last executing test programs:

12.234932464s ago: executing program 1 (id=43451):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001cc0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002280)={0x28, r2, 0xad, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004001}, 0x20000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r7, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
connect$bt_rfcomm(r7, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa)
sendmsg$inet_sctp(r6, &(0x7f0000002440)={&(0x7f00000004c0)=@in={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000580)=[{&(0x7f00000017c0)="29e9f71875c9fe6b41a6703136e343f49d036d3b9755c86bae84c3138371f8003e", 0x21}, {&(0x7f0000000f40)="1513578ee23e355a3a6f43db7c6659cd853f41ff1fba2d85f58943dd21f494e3398eba2af227db3a93f3e71677485d704839928562de1a55d396704c1c14c41e2d2c02f6c4ca1beebd8e8f4b6ff38a0caa593f0d690241f7f720be6aaa28a7ceb6bb4d8658bb85edde9f1b7c34f853504d671ceec80468207850d0452657931cebf082c98d5438342c0f24e10c234b2ef5f0e1bf63879851c9898e31848137f92593e182bc0164cd0db843bdceb03d8268ce4e5ebd8627c28393592d3a66daef17c4a463a92ffa8712d162b3566c166bce4d0418d905646f78fb686a", 0xdc}, {&(0x7f0000002480)="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", 0x193}], 0x3}, 0x8084)
sendmsg$inet_sctp(r6, &(0x7f0000000140)={&(0x7f0000000700)=@in={0x2, 0x4e1d, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000740)="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", 0x311}], 0x1, 0x0, 0x0, 0x24040100}, 0x4000050)
setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000004dc0)=0x2, 0x4)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r8, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x430881, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r11, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)={0x24, r10, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
close(r9)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe8, r12, 0xe14, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xc4, 0xbe, "11e033978b4b0c40ec909f26a858a1013f704310291abb75a5ef9470877363d664fe06c313b849384aef286cfffff8dbba99a571d34bd5f5f5a9b9f35f1ed41c943d16dad5251ce252b88b58df6c978546d3c9e19f0dc4dc06ec03f5729b0cc55d30247ea073ae642ae97e374738d722499c0ece2f2a40856f2e439b612b14e1b333de36612e0ecb3932edd9997940f1c873bad901417da77c1aa67ccad693c5a4a101ba007194e718414a1464ddf8db0eca649f22880a0efccb65430f906347"}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0xe8}}, 0xc4)
r13 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_SEND_PRIO(r13, 0x6b, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)

11.302118055s ago: executing program 1 (id=43467):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @broadcast}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}], 0x1c) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x58, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)

11.30133328s ago: executing program 1 (id=43468):
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x22)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x1}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty, 0x8}, 0x1c)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge_slave_0\x00', 0x3}, 0x18)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'team_slave_0\x00'})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
write$tun(r3, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x4, 0x700, 0x0, 0x13, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0x1008, 0x46000029}, @generic={0x0, 0x8, "d58838000391"}]}}}}}}, 0x4e)

11.181872982s ago: executing program 1 (id=43469):
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e00000000000000defe07000800001b00"], 0x50)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="200000000000000084000000020000000000410200000000000000008aedaa4e1685e9eb0f30e6d8b63b9f3a8da07d00000000", @ANYRES32=0x0], 0x20}], 0x1, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x11}, 0x0)

10.370808719s ago: executing program 1 (id=43480):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004030000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bfaf000000000000550901000000000095200000000000001daaf5ff000000005d5ff8ff00000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xc}, 0x94)

10.091009658s ago: executing program 1 (id=43481):
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000500)={0x6dc, 0xd, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x67c, 0x3, 0x0, 0x1, [{0x3a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x2bc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xf1, 0x1, "936ddcdec74aa892af4092be42d662f64e05fbaa79a25f113b53f9c44706869c6c74c2bd2438658e38f55669a27258dd6b2744a77d3f3162901beec2591b97f44ce8cd35332644a3766e922ddae491fc46cab128ef3de176ca4fc783ac2372931b594d0ab9481e3bdb8029179cc8d8b1f1c7fc415693b5c6c4e37619b223618f6f0e8edd62d6b993936b09c95929a964cabb600885937a70aea096da744f293382a15eb9106f347af818a55f575288c7c0e866ee99b7aeb77a849fad5ff7b05b2a0eb1139845ee734f6568968ab75b07a020da40188fd8578f56ba39ec3000e308e96d357e15a50b9c9ec4709f"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xdc, 0x1, "97f013098da1726310af62e9960f669b301d27e2f64333352bf93da8eef58cccca76c5208c4b0cf32c65e1c2a3c1ac906f16edf6d9a28ba588018fe7a4042751905c03abe30f4804a1de44aff0bcd0aad7d0653d6f299fba3a0d4faa34be9df4ddd1ec0f348e8237657539bbbfd7d4f3ef8bab2a45cf4f7b443d3e475f2bbb33a67bb774f050549419797344e970bb077c41ad9e6822cf02e18fa608c289597bb9c2d100adb7ccc40225a8228ab939f994ce91414a95edb0f2f9e9c306fb2d981c6e0bb18c4714b5b9ff2769de0077c00c36084223b8082f"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x15, 0x1, "fb7be66154e265709a7045ebef5b31c524"}]}, @NFTA_SET_ELEM_USERDATA={0xe4, 0x6, 0x1, 0x0, "755c3b4e351fb29472407dd758698133256910af2b765a7ace6fab3b1bd0705ec6bc90d2b53b49d5a22f3089266ecf0302324644e35cd3c3c3dc0f10bca1f029414ecaa72566dcba68a327250a6ef40b664073cb4c8b7673cea1bbb3fd18c69d429ba8703c1315b1d623da529a4b241c230d4d88fee0beafbe3656edbe830dbc6e3ba0dbdeea0c42d1f4f7e397cfb2b8d76cbb4f7bba15f054de0c71591310d7c063f2dbedd05c9c5ab4ffddc3a66af978d77aaf80130355fe958788779b4a6dfdcd869ff5c628adc12f7f851f1fd6f1b37e752351998316fce52051dd56350f"}]}, {0x2d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x154, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x78, 0x1, "930acd795355813a9434f02951b680af05550aec7b58af046fe679fcd08287ddc438aefa1307392532f2b4287fcef08fed3aac8ae60ed87a5ee1a88c7fc32412ab3c8b62630edc84f3e5bc52ea723a464cb2e6320de73cce359539e13d4bdc6c1988768b1d5139378ba69f11334936b6ff81b66f"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xcb, 0x1, "9cfe2abb3a0a19e6ef14a369c03fa6da5b1510136abf191eb023e38beb8780e4b3b341a6821e14dbe5ef36f52240fe13cb0e4df1e1c4cf97805d2435d1d61673d6b1b696f5a5a31c4afefb58409446f5b243aa41c52571bed7f489e0a1200619f040269b189e52e698f2547a12bd04a8aaab5910f8e194adc26856b8761971b27149ac4f1853285d976143fdc662165b7d682d505f350342c7c4ba0f0a14e537af7b2ff3af0513a63fe6f3ce830f819ac42d14eeed63395457d575f2756893e0ff8c580976f6a5"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x128, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x30, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_FIB_RESULT={0x8}]}}}, {0x7c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x6c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff7}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8000000000000000}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6a5}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x29, 0x6, 0x1, 0x0, "a293b9d61aef88f8194e3fdca07641398008810f8e7d5fc2f5a856757862597850d1eba9c9"}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x9}]}}}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x6dc}, 0x1, 0x0, 0x0, 0x24000050}, 0x4) (async)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000500)={0x6dc, 0xd, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x67c, 0x3, 0x0, 0x1, [{0x3a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x2bc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xf1, 0x1, "936ddcdec74aa892af4092be42d662f64e05fbaa79a25f113b53f9c44706869c6c74c2bd2438658e38f55669a27258dd6b2744a77d3f3162901beec2591b97f44ce8cd35332644a3766e922ddae491fc46cab128ef3de176ca4fc783ac2372931b594d0ab9481e3bdb8029179cc8d8b1f1c7fc415693b5c6c4e37619b223618f6f0e8edd62d6b993936b09c95929a964cabb600885937a70aea096da744f293382a15eb9106f347af818a55f575288c7c0e866ee99b7aeb77a849fad5ff7b05b2a0eb1139845ee734f6568968ab75b07a020da40188fd8578f56ba39ec3000e308e96d357e15a50b9c9ec4709f"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xdc, 0x1, "97f013098da1726310af62e9960f669b301d27e2f64333352bf93da8eef58cccca76c5208c4b0cf32c65e1c2a3c1ac906f16edf6d9a28ba588018fe7a4042751905c03abe30f4804a1de44aff0bcd0aad7d0653d6f299fba3a0d4faa34be9df4ddd1ec0f348e8237657539bbbfd7d4f3ef8bab2a45cf4f7b443d3e475f2bbb33a67bb774f050549419797344e970bb077c41ad9e6822cf02e18fa608c289597bb9c2d100adb7ccc40225a8228ab939f994ce91414a95edb0f2f9e9c306fb2d981c6e0bb18c4714b5b9ff2769de0077c00c36084223b8082f"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x15, 0x1, "fb7be66154e265709a7045ebef5b31c524"}]}, @NFTA_SET_ELEM_USERDATA={0xe4, 0x6, 0x1, 0x0, "755c3b4e351fb29472407dd758698133256910af2b765a7ace6fab3b1bd0705ec6bc90d2b53b49d5a22f3089266ecf0302324644e35cd3c3c3dc0f10bca1f029414ecaa72566dcba68a327250a6ef40b664073cb4c8b7673cea1bbb3fd18c69d429ba8703c1315b1d623da529a4b241c230d4d88fee0beafbe3656edbe830dbc6e3ba0dbdeea0c42d1f4f7e397cfb2b8d76cbb4f7bba15f054de0c71591310d7c063f2dbedd05c9c5ab4ffddc3a66af978d77aaf80130355fe958788779b4a6dfdcd869ff5c628adc12f7f851f1fd6f1b37e752351998316fce52051dd56350f"}]}, {0x2d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x154, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x78, 0x1, "930acd795355813a9434f02951b680af05550aec7b58af046fe679fcd08287ddc438aefa1307392532f2b4287fcef08fed3aac8ae60ed87a5ee1a88c7fc32412ab3c8b62630edc84f3e5bc52ea723a464cb2e6320de73cce359539e13d4bdc6c1988768b1d5139378ba69f11334936b6ff81b66f"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xcb, 0x1, "9cfe2abb3a0a19e6ef14a369c03fa6da5b1510136abf191eb023e38beb8780e4b3b341a6821e14dbe5ef36f52240fe13cb0e4df1e1c4cf97805d2435d1d61673d6b1b696f5a5a31c4afefb58409446f5b243aa41c52571bed7f489e0a1200619f040269b189e52e698f2547a12bd04a8aaab5910f8e194adc26856b8761971b27149ac4f1853285d976143fdc662165b7d682d505f350342c7c4ba0f0a14e537af7b2ff3af0513a63fe6f3ce830f819ac42d14eeed63395457d575f2756893e0ff8c580976f6a5"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x128, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x30, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_FIB_RESULT={0x8}]}}}, {0x7c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x6c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff7}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8000000000000000}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6a5}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x29, 0x6, 0x1, 0x0, "a293b9d61aef88f8194e3fdca07641398008810f8e7d5fc2f5a856757862597850d1eba9c9"}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x9}]}}}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x6dc}, 0x1, 0x0, 0x0, 0x24000050}, 0x4)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) (async)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r2, 0x1000)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x1}, 0x80) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x1}, 0x80)
getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x21}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008880}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
listen(r4, 0xbabc)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000000), 0x4)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000140)={@dev}, &(0x7f0000000180)=0x14) (async)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000140)={@dev, <r5=>0x0}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@ipv4_getaddr={0x5c, 0x16, 0x400, 0x70bd2a, 0x25dfdbfc, {0x2, 0x3f, 0x0, 0xff, r5}, [@IFA_CACHEINFO={0x14, 0x6, {0x3, 0x76, 0x2, 0x7d}}, @IFA_FLAGS={0x8, 0x8, 0xc6}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x36}}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010100}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4048004)
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x13, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x1008, 0x46000029}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c)

10.031222959s ago: executing program 32 (id=43481):
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000500)={0x6dc, 0xd, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x67c, 0x3, 0x0, 0x1, [{0x3a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x2bc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xf1, 0x1, "936ddcdec74aa892af4092be42d662f64e05fbaa79a25f113b53f9c44706869c6c74c2bd2438658e38f55669a27258dd6b2744a77d3f3162901beec2591b97f44ce8cd35332644a3766e922ddae491fc46cab128ef3de176ca4fc783ac2372931b594d0ab9481e3bdb8029179cc8d8b1f1c7fc415693b5c6c4e37619b223618f6f0e8edd62d6b993936b09c95929a964cabb600885937a70aea096da744f293382a15eb9106f347af818a55f575288c7c0e866ee99b7aeb77a849fad5ff7b05b2a0eb1139845ee734f6568968ab75b07a020da40188fd8578f56ba39ec3000e308e96d357e15a50b9c9ec4709f"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xdc, 0x1, "97f013098da1726310af62e9960f669b301d27e2f64333352bf93da8eef58cccca76c5208c4b0cf32c65e1c2a3c1ac906f16edf6d9a28ba588018fe7a4042751905c03abe30f4804a1de44aff0bcd0aad7d0653d6f299fba3a0d4faa34be9df4ddd1ec0f348e8237657539bbbfd7d4f3ef8bab2a45cf4f7b443d3e475f2bbb33a67bb774f050549419797344e970bb077c41ad9e6822cf02e18fa608c289597bb9c2d100adb7ccc40225a8228ab939f994ce91414a95edb0f2f9e9c306fb2d981c6e0bb18c4714b5b9ff2769de0077c00c36084223b8082f"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x15, 0x1, "fb7be66154e265709a7045ebef5b31c524"}]}, @NFTA_SET_ELEM_USERDATA={0xe4, 0x6, 0x1, 0x0, "755c3b4e351fb29472407dd758698133256910af2b765a7ace6fab3b1bd0705ec6bc90d2b53b49d5a22f3089266ecf0302324644e35cd3c3c3dc0f10bca1f029414ecaa72566dcba68a327250a6ef40b664073cb4c8b7673cea1bbb3fd18c69d429ba8703c1315b1d623da529a4b241c230d4d88fee0beafbe3656edbe830dbc6e3ba0dbdeea0c42d1f4f7e397cfb2b8d76cbb4f7bba15f054de0c71591310d7c063f2dbedd05c9c5ab4ffddc3a66af978d77aaf80130355fe958788779b4a6dfdcd869ff5c628adc12f7f851f1fd6f1b37e752351998316fce52051dd56350f"}]}, {0x2d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x154, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x78, 0x1, "930acd795355813a9434f02951b680af05550aec7b58af046fe679fcd08287ddc438aefa1307392532f2b4287fcef08fed3aac8ae60ed87a5ee1a88c7fc32412ab3c8b62630edc84f3e5bc52ea723a464cb2e6320de73cce359539e13d4bdc6c1988768b1d5139378ba69f11334936b6ff81b66f"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xcb, 0x1, "9cfe2abb3a0a19e6ef14a369c03fa6da5b1510136abf191eb023e38beb8780e4b3b341a6821e14dbe5ef36f52240fe13cb0e4df1e1c4cf97805d2435d1d61673d6b1b696f5a5a31c4afefb58409446f5b243aa41c52571bed7f489e0a1200619f040269b189e52e698f2547a12bd04a8aaab5910f8e194adc26856b8761971b27149ac4f1853285d976143fdc662165b7d682d505f350342c7c4ba0f0a14e537af7b2ff3af0513a63fe6f3ce830f819ac42d14eeed63395457d575f2756893e0ff8c580976f6a5"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x128, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x30, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_FIB_RESULT={0x8}]}}}, {0x7c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x6c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff7}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8000000000000000}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6a5}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x29, 0x6, 0x1, 0x0, "a293b9d61aef88f8194e3fdca07641398008810f8e7d5fc2f5a856757862597850d1eba9c9"}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x9}]}}}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x6dc}, 0x1, 0x0, 0x0, 0x24000050}, 0x4) (async)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000500)={0x6dc, 0xd, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x67c, 0x3, 0x0, 0x1, [{0x3a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x2bc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xf1, 0x1, "936ddcdec74aa892af4092be42d662f64e05fbaa79a25f113b53f9c44706869c6c74c2bd2438658e38f55669a27258dd6b2744a77d3f3162901beec2591b97f44ce8cd35332644a3766e922ddae491fc46cab128ef3de176ca4fc783ac2372931b594d0ab9481e3bdb8029179cc8d8b1f1c7fc415693b5c6c4e37619b223618f6f0e8edd62d6b993936b09c95929a964cabb600885937a70aea096da744f293382a15eb9106f347af818a55f575288c7c0e866ee99b7aeb77a849fad5ff7b05b2a0eb1139845ee734f6568968ab75b07a020da40188fd8578f56ba39ec3000e308e96d357e15a50b9c9ec4709f"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xdc, 0x1, "97f013098da1726310af62e9960f669b301d27e2f64333352bf93da8eef58cccca76c5208c4b0cf32c65e1c2a3c1ac906f16edf6d9a28ba588018fe7a4042751905c03abe30f4804a1de44aff0bcd0aad7d0653d6f299fba3a0d4faa34be9df4ddd1ec0f348e8237657539bbbfd7d4f3ef8bab2a45cf4f7b443d3e475f2bbb33a67bb774f050549419797344e970bb077c41ad9e6822cf02e18fa608c289597bb9c2d100adb7ccc40225a8228ab939f994ce91414a95edb0f2f9e9c306fb2d981c6e0bb18c4714b5b9ff2769de0077c00c36084223b8082f"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x15, 0x1, "fb7be66154e265709a7045ebef5b31c524"}]}, @NFTA_SET_ELEM_USERDATA={0xe4, 0x6, 0x1, 0x0, "755c3b4e351fb29472407dd758698133256910af2b765a7ace6fab3b1bd0705ec6bc90d2b53b49d5a22f3089266ecf0302324644e35cd3c3c3dc0f10bca1f029414ecaa72566dcba68a327250a6ef40b664073cb4c8b7673cea1bbb3fd18c69d429ba8703c1315b1d623da529a4b241c230d4d88fee0beafbe3656edbe830dbc6e3ba0dbdeea0c42d1f4f7e397cfb2b8d76cbb4f7bba15f054de0c71591310d7c063f2dbedd05c9c5ab4ffddc3a66af978d77aaf80130355fe958788779b4a6dfdcd869ff5c628adc12f7f851f1fd6f1b37e752351998316fce52051dd56350f"}]}, {0x2d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x154, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x78, 0x1, "930acd795355813a9434f02951b680af05550aec7b58af046fe679fcd08287ddc438aefa1307392532f2b4287fcef08fed3aac8ae60ed87a5ee1a88c7fc32412ab3c8b62630edc84f3e5bc52ea723a464cb2e6320de73cce359539e13d4bdc6c1988768b1d5139378ba69f11334936b6ff81b66f"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xcb, 0x1, "9cfe2abb3a0a19e6ef14a369c03fa6da5b1510136abf191eb023e38beb8780e4b3b341a6821e14dbe5ef36f52240fe13cb0e4df1e1c4cf97805d2435d1d61673d6b1b696f5a5a31c4afefb58409446f5b243aa41c52571bed7f489e0a1200619f040269b189e52e698f2547a12bd04a8aaab5910f8e194adc26856b8761971b27149ac4f1853285d976143fdc662165b7d682d505f350342c7c4ba0f0a14e537af7b2ff3af0513a63fe6f3ce830f819ac42d14eeed63395457d575f2756893e0ff8c580976f6a5"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x128, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x30, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_FIB_RESULT={0x8}]}}}, {0x7c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x6c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff7}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8000000000000000}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6a5}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x29, 0x6, 0x1, 0x0, "a293b9d61aef88f8194e3fdca07641398008810f8e7d5fc2f5a856757862597850d1eba9c9"}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x9}]}}}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x6dc}, 0x1, 0x0, 0x0, 0x24000050}, 0x4)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) (async)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r2, 0x1000)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x1}, 0x80) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x1}, 0x80)
getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x21}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008880}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
listen(r4, 0xbabc)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000000), 0x4)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000140)={@dev}, &(0x7f0000000180)=0x14) (async)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000140)={@dev, <r5=>0x0}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@ipv4_getaddr={0x5c, 0x16, 0x400, 0x70bd2a, 0x25dfdbfc, {0x2, 0x3f, 0x0, 0xff, r5}, [@IFA_CACHEINFO={0x14, 0x6, {0x3, 0x76, 0x2, 0x7d}}, @IFA_FLAGS={0x8, 0x8, 0xc6}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x36}}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010100}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4048004)
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x13, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x1008, 0x46000029}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c)

2.792021562s ago: executing program 3 (id=43615):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x3, 0x0)
ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000080))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e00)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x2081}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x10}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x20000000}]}}}]}, 0x40}}, 0x28000000)
r3 = socket$kcm(0x2, 0xa, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r4, 0x8002f515, &(0x7f0000000140))
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c)
sendfile(r5, r6, 0x0, 0x20000000002)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0xfff, 0xcd, &(0x7f0000000580)=""/205, 0x41000, 0x11, '\x00', 0x0, 0x1a, r6, 0x8, &(0x7f0000000680)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0x8, 0x9, 0x6}, 0x10, 0x1e49b, r6, 0x1, 0x0, &(0x7f0000000700)=[{0x1, 0x1, 0xa, 0x7}], 0x10, 0xffff}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000006112500000000000950000000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x13, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x1008, 0x46000029}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c)

2.229435616s ago: executing program 3 (id=43629):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44000}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x24, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x3, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x317}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x8811)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001a40)={r2, &(0x7f0000000980), 0x0}, 0x20)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x2c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}}, 0x0)

2.085887749s ago: executing program 3 (id=43634):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000f40)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f0000000140)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a0900a32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c50de9f30c83766e8911ed5b621c7395f1678a3165181261067977d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xfd}, {&(0x7f0000000e80)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000280)="3b3d07b7091f697381965e2e79090900f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910ba0500000000000000b8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e833e91977ac7c7a90b3589931b620784b65b952a0", 0x94}, {&(0x7f0000001040)="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", 0x2ad}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4000000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
syz_emit_ethernet(0x5eb, &(0x7f0000001780)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x5b5, 0x3a, 0x0, @remote, @local, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x0, "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"}}}}}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10)
r5 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000001780)={&(0x7f0000000240)=@xdp, 0x80, &(0x7f0000000580)=[{&(0x7f00000002c0)="99c0c8a64944a05e9c346de4d3d3a9bb39a0f78b255ad412db84b364a11507d57ebe76f665aa34319949d11ac4742b1e21768d7255e6fadbe63c5361ffa11811d2b17ec2289c7a18786e0a226f6fe59ee2ffdbf142cf0477b841c9457ee2ea08ae81d4a3", 0x64}, {&(0x7f0000000340)="e85adb6a4d1a8746eac7dfbfc4425e242d0b83bf6a5d7eddee7f42ebd47e3e45498f220f7a0a57909dcf6199cbcad1a4310a9164af92b63381eb4ec1585cf5ce4b7b56ac8e2bb8c522148434f8794629edc06d69", 0x54}, {&(0x7f00000003c0)="58eb2c5f4861f02f200c15a24904c3bee774847f569bed51040025a08a0191a5eb14d91b8c8c510d600553f4ed0ee0a928e2ccbd303cff39", 0xffffffd8}, {&(0x7f0000000400)="51380ec09bd99ead10314c60dd84ede5853a989a50373ac712415d8507e6932ddee21ea42c5a23ae95e79250499276fccb9664194c8cd6c2fae81193d8b3b9be16f971daedea10580316cb74311dc5554dda3033aef6740c3e40681e462f186b9ea4f4492a52a98681e1b274cf9426a421b972aa87496a4dcde29945", 0x7c}, {&(0x7f0000000480)="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", 0xfb}], 0x5, &(0x7f0000000600)=[{0x1010, 0x0, 0x0, "29c4c3474479bb34441dee598c29a6fc29ccabf33c1078b9f65f93219d8ee3f95f355fdd7104db312951579a0b9b66138fcf0acc3d4b33729f73c417e96d91d2eb5e0319bfd1b9a0cf7190a1216b93faddafd420a887bc958b3fd15066b89294ca9df3fbebcab8cc156f00020f44de7a57ff9a0044c666525947e889fd7dca04cf13a9537702537d305dd2c25744230700a06e7e519b816c6469fdd4ab4e929df381a43607a6695e534eadab5d5d054bd0619358ab113c5f4752ef7f7329fcec35aad7631bc72b44a0d99bc3177d60cb840725520ade4a8eaed4d14b84511894f0e193a6496a5b53ff8731a6544b3adaa2763269919452d2aa2ff727a42215942132105c51a0c0de3c41bc9fa714881ec211d6571ff733794b3e8ec9477639ffff3f981f245ad5cd06d18fc7cf9403f0379f9e7d24a11d46cfcd45a0c45e45ec9471827f9cd272d79358e56e9e33d8df9fcdf749a35bcd057464898d29fb1ed2337b05eabd7a41c8c7ad3c47218c664a317f727ebea385ff01400cb6c940d5d394e16de2bcfe2410d0f24e6b1321e75364d1a42624bdf659c0b7f8f76b8a421417dee9d10cdba301d35852d879c1d643bc702e29a54598c9e34b0562ed09536b1b06d4b58df3d91f973f9a38c88caa4e3c2c2d0b6a1da2dc8836781ac50af9cc42891398e6b5d64b5bf047c6f2f6e651d736ba1903921c5ffbe726a6371b9c44d20cd04a96ca3b1bbf97fd350fb63c13df32407782424cac6b1eaf111da7db600715e2ac333154cf3cd62706432e57e94645ac7e8c92d5236612d5a3c6e22438c51b294b3cc96c6a1f52450d92abe9906ba0798fc97e421c2f1ab36d20fbfb01a462143bc25f8f112263be15b7d0f8479fde6f42fa363437275acedad60486c57f905de48399d4ae5058da17522f5365a29eaeab2def70c383940a38d9a5f3d2b168eb64f8dd5ec6cb50581963fe8520c4ecff9158c8702f40a4a9b8900c55a0e0b06c1af35d12ad39e44e14a7cc83aa6bb606197cf34633667fc997b592907a62e67fa40dbe9ad23a5bf9d05fe812f96db107653368213bb559c5f3158593d9d37b6cc2bf6df06fada99384043d676da665657b5cd22a836eae16705e0ca272beb6955c3fad86ec8506e2c78f7d7260682c68ed8b7ebf02a30d22ac585cc347cbdaecf6e9e7e5d5aa97b92aef01bcc6aff785badf8f9b1699167ae930a83f0bc27bfdca2f895d7e5eebb95b82a819be127ab93433f5d8db50b12d058cf0d0f88737fd949dd0043a08b6219e6edaf4bd641e0e8285a0dfa47c96f89e75971ce7d6241e4b7d9fc7041c6902a86cb18492a0a8b18fbfc5e3d22a54de821581d1b99ccad7bc0c9a9138dc7cecca45f6568620532e2abe785c13ed459a18547c9f178cd998c317a0031625b5ebdcb99ce5f54b060da36203175b893253645ba2fd2ad856831440d769f59307313eb4ebc84f4a02a412075837d4bbb30b818d57a883747a1af26f35f1c2c208e7defc085bdf9eebc10079e18a0f23fd21a7d2884ab5ea7bc44ea261c91bf2ebd415a23eae9a7e85f3f0880547e1bcd13ef0468b458ed37f421b851bab5aae964b899f6cbc1f3d02f3800c7b35c89d0efdd6025e0921d3f526ed6587c415b177b87134e3da173d33b68a2672f36a4cde5ae8809212b9d88e6a4b4bf20afef7c1a48b4a5f2887874fb4e7cac0bcf71ed0d622a367b329f4b5e474ee4fd70636e86995520ec970970b0cd1f340d2b892aa56c2cfcbbbd6167e37b1c39327ad6cc85dec48a7e142b63a84c5b3886487ab2fedc582ac6f965d376b0581c0cae3abe24cb662e0c3c116d7e8dbddb107aa993cbfc24a0a8ca900b61c986f190671b809c8b34d110113397a9397e6b56858428ca09d708d83bdc51d90cfbe14b4c56a1ccd8190e581b766f2e0f8b6c49c7e74b8dfe99a35188115ea48b35d7975f58a5055422eaef9ebf438fb9eedaf9e1909c507a99542de7ad5d35e332d9267bbce80d58d5475bf714e3be2b26b258a6823d42410cdf72aa6f12a299f720c479e02060849e93d59c1b15d484adae609a31471abd4338a6aea03851ae370273f1ae3d72c59cbbd25c5a3aee91869c72a27b763eef686230650a895a0a9a2f77bdb6fb349c59cc48820f42500bc51a237a3436567d384648fb867d48602657a8c81f0aed85977073e103f0fc62aca6492f4378a646238349a5f8bee94f4766ee9e327860704b8a090adfc2ee0db11cc2df4b652211d30ed298dedd23eab38eacc8e0d2e69593a5682cec4d2c0f2d3d66f3df7be8028238d0f590ee90621d020b93085a5f694d563856284bafd4f0b954e30a896d1e399d6316d660e2b6ad3df716122f0a303b2f0217c6697d4d815b8a28ab8f028a8159f2aa9ed128a851334407d54f7e9c64e7b92a82ce51ab2a5b9ed047040f74fd42fcb2c41f379ce658641b73a60fb4b41f0a9a8edf605265fa6efdd28e1ae2fb8d4def9bbca9c4f9f2edcdc9e6fd423d9613a43845f20c61b9661c8b9c99bc958af7e61af5e704baf5ca12e65e8f0b133acec17081cbb50c22272ab51c7d17cc12a3033c52483b47aa16ac9dda11fb77001a4316b98bf873448267c8e7e49d6d07477a62b33e0a46e387999bc143f69c41130dfc77198f1339c7177befbf3eb06a9ecdf062fd842b29dba1b204474e309e64e2631f6c5e4d3d7ca536d4467419e620c8619a1526c691206063971491ff49aea6be8faa611203c37b3eec38d149035aee79af66693edc97d0da78671b88d9757919bce0b404ab0b2b43534e184fc67fca7937499782c1aaf7754c68225fdce1bc0643c91667d04a04a7c410a908d206a7e7c4c2a33b9c761be5dfe6e03a477462d359e7c07752a9700b1c37fa21b04072b6eaeff92d3633564cec2128406b1712fbff8a94b32b800b6a010bd243b9e96ef9c22ff2c77023c55837d219c3ae7f0d3e2af3cec7ba5c8222ccb97a6da76524dc70b41627eb024962fd743e59b58956bcb2bf03247a6dcbdfe23e8c3ce54ca98b34e74fd6cc01e622696556bf245b92ceecc5aa2a74591f1a584a6ad18a346da14c5ea3b52bcbbf2da744920e22e0f09b4fa7c63399606bd595b8e7a0d1d28d73d26a5defbedca45e1571dc76a120472ba5be9396a5d0775cb28af94469cf1657aa2efdc6104e1385a2cc8b7e782ca816291c4a50d7a4b580e26a91cfb2e3b81ce8fa76545ef66c23b2045bc81ae9cd01650243feb5b521aae85a683a2cf20333fbf24903cb5a7ebf89b89ce1dadad33118861a44cc067a5a4c511e7b4d2ddb22338c60fd174703b169b5bfe14e44783e5a1495fd267df653731add97119e0ac9e7efedc1b5881679101ef710714bad7ace7d25df8e078dd5fcba19b9519ba45ca3c779f8ee8d541a5efd41b6fba6bd3b46f9e361fde6b6f2af713179622787f507281d444110f6f93c53b17aebcd5b272d44c1f8479384970234b199559d53a3d959eea9bb230c2d199c5538c3efdf049d617d97b6d658840d543237157f20ba1929d9cd7247827ba400bb87b95c3225b3f86c2b42b584e7dc16d6619f408e322b4fd2db7148185c958469eb6e69a237c75a1c8a17da35586c835d5f22f9637c77ce412086868f9a11f3e341af960bc014b006e41ef6adc1fd91f86361a5541a8aa018dbffb38bb6c27ea0eb5cf9242efb49f431371beed7c202ce91e7f63c3d00fd4022634253c64a5355150b746164a1a857306b258332a11a30a750e402885ab7aa5c02e4446a07250a74d0649793d7387aa588f9e7552621410b906a907f5b49c16385c34eeed4b944dfe86f65b2e8c5ffd790d333b3b2b6b158d010a9cbeb436cacfa80f6821b409e6722ac5a1662ec7e591786f2ee5b95c93a756d6b13ebdd383999ad08b1f964036692a83e1d7fb3544e268161eab60ed235cc26fd7e7467bd97f6f1d32c3c6e2509528febdde9e1736c4bdd1dbe057d253bcdebed84a21549db56bc284ada3909fe8f7a15092b0b64e6f0fde332150b485d00c5edb5ff12861732227c408e8910708009bb7d26c4f0e070a5346e21643e63df15061d2971ae4337a34fa0dc1ddae98bb507914f44ec05e794fd4c20b28d72171eb86d66fabc229ad9e50ceb4e0c1b7224252b1e650c66528d3e90bb159047a2ab96cb10382581ec8cab511ae6028f4008a8fa93f136e7d17c26b209a240666df3394d92d687a56fb74c53d2a9c722a47d8b78490122fab47866e34c2509e002c6f8fdddecd56ce66b9151dbad5cc4e12298a20dcf4f3620409fa8332add659e2aad35359d07956f1d8a9e3e6779ce03174e1ab3465ff52b8b88e550ee077a96b633b527d89b3e9f47fa374a6aa5e92b9cf07ae61fbd00b1af4035af0c701f7db0243e32f4c8d72e73698742d092f1a932eba1ae5b4dc8dcb70a486764eabfb11e4bd6bd0990622888f1c9f28b4faccd814ccd7735fbb62d6cfbac24297cfde2ef217f6f8065729c772f0f3013f43d1822decd2d7deecb19389be2aee3b16db0c64eafcb2740fc19ee34010f5c00fd30d6ca921504796caddb546d53d977fa858c45a9e7e423aa3a354261156ec74beadf57eaf5ea16e2daf2e9fd6e13411816b705e62fe36d25ef08e26e0846a9da549a5ad03658826e56ddb0c7732ca8fd2f71a1f3ebcf32d5097f3f7451880ab5d4f3dd860b25749868a2d13d44ffc059debce3295e2ff35a86220d9425ef553a26e0cc96a1a631a2b5922655dd13a51b5686a0dc582e5946adba613999b26312c7abcda3e18742ef68906e2f9615165f2896b160096bf334babfd336b68c6e4d3f9cec25c83065dc3f4636f73717c70d98ab05fee2b101527255b7c5e52e280c6807f84c7ac46766607fb9440a7861050305d8cdefa39510ed85892a6bcf5431677c436574bc17b1915e5c65653dbfd00246e3e403b357a11ffd7c208b2eb2f3af8d1d84fed3ea0b3f37717313a2d0ee5a933cbed5a20ca1ccb00fd54b7a3ec34c3bd2245b2c49cfa31d999d73a89e4c75fb557b086bea6eeb022edbad85bbf905c86c45f512b714412031492691ee68a90e41605c82dad45fb4f6a3d70c1274d76a252c3a712aa7c2ed1549b92fdf58012feeaa738713180e56e401f329d8864def28beab976489974d5294546728013d64e10330e92ca20ce32eac971fd3196676a174a659512ec043952424ce06f4f3635213fe536f0514397d8161ed00e2aa8925fc1e9fc1c301b28b56d2654d95bc8c362b41439b95e9da06fc149d7a0a47eea787292d6c61c7e7ddf08f567f055fa352f06f052e304a83284ef0a4ea8d515f146b2a0f79751e1b99905a082ca5d2c0fc7d05645686725e36b18717dff90139605a2cb46d25ea6892aeb8fcd7ff998aeb9d4b9c2863ade72e98f98495cf13409d6a7f71d8883a3f7f72a5257031854b72542a18ccf149939146a7fdedc94800e9475a6375a5c749b264c72824292bdd50451f97a709a0a54b2d9052fa23f26bf024f2f5e579e5cf1e572eac2707f7efe3148dde6c6df8c6b1b41c5f2d0d050aeaec38b5818544de20739c5769b1d659900fa499b3e740cdd7cb1389f83de5c009f3ca200614974a8f4a9506f857794b557e1a67e66f7d72ec2519457805417a2017a28432f42647f99d013afca2a0f95eb0e31c621721ab2e848cfd93bea24bd91b20d4e16d76718a6f66c7b27338674e071c2b61ebdac5e18ece820494adcb1d77417ccac6f63ba24139f81cd30ed9f74ffdb1d54abb7382fe7e0d3e4f6bdcf05059535db9c1fa5c83d6a95498160724a"}, {0x28, 0x0, 0x0, "8192fbea2c061381413fc28cb06b4e988dc486c74cfc"}, {0x18, 0x0, 0x0, "4fdf1ab71595"}, {0x18, 0x0, 0x0, "f47d"}, {0xe0, 0x0, 0x0, "06435d82744e2bd9e2a1fe8560ac7d60b467b377f0399e14a4b82078fbecc311bfb75da80df4176c4561790eae2e1f95dd46a7d7add48146b7b5c82746d8d36469209f1157ef17dbcd007409c3146b57a228d6100cf363fe754e480ace4546319526df51a444b225ac6df534283e28711f46fc77e9fda0596f402ec4c67aa5d0c5e535ca6edfe639e562cb3f41c27b110d3f65ecadd12a490fd27c6eea3f254c1a651207d6a239d3289641254ed028de2cedd5f658793983cea494d38b136b5f72a624ea0975c31041f46ca0"}], 0x1148}, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f00000000c0), 0x4)
write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="016f0800010027000000270000004600002900000000008490783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0007009078001309c40005020000100846000029002ae9c2517751958aa32c1a6d4f02d58838000391000000"], 0xfd6c)

1.710061348s ago: executing program 3 (id=43643):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002100090308000000ffdbdf2501000000080008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0xcb42, @dev={0xfe, 0x80, '\x00', 0x14}, 0xbf}, 0x1c)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xd4}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)

1.510693687s ago: executing program 2 (id=43652):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
r4 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000300), 0x12)
sendfile(r3, r3, 0x0, 0x10001)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x13, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x1008, 0x46000029}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c)

1.459645472s ago: executing program 2 (id=43654):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27, 0xbc}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x4e21, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x13, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0x1008, 0x46000029}, @generic={0x0, 0x8, "d58838000391"}]}}}}}}, 0x4e)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001440)={0x30, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x4, 0x3a}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdf}]}, @nested={0x10, 0x4, 0x0, 0x1, [@typed={0x4, 0xfb, 0x0, 0x0, @binary}, @typed={0x8, 0xee, 0x0, 0x0, @pid}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) (async)
socket$inet(0x2, 0x2, 0x48) (async, rerun: 64)
ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x10) (rerun: 64)

841.214446ms ago: executing program 3 (id=43662):
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c, 0x800)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xe, @mcast2, 0x4}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x5}, &(0x7f0000000280)=0x8)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x35, &(0x7f0000000040)=0x401, 0x4) (async)
r5 = socket(0x400000000010, 0x3, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x10200}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x4000004, 0x20000001, 0x4, 0x2}, 0x1, r7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}}, 0x0) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
socket$nl_crypto(0x10, 0x3, 0x15) (async)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x13, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x1008, 0x46000029}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c)

554.765409ms ago: executing program 2 (id=43666):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r1, &(0x7f0000000240)={@val={0xa, 0x201}, @void, @eth={@multicast, @broadcast, @void, {@generic={0x6558}}}}, 0x12)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x13, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x1008, 0x46000029}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c)

490.791841ms ago: executing program 2 (id=43668):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket(0x29, 0x4, 0x9)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x3}, 0x8)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
socket$inet(0x2, 0x6, 0x6)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="016f08000100dedbfb6b270000004600002900000090783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0007009078001309c400050200001008460000290002d58838000391000000"], 0xfd6c)

323.556672ms ago: executing program 3 (id=43671):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@gettaction={0xc8, 0x32, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x99b9}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x87, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0x0, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0xfffffffffffffdce, 0x4, 0xffffffff}]}, 0xc8}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r5 = socket(0x400000000010, 0x3, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x10, 0x1, 0x2, 0x80, 0x7, 0x4, 0x1, 0x5337, 0x9}})
ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000001700)=@ethtool_rxnfc={0x2d, 0x2, 0x800, {0x2, @esp_ip6_spec={@mcast2, @dev={0xfe, 0x80, '\x00', 0x29}, 0x6, 0xba}, {0x0, @broadcast, 0x80, 0x5, [0x2400000, 0x2]}, @esp_ip4_spec={@broadcast, @loopback, 0x3, 0xf6}, {0x0, @link_local, 0x8001, 0xe4f, [0x3, 0x7]}, 0x2400000000000, 0x6}, 0x8, [0xffff, 0xd, 0x7, 0xc, 0x1f8, 0x6, 0x6, 0x61]}})
r6 = socket(0x400000000010, 0x3, 0x0)
close(0xffffffffffffffff)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x1c)
getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@private1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8)
sendmsg$nl_generic(r8, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002000010025c77000fcdbdf25601800000800a500", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000851}, 0x24040004)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r9)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r10=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfe98}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r10], 0x20, 0x6044}, 0x6)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000000c0)={r10, 0x200}, 0x8)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@delqdisc={0x24, 0x25, 0x1, 0x70bd25, 0x255fdbff, {0x0, 0x0, 0x0, r12, {0x4, 0x8}, {0x8, 0xfff1}, {0x4, 0xfff1}}}, 0x24}}, 0x240080c8)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})

321.393868ms ago: executing program 2 (id=43672):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000640), r1)
sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="286e0062c67000fd7273a950fa1b1c047cdbdf251d000000080001e4", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x200080c0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a98000000060a0104000c0000000000000a0004050900010073797a31000f00006c000480680001800a000100696e6e657200000058000280080002400000007ef5ff05800c0001007061796c6f61640024000280000004400000007c0800044000000000080001400000000d080002400000000200000540000000130800034000000002080002400000008408000140000000000900020073797a3200000000140000001100010000000000000000000100000a"], 0xc0}, 0x1, 0x0, 0x0, 0x48890}, 0x24000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
unshare(0x2020600)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3)

319.200353ms ago: executing program 0 (id=43673):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0xcac229faa96ee7df, 0x0, 0x1, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x850, 0x10000000}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}, 0x1, 0x500}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x13, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x1008, 0x46000029}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c)

241.29593ms ago: executing program 2 (id=43674):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000200)=""/4096, 0x1041}, {&(0x7f0000001200)=""/114, 0x72}], 0x2, 0x0, 0x300}, 0x562a}], 0x3ffffffffffff27, 0x0, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r2, @ANYRESHEX=r0], &(0x7f00000004c0)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000001b40)="cdec33c9e9b98600000000000000f2ad904a5ca5adaa99a6acfa1ef24cfa030020893b24fd57cab57d2a799c27e629857f32bef313c3d55dd39e5c8b23a030fa28e6de1ec219199fc112afe175d00849e93b549b898427fea89c3260c7b6118711809c9c45ea36465d00"/121, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8}, 0x5)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000340)={<r4=>r0, 0x1, 0x7, 0x8})
r5 = socket$kcm(0x2, 0xa, 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000013c0)={{r2, <r6=>0xffffffffffffffff}, &(0x7f0000001340), &(0x7f0000001380)=r3}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000018c0)={r4, 0x20, &(0x7f0000001880)={&(0x7f0000001680)=""/224, 0xe0, <r7=>0x0, &(0x7f0000001780)=""/200, 0xc8}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x2f, 0x11, &(0x7f0000001400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x958, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x0, 0x1, 0x5, 0x3, 0xffffffffffffffa7, 0x4}, @jmp={0x5, 0x0, 0xa, 0x0, 0x4, 0xfffffffffffffffc, 0x16}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @jmp={0x5, 0x1, 0x7, 0x6, 0x1, 0xffffffffffffffff, 0xfffffffffffffff0}]}, &(0x7f00000014c0)='syzkaller\x00', 0x9, 0xd2, &(0x7f0000001500)=""/210, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2a, r4, 0x8, &(0x7f0000001600)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001640)={0x5, 0xb, 0x10, 0xb7c}, 0x10, r7, r4, 0x9, &(0x7f0000001900)=[r2, r4, r4, r4], &(0x7f0000001940)=[{0x1, 0x2, 0xa}, {0x2, 0x2, 0xd, 0xb}, {0x3, 0x1, 0x5, 0xb}, {0x2, 0x1, 0x10, 0x2}, {0x5, 0x3, 0x1, 0x5}, {0x4, 0x1, 0x3, 0x4}, {0x4, 0x2, 0x3, 0x9}, {0x3, 0x2, 0x2}, {0x1, 0x3, 0xd}], 0x10, 0x3}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a002000000000070000000008000600010000001400030076657468315f766c616e000000000000140002"], 0x4c}, 0x1, 0x0, 0x0, 0x24000804}, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000012c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50)
sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="016f0800010027000000270000004600002900000000008490783fffff20ac1414aa000000009bba9d15b627c5b7bb28a7c36950a58e3fc7f5985a62909f3e020c219469ec57e4659627820a470bbd8c36fde5184af2351a80ec079f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0007009078001309c400050200001008460000290002d58838000391000000"], 0xfd6c)

241.0698ms ago: executing program 0 (id=43675):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x40, 0x10, 0x2, 0x4, {{0x5, 0x4, 0x3, 0x4, 0x14, 0x66, 0x0, 0xff, 0x2f, 0x0, @local, @remote}}}})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x13, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x1008, 0x46000029}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c)

151.292456ms ago: executing program 0 (id=43676):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004030000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008541000083000000bf09000000000000550901000000000095000000000000001daaf5ff000000005d5ff8ff00000000bf91000000000000b7020000020000008500000085000000d7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xc}, 0x94)

98.758391ms ago: executing program 0 (id=43677):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c110"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
sendmsg$nl_route(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@setneightbl={0x24, 0x43, 0x200, 0x70bd2a, 0x25dfdbff, {0xa}, [@NDTA_THRESH1={0x8, 0x2, 0x8}, @NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000007000000040000000000000e0400000000000000000000000100000d000000000400000004000000000000000000000404000000000000000000000a030000000000000061"], 0x0, 0x5b}, 0x28)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x3b, 0x4, 0x4c8, 0x1e8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518)
write$tun(r4, &(0x7f0000000440)=ANY=[], 0xfdef)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000010000020000040900010073797a30000000000900020073797a320000000034000000080a05000000000000000000020000060900020073797a32000000000900010073797a3000"], 0x88}}, 0x20000040)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x330, 0x0, 0xffffffff, 0xffffffff, 0x260, 0xffffffff, 0x260, 0xffffffff, 0xffffffff, 0x260, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x88, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x6e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0xffffff00, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x29, 0x0, 0x3}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x3, 0x5, 0x1}, {0x6, 0x4}, {0xf, 0xfff}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x390)
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x13, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0x1006, 0x46000029}, @generic={0x0, 0x8, "d58838000391"}]}}}}}}, 0x4e)

98.016478ms ago: executing program 0 (id=43678):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x10000}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xffff2882}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x40)

0s ago: executing program 0 (id=43679):
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000000)={'tunl0\x00', <r0=>0x0, 0x20, 0x8, 0x4, 0x4, {{0x29, 0x4, 0x1, 0x4, 0xa4, 0x3ff, 0x0, 0x81, 0x2f, 0x0, @multicast2, @private=0xa010102, {[@ssrr={0x89, 0x13, 0xa4, [@local, @dev={0xac, 0x14, 0x14, 0x10}, @loopback, @dev={0xac, 0x14, 0x14, 0x36}]}, @lsrr={0x83, 0x23, 0xc3, [@multicast2, @multicast1, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @local, @loopback, @rand_addr=0x64010101]}, @generic={0x44, 0x7, "c5af922355"}, @lsrr={0x83, 0x1b, 0x3f, [@remote, @dev={0xac, 0x14, 0x14, 0x20}, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x42}, @private=0xa010101]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0x1a, [@empty]}, @rr={0x7, 0x7, 0x7f, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x22, 0x2, [{0x7, 0x4, "0b7f"}, {0x5, 0x6, "7d0c338e"}, {0x1, 0x3, "8d"}, {0x5, 0x8, "6e339e91be64"}, {0x7, 0x5, "dbcf12"}, {0x1, 0x2}]}]}}}}})
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={@private1, 0x2e, r0}) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfffffff8, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000001c0)="838d9c18a1aacffe4236cb6c1b1e3dca5e52d67f171dc7b8ca6da563ae7c7a19fefb873a7537a55b1e49610eb25c20a7c19bb9b7df73aad5b96ca64de1b1098b07d273f6dac161eccfea6bc489d6a8f95b44319d65f047a57564d1af51e9793161a897e615c845483e5d5144d250bb5bf94a2f774f22d81fe70ab9699e06ed960773a31b36a01b199c6f5643efc18639b288d1af83a80904031e128a362f35131446c545009f5cf01dc852b6a33477ff857ae230100c2f5465488c2b4fcdd90f", 0xc0}, {&(0x7f0000000280)="09e3eb9d0dd0c313c9d7c7fc45fe91766fa720db", 0x14}], 0x2}}], 0x1, 0xcbe096cc42b90913) (async)
r1 = socket(0x10, 0x5, 0x0)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000340)=""/150, &(0x7f0000000400)=0x96) (async)
syz_80211_join_ibss(&(0x7f0000000440)='wlan0\x00', &(0x7f0000000480)=@default_ibss_ssid, 0x6, 0x2) (async)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000004c0), 0x3)
clock_gettime(0x0, &(0x7f0000002440)={<r2=>0x0, <r3=>0x0})
recvmmsg(r1, &(0x7f00000022c0)=[{{&(0x7f0000000500), 0x80, &(0x7f0000000680)=[{&(0x7f0000000580)=""/72, 0x48}, {&(0x7f0000000600)=""/82, 0x52}], 0x2, &(0x7f00000006c0)=""/59, 0x3b}, 0x1}, {{&(0x7f0000000700)=@nl=@proc, 0x80, &(0x7f0000000880)=[{&(0x7f0000000780)=""/87, 0x57}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000840)=""/9, 0x9}], 0x3, &(0x7f00000008c0)=""/144, 0x90}, 0xd}, {{&(0x7f0000000980)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/203, 0xcb}, {&(0x7f0000001b00)=""/2, 0x2}, {&(0x7f0000001b40)=""/2, 0x2}], 0x4}, 0x1}, {{&(0x7f0000001bc0)=@nfc_llcp, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001c40)=""/118, 0x76}, {&(0x7f0000001cc0)=""/108, 0x6c}], 0x2, &(0x7f0000001d80)=""/220, 0xdc}, 0x3}, {{&(0x7f0000001e80)=@rc={0x1f, @none}, 0x80, &(0x7f0000002140)=[{&(0x7f0000001f00)=""/35, 0x23}, {&(0x7f0000001f40)=""/159, 0x9f}, {&(0x7f0000002000)=""/154, 0x9a}, {&(0x7f00000020c0)=""/86, 0x56}], 0x4, &(0x7f0000002180)=""/49, 0x31}, 0x10}, {{&(0x7f00000021c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000002280)=[{&(0x7f0000002240)=""/58, 0x3a}], 0x1}, 0x4}], 0x6, 0x20, &(0x7f0000002480)={r2, r3+60000000})
syz_80211_join_ibss(&(0x7f00000024c0)='wlan0\x00', &(0x7f0000002500)=@default_ibss_ssid, 0x6, 0x0) (async)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000002540)={'netpci0\x00'})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002740)={<r5=>0x0}, &(0x7f0000002780)=0xc) (async)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002c80)={{{@in6=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000002d80)=0xe8) (async)
r7 = getgid()
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002dc0)={<r8=>0x0}, &(0x7f0000002e00)=0xc) (async)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000002e40)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000002f40)=0xe8)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002f80)={0x0, 0x0, <r10=>0x0}, &(0x7f0000002fc0)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000003000)={{{@in6=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000003100)=0xe8)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000003140)={0x0, 0x0, <r12=>0x0}, &(0x7f0000003180)=0xc)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003240)={&(0x7f0000002580)=@proc={0x10, 0x0, 0x25dfdbfe, 0x2000}, 0xc, &(0x7f0000002c40)=[{&(0x7f00000025c0)={0x6c, 0x32, 0x200, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x5b, 0xf4, 0x0, 0x1, [@generic="4351ae227cb9c1511dc1395b0440480581e3bab4f24137abde18eddef7204cda90e498646afc0416c3f84cdf3624d1afee58cc56738d4b4281c8e092deb113f7ce24e359d48afa590bc98dbb974ef8", @typed={0x8, 0xfc, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}]}, 0x6c}, {&(0x7f0000002640)={0xc4, 0x2d, 0x200, 0x70bd2b, 0x25dfdbfe, "", [@generic="928e10e29e366c2314524a864113d80f1a6c02dc8b535a9fa78ebc239ac55d3eded1fccb267ba15869e9cb9170dd23bdd8dfee33eecd00fa08bc6aac74b3aece0420228f273de66c3e9671a3213030968762697c9ef880ec9fa9c9b64797697ebd1b83a0aec5c67750b124303767897d68e630c47839be6d979707b16d66024b724f8c9f692cc3b39a73da3803f3c92582bf2fac0e279aa9ed8829dd4fc0f695ed9ea0904f076ff2e1c5a6f3654b6c0754408445"]}, 0xc4}, {&(0x7f00000027c0)={0x154, 0x31, 0x20, 0x70bd26, 0x25dfdbfc, "", [@generic="856ad21ac6f67750f769408ec39b5ea55edefa334c7b9d5714a01b94e862", @nested={0xb3, 0x91, 0x0, 0x1, [@typed={0x5, 0x12b, 0x0, 0x0, @str='\x00'}, @generic="f8a013d7c3ad14ed42f01a45e48ffdfbd11cb3a7dac05a637bbe6fb67aa3fca773b126252ae85f566d8a22a6b8df72dbeaa72e9d5f289a93184b4b9207a91c3ca30e9f4aa00bc7a7426339b2e9438659a431c2e07793bd24b918036a97522df7b9b88641127f60b927552f579b6b266c3928a610c3a2037a542f8860a09229eecada58b6a4840da4bc2e8a27842686d48239121e6a03dc6d253e3f21415ca56cb639b9d32a62db"]}, @typed={0x8, 0x3d, 0x0, 0x0, @pid=r5}, @typed={0x68, 0x8, 0x0, 0x0, @binary="c43a457f1912d746bcefdcff527b913f6ec1727e4f50e7958ad94b3a599577617bab7881c643ce4f9b3bae56fe843dc0ed00954ac674f48673f581416585aab30ba6e7906dc2ccea7450ad1db89320153a4c96717c1324ade9fc4fd274d46c9514b55823"}]}, 0x154}, {&(0x7f0000002940)={0x2d4, 0x1d, 0x8, 0x70bd25, 0x25dfdbfb, "", [@typed={0xc, 0x129, 0x0, 0x0, @u64=0xd65}, @generic="9f505d32b6f37babf8f4d41038cb998434807be269871e56609a9ae558764e0b6572882ec64b55c70ef1641d45265b424e008b3fd7a2dc38a22efc4f356d80503da820f6fd13e28fade865", @nested={0x1dd, 0xfc, 0x0, 0x1, [@typed={0x7e, 0xfb, 0x0, 0x0, @binary="b4c0f0ca1d555f9d063c3a7f96e1c0f49bdf588d60c73f49bee66e5799ca887b59e1ff6557601defe0369dfacb2d000088ddade7b2ccc24a89d29d7ed6364f368f8975ae23b9a5c53676e9f06823195cfaa1a7dc9d7daef32d9f053a47256eaffc60a3fee7f417daf21fe13578ed2988758729fc1731f64e9d43"}, @typed={0x8, 0x85, 0x0, 0x0, @u32=0x1}, @generic="3c80f643e046d269e6ff1c0928f557d24d9613ea29e7964b1ef9c1de6d6dda037d34ffa6cbbcd89a348a6ad0beb86668f8adce13932db51a26ff7cd73df3f8c0ef172c19ca9200fd3f0a944b094e0806d3d50c254458da0c748acf26b507bcae92d09d62484c2c6b7efad3549f0c20cdbf668109c0e64733cd87cfbcbbb4d36b6475d7c2128d282ec061066b64fa06ba4a", @nested={0x4, 0xe2}, @nested={0x4, 0x30}, @typed={0xb5, 0x17, 0x0, 0x0, @binary="b741db76067032f7c14a3aa2c0565c58be342178d3f35a313d8286f5c0bedcec5cb78f863aea8fe13999a1ffee6b22167d3745fe6f7df92c70d282a1eaf133a27ddd75c59e387fa6ebd4e9060da8ba03ba329a4ee92b89aa1798f38c3b1a3823116405ad3047ba941dd49c480a911ee30890fe4e957f486ecc35b3da02eeb8d55702be96fe63524a3ac94c67e957641da0f79ab39d297aede962d3f76dcca344b582d2ef94711c4d626cef34c1debf5a83"}]}, @generic="da925a084de22dd0183cc8d86373cee48c6ba5a50140e1637348049d936821b4153203dfd0d6fe06885de2ef3db1c624b08b5649094ae7a9a48f59c18256c64c3ced41866ab48337cde63347748f180f9b78bf1ffb7d1d6d00aea3fb16ffe89cc5ef62b12179ad1dd127b40e73f013fe7722d5194c3cb39b014e6ca84129abc215fbe0eed079769a262635"]}, 0x2d4}], 0x4, &(0x7f00000031c0)=[@rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r11, r12}}}], 0x80, 0x20000000}, 0x800) (async)
ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000003280))
sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003440)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003400)={&(0x7f0000003300)={0xec, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x7c, 0x3, "a018ddcbcfecdb1512ddd9cbc41f0459755426b5ac0ace538e3045921ddc17bb9b5b8a7104ccc40e3d1d1eda6e67a32593dd97a81995ce68ad7c12ef945a9ce3fd980b24afdc5a8202dd49437dd07215464f5825fdc2cd5dff8c43f9ec14108e0df2d46cd825f17d6242fbb3616d89f6c73cccfca34ead93"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3fde}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x80}, 0x2400c880)
getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000003480)=""/42, &(0x7f00000034c0)=0x2a) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003580)={{0x1, <r13=>0xffffffffffffffff}, &(0x7f0000003500), &(0x7f0000003540)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003640)={{0xffffffffffffffff, <r14=>0xffffffffffffffff}, &(0x7f00000035c0), &(0x7f0000003600)}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000038c0)={'syztnl1\x00', &(0x7f0000003840)={'syztnl2\x00', <r15=>r0, 0x2f, 0x9, 0x54, 0xffffffff, 0xc, @empty, @empty, 0x8000, 0x1, 0x101, 0x5}}) (async)
r16 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003ac0)={&(0x7f0000003900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd0, 0xd0, 0x6, [@restrict={0x5, 0x0, 0x0, 0xb, 0x1}, @enum64={0xc, 0x6, 0x0, 0x13, 0x1, 0x4, [{0x4, 0x5, 0x7f}, {0x1, 0x0, 0x38}, {0xa, 0x0, 0x7}, {0x4, 0xb6, 0x7}, {0x4, 0xc91, 0x3}, {0x10, 0xb, 0x9}]}, @var={0x5, 0x0, 0x0, 0xe, 0x2}, @struct={0xe, 0x2, 0x0, 0x4, 0x1, 0x1, [{0x2, 0x5, 0xe}, {0x1, 0x1, 0xa}]}, @enum64={0x4, 0x1, 0x0, 0x13, 0x0, 0x0, [{0x6, 0x0, 0x71}]}, @enum64={0x9, 0x1, 0x0, 0x13, 0x1, 0x9, [{0xa, 0x540e, 0x91e}]}, @fwd={0x2}]}, {0x0, [0x0, 0x61, 0x0, 0x30]}}, &(0x7f0000003a00)=""/165, 0xee, 0xa5, 0x0, 0x1d0f}, 0x28) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003c40)={0xffffffffffffffff, 0x20, &(0x7f0000003c00)={&(0x7f0000003b80)=""/43, 0x2b, <r17=>0x0, &(0x7f0000003bc0)=""/57, 0x39}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000003d00)={0x11, 0x14, &(0x7f0000003680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x28}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r13}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @alu={0x7, 0x0, 0xc, 0x4, 0x9, 0x20}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r14}}]}, &(0x7f0000003740)='syzkaller\x00', 0x101, 0x9d, &(0x7f0000003780)=""/157, 0x40f00, 0x1, '\x00', r15, @fallback, r16, 0x8, &(0x7f0000003b00)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000003b40)={0x4, 0x8, 0x2, 0x80000000}, 0x10, r17, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000003cc0)=[{0x0, 0x3, 0x10}], 0x10, 0x100}, 0x94)

kernel console output (not intermixed with test programs):

g VLAN 0 to HW filter on device bond70
[ 2243.988604][T30605] team0: entered promiscuous mode
[ 2243.994490][T30605] macvlan3: entered promiscuous mode
[ 2244.001529][T30605] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 2244.211737][T30622] __nla_validate_parse: 2 callbacks suppressed
[ 2244.211755][T30622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.39841'.
[ 2244.218042][T30622] block nbd9: Unsupported socket: should be TCP or UNIX.
[ 2244.293807][T30634] netlink: 'syz.1.39843': attribute type 1 has an invalid length.
[ 2244.348919][T30636] wg1 speed is unknown, defaulting to 1000
[ 2244.482129][T30636]  speed is unknown, defaulting to 1000
[ 2244.921541][T30655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.39849'.
[ 2245.033329][T30661] netlink: 736 bytes leftover after parsing attributes in process `syz.0.39852'.
[ 2245.248633][T30668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.39854'.
[ 2245.251461][T30672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.39856'.
[ 2245.361154][T30683] xt_cgroup: xt_cgroup: no path or classid specified
[ 2245.406034][T30686] netlink: 132 bytes leftover after parsing attributes in process `syz.0.39862'.
[ 2245.623717][T30708] netlink: 68 bytes leftover after parsing attributes in process `syz.1.39870'.
[ 2245.684360][T30715] ip6erspan2: entered allmulticast mode
[ 2245.860168][T30731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.39877'.
[ 2245.875033][T30731] tipc: Resetting bearer <eth:syzkaller0>
[ 2245.891920][T30734] netlink: 20 bytes leftover after parsing attributes in process `syz.1.39878'.
[ 2245.998830][T30731] tipc: Resetting bearer <eth:syzkaller0>
[ 2246.012299][T30744] netlink: 'syz.1.39880': attribute type 5 has an invalid length.
[ 2246.190135][T30758] syzkaller0: left promiscuous mode
[ 2246.193019][T30758] syzkaller0: left allmulticast mode
[ 2246.387685][T30780] bond63: (slave ): Releasing backup interface
[ 2246.390567][T30780] bond63: (slave ): last VLAN challenged slave left bond - VLAN blocking is removed
[ 2246.400210][T30780] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 2246.431492][T30780] ip6gre8: entered allmulticast mode
[ 2246.437104][T30780] team0: Device ip6gre8 is of different type
[ 2246.470971][T30785] syzkaller1: entered allmulticast mode
[ 2246.474825][T30783] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[ 2246.481271][T30783] syzkaller0: entered promiscuous mode
[ 2246.483571][T30783] syzkaller0: entered allmulticast mode
[ 2246.534576][T30788] syzkaller1: left allmulticast mode
[ 2246.642536][T30795] netlink: 56 bytes leftover after parsing attributes in process `syz.2.39897'.
[ 2246.953983][T30134] tipc: Resetting bearer <eth:syzkaller0>
[ 2246.971523][T30826] wg1 speed is unknown, defaulting to 1000
[ 2247.112364][T30826]  speed is unknown, defaulting to 1000
[ 2247.820489][T30913] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:20000
[ 2248.001877][T30929] syzkaller0: entered promiscuous mode
[ 2248.006548][T30929] syzkaller0: entered allmulticast mode
[ 2248.014132][T30929] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2249.691383][T30932] __nla_validate_parse: 7 callbacks suppressed
[ 2249.691401][T30932] netlink: 20 bytes leftover after parsing attributes in process `syz.0.39939'.
[ 2250.097117][T30973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.39950'.
[ 2250.102387][T30973] netlink: 64 bytes leftover after parsing attributes in process `syz.2.39950'.
[ 2250.746349][T30996] netlink: 24 bytes leftover after parsing attributes in process `syz.0.39956'.
[ 2250.803054][T31005] netlink: 'syz.0.39959': attribute type 3 has an invalid length.
[ 2250.836174][T31009] netlink: 16 bytes leftover after parsing attributes in process `syz.0.39961'.
[ 2251.090532][T31040] macvtap1: entered promiscuous mode
[ 2251.092209][T31040] team0: entered promiscuous mode
[ 2251.094092][T31040] bridge54: entered promiscuous mode
[ 2251.100412][T31040] bridge55: entered promiscuous mode
[ 2251.102498][T31040] team0: Device macvtap1 is already an upper device of the team interface
[ 2251.108314][T31040] team0: left promiscuous mode
[ 2251.110702][T31040] bridge54: left promiscuous mode
[ 2251.112721][T31040] bridge55: left promiscuous mode
[ 2251.169843][T31054] netlink: 'syz.1.39973': attribute type 21 has an invalid length.
[ 2255.201116][T31165] netlink: 20 bytes leftover after parsing attributes in process `syz.0.39991'.
[ 2255.338654][T31183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.39997'.
[ 2255.514007][T31200] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 2256.197851][T31241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40014'.
[ 2256.205298][T31241] macvlan0: left allmulticast mode
[ 2256.208655][T31241] netlink: 'syz.0.40014': attribute type 1 has an invalid length.
[ 2256.212199][T31241] netlink: 'syz.0.40014': attribute type 2 has an invalid length.
[ 2256.397435][T31259] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 2256.400380][T31259] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 2256.527654][T31270] syzkaller0: entered promiscuous mode
[ 2256.529865][T31270] syzkaller0: entered allmulticast mode
[ 2256.578857][T31274] macvtap2: entered promiscuous mode
[ 2256.580757][T31274] team0: Device macvtap2 is already an upper device of the team interface
[ 2256.674849][T31280] macvtap0: entered allmulticast mode
[ 2256.744874][T31290] netlink: 24 bytes leftover after parsing attributes in process `syz.0.40029'.
[ 2256.864291][T31299] netlink: 'syz.0.40032': attribute type 21 has an invalid length.
[ 2256.871748][T31299] netlink: 'syz.0.40032': attribute type 22 has an invalid length.
[ 2256.876252][T31299] netlink: 'syz.0.40032': attribute type 23 has an invalid length.
[ 2256.879076][T31299] netlink: 136 bytes leftover after parsing attributes in process `syz.0.40032'.
[ 2257.061159][T31303] macvtap2: entered promiscuous mode
[ 2257.063220][T31303] team0: Device macvtap2 is already an upper device of the team interface
[ 2257.534333][T31317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40039'.
[ 2257.693857][T31331] gre0: Master is either lo or non-ether device
[ 2257.875014][T31347] netlink: 'syz.1.40050': attribute type 7 has an invalid length.
[ 2257.883808][T31347] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2257.911761][T31347] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2257.921266][T31345] netlink: 44 bytes leftover after parsing attributes in process `syz.2.40048'.
[ 2257.935986][T31348] netlink: 24 bytes leftover after parsing attributes in process `syz.1.40050'.
[ 2257.970347][T31347] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2258.013870][T31347] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2258.081187][T31352] xt_TCPMSS: Only works on TCP SYN packets
[ 2258.089898][ T5823] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 2258.103184][ T5823] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 2258.118313][ T5841] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 2258.132430][ T5841] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 2258.195342][T31354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.40053'.
[ 2258.353127][T31369] macvtap2: entered promiscuous mode
[ 2258.355157][T31369] team0: Device macvtap2 is already an upper device of the team interface
[ 2258.680570][T31389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40066'.
[ 2258.822676][T31395] 8021q: adding VLAN 0 to HW filter on device bond72
[ 2258.956651][T31413] syzkaller0: entered promiscuous mode
[ 2258.958462][T31413] syzkaller0: entered allmulticast mode
[ 2258.960320][T31413] tipc: Resetting bearer <eth:syzkaller0>
[ 2258.977615][T31413] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 2259.045464][T31419] macvtap1: entered promiscuous mode
[ 2259.050572][T31419] team0: entered promiscuous mode
[ 2259.052556][T31419] bridge54: entered promiscuous mode
[ 2259.054697][T31419] bridge55: entered promiscuous mode
[ 2259.060903][T31419] team0: Device macvtap1 is already an upper device of the team interface
[ 2259.067631][T31419] team0: left promiscuous mode
[ 2259.069097][T31419] bridge54: left promiscuous mode
[ 2259.070672][T31419] bridge55: left promiscuous mode
[ 2259.185681][T31428] tipc: Resetting bearer <eth:syzkaller0>
[ 2259.229384][T31428] netlink: 'syz.2.40081': attribute type 1 has an invalid length.
[ 2259.237738][T31427] tipc: Resetting bearer <eth:syzkaller0>
[ 2259.308156][T31436] syzkaller0: entered promiscuous mode
[ 2259.310267][T31436] syzkaller0: entered allmulticast mode
[ 2259.419686][T30131] tipc: Resetting bearer <eth:syzkaller0>
[ 2259.453422][T31445] Unsupported ieee802154 address type: 0
[ 2259.508647][T31446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2259.588521][T31454] netlink: 'syz.2.40091': attribute type 30 has an invalid length.
[ 2259.637553][T31454] netlink: 'syz.2.40091': attribute type 30 has an invalid length.
[ 2259.734609][T31457] macvtap1: entered promiscuous mode
[ 2259.736692][T31457] team0: entered promiscuous mode
[ 2259.738298][T31457] bridge54: entered promiscuous mode
[ 2259.740030][T31457] bridge55: entered promiscuous mode
[ 2259.743071][T31457] team0: Device macvtap1 is already an upper device of the team interface
[ 2259.749351][T31457] team0: left promiscuous mode
[ 2259.751362][T31457] bridge54: left promiscuous mode
[ 2259.753551][T31457] bridge55: left promiscuous mode
[ 2260.188164][T31470] netlink: 'syz.0.40096': attribute type 1 has an invalid length.
[ 2260.191168][T31470] NCSI netlink: No device for ifindex 1073545264
[ 2260.437003][T31485] 8021q: adding VLAN 0 to HW filter on device bond85
[ 2260.794448][T31511] __nla_validate_parse: 7 callbacks suppressed
[ 2260.794461][T31511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.40111'.
[ 2261.100969][T31543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40120'.
[ 2261.223976][T31556] netlink: 312 bytes leftover after parsing attributes in process `syz.0.40125'.
[ 2261.227064][T31556] validate_nla: 3 callbacks suppressed
[ 2261.227073][T31556] netlink: 'syz.0.40125': attribute type 1 has an invalid length.
[ 2261.231928][T31556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.40125'.
[ 2261.273695][T31565] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 2261.355860][T31580] 8021q: VLANs not supported on syzkaller1
[ 2261.441218][T31593] veth1_to_bond: Caught tx_queue_len zero misconfig
[ 2261.485924][T31595] netlink: 'syz.1.40138': attribute type 11 has an invalid length.
[ 2261.576844][T31607] tc_dump_action: action bad kind
[ 2261.605461][T31609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40140'.
[ 2261.610143][T31609] openvswitch: netlink: EtherType 50a is less than min 600
[ 2261.706755][T31619] netlink: 'syz.2.40143': attribute type 1 has an invalid length.
[ 2261.709070][T31619] netlink: 32 bytes leftover after parsing attributes in process `syz.2.40143'.
[ 2261.741365][T31621] macvtap1: entered promiscuous mode
[ 2261.743451][T31621] team0: Device macvtap1 is already an upper device of the team interface
[ 2262.048845][T31654] x_tables: duplicate underflow at hook 3
[ 2262.141313][T31659] macvtap2: entered promiscuous mode
[ 2262.143348][T31659] team0: Device macvtap2 is already an upper device of the team interface
[ 2262.193336][T31667] netlink: 40 bytes leftover after parsing attributes in process `syz.2.40156'.
[ 2262.288023][T31678] syzkaller0: left promiscuous mode
[ 2262.289845][T31678] syzkaller0: left allmulticast mode
[ 2262.291642][T31678] tipc: Resetting bearer <eth:syzkaller0>
[ 2262.405500][T31691] netlink: 16 bytes leftover after parsing attributes in process `syz.2.40164'.
[ 2262.456085][T31691] netlink: 16 bytes leftover after parsing attributes in process `syz.2.40164'.
[ 2262.697531][T31710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.40168'.
[ 2263.045774][T31724] macvtap1: entered promiscuous mode
[ 2263.048024][T31724] team0: Device macvtap1 is already an upper device of the team interface
[ 2263.127604][T31727] xt_l2tp: v2 sid > 0xffff: 8388608
[ 2263.419884][T31738] x_tables: duplicate underflow at hook 2
[ 2263.570427][T31762] syzkaller0: entered promiscuous mode
[ 2263.572107][T31762] syzkaller0: entered allmulticast mode
[ 2263.648249][T31773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2263.681479][T31781] netlink: 'syz.2.40192': attribute type 1 has an invalid length.
[ 2263.696018][T31781] 8021q: adding VLAN 0 to HW filter on device bond74
[ 2263.814276][T31795] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2263.930587][T31810] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 2264.374550][T31828] openvswitch: netlink: Flow key attr not present in new flow.
[ 2264.392360][T31828] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[ 2264.433889][T31830] netlink: Conntrack attr has 4 unknown bytes
[ 2264.482612][T31833] ip6_vti0: left allmulticast mode
[ 2264.484619][T31833] pimreg: left allmulticast mode
[ 2264.667640][T31846] bridge68: entered promiscuous mode
[ 2264.669605][T31846] bridge68: entered allmulticast mode
[ 2264.674715][T31846] team0: Port device bridge68 added
[ 2264.681727][T31846] bridge0: port 2(team0) entered blocking state
[ 2264.684193][T31846] bridge0: port 2(team0) entered disabled state
[ 2264.689524][T31846] team0: entered allmulticast mode
[ 2264.691178][T31846] bridge31: entered allmulticast mode
[ 2264.692713][T31846] macvlan1: entered allmulticast mode
[ 2264.694618][T31846] bridge49: entered allmulticast mode
[ 2264.697091][T31846] bridge50: entered allmulticast mode
[ 2265.033953][T31854] xt_hashlimit: size too large, truncated to 1048576
[ 2265.160174][T31875] netlink: 'syz.2.40220': attribute type 1 has an invalid length.
[ 2265.162487][T31875] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2265.234238][T31881] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2265.441344][T31894] IPVS: Error connecting to the multicast addr
[ 2265.965032][T31946] syzkaller1: entered promiscuous mode
[ 2265.968168][T31946] syzkaller1: entered allmulticast mode
[ 2266.119975][T31955] syzkaller0: entered promiscuous mode
[ 2266.122068][T31955] syzkaller0: entered allmulticast mode
[ 2266.124348][T31955] tipc: Resetting bearer <eth:syzkaller0>
[ 2266.140540][T31957] netlink: 'syz.0.40249': attribute type 3 has an invalid length.
[ 2266.156143][T31958] netlink: 'syz.0.40249': attribute type 3 has an invalid length.
[ 2266.162288][T31955] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 2266.167680][T31955] __nla_validate_parse: 11 callbacks suppressed
[ 2266.167695][T31955] netlink: 32 bytes leftover after parsing attributes in process `syz.2.40248'.
[ 2266.173574][T31955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40248'.
[ 2266.261542][T31970] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[ 2266.352011][T31969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40252'.
[ 2266.614765][T31980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40254'.
[ 2267.099876][T32000] netlink: 36 bytes leftover after parsing attributes in process `syz.1.40262'.
[ 2267.184672][T32004] netlink: 76 bytes leftover after parsing attributes in process `syz.1.40264'.
[ 2267.211348][T32004] syzkaller0: entered promiscuous mode
[ 2267.213136][T32004] syzkaller0: entered allmulticast mode
[ 2267.236047][T32010] syzkaller1: left promiscuous mode
[ 2267.238261][T32010] syzkaller1: left allmulticast mode
[ 2267.294258][T32013] nftables ruleset with unbound set
[ 2267.359937][T32020] netlink: 540 bytes leftover after parsing attributes in process `syz.0.40269'.
[ 2267.362996][T32020] netlink: 540 bytes leftover after parsing attributes in process `syz.0.40269'.
[ 2267.378379][T32020] netlink: 24 bytes leftover after parsing attributes in process `syz.0.40269'.
[ 2267.409228][T32020] sctp: [Deprecated]: syz.0.40269 (pid 32020) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2267.409228][T32020] Use struct sctp_sack_info instead
[ 2267.444128][T32033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40272'.
[ 2267.704667][T32065] xt_cluster: node mask cannot exceed total number of nodes
[ 2267.778780][T32074] syzkaller0: left promiscuous mode
[ 2267.783447][T32074] syzkaller0: left allmulticast mode
[ 2267.849639][T32081] gre0: entered allmulticast mode
[ 2268.096843][T32105] macvtap1: entered promiscuous mode
[ 2268.100192][T32105] veth0: entered promiscuous mode
[ 2268.102027][T32105] macvtap1: entered allmulticast mode
[ 2268.103785][T32105] veth0: entered allmulticast mode
[ 2268.112948][T32105] veth0: left allmulticast mode
[ 2268.115168][T32105] veth0: left promiscuous mode
[ 2268.117690][T32105] macvtap1: left promiscuous mode
[ 2268.119319][T32105] macvtap1: left allmulticast mode
[ 2268.461859][T32130] netlink: 'syz.0.40306': attribute type 1 has an invalid length.
[ 2268.464247][T32130] netlink: 'syz.0.40306': attribute type 1 has an invalid length.
[ 2268.951635][T32154] netlink: 'syz.1.40315': attribute type 1 has an invalid length.
[ 2268.977375][T32154] 8021q: adding VLAN 0 to HW filter on device bond86
[ 2269.460360][T32190] workqueue: Failed to create a rescuer kthread for wq "nfc9_nci_tx_wq": -EINTR
[ 2269.573896][T32197] syzkaller0: entered promiscuous mode
[ 2269.579448][T32197] syzkaller0: entered allmulticast mode
[ 2271.435500][T32249] __nla_validate_parse: 46 callbacks suppressed
[ 2271.435513][T32249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.40335'.
[ 2271.470857][T32257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2271.558114][T32264] syzkaller1: entered promiscuous mode
[ 2271.566570][T32264] syzkaller1: entered allmulticast mode
[ 2271.658902][T32280] syzkaller1: entered promiscuous mode
[ 2271.660588][T32280] syzkaller1: entered allmulticast mode
[ 2271.663558][T32281] syzkaller1: left promiscuous mode
[ 2271.665212][T32281] syzkaller1: left allmulticast mode
[ 2271.772344][T32293] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20003
[ 2271.796583][T32295] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[ 2271.820681][T32299] netlink: 24 bytes leftover after parsing attributes in process `syz.2.40351'.
[ 2272.095194][T32304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40352'.
[ 2272.101299][T32304] netlink: 16 bytes leftover after parsing attributes in process `syz.0.40352'.
[ 2272.120306][T32306] syzkaller1: left promiscuous mode
[ 2272.122383][T32306] syzkaller1: left allmulticast mode
[ 2272.125845][T32310] bond0: Caught tx_queue_len zero misconfig
[ 2272.364938][T32339] netlink: 16 bytes leftover after parsing attributes in process `syz.0.40363'.
[ 2272.434323][T32348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40365'.
[ 2272.443705][T32348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.40365'.
[ 2272.448666][T32350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.40366'.
[ 2272.561764][T32352] netlink: 24 bytes leftover after parsing attributes in process `syz.2.40368'.
[ 2272.564599][T32352] netlink: 48 bytes leftover after parsing attributes in process `syz.2.40368'.
[ 2273.177826][T32396] tipc: Resetting bearer <eth:syzkaller0>
[ 2273.198386][T32397] tipc: Resetting bearer <eth:syzkaller0>
[ 2273.635942][T32456] netlink: 'syz.2.40398': attribute type 21 has an invalid length.
[ 2273.897214][T32511] tipc: Resetting bearer <eth:syzkaller0>
[ 2273.981242][T32512] syzkaller0: left promiscuous mode
[ 2273.984527][T32512] syzkaller0: left allmulticast mode
[ 2274.001233][T32510] tipc: Resetting bearer <eth:syzkaller0>
[ 2274.011776][T32521] gre0: entered promiscuous mode
[ 2274.091285][T32530] netlink: 'syz.2.40417': attribute type 2 has an invalid length.
[ 2274.100044][T32530] syzkaller1: entered allmulticast mode
[ 2274.134795][T32533] netlink: 'syz.1.40418': attribute type 29 has an invalid length.
[ 2274.141170][T32534] netlink: 'syz.1.40418': attribute type 29 has an invalid length.
[ 2274.167913][T32542] syzkaller1: left allmulticast mode
[ 2274.267078][T30118] tipc: Resetting bearer <eth:syzkaller0>
[ 2274.384295][T32563] netlink: 'syz.1.40426': attribute type 64 has an invalid length.
[ 2274.501681][T32588] syzkaller0: entered promiscuous mode
[ 2274.503535][T32588] syzkaller0: entered allmulticast mode
[ 2274.505440][T32588] tipc: Resetting bearer <eth:syzkaller0>
[ 2274.582618][T32590] syzkaller1: entered allmulticast mode
[ 2274.597115][T32588] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 2274.600711][T32588] tipc: Resetting bearer <eth:syzkaller0>
[ 2274.672975][T32586] tipc: Resetting bearer <eth:syzkaller0>
[ 2274.759073][T32603] openvswitch: netlink: Port -1 exceeds max allowable 65535
[ 2275.202366][ T7020] tipc: Resetting bearer <eth:syzkaller0>
[ 2275.450374][T32677] syzkaller1: left allmulticast mode
[ 2275.458199][T32675] netlink: 'syz.2.40460': attribute type 4 has an invalid length.
[ 2275.467895][T32675] netlink: 'syz.2.40460': attribute type 4 has an invalid length.
[ 2275.804235][T32696] syzkaller1: entered promiscuous mode
[ 2275.806756][T32696] syzkaller1: entered allmulticast mode
[ 2275.811426][T32696] syzkaller1: left promiscuous mode
[ 2275.813515][T32696] syzkaller1: left allmulticast mode
[ 2275.867372][T32678] block nbd9: NBD_DISCONNECT
[ 2275.869109][T32678] block nbd9: Disconnected due to user request.
[ 2275.871155][T32678] block nbd9: shutting down sockets
[ 2275.873264][T32694] block nbd0: NBD_DISCONNECT
[ 2275.877359][T32694] block nbd0: Send disconnect failed -32
[ 2275.894297][T32694] block nbd0: shutting down sockets
[ 2276.373423][T32750] wg1 speed is unknown, defaulting to 1000
[ 2276.488861][T32750]  speed is unknown, defaulting to 1000
[ 2276.566065][  T300] __nla_validate_parse: 84 callbacks suppressed
[ 2276.566085][  T300] netlink: 24 bytes leftover after parsing attributes in process `syz.1.40487'.
[ 2276.684975][  T311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40492'.
[ 2276.775838][  T321] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2276.782319][  T323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40496'.
[ 2276.807920][  T321] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2276.857909][  T321] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2276.922838][  T321] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2277.001657][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 2277.015341][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 2277.030796][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 2277.044571][ T9209] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 2277.189097][  T348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40504'.
[ 2277.200673][  T352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.40506'.
[ 2277.218728][  T354] sctp: [Deprecated]: syz.2.40506 (pid 354) Use of int in max_burst socket option.
[ 2277.218728][  T354] Use struct sctp_assoc_value instead
[ 2277.434086][  T367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40511'.
[ 2277.440532][  T368] netlink: 'syz.2.40512': attribute type 29 has an invalid length.
[ 2277.525529][  T377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40510'.
[ 2278.383228][  T384] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 2278.592919][  T405] IPVS: Error connecting to the multicast addr
[ 2278.600322][  T402] syzkaller0: entered promiscuous mode
[ 2278.602413][  T402] syzkaller0: entered allmulticast mode
[ 2278.662963][  T414] netlink: 'syz.1.40524': attribute type 12 has an invalid length.
[ 2278.670155][  T414] netlink: 28 bytes leftover after parsing attributes in process `syz.1.40524'.
[ 2278.700767][  T414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.40524'.
[ 2278.741205][  T426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2278.748081][  T423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.40527'.
[ 2278.952620][  T451] netlink: 'syz.1.40536': attribute type 1 has an invalid length.
[ 2279.030866][  T461] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[ 2279.596623][  T523] netlink: 'syz.1.40558': attribute type 10 has an invalid length.
[ 2279.608012][  T523] bond84: (slave dummy0): Releasing active interface
[ 2279.610641][  T523] dummy0: left allmulticast mode
[ 2279.618366][  T523] dummy0: entered promiscuous mode
[ 2279.620296][  T523] team0: Failed to send port change of device dummy0 via netlink (err -105)
[ 2279.625351][  T523] team0: Failed to send options change via netlink (err -105)
[ 2279.630868][  T523] team0: Port device dummy0 added
[ 2279.637261][  T523] netlink: 'syz.1.40558': attribute type 10 has an invalid length.
[ 2279.644175][  T523] dummy0: left promiscuous mode
[ 2279.655101][  T523] team0: Failed to send options change via netlink (err -105)
[ 2279.657684][  T523] team0: Failed to send port change of device dummy0 via netlink (err -105)
[ 2279.661165][  T523] team0: Port device dummy0 removed
[ 2279.663584][  T530] mac80211_hwsim hwsim109 wlan0: entered allmulticast mode
[ 2279.666002][  T530] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[ 2279.685588][  T527] tipc: Resetting bearer <ib:ip6gre0>
[ 2279.691934][  T527] tipc: Resetting bearer <eth:syzkaller0>
[ 2279.713535][T23187] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2279.721281][T23187] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2279.726393][T23187] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2279.734609][T23187] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2279.737579][  T527] netlink: 'syz.2.40560': attribute type 13 has an invalid length.
[ 2279.742936][  T527] netlink: 'syz.2.40560': attribute type 17 has an invalid length.
[ 2279.773307][  T527] tipc: Resetting bearer <ib:ip6gre0>
[ 2279.775159][  T527] tipc: Resetting bearer <ib:ip6gre0>
[ 2279.778860][  T527] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2279.802581][  T532] bond73: (slave ): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 2279.809885][  T532] bond73: (slave ): Enslaving as an active interface with an up link
[ 2279.812967][  T532] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[ 2279.821600][ T5272]  speed is unknown, defaulting to 1000
[ 2279.823606][T22233]  speed is unknown, defaulting to 1000
[ 2279.825361][T22233] sy2: Port: 1 Link ACTIVE
[ 2279.970669][  T556] can: request_module (can-proto-3) failed.
[ 2280.010362][  T565] netlink: 'syz.0.40571': attribute type 1 has an invalid length.
[ 2280.040761][  T563] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 2280.075339][  T568] block nbd0: not configured, cannot reconfigure
[ 2280.228568][  T588] bridge47: entered promiscuous mode
[ 2280.230576][  T588] bridge47: entered allmulticast mode
[ 2280.277266][  T586] block nbd0: server does not support multiple connections per device.
[ 2280.280654][  T586] block nbd0: shutting down sockets
[ 2280.754934][  T636] syzkaller1: entered promiscuous mode
[ 2280.756846][  T636] syzkaller1: entered allmulticast mode
[ 2280.765258][ T5823] tipc: Subscription rejected, illegal request
[ 2280.810718][  T643] syzkaller1: left promiscuous mode
[ 2280.812843][  T643] syzkaller1: left allmulticast mode
[ 2280.855748][  T646] veth1_to_team: Caught tx_queue_len zero misconfig
[ 2281.469899][  T696] netlink: 'syz.1.40614': attribute type 1 has an invalid length.
[ 2281.496795][  T696] 8021q: adding VLAN 0 to HW filter on device bond87
[ 2281.803930][  T704] x_tables: duplicate underflow at hook 1
[ 2281.880548][  T725] syzkaller0: left promiscuous mode
[ 2281.882631][  T725] syzkaller0: left allmulticast mode
[ 2281.885444][  T725] tipc: Resetting bearer <eth:syzkaller0>
[ 2281.888879][  T725] TC_ACT_REPEAT abuse ?
[ 2281.892461][  T724] tipc: Resetting bearer <eth:syzkaller0>
[ 2281.971945][  T735] __nla_validate_parse: 23 callbacks suppressed
[ 2281.971963][  T735] netlink: 9 bytes leftover after parsing attributes in process `syz.2.40625'.
[ 2281.977687][  T735] netlink: 9 bytes leftover after parsing attributes in process `syz.2.40625'.
[ 2282.444360][  T775] netlink: 36 bytes leftover after parsing attributes in process `syz.1.40628'.
[ 2282.548396][  T785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40630'.
[ 2282.766371][  T802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.40633'.
[ 2282.789290][T25345] tipc: Resetting bearer <eth:syzkaller0>
[ 2282.994894][  T832] netlink: 88 bytes leftover after parsing attributes in process `syz.0.40640'.
[ 2283.000120][  T832] netlink: 24 bytes leftover after parsing attributes in process `syz.0.40640'.
[ 2283.026569][  T835] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[ 2283.037096][  T835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.40642'.
[ 2283.054017][  T835] veth83: entered promiscuous mode
[ 2283.318620][  T873] netlink: 'syz.1.40651': attribute type 3 has an invalid length.
[ 2283.320902][  T873] netlink: 772 bytes leftover after parsing attributes in process `syz.1.40651'.
[ 2283.323574][  T873] netlink: 'syz.1.40651': attribute type 3 has an invalid length.
[ 2283.328118][  T873] netlink: 772 bytes leftover after parsing attributes in process `syz.1.40651'.
[ 2283.473407][  T898] ip6_vti0: entered allmulticast mode
[ 2284.774148][ T1027] validate_nla: 1 callbacks suppressed
[ 2284.774169][ T1027] netlink: 'syz.1.40698': attribute type 1 has an invalid length.
[ 2284.793981][ T1027] 8021q: adding VLAN 0 to HW filter on device bond88
[ 2286.704626][ T1146] sctp: [Deprecated]: syz.1.40730 (pid 1146) Use of int in maxseg socket option.
[ 2286.704626][ T1146] Use struct sctp_assoc_value instead
[ 2286.815475][ T1158] xt_hashlimit: overflow, rate too high: 0
[ 2287.045588][ T1175] IPVS: length: 15 != 1751912768
[ 2287.048137][ T1175] __nla_validate_parse: 19 callbacks suppressed
[ 2287.048147][ T1175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.40740'.
[ 2287.052821][ T1176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.40740'.
[ 2287.283917][ T1185] netlink: 160 bytes leftover after parsing attributes in process `syz.0.40744'.
[ 2287.287079][ T1186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.40744'.
[ 2287.366085][ T1191] x_tables: duplicate underflow at hook 3
[ 2287.368920][ T1191] x_tables: duplicate underflow at hook 3
[ 2287.485074][ T1196] netlink: 128 bytes leftover after parsing attributes in process `syz.0.40747'.
[ 2287.489569][ T1196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40747'.
[ 2287.518146][ T1196] wg1 speed is unknown, defaulting to 1000
[ 2287.642989][ T1196]  speed is unknown, defaulting to 1000
[ 2288.020130][ T1225] netlink: 24 bytes leftover after parsing attributes in process `syz.0.40754'.
[ 2288.042593][ T1230] xt_TCPMSS: Only works on TCP SYN packets
[ 2288.524693][ T1239] netlink: 28 bytes leftover after parsing attributes in process `syz.1.40759'.
[ 2288.850337][ T1254] netlink: 332 bytes leftover after parsing attributes in process `syz.1.40763'.
[ 2288.853569][ T1254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40763'.
[ 2288.863821][ T1254] wireguard2: entered promiscuous mode
[ 2288.866060][ T1254] wireguard2: entered allmulticast mode
[ 2289.244113][ T1289] block nbd0: not configured, cannot reconfigure
[ 2289.293022][ T1293] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 2289.547776][ T1318] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 2290.635105][ T1378] netlink: 'syz.2.40804': attribute type 4 has an invalid length.
[ 2290.636723][ T1379] netlink: 'syz.2.40804': attribute type 4 has an invalid length.
[ 2290.765815][ T1382] netlink: 'syz.1.40805': attribute type 1 has an invalid length.
[ 2290.769327][ T1381] netlink: 'syz.1.40805': attribute type 1 has an invalid length.
[ 2290.985313][ T1394] veth93: entered promiscuous mode
[ 2291.230382][ T1414] netlink: 'syz.0.40814': attribute type 1 has an invalid length.
[ 2291.245666][ T1414] 8021q: adding VLAN 0 to HW filter on device bond74
[ 2291.256628][ T1414] netlink: 'syz.0.40814': attribute type 1 has an invalid length.
[ 2291.263644][ T1417] bond74: (slave veth113): Enslaving as an active interface with a down link
[ 2291.277890][ T1417] bond74: (slave veth115): Enslaving as an active interface with a down link
[ 2291.287414][ T1418] 8021q: adding VLAN 0 to HW filter on device batadv2
[ 2291.292617][ T1418] bond74: (slave batadv2): making interface the new active one
[ 2291.297395][ T1418] batadv2: entered promiscuous mode
[ 2291.299732][ T1418] bond74: (slave batadv2): Enslaving as an active interface with an up link
[ 2291.313711][ T1417] bond74: (slave veth117): Enslaving as an active interface with a down link
[ 2291.324152][ T1419] syzkaller1: entered promiscuous mode
[ 2291.325774][ T1419] syzkaller1: entered allmulticast mode
[ 2291.395233][ T1426] syzkaller1: left promiscuous mode
[ 2291.397107][ T1426] syzkaller1: left allmulticast mode
[ 2291.732819][ T1455] tipc: Resetting bearer <eth:syzkaller0>
[ 2291.741018][ T1455] netlink: 'syz.2.40828': attribute type 1 has an invalid length.
[ 2291.744086][ T1455] netlink: 'syz.2.40828': attribute type 1 has an invalid length.
[ 2291.796155][ T1454] tipc: Resetting bearer <eth:syzkaller0>
[ 2292.011838][T30131] tipc: Resetting bearer <eth:syzkaller0>
[ 2292.063426][ T1491] netlink: 'syz.1.40840': attribute type 3 has an invalid length.
[ 2292.068769][ T1491] netlink: 'syz.1.40840': attribute type 3 has an invalid length.
[ 2292.457601][ T1548] __nla_validate_parse: 21 callbacks suppressed
[ 2292.457614][ T1548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40860'.
[ 2292.478702][ T1550] 8021q: VLANs not supported on lo
[ 2292.531387][ T1548] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2292.605923][ T1556] xt_hashlimit: size too large, truncated to 1048576
[ 2292.662693][ T1562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.40862'.
[ 2292.752393][ T1570] syzkaller1: entered allmulticast mode
[ 2292.851651][ T1583] x_tables: duplicate underflow at hook 4
[ 2292.983795][ T1590] syzkaller1: left allmulticast mode
[ 2293.191288][ T1617] netlink: 27 bytes leftover after parsing attributes in process `syz.0.40882'.
[ 2293.196085][ T1617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40882'.
[ 2293.353188][ T1633] ipt_ECN: cannot use operation on non-tcp rule
[ 2293.443321][ T1644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40892'.
[ 2293.497817][ T1657] netlink: 64 bytes leftover after parsing attributes in process `syz.2.40895'.
[ 2293.500464][ T1657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.40895'.
[ 2293.578878][ T1665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40897'.
[ 2293.578893][ T1663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40897'.
[ 2293.662755][ T1668] Unsupported ieee802154 address type: 0
[ 2293.671516][ T1670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40899'.
[ 2293.808678][ T1685] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check.
[ 2293.912312][ T1700] xt_policy: neither incoming nor outgoing policy selected
[ 2294.841628][ T1767] 8021q: adding VLAN 0 to HW filter on device bond78
[ 2294.880358][ T1767] veth85: entered allmulticast mode
[ 2294.886484][ T1767] bond78: (slave veth85): Enslaving as an active interface with an up link
[ 2294.898187][ T1767] bond78 (unregistering): (slave veth85): Releasing backup interface
[ 2294.904809][ T1767] bond78 (unregistering): Released all slaves
[ 2295.065390][ T1780] openvswitch: netlink: Key type 769 is out of range max 32
[ 2295.280582][ T1797] bridge70: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[ 2295.290045][ T1797] bridge71: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[ 2295.294708][ T1799] tipc: Resetting bearer <eth:syzkaller0>
[ 2295.329861][ T1799] syzkaller0: entered promiscuous mode
[ 2295.331871][ T1799] syzkaller0: entered allmulticast mode
[ 2295.334043][ T1799] tipc: Resetting bearer <eth:syzkaller0>
[ 2295.357249][ T1799] tipc: Resetting bearer <eth:syzkaller0>
[ 2295.360207][ T1799] tipc: Resetting bearer <eth:syzkaller0>
[ 2295.366593][ T1798] tipc: Resetting bearer <eth:syzkaller0>
[ 2295.377229][ T1798] tipc: Resetting bearer <eth:syzkaller0>
[ 2295.381605][ T1798] tipc: Resetting bearer <eth:syzkaller0>
[ 2295.857490][ T7042] tipc: Resetting bearer <eth:syzkaller0>
[ 2298.510835][ T1824] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2298.652715][ T1860] validate_nla: 2 callbacks suppressed
[ 2298.652726][ T1860] netlink: 'syz.0.40965': attribute type 1 has an invalid length.
[ 2298.660862][ T1866] 8021q: VLANs not supported on syzkaller1
[ 2298.662634][ T1860] __nla_validate_parse: 13 callbacks suppressed
[ 2298.662648][ T1860] netlink: 276 bytes leftover after parsing attributes in process `syz.0.40965'.
[ 2298.779902][ T1876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40969'.
[ 2298.854944][ T1882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40973'.
[ 2298.866077][ T1884] tipc: Resetting bearer <eth:syzkaller0>
[ 2298.908934][ T1883] tipc: Resetting bearer <eth:syzkaller0>
[ 2299.037583][ T1908] syzkaller1: entered promiscuous mode
[ 2299.039261][ T1908] syzkaller1: entered allmulticast mode
[ 2299.102223][ T1911] syzkaller1: left promiscuous mode
[ 2299.104005][ T1911] syzkaller1: left allmulticast mode
[ 2299.122820][ T1915] netlink: 24 bytes leftover after parsing attributes in process `syz.2.40983'.
[ 2299.182429][ T1920] can: request_module (can-proto-0) failed.
[ 2299.394390][ T1929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.40988'.
[ 2299.398862][ T1930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40989'.
[ 2299.574093][ T1942] netlink: 64 bytes leftover after parsing attributes in process `syz.1.40993'.
[ 2299.631423][ T1943] netlink: 68 bytes leftover after parsing attributes in process `syz.1.40993'.
[ 2299.921328][T30131] tipc: Resetting bearer <eth:syzkaller0>
[ 2300.364918][ T1967] tipc: Resetting bearer <eth:syzkaller0>
[ 2300.444813][ T1967] 0: reclassify loop, rule prio 0, protocol 800
[ 2300.459607][ T1966] tipc: Resetting bearer <eth:syzkaller0>
[ 2300.523771][ T1974] netlink: 24 bytes leftover after parsing attributes in process `syz.2.41004'.
[ 2300.637049][ T1991] netlink: 'syz.1.41010': attribute type 1 has an invalid length.
[ 2300.704970][ T1998] netlink: 84 bytes leftover after parsing attributes in process `syz.1.41013'.
[ 2300.928722][T30131] tipc: Resetting bearer <eth:syzkaller0>
[ 2300.975810][ T2027] 8021q: adding VLAN 0 to HW filter on device bond90
[ 2301.016600][ T2027] 8021q: adding VLAN 0 to HW filter on device bond91
[ 2301.027687][ T2027] bond90: (slave bond91): Enslaving as an active interface with an up link
[ 2301.041298][ T2027] bond90 (unregistering): (slave bond91): Releasing backup interface
[ 2301.046561][ T2027] bond90 (unregistering): Released all slaves
[ 2301.178244][ T2042] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[ 2301.371108][ T2055] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048)
[ 2301.463430][ T2062] tipc: Enabling of bearer <ib:team0> rejected, max 3 bearers permitted
[ 2302.319194][T25345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2302.321537][T25345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2302.458298][   T12] batadv2: left promiscuous mode
[ 2302.649661][ T2137] sctp: [Deprecated]: syz.2.41058 (pid 2137) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2302.649661][ T2137] Use struct sctp_sack_info instead
[ 2302.655054][ T2137] netlink: 'syz.2.41058': attribute type 1 has an invalid length.
[ 2303.649376][ T2202] tipc: Resetting bearer <eth:syzkaller0>
[ 2303.670257][ T2201] tipc: Resetting bearer <eth:syzkaller0>
[ 2303.969916][ T2235] netlink: 'syz.1.41092': attribute type 1 has an invalid length.
[ 2304.004851][ T2235] bond90: (slave bridge48): making interface the new active one
[ 2304.008032][ T2235] bond90: (slave bridge48): Enslaving as an active interface with an up link
[ 2304.019060][ T2235] bond90: (slave vlan12): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[ 2304.045366][ T2243] __nla_validate_parse: 7 callbacks suppressed
[ 2304.045377][ T2243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.41095'.
[ 2304.050696][ T2243] netlink: 'syz.2.41095': attribute type 1 has an invalid length.
[ 2304.053034][ T2243] netlink: 'syz.2.41095': attribute type 2 has an invalid length.
[ 2304.056307][ T2244] bond53: entered allmulticast mode
[ 2304.243271][ T2265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.41101'.
[ 2304.444693][ T2286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.41105'.
[ 2304.713357][T30128] tipc: Resetting bearer <eth:syzkaller0>
[ 2304.876156][ T2337] wg1: Caught tx_queue_len zero misconfig
[ 2304.882547][ T2331] netlink: 24 bytes leftover after parsing attributes in process `syz.1.41118'.
[ 2304.928137][ T2331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41118'.
[ 2304.951381][ T2341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41120'.
[ 2304.979425][ T2331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41118'.
[ 2305.129325][ T2368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.41129'.
[ 2305.155862][ T2370] team_slave_0: Caught tx_queue_len zero misconfig
[ 2305.254981][ T2383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.41135'.
[ 2305.273742][ T2388] netlink: 'syz.0.41137': attribute type 1 has an invalid length.
[ 2305.289466][ T2388] bond75: option mode: invalid value (132)
[ 2305.297413][ T2388] bond75 (unregistering): Released all slaves
[ 2305.341829][ T2402] netlink: 28 bytes leftover after parsing attributes in process `syz.0.41137'.
[ 2308.456138][ T2419] xt_hashlimit: max too large, truncated to 1048576
[ 2308.571304][ T2428] wg1 speed is unknown, defaulting to 1000
[ 2308.808527][ T2428]  speed is unknown, defaulting to 1000
[ 2309.226831][ T2488] batadv_slave_1: entered promiscuous mode
[ 2309.233197][ T2486] batadv_slave_1: left promiscuous mode
[ 2312.485743][ T2527] __nla_validate_parse: 2 callbacks suppressed
[ 2312.485763][ T2527] netlink: 24 bytes leftover after parsing attributes in process `syz.0.41175'.
[ 2312.644616][ T2548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41179'.
[ 2312.690589][ T2566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41183'.
[ 2312.902559][ T2585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.41188'.
[ 2313.018189][ T2587] netlink: 16 bytes leftover after parsing attributes in process `syz.2.41190'.
[ 2313.203052][ T2607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.41196'.
[ 2313.205685][ T2607] netlink: 20 bytes leftover after parsing attributes in process `syz.2.41196'.
[ 2313.323371][ T2621] netlink: 24 bytes leftover after parsing attributes in process `syz.2.41200'.
[ 2313.361360][ T2623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41201'.
[ 2313.366814][ T2623] netlink: 24 bytes leftover after parsing attributes in process `syz.1.41201'.
[ 2314.716789][ T2720] block nbd0: not configured, cannot reconfigure
[ 2315.137371][ T2762] syzkaller1: entered allmulticast mode
[ 2315.203055][ T2767] syzkaller1: left allmulticast mode
[ 2315.666855][ T2812] netlink: 'syz.2.41250': attribute type 27 has an invalid length.
[ 2315.835850][ T2832] bridge72: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[ 2315.997074][ T2850] batadv_slave_0: entered promiscuous mode
[ 2316.003471][ T2850] batadv_slave_0: entered allmulticast mode
[ 2316.009516][ T2854] mac80211_hwsim hwsim109 wlan0: Caught tx_queue_len zero misconfig
[ 2316.382802][ T2896] wg1 speed is unknown, defaulting to 1000
[ 2316.565763][ T2896]  speed is unknown, defaulting to 1000
[ 2318.079381][ T3000] IPVS: set_ctl: invalid protocol: 221 172.30.1.3:20000
[ 2319.990170][ T2982] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2320.091684][ T3012] sctp: [Deprecated]: syz.0.41293 (pid 3012) Use of int in max_burst socket option deprecated.
[ 2320.091684][ T3012] Use struct sctp_assoc_value instead
[ 2320.154082][ T3014] netlink: 'syz.2.41294': attribute type 21 has an invalid length.
[ 2320.158169][ T3014] __nla_validate_parse: 12 callbacks suppressed
[ 2320.158178][ T3014] netlink: 128 bytes leftover after parsing attributes in process `syz.2.41294'.
[ 2320.166097][ T3014] netlink: 3 bytes leftover after parsing attributes in process `syz.2.41294'.
[ 2320.215066][ T3022] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 2320.226170][ T3023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.41297'.
[ 2320.378259][ T3044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.41303'.
[ 2320.385319][ T3043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.41303'.
[ 2320.398573][ T3048] netlink: 16 bytes leftover after parsing attributes in process `syz.1.41306'.
[ 2320.598210][ T3061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41308'.
[ 2320.629038][ T3067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.41312'.
[ 2320.632930][ T3067] netlink: 28 bytes leftover after parsing attributes in process `syz.0.41312'.
[ 2320.818648][ T3081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.41318'.
[ 2320.871912][ T3085] bond_slave_1: entered allmulticast mode
[ 2321.000810][ T3090] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2321.107843][ T3099] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2321.465509][ T3145] netlink: 'syz.0.41336': attribute type 12 has an invalid length.
[ 2321.472782][ T3145] netlink: 'syz.0.41336': attribute type 13 has an invalid length.
[ 2321.484061][ T3145] netlink: 'syz.0.41336': attribute type 12 has an invalid length.
[ 2321.487344][ T3145] netlink: 'syz.0.41336': attribute type 13 has an invalid length.
[ 2321.673181][ T3178] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[ 2322.144767][ T3253] tipc: Resetting bearer <eth:syzkaller0>
[ 2322.175965][ T3249] macsec4: entered promiscuous mode
[ 2322.177834][ T3249] veth1_macvtap: entered promiscuous mode
[ 2322.180262][ T3254] openvswitch: netlink: Actions may not be safe on all matching packets
[ 2322.182772][ T3253] openvswitch: netlink: Actions may not be safe on all matching packets
[ 2322.188744][ T3252] tipc: Resetting bearer <eth:syzkaller0>
[ 2322.440142][ T3280] xt_policy: output policy not valid in PREROUTING and INPUT
[ 2322.512281][ T3288] wg1 speed is unknown, defaulting to 1000
[ 2322.552792][T30118] tipc: Resetting bearer <eth:syzkaller0>
[ 2322.632593][ T3288]  speed is unknown, defaulting to 1000
[ 2322.887749][ T3317] netlink: 'syz.0.41389': attribute type 1 has an invalid length.
[ 2322.890314][ T3317] netlink: 'syz.0.41389': attribute type 2 has an invalid length.
[ 2322.968168][ T3324] netlink: 'syz.1.41391': attribute type 12 has an invalid length.
[ 2323.021727][ T3328] wg1 speed is unknown, defaulting to 1000
[ 2323.141317][ T3328]  speed is unknown, defaulting to 1000
[ 2323.267631][ T3347] syzkaller0: entered promiscuous mode
[ 2323.269341][ T3347] syzkaller0: entered allmulticast mode
[ 2323.359666][ T3353] veth1_macvtap: Caught tx_queue_len zero misconfig
[ 2323.415033][ T3359] 8021q: VLANs not supported on syzkaller1
[ 2323.420357][ T3359] netlink: 'syz.1.41404': attribute type 1 has an invalid length.
[ 2323.452712][ T3359] bond92: (slave vxcan2): The slave device specified does not support setting the MAC address
[ 2323.457727][ T3359] bond92: (slave vxcan2): Error -95 calling set_mac_address
[ 2323.602436][ T3373] 8021q: VLANs not supported on sit0
[ 2323.818700][ T3392] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[ 2323.941922][ T3403] netlink: 'syz.0.41419': attribute type 4 has an invalid length.
[ 2324.218207][ T3422] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0
[ 2324.843529][ T3484] netlink: 'syz.0.41447': attribute type 1 has an invalid length.
[ 2325.145408][ T3507] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[ 2325.188865][ T3510] gre0: left promiscuous mode
[ 2325.190315][ T3510] gre0: left allmulticast mode
[ 2325.209825][ T3510] team0: left promiscuous mode
[ 2325.211280][ T3510] macvlan3: left promiscuous mode
[ 2325.215991][ T3510] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2325.243216][ T3510] 8021q: adding VLAN 0 to HW filter on device bond93
[ 2325.369144][ T3517] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2325.841561][ T3554] __nla_validate_parse: 28 callbacks suppressed
[ 2325.841577][ T3554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.41468'.
[ 2326.020664][ T3572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.41475'.
[ 2326.210663][ T3583] wg1 speed is unknown, defaulting to 1000
[ 2326.380794][ T3583]  speed is unknown, defaulting to 1000
[ 2326.544207][ T3594] veth1_to_hsr: Caught tx_queue_len zero misconfig
[ 2326.660852][ T3598] pim6reg1: entered allmulticast mode
[ 2326.874913][ T3606] wg1 speed is unknown, defaulting to 1000
[ 2326.977699][ T3612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.41488'.
[ 2327.097828][ T3606]  speed is unknown, defaulting to 1000
[ 2327.360698][ T3633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41494'.
[ 2327.510853][ T3643] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[ 2327.759445][ T3673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.41506'.
[ 2327.810640][ T3684] nlmon0: Caught tx_queue_len zero misconfig
[ 2327.859491][ T3683] netlink: 548 bytes leftover after parsing attributes in process `syz.2.41508'.
[ 2327.909707][T30118] wlan1: Trigger new scan to find an IBSS to join
[ 2328.064213][ T3699] netlink: 24 bytes leftover after parsing attributes in process `syz.0.41512'.
[ 2328.175702][ T3706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41515'.
[ 2328.192321][ T3704] wg1 speed is unknown, defaulting to 1000
[ 2328.438136][ T3722] validate_nla: 5 callbacks suppressed
[ 2328.438153][ T3722] netlink: 'syz.1.41517': attribute type 1 has an invalid length.
[ 2328.443118][ T3722] netlink: 96 bytes leftover after parsing attributes in process `syz.1.41517'.
[ 2328.456514][ T3722] netlink: 'syz.1.41517': attribute type 1 has an invalid length.
[ 2328.459188][ T3722] netlink: 'syz.1.41517': attribute type 8 has an invalid length.
[ 2328.461385][ T3722] netlink: 606 bytes leftover after parsing attributes in process `syz.1.41517'.
[ 2328.614050][ T3704]  speed is unknown, defaulting to 1000
[ 2328.631939][ T3730] sctp: [Deprecated]: syz.0.41519 (pid 3730) Use of int in maxseg socket option.
[ 2328.631939][ T3730] Use struct sctp_assoc_value instead
[ 2329.206018][ T3788] netlink: 'syz.0.41535': attribute type 62 has an invalid length.
[ 2329.385972][ T3811] xt_bpf: check failed: parse error
[ 2329.808845][ T3858] batadv_slave_1: entered promiscuous mode
[ 2329.813209][ T3857] batadv_slave_1: left promiscuous mode
[ 2330.030247][ T3867] syzkaller0: entered promiscuous mode
[ 2330.031905][ T3867] syzkaller0: entered allmulticast mode
[ 2330.035587][ T3867] tc action pedit offset must be on 32 bit boundaries
[ 2330.722982][ T3904] netlink: 'syz.2.41574': attribute type 1 has an invalid length.
[ 2330.726973][ T3904] netlink: 'syz.2.41574': attribute type 1 has an invalid length.
[ 2330.866535][ T7042] wlan1: Trigger new scan to find an IBSS to join
[ 2331.120246][ T3933] __nla_validate_parse: 15 callbacks suppressed
[ 2331.120257][ T3933] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.41583'.
[ 2331.151756][ T3934] xt_CT: No such helper "snmp_trap"
[ 2331.275247][ T3952] netlink: 68 bytes leftover after parsing attributes in process `syz.1.41589'.
[ 2331.479891][ T3965] netlink: 'syz.1.41594': attribute type 1 has an invalid length.
[ 2331.482227][ T3965] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2331.638631][ T3973] netlink: 'syz.1.41596': attribute type 29 has an invalid length.
[ 2331.646831][ T3973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41596'.
[ 2331.778658][ T3976] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2332.150058][ T4012] openvswitch: netlink: IPv4 tun info is not correct
[ 2332.295325][ T4025] netlink: 36 bytes leftover after parsing attributes in process `syz.2.41612'.
[ 2332.315734][ T4027] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[ 2332.320843][ T4027] pim6reg1: entered promiscuous mode
[ 2332.322901][ T4027] pim6reg1: entered allmulticast mode
[ 2332.522176][ T4046] xt_cgroup: invalid path, errno=-2
[ 2332.528166][ T4056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.41616'.
[ 2332.688837][ T4064] netlink: 'syz.0.41622': attribute type 2 has an invalid length.
[ 2332.691161][ T4064] netlink: 'syz.0.41622': attribute type 1 has an invalid length.
[ 2332.694032][ T4064] netlink: 108 bytes leftover after parsing attributes in process `syz.0.41622'.
[ 2333.465927][ T4080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.41628'.
[ 2333.503349][ T4083] bond78 (unregistering): Released all slaves
[ 2333.917039][T30128] wlan1: Trigger new scan to find an IBSS to join
[ 2334.857425][T25345] wlan1: Creating new IBSS network, BSSID 42:9b:9e:4c:b0:1e
[ 2335.455072][ T4040] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2335.654859][ T4110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41639'.
[ 2335.694901][ T4122] tipc: Resetting bearer <eth:syzkaller0>
[ 2335.758575][ T4121] tipc: Resetting bearer <eth:syzkaller0>
[ 2335.830780][ T4132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41647'.
[ 2335.833650][ T4132] netlink: 312 bytes leftover after parsing attributes in process `syz.1.41647'.
[ 2335.868477][ T7042] tipc: Resetting bearer <eth:syzkaller0>
[ 2336.107224][ T4157] openvswitch: netlink: Invalid VLAN frame
[ 2336.306915][ T4167] __nla_validate_parse: 4 callbacks suppressed
[ 2336.306926][ T4167] netlink: 20 bytes leftover after parsing attributes in process `syz.1.41661'.
[ 2339.292667][ T4171] netlink: 'syz.0.41662': attribute type 1 has an invalid length.
[ 2339.294967][ T4171] netlink: 'syz.0.41662': attribute type 3 has an invalid length.
[ 2339.540625][ T4194] netlink: 72 bytes leftover after parsing attributes in process `syz.2.41672'.
[ 2339.543560][ T4194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.41672'.
[ 2339.546695][ T4194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.41672'.
[ 2339.566024][ T4198] netlink: 'syz.0.41673': attribute type 10 has an invalid length.
[ 2339.570191][ T4198] bridge42: entered promiscuous mode
[ 2339.575127][ T4198] : (slave bridge42): Enslaving as an active interface with a down link
[ 2339.640891][ T4210] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.41675'.
[ 2339.668669][ T4198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41673'.
[ 2339.884260][ T4235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41681'.
[ 2339.958165][ T4240] netlink: 'syz.2.41683': attribute type 9 has an invalid length.
[ 2339.966928][ T4240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.41683'.
[ 2340.018037][ T4246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41682'.
[ 2340.031367][ T4249] netlink: 14 bytes leftover after parsing attributes in process `syz.0.41685'.
[ 2341.330072][ T4320] __nla_validate_parse: 7 callbacks suppressed
[ 2341.330084][ T4320] netlink: 28 bytes leftover after parsing attributes in process `syz.0.41700'.
[ 2341.334974][ T4320] netlink: 28 bytes leftover after parsing attributes in process `syz.0.41700'.
[ 2341.339291][ T4320] netlink: 28 bytes leftover after parsing attributes in process `syz.0.41700'.
[ 2341.344315][ T4320] netlink: 28 bytes leftover after parsing attributes in process `syz.0.41700'.
[ 2341.406760][ T4326] netlink: 9 bytes leftover after parsing attributes in process `syz.0.41702'.
[ 2341.420694][ T4326] netlink: 9 bytes leftover after parsing attributes in process `syz.0.41702'.
[ 2341.578975][ T4341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41706'.
[ 2341.850149][ T4358] netlink: 20 bytes leftover after parsing attributes in process `syz.0.41709'.
[ 2341.861749][ T4358] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 2341.991959][ T4373] tipc: Resetting bearer <eth:syzkaller0>
[ 2342.005253][ T4377] tipc: Resetting bearer <eth:syzkaller0>
[ 2342.260093][ T4406] netlink: 'syz.0.41719': attribute type 11 has an invalid length.
[ 2342.312615][ T4408] x_tables: duplicate underflow at hook 3
[ 2342.671693][ T4454] netlink: 180 bytes leftover after parsing attributes in process `syz.0.41733'.
[ 2342.679907][ T4454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41733'.
[ 2342.725093][T31440] tipc: Resetting bearer <eth:syzkaller0>
[ 2343.002285][ T4492] IPVS: length: 15 != 8
[ 2343.031895][ T4491] mac80211_hwsim hwsim109 wlan0: left promiscuous mode
[ 2343.033914][ T4491] mac80211_hwsim hwsim109 wlan0: left allmulticast mode
[ 2343.130147][ T4509] syzkaller0: left promiscuous mode
[ 2343.132619][ T4509] syzkaller0: left allmulticast mode
[ 2343.225655][ T4521] netlink: 'syz.0.41750': attribute type 1 has an invalid length.
[ 2343.257318][ T4521] bond76: entered promiscuous mode
[ 2343.260562][ T4521] 8021q: adding VLAN 0 to HW filter on device bond76
[ 2343.269644][ T4521] bond76: entered allmulticast mode
[ 2343.283513][ T4522] bond76: (slave bridge75): making interface the new active one
[ 2343.287802][ T4522] bridge75: entered promiscuous mode
[ 2343.289974][ T4522] bridge75: entered allmulticast mode
[ 2343.292854][ T4522] bond76: (slave bridge75): Enslaving as an active interface with an up link
[ 2343.313324][ T4530] netlink: 'syz.1.41753': attribute type 16 has an invalid length.
[ 2343.746158][ T4587] syzkaller1: entered promiscuous mode
[ 2343.749043][ T4587] syzkaller1: entered allmulticast mode
[ 2343.809419][ T4596] syzkaller1: left promiscuous mode
[ 2343.811054][ T4596] syzkaller1: left allmulticast mode
[ 2343.869836][ T4603] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[ 2344.364117][ T4651] tipc: Enabling of bearer <eth:lo> rejected, max 3 bearers permitted
[ 2344.766150][ T4687] dvmrp0: left allmulticast mode
[ 2344.777440][ T4687] bond31: left allmulticast mode
[ 2344.779062][ T4687] dvmrp8: left allmulticast mode
[ 2344.803705][ T4695] netlink: 'syz.0.41794': attribute type 29 has an invalid length.
[ 2345.008716][ T4717] xt_recent: Unsupported userspace flags (000000b1)
[ 2345.287225][ T4750] syzkaller1: entered promiscuous mode
[ 2345.288945][ T4750] syzkaller1: entered allmulticast mode
[ 2345.354024][ T4756] syzkaller1: left promiscuous mode
[ 2345.361003][ T4756] syzkaller1: left allmulticast mode
[ 2346.017941][ T4819] netlink: 'syz.0.41825': attribute type 1 has an invalid length.
[ 2346.429493][ T4851] geneve7: entered promiscuous mode
[ 2346.432905][ T5823] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 51993 - 0
[ 2346.436001][ T5823] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 51993 - 0
[ 2346.440539][ T5823] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 51993 - 0
[ 2346.443389][ T5823] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 51993 - 0
[ 2346.646947][ T4868] __nla_validate_parse: 17 callbacks suppressed
[ 2346.646958][ T4868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41839'.
[ 2346.736991][ T4876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41842'.
[ 2346.891484][ T4883] wg1 speed is unknown, defaulting to 1000
[ 2347.162299][ T4883]  speed is unknown, defaulting to 1000
[ 2347.303657][ T4901] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.41845'.
[ 2347.553051][ T4917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41848'.
[ 2348.215940][ T4952] netlink: 180 bytes leftover after parsing attributes in process `syz.0.41855'.
[ 2348.446073][ T4798] Set syz1 is full, maxelem 65536 reached
[ 2348.456877][ T4952] --map-set only usable from mangle table
[ 2348.595706][ T4983] tipc: Resetting bearer <eth:syzkaller0>
[ 2348.655423][ T4981] tipc: Resetting bearer <eth:syzkaller0>
[ 2348.865976][ T5021] netlink: 'syz.2.41869': attribute type 15 has an invalid length.
[ 2348.895017][T31440] tipc: Resetting bearer <eth:syzkaller0>
[ 2348.922382][ T5028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.41871'.
[ 2348.936032][ T5028] workqueue: Failed to create a rescuer kthread for wq "bond78": -EINTR
[ 2349.053094][ T5046] x_tables: ip_tables: icmp match: only valid for protocol 1
[ 2349.219771][ T5067] netlink: 504 bytes leftover after parsing attributes in process `syz.2.41880'.
[ 2349.338302][ T5076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.41884'.
[ 2349.341758][ T5076] netlink: 24 bytes leftover after parsing attributes in process `syz.2.41884'.
[ 2349.402013][ T5086] xt_hashlimit: overflow, rate too high: 0
[ 2349.433413][ T5089] netlink: 16 bytes leftover after parsing attributes in process `syz.2.41887'.
[ 2349.560986][ T5100] bond81: entered allmulticast mode
[ 2353.583639][ T5325] syzkaller1: entered promiscuous mode
[ 2353.591837][ T5325] syzkaller1: entered allmulticast mode
[ 2353.794168][ T5338] syzkaller1: left promiscuous mode
[ 2353.795761][ T5338] syzkaller1: left allmulticast mode
[ 2353.817564][ T5338] 8021q: VLANs not supported on syzkaller1
[ 2354.089161][ T5367] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[ 2354.253505][ T5384] __nla_validate_parse: 4 callbacks suppressed
[ 2354.253514][ T5384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41919'.
[ 2354.260373][ T5384] netlink: 'syz.1.41919': attribute type 30 has an invalid length.
[ 2354.268918][ T5384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41919'.
[ 2354.272687][ T5384] netlink: 'syz.1.41919': attribute type 30 has an invalid length.
[ 2354.365297][ T5394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41920'.
[ 2354.532756][ T5398] wg1 speed is unknown, defaulting to 1000
[ 2354.872559][ T5398]  speed is unknown, defaulting to 1000
[ 2355.248833][ T5445] xt_hashlimit: size too large, truncated to 1048576
[ 2355.408118][ T5457] sctp: [Deprecated]: syz.2.41933 (pid 5457) Use of int in max_burst socket option.
[ 2355.408118][ T5457] Use struct sctp_assoc_value instead
[ 2355.713990][ T5493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.41941'.
[ 2355.735238][ T5493] netlink: 44 bytes leftover after parsing attributes in process `syz.2.41941'.
[ 2355.799579][ T5500] netlink: 'syz.2.41943': attribute type 1 has an invalid length.
[ 2355.802500][ T5500] netlink: 'syz.2.41943': attribute type 2 has an invalid length.
[ 2356.221517][ T5543] netlink: 68 bytes leftover after parsing attributes in process `syz.2.41952'.
[ 2356.318302][ T5563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41961'.
[ 2356.561354][ T5590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.41968'.
[ 2356.565415][ T5590] block nbd0: Unsupported socket: should be TCP or UNIX.
[ 2357.059903][ T5634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41980'.
[ 2357.065362][ T5634] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[ 2357.353677][ T5665] netlink: 180 bytes leftover after parsing attributes in process `syz.2.41988'.
[ 2357.505289][ T5683] syzkaller1: entered promiscuous mode
[ 2357.511781][ T5683] syzkaller1: entered allmulticast mode
[ 2357.515122][ T5683] syzkaller1: left promiscuous mode
[ 2357.518385][ T5683] syzkaller1: left allmulticast mode
[ 2357.922928][ T5709] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[ 2357.925929][ T5709] syzkaller0: entered promiscuous mode
[ 2357.928757][ T5709] syzkaller0: entered allmulticast mode
[ 2358.283759][ T5751] x_tables: unsorted entry at hook 3
[ 2358.312291][ T5755] ip6gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 2358.374394][ T5760] vlan0: entered promiscuous mode
[ 2358.375957][ T5760] bridge0: entered promiscuous mode
[ 2358.387306][ T5763] openvswitch: netlink: IP tunnel dst address not specified
[ 2358.414620][ T5766] netlink: 'syz.2.42023': attribute type 1 has an invalid length.
[ 2358.472662][ T5777] netlink: 'syz.0.42028': attribute type 2 has an invalid length.
[ 2358.474961][ T5777] netlink: 'syz.0.42028': attribute type 1 has an invalid length.
[ 2358.707210][ T5796] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 2358.709346][ T5796] IPv6: NLM_F_CREATE should be set when creating new route
[ 2358.711470][ T5796] IPv6: NLM_F_CREATE should be set when creating new route
[ 2358.713644][ T5796] IPv6: NLM_F_CREATE should be set when creating new route
[ 2358.727331][ T5796] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 2359.212163][ T5879] sock: sock_set_timeout: `syz.1.42053' (pid 5879) tries to set negative timeout
[ 2360.086072][ T5943] __nla_validate_parse: 15 callbacks suppressed
[ 2360.086088][ T5943] netlink: 540 bytes leftover after parsing attributes in process `syz.0.42058'.
[ 2360.096602][ T5943] netlink: 540 bytes leftover after parsing attributes in process `syz.0.42058'.
[ 2360.123500][ T5943] netlink: 540 bytes leftover after parsing attributes in process `syz.0.42058'.
[ 2360.126971][ T5943] netlink: 540 bytes leftover after parsing attributes in process `syz.0.42058'.
[ 2360.194933][ T5943] netlink: 540 bytes leftover after parsing attributes in process `syz.0.42058'.
[ 2360.198249][ T5943] netlink: 540 bytes leftover after parsing attributes in process `syz.0.42058'.
[ 2360.433722][ T4227] block nbd2: NBD_DISCONNECT
[ 2360.435122][ T4227] block nbd2: Send disconnect failed -32
[ 2360.439074][ T4227] block nbd2: shutting down sockets
[ 2360.539204][ T5985] tipc: Resetting bearer <eth:syzkaller0>
[ 2360.542856][ T5985] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[ 2360.551310][ T5984] tipc: Resetting bearer <eth:syzkaller0>
[ 2360.749790][ T6002] netlink: 'syz.2.42074': attribute type 1 has an invalid length.
[ 2360.904741][ T6013] netlink: 40 bytes leftover after parsing attributes in process `syz.2.42077'.
[ 2360.912851][ T6013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.42077'.
[ 2360.997577][T31440] tipc: Resetting bearer <eth:syzkaller0>
[ 2361.201641][ T6036] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.42083'.
[ 2361.361876][ T6057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.42088'.
[ 2361.469805][ T6061] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[ 2361.473022][ T6061] syzkaller0: entered promiscuous mode
[ 2361.474783][ T6061] syzkaller0: entered allmulticast mode
[ 2361.626156][ T6071] netlink: 'syz.1.42093': attribute type 1 has an invalid length.
[ 2361.631828][ T6071] syzkaller1: entered promiscuous mode
[ 2361.633622][ T6071] syzkaller1: entered allmulticast mode
[ 2361.709247][ T6075] syzkaller1: left promiscuous mode
[ 2361.711394][ T6075] syzkaller1: left allmulticast mode
[ 2362.508109][ T6159] netlink: 'syz.1.42118': attribute type 2 has an invalid length.
[ 2362.793663][ T6188] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 2363.388996][ T6260] netlink: 'syz.2.42150': attribute type 10 has an invalid length.
[ 2363.459696][ T6265] pim6reg: entered allmulticast mode
[ 2363.462179][ T6264] pim6reg: left allmulticast mode
[ 2363.725675][ T6298] netlink: 'syz.1.42162': attribute type 1 has an invalid length.
[ 2363.751010][ T6302] syzkaller1: entered promiscuous mode
[ 2363.752769][ T6302] syzkaller1: entered allmulticast mode
[ 2363.793475][ T6305] syzkaller1: left promiscuous mode
[ 2363.795199][ T6305] syzkaller1: left allmulticast mode
[ 2364.135377][ T6334] IPVS: set_ctl: invalid protocol: 0 172.30.0.3:20003
[ 2364.865184][ T6414] syzkaller1: entered promiscuous mode
[ 2364.867436][ T6414] syzkaller1: entered allmulticast mode
[ 2365.089069][ T6449] syzkaller1: left promiscuous mode
[ 2365.090728][ T6449] syzkaller1: left allmulticast mode
[ 2368.118728][ T6451] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2368.234697][ T6580] __nla_validate_parse: 28 callbacks suppressed
[ 2368.234707][ T6580] netlink: 40 bytes leftover after parsing attributes in process `syz.2.42214'.
[ 2368.299964][ T6590] netlink: 24 bytes leftover after parsing attributes in process `syz.2.42216'.
[ 2368.573528][ T6621] netlink: 'syz.2.42227': attribute type 2 has an invalid length.
[ 2368.587245][ T6621] netlink: 'syz.2.42227': attribute type 2 has an invalid length.
[ 2368.591122][ T6621] netlink: 'syz.2.42227': attribute type 2 has an invalid length.
[ 2368.593788][ T6621] netlink: 'syz.2.42227': attribute type 2 has an invalid length.
[ 2368.598167][ T6621] netlink: 'syz.2.42227': attribute type 2 has an invalid length.
[ 2368.600708][ T6621] netlink: 'syz.2.42227': attribute type 2 has an invalid length.
[ 2368.603272][ T6621] netlink: 'syz.2.42227': attribute type 2 has an invalid length.
[ 2368.606053][ T6621] netlink: 'syz.2.42227': attribute type 2 has an invalid length.
[ 2368.609239][ T6621] netlink: 'syz.2.42227': attribute type 2 has an invalid length.
[ 2368.612344][ T6621] netlink: 'syz.2.42227': attribute type 2 has an invalid length.
[ 2368.692852][ T6625] syzkaller1: entered allmulticast mode
[ 2368.755546][ T6633] syzkaller1: left allmulticast mode
[ 2369.071164][ T6677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42243'.
[ 2369.074061][ T6677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42243'.
[ 2369.111455][ T6684] netlink: 16 bytes leftover after parsing attributes in process `syz.1.42246'.
[ 2369.283919][ T6694] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2369.291993][ T6696] netlink: 24 bytes leftover after parsing attributes in process `syz.1.42250'.
[ 2369.309571][ T6696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.42250'.
[ 2369.315663][ T6698] tipc: Resetting bearer <eth:syzkaller0>
[ 2369.324511][ T6697] tipc: Resetting bearer <eth:syzkaller0>
[ 2369.407893][T30118] tipc: Resetting bearer <eth:syzkaller0>
[ 2369.754982][ T6738] netlink: 12 bytes leftover after parsing attributes in process `syz.2.42264'.
[ 2370.329443][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42265'.
[ 2373.597712][ T6771] xt_limit: Overflow, try lower: 324382443/0
[ 2373.612843][ T6776] netlink: 20 bytes leftover after parsing attributes in process `syz.2.42277'.
[ 2373.641109][ T6772] sock: sock_timestamping_bind_phc: sock not bind to device
[ 2373.668469][ T6781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.42278'.
[ 2373.783251][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.42279'.
[ 2373.787719][ T6788] netlink: 156 bytes leftover after parsing attributes in process `syz.0.42279'.
[ 2373.879414][ T6799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.42282'.
[ 2373.942968][ T6804] validate_nla: 56 callbacks suppressed
[ 2373.942986][ T6804] netlink: 'syz.2.42284': attribute type 298 has an invalid length.
[ 2374.032456][ T6808] netlink: 'syz.2.42285': attribute type 1 has an invalid length.
[ 2374.035593][ T6808] netlink: 'syz.2.42285': attribute type 3 has an invalid length.
[ 2374.041684][ T6808] netlink: 224 bytes leftover after parsing attributes in process `syz.2.42285'.
[ 2374.084952][ T6810] erspan0: entered promiscuous mode
[ 2374.088324][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42286'.
[ 2374.091204][ T6810] erspan0: left promiscuous mode
[ 2374.411986][ T6824] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2374.420868][ T6824] netlink: 32 bytes leftover after parsing attributes in process `syz.1.42291'.
[ 2374.465936][ T6828] sctp: [Deprecated]: syz.1.42294 (pid 6828) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2374.465936][ T6828] Use struct sctp_sack_info instead
[ 2374.475189][ T6828] sctp: [Deprecated]: syz.1.42294 (pid 6828) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2374.475189][ T6828] Use struct sctp_sack_info instead
[ 2374.483989][ T6828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2374.982333][ T6872] syzkaller1: entered promiscuous mode
[ 2374.983954][ T6872] syzkaller1: entered allmulticast mode
[ 2374.989737][ T6872] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4
[ 2375.043447][ T6879] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2375.065381][ T6885] netlink: 44 bytes leftover after parsing attributes in process `syz.0.42311'.
[ 2375.092624][ T6889] sctp: [Deprecated]: syz.1.42312 (pid 6889) Use of int in max_burst socket option.
[ 2375.092624][ T6889] Use struct sctp_assoc_value instead
[ 2375.151690][ T6896] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.42314'.
[ 2375.215209][ T6896] tipc: Resetting bearer <eth:vlan0>
[ 2375.289298][ T6893] syzkaller1: left promiscuous mode
[ 2375.290999][ T6893] syzkaller1: left allmulticast mode
[ 2375.897979][ T6954] netlink: 'syz.2.42333': attribute type 1 has an invalid length.
[ 2376.505464][ T7008] netlink: 'syz.1.42352': attribute type 13 has an invalid length.
[ 2377.174104][ T7039] netlink: 'syz.1.42359': attribute type 12 has an invalid length.
[ 2378.240502][ T7070] netlink: 'syz.2.42369': attribute type 6 has an invalid length.
[ 2378.252082][ T7070] netlink: 'syz.2.42369': attribute type 6 has an invalid length.
[ 2378.330527][ T7083] pim6reg1: entered promiscuous mode
[ 2378.332899][ T7083] pim6reg1: entered allmulticast mode
[ 2378.510655][ T7104] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[ 2378.586902][ T7117] netlink: 'syz.2.42378': attribute type 1 has an invalid length.
[ 2378.589214][ T7117] netlink: 'syz.2.42378': attribute type 6 has an invalid length.
[ 2378.664243][ T7129] __nla_validate_parse: 15 callbacks suppressed
[ 2378.664255][ T7129] netlink: 16 bytes leftover after parsing attributes in process `syz.1.42386'.
[ 2378.671170][ T7129] netlink: 16 bytes leftover after parsing attributes in process `syz.1.42386'.
[ 2378.674658][ T7129] netlink: 6 bytes leftover after parsing attributes in process `syz.1.42386'.
[ 2378.678681][ T7129] netlink: 16 bytes leftover after parsing attributes in process `syz.1.42386'.
[ 2378.682139][ T7129] netlink: 16 bytes leftover after parsing attributes in process `syz.1.42386'.
[ 2378.685500][ T7129] netlink: 6 bytes leftover after parsing attributes in process `syz.1.42386'.
[ 2378.729874][ T7136] hsr0: left allmulticast mode
[ 2378.731815][ T7136] bond0: left allmulticast mode
[ 2378.757294][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42389'.
[ 2378.810204][ T7143] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[ 2379.177232][ T7169] netlink: 240 bytes leftover after parsing attributes in process `syz.1.42400'.
[ 2379.237797][ T7185] validate_nla: 2 callbacks suppressed
[ 2379.237809][ T7185] netlink: 'syz.2.42403': attribute type 12 has an invalid length.
[ 2379.380615][ T7197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.42406'.
[ 2379.383506][ T7198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.42406'.
[ 2379.425105][ T7200] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[ 2379.430772][ T7200] syzkaller0: entered promiscuous mode
[ 2379.432533][ T7200] syzkaller0: entered allmulticast mode
[ 2379.454130][ T7200] ip6gretap0: entered promiscuous mode
[ 2379.455707][ T7200] ip6gretap0: entered allmulticast mode
[ 2379.457850][ T7200] macsec0: left allmulticast mode
[ 2379.459361][ T7200] ip6gretap0: left allmulticast mode
[ 2380.011079][ T7260] netlink: 'syz.0.42426': attribute type 10 has an invalid length.
[ 2380.468214][ T7307] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 2380.608594][ T7320] pimreg9: entered allmulticast mode
[ 2380.612532][ T7320] sit0: entered allmulticast mode
[ 2380.650377][ T7326] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[ 2380.759482][ T7339] x_tables: duplicate underflow at hook 2
[ 2380.762591][ T7342] netlink: 'syz.0.42455': attribute type 32 has an invalid length.
[ 2380.782596][ T7342] bond77: Setting coupled_control to off (0)
[ 2381.276509][ T7403] netlink: 'syz.0.42472': attribute type 21 has an invalid length.
[ 2381.280065][ T7403] netlink: 'syz.0.42472': attribute type 20 has an invalid length.
[ 2382.847506][ T7522] ip6tnl0: Caught tx_queue_len zero misconfig
[ 2383.043292][ T7543] ipvlan0: entered promiscuous mode
[ 2383.045970][ T7543] tipc: Resetting bearer <eth:ipvlan0>
[ 2383.240010][ T7566] netlink: 'syz.0.42525': attribute type 1 has an invalid length.
[ 2383.283560][ T7566] 8021q: adding VLAN 0 to HW filter on device bond78
[ 2383.304149][ T7566] 8021q: adding VLAN 0 to HW filter on device bond78
[ 2383.319387][ T7566] bond78: (slave geneve8): making interface the new active one
[ 2383.322111][ T7566] bond78: (slave geneve8): Enslaving as an active interface with an up link
[ 2383.324821][T12246] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[ 2383.329016][T12246] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[ 2383.335482][T12246] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[ 2383.340420][T12246] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[ 2383.541682][ T7584] wg1 speed is unknown, defaulting to 1000
[ 2383.721908][ T7584]  speed is unknown, defaulting to 1000
[ 2384.064070][ T7626] atomic_op ffff8881ca192198 conn xmit_atomic 0000000000000000
[ 2384.105288][ T7632] tipc: Resetting bearer <eth:syzkaller0>
[ 2384.127065][ T7629] tipc: Resetting bearer <eth:syzkaller0>
[ 2384.162874][ T7636] __nla_validate_parse: 87 callbacks suppressed
[ 2384.162887][ T7636] netlink: 16 bytes leftover after parsing attributes in process `syz.2.42548'.
[ 2384.212338][ T7641] netlink: 'syz.2.42550': attribute type 1 has an invalid length.
[ 2384.215257][ T7643] netlink: 28 bytes leftover after parsing attributes in process `syz.1.42549'.
[ 2384.242094][ T7641] bond78: (slave bridge69): making interface the new active one
[ 2384.244922][ T7641] bond78: (slave bridge69): Enslaving as an active interface with an up link
[ 2384.299563][ T7649] bond79: option lacp_rate: invalid value (128)
[ 2384.302875][ T7649] bond79 (unregistering): Released all slaves
[ 2384.603815][ T7676] netlink: 36 bytes leftover after parsing attributes in process `syz.2.42560'.
[ 2384.685526][ T7687] netlink: 24 bytes leftover after parsing attributes in process `syz.2.42563'.
[ 2384.801743][ T7701] x_tables: unsorted entry at hook 3
[ 2385.188731][ T7020] tipc: Resetting bearer <eth:syzkaller0>
[ 2387.688562][ T7688] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2388.110919][ T7778] syzkaller1: entered allmulticast mode
[ 2388.198986][ T7786] syzkaller1: left allmulticast mode
[ 2388.605453][ T7831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42609'.
[ 2388.792912][ T7847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.42612'.
[ 2388.851268][ T7851] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0
[ 2388.902000][ T7859] netlink: 20 bytes leftover after parsing attributes in process `syz.0.42616'.
[ 2388.909919][ T7859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.42616'.
[ 2388.949877][ T7861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.42617'.
[ 2388.949911][ T7862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.42617'.
[ 2389.485850][ T7907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42630'.
[ 2389.489675][ T7907] netlink: 52 bytes leftover after parsing attributes in process `syz.2.42630'.
[ 2389.498420][ T7907] ip6tnl17: entered allmulticast mode
[ 2389.569684][ T7925] netlink: 72 bytes leftover after parsing attributes in process `syz.1.42635'.
[ 2389.580397][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42635'.
[ 2390.742399][ T8021] bond96: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[ 2390.758855][ T8021] bond96 (unregistering): Released all slaves
[ 2390.944220][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42663'.
[ 2390.950048][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42663'.
[ 2390.960607][ T8044] syzkaller1: entered promiscuous mode
[ 2390.962700][ T8044] syzkaller1: entered allmulticast mode
[ 2391.011304][ T8057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42666'.
[ 2391.093113][ T8061] syzkaller1: left promiscuous mode
[ 2391.095184][ T8061] syzkaller1: left allmulticast mode
[ 2391.277305][ T8085] netlink: 'syz.1.42674': attribute type 15 has an invalid length.
[ 2391.279756][ T8085] netlink: 24 bytes leftover after parsing attributes in process `syz.1.42674'.
[ 2391.881845][ T8136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.42685'.
[ 2391.957161][ T8146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42688'.
[ 2392.069436][ T8154] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 2392.072442][ T8154] IPv6: NLM_F_CREATE should be set when creating new route
[ 2392.075237][ T8154] IPv6: NLM_F_CREATE should be set when creating new route
[ 2392.078032][ T8154] IPv6: NLM_F_CREATE should be set when creating new route
[ 2392.080868][ T8155] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 2392.324008][ T8170] bond96: option arp_interval: invalid value (18446744073709551615)
[ 2392.331755][ T8170] bond96: option arp_interval: allowed values 0 - 2147483647
[ 2392.337426][ T8170] bond96 (unregistering): Released all slaves
[ 2392.354488][ T8166] wg1 speed is unknown, defaulting to 1000
[ 2392.364389][ T8173] syzkaller1: entered promiscuous mode
[ 2392.366097][ T8173] syzkaller1: entered allmulticast mode
[ 2392.544248][ T8166]  speed is unknown, defaulting to 1000
[ 2392.711999][ T8192] netlink: 'syz.1.42695': attribute type 2 has an invalid length.
[ 2393.219312][ T8240] tipc: Resetting bearer <ib:ip6gre0>
[ 2393.223633][ T8240] tipc: Resetting bearer <ib:ip6gre0>
[ 2393.228286][ T8240] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2393.573672][ T8259] xt_l2tp: wrong L2TP version: 0
[ 2394.055634][ T8300] netlink: 'syz.2.42718': attribute type 6 has an invalid length.
[ 2394.371411][ T8314] netlink: Conntrack attr has 3 unknown bytes
[ 2394.557322][ T8327] syzkaller1: left promiscuous mode
[ 2394.559280][ T8327] syzkaller1: left allmulticast mode
[ 2395.009996][ T8354] __nla_validate_parse: 3 callbacks suppressed
[ 2395.010009][ T8354] netlink: 20 bytes leftover after parsing attributes in process `syz.1.42730'.
[ 2395.044922][ T8370] netlink: 'syz.0.42734': attribute type 2 has an invalid length.
[ 2395.076955][ T8370] netlink: 'syz.0.42734': attribute type 1 has an invalid length.
[ 2395.080430][ T8370] netlink: 224 bytes leftover after parsing attributes in process `syz.0.42734'.
[ 2395.243882][ T8383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42737'.
[ 2395.398919][ T8403] netlink: 28 bytes leftover after parsing attributes in process `syz.2.42742'.
[ 2395.544145][ T8418] netlink: 28 bytes leftover after parsing attributes in process `syz.2.42747'.
[ 2396.093505][ T8472] netlink: 41 bytes leftover after parsing attributes in process `syz.1.42761'.
[ 2396.099411][ T8472] netlink: 120 bytes leftover after parsing attributes in process `syz.1.42761'.
[ 2396.102181][ T8472] netlink: 41 bytes leftover after parsing attributes in process `syz.1.42761'.
[ 2396.240826][ T8492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.42764'.
[ 2396.309881][ T8503] sctp: [Deprecated]: syz.0.42767 (pid 8503) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2396.309881][ T8503] Use struct sctp_sack_info instead
[ 2396.324789][ T8503] sctp: [Deprecated]: syz.0.42767 (pid 8503) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2396.324789][ T8503] Use struct sctp_sack_info instead
[ 2396.360901][ T8506] netlink: 32 bytes leftover after parsing attributes in process `syz.2.42769'.
[ 2396.557282][ T8530] x_tables: unsorted entry at hook 3
[ 2396.841125][ T8561] netlink: 'syz.0.42786': attribute type 2 has an invalid length.
[ 2396.843634][ T8561] netlink: 'syz.0.42786': attribute type 2 has an invalid length.
[ 2396.845917][ T8561] netlink: 'syz.0.42786': attribute type 1 has an invalid length.
[ 2396.848808][ T8561] netlink: 'syz.0.42786': attribute type 2 has an invalid length.
[ 2397.158153][ T8603] openvswitch: netlink: Missing key (keys=40, expected=200000)
[ 2397.387753][ T8631] tipc: Resetting bearer <eth:syzkaller0>
[ 2397.398355][ T8630] tipc: Resetting bearer <eth:syzkaller0>
[ 2397.538230][ T8645] team1: entered promiscuous mode
[ 2397.540159][ T8645] team1: entered allmulticast mode
[ 2397.542413][ T8645] 8021q: adding VLAN 0 to HW filter on device team1
[ 2397.603834][ T8645] team2: entered promiscuous mode
[ 2397.605532][ T8645] team2: entered allmulticast mode
[ 2397.608015][ T8645] 8021q: adding VLAN 0 to HW filter on device team2
[ 2397.712175][ T8659] SET target dimension over the limit!
[ 2397.821996][ T8676] syzkaller1: entered allmulticast mode
[ 2398.080417][ T8696] 8021q: VLANs not supported on syzkaller1
[ 2398.475424][T30120] tipc: Resetting bearer <eth:syzkaller0>
[ 2398.626015][ T8750] syzkaller1: entered promiscuous mode
[ 2398.632645][ T8750] syzkaller1: entered allmulticast mode
[ 2398.649287][ T8750] syzkaller1: left promiscuous mode
[ 2398.652941][ T8750] syzkaller1: left allmulticast mode
[ 2398.719046][ T8756] syzkaller1: left allmulticast mode
[ 2399.012387][ T8781] syzkaller1: entered allmulticast mode
[ 2399.383969][ T8820] syzkaller1: left allmulticast mode
[ 2399.398421][ T8820] 8021q: VLANs not supported on syzkaller1
[ 2399.467650][ T8829] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2399.532172][ T8839] xt_l2tp: wrong L2TP version: 0
[ 2400.011555][ T8890] wg1 speed is unknown, defaulting to 1000
[ 2400.255772][ T8890]  speed is unknown, defaulting to 1000
[ 2401.087521][ T8973] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 2401.090354][ T8973] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 2401.283484][ T8975] tipc: Resetting bearer <eth:vlan0>
[ 2401.388680][ T8997] team_slave_0: mtu less than device minimum
[ 2401.658937][ T9026] __nla_validate_parse: 20 callbacks suppressed
[ 2401.658949][ T9026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42885'.
[ 2401.664491][ T9026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42885'.
[ 2401.699232][ T9028] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes.
[ 2401.732222][ T9031] netlink: 84 bytes leftover after parsing attributes in process `syz.0.42887'.
[ 2401.745219][ T9031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.42887'.
[ 2401.786062][ T9036] vlan1: entered allmulticast mode
[ 2401.788618][ T9036] macvtap0: entered allmulticast mode
[ 2401.929985][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42892'.
[ 2401.945662][ T9046] netlink: 52 bytes leftover after parsing attributes in process `syz.2.42892'.
[ 2402.089509][ T9060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.42895'.
[ 2402.248499][ T9072] netlink: 28 bytes leftover after parsing attributes in process `syz.2.42898'.
[ 2402.252242][ T9072] workqueue: Failed to create a rescuer kthread for wq "bond80": -EINTR
[ 2402.354342][ T9079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42899'.
[ 2402.821214][ T9093] netlink: 'syz.0.42903': attribute type 7 has an invalid length.
[ 2403.063220][ T9100] rdma_rxe: rxe_newlink: failed to add bridge_slave_1
[ 2403.066168][ T9102] rdma_rxe: rxe_newlink: failed to add bridge_slave_1
[ 2403.152554][ T9104] netlink: 'syz.2.42907': attribute type 1 has an invalid length.
[ 2403.180988][ T9104] 8021q: adding VLAN 0 to HW filter on device bond80
[ 2403.854144][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.42919'.
[ 2404.351073][ T9182] tipc: Enabling of bearer <ib:ip6gre0> rejected, already enabled
[ 2404.371126][ T9185] netlink: 'syz.2.42934': attribute type 1 has an invalid length.
[ 2404.397275][ T9185] 8021q: adding VLAN 0 to HW filter on device bond81
[ 2404.638247][ T9215] tipc: Resetting bearer <eth:syzkaller0>
[ 2404.650517][ T9215] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 2404.670737][ T9214] tipc: Resetting bearer <eth:syzkaller0>
[ 2405.437229][T25352] tipc: Resetting bearer <eth:syzkaller0>
[ 2407.445125][ T9193] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2407.608654][ T9253] __nla_validate_parse: 9 callbacks suppressed
[ 2407.608667][ T9253] netlink: 28 bytes leftover after parsing attributes in process `syz.1.42950'.
[ 2407.885228][ T9281] tipc: Resetting bearer <eth:syzkaller0>
[ 2407.916140][ T9279] tipc: Resetting bearer <eth:syzkaller0>
[ 2407.931833][ T9289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42962'.
[ 2407.959057][ T9293] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 2407.983062][ T9293] ip6gre8: entered allmulticast mode
[ 2407.986064][ T9293] team0: Device ip6gre8 is of different type
[ 2408.129264][ T9312] netlink: 36 bytes leftover after parsing attributes in process `syz.2.42971'.
[ 2408.132246][ T9312] openvswitch: netlink: Flow key attr not present in new flow.
[ 2408.145320][ T9314] netlink: 28 bytes leftover after parsing attributes in process `syz.2.42971'.
[ 2408.145323][ T9312] netlink: 28 bytes leftover after parsing attributes in process `syz.2.42971'.
[ 2408.145338][ T9312] openvswitch: netlink: Flow key attr not present in new flow.
[ 2408.152814][ T9314] openvswitch: netlink: Flow key attr not present in new flow.
[ 2408.722788][T25345] tipc: Resetting bearer <eth:syzkaller0>
[ 2409.255521][ T9403] syzkaller1: entered promiscuous mode
[ 2409.257661][ T9403] syzkaller1: entered allmulticast mode
[ 2409.272105][ T9410] netlink: 76 bytes leftover after parsing attributes in process `syz.2.43002'.
[ 2409.283409][ T9410] netlink: 232 bytes leftover after parsing attributes in process `syz.2.43002'.
[ 2409.290375][ T9410] netlink: 'syz.2.43002': attribute type 1 has an invalid length.
[ 2409.338128][ T9410] 8021q: adding VLAN 0 to HW filter on device bond82
[ 2409.345676][ T9410] netlink: 36 bytes leftover after parsing attributes in process `syz.2.43002'.
[ 2409.468081][ T9422] netlink: 40 bytes leftover after parsing attributes in process `syz.2.43006'.
[ 2409.472462][ T9422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.43006'.
[ 2409.770391][ T9445] syzkaller1: entered promiscuous mode
[ 2409.772248][ T9445] syzkaller1: entered allmulticast mode
[ 2409.843166][   T34] audit: type=1107 audit(1778528813.801:57): pid=9446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[ 2409.905552][ T9448] syzkaller1: left promiscuous mode
[ 2409.907731][ T9448] syzkaller1: left allmulticast mode
[ 2410.196707][ T9459] netlink: 'syz.0.43021': attribute type 4 has an invalid length.
[ 2410.201682][ T9459] netlink: 'syz.0.43021': attribute type 4 has an invalid length.
[ 2410.431650][ T9472] syzkaller1: left promiscuous mode
[ 2410.433307][ T9472] syzkaller1: left allmulticast mode
[ 2411.097364][ T9539] syzkaller1: entered promiscuous mode
[ 2411.099604][ T9539] syzkaller1: entered allmulticast mode
[ 2411.265850][ T9557] syzkaller1: left promiscuous mode
[ 2411.279808][ T9557] syzkaller1: left allmulticast mode
[ 2414.339471][ T9576] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2414.344395][ T9600] netlink: 'syz.1.43064': attribute type 1 has an invalid length.
[ 2414.348605][ T9600] __nla_validate_parse: 11 callbacks suppressed
[ 2414.348615][ T9600] netlink: 224 bytes leftover after parsing attributes in process `syz.1.43064'.
[ 2414.408827][ T9607] netlink: 'syz.0.43066': attribute type 1 has an invalid length.
[ 2414.411927][ T9607] netlink: 100 bytes leftover after parsing attributes in process `syz.0.43066'.
[ 2414.441028][ T9607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.43066'.
[ 2414.517521][ T9610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.43067'.
[ 2414.520563][ T9610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.43067'.
[ 2414.526621][ T9617] tipc: Resetting bearer <eth:syzkaller0>
[ 2414.563354][ T9617] netlink: 24 bytes leftover after parsing attributes in process `syz.2.43070'.
[ 2414.633930][ T9616] tipc: Resetting bearer <eth:syzkaller0>
[ 2414.756539][ T9639] sctp: [Deprecated]: syz.2.43074 (pid 9639) Use of int in maxseg socket option.
[ 2414.756539][ T9639] Use struct sctp_assoc_value instead
[ 2414.812432][ T9645] netlink: 'syz.2.43079': attribute type 3 has an invalid length.
[ 2414.817338][ T9645] tipc: Resetting bearer <eth:syzkaller0>
[ 2414.893067][ T9657] netlink: 'syz.0.43082': attribute type 4 has an invalid length.
[ 2414.978796][ T9665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.43084'.
[ 2415.329970][ T9686] netlink: 28 bytes leftover after parsing attributes in process `syz.1.43091'.
[ 2415.346098][ T9686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.43091'.
[ 2415.475020][ T9690] netlink: 14 bytes leftover after parsing attributes in process `syz.0.43093'.
[ 2415.638854][ T9644] tipc: Resetting bearer <eth:syzkaller0>
[ 2415.882620][ T9723] netlink: 'syz.0.43103': attribute type 28 has an invalid length.
[ 2415.950434][ T9728] wg1 speed is unknown, defaulting to 1000
[ 2416.147183][ T9728]  speed is unknown, defaulting to 1000
[ 2416.632887][T25352] tipc: Resetting bearer <eth:syzkaller0>
[ 2416.649042][ T9785] wg1 speed is unknown, defaulting to 1000
[ 2416.815594][ T9785]  speed is unknown, defaulting to 1000
[ 2416.925808][ T9799] netlink: 'syz.1.43119': attribute type 2 has an invalid length.
[ 2418.703299][ T9910] netlink: 'syz.1.43151': attribute type 1 has an invalid length.
[ 2418.705785][ T9910] netlink: 'syz.1.43151': attribute type 2 has an invalid length.
[ 2418.897783][ T9927] syzkaller0: entered promiscuous mode
[ 2418.899439][ T9927] syzkaller0: entered allmulticast mode
[ 2418.903952][ T9927] tc action pedit offset must be on 32 bit boundaries
[ 2419.033230][ T9942] sch_tbf: burst 255 is lower than device syzkaller0 mtu (299) !
[ 2419.170444][ T9955] syzkaller0: entered promiscuous mode
[ 2419.172632][ T9955] syzkaller0: entered allmulticast mode
[ 2419.250504][ T9963] wg1 speed is unknown, defaulting to 1000
[ 2419.298173][ T9967] syzkaller1: entered promiscuous mode
[ 2419.300315][ T9967] syzkaller1: entered allmulticast mode
[ 2419.304755][ T9967] batadv_slave_0: Caught tx_queue_len zero misconfig
[ 2419.342321][ T9967] syzkaller1: left promiscuous mode
[ 2419.344102][ T9967] syzkaller1: left allmulticast mode
[ 2419.483697][ T9963]  speed is unknown, defaulting to 1000
[ 2419.661388][ T9983] __nla_validate_parse: 12 callbacks suppressed
[ 2419.661401][ T9983] netlink: 28 bytes leftover after parsing attributes in process `syz.1.43176'.
[ 2420.150385][T10023] wg1 speed is unknown, defaulting to 1000
[ 2420.254563][T10023]  speed is unknown, defaulting to 1000
[ 2420.502223][T10041] netlink: 160 bytes leftover after parsing attributes in process `syz.0.43193'.
[ 2420.613062][T10048] netlink: 'syz.0.43194': attribute type 1 has an invalid length.
[ 2420.647602][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43192'.
[ 2420.772814][T10060] netlink: 20 bytes leftover after parsing attributes in process `syz.0.43197'.
[ 2420.929116][T10064] syzkaller0: entered promiscuous mode
[ 2420.930773][T10064] syzkaller0: entered allmulticast mode
[ 2421.015989][T10072] netlink: 'syz.0.43203': attribute type 11 has an invalid length.
[ 2421.030651][T10072] netlink: 'syz.0.43203': attribute type 5 has an invalid length.
[ 2421.033098][T10072] netlink: 6548 bytes leftover after parsing attributes in process `syz.0.43203'.
[ 2421.095887][T10080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.43207'.
[ 2421.168442][T10090] IPv6: Can't replace route, no match found
[ 2421.293002][T10100] netlink: 48 bytes leftover after parsing attributes in process `syz.0.43214'.
[ 2421.339591][T10102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.43215'.
[ 2421.343222][T10102] netlink: 60 bytes leftover after parsing attributes in process `syz.0.43215'.
[ 2421.434773][T10113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.43218'.
[ 2422.139487][T10128] tipc: Resetting bearer <eth:syzkaller0>
[ 2422.258880][T10126] tipc: Resetting bearer <eth:syzkaller0>
[ 2422.288326][T10132] IPVS: set_ctl: invalid protocol: 127 172.30.0.1:20002
[ 2423.111392][T30134] tipc: Resetting bearer <eth:syzkaller0>
[ 2423.169132][T10136] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2423.440899][T10206] xt_HMARK: proto mask must be zero with L3 mode
[ 2423.444252][T10203] syzkaller0: entered promiscuous mode
[ 2423.446134][T10203] syzkaller0: entered allmulticast mode
[ 2426.545074][T10213] __nla_validate_parse: 4 callbacks suppressed
[ 2426.545095][T10213] netlink: 64 bytes leftover after parsing attributes in process `syz.0.43247'.
[ 2426.567187][T10213] netlink: 'syz.0.43247': attribute type 1 has an invalid length.
[ 2426.574184][T10213] netlink: 'syz.0.43247': attribute type 2 has an invalid length.
[ 2426.819156][T10252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.43259'.
[ 2426.851161][T10251] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2426.875216][T10265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43263'.
[ 2427.067844][T10273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.43263'.
[ 2427.530888][T10328] netlink: 40 bytes leftover after parsing attributes in process `syz.2.43284'.
[ 2427.548718][T10332] x_tables: duplicate underflow at hook 1
[ 2427.700703][T10347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.43290'.
[ 2427.721084][T10347] netlink: 'syz.0.43290': attribute type 2 has an invalid length.
[ 2427.901350][T10362] netlink: 44 bytes leftover after parsing attributes in process `syz.2.43294'.
[ 2427.914617][T10367] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 2428.033031][T10379] team0: Device macvlan3 failed to change mtu
[ 2428.033807][T10379] netlink: 32 bytes leftover after parsing attributes in process `syz.1.43299'.
[ 2428.149221][T10400] tunl0: Caught tx_queue_len zero misconfig
[ 2428.219938][T10403] syzkaller0: entered promiscuous mode
[ 2428.221690][T10403] syzkaller0: entered allmulticast mode
[ 2428.280755][T10411] netlink: 52 bytes leftover after parsing attributes in process `syz.0.43312'.
[ 2428.431661][T10435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.43318'.
[ 2428.511992][T10440] netlink: 'syz.2.43322': attribute type 1 has an invalid length.
[ 2428.517182][T10440] netlink: 'syz.2.43322': attribute type 7 has an invalid length.
[ 2428.519628][T10440] netlink: 'syz.2.43322': attribute type 8 has an invalid length.
[ 2428.525666][T10440] NCSI netlink: No device for ifindex 1073545264
[ 2428.733437][T10462] netlink: 'syz.1.43330': attribute type 1 has an invalid length.
[ 2428.866594][T10483] netlink: 'syz.0.43336': attribute type 18 has an invalid length.
[ 2430.068074][T10582] netlink: 'syz.0.43369': attribute type 21 has an invalid length.
[ 2430.375047][T10607] netlink: 'syz.0.43375': attribute type 10 has an invalid length.
[ 2430.383790][T10607] bond0: entered promiscuous mode
[ 2430.392285][T10606] bond0: left promiscuous mode
[ 2430.477588][T10613] No such timeout policy "syz1"
[ 2430.635475][T10628] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[ 2431.618785][T10650] openvswitch: netlink: IPv6 tunnel dst address is zero
[ 2431.769606][T10664] 8021q: VLANs not supported on xfrm0
[ 2431.966021][T10684] syzkaller0: entered promiscuous mode
[ 2431.969718][T10496] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2431.977640][T10684] syzkaller0: entered allmulticast mode
[ 2432.237755][T10701] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2435.640035][T10741] vlan0: entered promiscuous mode
[ 2435.642226][T10741] geneve1: entered promiscuous mode
[ 2435.644364][T10741] vlan0: entered allmulticast mode
[ 2435.650263][T10741] geneve1: entered allmulticast mode
[ 2435.687170][T10741] __nla_validate_parse: 15 callbacks suppressed
[ 2435.687191][T10741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43418'.
[ 2435.695590][T10741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43418'.
[ 2435.701074][T10741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43418'.
[ 2435.706787][T10741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43418'.
[ 2435.715632][T10741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43418'.
[ 2435.719845][T10741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43418'.
[ 2435.723669][T10741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43418'.
[ 2435.727187][T10741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43418'.
[ 2435.730075][T10741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43418'.
[ 2435.732941][T10741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43418'.
[ 2439.279099][T10825] netlink: 'syz.0.43449': attribute type 21 has an invalid length.
[ 2440.120324][T10883] wg1 speed is unknown, defaulting to 1000
[ 2440.247109][T10894] IPVS: Unknown mcast interface: bridge_slave_0
[ 2440.252095][T10883]  speed is unknown, defaulting to 1000
[ 2440.540502][T10913] netlink: 'syz.0.43474': attribute type 3 has an invalid length.
[ 2440.816663][ T5806] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[ 2440.820745][ T5806] CPU: 1 UID: 0 PID: 5806 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[ 2440.820765][ T5806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2440.820776][ T5806] Call Trace:
[ 2440.820783][ T5806]  <TASK>
[ 2440.820790][ T5806]  dump_stack_lvl+0xe8/0x150
[ 2440.820817][ T5806]  dump_header+0xd3/0x4c0
[ 2440.820836][ T5806]  oom_kill_process+0x3ab/0x970
[ 2440.820855][ T5806]  out_of_memory+0x106c/0x1410
[ 2440.820869][ T5806]  ? percpu_ref_put+0x19/0x180
[ 2440.820887][ T5806]  ? __pfx___mutex_lock+0x10/0x10
[ 2440.820904][ T5806]  ? preempt_schedule_common+0x82/0xd0
[ 2440.820927][ T5806]  ? __pfx_out_of_memory+0x10/0x10
[ 2440.820950][ T5806]  try_charge_memcg+0xc53/0x1560
[ 2440.820968][ T5806]  ? __lock_acquire+0x6b5/0x2cf0
[ 2440.820998][ T5806]  ? __pfx_try_charge_memcg+0x10/0x10
[ 2440.821011][ T5806]  ? xa_load+0x60/0x210
[ 2440.821032][ T5806]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[ 2440.821052][ T5806]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[ 2440.821071][ T5806]  mem_cgroup_swapin_charge_folio+0x2e3/0x4d0
[ 2440.821089][ T5806]  __swap_cache_prepare_and_add+0x52a/0x700
[ 2440.821124][ T5806]  swap_cache_alloc_folio+0xf1/0x240
[ 2440.821146][ T5806]  swap_cluster_readahead+0x53a/0x690
[ 2440.821170][ T5806]  ? __pfx_swap_cluster_readahead+0x10/0x10
[ 2440.821200][ T5806]  ? get_vma_policy+0x27b/0x3c0
[ 2440.821220][ T5806]  swapin_readahead+0x196/0xc50
[ 2440.821248][ T5806]  ? __pfx_swapin_readahead+0x10/0x10
[ 2440.821269][ T5806]  ? swap_table_get+0x1e/0x260
[ 2440.821286][ T5806]  ? swap_table_get+0x1e/0x260
[ 2440.821302][ T5806]  ? swap_table_get+0x1e/0x260
[ 2440.821320][ T5806]  ? swap_table_get+0x216/0x260
[ 2440.821338][ T5806]  ? swap_cache_get_folio+0x513/0x520
[ 2440.821362][ T5806]  do_swap_page+0x54f/0x58d0
[ 2440.821380][ T5806]  ? __lock_acquire+0x6b5/0x2cf0
[ 2440.821433][ T5806]  ? do_swap_page+0x12c/0x58d0
[ 2440.821507][ T5806]  ? __pfx_do_swap_page+0x10/0x10
[ 2440.821523][ T5806]  ? __pte_offset_map+0x1ae/0x240
[ 2440.821545][ T5806]  ? pte_offset_map_rw_nolock+0xea/0x160
[ 2440.821567][ T5806]  handle_mm_fault+0x12d2/0x3310
[ 2440.821599][ T5806]  ? handle_mm_fault+0xee/0x3310
[ 2440.821624][ T5806]  ? __pfx_handle_mm_fault+0x10/0x10
[ 2440.821642][ T5806]  ? lock_vma_under_rcu+0x45a/0x500
[ 2440.821678][ T5806]  do_user_addr_fault+0xa73/0x1340
[ 2440.821702][ T5806]  ? rcu_is_watching+0x15/0xb0
[ 2440.821721][ T5806]  ? trace_page_fault_user+0x84/0x210
[ 2440.821747][ T5806]  exc_page_fault+0x6a/0xc0
[ 2440.821786][ T5806]  asm_exc_page_fault+0x26/0x30
[ 2440.821803][ T5806] RIP: 0033:0x7f5840f5d60e
[ 2440.821818][ T5806] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2440.821830][ T5806] RSP: 002b:00007fff7e85ca18 EFLAGS: 00010246
[ 2440.821843][ T5806] RAX: 0000000000000000 RBX: 000055557cf24500 RCX: 00007f5840f5d60e
[ 2440.821853][ T5806] RDX: 00007fff7e85ca70 RSI: 0000000000000000 RDI: 0000000000000000
[ 2440.821862][ T5806] RBP: 00007fff7e85cadc R08: 0000000000000000 R09: 0000000000000000
[ 2440.821871][ T5806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[ 2440.821880][ T5806] R13: 00000000000927c0 R14: 0000000000253c8b R15: 00007fff7e85cb30
[ 2440.821904][ T5806]  </TASK>
[ 2440.822004][ T5806] memory: usage 307200kB, limit 307200kB, failcnt 1396
[ 2440.947018][ T5806] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0
[ 2440.949608][ T5806] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0
[ 2440.951876][ T5806] Memory cgroup stats for /syz1:
[ 2440.951940][ T5806] cache 0
[ 2440.954375][ T5806] rss 0
[ 2440.955226][ T5806] rss_huge 0
[ 2440.956830][ T5806] shmem 0
[ 2440.957782][ T5806] mapped_file 0
[ 2440.959032][ T5806] dirty 0
[ 2440.960072][ T5806] writeback 0
[ 2440.962486][ T5806] workingset_refault_anon 88
[ 2440.966930][ T5806] workingset_refault_file 247
[ 2440.968737][ T5806] swap 200704
[ 2440.969998][ T5806] swapcached 864256
[ 2440.971459][ T5806] pgpgin 1137922
[ 2440.972815][ T5806] pgpgout 1137920
[ 2440.974182][ T5806] pgfault 2269836
[ 2440.975567][ T5806] pgmajfault 108
[ 2440.978545][ T5806] inactive_anon 8192
[ 2440.980039][ T5806] active_anon 0
[ 2440.981362][ T5806] inactive_file 0
[ 2440.982770][ T5806] active_file 0
[ 2440.984097][ T5806] unevictable 0
[ 2440.985337][ T5806] hierarchical_memory_limit 314572800
[ 2440.988058][ T5806] hierarchical_memsw_limit 9223372036854771712
[ 2440.990360][ T5806] total_cache 0
[ 2440.991706][ T5806] total_rss 0
[ 2440.992950][ T5806] total_rss_huge 0
[ 2440.994364][ T5806] total_shmem 0
[ 2440.995691][ T5806] total_mapped_file 0
[ 2440.998185][ T5806] total_dirty 0
[ 2440.999553][ T5806] total_writeback 0
[ 2441.000991][ T5806] total_workingset_refault_anon 88
[ 2441.002898][ T5806] total_workingset_refault_file 247
[ 2441.004864][ T5806] total_swap 200704
[ 2441.006425][ T5806] total_swapcached 864256
[ 2441.008099][ T5806] total_pgpgin 1137944
[ 2441.009643][ T5806] total_pgpgout 1137942
[ 2441.011193][ T5806] total_pgfault 2269877
[ 2441.013103][ T5806] total_pgmajfault 108
[ 2441.014607][ T5806] total_inactive_anon 8192
[ 2441.016639][ T5806] total_active_anon 0
[ 2441.018367][ T5806] total_inactive_file 0
[ 2441.019953][ T5806] total_active_file 0
[ 2441.021479][ T5806] total_unevictable 0
[ 2441.022991][ T5806] anon_cost 0
[ 2441.024266][ T5806] file_cost 0
[ 2441.025560][ T5806] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.43469,pid=10898,uid=0
[ 2441.031269][ T5806] Memory cgroup out of memory: Killed process 10898 (syz.1.43469) total-vm:102364kB, anon-rss:1248kB, file-rss:22784kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000
[ 2441.152978][ T5806] syz-executor invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=0
[ 2441.158443][ T5806] CPU: 1 UID: 0 PID: 5806 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[ 2441.158459][ T5806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2441.158465][ T5806] Call Trace:
[ 2441.158470][ T5806]  <TASK>
[ 2441.158475][ T5806]  dump_stack_lvl+0xe8/0x150
[ 2441.158491][ T5806]  dump_header+0xd3/0x4c0
[ 2441.158503][ T5806]  oom_kill_process+0x3ab/0x970
[ 2441.158514][ T5806]  out_of_memory+0x106c/0x1410
[ 2441.158522][ T5806]  ? percpu_ref_put+0x19/0x180
[ 2441.158533][ T5806]  ? __pfx___mutex_lock+0x10/0x10
[ 2441.158545][ T5806]  ? __pfx_out_of_memory+0x10/0x10
[ 2441.158552][ T5806]  ? do_raw_spin_unlock+0x4d/0x210
[ 2441.158566][ T5806]  try_charge_memcg+0xc53/0x1560
[ 2441.158583][ T5806]  ? __pfx_try_charge_memcg+0x10/0x10
[ 2441.158595][ T5806]  ? percpu_ref_tryget+0x15/0x180
[ 2441.158609][ T5806]  ? __memcg_kmem_charge_page+0xeb/0x410
[ 2441.158623][ T5806]  __memcg_kmem_charge_page+0x2a9/0x410
[ 2441.158634][ T5806]  ? __memcg_kmem_charge_page+0xeb/0x410
[ 2441.158647][ T5806]  __alloc_frozen_pages_noprof+0x1c1/0x380
[ 2441.158659][ T5806]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 2441.158671][ T5806]  ? __pfx_policy_nodemask+0x10/0x10
[ 2441.158682][ T5806]  ? do_raw_spin_lock+0x12b/0x2f0
[ 2441.158698][ T5806]  alloc_pages_mpol+0x232/0x4a0
[ 2441.158711][ T5806]  alloc_pages_noprof+0xa8/0x190
[ 2441.158721][ T5806]  pte_alloc_one+0x23/0x370
[ 2441.158733][ T5806]  ? __pte_alloc+0x1d/0x430
[ 2441.158745][ T5806]  __pte_alloc+0x25/0x430
[ 2441.158760][ T5806]  copy_pmd_range+0x77d2/0x8050
[ 2441.158775][ T5806]  ? arch_stack_walk+0xfb/0x150
[ 2441.158813][ T5806]  ? __pfx_copy_pmd_range+0x10/0x10
[ 2441.158827][ T5806]  ? kernel_clone+0x248/0x8e0
[ 2441.158841][ T5806]  ? __x64_sys_clone+0x1b6/0x230
[ 2441.158853][ T5806]  ? do_syscall_64+0x14d/0xf80
[ 2441.158875][ T5806]  ? mas_wr_walk_descend+0x525/0x860
[ 2441.158895][ T5806]  ? __lock_acquire+0x6b5/0x2cf0
[ 2441.158915][ T5806]  ? mas_wr_store_type+0xcc2/0x19d0
[ 2441.158938][ T5806]  copy_page_range+0xbe8/0x11f0
[ 2441.158973][ T5806]  ? __pfx_copy_page_range+0x10/0x10
[ 2441.158996][ T5806]  ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10
[ 2441.159016][ T5806]  dup_mmap+0xf40/0x1d90
[ 2441.159049][ T5806]  ? __pfx_dup_mmap+0x10/0x10
[ 2441.159069][ T5806]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2441.159100][ T5806]  copy_mm+0x13b/0x4b0
[ 2441.159116][ T5806]  copy_process+0x18b6/0x3cf0
[ 2441.159137][ T5806]  ? copy_process+0x921/0x3cf0
[ 2441.159158][ T5806]  ? __pfx_copy_process+0x10/0x10
[ 2441.159176][ T5806]  ? __lock_acquire+0x6b5/0x2cf0
[ 2441.159195][ T5806]  kernel_clone+0x248/0x8e0
[ 2441.159211][ T5806]  ? cgroup1_freezing+0x20/0x350
[ 2441.159230][ T5806]  ? __pfx_kernel_clone+0x10/0x10
[ 2441.159255][ T5806]  __x64_sys_clone+0x1b6/0x230
[ 2441.159268][ T5806]  ? __pfx___x64_sys_clone+0x10/0x10
[ 2441.159289][ T5806]  ? do_user_addr_fault+0xc6f/0x1340
[ 2441.159305][ T5806]  do_syscall_64+0x14d/0xf80
[ 2441.159315][ T5806]  ? trace_irq_disable+0x3b/0x150
[ 2441.159328][ T5806]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2441.159339][ T5806]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2441.159347][ T5806] RIP: 0033:0x7f5840fc5852
[ 2441.159357][ T5806] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[ 2441.159365][ T5806] RSP: 002b:00007fff7e85c950 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2441.159375][ T5806] RAX: ffffffffffffffda RBX: 00007fff7e85c950 RCX: 00007f5840fc5852
[ 2441.159380][ T5806] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 2441.159386][ T5806] RBP: 00007fff7e85cadc R08: 0000000000000000 R09: 0000000000000001
[ 2441.159391][ T5806] R10: 000055557cf247d0 R11: 0000000000000246 R12: 0000000000000001
[ 2441.159395][ T5806] R13: 00000000000927c0 R14: 0000000000253c8b R15: 00007fff7e85cb30
[ 2441.159444][ T5806]  </TASK>
[ 2441.159471][ T5806] memory: usage 307200kB, limit 307200kB, failcnt 1562
[ 2441.277969][ T5806] memory+swap: usage 283076kB, limit 9007199254740988kB, failcnt 0
[ 2441.280356][ T5806] kmem: usage 282944kB, limit 9007199254740988kB, failcnt 0
[ 2441.282569][ T5806] Memory cgroup stats for /syz1:
[ 2441.282795][ T5806] cache 0
[ 2441.285089][ T5806] rss 0
[ 2441.285907][ T5806] rss_huge 0
[ 2441.287928][ T5806] shmem 0
[ 2441.288875][ T5806] mapped_file 0
[ 2441.289942][ T5806] dirty 0
[ 2441.290804][ T5806] writeback 0
[ 2441.291786][ T5806] workingset_refault_anon 93
[ 2441.293024][ T5806] workingset_refault_file 255
[ 2441.294386][ T5806] swap 57344
[ 2441.295348][ T5806] swapcached 864256
[ 2441.296732][ T5806] pgpgin 1137962
[ 2441.297805][ T5806] pgpgout 1137962
[ 2441.298947][ T5806] pgfault 2269861
[ 2441.300018][ T5806] pgmajfault 125
[ 2441.301059][ T5806] inactive_anon 0
[ 2441.302209][ T5806] active_anon 0
[ 2441.303232][ T5806] inactive_file 0
[ 2441.304310][ T5806] active_file 0
[ 2441.305332][ T5806] unevictable 0
[ 2441.306512][ T5806] hierarchical_memory_limit 314572800
[ 2441.308235][ T5806] hierarchical_memsw_limit 9223372036854771712
[ 2441.310061][ T5806] total_cache 0
[ 2441.311090][ T5806] total_rss 0
[ 2441.312146][ T5806] total_rss_huge 0
[ 2441.313285][ T5806] total_shmem 0
[ 2441.314308][ T5806] total_mapped_file 0
[ 2441.315487][ T5806] total_dirty 0
[ 2441.316833][ T5806] total_writeback 0
[ 2441.318050][ T5806] total_workingset_refault_anon 93
[ 2441.319626][ T5806] total_workingset_refault_file 255
[ 2441.321170][ T5806] total_swap 57344
[ 2441.322401][ T5806] total_swapcached 864256
[ 2441.323754][ T5806] total_pgpgin 1137984
[ 2441.324944][ T5806] total_pgpgout 1137984
[ 2441.326164][ T5806] total_pgfault 2269902
[ 2441.327599][ T5806] total_pgmajfault 125
[ 2441.328898][ T5806] total_inactive_anon 0
[ 2441.330141][ T5806] total_active_anon 0
[ 2441.331266][ T5806] total_inactive_file 0
[ 2441.332673][ T5806] total_active_file 0
[ 2441.333935][ T5806] total_unevictable 0
[ 2441.335084][ T5806] anon_cost 0
[ 2441.336034][ T5806] file_cost 0
[ 2441.337219][ T5806] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor,pid=5806,uid=0
[ 2441.342115][ T5806] Memory cgroup out of memory: Killed process 5806 (syz-executor) total-vm:98260kB, anon-rss:1284kB, file-rss:21660kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:0
[ 2441.581987][T11064] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2441.588906][T11064] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2441.592232][T11064] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2441.595203][T11064] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2441.598100][T11064] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2441.624751][T10929] wg1 speed is unknown, defaulting to 1000
[ 2441.768679][T10929]  speed is unknown, defaulting to 1000
[ 2441.918567][T10929] chnl_net:caif_netlink_parms(): no params data found
[ 2442.060541][T10929] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2442.065210][T10929] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2442.070165][T10929] bridge_slave_0: entered allmulticast mode
[ 2442.074200][T10929] bridge_slave_0: entered promiscuous mode
[ 2442.079732][T10929] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2442.082528][T10929] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2442.085763][T10929] bridge_slave_1: entered allmulticast mode
[ 2442.090021][T10929] bridge_slave_1: entered promiscuous mode
[ 2442.114630][T10929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2442.123039][T10929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2442.140936][T10949] wg1 speed is unknown, defaulting to 1000
[ 2442.142651][T10929] team0: Port device team_slave_0 added
[ 2442.158450][T10929] team0: Port device team_slave_1 added
[ 2442.209253][T10929] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2442.212064][T10929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2442.221933][T10929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2442.237042][T10929] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2442.239499][T10929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2442.250462][T10929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2442.309139][T10929] hsr_slave_0: entered promiscuous mode
[ 2442.312373][T10929] hsr_slave_1: entered promiscuous mode
[ 2442.315199][T10929] debugfs: 'hsr0' already exists in 'hsr'
[ 2442.317783][T10929] Cannot create hsr debugfs directory
[ 2442.320031][T10949]  speed is unknown, defaulting to 1000
[ 2442.727853][T10929] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2442.735336][T10929] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2442.753116][T10929] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2442.765565][T10929] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2442.813963][T10929] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2442.816882][T10929] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2442.819854][T10929] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2442.822582][T10929] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2442.872979][T10983] tipc: Resetting bearer <eth:syzkaller0>
[ 2442.879646][T30118] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2442.883213][T30118] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2442.936026][T10929] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2442.956156][T10929] 8021q: adding VLAN 0 to HW filter on device team0
[ 2442.969491][ T7020] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2442.972484][ T7020] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2442.981713][ T7020] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2442.983976][ T7020] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2443.004534][T10983] __nla_validate_parse: 79 callbacks suppressed
[ 2443.004546][T10983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.43495'.
[ 2443.020149][T10982] tipc: Resetting bearer <eth:syzkaller0>
[ 2443.224086][T10929] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2443.274059][T10929] veth0_vlan: entered promiscuous mode
[ 2443.281556][T10929] veth1_vlan: entered promiscuous mode
[ 2443.301138][T10929] veth0_macvtap: entered promiscuous mode
[ 2443.324710][T10929] veth1_macvtap: entered promiscuous mode
[ 2443.340453][T10929] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2443.361409][T10929] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2443.378567][T23187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2443.384900][T23187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2443.667984][T11064] Bluetooth: hci0: command tx timeout
[ 2443.957044][T23187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2443.964055][T25345] tipc: Resetting bearer <eth:syzkaller0>
[ 2443.969174][T23187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2444.057422][ T7020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2444.059832][ T7020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2444.095363][ T7020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2444.098884][ T7020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2444.290518][T11030] syzkaller1: entered promiscuous mode
[ 2444.292600][T11030] syzkaller1: entered allmulticast mode
[ 2444.477667][T11040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43510'.
[ 2444.481270][T11040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.43510'.
[ 2444.484755][T11040] netlink: 'syz.2.43510': attribute type 6 has an invalid length.
[ 2444.489357][T11040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43510'.
[ 2444.492766][T11040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.43510'.
[ 2444.497449][T11040] netlink: 'syz.2.43510': attribute type 6 has an invalid length.
[ 2444.501573][T11040] syzkaller1: left promiscuous mode
[ 2444.503743][T11040] syzkaller1: left allmulticast mode
[ 2444.582089][T11044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43512'.
[ 2444.585611][T11044] netlink: 24 bytes leftover after parsing attributes in process `syz.0.43512'.
[ 2444.591223][T11044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43512'.
[ 2444.594584][T11044] netlink: 24 bytes leftover after parsing attributes in process `syz.0.43512'.
[ 2445.387132][T11096] IPVS: length: 35 != 24
[ 2445.746455][T11064] Bluetooth: hci0: command tx timeout
[ 2445.950993][T11125] netlink: 'syz.2.43539': attribute type 1 has an invalid length.
[ 2446.043722][T11129] netlink: 84 bytes leftover after parsing attributes in process `syz.2.43541'.
[ 2446.318012][T11157] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[ 2446.532328][T11183] netlink: 'syz.0.43559': attribute type 2 has an invalid length.
[ 2446.800258][T11197] tipc: Resetting bearer <eth:ipvlan0>
[ 2446.873429][T11197] veth1_macvtap: left promiscuous mode
[ 2447.053946][T23187] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 51993 - 0
[ 2447.057447][T23187] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20004 - 0
[ 2447.063072][T23187] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 51993 - 0
[ 2447.073196][T23187] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20004 - 0
[ 2447.076927][T23187] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 51993 - 0
[ 2447.079360][T23187] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20004 - 0
[ 2447.081713][T23187] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 51993 - 0
[ 2447.084136][T23187] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20004 - 0
[ 2447.312445][T11221] netlink: 'syz.3.43570': attribute type 11 has an invalid length.
[ 2447.829497][T11064] Bluetooth: hci0: command tx timeout
[ 2447.940876][T11280] syzkaller1: entered promiscuous mode
[ 2447.942483][T11280] syzkaller1: entered allmulticast mode
[ 2447.971247][T11285] veth0: entered promiscuous mode
[ 2447.998193][T11289] syzkaller1: left promiscuous mode
[ 2448.000037][T11289] syzkaller1: left allmulticast mode
[ 2448.007504][T11284] veth0: left promiscuous mode
[ 2448.158436][T11300] netlink: 'syz.2.43594': attribute type 1 has an invalid length.
[ 2448.233101][T11305] __nla_validate_parse: 13 callbacks suppressed
[ 2448.233113][T11305] netlink: 32 bytes leftover after parsing attributes in process `syz.2.43597'.
[ 2448.248033][T11305] netlink: 16 bytes leftover after parsing attributes in process `syz.2.43597'.
[ 2448.888483][T11379] ip6_vti0: left allmulticast mode
[ 2449.132546][T11408] netlink: 'syz.2.43625': attribute type 2 has an invalid length.
[ 2449.135048][T11408] netlink: 'syz.2.43625': attribute type 1 has an invalid length.
[ 2449.151727][T11408] netlink: 'syz.2.43625': attribute type 1 has an invalid length.
[ 2449.211667][T11410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.43627'.
[ 2449.676819][T11449] netlink: 'syz.0.43640': attribute type 21 has an invalid length.
[ 2449.698234][T11449] netlink: 156 bytes leftover after parsing attributes in process `syz.0.43640'.
[ 2449.702250][T11446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.43639'.
[ 2449.755318][T11446] hsr_slave_1 (unregistering): left promiscuous mode
[ 2449.865727][T11463] netlink: 12 bytes leftover after parsing attributes in process `syz.3.43643'.
[ 2449.906954][T11064] Bluetooth: hci0: command tx timeout
[ 2450.007531][T11477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.43651'.
[ 2450.067261][T11483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.43653'.
[ 2450.160509][T11490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.43655'.
[ 2450.728551][T11539] netlink: 'syz.0.43663': attribute type 4 has an invalid length.
[ 2450.844421][T11547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43664'.
[ 2451.416796][T11588] x_tables: unsorted underflow at hook 3
[ 2451.515921][T30120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2451.519844][T30120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2451.567294][T30992] ------------[ cut here ]------------
[ 2451.570011][T30992] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[ 2451.573680][T30992] WARNING: net/mac80211/rate.c:406 at __rate_control_send_low+0x524/0x800, CPU#1: kworker/1:2/30992
[ 2451.577717][T30992] Modules linked in:
[ 2451.579499][T30992] CPU: 1 UID: 0 PID: 30992 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) 
[ 2451.582802][T30992] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2451.586537][T30992] Workqueue: mld mld_ifc_work
[ 2451.588429][T30992] RIP: 0010:__rate_control_send_low+0x5bb/0x800
[ 2451.590468][T30992] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80
[ 2451.596950][T30992] RSP: 0018:ffffc9000753e678 EFLAGS: 00010246
[ 2451.598845][T30992] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000
[ 2451.601320][T30992] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff9022c2b0
[ 2451.604235][T30992] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2451.607349][T30992] R10: 0000000000000004 R11: 0000000000000000 R12: ffff8881b5592328
[ 2451.610583][T30992] R13: 0000000000000000 R14: ffffffff9022c2b0 R15: ffff8881cffeb138
[ 2451.613576][T30992] FS:  0000000000000000(0000) GS:ffff8882a9467000(0000) knlGS:0000000000000000
[ 2451.616999][T30992] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2451.619407][T30992] CR2: 0000000000000000 CR3: 0000000110624000 CR4: 00000000000006f0
[ 2451.622415][T30992] Call Trace:
[ 2451.623731][T30992]  <TASK>
[ 2451.624834][T30992]  rate_control_send_low+0x1a7/0x7b0
[ 2451.626853][T30992]  rate_control_get_rate+0x20b/0x5d0
[ 2451.628635][T30992]  ieee80211_tx_h_rate_ctrl+0xaf6/0x1760
[ 2451.630807][T30992]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[ 2451.633029][T30992]  invoke_tx_handlers_late+0xba/0x18a0
[ 2451.635045][T30992]  ? ieee80211_tx_h_select_key+0xd1b/0x1ab0
[ 2451.637332][T30992]  ieee80211_tx_dequeue+0x3f4c/0x5440
[ 2451.639369][T30992]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[ 2451.641472][T30992]  ? ieee80211_next_txq+0x82e/0x9a0
[ 2451.643539][T30992]  ieee80211_handle_wake_tx_queue+0x132/0x2c0
[ 2451.645873][T30992]  ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10
[ 2451.647983][T30992]  ? ieee80211_queue_skb+0x184f/0x2260
[ 2451.650077][T30992]  ? __local_bh_enable_ip+0xd0/0x130
[ 2451.652099][T30992]  ieee80211_queue_skb+0x1a3f/0x2260
[ 2451.654065][T30992]  ieee80211_tx+0x2c2/0x4b0
[ 2451.655741][T30992]  ? __pfx_ieee80211_tx+0x10/0x10
[ 2451.657817][T30992]  ? ieee80211_xmit+0x315/0x400
[ 2451.659585][T30992]  __ieee80211_subif_start_xmit+0xd12/0x1660
[ 2451.661790][T30992]  ? __ieee80211_subif_start_xmit+0x2cf/0x1660
[ 2451.664080][T30992]  ? process_scheduled_works+0xb02/0x1830
[ 2451.666183][T30992]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[ 2451.668665][T30992]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[ 2451.670961][T30992]  ieee80211_subif_start_xmit+0xf3/0x570
[ 2451.673004][T30992]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[ 2451.675319][T30992]  ? skb_network_protocol+0x23d/0x3f0
[ 2451.677393][T30992]  dev_hard_start_xmit+0x2d8/0x870
[ 2451.679305][T30992]  __dev_queue_xmit+0x168f/0x38a0
[ 2451.681167][T30992]  ? __dev_queue_xmit+0x274/0x38a0
[ 2451.683046][T30992]  ? __local_bh_enable_ip+0xd0/0x130
[ 2451.684922][T30992]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2451.686979][T30992]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 2451.688964][T30992]  ? neigh_resolve_output+0x438/0x750
[ 2451.690919][T30992]  ? eth_header+0x11b/0x200
[ 2451.692611][T30992]  ? __asan_memcpy+0x40/0x70
[ 2451.694134][T30992]  ? ip6_output+0x126/0x550
[ 2451.695529][T30992]  ip6_output+0x340/0x550
[ 2451.696958][T30992]  NF_HOOK+0xa2/0x3a0
[ 2451.698183][T30992]  ? NF_HOOK+0xf9/0x3a0
[ 2451.699450][T30992]  ? __pfx_NF_HOOK+0x10/0x10
[ 2451.700954][T30992]  ? __pfx_dst_output+0x10/0x10
[ 2451.702475][T30992]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2451.704204][T30992]  ? __local_bh_enable_ip+0xd0/0x130
[ 2451.705992][T30992]  ? icmp6_dst_alloc+0x3a6/0x440
[ 2451.707571][T30992]  mld_sendpack+0x8b4/0xe40
[ 2451.708987][T30992]  ? look_up_lock_class+0x57/0x110
[ 2451.710563][T30992]  ? mld_sendpack+0x213/0xe40
[ 2451.712012][T30992]  ? __pfx_mld_sendpack+0x10/0x10
[ 2451.713577][T30992]  mld_ifc_work+0x835/0xe70
[ 2451.715354][T30992]  ? process_scheduled_works+0xa25/0x1830
[ 2451.717912][T30992]  process_scheduled_works+0xb02/0x1830
[ 2451.720044][T30992]  ? __pfx_process_scheduled_works+0x10/0x10
[ 2451.722125][T30992]  ? assign_work+0x3d5/0x5e0
[ 2451.723858][T30992]  worker_thread+0xa50/0xfc0
[ 2451.725452][T30992]  kthread+0x388/0x470
[ 2451.727133][T30992]  ? __pfx_worker_thread+0x10/0x10
[ 2451.729135][T30992]  ? __pfx_kthread+0x10/0x10
[ 2451.730876][T30992]  ret_from_fork+0x51e/0xb90
[ 2451.732204][T30992]  ? __pfx_ret_from_fork+0x10/0x10
[ 2451.733694][T30992]  ? __switch_to+0xc7d/0x1450
[ 2451.735271][T30992]  ? __pfx_kthread+0x10/0x10
[ 2451.737037][T30992]  ret_from_fork_asm+0x1a/0x30
[ 2451.738866][T30992]  </TASK>
[ 2451.739826][T30992] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 2451.742419][T30992] CPU: 1 UID: 0 PID: 30992 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) 
[ 2451.745998][T30992] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2451.749174][T30992] Workqueue: mld mld_ifc_work
[ 2451.750905][T30992] Call Trace:
[ 2451.752112][T30992]  <TASK>
[ 2451.753015][T30992]  vpanic+0x56c/0xa60
[ 2451.754374][T30992]  ? __pfx__printk+0x10/0x10
[ 2451.755909][T30992]  ? __pfx_vpanic+0x10/0x10
[ 2451.757275][T30992]  ? is_bpf_text_address+0x292/0x2b0
[ 2451.758852][T30992]  ? is_bpf_text_address+0x26/0x2b0
[ 2451.760395][T30992]  panic+0xc5/0xd0
[ 2451.761491][T30992]  ? __pfx_panic+0x10/0x10
[ 2451.762838][T30992]  ? ret_from_fork_asm+0x1a/0x30
[ 2451.764308][T30992]  __warn+0x315/0x4f0
[ 2451.765575][T30992]  ? __rate_control_send_low+0x524/0x800
[ 2451.767277][T30992]  ? __rate_control_send_low+0x524/0x800
[ 2451.769414][T30992]  __report_bug+0x29a/0x540
[ 2451.771170][T30992]  ? __lock_acquire+0x6b5/0x2cf0
[ 2451.772979][T30992]  ? __rate_control_send_low+0x524/0x800
[ 2451.775056][T30992]  ? __pfx___report_bug+0x10/0x10
[ 2451.776908][T30992]  ? unwind_next_frame+0xa5/0x23c0
[ 2451.778691][T30992]  report_bug_entry+0x19a/0x290
[ 2451.780134][T30992]  ? __rate_control_send_low+0x5bb/0x800
[ 2451.781804][T30992]  ? __rate_control_send_low+0x5c0/0x800
[ 2451.783486][T30992]  handle_bug+0xca/0x200
[ 2451.785077][T30992]  exc_invalid_op+0x1a/0x50
[ 2451.786764][T30992]  asm_exc_invalid_op+0x1a/0x20
[ 2451.788469][T30992] RIP: 0010:__rate_control_send_low+0x5bb/0x800
[ 2451.790400][T30992] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80
[ 2451.796526][T30992] RSP: 0018:ffffc9000753e678 EFLAGS: 00010246
[ 2451.798838][T30992] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000
[ 2451.801840][T30992] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff9022c2b0
[ 2451.805004][T30992] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2451.807860][T30992] R10: 0000000000000004 R11: 0000000000000000 R12: ffff8881b5592328
[ 2451.810737][T30992] R13: 0000000000000000 R14: ffffffff9022c2b0 R15: ffff8881cffeb138
[ 2451.813567][T30992]  ? __rate_control_send_low+0x58d/0x800
[ 2451.815623][T30992]  rate_control_send_low+0x1a7/0x7b0
[ 2451.817527][T30992]  rate_control_get_rate+0x20b/0x5d0
[ 2451.819429][T30992]  ieee80211_tx_h_rate_ctrl+0xaf6/0x1760
[ 2451.821444][T30992]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[ 2451.823611][T30992]  invoke_tx_handlers_late+0xba/0x18a0
[ 2451.825465][T30992]  ? ieee80211_tx_h_select_key+0xd1b/0x1ab0
[ 2451.827109][T30992]  ieee80211_tx_dequeue+0x3f4c/0x5440
[ 2451.828774][T30992]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[ 2451.830721][T30992]  ? ieee80211_next_txq+0x82e/0x9a0
[ 2451.832745][T30992]  ieee80211_handle_wake_tx_queue+0x132/0x2c0
[ 2451.835054][T30992]  ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10
[ 2451.837439][T30992]  ? ieee80211_queue_skb+0x184f/0x2260
[ 2451.839092][T30992]  ? __local_bh_enable_ip+0xd0/0x130
[ 2451.840650][T30992]  ieee80211_queue_skb+0x1a3f/0x2260
[ 2451.842233][T30992]  ieee80211_tx+0x2c2/0x4b0
[ 2451.844098][T30992]  ? __pfx_ieee80211_tx+0x10/0x10
[ 2451.846093][T30992]  ? ieee80211_xmit+0x315/0x400
[ 2451.848133][T30992]  __ieee80211_subif_start_xmit+0xd12/0x1660
[ 2451.850459][T30992]  ? __ieee80211_subif_start_xmit+0x2cf/0x1660
[ 2451.852289][T30992]  ? process_scheduled_works+0xb02/0x1830
[ 2451.853956][T30992]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[ 2451.855873][T30992]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[ 2451.857894][T30992]  ieee80211_subif_start_xmit+0xf3/0x570
[ 2451.859716][T30992]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[ 2451.861526][T30992]  ? skb_network_protocol+0x23d/0x3f0
[ 2451.863189][T30992]  dev_hard_start_xmit+0x2d8/0x870
[ 2451.864707][T30992]  __dev_queue_xmit+0x168f/0x38a0
[ 2451.866526][T30992]  ? __dev_queue_xmit+0x274/0x38a0
[ 2451.868102][T30992]  ? __local_bh_enable_ip+0xd0/0x130
[ 2451.869680][T30992]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2451.871279][T30992]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 2451.873274][T30992]  ? neigh_resolve_output+0x438/0x750
[ 2451.875292][T30992]  ? eth_header+0x11b/0x200
[ 2451.876960][T30992]  ? __asan_memcpy+0x40/0x70
[ 2451.878658][T30992]  ? ip6_output+0x126/0x550
[ 2451.880300][T30992]  ip6_output+0x340/0x550
[ 2451.881895][T30992]  NF_HOOK+0xa2/0x3a0
[ 2451.883384][T30992]  ? NF_HOOK+0xf9/0x3a0
[ 2451.884946][T30992]  ? __pfx_NF_HOOK+0x10/0x10
[ 2451.886642][T30992]  ? __pfx_dst_output+0x10/0x10
[ 2451.888415][T30992]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2451.890308][T30992]  ? __local_bh_enable_ip+0xd0/0x130
[ 2451.892250][T30992]  ? icmp6_dst_alloc+0x3a6/0x440
[ 2451.894088][T30992]  mld_sendpack+0x8b4/0xe40
[ 2451.895761][T30992]  ? look_up_lock_class+0x57/0x110
[ 2451.897662][T30992]  ? mld_sendpack+0x213/0xe40
[ 2451.899386][T30992]  ? __pfx_mld_sendpack+0x10/0x10
[ 2451.901234][T30992]  mld_ifc_work+0x835/0xe70
[ 2451.902910][T30992]  ? process_scheduled_works+0xa25/0x1830
[ 2451.904895][T30992]  process_scheduled_works+0xb02/0x1830
[ 2451.906895][T30992]  ? __pfx_process_scheduled_works+0x10/0x10
[ 2451.909040][T30992]  ? assign_work+0x3d5/0x5e0
[ 2451.910718][T30992]  worker_thread+0xa50/0xfc0
[ 2451.912454][T30992]  kthread+0x388/0x470
[ 2451.913996][T30992]  ? __pfx_worker_thread+0x10/0x10
[ 2451.915839][T30992]  ? __pfx_kthread+0x10/0x10
[ 2451.917485][T30992]  ret_from_fork+0x51e/0xb90
[ 2451.919201][T30992]  ? __pfx_ret_from_fork+0x10/0x10
[ 2451.921090][T30992]  ? __switch_to+0xc7d/0x1450
[ 2451.922920][T30992]  ? __pfx_kthread+0x10/0x10
[ 2451.924648][T30992]  ret_from_fork_asm+0x1a/0x30
[ 2451.926378][T30992]  </TASK>
[ 2451.928179][T30992] Kernel Offset: disabled
[ 2451.929784][T30992] Rebooting in 86400 seconds..
