to HW filter on device bond5
[  236.142173][T13887] bond5: (slave veth15): Enslaving as an active interface with a down link
[  236.149610][T13887] bond5: (slave dummy0): making interface the new active one
[  236.152871][T13887] dummy0: entered promiscuous mode
[  236.154840][T13887] bond5: (slave dummy0): Enslaving as an active interface with an up link
[  236.163528][T13887] netlink: 'syz.1.2467': attribute type 10 has an invalid length.
[  236.170669][T13887] bond5: (slave dummy0): Releasing active interface
[  236.194384][T13887] ipt_rpfilter: unknown options
[  236.422804][T13907] netlink: 'syz.1.2473': attribute type 1 has an invalid length.
[  236.452838][T13911] ip6tnl0: Caught tx_queue_len zero misconfig
[  236.634661][T13931] SET target dimension over the limit!
[  236.806132][T13948] lo speed is unknown, defaulting to 1000
[  236.839124][T13954] openvswitch: netlink: IP tunnel dst address not specified
[  236.942153][T13965] IPVS: length: 15 != 8
[  238.365965][T14008] __nla_validate_parse: 29 callbacks suppressed
[  238.366008][T14008] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2503'.
[  238.506583][T14023] syzkaller0: entered promiscuous mode
[  238.508702][T14023] syzkaller0: entered allmulticast mode
[  238.533551][T14025] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  238.740491][T14037] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2512'.
[  238.846770][T14041] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2514'.
[  239.172137][T14086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2529'.
[  239.201301][T14088] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2528'.
[  239.217963][T14090] openvswitch: netlink: IP tunnel TTL not specified.
[  239.223243][T14090] x_tables: duplicate underflow at hook 1
[  239.238496][T14091] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2530'.
[  239.272109][T14090] netlink: 'syz.0.2531': attribute type 10 has an invalid length.
[  239.356156][T14098] bridge4: entered promiscuous mode
[  239.358356][T14098] bridge4: entered allmulticast mode
[  239.577940][T14110] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2536'.
[  239.585458][T14110] syzkaller1: entered promiscuous mode
[  239.587365][T14110] syzkaller1: entered allmulticast mode
[  239.716751][T14115] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2538'.
[  239.918517][T14126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2541'.
[  239.921945][T14126] openvswitch: netlink: Invalid VLAN frame
[  239.926872][T14126] bond0: Caught tx_queue_len zero misconfig
[  240.106848][T14135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2544'.
[  240.113626][T14133] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  240.114171][T14139] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  241.097032][T14162] team0 (unregistering): left allmulticast mode
[  241.105450][T14162] team_slave_0: left allmulticast mode
[  241.107351][T14162] team_slave_1: left allmulticast mode
[  241.109823][T14162] team0 (unregistering): left promiscuous mode
[  241.112074][T14162] team_slave_0: left promiscuous mode
[  241.114466][T14162] team_slave_1: left promiscuous mode
[  241.117033][T14162] bridge0: port 3(team0) entered disabled state
[  241.126056][T14162] team0 (unregistering): Port device team_slave_0 removed
[  241.131247][T14162] team0 (unregistering): Port device team_slave_1 removed
[  241.145200][T14162] team0 (unregistering): Port device bridge2 removed
[  241.243391][T14172] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  241.246853][T14172] syzkaller0: entered promiscuous mode
[  241.249582][T14172] syzkaller0: entered allmulticast mode
[  241.278624][T14169] tipc: Resetting bearer <eth:syzkaller0>
[  241.296478][T14169] tipc: Disabling bearer <eth:syzkaller0>
[  241.370842][T14177] syzkaller0: entered promiscuous mode
[  241.373225][T14177] syzkaller0: entered allmulticast mode
[  241.621102][T14199] netlink: 'syz.0.2563': attribute type 2 has an invalid length.
[  241.641988][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0
[  241.648526][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0
[  241.656021][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0
[  241.665673][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0
[  241.801883][T14211] netlink: 'syz.1.2567': attribute type 5 has an invalid length.
[  242.314815][T14246] netlink: 'syz.2.2578': attribute type 20 has an invalid length.
[  242.612072][T14266] netlink: 'syz.0.2584': attribute type 3 has an invalid length.
[  242.617345][T14266] netlink: 'syz.0.2584': attribute type 1 has an invalid length.
[  242.620825][T14266] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  242.664452][T14273] xt_TCPMSS: Only works on TCP SYN packets
[  242.709673][T14275] syzkaller0: entered promiscuous mode
[  242.712302][T14275] syzkaller0: entered allmulticast mode
[  242.760014][T14280] ipt_rpfilter: unknown options
[  243.048096][T14288] netlink: 'syz.0.2592': attribute type 1 has an invalid length.
[  243.050722][T14288] netlink: 'syz.0.2592': attribute type 2 has an invalid length.
[  243.194207][T14295] ipt_rpfilter: unknown options
[  243.394367][T14310] erspan1: entered promiscuous mode
[  243.396514][T14310] erspan1: entered allmulticast mode
[  243.490925][T14316] sctp: [Deprecated]: syz.2.2598 (pid 14316) Use of struct sctp_assoc_value in delayed_ack socket option.
[  243.490925][T14316] Use struct sctp_sack_info instead
[  243.503373][T14316] __nla_validate_parse: 78 callbacks suppressed
[  243.503384][T14316] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2598'.
[  243.508325][T14316] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2598'.
[  243.552290][T14323] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2601'.
[  243.563135][T14323] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  243.699356][T14331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2604'.
[  243.703073][T14331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2604'.
[  243.779086][T14340] vlan0: entered promiscuous mode
[  244.112151][T14357] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2611'.
[  244.400170][T14359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2612'.
[  244.449704][T14370] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2615'.
[  244.532059][T14373] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  244.550693][T14373] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  244.880668][T14418] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2624'.
[  244.915838][T14418] lo speed is unknown, defaulting to 1000
[  244.969624][T14428] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2628'.
[  246.150029][T14506] ipt_rpfilter: unknown options
[  246.189794][ T5615] Bluetooth: hci2: command 0x0405 tx timeout
[  246.622845][T14535] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  247.687853][T14569] ipt_rpfilter: unknown options
[  247.777168][T14573] No such timeout policy "syz1"
[  247.811234][T14576] IPVS: set_ctl: invalid protocol: 152 172.20.20.53:20001
[  247.818588][T14575] syzkaller0: entered promiscuous mode
[  247.820513][T14575] syzkaller0: entered allmulticast mode
[  249.324433][T14517] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  249.386473][T14583] __nla_validate_parse: 9 callbacks suppressed
[  249.386483][T14583] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2671'.
[  249.402694][T14583] netlink: 'syz.0.2671': attribute type 3 has an invalid length.
[  249.569396][T14601] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2677'.
[  249.665515][T14607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2680'.
[  249.776934][T14619] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2682'.
[  249.821685][T14621] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2683'.
[  250.016418][T14639] lo speed is unknown, defaulting to 1000
[  250.551545][T14663] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  250.623093][T14665] syzkaller1: entered promiscuous mode
[  250.625207][T14665] syzkaller1: entered allmulticast mode
[  250.633396][T14665] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2694'.
[  250.656449][T14667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2696'.
[  250.806076][T14664] nbd0: detected capacity change from 0 to 63
[  250.857614][   T56] block nbd0: Receive control failed (result -104)
[  250.860414][T14670] block nbd0: Receive control failed (result -32)
[  250.981910][T14678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2700'.
[  250.988532][T14678] netlink: 276 bytes leftover after parsing attributes in process `syz.0.2700'.
[  251.286994][T14711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2711'.
[  251.333951][T14714] ipt_rpfilter: unknown options
[  251.547176][T14729] batadv_slave_0: Caught tx_queue_len zero misconfig
[  252.146803][T14738] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  252.155961][T14738] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  252.418536][T14754] sctp: [Deprecated]: syz.0.2724 (pid 14754) Use of struct sctp_assoc_value in delayed_ack socket option.
[  252.418536][T14754] Use struct sctp_sack_info instead
[  252.437502][T14757] netlink: 'syz.1.2725': attribute type 11 has an invalid length.
[  253.073328][   T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  253.082020][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  253.094595][   T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  253.099483][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  253.102198][   T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  253.104708][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  253.107272][   T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  253.113010][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  253.216512][T14832] ipt_rpfilter: unknown options
[  253.874893][T14904] veth1_to_hsr: entered allmulticast mode
[  253.877664][T14904] netlink: 'syz.0.2753': attribute type 6 has an invalid length.
[  253.885061][T14904] netlink: 'syz.0.2753': attribute type 5 has an invalid length.
[  253.888009][T14904] netlink: 'syz.0.2753': attribute type 6 has an invalid length.
[  253.891573][T14904] netlink: 'syz.0.2753': attribute type 5 has an invalid length.
[  253.903051][T14904] ip6gre1: entered allmulticast mode
[  254.077667][T14927] netlink: 'syz.1.2757': attribute type 1 has an invalid length.
[  254.451675][T14959] ipt_rpfilter: unknown options
[  254.728514][T14989] ipt_rpfilter: unknown options
[  254.960844][T15006] __nla_validate_parse: 219 callbacks suppressed
[  254.960860][T15006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2777'.
[  255.027663][T15014] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2780'.
[  255.057571][T15016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2782'.
[  255.058771][T15018] ipt_rpfilter: unknown options
[  255.071103][T15016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2782'.
[  255.226086][T15028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2788'.
[  255.343397][T15041] netlink: 16158 bytes leftover after parsing attributes in process `syz.0.2791'.
[  255.397781][T15048] netlink: 'syz.0.2793': attribute type 15 has an invalid length.
[  255.556019][T15067] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2798'.
[  255.560955][T15067] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2798'.
[  255.564030][T15067] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2798'.
[  255.601100][T15071] netlink: 'syz.0.2800': attribute type 1 has an invalid length.
[  255.606082][T15071] nbd: error processing sock list
[  255.708256][T15089] netlink: 'syz.2.2806': attribute type 12 has an invalid length.
[  255.717961][T15089] netlink: 'syz.2.2806': attribute type 29 has an invalid length.
[  255.720475][T15089] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2806'.
[  255.723482][T15087] syzkaller0: entered promiscuous mode
[  255.725285][T15087] syzkaller0: entered allmulticast mode
[  255.770034][T15087] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  255.949609][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  256.154904][T15086] tipc: Resetting bearer <eth:syzkaller0>
[  256.187591][T15086] tipc: Disabling bearer <eth:syzkaller0>
[  257.313555][T15213] geneve4: entered promiscuous mode
[  257.342525][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 42969 - 0
[  257.346551][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 42969 - 0
[  257.351510][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 42969 - 0
[  257.357114][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 42969 - 0
[  257.468414][T15228] lo speed is unknown, defaulting to 1000
[  258.050212][T15264] netlink: 'syz.0.2840': attribute type 13 has an invalid length.
[  258.053214][T15264] netlink: 'syz.0.2840': attribute type 17 has an invalid length.
[  258.201259][T15264] veth1_to_hsr: left allmulticast mode
[  258.208388][T15264] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  258.214785][T15264] veth1_vlan: left promiscuous mode
[  258.218381][T15264] veth0_vlan: left promiscuous mode
[  258.224307][T15264] veth0_vlan: entered promiscuous mode
[  258.235135][T15264] veth1_vlan: entered promiscuous mode
[  258.251955][T15264] veth0_macvtap: left promiscuous mode
[  258.262961][T15264] veth0_macvtap: entered promiscuous mode
[  258.278263][T15264] veth1_macvtap: entered promiscuous mode
[  258.291677][T15264] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  258.299013][T15264] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  258.305330][T15264] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  258.312961][T15264] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  258.328311][T15264] ip6tnl1: left allmulticast mode
[  258.334790][T15264] 8021q: adding VLAN 0 to HW filter on device bond1
[  258.344488][T15264] 8021q: adding VLAN 0 to HW filter on device bond2
[  258.347497][T15264] 8021q: adding VLAN 0 to HW filter on device bond3
[  258.350758][T15264] 8021q: adding VLAN 0 to HW filter on device bond4
[  258.358358][T15264] 8021q: adding VLAN 0 to HW filter on device bond5
[  258.362065][T15264] bridge1: left promiscuous mode
[  258.375466][T15264] 8021q: adding VLAN 0 to HW filter on device bond6
[  258.380136][T15264] 8021q: adding VLAN 0 to HW filter on device bond7
[  258.388500][T15264] bond8: left promiscuous mode
[  258.390796][T15264] bridge3: left promiscuous mode
[  258.393804][T15264] ipvlan0: left allmulticast mode
[  258.396031][T15264] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  258.403035][T15264] ipvlan2: left allmulticast mode
[  258.405087][T15264] bond8: left allmulticast mode
[  258.406612][T15264] bridge3: left allmulticast mode
[  258.409376][T15264] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  258.414786][T15264] batadv0: entered promiscuous mode
[  258.417132][T15264] 8021q: adding VLAN 0 to HW filter on device macsec2
[  258.421568][T15264] bridge4: left promiscuous mode
[  258.423195][T15264] bridge4: left allmulticast mode
[  258.427094][T15264] erspan1: left promiscuous mode
[  258.428673][T15264] erspan1: left allmulticast mode
[  258.435626][T15264] ip6gre1: left allmulticast mode
[  258.514223][   T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[  258.538434][   T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[  258.610242][T15286] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.648351][T15286] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  258.655270][T15286] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  258.801089][   T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  258.803942][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0
[  258.807294][   T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  258.810842][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0
[  258.818702][T15270] lo speed is unknown, defaulting to 1000
[  258.822502][   T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  258.828170][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0
[  258.839325][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0
[  258.844092][   T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  258.848140][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0
[  258.851688][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0
[  258.869479][T15293] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  258.884367][T15298] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  259.492941][T15342] netlink: 'syz.0.2861': attribute type 30 has an invalid length.
[  259.827253][T15362] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  260.072648][T15382] __nla_validate_parse: 15 callbacks suppressed
[  260.072661][T15382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2878'.
[  260.117366][T15385] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2879'.
[  260.132771][T15385] netlink: 1108 bytes leftover after parsing attributes in process `syz.2.2879'.
[  260.136893][T15385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2879'.
[  260.163118][T15385] bridge0: entered promiscuous mode
[  260.167497][T15385] 8021q: adding VLAN 0 to HW filter on device bond0
[  260.174222][T15385] 8021q: adding VLAN 0 to HW filter on device batadv0
[  260.205154][T15385] batman_adv: batadv0: Interface activated: batadv_slave_0
[  260.209126][T15385] batman_adv: batadv0: Interface activated: batadv_slave_1
[  260.212201][T15385] tipc: Resetting bearer <eth:xfrm0>
[  260.217161][T15385] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  260.223849][  T281] lo speed is unknown, defaulting to 1000
[  260.227294][  T281] sqz0: Port: 1 Link ACTIVE
[  260.233449][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.235874][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state
[  260.240690][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.242910][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state
[  260.248963][T15385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2879'.
[  260.260247][T15387] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2879'.
[  260.265699][T15387] netlink: 980 bytes leftover after parsing attributes in process `syz.2.2879'.
[  260.270140][   T10] lo speed is unknown, defaulting to 1000
[  260.344334][T15390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2880'.
[  260.348385][T15390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2880'.
[  260.621436][T15406] netlink: 'syz.2.2886': attribute type 29 has an invalid length.
[  260.627244][T15406] netlink: 'syz.2.2886': attribute type 29 has an invalid length.
[  260.631325][T15407] netlink: 'syz.2.2886': attribute type 29 has an invalid length.
[  261.231323][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  261.761379][T15439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2896'.
[  261.828613][T15443] bond9: option miimon: invalid value (18446744073709551607)
[  261.834075][T15443] bond9: option miimon: allowed values 0 - 2147483647
[  261.840764][T15443] bond9 (unregistering): Released all slaves
[  262.483829][T15511] ipt_rpfilter: unknown options
[  262.489245][T15507] ieee802154 phy1 wpan1: encryption failed: -22
[  262.715997][T15526] syzkaller0: entered promiscuous mode
[  262.718286][T15526] syzkaller0: entered allmulticast mode
[  262.719702][T15529] ipt_rpfilter: unknown options
[  262.721225][T15530] ipt_rpfilter: unknown options
[  263.785387][T15563] ipt_rpfilter: unknown options
[  263.902242][T15570] 8021q: VLANs not supported on vxcan1
[  263.912396][T15570] 8021q: VLANs not supported on vxcan1
[  263.921260][T15570] 8021q: VLANs not supported on vxcan1
[  263.925419][T15570] 8021q: VLANs not supported on vxcan1
[  263.927586][T15570] 8021q: VLANs not supported on vxcan1
[  263.930703][T15570] 8021q: VLANs not supported on vxcan1
[  263.933727][T15570] 8021q: VLANs not supported on vxcan1
[  263.935851][T15570] 8021q: VLANs not supported on vxcan1
[  263.937733][T15570] 8021q: VLANs not supported on vxcan1
[  263.939661][T15570] 8021q: VLANs not supported on vxcan1
[  263.941732][T15570] 8021q: VLANs not supported on vxcan1
[  263.944057][T15570] 8021q: VLANs not supported on vxcan1
[  263.946398][T15570] 8021q: VLANs not supported on vxcan1
[  263.948678][T15570] 8021q: VLANs not supported on vxcan1
[  263.951351][T15570] 8021q: VLANs not supported on vxcan1
[  263.953554][T15570] 8021q: VLANs not supported on vxcan1
[  263.955379][T15570] 8021q: VLANs not supported on vxcan1
[  263.957259][T15570] 8021q: VLANs not supported on vxcan1
[  263.959682][T15570] 8021q: VLANs not supported on vxcan1
[  263.962150][T15570] 8021q: VLANs not supported on vxcan1
[  263.963956][T15570] 8021q: VLANs not supported on vxcan1
[  263.967300][T15570] 8021q: VLANs not supported on vxcan1
[  263.969118][T15570] 8021q: VLANs not supported on vxcan1
[  263.971095][T15570] 8021q: VLANs not supported on vxcan1
[  263.972818][T15570] 8021q: VLANs not supported on vxcan1
[  263.974548][T15570] 8021q: VLANs not supported on vxcan1
[  263.976261][T15570] 8021q: VLANs not supported on vxcan1
[  263.977939][T15570] 8021q: VLANs not supported on vxcan1
[  263.979770][T15570] 8021q: VLANs not supported on vxcan1
[  263.982340][T15570] 8021q: VLANs not supported on vxcan1
[  263.984145][T15570] 8021q: VLANs not supported on vxcan1
[  263.985901][T15570] 8021q: VLANs not supported on vxcan1
[  263.987647][T15570] 8021q: VLANs not supported on vxcan1
[  263.990024][T15570] 8021q: VLANs not supported on vxcan1
[  263.991795][T15570] 8021q: VLANs not supported on vxcan1
[  263.993619][T15570] 8021q: VLANs not supported on vxcan1
[  263.995328][T15570] 8021q: VLANs not supported on vxcan1
[  263.997161][T15570] 8021q: VLANs not supported on vxcan1
[  263.998986][T15570] 8021q: VLANs not supported on vxcan1
[  264.001047][T15570] 8021q: VLANs not supported on vxcan1
[  264.002869][T15570] 8021q: VLANs not supported on vxcan1
[  264.004580][T15570] 8021q: VLANs not supported on vxcan1
[  264.006264][T15570] 8021q: VLANs not supported on vxcan1
[  264.008019][T15570] 8021q: VLANs not supported on vxcan1
[  264.009848][T15570] 8021q: VLANs not supported on vxcan1
[  264.011870][T15570] 8021q: VLANs not supported on vxcan1
[  264.013639][T15570] 8021q: VLANs not supported on vxcan1
[  264.015337][T15570] 8021q: VLANs not supported on vxcan1
[  264.017031][T15570] 8021q: VLANs not supported on vxcan1
[  264.018931][T15570] 8021q: VLANs not supported on vxcan1
[  264.020950][T15570] 8021q: VLANs not supported on vxcan1
[  264.022800][T15570] 8021q: VLANs not supported on vxcan1
[  264.024598][T15570] 8021q: VLANs not supported on vxcan1
[  264.026289][T15570] 8021q: VLANs not supported on vxcan1
[  264.027972][T15570] 8021q: VLANs not supported on vxcan1
[  264.030839][T15570] 8021q: VLANs not supported on vxcan1
[  264.033239][T15570] 8021q: VLANs not supported on vxcan1
[  264.035102][T15570] 8021q: VLANs not supported on vxcan1
[  264.036872][T15570] 8021q: VLANs not supported on vxcan1
[  264.038562][T15570] 8021q: VLANs not supported on vxcan1
[  264.040356][T15570] 8021q: VLANs not supported on vxcan1
[  264.042387][T15570] 8021q: VLANs not supported on vxcan1
[  264.044238][T15570] 8021q: VLANs not supported on vxcan1
[  264.045937][T15570] 8021q: VLANs not supported on vxcan1
[  264.047604][T15570] 8021q: VLANs not supported on vxcan1
[  264.080412][T15573] syzkaller0: entered promiscuous mode
[  264.082354][T15573] syzkaller0: entered allmulticast mode
[  264.091869][T15573] 0: reclassify loop, rule prio 0, protocol 700
[  264.305236][T15593] syzkaller0: entered promiscuous mode
[  264.306962][T15593] syzkaller0: entered allmulticast mode
[  264.561697][T15614] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  264.734196][T15637] netlink: 'syz.2.2959': attribute type 7 has an invalid length.
[  264.857101][T15648] --map-set only usable from mangle table
[  264.929629][T15657] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:16
[  264.937337][T15656] can: request_module (can-proto-4) failed.
[  265.064042][T15668] netlink: 'syz.2.2968': attribute type 4 has an invalid length.
[  265.298397][T15676] __nla_validate_parse: 27 callbacks suppressed
[  265.298413][T15676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2970'.
[  265.304674][T15676] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.2970'.
[  265.345883][T15679] xt_l2tp: missing protocol rule (udp|l2tpip)
[  265.349663][T15679] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma?
[  265.429443][T15683] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2973'.
[  265.469590][T15685] pimreg: entered allmulticast mode
[  265.492011][T15687] pimreg: left allmulticast mode
[  265.720343][T15697] netlink: 2500 bytes leftover after parsing attributes in process `syz.1.2977'.
[  265.787202][T15709] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2979'.
[  265.799172][T15709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2979'.
[  265.803697][T15710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2980'.
[  265.822625][T15709] sqz0: rxe_newlink: already configured on lo
[  265.878758][T15716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2982'.
[  266.395856][T15747] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2993'.
[  266.659189][T15759] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2999'.
[  266.767197][T15769] netlink: 'syz.2.3001': attribute type 10 has an invalid length.
[  266.913167][T15789] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  266.972869][T15789] syzkaller0: entered promiscuous mode
[  266.981141][T15789] syzkaller0: entered allmulticast mode
[  266.989734][T15789] tipc: Resetting bearer <eth:syzkaller0>
[  267.101846][T15803] netlink: 'syz.1.3009': attribute type 6 has an invalid length.
[  267.246905][T15806] lo speed is unknown, defaulting to 1000
[  267.659624][T15775] tipc: Resetting bearer <eth:syzkaller0>
[  268.067820][T15818] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  269.288590][T15775] tipc: Disabling bearer <eth:syzkaller0>
[  269.611526][T15846] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  269.662738][T15849] ipt_rpfilter: unknown options
[  272.125245][T15883] netlink: 'syz.2.3030': attribute type 6 has an invalid length.
[  272.181405][T15888] __nla_validate_parse: 14 callbacks suppressed
[  272.181425][T15888] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3029'.
[  272.201532][T15889] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3030'.
[  272.244913][T15888] bond0: Caught tx_queue_len zero misconfig
[  272.254872][T15888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3029'.
[  272.258387][T15888] nbd: illegal input index -1113835520
[  272.261712][T15888] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3029'.
[  272.333386][T15891] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3031'.
[  272.352062][T15891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3031'.
[  272.494179][T15894] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  272.501921][T15894] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.526851][T15899] tipc: New replicast peer: 172.20.20.170
[  272.532467][T15899] tipc: Enabled bearer <udp:syz2>, priority 10
[  272.534815][T15901] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3034'.
[  272.541141][T15901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3034'.
[  272.605028][T15894] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  272.608430][T15894] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.726288][T15894] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  272.730962][T15894] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.816807][T15894] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  272.821441][T15894] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.926441][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  272.929609][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  272.933089][T15928] netlink: 'syz.2.3041': attribute type 29 has an invalid length.
[  272.936411][T15928] netlink: 'syz.2.3041': attribute type 29 has an invalid length.
[  272.939596][T15928] netlink: 508 bytes leftover after parsing attributes in process `syz.2.3041'.
[  272.958824][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  272.962661][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  272.976025][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  272.979070][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  272.996591][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  273.000090][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  273.047160][T15935] netlink: 'syz.2.3044': attribute type 1 has an invalid length.
[  273.068415][T15935] 8021q: adding VLAN 0 to HW filter on device bond5
[  273.185567][T15939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3045'.
[  273.310934][T15944] syzkaller0: entered promiscuous mode
[  273.313293][T15944] syzkaller0: entered allmulticast mode
[  275.043690][T15970] sctp: [Deprecated]: syz.2.3055 (pid 15970) Use of int in max_burst socket option.
[  275.043690][T15970] Use struct sctp_assoc_value instead
[  275.234601][T15984] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  275.256599][   T55] block nbd1: Receive control failed (result -32)
[  275.266047][T14670] block nbd2: Receive control failed (result -32)
[  275.391346][T15999] tc action pedit offset 20 out of bounds
[  275.759522][T16024] openvswitch: netlink: Key 6 has unexpected len 318 expected 2
[  276.997464][T16074] ipt_rpfilter: unknown options
[  277.266962][T16093] __nla_validate_parse: 15 callbacks suppressed
[  277.266982][T16093] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3089'.
[  277.403909][T16111] ip_vti0: entered promiscuous mode
[  277.410499][T16111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3094'.
[  277.416087][T16112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3094'.
[  277.454601][T16115] netlink: 'syz.2.3095': attribute type 4 has an invalid length.
[  277.911659][T16140] syzkaller0: entered allmulticast mode
[  277.922395][T16140] syzkaller0: entered promiscuous mode
[  277.949911][T16140] syzkaller0 (unregistering): left promiscuous mode
[  277.952616][T16140] syzkaller0 (unregistering): left allmulticast mode
[  278.051226][T16150] x_tables: duplicate underflow at hook 1
[  278.107123][T16153] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  278.116749][T16155] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3108'.
[  278.149752][T16157] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3109'.
[  278.167710][T16158] openvswitch: netlink: Multiple metadata blocks provided
[  278.473379][T16191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3121'.
[  278.483236][T16191] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  278.705147][T16206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3127'.
[  278.814273][T16213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3130'.
[  278.822228][T16213] ip_vti0: left promiscuous mode
[  278.851686][T16213] veth0_vlan: left promiscuous mode
[  278.854353][T16213] veth0_vlan: entered promiscuous mode
[  278.863316][T16213] veth1_macvtap: left promiscuous mode
[  278.865980][T16213] veth0_macvtap: left promiscuous mode
[  278.872613][T16213] veth0_macvtap: entered promiscuous mode
[  278.875388][T16213] veth1_macvtap: entered promiscuous mode
[  278.877360][T16213] veth1_macvtap: entered allmulticast mode
[  278.880262][T16213] macsec0: left promiscuous mode
[  278.893118][T16213] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  278.906027][T15281] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  278.911325][T15281] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  278.917182][T15281] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  278.923106][T15281] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  279.732614][T16232] x_tables: duplicate underflow at hook 1
[  279.735573][T16232] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3134'.
[  279.751069][T16232] bond6: entered promiscuous mode
[  279.753548][T16232] 8021q: adding VLAN 0 to HW filter on device bond6
[  279.765323][T16232] bond6 (unregistering): Released all slaves
[  279.787415][T16234] veth1: Caught tx_queue_len zero misconfig
[  279.834928][T16238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3135'.
[  279.965785][T16255] blkio.reset_stats is deprecated
[  281.087466][   T96] block nbd0: Connection timed out, retrying (0/2 alive)
[  281.090867][   T96] block nbd0: Connection timed out, retrying (0/2 alive)
[  281.094822][   T96] block nbd0: Connection timed out, retrying (0/2 alive)
[  281.097235][   T96] block nbd0: Connection timed out, retrying (0/2 alive)
[  281.101835][   T96] block nbd0: Dead connection, failed to find a fallback
[  281.108021][   T96] block nbd0: shutting down sockets
[  281.111399][   T96] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  281.117192][   T96] Buffer I/O error on dev nbd0, logical block 3, async page read
[  281.124574][   T96] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  281.127734][   T96] Buffer I/O error on dev nbd0, logical block 2, async page read
[  281.130558][   T96] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  281.134105][   T96] Buffer I/O error on dev nbd0, logical block 1, async page read
[  281.137458][   T96] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  281.141440][   T96] Buffer I/O error on dev nbd0, logical block 0, async page read
[  281.145320][T14299] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  281.160272][T14299] Buffer I/O error on dev nbd0, logical block 0, async page read
[  281.172298][T14299] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  281.179022][T14299] Buffer I/O error on dev nbd0, logical block 1, async page read
[  281.186553][T14299] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  281.191323][T14299] Buffer I/O error on dev nbd0, logical block 2, async page read
[  281.199066][T14299] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  281.201786][T14299] Buffer I/O error on dev nbd0, logical block 3, async page read
[  281.205025][T14299] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  281.208012][T14299] Buffer I/O error on dev nbd0, logical block 0, async page read
[  281.211305][T14299] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  281.214207][T14299] Buffer I/O error on dev nbd0, logical block 1, async page read
[  281.218113][T14299] ldm_validate_partition_table(): Disk read failed.
[  281.223766][T14299] Dev nbd0: unable to read RDB block 0
[  281.226802][T14299]  nbd0: unable to read partition table
[  281.246205][T14299] ldm_validate_partition_table(): Disk read failed.
[  281.252890][T14299] Dev nbd0: unable to read RDB block 0
[  281.257765][T14299]  nbd0: unable to read partition table
[  293.922614][T16281] __nla_validate_parse: 3 callbacks suppressed
[  293.922634][T16281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3147'.
[  293.958498][T16284] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3149'.
[  293.968577][T16284] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3149'.
[  294.083117][T16296] openvswitch: netlink: IPv6 tunnel dst address is zero
[  294.168138][T16310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3157'.
[  294.173402][T16310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3157'.
[  294.173420][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  294.190854][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  294.197330][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  294.206668][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  294.211882][T16311] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3155'.
[  294.710386][T16346] lo: Caught tx_queue_len zero misconfig
[  294.902584][T16354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3166'.
[  295.029572][T16368] netlink: 'syz.1.3170': attribute type 10 has an invalid length.
[  295.068393][T16371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3171'.
[  295.283919][T16382] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3175'.
[  295.295222][T16382] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  295.299849][T16382] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  295.303731][T16382] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  295.307657][T16382] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  295.311885][T16382] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  295.315858][T16382] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  295.321515][T16382] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  295.325637][T16382] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  295.330301][T16382] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  295.441906][T16391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3177'.
[  307.590713][T16400] net_ratelimit: 24 callbacks suppressed
[  307.590728][T16400] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  307.663136][T16403] netlink: 424 bytes leftover after parsing attributes in process `syz.0.3181'.
[  307.666927][T16403] netlink: 'syz.0.3181': attribute type 1 has an invalid length.
[  307.771155][T16412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3182'.
[  307.775784][T16412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3182'.
[  307.885107][T16421] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3187'.
[  307.903391][T16423] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3186'.
[  307.915993][T16423] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3186'.
[  308.103587][T16441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3191'.
[  308.115701][T16443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3192'.
[  308.138108][T16448] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3193'.
[  308.210696][T16455] ieee802154 phy1 wpan1: encryption failed: -22
[  308.232344][T16460] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3197'.
[  308.277034][T16460] pim6reg: entered allmulticast mode
[  308.651529][T16517] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  308.719290][T16520] nbd0: detected capacity change from 63 to 0
[  309.308286][T16555] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20003
[  309.472614][T16569] ipt_rpfilter: unknown options
[  309.547779][T16577] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  309.807768][T16587] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  311.133909][T16625] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4
[  311.482302][T16641] ipt_rpfilter: unknown options
[  311.484441][T16642] ipt_rpfilter: unknown options
[  311.510034][T16645] netlink: 'syz.2.3253': attribute type 20 has an invalid length.
[  311.788280][T16662] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  311.793706][T16662] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  311.888157][T16674] netlink: 'syz.0.3261': attribute type 1 has an invalid length.
[  311.896674][T16674] netlink: 'syz.0.3261': attribute type 1 has an invalid length.
[  311.937165][T16678] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  311.976629][T16684] tipc: New replicast peer: 255.255.255.255
[  311.980308][T16684] tipc: Enabled bearer <udp:syz1>, priority 10
[  311.981669][T16685] x_tables: duplicate underflow at hook 1
[  311.985811][T16685] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  312.239278][T16713] netlink: 'syz.0.3275': attribute type 4 has an invalid length.
[  312.242604][T16713] netlink: 'syz.0.3275': attribute type 8 has an invalid length.
[  312.446464][T16729] ipt_rpfilter: unknown options
[  312.506690][T16734] lo speed is unknown, defaulting to 1000
[  313.237352][T16778] __nla_validate_parse: 32 callbacks suppressed
[  313.237371][T16778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3294'.
[  313.546666][T16795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3300'.
[  313.857934][T16836] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3313'.
[  313.913340][T16847] syzkaller0: entered promiscuous mode
[  313.915693][T16832] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3312'.
[  313.916411][T16847] syzkaller0: entered allmulticast mode
[  314.047339][T16863] openvswitch: netlink: Unexpected mask (mask=200044, allowed=1004c)
[  314.085144][T16861] bond6 (unregistering): Released all slaves
[  314.130486][T16867] syzkaller1: entered promiscuous mode
[  314.132848][T16867] syzkaller1: entered allmulticast mode
[  314.217333][T16870] syzkaller0: entered promiscuous mode
[  314.219265][T16870] syzkaller0: entered allmulticast mode
[  314.238976][T16870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3323'.
[  314.275230][T16876] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3324'.
[  314.282497][T16876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3324'.
[  314.551244][T16907] netlink: 276 bytes leftover after parsing attributes in process `syz.2.3335'.
[  314.645825][T16912] netlink: 'syz.1.3337': attribute type 1 has an invalid length.
[  314.654038][T16912] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  314.752345][T16922] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  314.812598][T16927] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3342'.
[  314.866803][T16932] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3345'.
[  315.041297][T16944] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  315.065435][T16949] tc_dump_action: action bad kind
[  315.302818][T16969] ip6gretap0: entered promiscuous mode
[  315.306813][T16969] macvtap1: entered promiscuous mode
[  315.308683][T16969] macvtap1: entered allmulticast mode
[  315.311047][T16969] ip6gretap0: entered allmulticast mode
[  315.320912][T16969] ip6gretap0: left allmulticast mode
[  315.322667][T16969] ip6gretap0: left promiscuous mode
[  315.325537][T16969] macvtap1: left promiscuous mode
[  315.327123][T16969] macvtap1: left allmulticast mode
[  315.436720][T16981] netlink: 'syz.1.3358': attribute type 3 has an invalid length.
[  315.534031][T16989] lo speed is unknown, defaulting to 1000
[  317.147851][T17084] batman_adv: batadv0: Removing interface: batadv_slave_0
[  317.167941][T17086] bond4: (slave lo): Releasing backup interface
[  317.172362][T17086] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  317.177973][T17086] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  317.184762][T17086] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  317.194068][T17087] ip6_vti0: entered promiscuous mode
[  317.335861][T17093] netlink: 'syz.1.3400': attribute type 1 has an invalid length.
[  317.552657][T17101] netlink: 'syz.2.3403': attribute type 1 has an invalid length.
[  317.806117][T17118] netlink: 'syz.2.3409': attribute type 21 has an invalid length.
[  317.832430][T17118] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  318.243362][T17148] __nla_validate_parse: 25 callbacks suppressed
[  318.243375][T17148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3416'.
[  318.282592][T17150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3418'.
[  318.366546][T17162] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  318.370066][T17162] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  318.416438][T17166] ipt_rpfilter: unknown options
[  318.551905][T17169] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3424'.
[  318.554883][T17169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3424'.
[  318.783037][T17178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3427'.
[  319.236562][T17197] ipt_rpfilter: unknown options
[  319.750675][T17223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3444'.
[  319.782498][T17222] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3445'.
[  319.995447][T17232] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3449'.
[  319.999435][T17232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3449'.
[  320.077779][T17236] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3451'.
[  320.082607][T17236] sctp: [Deprecated]: syz.1.3451 (pid 17236) Use of int in maxseg socket option.
[  320.082607][T17236] Use struct sctp_assoc_value instead
[  320.138686][T17239] netlink: 'syz.1.3452': attribute type 1 has an invalid length.
[  320.617418][T17271] syzkaller1: entered promiscuous mode
[  320.622443][T17271] syzkaller1: entered allmulticast mode
[  321.307986][T17296] syzkaller0: entered promiscuous mode
[  321.316251][T17296] syzkaller0: entered allmulticast mode
[  321.399222][T17299] syzkaller0: entered promiscuous mode
[  321.401282][T17299] syzkaller0: entered allmulticast mode
[  322.011663][T17337] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  322.018464][T17337] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  322.024369][T17337] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  322.032355][T17337] tipc: Resetting bearer <eth:syzkaller0>
[  322.124517][T17345] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[  322.635884][T17358] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  322.671828][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  322.684957][T17365] xt_ecn: cannot match TCP bits for non-tcp packets
[  322.701802][T17369] netlink: 'syz.2.3486': attribute type 27 has an invalid length.
[  323.276328][T17398] lo speed is unknown, defaulting to 1000
[  323.305225][T17400] netlink: 'syz.0.3497': attribute type 29 has an invalid length.
[  323.308420][T17400] netlink: 'syz.0.3497': attribute type 29 has an invalid length.
[  323.450627][T17402] __nla_validate_parse: 8 callbacks suppressed
[  323.450639][T17402] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3498'.
[  323.500544][T17404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3499'.
[  323.708354][T17420] Bluetooth: hci1: expected 36 bytes, got 2 bytes
[  323.975131][T17443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3509'.
[  324.210112][T17462] ipt_rpfilter: unknown options
[  324.290729][T17471] set match dimension is over the limit!
[  324.316705][T17471] netlink: 'syz.1.3517': attribute type 21 has an invalid length.
[  324.554219][T17481] netlink: 'syz.2.3522': attribute type 1 has an invalid length.
[  324.558591][T17481] netlink: 1008 bytes leftover after parsing attributes in process `syz.2.3522'.
[  324.687458][T17495] ipt_rpfilter: unknown options
[  324.687968][T17497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3526'.
[  324.866239][T17523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3533'.
[  324.892377][T17515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3531'.
[  324.896518][T17515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3531'.
[  325.001740][T17542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3538'.
[  325.312771][T17590] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3553'.
[  325.563066][T17615] sctp: [Deprecated]: syz.2.3563 (pid 17615) Use of int in maxseg socket option.
[  325.563066][T17615] Use struct sctp_assoc_value instead
[  325.784868][T17640] Unsupported ieee802154 address type: 0
[  326.033162][T17653] ipt_rpfilter: unknown options
[  326.123016][T17661] netlink: 'syz.2.3577': attribute type 2 has an invalid length.
[  326.237208][T17671] bridge6: entered promiscuous mode
[  326.239171][T17671] bridge6: entered allmulticast mode
[  326.597967][T17692] netlink: 'syz.2.3585': attribute type 1 has an invalid length.
[  326.603314][T17692] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  326.649479][T17700] ipt_rpfilter: unknown options
[  327.085530][T17731] netlink: 'syz.2.3596': attribute type 1 has an invalid length.
[  327.105965][T17731] bond6: entered promiscuous mode
[  327.108595][T17731] 8021q: adding VLAN 0 to HW filter on device bond6
[  327.124899][T17731] 8021q: adding VLAN 0 to HW filter on device bond6
[  327.127879][T17731] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  327.132073][T17731] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  327.143171][T17731] bond6: (slave ip6gre1): making interface the new active one
[  327.146404][T17731] ip6gre1: entered promiscuous mode
[  327.151571][T17731] bond6: (slave ip6gre1): Enslaving as an active interface with an up link
[  327.957905][T17771] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  328.517514][T17792] __nla_validate_parse: 11 callbacks suppressed
[  328.517527][T17792] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3612'.
[  328.602411][T17796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3613'.
[  328.751248][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  328.916494][T17823] netlink: 'syz.1.3619': attribute type 5 has an invalid length.
[  328.966014][T17823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3619'.
[  329.007690][T17829] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3621'.
[  329.221423][T17852] veth1_to_hsr: entered allmulticast mode
[  329.265619][T17856] mac80211_hwsim hwsim7 wlan1: Master is either lo or non-ether device
[  329.382228][T17868] xt_policy: neither incoming nor outgoing policy selected
[  329.385505][T17869] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3632'.
[  329.884382][T17920] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3649'.
[  330.692579][T17944] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3654'.
[  330.697120][T17944] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  330.747853][T17950] syzkaller0: entered promiscuous mode
[  330.751064][T17950] syzkaller0: entered allmulticast mode
[  330.870062][T17956] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3659'.
[  330.881747][T17956] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3659'.
[  331.191780][T17986] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3668'.
[  331.320017][T17999] 0{X: renamed from gretap0
[  331.325757][T17999] 0{X: entered allmulticast mode
[  331.332840][T17999] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  331.630282][T18040] netlink: 'syz.0.3683': attribute type 21 has an invalid length.
[  331.655152][T18043] ipt_rpfilter: unknown options
[  331.811548][T18061] ipt_rpfilter: unknown options
[  331.875670][T18064] netlink: 'syz.1.3691': attribute type 11 has an invalid length.
[  331.893570][T18055] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  332.131459][   T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  332.137263][   T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  332.150556][   T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  332.155058][   T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  332.531978][T18121] erspan0: entered promiscuous mode
[  332.535291][T18121] macvlan2: entered promiscuous mode
[  332.538461][T18121] erspan0: left promiscuous mode
[  332.568404][T18123] bond9: entered promiscuous mode
[  332.572681][T18123] 8021q: adding VLAN 0 to HW filter on device bond9
[  332.821169][T18152] bond10: option packets_per_slave: invalid value (1048582)
[  332.823702][T18152] bond10: option packets_per_slave: allowed values 0 - 65535
[  332.827862][T18152] bond10 (unregistering): Released all slaves
[  333.077513][T18175] netlink: 'syz.2.3726': attribute type 1 has an invalid length.
[  333.266494][T18188] veth9: entered promiscuous mode
[  333.271610][T18188] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  333.471624][T18208] lo speed is unknown, defaulting to 1000
[  333.639178][T18216] sctp: [Deprecated]: syz.0.3737 (pid 18216) Use of struct sctp_assoc_value in delayed_ack socket option.
[  333.639178][T18216] Use struct sctp_sack_info instead
[  333.861509][T18225] netlink: 'syz.0.3738': attribute type 2 has an invalid length.
[  333.864480][T18225] netlink: 'syz.0.3738': attribute type 2 has an invalid length.
[  333.878296][T18225] macsec3: entered promiscuous mode
[  334.157179][T18241] tc action pedit 'at' offset 9 out of bounds
[  334.160300][T18241] tc action pedit 'at' offset 9 out of bounds
[  334.162518][T18241] tc action pedit 'at' offset 9 out of bounds
[  334.164684][T18241] tc action pedit 'at' offset 9 out of bounds
[  334.166710][T18241] tc action pedit 'at' offset 9 out of bounds
[  334.168625][T18241] tc action pedit 'at' offset 9 out of bounds
[  334.170774][T18241] tc action pedit 'at' offset 9 out of bounds
[  334.172667][T18241] tc action pedit 'at' offset 9 out of bounds
[  334.174630][T18241] tc action pedit 'at' offset 9 out of bounds
[  334.176497][T18241] tc action pedit 'at' offset 9 out of bounds
[  334.178384][T18241] TC_ACT_REPEAT abuse ?
[  334.327619][T18243] __nla_validate_parse: 23 callbacks suppressed
[  334.327635][T18243] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3743'.
[  334.672291][T18264] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3749'.
[  334.677686][T18263] xt_TPROXY: Can be used only with -p tcp or -p udp
[  334.744076][T18269] ipt_rpfilter: unknown options
[  337.638316][T18256] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  337.834907][T18300] sctp: [Deprecated]: syz.0.3757 (pid 18300) Use of int in max_burst socket option deprecated.
[  337.834907][T18300] Use struct sctp_assoc_value instead
[  337.843928][T18303] xt_recent: hitcount (262144) is larger than allowed maximum (65535)
[  337.928482][T18307] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  337.932088][T18313] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3761'.
[  337.973179][T18317] netlink: 'syz.2.3762': attribute type 11 has an invalid length.
[  338.016791][T18320] lo speed is unknown, defaulting to 1000
[  338.309621][T18326] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  338.313982][T18326] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  338.400266][T18336] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  338.544991][T18348] ipt_ECN: cannot use operation on non-tcp rule
[  338.623692][T18351] xt_hashlimit: size too large, truncated to 1048576
[  338.804787][T18351] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  338.939759][T18362] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  339.063141][T18377] netlink: 'syz.1.3778': attribute type 1 has an invalid length.
[  339.066324][T18377] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3778'.
[  339.074459][T18378] netlink: 'syz.1.3778': attribute type 1 has an invalid length.
[  339.076953][T18378] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3778'.
[  339.196817][T18391] netlink: 'syz.0.3783': attribute type 1 has an invalid length.
[  339.199953][T18391] netlink: 'syz.0.3783': attribute type 2 has an invalid length.
[  339.281530][T18403] xt_TPROXY: Can be used only with -p tcp or -p udp
[  339.285660][T18403] tipc: Enabled bearer <ib:geneve0>, priority 10
[  339.320078][T18410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3787'.
[  339.421730][T18420] netlink: 'syz.2.3790': attribute type 1 has an invalid length.
[  339.425178][T18420] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3790'.
[  339.563677][T18437] ipt_rpfilter: unknown options
[  339.575247][T18444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3793'.
[  339.822531][T18462] ip6gre2: entered promiscuous mode
[  339.824470][T18462] ip6gre2: entered allmulticast mode
[  340.010831][T18481] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  340.304771][T18506] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3816'.
[  340.338279][T18511] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3818'.
[  340.342673][T18513] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3818'.
[  340.374686][T18515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3817'.
[  340.474150][T18526] netlink: 'syz.0.3823': attribute type 1 has an invalid length.
[  340.476729][T18526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3823'.
[  340.479644][T18526] netlink: 'syz.0.3823': attribute type 1 has an invalid length.
[  340.482880][T18528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3824'.
[  340.488747][T18528] netlink: 'syz.2.3824': attribute type 5 has an invalid length.
[  340.507770][T18526] syzkaller1: entered promiscuous mode
[  340.514429][T18526] syzkaller1: entered allmulticast mode
[  340.668713][T18550] ipt_rpfilter: unknown options
[  340.707364][T18546] ipt_rpfilter: unknown options
[  340.738375][T18560] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  340.742088][T18558] syzkaller0: entered promiscuous mode
[  340.744118][T18558] syzkaller0: entered allmulticast mode
[  340.758676][T18558] tipc: Resetting bearer <eth:syzkaller0>
[  340.777288][T18563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3834'.
[  340.783943][T18558] tipc: Disabling bearer <eth:syzkaller0>
[  340.836508][T18567] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3835'.
[  342.091958][T18652] lo speed is unknown, defaulting to 1000
[  342.494440][T18670] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  342.497762][T18670] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  342.600187][T18677] netlink: 'syz.0.3873': attribute type 1 has an invalid length.
[  343.574980][T18698] netlink: 'syz.2.3879': attribute type 4 has an invalid length.
[  343.650961][T18706] syzkaller0: entered promiscuous mode
[  343.656460][T18706] syzkaller0: entered allmulticast mode
[  343.700604][T18708] batman_adv: batadv0: Adding interface: dummy0
[  343.703302][T18708] batman_adv: batadv0: Interface activated: dummy0
[  343.717606][T18708] batadv0: mtu less than device minimum
[  343.723167][T18708] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  343.728652][T18708] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  343.735404][T18708] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  343.740598][T18708] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  343.745637][T18708] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  343.750752][T18708] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  343.755731][T18708] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  343.760821][T18708] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  343.765897][T18708] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  343.808263][T18708] netlink: 'syz.2.3883': attribute type 29 has an invalid length.
[  344.836282][T18781] netlink: 'syz.2.3903': attribute type 1 has an invalid length.
[  344.842042][T18781] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  345.009630][T18787] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  345.150310][T18800] lo speed is unknown, defaulting to 1000
[  345.183780][T18803] __nla_validate_parse: 15 callbacks suppressed
[  345.183794][T18803] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3905'.
[  345.188642][T18803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3905'.
[  345.503828][T18825] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3913'.
[  345.544079][T18825] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  345.557619][T18825] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  345.562260][T18825] tipc: Resetting bearer <eth:syzkaller0>
[  345.671785][T18842] netlink: 'syz.2.3913': attribute type 1 has an invalid length.
[  345.728885][T18842] bond7: entered promiscuous mode
[  345.730862][T18842] 8021q: adding VLAN 0 to HW filter on device bond7
[  348.482837][T18825] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  348.567383][T18857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3921'.
[  348.573884][T18857] netlink: 'syz.2.3921': attribute type 4 has an invalid length.
[  348.576792][T18854] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  348.806356][T18880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3929'.
[  348.810431][T18880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3929'.
[  348.813755][T18884] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3925'.
[  348.814288][T18880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3929'.
[  348.823682][T18880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3929'.
[  348.826533][T18880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3929'.
[  349.703351][T18946] netlink: 'syz.1.3951': attribute type 1 has an invalid length.
[  349.721562][T18946] bond6: entered promiscuous mode
[  349.723514][T18946] 8021q: adding VLAN 0 to HW filter on device bond6
[  351.639025][ T5615] Bluetooth: hci2: command 0x0405 tx timeout
[  352.730696][T18957] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  352.733283][T18957] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  352.797263][T18965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  352.807292][T18968] __nla_validate_parse: 6 callbacks suppressed
[  352.807304][T18968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3956'.
[  352.860341][T18974] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3957'.
[  352.978338][T18992] netlink: 'syz.2.3961': attribute type 1 has an invalid length.
[  353.100785][T18991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3962'.
[  353.198654][T19004] x_tables: duplicate underflow at hook 1
[  353.204322][T19004] nbd: must specify at least one socket
[  353.492940][T19023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3969'.
[  353.496113][T19023] netlink: 'syz.1.3969': attribute type 5 has an invalid length.
[  353.500062][T19023] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3969'.
[  353.806544][T19042] net_ratelimit: 10 callbacks suppressed
[  353.806559][T19042] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  353.885407][T19049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3975'.
[  354.979858][T19058] wg1: entered promiscuous mode
[  354.982132][T19058] wg1: entered allmulticast mode
[  356.750418][T19042] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  356.825838][T19061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3978'.
[  356.892515][T19065] ipt_rpfilter: unknown options
[  356.971629][T19076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3983'.
[  356.988194][T19072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3982'.
[  357.131885][T19082] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3984'.
[  359.741542][T19108] ipt_rpfilter: unknown options
[  359.796985][T19108] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3990'.
[  360.987919][T19097] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  361.066911][T19130] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3995'.
[  361.091564][T19130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3995'.
[  361.230724][T19142] netlink: 'syz.1.3998': attribute type 1 has an invalid length.
[  361.234184][T19142] netlink: 'syz.1.3998': attribute type 2 has an invalid length.
[  361.283421][T19149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4002'.
[  361.286950][T19149] netlink: 'syz.1.4002': attribute type 13 has an invalid length.
[  361.289964][T19149] netlink: 'syz.1.4002': attribute type 17 has an invalid length.
[  361.353350][T19149] dummy0: left promiscuous mode
[  361.404923][T19165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.450138][T19149] veth1_macvtap: entered promiscuous mode
[  361.452176][T19149] veth1_macvtap: entered allmulticast mode
[  361.454324][T19149] macsec0: left allmulticast mode
[  361.456204][T19149] veth1_macvtap: left allmulticast mode
[  361.474991][T19149] A link change request failed with some changes committed already. Interface pimreg may have been left with an inconsistent configuration, please check.
[  361.485436][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.491315][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.497764][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.502384][T19157] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.522617][T19167] syzkaller0: entered promiscuous mode
[  361.524991][T19167] syzkaller0: entered allmulticast mode
[  361.619138][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.624514][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.631369][ T5679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.669135][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.869373][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.903902][T19182] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4006'.
[  362.322006][T19191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4008'.
[  364.282155][T19148] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  364.457865][T19212] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4016'.
[  364.555781][T19227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4020'.
[  364.943736][T19247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4026'.
[  364.984705][T19253] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4027'.
[  364.987551][T19253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4027'.
[  365.128106][T19257] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4028'.
[  365.651621][T19278] lo speed is unknown, defaulting to 1000
[  366.077345][T19292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4038'.
[  366.081346][T19292] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4038'.
[  366.155920][T19294] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4039'.
[  366.159312][T19294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4039'.
[  366.316920][T19301] netlink: 'syz.0.4042': attribute type 1 has an invalid length.
[  366.319533][T19301] netlink: 'syz.0.4042': attribute type 1 has an invalid length.
[  366.322040][T19301] netlink: 'syz.0.4042': attribute type 2 has an invalid length.
[  366.324895][T19301] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4042'.
[  366.371914][T19303] netlink: 'syz.1.4043': attribute type 1 has an invalid length.
[  366.375286][T19303] netlink: 'syz.1.4043': attribute type 1 has an invalid length.
[  366.378503][T19303] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4043'.
[  366.565830][T19326] lo speed is unknown, defaulting to 1000
[  366.679838][   T31] net_ratelimit: 24 callbacks suppressed
[  366.679855][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.686277][ T8568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.835236][ T8568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.069235][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.131850][T19353] netlink: 'syz.1.4056': attribute type 3 has an invalid length.
[  367.287718][T19364] ip6gretap0: entered promiscuous mode
[  367.291218][T19364] macvlan1: entered allmulticast mode
[  367.292944][T19364] ip6gretap0: entered allmulticast mode
[  367.709159][  T281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.719220][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.869035][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.871593][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.109247][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.112530][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.342638][T19418] xt_l2tp: v2 sid > 0xffff: 8388608
[  368.655358][T19432] xt_TPROXY: Can be used only with -p tcp or -p udp
[  368.903265][T19455] sctp: [Deprecated]: syz.1.4088 (pid 19455) Use of int in maxseg socket option.
[  368.903265][T19455] Use struct sctp_assoc_value instead
[  369.423712][T19499] netlink: 'syz.0.4102': attribute type 7 has an invalid length.
[  369.426110][T19499] netlink: 'syz.0.4102': attribute type 8 has an invalid length.
[  369.460524][T19499] 0{X: entered promiscuous mode
[  369.467037][T19499] 0{X: left promiscuous mode
[  369.605572][T19508] ipt_rpfilter: unknown options
[  369.768593][T19522] veth0_vlan: left promiscuous mode
[  369.879376][T14670] block nbd3: Receive control failed (result -32)
[  369.926200][T19530] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  370.335748][T19552] __nla_validate_parse: 22 callbacks suppressed
[  370.335761][T19552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4118'.
[  370.403311][T19554] ipt_rpfilter: unknown options
[  370.467468][T19557] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4120'.
[  370.836665][T19580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4126'.
[  370.846947][T19582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4127'.
[  371.506507][ T5614] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  371.512450][ T5614] CPU: 0 UID: 0 PID: 5614 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  371.512471][ T5614] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  371.512481][ T5614] Call Trace:
[  371.512487][ T5614]  <TASK>
[  371.512494][ T5614]  dump_stack_lvl+0xe8/0x150
[  371.512519][ T5614]  dump_header+0xd3/0x4c0
[  371.512544][ T5614]  oom_kill_process+0x3ab/0x970
[  371.512621][ T5614]  out_of_memory+0x106c/0x1410
[  371.512636][ T5614]  ? try_charge_memcg+0xbb9/0x1570
[  371.512659][ T5614]  ? __pfx___mutex_lock+0x10/0x10
[  371.512686][ T5614]  ? __pfx_out_of_memory+0x10/0x10
[  371.512701][ T5614]  ? do_raw_spin_unlock+0x4d/0x210
[  371.512730][ T5614]  try_charge_memcg+0xc77/0x1570
[  371.512762][ T5614]  ? __pfx_try_charge_memcg+0x10/0x10
[  371.512780][ T5614]  ? percpu_ref_tryget+0x15/0x180
[  371.512821][ T5614]  ? charge_memcg+0x23/0x2b0
[  371.512840][ T5614]  charge_memcg+0x1a2/0x2b0
[  371.512859][ T5614]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  371.512875][ T5614]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  371.512894][ T5614]  __swap_cache_prepare_and_add+0xdc/0x700
[  371.512916][ T5614]  ? page_rmappable_folio+0x9a/0x170
[  371.512944][ T5614]  swap_cache_alloc_folio+0xf1/0x240
[  371.512964][ T5614]  swap_cluster_readahead+0x355/0x670
[  371.512985][ T5614]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  371.513012][ T5614]  ? get_vma_policy+0x27b/0x3c0
[  371.513035][ T5614]  swapin_readahead+0x196/0xc50
[  371.513054][ T5614]  ? swap_table_get+0x1e/0x260
[  371.513074][ T5614]  ? __pfx_swapin_readahead+0x10/0x10
[  371.513091][ T5614]  ? swap_table_get+0x1e/0x260
[  371.513106][ T5614]  ? swap_table_get+0x1e/0x260
[  371.513119][ T5614]  ? swap_table_get+0x1e/0x260
[  371.513133][ T5614]  ? swap_table_get+0x216/0x260
[  371.513148][ T5614]  ? swap_cache_get_folio+0x2e4/0x2f0
[  371.513168][ T5614]  do_swap_page+0x555/0x5120
[  371.513184][ T5614]  ? __pte_offset_map+0x29/0x240
[  371.513202][ T5614]  ? __pte_offset_map+0x29/0x240
[  371.513227][ T5614]  ? do_swap_page+0x128/0x5120
[  371.513241][ T5614]  ? __pfx_do_swap_page+0x10/0x10
[  371.513256][ T5614]  ? __pte_offset_map+0x1ae/0x240
[  371.513276][ T5614]  ? pte_offset_map_rw_nolock+0xea/0x160
[  371.513294][ T5614]  handle_mm_fault+0x12d2/0x3170
[  371.513321][ T5614]  ? handle_mm_fault+0xee/0x3170
[  371.513344][ T5614]  ? __pfx_handle_mm_fault+0x10/0x10
[  371.513361][ T5614]  ? lock_vma_under_rcu+0x45a/0x500
[  371.513401][ T5614]  do_user_addr_fault+0xa73/0x1340
[  371.513425][ T5614]  ? rcu_is_watching+0x15/0xb0
[  371.513445][ T5614]  ? trace_page_fault_user+0x84/0x1e0
[  371.513462][ T5614]  exc_page_fault+0x6a/0xc0
[  371.513486][ T5614]  asm_exc_page_fault+0x26/0x30
[  371.513502][ T5614] RIP: 0033:0x7fbde3256016
[  371.513519][ T5614] Code: 81 f8 00 ca 9a 3b 72 1d 31 d2 49 81 c0 00 36 65 c4 4c 89 45 d0 ff c2 49 81 f8 ff c9 9a 3b 77 ea e9 36 fc ff ff 31 d2 48 01 ca <48> 89 16 4c 89 46 08 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3
[  371.513533][ T5614] RSP: 002b:00007ffe2fbc2f20 EFLAGS: 00010202
[  371.513549][ T5614] RAX: 0000000000000000 RBX: 00000000000117aa RCX: 0000000000000173
[  371.513590][ T5614] RDX: 0000000000000173 RSI: 00007ffe2fbc3050 RDI: 0000000000000001
[  371.513599][ T5614] RBP: 00007ffe2fbc2fa0 R08: 000000001415e305 R09: 3fffffffffffffff
[  371.513608][ T5614] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000000010
[  371.513618][ T5614] R13: 00007fbde324f000 R14: 7fffffffffffffff R15: 00007fbde324f038
[  371.513642][ T5614]  </TASK>
[  371.513763][ T5614] memory: usage 307200kB, limit 307200kB, failcnt 2524
[  371.648923][ T5614] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0
[  371.658495][ T5614] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0
[  371.668455][ T5614] Memory cgroup stats for /syz0:
[  371.668525][ T5614] cache 0
[  371.675927][ T5614] rss 0
[  371.681217][ T5614] rss_huge 0
[  371.689879][ T5614] shmem 0
[  371.691175][ T5614] mapped_file 0
[  371.700051][ T5614] dirty 0
[  371.701105][ T5614] writeback 0
[  371.716108][ T5614] workingset_refault_anon 31
[  371.726592][ T5614] workingset_refault_file 2
[  371.737795][ T5614] swap 204800
[  371.740999][ T5614] swapcached 679936
[  371.747091][ T5614] pgpgin 163239
[  371.748307][ T5614] pgpgout 163230
[  371.755969][ T5614] pgfault 261721
[  371.757671][T19592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4130'.
[  371.760683][ T5614] pgmajfault 40
[  371.768945][ T5614] inactive_anon 20480
[  371.771808][ T5614] active_anon 16384
[  371.777435][ T5614] inactive_file 0
[  371.778717][ T5614] active_file 0
[  371.786315][ T5614] unevictable 0
[  371.787464][ T5614] hierarchical_memory_limit 314572800
[  371.796947][ T5614] hierarchical_memsw_limit 9223372036854771712
[  371.805749][ T5614] total_cache 0
[  371.810257][ T5614] total_rss 0
[  371.811328][ T5614] total_rss_huge 0
[  371.818567][ T5614] total_shmem 0
[  371.823228][ T5614] total_mapped_file 0
[  371.827807][ T5614] total_dirty 0
[  371.832336][ T5614] total_writeback 0
[  371.836565][ T5614] total_workingset_refault_anon 31
[  371.840566][ T5614] total_workingset_refault_file 2
[  371.845953][ T5614] total_swap 204800
[  371.849462][ T5614] total_swapcached 679936
[  371.855249][ T5614] total_pgpgin 163242
[  371.856560][ T5614] total_pgpgout 163233
[  371.870411][ T5614] total_pgfault 261729
[  371.871712][ T5614] total_pgmajfault 40
[  371.879059][ T5614] total_inactive_anon 20480
[  371.880923][ T5680] net_ratelimit: 9 callbacks suppressed
[  371.880933][ T5680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.885272][ T5614] total_active_anon 16384
[  371.886586][ T5614] total_inactive_file 0
[  371.889271][ T5614] total_active_file 0
[  371.890499][ T5614] total_unevictable 0
[  371.896679][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.899506][ T5614] anon_cost 0
[  371.900620][ T5614] file_cost 0
[  371.909962][ T5614] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4126,pid=19579,uid=0
[  371.925141][ T5614] Memory cgroup out of memory: Killed process 19579 (syz.0.4126) total-vm:102364kB, anon-rss:1248kB, file-rss:22864kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  371.959437][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.129920][T19603] erspan0: entered promiscuous mode
[  372.138360][T19603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4134'.
[  372.143333][T19603] erspan0: left promiscuous mode
[  372.195324][T19605] lo speed is unknown, defaulting to 1000
[  372.269173][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.341151][T19614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.357105][T19614] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4138'.
[  372.506557][T19617] veth1_macvtap: left promiscuous mode
[  372.508314][T19617] macsec0: entered promiscuous mode
[  372.588175][T19625] netlink: 'syz.2.4141': attribute type 4 has an invalid length.
[  372.591482][  T281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.597269][T19625] netlink: 'syz.2.4141': attribute type 4 has an invalid length.
[  372.597504][T19625] netlink: 'syz.2.4141': attribute type 4 has an invalid length.
[  372.613947][T19625] netlink: 'syz.2.4141': attribute type 4 has an invalid length.
[  372.618389][T19625] netlink: 'syz.2.4141': attribute type 4 has an invalid length.
[  372.624458][T19625] netlink: 'syz.2.4141': attribute type 4 has an invalid length.
[  372.630502][T19625] netlink: 'syz.2.4141': attribute type 4 has an invalid length.
[  372.857058][T19643] netlink: 'syz.2.4145': attribute type 1 has an invalid length.
[  372.862846][T19643] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4145'.
[  372.909446][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  373.210926][T19668] netlink: 66 bytes leftover after parsing attributes in process `syz.1.4151'.
[  373.240864][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  373.266746][T19673] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4154'.
[  373.309062][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  373.618710][ T5448] tipc: Subscription rejected, illegal request
[  373.790004][  T281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  374.266300][T19710] netlink: 'syz.1.4165': attribute type 3 has an invalid length.
[  374.311601][T19713] sctp: [Deprecated]: syz.1.4166 (pid 19713) Use of int in max_burst socket option.
[  374.311601][T19713] Use struct sctp_assoc_value instead
[  374.369937][T19715] ipt_rpfilter: unknown options
[  374.546900][T19732] syzkaller0: entered promiscuous mode
[  374.553946][T19732] syzkaller0: entered allmulticast mode
[  374.786108][T19768] netlink: 'syz.2.4180': attribute type 1 has an invalid length.
[  374.800883][T19768] bond8: entered promiscuous mode
[  374.803081][T19768] 8021q: adding VLAN 0 to HW filter on device bond8
[  375.256991][T19786] ipt_rpfilter: unknown options
[  375.741792][T19808] __nla_validate_parse: 8 callbacks suppressed
[  375.741809][T19808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4191'.
[  376.546276][T19821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4195'.
[  377.080666][   T31] net_ratelimit: 13 callbacks suppressed
[  377.080745][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.087230][ T8568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.469221][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.712278][ T8568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.109418][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.509036][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  379.149534][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  379.159664][T19813] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  379.263833][T19834] netlink: 604 bytes leftover after parsing attributes in process `syz.0.4197'.
[  379.274452][T19836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4199'.
[  379.313326][T19839] netlink: 'syz.0.4201': attribute type 1 has an invalid length.
[  379.362322][T19847] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4203'.
[  379.379833][T19839] 8021q: adding VLAN 0 to HW filter on device bond12
[  379.384002][T19839] bond11: (slave bond12): making interface the new active one
[  379.388428][T19839] bond11: (slave bond12): Enslaving as an active interface with an up link
[  379.394528][T19839] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4201'.
[  379.559074][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  379.630901][ T1032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  379.650618][T19881] netlink: 'syz.1.4214': attribute type 1 has an invalid length.
[  379.661508][T19881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  379.673132][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  379.685727][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  379.695070][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  379.698531][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  379.743032][T19892] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4217'.
[  379.750074][T19892] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4217'.
[  379.754062][T19892] netlink: 'syz.2.4217': attribute type 5 has an invalid length.
[  379.756973][T19892] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4217'.
[  379.830484][T19901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4220'.
[  380.014271][T19917] bond10 (unregistering): Released all slaves
[  380.102966][T19933] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  380.179931][T19947] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20002
[  380.187871][T19947] IPVS: set_ctl: invalid protocol: 44 172.20.20.43:20003
[  380.306708][T19931] netlink: 'syz.0.4228': attribute type 1 has an invalid length.
[  380.464768][T19973] netlink: 'syz.1.4241': attribute type 1 has an invalid length.
[  380.469349][T19974] netlink: 'syz.1.4241': attribute type 1 has an invalid length.
[  380.494916][T19973] bond7: entered promiscuous mode
[  380.499100][T19973] bond7: entered allmulticast mode
[  380.502642][T19973] 8021q: adding VLAN 0 to HW filter on device bond7
[  380.510967][T19973] erspan3: entered allmulticast mode
[  380.517129][T19973] bond7: (slave erspan3): making interface the new active one
[  380.519982][T19973] erspan3: entered promiscuous mode
[  380.522964][T19973] bond7: (slave erspan3): Enslaving as an active interface with an up link
[  380.531688][T19974] syz.1.4241 (19974) used obsolete PPPIOCDETACH ioctl
[  380.947417][T20007] __nla_validate_parse: 26 callbacks suppressed
[  380.947428][T20007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4251'.
[  380.968666][T20009] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4252'.
[  381.058343][T20013] bond13: entered allmulticast mode
[  381.062042][T20013] 8021q: adding VLAN 0 to HW filter on device bond13
[  381.150235][T20023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4257'.
[  381.167337][T20025] ipt_rpfilter: unknown options
[  381.185751][T20025] lo speed is unknown, defaulting to 1000
[  381.307465][T20030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4260'.
[  381.581378][T20046] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4263'.
[  381.635708][T20050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4264'.
[  381.857420][T20066] ipt_rpfilter: unknown options
[  382.031959][T20075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4273'.
[  382.036186][T20075] netlink: 'syz.0.4273': attribute type 1 has an invalid length.
[  382.049106][T20075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4273'.
[  382.189330][ T5679] net_ratelimit: 8 callbacks suppressed
[  382.189345][ T5679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.266612][T20088] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4278'.
[  382.280451][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.288786][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.472740][T20109] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  382.475239][T20109] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  382.478214][T20109] tipc: Resetting bearer <eth:syzkaller0>
[  382.591102][T20115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4288'.
[  382.679153][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.830125][ T1126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.838677][T20136] netlink: 'syz.0.4295': attribute type 1 has an invalid length.
[  382.842592][T20136] netlink: 'syz.0.4295': attribute type 2 has an invalid length.
[  382.885768][T20140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.909581][ T5679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  383.256769][T20162] netlink: 'syz.0.4301': attribute type 9 has an invalid length.
[  383.309261][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  383.462853][T20176] ipt_rpfilter: unknown options
[  383.586922][T20182] ipt_rpfilter: unknown options
[  383.591369][T20183] x_tables: duplicate underflow at hook 1
[  383.709033][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  383.958200][T20217] 0{X: left allmulticast mode
[  383.970770][T20217] ip6_vti0: left promiscuous mode
[  384.007376][T20217] bridge0: left promiscuous mode
[  384.018505][T20217] 8021q: adding VLAN 0 to HW filter on device bond0
[  384.056844][T20217] batadv0: left promiscuous mode
[  384.064686][T20217] 8021q: adding VLAN 0 to HW filter on device batadv0
[  384.085804][T20217] wg1: left promiscuous mode
[  384.093536][T20217] wg1: left allmulticast mode
[  384.109889][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  384.126675][T20217] batman_adv: batadv0: Interface activated: batadv_slave_1
[  384.138748][T20217] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  384.143048][T20217] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  384.154568][T20217] veth1_vlan: left promiscuous mode
[  384.160170][T20217] veth0_vlan: left promiscuous mode
[  384.164292][T20217] veth0_vlan: entered promiscuous mode
[  384.174386][T20217] veth1_vlan: entered promiscuous mode
[  384.179357][T20217] veth1_macvtap: left promiscuous mode
[  384.182664][T20217] veth0_macvtap: left promiscuous mode
[  384.185209][T20217] veth0_macvtap: entered promiscuous mode
[  384.188835][T20217] veth1_macvtap: entered promiscuous mode
[  384.195502][T20217] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  384.198527][T20217] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  384.202478][T20217] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  384.206425][T20217] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  384.210506][T20217] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  384.213607][T20217] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  384.224353][T20217] 8021q: adding VLAN 0 to HW filter on device bond1
[  384.234966][T20217] 8021q: adding VLAN 0 to HW filter on device bond2
[  384.240772][T20217] 8021q: adding VLAN 0 to HW filter on device bond3
[  384.247221][T20217] 8021q: adding VLAN 0 to HW filter on device bond4
[  384.255691][T20217] 8021q: adding VLAN 0 to HW filter on device bond5
[  384.264021][T20217] 8021q: adding VLAN 0 to HW filter on device bond6
[  384.267249][T20217] 8021q: adding VLAN 0 to HW filter on device bond7
[  384.277710][T20217] 8021q: adding VLAN 0 to HW filter on device bond8
[  384.283059][T20217] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  384.286489][T20217] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  384.292768][T20217] batadv0: entered promiscuous mode
[  384.294672][T20217] 8021q: adding VLAN 0 to HW filter on device macsec2
[  384.314603][T20217] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  384.322402][   T24] bridge0: entered promiscuous mode
[  384.326861][ T1032] bridge0: port 2(bridge_slave_1) entered blocking state
[  384.329334][ T1032] bridge0: port 2(bridge_slave_1) entered listening state
[  384.366509][T15281] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  384.370751][T15281] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  384.397625][T15281] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  384.403999][T15281] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  384.413571][T15281] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  384.420840][T15281] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  384.434985][T15281] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  384.441196][T15281] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  384.609998][T20255] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  384.699287][T20263] digital: digital_start_poll: Unknown protocol
[  384.750105][ T5672] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  384.755711][ T5672] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  384.794027][ T5680] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  384.837256][T20282] xt_HMARK: proto mask must be zero with L3 mode
[  385.439262][ T5680] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  385.720992][ T5680] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  387.314114][ T5680] net_ratelimit: 8 callbacks suppressed
[  387.314134][ T5680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.470222][ T5680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.475734][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.712006][T20265] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  387.815591][T20300] ipt_rpfilter: unknown options
[  387.849887][T20302] ipt_rpfilter: unknown options
[  387.869127][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.959004][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.961593][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.079575][T20319] __nla_validate_parse: 17 callbacks suppressed
[  388.079589][T20319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4351'.
[  388.086000][T20320] ipt_rpfilter: unknown options
[  388.237904][T20317] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4350'.
[  388.320581][T20337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4356'.
[  388.354364][T20339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4357'.
[  388.478197][T20346] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4359'.
[  388.510244][ T5680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.524516][T20348] ipt_rpfilter: unknown options
[  388.531944][T20348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4360'.
[  388.535240][T20348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4360'.
[  388.594935][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.843449][T20360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4364'.
[  388.847828][T20360] tipc: Disabling bearer <udp:syz2>
[  388.863094][T20360] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4364'.
[  388.909092][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.912504][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  388.992532][  T281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.997189][T20379] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4369'.
[  389.155562][T20401] xt_CT: You must specify a L4 protocol and not use inversions on it
[  389.320881][T20418] lo speed is unknown, defaulting to 1000
[  389.403670][T20430] IPVS: set_ctl: invalid protocol: 30768 48.48.48.48:12336
[  389.858987][T20458] ipt_rpfilter: unknown options
[  389.890962][T20463] ipt_rpfilter: unknown options
[  389.953778][T20467] x_tables: duplicate underflow at hook 2
[  390.186025][T20488] validate_nla: 5 callbacks suppressed
[  390.186036][T20488] netlink: 'syz.0.4398': attribute type 1 has an invalid length.
[  390.262604][T20488] 8021q: adding VLAN 0 to HW filter on device bond15
[  390.267275][T20488] bond14: (slave bond15): making interface the new active one
[  390.272215][T20488] bond14: (slave bond15): Enslaving as an active interface with an up link
[  390.286842][T20491] lo speed is unknown, defaulting to 1000
[  391.284032][T20527] netlink: 'syz.2.4408': attribute type 2 has an invalid length.
[  392.429323][    C1] net_ratelimit: 10 callbacks suppressed
[  392.429349][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  393.069637][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  393.073993][ T8570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.109161][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.350361][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.354499][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.839776][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  395.149086][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  396.154470][T20632] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  396.189102][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  396.304745][T20663] __nla_validate_parse: 20 callbacks suppressed
[  396.304755][T20663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4443'.
[  396.468676][T20674] ipt_rpfilter: unknown options
[  396.473093][T20674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  397.402118][T20697] lo speed is unknown, defaulting to 1000
[  397.550514][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  397.551565][ T1126] net_ratelimit: 1 callbacks suppressed
[  397.551574][ T1126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  397.558262][ T1032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  397.642071][T20702] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4454'.
[  397.645445][T20702] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4454'.
[  397.648327][T20702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4454'.
[  397.726600][T20707] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  397.726600][T20708] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  398.109917][ T8568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.269115][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.310269][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  400.113150][ T1126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  400.116364][ T1126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  400.330163][T20692] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  400.349090][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  400.437188][T20713] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  400.452206][T20713] netlink: 'syz.2.4458': attribute type 1 has an invalid length.
[  400.454763][T20713] netlink: 'syz.2.4458': attribute type 1 has an invalid length.
[  400.457220][T20713] netlink: 264 bytes leftover after parsing attributes in process `syz.2.4458'.
[  400.460551][T20713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4458'.
[  400.463711][T20713] netlink: 'syz.2.4458': attribute type 1 has an invalid length.
[  400.466153][T20713] netlink: 'syz.2.4458': attribute type 1 has an invalid length.
[  400.469783][T20713] netlink: 264 bytes leftover after parsing attributes in process `syz.2.4458'.
[  400.473716][T20713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4458'.
[  401.115857][T20763] bridge0: port 2(bridge_slave_1) entered disabled state
[  401.118295][T20763] bridge0: port 1(bridge_slave_0) entered disabled state
[  401.146311][T20765] ipt_rpfilter: unknown options
[  401.169129][T20770] IPVS: set_ctl: invalid protocol: 46 172.30.1.3:20000
[  401.243302][T20775] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4477'.
[  401.309734][T20779] ipt_rpfilter: unknown options
[  401.348734][T20785] ipt_rpfilter: unknown options
[  401.494254][T20799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4484'.
[  401.563782][T20807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4487'.
[  401.581372][   T33] audit: type=1804 audit(1778534435.758:13): pid=20809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4488" name="/newroot/1472/memory.events" dev="tmpfs" ino=7510 res=1 errno=0
[  401.594487][   T33] audit: type=1800 audit(1778534435.758:14): pid=20809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4488" name="memory.events" dev="tmpfs" ino=7510 res=0 errno=0
[  401.604527][   T33] audit: type=1804 audit(1778534435.758:15): pid=20810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4488" name="/newroot/1472/memory.events" dev="tmpfs" ino=7510 res=1 errno=0
[  401.622248][T20809] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4488'.
[  401.836369][T20822] lo speed is unknown, defaulting to 1000
[  401.901337][T20824] IPVS: set_ctl: invalid protocol: 60 172.30.0.3:21
[  402.202047][T20847] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4497'.
[  402.261348][T20842] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  402.264809][T20850] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4497'.
[  402.270507][T20841] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  402.285194][T20850] xt_hashlimit: invalid rate
[  402.534886][T20866] ipt_rpfilter: unknown options
[  402.537647][T20868] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4505'.
[  402.551726][T20868] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4505'.
[  402.577365][T20870] sctp: [Deprecated]: syz.0.4506 (pid 20870) Use of struct sctp_assoc_value in delayed_ack socket option.
[  402.577365][T20870] Use struct sctp_sack_info instead
[  402.610640][T20873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4507'.
[  402.678056][T20875] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4509'.
[  402.683558][ T1112] net_ratelimit: 4 callbacks suppressed
[  402.683568][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  402.688152][T20875] tipc: Invalid UDP bearer configuration
[  402.688206][T20875] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  402.785954][T20889] lo speed is unknown, defaulting to 1000
[  402.882612][T20898] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4515'.
[  402.968862][T20901] : entered promiscuous mode
[  402.984070][T20901] sctp: [Deprecated]: syz.1.4516 (pid 20901) Use of struct sctp_assoc_value in delayed_ack socket option.
[  402.984070][T20901] Use struct sctp_sack_info instead
[  402.993634][T20901] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  403.145558][T20911] ipt_rpfilter: unknown options
[  403.309683][ T1126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.312520][ T1126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.323827][T20924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.460907][T20928] VFS_BUG_ON_INODE(inode_state_read_once(inode) & (I_FREEING | I_CLEAR)): inode:ffff88811f580100 fs:sockfs mode:140777 opflags:0x8 flags:0x0 state:0x300 count:0
[  403.466231][T20928] ------------[ cut here ]------------
[  403.467956][T20928] kernel BUG at fs/inode.c:1980!
[  403.469859][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.476724][T20928] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  403.478714][T20928] CPU: 1 UID: 0 PID: 20928 Comm: syz.0.4527 Not tainted syzkaller #0 PREEMPT(full) 
[  403.481711][T20928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  403.484732][T20928] RIP: 0010:iput+0xe24/0xe80
[  403.486315][T20928] Code: ff 48 8b 7c 24 20 48 c7 c6 60 65 de 8b e8 24 3b 00 00 90 0f 0b e8 fc ff 7a ff 48 89 df 48 c7 c6 e0 64 de 8b e8 0d 3b 00 00 90 <0f> 0b 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c c3 fb ff ff 48 89 ef e8
[  403.492283][T20928] RSP: 0018:ffffc90006bef078 EFLAGS: 00010246
[  403.494132][T20928] RAX: d1708bc590eec200 RBX: ffff88811f580100 RCX: d1708bc590eec200
[  403.496891][T20928] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  403.499323][T20928] RBP: ffff88811f5802f8 R08: ffffc90006beec67 R09: 1ffff92000d7dd8c
[  403.501864][T20928] R10: dffffc0000000000 R11: fffff52000d7dd8d R12: 1ffff11023eb005f
[  403.504570][T20928] R13: ffff88811f580180 R14: 0000000000000300 R15: 1ffffffff2061c58
[  403.507007][T20928] FS:  00007fbde324e6c0(0000) GS:ffff8882a928d000(0000) knlGS:0000000000000000
[  403.509670][T20928] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  403.511640][T20928] CR2: 000055762adae000 CR3: 00000001b9cd4000 CR4: 00000000000006f0
[  403.514137][T20928] Call Trace:
[  403.515194][T20928]  <TASK>
[  403.516174][T20928]  rxe_net_del+0x121/0x2e0
[  403.517530][T20928]  rxe_dellink+0x15/0x20
[  403.518818][T20928]  nldev_dellink+0x304/0x3d0
[  403.520238][T20928]  ? __pfx_nldev_dellink+0x10/0x10
[  403.521814][T20928]  ? apparmor_capable+0x126/0x170
[  403.523338][T20928]  ? bpf_lsm_capable+0x9/0x20
[  403.524981][T20928]  ? security_capable+0x7e/0x2c0
[  403.526544][T20928]  ? __pfx_nldev_dellink+0x10/0x10
[  403.528063][T20928]  rdma_nl_rcv+0x6d1/0xa10
[  403.529507][T20928]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  403.531011][T20928]  ? netlink_deliver_tap+0x2e/0x1b0
[  403.532582][T20928]  ? netlink_deliver_tap+0x2e/0x1b0
[  403.534249][T20928]  netlink_unicast+0x75c/0x8e0
[  403.535787][T20928]  netlink_sendmsg+0x813/0xb40
[  403.537258][T20928]  ? __pfx_netlink_sendmsg+0x10/0x10
[  403.538846][T20928]  ? aa_sock_msg_perm+0xf1/0x1b0
[  403.540353][T20928]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  403.541950][T20928]  ____sys_sendmsg+0x972/0x9f0
[  403.543415][T20928]  ? __might_fault+0xaf/0x130
[  403.544956][T20928]  ? __pfx_____sys_sendmsg+0x10/0x10
[  403.546627][T20928]  ? import_iovec+0x73/0xa0
[  403.547990][T20928]  ___sys_sendmsg+0x2a5/0x360
[  403.549426][T20928]  ? __lock_acquire+0x6b5/0x2cf0
[  403.550905][T20928]  ? __pfx____sys_sendmsg+0x10/0x10
[  403.552448][T20928]  ? futex_wait+0x2a2/0x390
[  403.553857][T20928]  ? __fget_files+0x2a/0x420
[  403.555324][T20928]  ? __fget_files+0x3a0/0x420
[  403.556809][T20928]  __x64_sys_sendmsg+0x1bd/0x2a0
[  403.558348][T20928]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  403.560173][T20928]  ? rcu_is_watching+0x15/0xb0
[  403.561701][T20928]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.563613][T20928]  do_syscall_64+0x15f/0xf80
[  403.565202][T20928]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.567059][T20928] RIP: 0033:0x7fbde239cdd9
[  403.568426][T20928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  403.574243][T20928] RSP: 002b:00007fbde324e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  403.576871][T20928] RAX: ffffffffffffffda RBX: 00007fbde2615fa0 RCX: 00007fbde239cdd9
[  403.579309][T20928] RDX: 0000000000000004 RSI: 0000200000004680 RDI: 000000000000000d
[  403.581669][T20928] RBP: 00007fbde2432d69 R08: 0000000000000000 R09: 0000000000000000
[  403.584073][T20928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  403.586484][T20928] R13: 00007fbde2616038 R14: 00007fbde2615fa0 R15: 00007ffe2fbc2c58
[  403.588882][T20928]  </TASK>
[  403.589808][T20928] Modules linked in:
[  403.591630][T20928] ---[ end trace 0000000000000000 ]---
[  403.604387][T20929] smc: removing ib device syz0
[  403.611777][T20929] smbdirect: ib_dev[syz0] removed
[  403.640334][T20928] RIP: 0010:iput+0xe24/0xe80
[  403.643986][T20928] Code: ff 48 8b 7c 24 20 48 c7 c6 60 65 de 8b e8 24 3b 00 00 90 0f 0b e8 fc ff 7a ff 48 89 df 48 c7 c6 e0 64 de 8b e8 0d 3b 00 00 90 <0f> 0b 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c c3 fb ff ff 48 89 ef e8
[  403.652375][T20928] RSP: 0018:ffffc90006bef078 EFLAGS: 00010246
[  403.654522][T20928] RAX: d1708bc590eec200 RBX: ffff88811f580100 RCX: d1708bc590eec200
[  403.657164][T20928] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  403.660194][T20928] RBP: ffff88811f5802f8 R08: ffffc90006beec67 R09: 1ffff92000d7dd8c
[  403.662809][T20928] R10: dffffc0000000000 R11: fffff52000d7dd8d R12: 1ffff11023eb005f
[  403.665554][T20928] R13: ffff88811f580180 R14: 0000000000000300 R15: 1ffffffff2061c58
[  403.668137][T20928] FS:  00007fbde324e6c0(0000) GS:ffff8882a928d000(0000) knlGS:0000000000000000
[  403.671313][T20928] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  403.673546][T20928] CR2: 0000000000000000 CR3: 00000001b9cd4000 CR4: 00000000000006f0
[  403.676410][T20928] Kernel panic - not syncing: Fatal exception
[  403.679219][T20928] Kernel Offset: disabled
[  403.680632][T20928] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:20:37  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000286 RBX=ffffffff81aaf372 RCX=ffffffff813340aa RDX=000000005348fb6f
RSI=0000000000000000 RDI=ffffffff81aaf372 RBP=0000000000000000 RSP=ffffc9000416f620
R8 =00000000176de6bf R9 =00000000e5a35ab0 R10=0000000000000010 R11=ffffffff81b0e910
R12=dffffc0000000000 R13=ffff8881158e2f00 R14=ffffffff82700150 R15=dffffc0000000000
RIP=ffffffff8ba8a676 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818dc8d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000004680 CR3=000000010931c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000002 000000040000000d
XMM02=00007f8a13fed5e8 00007f8a13fed618 XMM03=00007f8a13fed600 00007f8a13fed5e0
XMM04=00007f8a14b4d020 00007f8a13fed5c0 XMM05=00007f8a13fed5d0 00007f8a13fed610
XMM06=00007f8a13fed5f8 00007f8a13fed5c8 XMM07=00007f8a13fed600 00007f8a13fed5e0
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff823c8166 RBX=0000000000000001 RCX=0000000000000000 RDX=ffff88810cbdbb00
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900046ff810 RSP=ffffc900046ff450
R8 =ffffffff823c7e22 R9 =ffffffff8e95cd60 R10=dffffc0000000000 R11=fffff94000d75059
R12=ffffc900046ff780 R13=dffffc0000000000 R14=ffffea00045d0548 R15=ffffea0006ba82c8
RIP=ffffffff81aad749 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007efe844ce800 ffffffff 00c00000
GS =0000 ffff8882a928d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055762ada0000 CR3=00000001114ca000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
