last executing test programs:

4m51.040159008s ago: executing program 0 (id=14614):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x401}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x401}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)

4m51.039611771s ago: executing program 0 (id=14615):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r3, r3, 0x2f}, 0x20)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r3, 0x2f, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x40)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000180)=0x68, 0x4)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r5, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007)
r6 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000380)={0x3c4, r9, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x98, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="030e1a9a4aff8132ed1951a16039413e09b9a2157a862cfb"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b81328c1c9ea2b4315223e1be5fa9820ec011d25515dae230d1dd677ae82cf16"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="332438b09392a158cdd9b8bc3249432987304ed72b7d943d"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="d80e6883b562715854e90c0acab8bb54"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3cb3a697436b08e80350bc7485f99e49"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1dbe964dd36be70f"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "edb33414b9ba859b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "dd73ee61fba2a14a"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1830}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="cb96d180b36d7d40a8b41bbc0000a8a29f2b2649c604c756"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="9645b43eb7357fc226dc0d12fb917351f6065a091ff9d5fdaf3a33b47db896d9"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7f9ba26e526be0bf"}]}, @NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7fffffff}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="3b8f2d7fb68d3f83d963d9ee4db388c38c833f31356bfba7c1866e1b026efcbf"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f981c7dfb5b0d4cd57adf6bd29a6e874df09ed51048f0968"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4fc7fb1904a3e437"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="7e743deab06d553c2db562c014afb6c2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="1cce39d83b23ffcd65c114fab0474e36"}]}, @NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9de626dbb9e40859577d0e1afdaafc94"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="94d758e3dc994385b65c32eb068b0867"}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="465de52b5aa445b698805dfe841d527b4a37fe3e1ccbd1b0f13aee1fbd406316"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="44fc6329dcf9f6268035dcc7438f3649"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}]}, @NL80211_ATTR_REKEY_DATA={0x84, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="35fee74449cf9431146b7f2afad79a88"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5526ead6a9ac36e76894df722fd1fba7efe60d069f9e566432a3e4b20d4f1fff"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xff}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xb67c}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="1e7a6e7e736de2cf1639bb00d7c49b5210fe591f93fec7a1"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4ffab77f039ef0bf"}]}, @NL80211_ATTR_REKEY_DATA={0xe8, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="bbdf6ff7e2c40115aba2beb18729b32e"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a4c110a3eb889211f754fa84c22916025cee5c3a591abba0"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a7b6fd0c6ee0c24d2bd7d22d66cfb646"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f52fc13d0bdef8b6f72728d87cf269d9fd4df08cb54f0641"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="3b8be462332aa947f979b89ac59a8b1e8b7800f887d5bb54f3aadb71b56f851a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "53137b159d246687"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="70664eb8a5872123055505bf6921be415d3aed4ce20d0b6b7925533c781b6492"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="324138674fc130e23ddb39dfa05f566367003b4d987fea07"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="38298050cb3151f2b990067367a67907"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="86fde4b7b9a690dd4d1ef2b6776bb66e674a483a8114d747aea1865f807dfc34"}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)

4m48.217159851s ago: executing program 0 (id=14616):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001200030600"/20, @ANYRES32=0x0, @ANYBLOB="2fedaa88000000003800128009000100766c616e000000002800028006000100000000000c0002000000000000000000100004800c00010000000000", @ANYRES32, @ANYBLOB='\b\x00.'], 0x74}, 0x1, 0x0, 0x14000000}, 0x0)

4m48.180088891s ago: executing program 0 (id=14619):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newtaction={0x48, 0x12, 0xbf68af9d17701211, 0x0, 0x1700, {0x7}, [{0x4}, {0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x1d, {0x3, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x240000d0}, 0x0)

4m48.120246585s ago: executing program 0 (id=14621):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000d88e00ffffff7f0500000a28000000000a030000000000000000000a00000708000227000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket(0x2d, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc)
connect$qrtr(r1, &(0x7f0000000440)={0x2d, 0x1, 0x7fff}, 0xc)
close(0x4)
syz_open_procfs$namespace(0x0, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x4810)
unshare(0x6a040000)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
getsockname$packet(r4, 0x0, &(0x7f0000000080))
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x312)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, 0x0, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r6, 0x84, 0x7f, 0x0, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x4)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000940), 0x0, 0xc040)

4m47.519326487s ago: executing program 0 (id=14628):
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000340)=0x1c, 0x80000)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000440)={0x89, 0x2, 0x2, 0x10, 0x0, [@empty]}, 0x18)
write$cgroup_pid(r1, &(0x7f0000000180), 0x12)
socket(0x2a, 0x6, 0xde97)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x6a, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{}, {0x0, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x0, 0xc, 0x1}, @IFLA_GENEVE_REMOTE6={0x0, 0x7, @local}, @IFLA_GENEVE_TOS={0x0, 0x4, 0x7}, @IFLA_GENEVE_REMOTE6={0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x1c}}, @IFLA_GENEVE_TTL={0x0, 0x3, 0x2}, @IFLA_GENEVE_TTL_INHERIT, @IFLA_GENEVE_REMOTE={0x0, 0x2, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000895}, 0x4040800)
r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0)
ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, &(0x7f0000000000)={{0x4, 0x5bf}, {0x4, 0x2}, 0x4})
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), 0xffffffffffffffff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r8)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x20, r9, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x948}, 0x80)
sendmsg$IEEE802154_SET_MACPARAMS(r7, &(0x7f0000000200)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r9, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x10}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x1)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x18, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)

4m24.860751233s ago: executing program 32 (id=14628):
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000340)=0x1c, 0x80000)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000440)={0x89, 0x2, 0x2, 0x10, 0x0, [@empty]}, 0x18)
write$cgroup_pid(r1, &(0x7f0000000180), 0x12)
socket(0x2a, 0x6, 0xde97)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x6a, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{}, {0x0, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x0, 0xc, 0x1}, @IFLA_GENEVE_REMOTE6={0x0, 0x7, @local}, @IFLA_GENEVE_TOS={0x0, 0x4, 0x7}, @IFLA_GENEVE_REMOTE6={0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x1c}}, @IFLA_GENEVE_TTL={0x0, 0x3, 0x2}, @IFLA_GENEVE_TTL_INHERIT, @IFLA_GENEVE_REMOTE={0x0, 0x2, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000895}, 0x4040800)
r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0)
ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, &(0x7f0000000000)={{0x4, 0x5bf}, {0x4, 0x2}, 0x4})
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), 0xffffffffffffffff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r8)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x20, r9, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x948}, 0x80)
sendmsg$IEEE802154_SET_MACPARAMS(r7, &(0x7f0000000200)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r9, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x10}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x1)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x18, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)

1.300775395s ago: executing program 2 (id=18540):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1)
sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1a}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc40)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a98000000060a010400000000000000000a0004050900010073797a31000000006c000480680001800a000100696e6e6572000000580002800800044000000017340005800c0001007061796c6f616400240002800800034000000092080002400000000008000440000000e9080001400000000d0800034000000002080002401000008408000140000000000900020073797a32"], 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)

1.300099022s ago: executing program 2 (id=18542):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d002008001888ff20010000000000000000000000000001ff0200000000000000000000000000204f194e200018907804000000030000000e000000000000007536f5924fe1b409848f0f7b"], 0x52)

1.169168937s ago: executing program 2 (id=18547):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$TUNSETNOCSUM(r3, 0xc040ff0b, 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804)
socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}]}}]}, 0x3c}}, 0x0)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x2c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}}, 0x0)

1.099540898s ago: executing program 3 (id=18548):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000440)=0x8, 0x4) (async)
setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000040)=0xf2b, 0x4) (async)
getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000001500)=""/3, &(0x7f00000000c0)=0xfec2)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000024af6b6927b5dc29ff00000000037c00000401428010f4030000000000080702"], 0x30}}, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x32}]}}}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800)
r5 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r5, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0x493a, 0x5}}], 0x18, 0x4008000}, 0x28008841)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f00000001c0)={<r6=>0x0, 0x4}, &(0x7f0000000200)=0x8)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYBLOB="4800000000000000240012800b0001006272696467650000140002"], 0x44}}, 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffee9}, 0x48) (async)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r6}, 0x8)
recvmsg$qrtr(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000200)=""/90, 0x5a}], 0x2, &(0x7f00000002c0)=[{0x18, 0x0, 0x0, ""/2}, {0x1010, 0x0, 0x0, ""/4096}, {0x28, 0x0, 0x0, ""/22}], 0x1050}, 0x38, 0x142)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x2c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}}, 0x0)

1.010445885s ago: executing program 3 (id=18550):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000000000)={0x62, "85001f5b42c8fc74d7681a4bc5dbcb11255138ad8d664cd05228fe89176d762a4eaedde0e8099998d6691047095ef37b1f0af572048251a77e7702b002d0e039c07571ca77301fcd56b074db6ea9835e186f47b9e6f8a1f19a98c63a123dae766f1bcf0d1c1a4251bceace4f6b67617111933b74756d0c17a278eb56416d5164"})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_emit_ethernet(0x13f, &(0x7f0000000500)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x109, 0x3a, 0xff, @rand_addr=' \x01\x00', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0xd6, '\x00', @ipv4={'\x00', '\xff\xff', @empty}, [{0x19, 0x1e, "0a824e09786ecdf1f8f79e9da8b0d0bd6b334ac4ffd705951e76f87b1be8587d381d32da950ee621954f048f12939a9e7609713705713af6f9f6d3328964fddbcc0ad2baa9630ccc0981c5cdd2beae6bc85917ba25d3598d92aec42753dfc9c220f3380cb0c4f233c16589b4f907806b5da41ff3b62bebf785fa755d8d28fdfaeb90bedd43df57ce64a10c18c6ea058fc59575ad1f0436b8458ebab0159edddf8466c0b57add56f8620ca873ce792737a91848380afbe71f9c5e695492ea8d7fda6b5a6a7bd5e4c8d188eb26a21e986e7d20ef358ab31568c9ed74c6cbcc3ff83f413f602c49a2ab67bab5e2aeafb8"}]}}}}}}, 0x0)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x4c}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)

842.958637ms ago: executing program 3 (id=18552):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002000010"], 0xb8}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000080)=0x40000001)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd03000a000020140000006c07010033d43afffec00000000000000000000000000010ff020000000000000000000000030001"], 0x340a)

840.093708ms ago: executing program 2 (id=18554):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000003cc0)=[{{&(0x7f0000000740)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000780)="897acaab434e36c96d9a02b58182b12aa70ca629c470ab70df463ff0d17b1dfc68bcc9c027f6d427a06b562c632cef6a4e1b45b66e37f59d1d2b51ed8d5ee51cc5c1780bd7f09c9b3c59ddf9302e8ae4fd229afb1e97eb622e15c6b62b731e7f6b5842023708bdb5dea9c51c97", 0x6d}, {&(0x7f0000000800)="2174e3996118656bf86cf2ad802b4b9589a12e75b202dea808133204ea027a777ad446f076474f0d73b178fff2bf608ffc10fb5aabcc211f0208f4c06a5f251b68c16079e14f4ce0b82721e2bc89c2d7ac671f1288704ccfb0ae10ec3ca0f1b979e922e739f096cb5caa49babe75e3", 0x6f}, {&(0x7f0000000880)="1de77b55ff013115142a54417bc12bc2aa0529de64854449f2725c32f3f0f0f0cb417e65cd6f341f77b1d9a9d3edb44b97678631ef78406c847c0288838d0559f2e70f3a7b075007355b6bbda311233826b16870ebabd90febe316ab84417af6fc361cacf132692bbf7e94dd6b857afffa5c56a985bd3104948d45e5bf2e8bdee76c15a7219806f92b9bb4817d4c048c54fbbb739dbe9b64d77ce1ad9ebe9467efaee0ad11e606f184850d6591b6f1c16d6b80d51f9b5983111b2837f3f39023ce65a8b944167d5c120149fd31bc39100a0941bc84988aa5e5a2719590c57395255cdcb9b21d3fd365e6", 0xea}, {&(0x7f0000000980)="bd8ebb77b7ad25860e83c82dda7698842fcb6db3abd873870ad4a2329c97d9c707563375756ff904c8fd5989849bf79d0d8fa30d7eb9a9dce85bbaf8401776c12f61d9109566f46ccf9272e140f0ef7c41677591bdaea101d13ed2dd82864804e31eee855b5398eb97c4b08704d23413054eb6b5acefe9929685b93d2cebfef1efc18dc714a4c97814f2614d0e73104af4ff44ab3eaa8d73f35733b9160ff70f673b3208acddc01800de46e9fc17d27ee509cd4d7bf2909a3d2af2903ba9d018ecdada1e5de6d54a2f1157de12e3f38157776acd455b1c715bf4377d414ab31cf0162a1eed", 0xe5}, {&(0x7f0000000a80)="722b44123d75677d9c157b134111fe7163414fc17c762f05b23a56", 0x1b}, {&(0x7f0000000ac0)}, {&(0x7f0000000b00)="8a3281e612d8726f5ebc302aba8bce8f21b6cd18dcf010ff03125e29f32781fabb4da1255bf869c417518e2141911906d1f119f3e3c01306cff01defcd068a95107c9cb4cad94e6d9681eb9905b3c31d7ea25f1de0e1a8f62b8a5ccaad446c5e7b878d9bf76a517cce3cd501b0539a1dacd9dadc464df53ec8f9bbde8b536fd6df772b995edeeee2e08dce46797139ad33691226b747feff4097ac32709906b45fdcb0bc9f938515c02d1a", 0xab}, {&(0x7f0000000bc0)="c8690814a154b9bae3a21e2f7fb5ebdd3c744d15d6a7e62e1193e3d6103a09d808b45ad1d672f04f78fc5772c623eee1daa36089c5c2260ae1a8cffe9734941e2b216b56dfc6bff2b481296a77cfb5aebd0dc719cca2", 0x56}, {&(0x7f0000000c40)="29040f3487282b9c0fb78e4ba38e6430cc27b1ffda27281333d2", 0x1a}, {&(0x7f0000000c80)="e4a023d17707e3373efe56cd4eea228db5a2d4215acfddc629a3acb6948b887486869cf44cfaa88024ca6876632991af97dc290e3898be8cc146e6ac7cd5b564117363de35353d354f4100ae242574bf71a8b044b144fbb51b9776355e75d4e45b85e2d5777588683cca91d7b842101f0e50bbf022353ae641cb1f15a9031634896574d2545bd3716b44873c5e3605a377a40346896eb1d2ef8d1990187489cdc03259d3db6e9f7d73c12d8a41c1a5d81dd320aaeab50481edfa16a8e04a833b43784102b071b062d432d6199fd5ba36", 0xd0}], 0xa, &(0x7f0000000e40)=[@ip_ttl={{0x14, 0x0, 0x2, 0xf}}, @ip_retopts={{0x30, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @cipso={0x86, 0x14, 0xffffffffffffffff, [{0x2, 0xc, "7eb63a827a219b81cdfb"}, {0x1, 0x2}]}, @ra={0x94, 0x4}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x60}}, {{&(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000000f00)="f3248d1be3fdb3c459c6c6641486c208285dbf300a8ea2d4801edd8388fa3f65f3d614bcec889029", 0x28}, {&(0x7f0000000f40)="a5d1a78a27e8fd03c06d7f328ae5be2ab4efd19c02a040d0e7cc14d756a0562046e0d94839c14bef9c67f46c5ec27f0c882c14b267c20e5453395824a09f93bbfe61eef064263d2e216328ce9791813a830fed35210bb616340e87d53f68404b324af4f090ccbd17281e09aa0db17ce0f7ecce2bd2469bc439fdd5ff3ba385d5e59e84738fc4ed33110c59ed12", 0x8d}, {&(0x7f0000001000)="527995210065a81496a524539a268b1490f963765393c61f16c0222fcab60621533595b6181b8b5df084be105d20a82741e9e1dbaf4964f7c7beb377a81890684fc2c10b38ce4bb52e16cfa91429aa6687e6fdc9eb609bbd87d8dd8df70dd38058aa550e43baffb768a31d1bb1b6bc6d871fc2fa6dc5a0dc65c3aa571e32b43bb6b30a4049b4aa44e96cea54e8eff6328e922406da37ef81d096f03a4c1612ffd08a921e43efdde366d2c56a40421e04ee5ea48a3bcfffd9e52bf29b34c0aee376ef83232a4a68084e", 0xc9}, {&(0x7f0000001100)="e5cc1ae7af556348089376fb9d706dbddae2e0e44f78d362a262bc4a31b8377d33da71af39cac83dcb4fba5d", 0x2c}, {&(0x7f0000001140)="96a414c159f58f88397711b1e749b9eca3704d2d720a552a06d26239daebb045f90dd197a7ef68a4d76b01b2d1876b", 0x2f}, {&(0x7f0000001180)="84a022709b7a70cdc02e009e7a42e04ef9751496364dd344d9aa046714bf8aeb5281eaa532c9a57164e90a0600f0e3a1df97379e", 0x34}, {&(0x7f00000011c0)="c1dc93e36baad6d628d640dd7c", 0xd}, {&(0x7f0000001200)="84373af14fd94f201f582251aad411edfd64d6cf8d419d30431bae530bb9509a4d649968fa0f736a70582a9a9af910ef85f458acca6cf6fb07a0282d497aee22e9064ecc4c2113b775b8934d53b41d79ab0c274e2875ce699711a4f6ced680f266e848635dc7b248c45e310226c529c10d24ed5258b12525963fb3e7f9db4e7d3000d9a40d974be7df3637cfbfbae47fed60b540d24b72888434f2", 0x9b}], 0x8, &(0x7f0000001340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x38}}, {{&(0x7f0000001380)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000003540)=[{&(0x7f00000013c0)="f5ed45b12c4070324814d70975070f1fee0091ad6211abd32ff239f23f6610cc6fd3aa82be9b0d39122511dd957a9f953ff9052b0921c72320ae58e6b98ad4", 0x3f}, {&(0x7f0000001400)="dc68f0d4f069e734487f671f652b2d4bce9b32ccb08bfea300000000000000006400000000", 0x25}, {&(0x7f0000001440)="6cc615daf2b61a86adff57efd2ec00617d2caaf2454e1e333ff410156d8912adbe5c95b5683ce990afa72b3210cc6ad5a76ccf0407be5ec25fb66b37955f23518608d78461fb87cd9ed7ca34f3b7ec95da7031d3b0574705fd01d0b92b769066d95db8d5577fd8b8ffffb38a3889e61c9fe41a46af3e08aa37c9bd8f09589e6d504fd93707e54093de878416de562f616742336d42c546fb9761734a94260e49fd3bf52151797cc13d000f1f04afc9ec2899626b96985966114395abca9776a03f67644abc3ad24136e45caa4b533220f7a98585e3436daafbb8fc918cdb3be9b6e7aa2a54ef320d8de3dc4d1dc99d6cd46bf0039ad6f8ee79cf3aacfbeedbc03e4c7fc2ef40daf6d0d018a0bd2efc99c6576c48a498287f6fb70658dfb58edff9b4cb48325210fbc6235fbaec44b2e9ed9bd9df0704c120caa0f6048130ecc2f8f916a315f4bcc2992f43add4c5a33e00d91390d5fc48eb6706d1d9a75d2744bf740a2ae3a0dd3b5da9cc3cb0267e318e06a632c47a69df06cc4bd49ef0fe9fafed37cf6428ea14d285f1335d72f0b011461eb0b8fa4b29dc41e44bc8271a8d936969f89604d36ae9eaba2470b9bc4dfde435d070ceaa7c9be20da66aec8eff24f8591c501685b91b5216e01e521bab92c718e6424686e3caae52461cd1d7946e147378683d7811d31493ec22a2fd052f9f6d5b694add77bfba244c7f66dd75754a72ff2288d6899bdbe0e5802be015b37db38f8e5e1485788e6c25d9cf540d775cd10bdee4912dab79d8cd7b0064e6c6b23f9f7c2a78ec64b7f74f24d378fa6855bb3f0a354f90bcfc59059148f924ab839b8339321a8873252ee7bd1b0b100416b40546f082f6ebbef5a4c6a7bfa4706a67507902d31d2f6dbe3ac6c2d33c8e24bc0f6fad0b198632fe5ca009c5a60b7ef23f8dc2eb4acb3ebd869380c476b8e8cb7fab3fc7ea00a676d802b4bcf5fec43d1a50dd09d06cbaa3e59b001f95abb5b98d504887a97c4e6c463051082ee43f3e085b58c0bc82d8e21f39bdbf6cfb6cff20cb83d9656b4ec4319c4c323ed7a181b63eae380f73465e271230ecfa4124c1bed5e60b1b77ceda28fb4852060fd7b508977beee8cc3187ab7df7cb207c17c86fca609f4a69d539b7780bef4bb7fde1b54f4b8e8de6a80a65a8b7e91acd71dd938fae3706d040041519c13f4d65595855150323c85ff6a954f36c0937712a468ac41428ea598bc5eb15bab4d167715e599d6f6ff2adf117d55a5487b9593cb399a289fd9a408f28ab7e78acc0d86703c41330cdd5ba7d36808c8cccbea0222208334a84847a0feb924c36bfc550cc78a07bf42b2ef0d27f1d3529f97c6909ef21ba2d19667a39f7530b1a31ae9c51e87e07b9288e75c7230a362ff0b81b1c0ea231456d9242740c4092296dd0b2191cb71a17acb5a750998c58b7dac6a8409a18ba111922f92d6bcee1cf7ee9de76f4318d7f62a6fd857544158a4877fe68f4061f1c350a3ae211a6fd98a35ee894fe0ab651446af9bb1b558950a05e5f2b754af2c75d62a179942c08a6bc18b93bcc46de6c26f7c0f48c847bf637b597d8597adeeb8cbfa43fdc2a80d481bcb525bad4e8d899a179c5b19fbb69c82b2e397d3c3d2f9d1b6b86be92d5be3a4d6c98db2fc41b76625138df4c7ff773151593a60ef962c189d21482c7c986b177423ca65c3a4dd2f8a9a8f6a9ad5846c4db05d1bf91feea17ede67646c4f5ce6ae6d05969238e4a49d43973bd15de56bfd25860572b12d3afc07323c414fcd6fc370e5b9b641c8f38d000fb9fc057a025b97e98c8f7e201ac5c1d289b4115add88ae65beaf5c3e286dc9d1207cf0165299e980344791528dff56acba6961eb82db63c71505ee0d9b8e31d024b63bd059ecae7b5c98e90b6b0b8beecb8a1bc8f78ffe1e1b3f92bd7d0a900a1a75df4a1fe3c7afaa22cea879ec69a1d88cdcefd468d4de1f0f6cdd359f12cea5a224bf5fdd47e95843588230376b27d2aababb47f2810eecc88ccbc83c375ec6749bfd808be492c6adefc2147a2564ef80ebe44d96e6ee9bb111d2b20807c697634d2be23a188c66a7163372c836f940b63612aae353a5e6f2e00f0980904bcd09a4bae28a6996afcf321298ad8fce4f236c29f2e27d51c7488f9e88d2df6f4b051e0ba771f5a168ee5e9a10948bc9248d6801cf0f1311f14bc2210f17fdb3a5ec53a9116e17a0716170f2a5cbfd4f01d2101af017a87170bfea2a39ea7187501d587d6d449c4dfa395cc731c2def5d9474d08eb7b7e79ed0e13a465d00524b45707c8238b899f99bc5124dd1fd15cf8277dbdd807531ab88218f9085243cdf33121545fbaf8253000d2cd70d3c03d2e8f3c5aadd92d2894cd579f21cbe9208077b4b0914aa9d5ae194e62e5efd57a2f40e06d792448b8f0ad705f3e13c2edac9ee4574dbb1c7e8c8a69dddd0605da6e94ab58e74495c5cae430b04b1f1350e4f752b8d58e7b2769b9fcc1b5b1fc796918fd5991ac081c82e176a837bc3b74863e9a9d7b5c2cde416d64a83bba1afbebd360257fcb3c5b750dcb8e14bb23e653fa01d44f7f6c3f0b013a73afed8f622fe5394a577e73ae32ba46258fe95329106fc78c1815adbde421ed1516312cbdc89fdac830ee2a56043c02505431c288f1eeb15f6473650af95b2e2e7a27a29ee8c5a1d540d1e1484ef5fa7982a6e0f1c9e83dc047c197876259d4a6e86efefe27551cb43fb3821d2b2e0e7e5bb2b3e4e35a5f86475c4489c17dc8c29aadaab4aaac30ac309f58c51530c6bb6d85e9effffe8af04140d3e2dbcf45fa4b97c5ab7a798ec8c012992b8df9579f7cefc4bb7c8343fb362f2dee19136660e7b636f5fb9fb2aabb568d57fff675c50dfd10b2fe05067de5863edeca72a38b126d111b056222d824523ac88f534016a03370a26f290f526f984792f28b413e465ba464ac9a1cacb7a3154331fb10340430294c7bc4a02bc4b105236d64dceec31fb7924c7c89ba7e857774f673b065f7e5a067b2d69b823a268f934462c612f4d00af71659e0805e77855656cb8c3d4667eb487b3c7eb343587252a9bfe8a0358fe5e2d3da032de7e03308475c840e9159e64f1b8fc28a08cc017c4687e530412ab88d3c30634b01b5c63187d5123e92afc26f0ba2646427ca3ef2816665a3cb4ed2d2076dac62f7946b9c64f4b85e4c8f65c8dcabddee73c847c93c60c6d8733d1cf34aa8edf1d46357b2bb60b2983cd0d6b76db05053f5653c3b613e596ba4d3673003de628fa22e4f3f7c3ad1e1aed54abdb9f9c9609340c0c752f9311d2cb61def371a81f696f55e1287334b9c4d69ac896bff52f23b22da8f0d2eccd5f5f0b99265692e41d7cccd9814d40d049b0e943dc0e719f5069b63b8e26b1bfc2002e19c4b230c0b4d668204a10ff0eace18b66ef1183e300fcab69067814f2c1ac5da0b3db476c631b706a51cffd5688998a906529b661b4395ae172a24619a4fbe07bedef6480368332205a848e8397213b3aa6bfd8fc7be66c0cf9cb6038c66353ebb24bd77a53609127de87bdff84abc409cca452de4248f2bcdf649aba0bd3b8d8d1df9600d91f5d562e74adf129b2721f05daa3f254e28fd192074335d35e79581539e5c90f35e2a517c37e9b6e19eb3572e8edeb3c086112afec2351d896480c53738b299832c7c5ec0ba88adfce1719a728b05c825b4e36735fd942352845fa8291eaa0e58c88aca8572e3cac316b3a7977bd703d8169b981ac86f2f61bc1999aff3cf3e574163e30c2281cc2f90b540b54a757b9394f9848fe24e3736628d52f91dc4e5d3150de88b77c5435c441245dfede04b7746ea7419e9dea888312af572dc55d4a0cb1aa49aea9a697ff025ca956a787239f7c666787e5bdd098d0aca044c7dee4f33cd278b18e349f4417db9e7a370bb0da86bbc3dc11c157830af1476cd7315d45797631a7a483d0aa38aa90ce07368d9a3722bfacc8b104d43a45e20b0e530eb145a74fe32b2c5fd08469123b802846b2240abc7d1dbb505b470cac4dae1d6483c12862fb72071acef3d5d6105172651caf5a8bf87830beb19e4bc43508cea2b7d679ed7e885d104293bcd5879729f6394f3fbf8dede989e3a46b785f9fb8932174617c2ecaa0df4bc79c3837954528f1808b6dc3d4fae824d8ffc5b37311c60f1b780b7db8e9ba0e2fbe9524c0ff018ada40b17585dcb4405d677aefe2fb80844deff4816fe79a71c7efbdc8cd16c700473fd0fa6d6ba6c618c60fd9175c5d8bbfc6776695929f5bfebfbe2328c7da905d424a8ca450e1fce5cbb6e6e69a272145d78ac1339a5ae2136f1afdce8c6ab727eb1978c1487fb1252599f44f3ebabfbb92a64d3060d33f0ee104ba0889397abd3e72af1cf18fb2bb37b5eab6d389d7da02927a7ca267146413b0fe2bf066573fa18cfcb67edbd3a7c5b56c102b92c373ddcf38eaa1e330d1a32567285cb03289698130b35cbb899ba9f6bb50a65ed8de66023e295c0274191754654adcc0f433244ea07fa23628581a10c4602e78efb76c96164eb4c9ff3d7f287610f56c15458ed7e5c0ed110009b1507fc4a58b89368298dfb1320d1f7bd6de385f207cea3dcf9b7a7366025c0a61eef9bcb28add3f7802f8173065b21b231ab730d096ad2308c59b4a09f9c7312d509a7185f92a6ee6fac7e1da14222042c994ea9e0e95c8867627abbb1e6d916b9de05a18981b62709ac31e5948810dce7c407b72de362622198c0b00f8a3ebae26cc99ed7d764c36f001e4bb36a78e5ab1ecf667ae10929edfa43bd4257105ac80882f8936dfce714831808628147d3793bca39ec5cae5328a98eaee761e75b3af34ba360ef5d9d84cac5c132d40f3ade576e4965982e39ae420f979b74981c5640382af5f821d951fc0a79a712afd2e2a6236c64a274a42650f470c65674b01b53044b3ad438f330d6042d030a5bcdf39e7a8bbdedbc9f61086c83a15b28bf3367ef0f241f04cbafd661b53b1c9f94398843fe4a40a69ad3cd6f3ff543eb1e1d78ec8f7e0b1262f867d8404172886c652119a7210d36b1f5b7fa4951a728a9a31ac906b235c84bc08e50e462ce55c4f346af62119e05b326b082fc51f60471da8939dd9fe9efd9d88af1fab5cf763aad24e93737ddab897c39451c6b71b72444197861d88f3e71c5f123e96b638e020a94f149a405dcae7e90a7a00384e3a162ce3fb5d5d805c8b80baf8bd2e84ff7a6eb8bdf4b1cc344c88689eecc6e877a8989c496d6e3485751461c2608d1c5d32c490f3e8069f24aa92d63e836d18efb29b3b8dc989bd05197b4fb12a3c360b7168dd8df5e536ac1063c1bcfe59cb4eb39a898e0794bd41cc3439e2cbaf2ecadf59815bb1e775149a5a7d08527b0ae30a07f9b2b7d45b7600c48a8bbcfe92bdda57e784350c2540fd14466b950421dad74617b626fc465604ff0cb1b2b5964969d291cc0d56612b20377c4b10a337474b49f11c80ff58585d2b823895783a8462d4d864338722a7c338d2b918738d25b34443d38c9eecc1b35fa46e66e9d75d3cd92c3695b350795d430ace5d0348a47d000467acb5a2cd65ab0863c281461db657a855da9484a376188bbbf1611a33254607a53b6afe02244e6c24d493544328948e03f77d00d264195035e8d293c8ddbaf41929c7d5106ddb135d6797ea4f836f3ed953946ef08fb1663e2748b2eabba523149beabf0ef9bdc0d4e93e4d7934297e20e789775825ec2eb39a1430f42ee2dc31bb34050b345b02177a7c79380e6c3ebffcde1e", 0x1000}, {&(0x7f0000002440)="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", 0x1000}, {&(0x7f0000003440)="717fdb86ae2c89c9dfd92cc80b727dac9328fe9064fe7d952f9de08165929f6efa4c035fe96748cd91d5d17d57a64633932008d434e72dfc01da9bd009447894293ec522c403ff6d9377fdd06e455841f4135a7881a77ba17b58b505673eaffd81fac3b4f0d92eec3120afc5b6075aaa46f0cb2b97ccfb6f19497ea131afdd62c82eda5150aa9c9117ee571c92f052710c72f66904032b4e8a6afb729aa90db3677c24", 0xa3}, {&(0x7f0000003500)="48acd6c3dbad8415a378a812fe234fe087d884e5a9", 0x15}], 0x6, &(0x7f0000003680)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffc}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x95de}}, @ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6, 0x1}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0x68, 0x0, 0x7, {[@end, @rr={0x7, 0x27, 0xe, [@multicast1, @empty, @private=0xa010100, @multicast2, @broadcast, @remote, @loopback, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010101]}, @timestamp={0x44, 0x1c, 0xa1, 0x0, 0x8, [0xef26, 0x8000, 0x40, 0x3, 0x9, 0x3]}, @end, @end, @generic={0x82, 0x8, "8f87dc38d582"}, @ssrr={0x89, 0x7, 0xab, [@local]}]}}}], 0x130}}, {{&(0x7f00000037c0)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000003900)=[{&(0x7f0000003800)="dbd7b98ebc66f55ba86d73a9349b319d8673f7f2ffb46f916d3face7c99aebf0323bfd39486179abbc4f48a439f1ff5f24bb51dc935c0caea9b016c376d4dab20c8a4245ef502a97ac48d6762678c08ce661da75c33f748bb98ef073bebc8df676fc6d1a9ddbbe00ae135bb95fde6b8e728e269f18e7981761a2da0a58b63c90a3a78cb3d1fa49c1cffa24eaf875766e160c55b51ae0b72532f0b525ab50bf81eb6acab9483343b1164a0971734a496a905a031e898619e09932fc8f84560976c5540fedaebb651bcf7cd45d5b822a485d5a419131463ed3f8ec35901e785fdac147b1f41a7ca6cfcf6466968d9be0bdecf2b3c7b64abbcfc5", 0xf9}], 0x1, &(0x7f0000003940)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfff}}], 0x18}}, {{&(0x7f0000003980)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000003c40)=[{&(0x7f00000039c0)="28d314a8e96f02e5f551b03dacf53c795f31afb2f08b30f49dc1f7861c11e201b441a30cbf9c887ae071356119a8a35d838b71bfd5dd8301666e1266f2a163a6d53542c1360aa2b2db7a51c64bf7e2d3741fd1f3db08dd648a89076863ba52aaf12f40546713ac37ab9ae7b6ef731ce3fe197bf979b88a1fc997d1aaf932fd1148a72f8c02d1d5df8ce4bff50de5927ee29cc77ae84c81db64f3f867c0cda76fb10726742e29dc41", 0xa8}, {&(0x7f0000003a80)="2378f21f2bccfc458895bbd1d354f288398fc12873dde5e6768d478810e5e61184262b88a11fe3af429870af505eeacc9211e3b1539ae8cf089d14d5ed53936d6238117ac692d4611401bbf31ef7862451c55f2109d73d6a1866bd6104d155ece524e3f79770ba13e4968e9b22e0bffbd3a4dd85c45598063212f7385747b0ed0ea85280f2053b7d47744a46ba9dcb09afb476191faeb4d2e5cf8b0d0463f0450c42ca5af1623c2a9d6aa37e4ce677abef4dbeeed4d3288e62611bb5c52d2474f79b9fb78bf353a8ec11b75c51709c9a46dbabc4f8775a2629a329cf4e959e72", 0xe0}, {&(0x7f0000003b80)="75430098d2c7384aa84c0504a54cdc6fbf074221115334773cf49a2080efddbd3bc10c8cc62722418495a1a6cb6e960718bf43b3945de93795dc2c0b2f19dd374edc45d82fa745886c73085a5c7f9b33803ebbff9ad4758825d4fcafaa4e7d7bae6a9cce2b801ee81d46619dddd7f39315984f18ee41ad33b883a24d8f9a17196f", 0x81}], 0x3, &(0x7f0000003c80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6985}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x30}}], 0x5, 0x4000000)

730.508676ms ago: executing program 2 (id=18555):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0xe1d, @remote, 0x8}]}, &(0x7f0000000640)=0x10) (async)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000080)) (async, rerun: 64)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYRES64=r1], 0x7c}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYRESHEX=0x0], 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x18000) (async)
r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xca)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r4, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r5, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000280)={0x8000, 0x8000, 0x4, 0x8, <r6=>0x0}, &(0x7f00000002c0)=0x10) (async)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r3, 0x4002f516, &(0x7f00000001c0)={0x6, 0x3})
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000300)={r6, 0x59, "b9bb8209a942e2e1a946f5ad975baa1e0a0e3561190c0157cabed5de9aa081cd01e552763a7afac8123c45ecdd77b368004eff9aafad1c2cf65837e8f6c1276dff37385a099b42c892df5e4d8497b564f78451bbd7ef43793c"}, &(0x7f0000000400)=0x61)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0800000004000000040000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000021f200000008000000800000400000000000000000"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000080)="e02739daf71a351238f6fbf7b9ba", 0x0, 0xe89f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f0000000540)={0x3, @null}) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b160000000000000000020000083000048018000180080001006f7366000c0002800800014000000004140001800a000100696e6e6572000000040002800900010073797a30000000000900020073797a3200000000140000001100000000000000000000000000000a"], 0x84}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)

680.592794ms ago: executing program 3 (id=18557):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000f5ff85ffc20022000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000dc28c56a050035a400850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)

679.030161ms ago: executing program 3 (id=18558):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r2=>0x0})
socket$unix(0x1, 0x5, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x5, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x8}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044801}, 0x4000)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6e5415445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d8b6d2ccd00"}, 0xd8)
r5 = socket$kcm(0x23, 0x5, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4)
listen(r5, 0x800)
accept4(r5, 0x0, 0x0, 0x80000)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x620, 0x0, 0x540, 0x540, 0x540, 0x1d0, 0x610, 0x610, 0x610, 0x610, 0x610, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1d0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x80]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xffffff00], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff"], 0x78)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYRES32=r8, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3fd, {0x0, 0x0, 0x0, r2, {0xffe0, 0xfff2}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041890}, 0x0)

570.478602ms ago: executing program 2 (id=18560):
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000004000000080000000600000000000000", @ANYRES32=0x1, @ANYBLOB="010100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) (async)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000004000000080000000600000000000000", @ANYRES32=0x1, @ANYBLOB="010100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x5, 0x389c, 0x7}) (async)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x5, 0x389c, 0x7})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000209500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x22, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000209500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x22, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48)
r1 = socket$netlink(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x10) (async)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
bind$llc(r4, &(0x7f0000000000)={0x1a, 0x312, 0x5, 0xd, 0x3, 0x9, @broadcast}, 0x10) (async)
bind$llc(r4, &(0x7f0000000000)={0x1a, 0x312, 0x5, 0xd, 0x3, 0x9, @broadcast}, 0x10)
sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4)
r5 = socket(0x11, 0x3, 0x0)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, 0x0, 0x0) (async)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
ioctl$FICLONE(r2, 0x40049409, r0)
r7 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041)
close(r7)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000480)="3e314cfc204b39401b3c77c0b48c", 0x0, 0xaeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r9 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async)
setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000100)=0xfffa, &(0x7f0000000140)=0x2)

420.49297ms ago: executing program 3 (id=18563):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e20, 0x2, @loopback, 0x3}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1, 0x2001, 0x9, 0xd5, 0x0, 0x2}, 0x14)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @multicast2}, {0x6, @multicast}, 0xa0, {0x2, 0x4e21, @private=0xa010100}})
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={r1, 0x3, 0x8, [0x1, 0x1, 0x95, 0x0, 0x8, 0x8, 0x3, 0xec]}, &(0x7f00000001c0)=0x18) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x60}, 0x1, 0x0, 0x0, 0x44010}, 0x0)

318.219235ms ago: executing program 1 (id=18566):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000058000000000000000019000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007eaf00000000000056080000000000008500000081000000b7000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

200.111417ms ago: executing program 1 (id=18567):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006800010002000000fcffff7f00000000000001000c000200010000d104000000"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)

199.301756ms ago: executing program 1 (id=18568):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x2, 0x6, 0x0, 0x9, 0x2, 0x0, 0x2}, 0x10}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x2c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}}, 0x0)

150.15797ms ago: executing program 1 (id=18569):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0xfffffffe, @empty, 0x2}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x3)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0xa7ba)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a0100244e000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)

149.665086ms ago: executing program 1 (id=18570):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet(0x2, 0x6000000000000001, 0x0)
mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x4010, r1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d7118aa000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x20, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18)
connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18)
sendmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_POWER(r4, 0x112, 0x9, 0x0, &(0x7f0000000080))
getpeername(r2, 0x0, &(0x7f0000000280))
r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$PTP_CLOCK_GETCAPS(r5, 0x80503d01, &(0x7f0000000100))
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028007080004400000000f080001400000000024000580090001006d6574610000000014000280080001400000000908000240000000102600010073797a3000000001000002007379eabf4d052874392d622d7a3200000000140000001100010000000000000000000300000a000000000000000000000000000000274d0360ee9030d9ff0b2b22132756dbea618507e1cd4847815b54fe5a240961ff78319e55ca362ed036d6e91c1faa2b2dbe8e3c717a76b39f00f665a1e2005ca04dd041e3b39768dc1833b636675726af7612af71e1152e8c428f2fe61abe282d987f882c7a072a85abd201fe063935fd2f13a97f530aed67c039c49ddac413ccdd"], 0xb0}}, 0x804)

0s ago: executing program 1 (id=18571):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, 0x0, 0x0)
r8 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000600)={'team0\x00', <r10=>0x0})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)={0x14, 0x25, 0xfffffffffffffffd, 0x70bd29, 0x25dfdbfe, {0x11}}, 0x14}, 0x1, 0x0, 0x0, 0x400400d}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x300}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket(0x1, 0x803, 0x0)
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'team_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x4000)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}}, 0x0)

kernel console output (not intermixed with test programs):

': attribute type 1 has an invalid length.
[  998.608570][T21510] bond0: entered promiscuous mode
[  998.610741][T21510] 8021q: adding VLAN 0 to HW filter on device bond0
[  998.628382][T21510] bond0: (slave bridge53): making interface the new active one
[  998.630860][T21510] bridge53: entered promiscuous mode
[  998.633309][T21510] bond0: (slave bridge53): Enslaving as an active interface with an up link
[  999.478735][T21556] netlink: 'syz.2.15639': attribute type 83 has an invalid length.
[  999.660189][T21558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15642'.
[  999.792745][T21573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15646'.
[  999.796256][T21576] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  999.799586][T21573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15646'.
[  999.803070][T21574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15646'.
[ 1000.248253][T21613] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1000.253418][T21617] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1000.427076][T21624] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1000.432356][T21623] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1000.642074][T21642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15665'.
[ 1000.647424][T21642] netlink: 92 bytes leftover after parsing attributes in process `syz.1.15665'.
[ 1000.713794][T21649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15667'.
[ 1000.717723][T21649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15667'.
[ 1000.951658][T21660] netlink: 'syz.1.15671': attribute type 4 has an invalid length.
[ 1001.171958][T21678] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1001.319886][T21695] netlink: 'syz.1.15682': attribute type 1 has an invalid length.
[ 1001.354010][T21695] bond63: entered promiscuous mode
[ 1001.357044][T21695] 8021q: adding VLAN 0 to HW filter on device bond63
[ 1001.378450][T21695] bond63: (slave bridge55): making interface the new active one
[ 1001.381327][T21695] bridge55: entered promiscuous mode
[ 1001.384398][T21695] bond63: (slave bridge55): Enslaving as an active interface with an up link
[ 1004.978371][T21749] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1005.073557][T21795] __nla_validate_parse: 5 callbacks suppressed
[ 1005.073569][T21795] netlink: 7 bytes leftover after parsing attributes in process `syz.1.15713'.
[ 1005.081127][T21795] netlink: 7 bytes leftover after parsing attributes in process `syz.1.15713'.
[ 1005.259360][T21814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15720'.
[ 1005.312393][T21818] xt_cluster: node mask cannot exceed total number of nodes
[ 1005.475377][T21836] syzkaller1: entered promiscuous mode
[ 1005.483968][T21836] syzkaller1: entered allmulticast mode
[ 1005.530901][ T6305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1005.533982][ T6305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1005.545642][T21836] netlink: 'syz.1.15729': attribute type 298 has an invalid length.
[ 1005.588618][T21843] netlink: 52 bytes leftover after parsing attributes in process `syz.2.15731'.
[ 1005.777831][T21862] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1005.871063][T21876] netlink: 'syz.2.15740': attribute type 1 has an invalid length.
[ 1005.906643][T21876] bond67: entered promiscuous mode
[ 1005.908556][T21876] 8021q: adding VLAN 0 to HW filter on device bond67
[ 1005.922085][T21876] bond67: (slave bridge53): making interface the new active one
[ 1005.925017][T21876] bridge53: entered promiscuous mode
[ 1005.927607][T21876] bond67: (slave bridge53): Enslaving as an active interface with an up link
[ 1006.013952][T18615] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[ 1006.546953][T21893] bond5 (unregistering): Released all slaves
[ 1006.584301][T21895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15743'.
[ 1006.605526][T21893] netlink: 76 bytes leftover after parsing attributes in process `syz.3.15743'.
[ 1006.609228][T21893] netlink: 76 bytes leftover after parsing attributes in process `syz.3.15743'.
[ 1006.619511][T21893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15743'.
[ 1006.701070][T21898] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[ 1006.705487][T21898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1008.864369][T21873] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1009.925402][T21921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15749'.
[ 1009.946606][T21929] netlink: 76 bytes leftover after parsing attributes in process `syz.3.15751'.
[ 1010.061871][T21943] gretap0: entered promiscuous mode
[ 1010.066170][T21943] 0{X: renamed from gretap0
[ 1010.073538][T21943] 0{X: left promiscuous mode
[ 1010.076855][T21943] 0{X: entered allmulticast mode
[ 1010.081919][T21943] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[ 1010.163680][T21951] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0
[ 1010.241956][T21961] __nla_validate_parse: 3 callbacks suppressed
[ 1010.241971][T21961] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15761'.
[ 1010.252308][T21961] netlink: 'syz.2.15761': attribute type 4 has an invalid length.
[ 1010.352561][T21967] netlink: 'syz.2.15764': attribute type 83 has an invalid length.
[ 1010.798277][T21986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15770'.
[ 1010.807455][T21986] netlink: 116 bytes leftover after parsing attributes in process `syz.2.15770'.
[ 1011.057732][T22028] netlink: 72 bytes leftover after parsing attributes in process `syz.1.15781'.
[ 1011.110699][T22033] bond0: Error: Cannot enslave bond to itself.
[ 1011.141958][T22036] netlink: 'syz.3.15784': attribute type 1 has an invalid length.
[ 1011.174388][T22036] bond5: entered promiscuous mode
[ 1011.177136][T22036] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1011.196711][T22036] bond5: (slave bridge2): making interface the new active one
[ 1011.199113][T22036] bridge2: entered promiscuous mode
[ 1011.201336][T22036] bond5: (slave bridge2): Enslaving as an active interface with an up link
[ 1011.247550][T22046] netlink: 'syz.3.15787': attribute type 1 has an invalid length.
[ 1011.263321][T22046] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1011.342667][T22047] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[ 1011.352303][T22047] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[ 1011.355759][T22047] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[ 1011.398987][T22057] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[ 1011.408353][T22057] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[ 1011.411579][T22057] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[ 1011.450841][T22067] tunl0: entered allmulticast mode
[ 1011.516217][T22075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1011.537994][T22079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15795'.
[ 1011.549415][T22079] netlink: 72 bytes leftover after parsing attributes in process `syz.1.15795'.
[ 1011.552943][T22079] netlink: 72 bytes leftover after parsing attributes in process `syz.1.15795'.
[ 1011.556675][T22071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15792'.
[ 1011.556716][T22071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15792'.
[ 1011.614136][T22083] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15796'.
[ 1011.633746][T22084] lo speed is unknown, defaulting to 1000
[ 1011.691610][T22092] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[ 1011.702510][T22092] netlink: 'syz.1.15800': attribute type 7 has an invalid length.
[ 1011.705576][T22092] netlink: 'syz.1.15800': attribute type 8 has an invalid length.
[ 1011.711558][T22094] netlink: 'syz.3.15799': attribute type 11 has an invalid length.
[ 1011.819517][T22084] lo speed is unknown, defaulting to 1000
[ 1011.984171][T22084] lo speed is unknown, defaulting to 1000
[ 1012.096517][T18615] nci: nci_ntf_packet: unknown ntf opcode 0x802
[ 1012.224551][T22131] openvswitch: netlink: Key 6 has unexpected len 318 expected 2
[ 1012.260927][T22133] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1012.349067][T22141] netlink: 'syz.2.15815': attribute type 4 has an invalid length.
[ 1014.941289][T22119] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1015.087337][T22191] netlink: 'syz.1.15828': attribute type 4 has an invalid length.
[ 1015.143481][T22196] netlink: 'syz.1.15830': attribute type 1 has an invalid length.
[ 1015.245078][T22213] __nla_validate_parse: 9 callbacks suppressed
[ 1015.245101][T22213] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15834'.
[ 1015.251217][T22213] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15834'.
[ 1015.308030][   T13] nci: nci_ntf_packet: unknown ntf opcode 0x802
[ 1015.354233][T22226] netlink: 64 bytes leftover after parsing attributes in process `syz.2.15837'.
[ 1015.682434][T22255] delete_channel: no stack
[ 1015.684378][T22255] delete_channel: no stack
[ 1015.726630][T22260] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15850'.
[ 1016.038950][T22274] netlink: 3 bytes leftover after parsing attributes in process `syz.1.15853'.
[ 1016.042713][T22274] 0X: renamed from caif0
[ 1016.047287][T22274] 0X: entered allmulticast mode
[ 1016.049454][T22274] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[ 1018.175491][T22206] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1018.439122][T22285] netlink: 280 bytes leftover after parsing attributes in process `syz.3.15858'.
[ 1018.465689][T22285] tipc: Enabling of bearer <eth:vcan0> rejected, failed to enable media
[ 1018.641437][T22288] netlink: 'syz.2.15859': attribute type 1 has an invalid length.
[ 1018.925823][T22308] sctp: [Deprecated]: syz.1.15866 (pid 22308) Use of int in max_burst socket option.
[ 1018.925823][T22308] Use struct sctp_assoc_value instead
[ 1019.469272][T22367] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15883'.
[ 1019.689554][T22385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15890'.
[ 1019.888702][T22396] netlink: 'syz.3.15895': attribute type 3 has an invalid length.
[ 1019.892670][T22396] netlink: 'syz.3.15895': attribute type 3 has an invalid length.
[ 1019.933345][T22400] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[ 1019.936046][T22400] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[ 1019.939711][T22400] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[ 1019.968767][T22402] lo speed is unknown, defaulting to 1000
[ 1020.099643][T22402] lo speed is unknown, defaulting to 1000
[ 1020.132464][T22404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15897'.
[ 1020.240083][T22402] lo speed is unknown, defaulting to 1000
[ 1020.542163][T22408] netlink: 'syz.2.15898': attribute type 11 has an invalid length.
[ 1020.545457][T22408] netlink: 'syz.2.15898': attribute type 11 has an invalid length.
[ 1020.548591][T22408] netlink: 204 bytes leftover after parsing attributes in process `syz.2.15898'.
[ 1020.553297][T22408] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15898'.
[ 1020.677376][T22392] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1020.719757][T22414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15900'.
[ 1020.884113][T22418] ip6t_srh: unknown srh match flags  4000
[ 1020.941456][T22423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15903'.
[ 1021.078404][T22429] tipc: Resetting bearer <eth:syzkaller0>
[ 1021.094483][T22429] tipc: Resetting bearer <eth:syzkaller0>
[ 1021.471968][T22433] syzkaller1: entered promiscuous mode
[ 1021.474330][T22433] syzkaller1: entered allmulticast mode
[ 1021.614318][T22436] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1021.915086][T22446] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15911'.
[ 1021.918212][T22446] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15911'.
[ 1021.980318][T22450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15911'.
[ 1022.281722][T22469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15919'.
[ 1022.436718][T22472] netlink: 36 bytes leftover after parsing attributes in process `syz.2.15920'.
[ 1022.552612][T22476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15922'.
[ 1022.676880][T22481] block nbd3: server does not support multiple connections per device.
[ 1022.680211][T22481] block nbd3: shutting down sockets
[ 1022.735513][T22486] netlink: 'syz.1.15925': attribute type 1 has an invalid length.
[ 1022.790263][T22486] 8021q: adding VLAN 0 to HW filter on device bond65
[ 1022.797683][T22486] bond64: (slave bond65): making interface the new active one
[ 1022.801252][T22486] bond64: (slave bond65): Enslaving as an active interface with an up link
[ 1023.153756][T22518] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1023.361777][T22543] bond68 (unregistering): Released all slaves
[ 1023.489753][T22560] netlink: 'syz.2.15946': attribute type 1 has an invalid length.
[ 1023.496052][T22560] netlink: 'syz.2.15946': attribute type 1 has an invalid length.
[ 1023.854463][T22589] pimreg0: tun_chr_ioctl cmd 1074025681
[ 1024.329147][T22616] netlink: 'syz.2.15966': attribute type 2 has an invalid length.
[ 1024.332110][T22616] netlink: 'syz.2.15966': attribute type 8 has an invalid length.
[ 1024.343218][T22616] netlink: 'syz.2.15966': attribute type 2 has an invalid length.
[ 1024.345751][T22616] netlink: 'syz.2.15966': attribute type 8 has an invalid length.
[ 1024.731463][T22665] netlink: 'syz.2.15982': attribute type 1 has an invalid length.
[ 1025.094764][T22695] bond68: entered promiscuous mode
[ 1025.121068][T22698] syzkaller0: entered promiscuous mode
[ 1025.168044][T22702] geneve1: entered promiscuous mode
[ 1025.173941][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1025.178533][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1025.183773][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1025.189360][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1025.747250][T22733] __nla_validate_parse: 17 callbacks suppressed
[ 1025.747270][T22733] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16006'.
[ 1025.989662][T22747] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[ 1025.992416][T22747] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[ 1025.997211][T22747] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[ 1026.089850][T22755] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16013'.
[ 1026.164340][T22756] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.16013'.
[ 1026.368117][T22762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16015'.
[ 1026.695197][T22786] x_tables: duplicate underflow at hook 1
[ 1026.889639][T22803] veth0_to_team: entered promiscuous mode
[ 1026.897837][T22803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16028'.
[ 1026.955152][T22811] netlink: 88 bytes leftover after parsing attributes in process `syz.1.16032'.
[ 1026.958613][T22811] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16032'.
[ 1026.998469][T22809] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16031'.
[ 1027.001445][T22809] netlink: 'syz.2.16031': attribute type 4 has an invalid length.
[ 1027.010039][T22816] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.16034'.
[ 1027.329434][T22848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16044'.
[ 1027.938582][T22902] netlink: 'syz.3.16062': attribute type 4 has an invalid length.
[ 1027.947710][T22902] netlink: 'syz.3.16062': attribute type 4 has an invalid length.
[ 1028.030411][T22910] pim6reg1: entered promiscuous mode
[ 1028.032358][T22910] pim6reg1: entered allmulticast mode
[ 1028.157658][T22911] tipc: Trying to set illegal importance in message
[ 1028.169615][T22909] tipc: Trying to set illegal importance in message
[ 1028.607555][ T1208] block nbd2: Possible stuck request ffff888029098000: control (read@0,1024B). Runtime 270 seconds
[ 1028.611953][ T1208] block nbd2: Possible stuck request ffff888029098200: control (read@1024,1024B). Runtime 270 seconds
[ 1028.617113][ T1208] block nbd2: Possible stuck request ffff888029098400: control (read@2048,1024B). Runtime 270 seconds
[ 1028.621406][ T1208] block nbd2: Possible stuck request ffff888029098600: control (read@3072,1024B). Runtime 270 seconds
[ 1028.630738][   T13] nci: nci_ntf_packet: unknown ntf opcode 0x802
[ 1029.087283][T22982] openvswitch: netlink: Actions may not be safe on all matching packets
[ 1031.535729][T22948] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1031.627933][T22987] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[ 1031.631132][T22987] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[ 1031.634329][T22987] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[ 1031.675892][T22984] block nbd3: server does not support multiple connections per device.
[ 1031.680155][T22984] block nbd3: shutting down sockets
[ 1031.746173][T22998] __nla_validate_parse: 23 callbacks suppressed
[ 1031.746191][T22998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16091'.
[ 1031.782905][T23000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16095'.
[ 1031.789876][T23000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16095'.
[ 1031.793678][T23000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16095'.
[ 1031.794510][T23002] netlink: 84 bytes leftover after parsing attributes in process `syz.2.16096'.
[ 1031.798338][T23000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16095'.
[ 1031.805153][T23000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16095'.
[ 1031.808703][T23000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16095'.
[ 1031.818554][T23000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16095'.
[ 1031.822477][T23000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16095'.
[ 1031.893546][T23009] IPv6: NLM_F_REPLACE set, but no existing node found!
[ 1031.996738][T23017] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[ 1033.105634][T23073] block nbd3: server does not support multiple connections per device.
[ 1033.109926][T23073] block nbd3: shutting down sockets
[ 1033.211519][T23085] veth41: entered promiscuous mode
[ 1033.250773][T23089] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[ 1033.258288][T23089] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280
[ 1033.435203][T23103] block nbd3: server does not support multiple connections per device.
[ 1033.439066][T23103] block nbd3: shutting down sockets
[ 1034.195156][T23159] block nbd3: server does not support multiple connections per device.
[ 1034.200266][T23159] block nbd3: shutting down sockets
[ 1034.741067][T23200] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 1034.744341][T23200] CPU: 1 UID: 0 PID: 23200 Comm: syz.1.16163 Not tainted syzkaller #0 PREEMPT(full) 
[ 1034.744365][T23200] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1034.744373][T23200] Call Trace:
[ 1034.744380][T23200]  <TASK>
[ 1034.744386][T23200]  dump_stack_lvl+0xe8/0x150
[ 1034.744410][T23200]  sysfs_warn_dup+0x8e/0xa0
[ 1034.744424][T23200]  sysfs_do_create_link_sd+0xc0/0x110
[ 1034.744436][T23200]  device_add_class_symlinks+0x1cf/0x240
[ 1034.744453][T23200]  device_add+0x475/0xb70
[ 1034.744466][T23200]  wiphy_register+0x1d73/0x2d50
[ 1034.744487][T23200]  ? __pfx_wiphy_register+0x10/0x10
[ 1034.744497][T23200]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1034.744506][T23200]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 1034.744519][T23200]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 1034.744535][T23200]  ieee80211_register_hw+0x3571/0x4220
[ 1034.744552][T23200]  ? ieee80211_register_hw+0x14c1/0x4220
[ 1034.744605][T23200]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1034.744622][T23200]  ? __hrtimer_setup+0x181/0x200
[ 1034.744635][T23200]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1034.744647][T23200]  mac80211_hwsim_new_radio+0x2f97/0x5330
[ 1034.744675][T23200]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1034.744686][T23200]  ? kstrndup+0xbf/0x160
[ 1034.744701][T23200]  hwsim_new_radio_nl+0xf35/0x1bd0
[ 1034.744724][T23200]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1034.744748][T23200]  ? rcu_is_watching+0x15/0xb0
[ 1034.744761][T23200]  ? trace_kmalloc+0x2a/0x110
[ 1034.744772][T23200]  ? __nla_parse+0x40/0x60
[ 1034.744826][T23200]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[ 1034.744849][T23200]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1034.744869][T23200]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1034.744887][T23200]  ? bpf_lsm_capable+0x9/0x20
[ 1034.744899][T23200]  ? security_capable+0x7e/0x2c0
[ 1034.744913][T23200]  genl_rcv_msg+0x61c/0x7a0
[ 1034.744927][T23200]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1034.744937][T23200]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1034.744950][T23200]  ? __lock_acquire+0x6b5/0x2cf0
[ 1034.744967][T23200]  netlink_rcv_skb+0x232/0x4b0
[ 1034.744978][T23200]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1034.744989][T23200]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1034.745006][T23200]  ? down_read+0x272/0x2e0
[ 1034.745015][T23200]  ? genl_rcv+0xd/0x40
[ 1034.745027][T23200]  genl_rcv+0x28/0x40
[ 1034.745037][T23200]  netlink_unicast+0x80f/0x9b0
[ 1034.745050][T23200]  ? __pfx_netlink_unicast+0x10/0x10
[ 1034.745171][T23200]  ? netlink_sendmsg+0x650/0xb40
[ 1034.745209][T23200]  ? skb_put+0x11b/0x210
[ 1034.745230][T23200]  netlink_sendmsg+0x813/0xb40
[ 1034.745254][T23200]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1034.745273][T23200]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1034.745293][T23200]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1034.745308][T23200]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1034.745319][T23200]  ____sys_sendmsg+0xa68/0xad0
[ 1034.745331][T23200]  ? futex_unqueue+0x211/0x240
[ 1034.745350][T23200]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1034.745365][T23200]  ? import_iovec+0x73/0xa0
[ 1034.745379][T23200]  ___sys_sendmsg+0x2a5/0x360
[ 1034.745393][T23200]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1034.745407][T23200]  ? futex_wait+0x29a/0x380
[ 1034.745433][T23200]  ? __fget_files+0x2a/0x420
[ 1034.745444][T23200]  ? __fget_files+0x3a0/0x420
[ 1034.745466][T23200]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1034.745479][T23200]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1034.745495][T23200]  ? rcu_is_watching+0x15/0xb0
[ 1034.745514][T23200]  do_syscall_64+0x14d/0xf80
[ 1034.745528][T23200]  ? trace_irq_disable+0x3b/0x150
[ 1034.745539][T23200]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1034.745550][T23200]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1034.745561][T23200] RIP: 0033:0x7f063179cdd9
[ 1034.745572][T23200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1034.745579][T23200] RSP: 002b:00007f0632671028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1034.745590][T23200] RAX: ffffffffffffffda RBX: 00007f0631a15fa0 RCX: 00007f063179cdd9
[ 1034.745596][T23200] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[ 1034.745601][T23200] RBP: 00007f0631832d69 R08: 0000000000000000 R09: 0000000000000000
[ 1034.745606][T23200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1034.745610][T23200] R13: 00007f0631a16038 R14: 00007f0631a15fa0 R15: 00007ffdd29e89b8
[ 1034.745624][T23200]  </TASK>
[ 1035.018692][T23218] netlink: 'syz.2.16167': attribute type 1 has an invalid length.
[ 1035.049887][T23218] bond69: entered promiscuous mode
[ 1035.051860][T23218] 8021q: adding VLAN 0 to HW filter on device bond69
[ 1035.075732][T23218] bond69: (slave bridge54): making interface the new active one
[ 1035.078429][T23218] bridge54: entered promiscuous mode
[ 1035.083298][T23218] bond69: (slave bridge54): Enslaving as an active interface with an up link
[ 1035.403135][T23253] netlink: 'syz.1.16174': attribute type 1 has an invalid length.
[ 1035.422021][T23253] 8021q: adding VLAN 0 to HW filter on device bond66
[ 1035.483945][T18615] nci: nci_ntf_packet: unknown ntf opcode 0x802
[ 1038.336837][T23246] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1038.340438][ T5256] udevd[5256]: worker [10026] /devices/virtual/block/nbd2 timeout; kill it
[ 1038.343658][ T5256] udevd[5256]: seq 33796 '/devices/virtual/block/nbd2' killed
[ 1038.352298][T23253] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!Y
[ 1038.352298][T23253] 3UH5rBn
[ 1038.597709][T23333] xt_time: invalid argument - start or stop time greater than 23:59:59
[ 1038.772520][T19703] nci: nci_ntf_packet: unknown ntf opcode 0x802
[ 1041.695274][T23346] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1042.194421][T23401] __nla_validate_parse: 29 callbacks suppressed
[ 1042.194442][T23401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16206'.
[ 1042.268281][T23405] batadv_slave_1: entered promiscuous mode
[ 1042.322230][T23404] batadv_slave_1: left promiscuous mode
[ 1042.528545][T23416] netlink: 'syz.3.16210': attribute type 27 has an invalid length.
[ 1042.707498][T23427] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1043.321247][T23471] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1043.330176][T23471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1043.458266][T23479] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16231'.
[ 1043.461945][T23479] netlink: 'syz.2.16231': attribute type 4 has an invalid length.
[ 1043.556384][T23484] netlink: 72 bytes leftover after parsing attributes in process `syz.2.16234'.
[ 1043.559809][T23484] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16234'.
[ 1043.641574][T23493] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16236'.
[ 1043.694397][T23496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16238'.
[ 1043.703308][T23496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16238'.
[ 1043.782260][T19703] nci: nci_ntf_packet: unknown ntf opcode 0x802
[ 1044.170898][T23518] netlink: 80 bytes leftover after parsing attributes in process `syz.1.16244'.
[ 1046.697033][T23498] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1046.879918][T23532] lo speed is unknown, defaulting to 1000
[ 1046.935117][T23536] netlink: 'syz.2.16250': attribute type 1 has an invalid length.
[ 1046.959671][T23536] bond70: entered promiscuous mode
[ 1046.961964][T23536] 8021q: adding VLAN 0 to HW filter on device bond70
[ 1046.983923][T23536] bond70: (slave bridge55): making interface the new active one
[ 1046.995067][T23536] bridge55: entered promiscuous mode
[ 1047.000082][T23536] bond70: (slave bridge55): Enslaving as an active interface with an up link
[ 1047.073221][T23532] lo speed is unknown, defaulting to 1000
[ 1047.100864][T23546] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16253'.
[ 1047.104345][T23546] netlink: 'syz.2.16253': attribute type 4 has an invalid length.
[ 1047.180630][T23532] lo speed is unknown, defaulting to 1000
[ 1047.209403][T23555] atomic_op ffff88817aceb998 conn xmit_atomic 0000000000000000
[ 1047.403142][T23568] netlink: 128 bytes leftover after parsing attributes in process `syz.2.16258'.
[ 1047.418517][T23576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16261'.
[ 1047.421897][T23576] netlink: 98 bytes leftover after parsing attributes in process `syz.3.16261'.
[ 1047.668557][T23596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16266'.
[ 1048.056444][T23617] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16273'.
[ 1048.090151][T23617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16273'.
[ 1048.151608][ T4380] nci: nci_ntf_packet: unknown ntf opcode 0x802
[ 1048.587338][T23623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16274'.
[ 1048.806510][T23639] syzkaller1: entered promiscuous mode
[ 1048.808932][T23639] syzkaller1: entered allmulticast mode
[ 1051.032687][T23617] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1051.323182][T23678] netlink: 'syz.3.16290': attribute type 13 has an invalid length.
[ 1051.395155][T23681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16290'.
[ 1051.508105][T23683] block nbd3: server does not support multiple connections per device.
[ 1051.512966][T23683] block nbd3: shutting down sockets
[ 1051.777993][T23701] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16297'.
[ 1051.783195][T23701] netlink: 'syz.3.16297': attribute type 1 has an invalid length.
[ 1051.804469][T23701] bond7: entered promiscuous mode
[ 1051.809056][T23701] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1051.839433][T23701] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1051.842673][T23701] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address
[ 1051.850702][T23701] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[ 1051.850925][ T5655] nci: nci_ntf_packet: unknown ntf opcode 0x802
[ 1051.866060][T23701] bond7: (slave wireguard0): making interface the new active one
[ 1051.871027][T23701] wireguard0: entered promiscuous mode
[ 1051.880453][T23701] bond7: (slave wireguard0): Enslaving as an active interface with an up link
[ 1051.950693][T23712] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16301'.
[ 1054.750447][T23697] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1054.756870][T23726] netlink: 'syz.2.16306': attribute type 10 has an invalid length.
[ 1054.765206][T23726] __nla_validate_parse: 3 callbacks suppressed
[ 1054.765224][T23726] netlink: 228 bytes leftover after parsing attributes in process `syz.2.16306'.
[ 1054.894303][T23730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16308'.
[ 1054.981391][T23740] bond0: Caught tx_queue_len zero misconfig
[ 1054.998837][T23743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16312'.
[ 1055.260337][T23759] lo speed is unknown, defaulting to 1000
[ 1055.433198][T23765] netlink: 'syz.1.16321': attribute type 1 has an invalid length.
[ 1055.436991][T23765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16321'.
[ 1055.442210][T23759] lo speed is unknown, defaulting to 1000
[ 1055.606755][T23759] lo speed is unknown, defaulting to 1000
[ 1056.146417][T23805] lo speed is unknown, defaulting to 1000
[ 1056.281045][T23805] lo speed is unknown, defaulting to 1000
[ 1056.364810][T23822] netlink: 48 bytes leftover after parsing attributes in process `syz.3.16338'.
[ 1056.486200][T23827] netlink: 'syz.3.16341': attribute type 1 has an invalid length.
[ 1056.489487][T23827] netlink: 1008 bytes leftover after parsing attributes in process `syz.3.16341'.
[ 1056.504890][T23830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16342'.
[ 1056.569471][T23830] netlink: 'syz.1.16342': attribute type 3 has an invalid length.
[ 1056.572475][T23830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16342'.
[ 1056.586525][T23830] netlink: 'syz.1.16342': attribute type 3 has an invalid length.
[ 1056.591148][T23830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16342'.
[ 1056.674243][T23805] lo speed is unknown, defaulting to 1000
[ 1056.783654][T23845] netlink: 2 bytes leftover after parsing attributes in process `syz.3.16345'.
[ 1056.935410][T23849] netlink: 'syz.1.16347': attribute type 3 has an invalid length.
[ 1056.947252][T23849] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[ 1056.950076][T23849] tipc: Bearer <udp:syz0>: trying with adjusted priority
[ 1056.953199][T23849] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[ 1057.823121][T23905] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 1057.901267][T23913] xt_hashlimit: overflow, rate too high: 0
[ 1057.913425][T23913] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[ 1057.920977][T23913] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[ 1057.924330][T23913] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[ 1058.279931][T23948] netlink: 'syz.2.16379': attribute type 4 has an invalid length.
[ 1058.485445][T23971] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1058.491126][T23971] IPVS: length: 35 != 24
[ 1058.676201][ T1208] block nbd2: Possible stuck request ffff888029098000: control (read@0,1024B). Runtime 300 seconds
[ 1058.680828][ T1208] block nbd2: Possible stuck request ffff888029098200: control (read@1024,1024B). Runtime 300 seconds
[ 1058.685534][ T1208] block nbd2: Possible stuck request ffff888029098400: control (read@2048,1024B). Runtime 300 seconds
[ 1058.689113][ T1208] block nbd2: Possible stuck request ffff888029098600: control (read@3072,1024B). Runtime 300 seconds
[ 1059.446803][T24020] netlink: 'syz.1.16401': attribute type 1 has an invalid length.
[ 1059.449412][T24020] netlink: 'syz.1.16401': attribute type 1 has an invalid length.
[ 1059.489509][T24023] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1059.606613][T24031] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[ 1059.609832][T24031] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[ 1059.613075][T24031] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[ 1059.833765][T24047] __nla_validate_parse: 12 callbacks suppressed
[ 1059.833799][T24047] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16410'.
[ 1059.840178][T24047] netlink: 'syz.1.16410': attribute type 4 has an invalid length.
[ 1059.843554][T24047] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16410'.
[ 1059.848388][T24047] netlink: 'syz.1.16410': attribute type 4 has an invalid length.
[ 1059.856869][T24047] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16410'.
[ 1059.859651][T24047] netlink: 'syz.1.16410': attribute type 4 has an invalid length.
[ 1059.864478][T24047] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16410'.
[ 1059.868807][T24047] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16410'.
[ 1059.874524][T24047] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16410'.
[ 1059.889938][T24047] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16410'.
[ 1060.160766][T24063] nbd: must specify at least one socket
[ 1060.435654][T24077] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[ 1060.440298][T24077] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[ 1060.443861][T24077] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[ 1060.473490][T24079] lo speed is unknown, defaulting to 1000
[ 1060.496418][T24082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16418'.
[ 1060.608411][T24079] lo speed is unknown, defaulting to 1000
[ 1060.608683][T24080] lo speed is unknown, defaulting to 1000
[ 1060.715715][T24079] lo speed is unknown, defaulting to 1000
[ 1060.805002][T24080] lo speed is unknown, defaulting to 1000
[ 1061.043695][T24080] lo speed is unknown, defaulting to 1000
[ 1061.071235][T24087] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16420'.
[ 1061.613966][T24120] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16424'.
[ 1062.347294][T24165] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode
[ 1062.349627][T24165] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode
[ 1062.352532][T24165] tipc: Resetting bearer <eth:syzkaller0>
[ 1062.780071][T24204] validate_nla: 4 callbacks suppressed
[ 1062.780082][T24204] netlink: 'syz.1.16448': attribute type 1 has an invalid length.
[ 1062.957570][T24219] atomic_op ffff88816b06a198 conn xmit_atomic 0000000000000000
[ 1063.306845][T24242] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode
[ 1063.309122][T24242] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[ 1063.311698][T24242] tipc: Resetting bearer <eth:syzkaller0>
[ 1063.488534][T24265] bond71 (unregistering): Released all slaves
[ 1063.741238][T24294] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[ 1063.743636][T24294] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[ 1063.747130][T24294] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[ 1063.805506][T24295] tipc: Resetting bearer <eth:syzkaller0>
[ 1063.927129][T24295] bond11: left allmulticast mode
[ 1063.928747][T24295] bond11: left promiscuous mode
[ 1063.953674][T19703] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1063.960697][T19703] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1063.963962][T19703] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1063.969394][T24305] sit0: left promiscuous mode
[ 1063.975628][T19703] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1064.066835][T24310] netlink: 'syz.1.16483': attribute type 1 has an invalid length.
[ 1064.070194][T24310] netlink: 'syz.1.16483': attribute type 3 has an invalid length.
[ 1064.369873][T24317] netlink: 'syz.1.16486': attribute type 4 has an invalid length.
[ 1064.860595][T24350] __nla_validate_parse: 25 callbacks suppressed
[ 1064.860613][T24350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16498'.
[ 1064.882373][T24350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16498'.
[ 1064.995236][T24357] netlink: 'syz.3.16499': attribute type 1 has an invalid length.
[ 1064.998908][T24357] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[ 1065.212457][T24374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16506'.
[ 1065.277666][T24378] netlink: 76 bytes leftover after parsing attributes in process `syz.1.16507'.
[ 1065.296819][T24378] netlink: 76 bytes leftover after parsing attributes in process `syz.1.16507'.
[ 1065.341741][T24374] tipc: Resetting bearer <eth:syzkaller0>
[ 1066.111115][T24394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16511'.
[ 1066.118695][T24394] netlink: 52 bytes leftover after parsing attributes in process `syz.1.16511'.
[ 1066.122387][T24394] netlink: 352 bytes leftover after parsing attributes in process `syz.1.16511'.
[ 1066.127104][T24394] netlink: 52 bytes leftover after parsing attributes in process `syz.1.16511'.
[ 1066.167406][T24397] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16512'.
[ 1066.183603][T24397] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[ 1066.379097][T24405] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[ 1066.414326][T24410] netlink: 'syz.3.16517': attribute type 1 has an invalid length.
[ 1066.450926][T24414] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20003
[ 1066.453213][T24414] nbd: must specify at least one socket
[ 1066.585593][T24431] netlink: 'syz.3.16525': attribute type 10 has an invalid length.
[ 1066.656824][T24436] netlink: 'syz.1.16527': attribute type 7 has an invalid length.
[ 1066.659169][T24436] netlink: 'syz.1.16527': attribute type 8 has an invalid length.
[ 1066.681592][T24438] netlink: 'syz.3.16528': attribute type 4 has an invalid length.
[ 1067.011667][T24464] openvswitch: netlink: Message has 4 unknown bytes.
[ 1067.079736][T24470] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[ 1067.082212][T24470] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[ 1067.091296][T24470] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[ 1067.186550][T24477] bond68: entered promiscuous mode
[ 1067.188331][T24477] 8021q: adding VLAN 0 to HW filter on device bond68
[ 1067.203651][T24477] bond68: (slave bridge56): making interface the new active one
[ 1067.206970][T24477] bridge56: entered promiscuous mode
[ 1067.210149][T24477] bond68: (slave bridge56): Enslaving as an active interface with an up link
[ 1067.318525][T24484] sctp: [Deprecated]: syz.1.16547 (pid 24484) Use of int in maxseg socket option.
[ 1067.318525][T24484] Use struct sctp_assoc_value instead
[ 1068.009692][T24533] validate_nla: 3 callbacks suppressed
[ 1068.009704][T24533] netlink: 'syz.2.16565': attribute type 1 has an invalid length.
[ 1068.029176][T24533] bond71: entered promiscuous mode
[ 1068.031370][T24533] 8021q: adding VLAN 0 to HW filter on device bond71
[ 1068.058442][T24533] bond71: (slave bridge56): making interface the new active one
[ 1068.061556][T24533] bridge56: entered promiscuous mode
[ 1068.065537][T24533] bond71: (slave bridge56): Enslaving as an active interface with an up link
[ 1068.166250][T24539] tipc: Resetting bearer <eth:syzkaller0>
[ 1068.297950][T24549] IPVS: set_ctl: invalid protocol: 50 100.1.1.5:20002
[ 1068.815092][T24576] netlink: 'syz.3.16579': attribute type 1 has an invalid length.
[ 1069.008153][T24598] netlink: 'syz.3.16586': attribute type 8 has an invalid length.
[ 1069.039207][T24598] netlink: 'syz.3.16586': attribute type 4 has an invalid length.
[ 1069.061740][T24598] netlink: 'syz.3.16586': attribute type 4 has an invalid length.
[ 1069.070518][T24600] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[ 1069.073584][T24600] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[ 1069.221467][T24598] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1069.416708][T24614] netlink: 'syz.1.16589': attribute type 1 has an invalid length.
[ 1069.560462][T24598] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1069.578647][T24598] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1070.013102][T18615] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1070.024804][T18615] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1070.074945][T18615] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1070.078660][T18615] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1070.158657][T24622] __nla_validate_parse: 26 callbacks suppressed
[ 1070.158677][T24622] netlink: 388 bytes leftover after parsing attributes in process `syz.3.16592'.
[ 1070.171602][T24622] netlink: 104 bytes leftover after parsing attributes in process `syz.3.16592'.
[ 1070.315403][T24632] netlink: 'syz.2.16595': attribute type 11 has an invalid length.
[ 1070.764876][T24660] netlink: 'syz.2.16603': attribute type 4 has an invalid length.
[ 1070.795001][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1070.854866][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1070.997823][T24674] netlink: 'syz.3.16607': attribute type 3 has an invalid length.
[ 1071.003442][T24674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16607'.
[ 1071.010757][T24672] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16606'.
[ 1071.016845][T24669] openvswitch: netlink: Flow key attr not present in new flow.
[ 1071.019990][T24672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16606'.
[ 1071.029654][T24672] netlink: 'syz.2.16606': attribute type 1 has an invalid length.
[ 1071.036466][T24669] IPVS: Unknown mcast interface: .
[ 1071.059644][T24677] netlink: 'syz.3.16608': attribute type 4 has an invalid length.
[ 1071.302546][T24689] netlink: 52 bytes leftover after parsing attributes in process `syz.1.16613'.
[ 1071.304827][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1071.311068][T24689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16613'.
[ 1071.460083][T24710] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16621'.
[ 1071.709606][T24733] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16631'.
[ 1071.833055][T24738] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1071.837317][T24738] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1072.077153][T24743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16634'.
[ 1072.581046][T24736] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1073.119744][T24782] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7
[ 1073.155826][T24782] lo: Caught tx_queue_len zero misconfig
[ 1073.234535][T24801] validate_nla: 3 callbacks suppressed
[ 1073.234553][T24801] netlink: 'syz.1.16649': attribute type 4 has an invalid length.
[ 1073.424498][T24820] netlink: 'syz.1.16657': attribute type 1 has an invalid length.
[ 1073.439468][T24820] bond69: entered promiscuous mode
[ 1073.441591][T24820] bond69: entered allmulticast mode
[ 1073.443948][T24820] 8021q: adding VLAN 0 to HW filter on device bond69
[ 1074.019603][T24869] bond72: entered promiscuous mode
[ 1074.021948][T24869] 8021q: adding VLAN 0 to HW filter on device bond72
[ 1074.032458][T24872] 8021q: VLANs not supported on team0
[ 1074.167863][T24883] can: request_module (can-proto-0) failed.
[ 1075.057643][T24942] netlink: 'syz.2.16701': attribute type 2 has an invalid length.
[ 1075.105659][T24947] netlink: 'syz.2.16703': attribute type 1 has an invalid length.
[ 1075.543862][T24993] netlink: 'syz.3.16718': attribute type 1 has an invalid length.
[ 1075.586085][T24993] bond8: entered promiscuous mode
[ 1075.588290][T24993] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1075.624054][T24993] bond8: (slave bridge3): making interface the new active one
[ 1075.628150][T24993] bridge3: entered promiscuous mode
[ 1075.631357][T24993] bond8: (slave bridge3): Enslaving as an active interface with an up link
[ 1075.782119][T25006] __nla_validate_parse: 16 callbacks suppressed
[ 1075.782135][T25006] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16724'.
[ 1075.886842][T25021] batadv_slave_1: entered promiscuous mode
[ 1075.893488][T25019] batadv_slave_1: left promiscuous mode
[ 1075.938099][T25023] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16729'.
[ 1076.033978][T25027] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[ 1076.076008][T25029] netlink: 'syz.2.16732': attribute type 1 has an invalid length.
[ 1076.308627][T25040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16736'.
[ 1076.344020][T25042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16737'.
[ 1077.782921][T25081] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[ 1077.787874][T25081] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[ 1077.790347][T25081] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[ 1077.913578][T25092] netlink: 'syz.2.16753': attribute type 10 has an invalid length.
[ 1077.916490][T25092] netlink: 228 bytes leftover after parsing attributes in process `syz.2.16753'.
[ 1078.033530][T25098] bond73 (unregistering): Released all slaves
[ 1078.142836][T25102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16757'.
[ 1078.347502][T25117] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16762'.
[ 1078.379124][T25119] xt_hashlimit: size too large, truncated to 1048576
[ 1078.431066][T25121] netlink: 'syz.2.16763': attribute type 1 has an invalid length.
[ 1078.433837][T25121] netlink: 224 bytes leftover after parsing attributes in process `syz.2.16763'.
[ 1078.666494][T25137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16764'.
[ 1079.056517][T25168] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16772'.
[ 1079.211255][T25181] netlink: 'syz.3.16778': attribute type 1 has an invalid length.
[ 1079.490089][T25202] netlink: Conntrack attr has 3 unknown bytes
[ 1079.987317][T25259] x_tables: duplicate underflow at hook 1
[ 1080.808550][T25277] __nla_validate_parse: 5 callbacks suppressed
[ 1080.808567][T25277] netlink: 14 bytes leftover after parsing attributes in process `syz.3.16809'.
[ 1082.937917][T25251] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1083.066137][T25288] netlink: 44 bytes leftover after parsing attributes in process `syz.3.16811'.
[ 1083.369351][T25320] netlink: 'syz.1.16821': attribute type 29 has an invalid length.
[ 1083.385306][T25320] netlink: 'syz.1.16821': attribute type 29 has an invalid length.
[ 1083.397459][T25320] netlink: 500 bytes leftover after parsing attributes in process `syz.1.16821'.
[ 1083.401844][T25320] netlink: 'syz.1.16821': attribute type 29 has an invalid length.
[ 1083.402267][T25322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16823'.
[ 1083.560300][T25330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16826'.
[ 1083.590042][T25336] netlink: 76 bytes leftover after parsing attributes in process `syz.2.16829'.
[ 1083.610735][T25338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16829'.
[ 1083.621868][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1083.627578][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1083.712637][T25341] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16830'.
[ 1084.082004][T25361] netlink: 'syz.2.16837': attribute type 1 has an invalid length.
[ 1084.094787][T25358] netlink: 64 bytes leftover after parsing attributes in process `syz.1.16836'.
[ 1084.097874][T25358] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16836'.
[ 1084.120204][T25361] 8021q: adding VLAN 0 to HW filter on device bond74
[ 1084.128865][T25361] bond73: (slave bond74): making interface the new active one
[ 1084.131647][T25361] bond73: (slave bond74): Enslaving as an active interface with an up link
[ 1084.139519][T25361] pim6reg: entered allmulticast mode
[ 1084.142655][T25360] pim6reg: left allmulticast mode
[ 1084.450869][T25382] netlink: 'syz.2.16844': attribute type 2 has an invalid length.
[ 1084.530713][T25390] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[ 1084.808886][T25414] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[ 1085.348169][T25465] xt_hashlimit: size too large, truncated to 1048576
[ 1085.695299][T25483] netlink: 'syz.3.16880': attribute type 1 has an invalid length.
[ 1085.718311][T25483] bond9: entered promiscuous mode
[ 1085.720869][T25483] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1085.758756][T25483] bond9: (slave bridge5): making interface the new active one
[ 1085.762022][T25483] bridge5: entered promiscuous mode
[ 1085.765964][T25483] bond9: (slave bridge5): Enslaving as an active interface with an up link
[ 1085.880618][T25500] netlink: 'syz.2.16884': attribute type 1 has an invalid length.
[ 1085.883612][T25500] netlink: 'syz.2.16884': attribute type 2 has an invalid length.
[ 1085.900598][T25500] __nla_validate_parse: 7 callbacks suppressed
[ 1085.900616][T25500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16884'.
[ 1086.157431][T25514] netlink: 'syz.1.16890': attribute type 1 has an invalid length.
[ 1086.180440][T25514] bond70: entered promiscuous mode
[ 1086.183553][T25514] 8021q: adding VLAN 0 to HW filter on device bond70
[ 1086.200482][T25514] bond70: (slave bridge58): making interface the new active one
[ 1086.203393][T25514] bridge58: entered promiscuous mode
[ 1086.208005][T25514] bond70: (slave bridge58): Enslaving as an active interface with an up link
[ 1086.426463][T25541] netlink: 'syz.2.16898': attribute type 1 has an invalid length.
[ 1086.463818][T25541] 8021q: adding VLAN 0 to HW filter on device bond75
[ 1086.522908][T25547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16899'.
[ 1086.529741][T25547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16899'.
[ 1086.702381][T25555] netlink: 80 bytes leftover after parsing attributes in process `syz.2.16903'.
[ 1086.780150][T25559] netlink: 56 bytes leftover after parsing attributes in process `syz.1.16905'.
[ 1086.893417][T25569] netlink: 'syz.3.16907': attribute type 1 has an invalid length.
[ 1086.932037][T25569] bond10: entered promiscuous mode
[ 1086.934514][T25569] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1086.960879][T25569] bond10: (slave bridge6): making interface the new active one
[ 1086.963971][T25569] bridge6: entered promiscuous mode
[ 1086.967841][T25569] bond10: (slave bridge6): Enslaving as an active interface with an up link
[ 1087.479909][T25608] xt_l2tp: unknown flags: 51
[ 1087.728529][T25616] netlink: 64 bytes leftover after parsing attributes in process `syz.2.16924'.
[ 1087.732864][T25624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16927'.
[ 1087.739601][T25626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16927'.
[ 1088.008327][T25641] netlink: 44 bytes leftover after parsing attributes in process `syz.3.16933'.
[ 1088.341163][T25674] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16946'.
[ 1088.373252][T25674] bond0: left promiscuous mode
[ 1088.407000][T25676] netlink: 'syz.1.16947': attribute type 4 has an invalid length.
[ 1088.659630][T25703] netlink: 'syz.3.16956': attribute type 4 has an invalid length.
[ 1088.761271][ T1208] block nbd2: Possible stuck request ffff888029098000: control (read@0,1024B). Runtime 330 seconds
[ 1088.764926][ T1208] block nbd2: Possible stuck request ffff888029098200: control (read@1024,1024B). Runtime 330 seconds
[ 1088.768410][ T1208] block nbd2: Possible stuck request ffff888029098400: control (read@2048,1024B). Runtime 330 seconds
[ 1088.771597][ T1208] block nbd2: Possible stuck request ffff888029098600: control (read@3072,1024B). Runtime 330 seconds
[ 1089.353390][T25747] lo speed is unknown, defaulting to 1000
[ 1089.541345][T25747] lo speed is unknown, defaulting to 1000
[ 1089.721240][T25747] lo speed is unknown, defaulting to 1000
[ 1090.002658][T25786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1090.083860][T25787] dvmrp0: left allmulticast mode
[ 1090.254432][T25796] netlink: 'syz.1.16985': attribute type 4 has an invalid length.
[ 1090.473499][T25806] xt_l2tp: invalid flags combination: 8
[ 1090.492997][T25806] netlink: 'syz.2.16990': attribute type 1 has an invalid length.
[ 1090.583288][T25813] netlink: 'syz.1.16991': attribute type 1 has an invalid length.
[ 1091.042485][T25856] __nla_validate_parse: 84 callbacks suppressed
[ 1091.042496][T25856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17004'.
[ 1091.058549][T25858] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17005'.
[ 1091.095020][T25860] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma?
[ 1091.351140][T25882] batadv_slave_0: Caught tx_queue_len zero misconfig
[ 1091.617024][T25901] netlink: 'syz.3.17018': attribute type 17 has an invalid length.
[ 1091.620611][T25901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17018'.
[ 1091.626909][T25901] bond0: option all_slaves_active: invalid value (191)
[ 1094.959224][T25934] sctp: [Deprecated]: syz.3.17030 (pid 25934) Use of int in maxseg socket option.
[ 1094.959224][T25934] Use struct sctp_assoc_value instead
[ 1094.992004][T25938] netlink: 108 bytes leftover after parsing attributes in process `syz.2.17031'.
[ 1095.050394][T25944] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17024'.
[ 1095.066041][T25944] netlink: 'syz.1.17024': attribute type 1 has an invalid length.
[ 1095.069003][T25944] netlink: 224 bytes leftover after parsing attributes in process `syz.1.17024'.
[ 1095.072348][T25944] NCSI netlink: No device for ifindex 0
[ 1095.098003][T25946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17034'.
[ 1095.123608][T25948] netlink: 52 bytes leftover after parsing attributes in process `syz.2.17035'.
[ 1095.557743][T25976] netlink: 232 bytes leftover after parsing attributes in process `syz.3.17045'.
[ 1095.941290][T25990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17051'.
[ 1095.945720][T25990] netlink: 'syz.3.17051': attribute type 12 has an invalid length.
[ 1095.958987][T25990] netlink: 'syz.3.17051': attribute type 12 has an invalid length.
[ 1095.960048][ T4380] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1095.965077][ T4380] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1095.967867][ T4380] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1095.971507][ T4380] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1096.026685][T25993] pim6reg: entered allmulticast mode
[ 1096.087974][T25999] __nla_validate_parse: 1 callbacks suppressed
[ 1096.087993][T25999] netlink: 80 bytes leftover after parsing attributes in process `syz.2.17054'.
[ 1096.228278][T18615] tipc: Subscription rejected, illegal request
[ 1096.235360][T26008] netlink: 64 bytes leftover after parsing attributes in process `syz.2.17057'.
[ 1096.250230][T26010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17058'.
[ 1096.563221][T26041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17067'.
[ 1096.583033][T26043] lo: entered allmulticast mode
[ 1096.591166][T26043] lo: left allmulticast mode
[ 1096.598211][T26043] netlink: 504 bytes leftover after parsing attributes in process `syz.3.17068'.
[ 1096.811639][T26057] netlink: 'syz.3.17073': attribute type 1 has an invalid length.
[ 1096.874423][T26061] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17074'.
[ 1096.877881][T26061] netlink: 'syz.1.17074': attribute type 1 has an invalid length.
[ 1096.880513][T26061] netlink: 72 bytes leftover after parsing attributes in process `syz.1.17074'.
[ 1096.883814][T26061] netlink: 252 bytes leftover after parsing attributes in process `syz.1.17074'.
[ 1096.888515][T26061] netlink: 'syz.1.17074': attribute type 1 has an invalid length.
[ 1096.891163][T26061] netlink: 72 bytes leftover after parsing attributes in process `syz.1.17074'.
[ 1096.936112][T26065] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17076'.
[ 1097.317085][T26096] netlink: 'syz.2.17086': attribute type 1 has an invalid length.
[ 1097.339664][T26096] bond76: entered promiscuous mode
[ 1097.341842][T26096] 8021q: adding VLAN 0 to HW filter on device bond76
[ 1097.375629][T26096] bond76: (slave bridge57): making interface the new active one
[ 1097.378448][T26096] bridge57: entered promiscuous mode
[ 1097.381833][T26096] bond76: (slave bridge57): Enslaving as an active interface with an up link
[ 1097.519527][T26116] tipc: Resetting bearer <eth:syzkaller0>
[ 1097.691316][T26128] netlink: 'syz.1.17095': attribute type 1 has an invalid length.
[ 1097.713889][T26128] bond71: entered promiscuous mode
[ 1097.717719][T26128] 8021q: adding VLAN 0 to HW filter on device bond71
[ 1097.741150][T26128] bond71: (slave bridge59): making interface the new active one
[ 1097.744863][T26128] bridge59: entered promiscuous mode
[ 1097.748237][T26128] bond71: (slave bridge59): Enslaving as an active interface with an up link
[ 1097.884898][T26143] netlink: 'syz.3.17100': attribute type 1 has an invalid length.
[ 1098.020005][T26152] netlink: 'syz.3.17101': attribute type 11 has an invalid length.
[ 1098.081530][T26155] netlink: 'syz.3.17104': attribute type 11 has an invalid length.
[ 1098.207628][T26162] netlink: 'syz.1.17105': attribute type 1 has an invalid length.
[ 1098.363483][T26171] ip6t_srh: unknown srh invflags 4000
[ 1098.987542][T26217] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[ 1099.027560][T26217] bridge58: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[ 1099.213510][T26225] bond12: entered promiscuous mode
[ 1099.219700][T26225] 8021q: adding VLAN 0 to HW filter on device bond12
[ 1099.243556][T26225] bond12: (slave bridge7): making interface the new active one
[ 1099.247719][T26225] bridge7: entered promiscuous mode
[ 1099.251129][T26225] bond12: (slave bridge7): Enslaving as an active interface with an up link
[ 1099.340885][T26238] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[ 1099.344220][T26238] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[ 1099.349865][T26238] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[ 1100.201264][T26283] bond13: entered promiscuous mode
[ 1100.203839][T26283] 8021q: adding VLAN 0 to HW filter on device bond13
[ 1100.220171][T26283] bond13: (slave bridge8): making interface the new active one
[ 1100.222485][T26283] bridge8: entered promiscuous mode
[ 1100.225249][T26283] bond13: (slave bridge8): Enslaving as an active interface with an up link
[ 1100.441316][T26295] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[ 1100.447310][T26295] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[ 1100.455076][T26295] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[ 1100.641458][T26311] openvswitch: netlink: Missing key (keys=40, expected=100)
[ 1100.927033][T26333] bond72: entered promiscuous mode
[ 1100.930128][T26333] 8021q: adding VLAN 0 to HW filter on device bond72
[ 1100.956103][T26333] bond72: (slave bridge60): making interface the new active one
[ 1100.959124][T26333] bridge60: entered promiscuous mode
[ 1100.964250][T26333] bond72: (slave bridge60): Enslaving as an active interface with an up link
[ 1101.150903][T26354] __nla_validate_parse: 28 callbacks suppressed
[ 1101.150922][T26354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17175'.
[ 1101.234247][T26354] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[ 1101.285668][T26366] validate_nla: 6 callbacks suppressed
[ 1101.285680][T26366] netlink: 'syz.2.17178': attribute type 1 has an invalid length.
[ 1101.321211][T26366] bond77: entered promiscuous mode
[ 1101.323614][T26366] 8021q: adding VLAN 0 to HW filter on device bond77
[ 1101.357489][T26366] bond77: (slave bridge59): making interface the new active one
[ 1101.360786][T26366] bridge59: entered promiscuous mode
[ 1101.364087][T26366] bond77: (slave bridge59): Enslaving as an active interface with an up link
[ 1101.474422][T26375] IPVS: persistence engine module ip_vs_pe_ not found
[ 1101.480359][T26379] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0
[ 1101.487745][T26375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17182'.
[ 1101.605133][T26387] netlink: 'syz.3.17185': attribute type 8 has an invalid length.
[ 1101.653845][T26394] batadv_slave_1: entered promiscuous mode
[ 1101.662893][T26394] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1101.743889][T26393] batadv_slave_1: left promiscuous mode
[ 1101.852125][T26408] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17191'.
[ 1102.007188][T26413] netlink: 'syz.3.17194': attribute type 8 has an invalid length.
[ 1102.033828][T26413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17194'.
[ 1102.105148][T26423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17197'.
[ 1102.326702][T26444] netlink: 360 bytes leftover after parsing attributes in process `syz.2.17205'.
[ 1102.330843][T26444] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 1102.409121][T26455] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17208'.
[ 1102.741785][T26479] netlink: 41 bytes leftover after parsing attributes in process `syz.2.17217'.
[ 1102.746074][T26479] netlink: 140 bytes leftover after parsing attributes in process `syz.2.17217'.
[ 1102.749121][T26479] netlink: 41 bytes leftover after parsing attributes in process `syz.2.17217'.
[ 1102.799977][T26478] xt_CT: No such helper "netbios-ns"
[ 1103.103727][T26512] netlink: 'syz.1.17225': attribute type 11 has an invalid length.
[ 1103.112009][T26516] netlink: 'syz.3.17227': attribute type 1 has an invalid length.
[ 1103.117430][T26516] netlink: 'syz.3.17227': attribute type 1 has an invalid length.
[ 1103.144084][T26516] syzkaller1: entered promiscuous mode
[ 1103.147192][T26516] syzkaller1: entered allmulticast mode
[ 1103.426867][T26531] lo speed is unknown, defaulting to 1000
[ 1103.455478][T26542] xt_CHECKSUM: unsupported CHECKSUM operation 68
[ 1103.620468][T26531] lo speed is unknown, defaulting to 1000
[ 1103.819487][T26563] netlink: 'syz.3.17244': attribute type 1 has an invalid length.
[ 1103.827626][T26531] lo speed is unknown, defaulting to 1000
[ 1103.864263][T26563] bond14: entered promiscuous mode
[ 1103.866902][T26563] 8021q: adding VLAN 0 to HW filter on device bond14
[ 1103.893069][T26563] bond14: (slave bridge9): making interface the new active one
[ 1103.896370][T26563] bridge9: entered promiscuous mode
[ 1103.899522][T26563] bond14: (slave bridge9): Enslaving as an active interface with an up link
[ 1104.455910][T26598] netlink: 'syz.2.17255': attribute type 19 has an invalid length.
[ 1105.075301][T26629] netlink: 'syz.1.17266': attribute type 1 has an invalid length.
[ 1105.080985][T26629] netlink: 'syz.1.17266': attribute type 1 has an invalid length.
[ 1105.579991][T26674] netlink: 'syz.3.17281': attribute type 66 has an invalid length.
[ 1105.626084][T26676] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[ 1105.629441][T26676] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[ 1105.632453][T26676] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[ 1106.188884][T26705] __nla_validate_parse: 15 callbacks suppressed
[ 1106.188900][T26705] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17289'.
[ 1106.349055][T26719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17295'.
[ 1106.460520][T26734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17300'.
[ 1106.463373][T26734] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 1106.472988][T26735] netlink: 100 bytes leftover after parsing attributes in process `syz.3.17298'.
[ 1106.477338][T26735] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17298'.
[ 1106.623789][T26739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17302'.
[ 1106.643693][T26739] bond78: Invalid ad_actor_system MAC address.
[ 1106.646302][T26739] bond78: option ad_actor_system: invalid value (38654705671)
[ 1106.649871][T26739] bond78 (unregistering): Released all slaves
[ 1106.680684][T26741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17302'.
[ 1106.708862][T26739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17302'.
[ 1106.742651][T26739] bond78: Invalid ad_actor_system MAC address.
[ 1106.745440][T26739] bond78: option ad_actor_system: invalid value (38654705671)
[ 1106.750500][T26739] bond78 (unregistering): Released all slaves
[ 1106.943083][T26749] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17305'.
[ 1107.002860][T26752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17306'.
[ 1107.298940][T26762] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[ 1107.301608][T26762] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[ 1107.304092][T26762] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[ 1107.582602][T26797] mac80211_hwsim hwsim53 wlan0: entered allmulticast mode
[ 1107.589032][T26797] bond0: (slave wlan0): Enslaving as an active interface with a down link
[ 1107.691703][T26802] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[ 1107.723030][T26804] lo speed is unknown, defaulting to 1000
[ 1107.901366][T26804] lo speed is unknown, defaulting to 1000
[ 1108.089663][T26804] lo speed is unknown, defaulting to 1000
[ 1108.493472][T26841] validate_nla: 2 callbacks suppressed
[ 1108.493489][T26841] netlink: 'syz.3.17336': attribute type 3 has an invalid length.
[ 1108.682926][T26862] SET target dimension over the limit!
[ 1108.698039][T26857] sock: sock_set_timeout: `syz.1.17339' (pid 26857) tries to set negative timeout
[ 1108.917801][T26878] netlink: 'syz.1.17347': attribute type 62 has an invalid length.
[ 1109.142348][T26886] netlink: 'syz.1.17349': attribute type 62 has an invalid length.
[ 1109.373781][T26901] x_tables: unsorted entry at hook 3
[ 1109.383427][T26901] x_tables: unsorted entry at hook 3
[ 1109.756857][T26930] netlink: 'syz.1.17363': attribute type 5 has an invalid length.
[ 1110.792576][T26968] netlink: 'syz.3.17378': attribute type 83 has an invalid length.
[ 1110.992250][T26972] lo speed is unknown, defaulting to 1000
[ 1111.196826][T26972] lo speed is unknown, defaulting to 1000
[ 1111.308853][T27000] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1111.376550][T26972] lo speed is unknown, defaulting to 1000
[ 1111.436284][T27014] netlink: 'syz.1.17389': attribute type 1 has an invalid length.
[ 1111.487537][T27014] bond73: entered promiscuous mode
[ 1111.489484][T27014] 8021q: adding VLAN 0 to HW filter on device bond73
[ 1111.572875][T27021] bond73: (slave bridge61): making interface the new active one
[ 1111.579382][T27021] bridge61: entered promiscuous mode
[ 1111.583071][T27021] bond73: (slave bridge61): Enslaving as an active interface with an up link
[ 1111.855420][T27042] __nla_validate_parse: 19 callbacks suppressed
[ 1111.855435][T27042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17393'.
[ 1111.867965][T27042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17393'.
[ 1111.875514][T27042] netlink: 36 bytes leftover after parsing attributes in process `syz.3.17393'.
[ 1111.878934][T27042] 8021q: VLANs not supported on sit0
[ 1112.060856][T27055] netlink: 76 bytes leftover after parsing attributes in process `syz.1.17396'.
[ 1112.136815][T27059] netlink: 84 bytes leftover after parsing attributes in process `syz.2.17397'.
[ 1113.373319][T27138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17422'.
[ 1113.592344][T27148] netlink: 84 bytes leftover after parsing attributes in process `syz.2.17426'.
[ 1114.038315][T27169] netlink: 100 bytes leftover after parsing attributes in process `syz.2.17433'.
[ 1114.041355][T27169] netlink: 100 bytes leftover after parsing attributes in process `syz.2.17433'.
[ 1114.151451][T27173] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17435'.
[ 1114.155434][T27173] netlink: 'syz.2.17435': attribute type 4 has an invalid length.
[ 1115.172469][T27215] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[ 1115.282442][T27069] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1115.504306][T27242] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1115.820157][T27263] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1115.823913][T27263] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1115.871488][T27267] GUP no longer grows the stack in syz.1.17466 (27267): 200000003000-20000000a000 (200000001000)
[ 1115.877138][T27267] CPU: 1 UID: 0 PID: 27267 Comm: syz.1.17466 Not tainted syzkaller #0 PREEMPT(full) 
[ 1115.877161][T27267] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1115.877171][T27267] Call Trace:
[ 1115.877178][T27267]  <TASK>
[ 1115.877186][T27267]  dump_stack_lvl+0xe8/0x150
[ 1115.877215][T27267]  __get_user_pages+0x2453/0x29d0
[ 1115.877237][T27267]  ? __lock_acquire+0x6b5/0x2cf0
[ 1115.877273][T27267]  ? __gup_longterm_locked+0xc4e/0x1630
[ 1115.877294][T27267]  ? down_read_killable+0x1bb/0x340
[ 1115.877316][T27267]  __gup_longterm_locked+0xdcf/0x1630
[ 1115.877357][T27267]  gup_fast_fallback+0x1d82/0x22e0
[ 1115.877402][T27267]  ? __pfx_gup_fast_fallback+0x10/0x10
[ 1115.877426][T27267]  ? is_valid_gup_args+0x11f/0x200
[ 1115.877448][T27267]  ? get_user_pages_fast+0x4d/0xb0
[ 1115.877470][T27267]  __iov_iter_get_pages_alloc+0x3b6/0xb10
[ 1115.877496][T27267]  ? __pfx_pipe_clear_nowait+0x10/0x10
[ 1115.877523][T27267]  iov_iter_get_pages2+0x5e/0xa0
[ 1115.877545][T27267]  __se_sys_vmsplice+0x7b3/0x1490
[ 1115.877572][T27267]  ? __pfx___se_sys_vmsplice+0x10/0x10
[ 1115.877589][T27267]  ? __pfx_futex_wake+0x10/0x10
[ 1115.877645][T27267]  do_syscall_64+0x14d/0xf80
[ 1115.877663][T27267]  ? trace_irq_disable+0x3b/0x150
[ 1115.877682][T27267]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1115.877703][T27267]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1115.877718][T27267] RIP: 0033:0x7f063179cdd9
[ 1115.877734][T27267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1115.877783][T27267] RSP: 002b:00007f0632650028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[ 1115.877802][T27267] RAX: ffffffffffffffda RBX: 00007f0631a16090 RCX: 00007f063179cdd9
[ 1115.877814][T27267] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a
[ 1115.877824][T27267] RBP: 00007f0631832d69 R08: 0000000000000000 R09: 0000000000000000
[ 1115.877833][T27267] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[ 1115.877841][T27267] R13: 00007f0631a16128 R14: 00007f0631a16090 R15: 00007ffdd29e89b8
[ 1115.877865][T27267]  </TASK>
[ 1116.009124][T27267] lo speed is unknown, defaulting to 1000
[ 1116.253552][T27267] lo speed is unknown, defaulting to 1000
[ 1116.405808][T27267] lo speed is unknown, defaulting to 1000
[ 1116.794455][T27276] netlink: 'syz.3.17470': attribute type 2 has an invalid length.
[ 1116.798496][T27276] netlink: 'syz.3.17470': attribute type 2 has an invalid length.
[ 1116.856780][T27279] netlink: 'syz.3.17471': attribute type 1 has an invalid length.
[ 1116.898598][T27279] bond15: entered promiscuous mode
[ 1116.900526][T27279] 8021q: adding VLAN 0 to HW filter on device bond15
[ 1116.911157][T27283] __nla_validate_parse: 3 callbacks suppressed
[ 1116.911168][T27283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17468'.
[ 1116.916348][T27283] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17468'.
[ 1116.975902][T27279] bond15: (slave bridge12): making interface the new active one
[ 1116.979945][T27279] bridge12: entered promiscuous mode
[ 1116.983254][T27279] bond15: (slave bridge12): Enslaving as an active interface with an up link
[ 1117.088092][T27289] netlink: 'syz.3.17473': attribute type 4 has an invalid length.
[ 1117.093288][T27289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17473'.
[ 1117.138698][T27289] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1117.381327][T27304] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[ 1117.385100][T27304] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[ 1117.386937][T27306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17478'.
[ 1117.390636][T27304] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[ 1117.712978][T27322] netlink: 'syz.2.17484': attribute type 2 has an invalid length.
[ 1117.717269][T27322] netlink: 'syz.2.17484': attribute type 8 has an invalid length.
[ 1117.721692][T27322] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17484'.
[ 1117.738344][T27324] netlink: 'syz.1.17485': attribute type 8 has an invalid length.
[ 1117.741318][T27322] netlink: 'syz.2.17484': attribute type 2 has an invalid length.
[ 1117.744061][T27322] netlink: 'syz.2.17484': attribute type 8 has an invalid length.
[ 1117.747222][T27322] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17484'.
[ 1117.751634][T27322] tun0: tun_chr_ioctl cmd 1074025675
[ 1117.754446][T27322] tun0: persist enabled
[ 1117.757785][T27322] tun0: tun_chr_ioctl cmd 1074025675
[ 1117.759613][T27322] tun0: persist disabled
[ 1117.817868][T13287] lo speed is unknown, defaulting to 1000
[ 1117.820090][T13287] sqz0: Port: 1 Link DOWN
[ 1117.821870][T13287] lo speed is unknown, defaulting to 1000
[ 1117.897063][T27334] SET target dimension over the limit!
[ 1117.934401][T27336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17489'.
[ 1118.124234][T27351] netlink: 152 bytes leftover after parsing attributes in process `syz.1.17495'.
[ 1118.127412][T27351] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17495'.
[ 1118.257358][T27361] bond78: entered promiscuous mode
[ 1118.259834][T27361] 8021q: adding VLAN 0 to HW filter on device bond78
[ 1118.308666][T27361] bond78: (slave bridge60): making interface the new active one
[ 1118.312254][T27361] bridge60: entered promiscuous mode
[ 1118.315985][T27361] bond78: (slave bridge60): Enslaving as an active interface with an up link
[ 1118.478425][T27380] netlink: 'syz.3.17505': attribute type 11 has an invalid length.
[ 1118.486487][T27380] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.17505'.
[ 1118.516191][T27380] sctp: [Deprecated]: syz.3.17505 (pid 27380) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1118.516191][T27380] Use struct sctp_sack_info instead
[ 1118.837058][ T1208] block nbd2: Possible stuck request ffff888029098000: control (read@0,1024B). Runtime 360 seconds
[ 1118.841569][ T1208] block nbd2: Possible stuck request ffff888029098200: control (read@1024,1024B). Runtime 360 seconds
[ 1118.847236][ T1208] block nbd2: Possible stuck request ffff888029098400: control (read@2048,1024B). Runtime 360 seconds
[ 1118.851839][ T1208] block nbd2: Possible stuck request ffff888029098600: control (read@3072,1024B). Runtime 360 seconds
[ 1119.230810][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1119.234111][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1119.254323][T27404] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[ 1119.603405][T27414] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[ 1119.610955][T27414] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[ 1119.614448][T27414] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[ 1119.747008][T27423] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1119.770610][T27423] ip6gre4: entered allmulticast mode
[ 1119.777034][T27423] team0: Device ip6gre4 is of different type
[ 1119.933304][T27434] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1119.937529][T27434] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1120.399091][T27454] validate_nla: 1 callbacks suppressed
[ 1120.399111][T27454] netlink: 'syz.2.17528': attribute type 14 has an invalid length.
[ 1120.545880][T27465] netlink: 'syz.3.17531': attribute type 4 has an invalid length.
[ 1120.682862][T27477] netlink: 'syz.2.17537': attribute type 1 has an invalid length.
[ 1120.735370][T27477] bond79: entered promiscuous mode
[ 1120.738825][T27477] 8021q: adding VLAN 0 to HW filter on device bond79
[ 1120.753058][T27480] openvswitch: netlink: Tunnel attr 3 has unexpected len 4 expected 1
[ 1120.753260][T27482] openvswitch: netlink: Tunnel attr 3 has unexpected len 4 expected 1
[ 1120.786870][T27477] bond79: (slave bridge61): making interface the new active one
[ 1120.791859][T27477] bridge61: entered promiscuous mode
[ 1120.800709][T27477] bond79: (slave bridge61): Enslaving as an active interface with an up link
[ 1120.873112][T27489] netlink: 'syz.3.17540': attribute type 4 has an invalid length.
[ 1120.920985][T27494] netlink: 'syz.3.17543': attribute type 4 has an invalid length.
[ 1121.641217][T27544] veth0: entered promiscuous mode
[ 1121.644443][T27543] veth0: left promiscuous mode
[ 1121.722977][T27546] netlink: 'syz.1.17560': attribute type 11 has an invalid length.
[ 1121.725976][T27546] netlink: 'syz.1.17560': attribute type 23 has an invalid length.
[ 1121.814047][T27553] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[ 1121.990770][T27559] __nla_validate_parse: 12 callbacks suppressed
[ 1121.990790][T27559] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17565'.
[ 1122.115903][T27572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17569'.
[ 1122.119298][T27572] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17569'.
[ 1122.161199][T27572] lo speed is unknown, defaulting to 1000
[ 1122.176718][T27577] netlink: 44 bytes leftover after parsing attributes in process `syz.1.17569'.
[ 1122.194882][T27578] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17571'.
[ 1122.198501][T27578] netlink: 'syz.2.17571': attribute type 4 has an invalid length.
[ 1122.442295][T27572] lo speed is unknown, defaulting to 1000
[ 1122.519687][T27599] netlink: 256 bytes leftover after parsing attributes in process `syz.3.17578'.
[ 1122.525090][T27599] netlink: 44 bytes leftover after parsing attributes in process `syz.3.17578'.
[ 1122.684884][T27572] lo speed is unknown, defaulting to 1000
[ 1122.806661][T27611] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17584'.
[ 1122.816403][T27611] netlink: 'syz.3.17584': attribute type 4 has an invalid length.
[ 1122.925999][T27624] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17588'.
[ 1122.930189][T27624] netlink: 'syz.3.17588': attribute type 4 has an invalid length.
[ 1123.323277][T27643] openvswitch: netlink: IPv4 tun info is not correct
[ 1123.558170][T27658] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17597'.
[ 1123.571664][T27658] netlink: 'syz.2.17597': attribute type 4 has an invalid length.
[ 1123.735127][T27664] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[ 1123.737924][T27664] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[ 1123.740592][T27664] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[ 1124.171140][T27701] syzkaller1: entered promiscuous mode
[ 1124.173578][T27701] syzkaller1: entered allmulticast mode
[ 1124.749486][T27724] syzkaller0: entered promiscuous mode
[ 1124.751903][T27724] syzkaller0: entered allmulticast mode
[ 1124.780217][T27724] bridge0: port 3(erspan0) entered blocking state
[ 1124.782963][T27724] bridge0: port 3(erspan0) entered disabled state
[ 1124.786240][T27724] erspan0: entered allmulticast mode
[ 1124.790265][T27724] erspan0: entered promiscuous mode
[ 1124.798379][T27724] erspan0: left allmulticast mode
[ 1124.800607][T27724] erspan0: left promiscuous mode
[ 1124.802952][T27724] bridge0: port 3(erspan0) entered disabled state
[ 1127.076144][T27693] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1127.199452][T27741] validate_nla: 2 callbacks suppressed
[ 1127.199469][T27741] netlink: 'syz.2.17625': attribute type 28 has an invalid length.
[ 1127.583284][T27765] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[ 1127.591376][T27765] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[ 1127.595695][T27765] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[ 1127.861608][T27801] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1128.018032][T27801] __nla_validate_parse: 3 callbacks suppressed
[ 1128.018055][T27801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17647'.
[ 1128.247700][T27819] netlink: 68 bytes leftover after parsing attributes in process `syz.1.17654'.
[ 1128.251528][T27819] netlink: 68 bytes leftover after parsing attributes in process `syz.1.17654'.
[ 1128.333703][T27823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17656'.
[ 1128.687919][T27848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17663'.
[ 1128.826376][T27853] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[ 1128.829823][T27853] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[ 1128.832968][T27853] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[ 1129.255817][T27868] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17669'.
[ 1129.476976][T27876] netlink: 44 bytes leftover after parsing attributes in process `syz.1.17670'.
[ 1129.722184][T27892] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17675'.
[ 1129.736101][T27892] netlink: 72 bytes leftover after parsing attributes in process `syz.3.17675'.
[ 1129.799227][T27900] batadv_slave_0: entered promiscuous mode
[ 1129.808666][T27899] batadv_slave_0: left promiscuous mode
[ 1130.221345][T27911] netlink: 'syz.2.17681': attribute type 28 has an invalid length.
[ 1130.224980][T27911] netlink: 'syz.2.17681': attribute type 28 has an invalid length.
[ 1130.228486][T27911] netlink: 'syz.2.17681': attribute type 28 has an invalid length.
[ 1130.231840][T27911] netlink: 'syz.2.17681': attribute type 28 has an invalid length.
[ 1130.236362][T27911] netlink: 'syz.2.17681': attribute type 28 has an invalid length.
[ 1130.239953][T27911] netlink: 'syz.2.17681': attribute type 28 has an invalid length.
[ 1130.243590][T27911] netlink: 'syz.2.17681': attribute type 28 has an invalid length.
[ 1130.250405][T27911] netlink: 'syz.2.17681': attribute type 28 has an invalid length.
[ 1130.253786][T27911] netlink: 'syz.2.17681': attribute type 28 has an invalid length.
[ 1130.607122][T27892] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1130.811007][T27924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17684'.
[ 1130.887692][T27934] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[ 1130.890164][T27934] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[ 1130.893359][T27934] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[ 1131.134825][T27952] SET target dimension over the limit!
[ 1131.169540][T27954] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[ 1131.171960][T27954] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[ 1131.175351][T27954] tipc: Resetting bearer <eth:syzkaller0>
[ 1132.256879][T28021] validate_nla: 25 callbacks suppressed
[ 1132.256892][T28021] netlink: 'syz.2.17720': attribute type 25 has an invalid length.
[ 1132.261393][T28021] netlink: 'syz.2.17720': attribute type 3 has an invalid length.
[ 1132.620323][T28044] IPVS: length: 15 != 8
[ 1132.847433][T28060] openvswitch: netlink: Missing key (keys=40, expected=80)
[ 1133.002966][T28065] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[ 1133.006621][T28065] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[ 1133.009909][T28065] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[ 1133.122574][T28075] __nla_validate_parse: 48 callbacks suppressed
[ 1133.122591][T28075] netlink: 168 bytes leftover after parsing attributes in process `syz.2.17741'.
[ 1133.852888][T28096] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17748'.
[ 1134.087164][T28105] lo speed is unknown, defaulting to 1000
[ 1134.177938][T28109] sock: sock_set_timeout: `syz.2.17752' (pid 28109) tries to set negative timeout
[ 1134.220411][T28105] lo speed is unknown, defaulting to 1000
[ 1134.362832][T28105] lo speed is unknown, defaulting to 1000
[ 1136.606480][T28090] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1136.673496][T28120] netlink: 'syz.3.17755': attribute type 83 has an invalid length.
[ 1136.713110][T28121] netlink: 256 bytes leftover after parsing attributes in process `syz.2.17756'.
[ 1137.037538][T28160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17767'.
[ 1137.041799][T28160] netlink: 'syz.2.17767': attribute type 1 has an invalid length.
[ 1137.048357][T28157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17764'.
[ 1137.057975][T28158] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17766'.
[ 1137.099389][   T57] block nbd3: Wrong magic (0x0)
[ 1137.105614][T28166] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[ 1137.108175][T28166] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[ 1137.111039][T28166] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[ 1137.158983][T28157] netlink: 80 bytes leftover after parsing attributes in process `syz.3.17764'.
[ 1137.163123][T28157] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17764'.
[ 1137.289669][T28182] netlink: 88 bytes leftover after parsing attributes in process `syz.2.17774'.
[ 1137.292650][T28182] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17774'.
[ 1137.612827][T28203] netlink: 'syz.1.17781': attribute type 3 has an invalid length.
[ 1137.667013][T28212] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1137.670794][T28212] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1138.192657][T28257] __nla_validate_parse: 4 callbacks suppressed
[ 1138.192669][T28257] netlink: 48 bytes leftover after parsing attributes in process `syz.2.17796'.
[ 1138.262111][T28263] lo speed is unknown, defaulting to 1000
[ 1138.443353][T28263] lo speed is unknown, defaulting to 1000
[ 1138.448992][T28275] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17803'.
[ 1138.452928][T28279] netlink: 'syz.3.17804': attribute type 1 has an invalid length.
[ 1138.482283][T28279] bond16: entered promiscuous mode
[ 1138.485817][T28275] netlink: 312 bytes leftover after parsing attributes in process `syz.1.17803'.
[ 1138.489626][T28279] 8021q: adding VLAN 0 to HW filter on device bond16
[ 1138.511280][T28279] bond16: (slave bridge13): making interface the new active one
[ 1138.522766][T28279] bridge13: entered promiscuous mode
[ 1138.526454][T28279] bond16: (slave bridge13): Enslaving as an active interface with an up link
[ 1138.634816][T28289] netlink: 4456 bytes leftover after parsing attributes in process `syz.1.17805'.
[ 1138.638282][T28289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17805'.
[ 1138.657468][T28290] netlink: 'syz.3.17807': attribute type 13 has an invalid length.
[ 1138.660815][T28290] netlink: 'syz.3.17807': attribute type 17 has an invalid length.
[ 1138.805154][T28263] lo speed is unknown, defaulting to 1000
[ 1138.821127][T28290] 0{X: left allmulticast mode
[ 1138.859383][T28290] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1138.863422][T28290] 8021q: adding VLAN 0 to HW filter on device team0
[ 1138.869626][T28290] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1138.876146][ T5655] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1138.881763][ T5655] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1138.886662][ T5655] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1138.890166][ T5655] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1139.819286][T28323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17817'.
[ 1139.847990][T28323] bond74: entered promiscuous mode
[ 1139.850555][T28323] 8021q: adding VLAN 0 to HW filter on device bond74
[ 1139.886483][T28323] bridge62: entered promiscuous mode
[ 1139.890425][T28323] bond74: (slave bridge62): Enslaving as an active interface with an up link
[ 1139.903935][T28323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17817'.
[ 1139.919511][T28323] bond74 (unregistering): (slave bridge62): Releasing backup interface
[ 1139.922434][T28323] bridge62: left promiscuous mode
[ 1139.925705][T28323] bond74 (unregistering): Released all slaves
[ 1139.952421][T18625] Bluetooth: hci3: link tx timeout
[ 1139.954524][T18625] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1140.023247][T28330] xt_hashlimit: size too large, truncated to 1048576
[ 1140.185811][T28342] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[ 1140.299875][T28354] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17828'.
[ 1140.310223][T28350] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17827'.
[ 1140.371483][T28359] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17830'.
[ 1140.787141][T28394] netlink: 'syz.2.17841': attribute type 1 has an invalid length.
[ 1140.790489][T28394] netlink: 'syz.2.17841': attribute type 1 has an invalid length.
[ 1140.794036][T28394] netlink: 'syz.2.17841': attribute type 8 has an invalid length.
[ 1142.034847][ T5197] Bluetooth: hci3: command 0x0405 tx timeout
[ 1143.972905][T28421] __nla_validate_parse: 4 callbacks suppressed
[ 1143.972925][T28421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17850'.
[ 1144.012049][T28421] bond17: entered promiscuous mode
[ 1144.015496][T28421] 8021q: adding VLAN 0 to HW filter on device bond17
[ 1144.619035][T28456] netlink: 'syz.1.17862': attribute type 1 has an invalid length.
[ 1144.636876][T28456] bond74: entered promiscuous mode
[ 1144.638786][T28456] 8021q: adding VLAN 0 to HW filter on device bond74
[ 1144.653853][T28456] bond74: (slave bridge63): making interface the new active one
[ 1144.656596][T28456] bridge63: entered promiscuous mode
[ 1144.659162][T28456] bond74: (slave bridge63): Enslaving as an active interface with an up link
[ 1145.079580][T28486] netlink: 84 bytes leftover after parsing attributes in process `syz.1.17872'.
[ 1145.083140][T28486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17872'.
[ 1145.132762][T28491] xt_TCPMSS: Only works on TCP SYN packets
[ 1145.397443][T28516] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17886'.
[ 1145.450463][T28522] team_slave_1: Caught tx_queue_len zero misconfig
[ 1145.560042][T28525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17888'.
[ 1145.587952][   T58] block nbd4: Receive control failed (result -32)
[ 1145.637678][T28527] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[ 1145.640326][T28527] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[ 1145.642927][T28527] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[ 1145.697890][T28529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17890'.
[ 1145.881667][T28538] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17894'.
[ 1146.011445][T28548] netlink: 88 bytes leftover after parsing attributes in process `syz.1.17899'.
[ 1146.017323][T28548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17899'.
[ 1146.128225][T28556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17901'.
[ 1147.038910][T28600] netlink: 'syz.3.17917': attribute type 1 has an invalid length.
[ 1147.059655][T28600] bond18: entered promiscuous mode
[ 1147.062176][T28600] 8021q: adding VLAN 0 to HW filter on device bond18
[ 1147.082370][T28600] bond18: (slave bridge14): making interface the new active one
[ 1147.085623][T28600] bridge14: entered promiscuous mode
[ 1147.090592][T28600] bond18: (slave bridge14): Enslaving as an active interface with an up link
[ 1147.155366][T28608] tipc: Resetting bearer <eth:syzkaller0>
[ 1147.264248][T28615] bond5: (slave wireguard0): Releasing backup interface
[ 1147.294842][T28615] wireguard0: left promiscuous mode
[ 1147.322603][T28615] bond7: (slave geneve2): Releasing active interface
[ 1147.330993][T28615] team0: Port device ip6gre1 removed
[ 1147.336977][T28615] bond14: (slave geneve5): Releasing active interface
[ 1147.341496][T28615] bond17: (slave bridge19): Releasing active interface
[ 1147.347332][T28615] bridge19: left promiscuous mode
[ 1147.349271][T28615] bridge19: left allmulticast mode
[ 1147.353172][T28615] bond18: (slave bridge22): Releasing backup interface
[ 1147.359158][T28615] bridge22: left promiscuous mode
[ 1147.363001][T28615] bond19: (slave bridge23): Releasing backup interface
[ 1147.368236][T28615] bridge23: left promiscuous mode
[ 1147.373133][T28615] bond20: (slave bridge24): Releasing backup interface
[ 1147.377577][T28615] bridge24: left promiscuous mode
[ 1147.380950][T28615] bond21: (slave bridge25): Releasing backup interface
[ 1147.385994][T28615] bridge25: left promiscuous mode
[ 1147.390193][T28615] bond22: (slave bridge26): Releasing backup interface
[ 1147.392477][T28615] bridge26: left promiscuous mode
[ 1147.397558][T28615] vlan6: left allmulticast mode
[ 1147.400042][T28615] geneve0: left allmulticast mode
[ 1147.403288][T28615] vlan6: left promiscuous mode
[ 1147.407663][T28615] geneve0: left promiscuous mode
[ 1147.410290][T28615] bridge0: port 1(vlan6) entered disabled state
[ 1147.428855][T28615] bond32: (slave wireguard1): Releasing backup interface
[ 1147.432464][T28615] wireguard1: left promiscuous mode
[ 1147.437955][T28615] tipc: Resetting bearer <eth:syzkaller0>
[ 1147.440999][T28615] bond38: (slave bridge29): Releasing backup interface
[ 1147.445194][T28615] bridge29: left promiscuous mode
[ 1147.449136][T28615] bond39: (slave bridge30): Releasing backup interface
[ 1147.451440][T28615] bridge30: left promiscuous mode
[ 1147.457163][T28615] bond40: (slave bridge32): Releasing backup interface
[ 1147.459337][T28615] bridge32: left promiscuous mode
[ 1147.462663][T28615] bond41: (slave bridge33): Releasing backup interface
[ 1147.465819][T28615] bridge33: left promiscuous mode
[ 1147.469373][T28615] bond42: (slave bridge34): Releasing backup interface
[ 1147.472362][T28615] bridge34: left promiscuous mode
[ 1147.477640][T28615] bond43: (slave ip6gretap0): Releasing active interface
[ 1147.482884][T28615] bond44: (slave bridge37): Releasing backup interface
[ 1147.487315][T28615] bridge37: left promiscuous mode
[ 1147.491997][T28615] bond45: (slave bridge38): Releasing backup interface
[ 1147.494552][T28615] bridge38: left promiscuous mode
[ 1147.498933][T28615] bond46: (slave bridge39): Releasing backup interface
[ 1147.501127][T28615] bridge39: left promiscuous mode
[ 1147.505635][T28615] bond47: (slave bridge41): Releasing backup interface
[ 1147.510000][T28615] bridge41: left promiscuous mode
[ 1147.513945][T28615] bond48: (slave bridge43): Releasing backup interface
[ 1147.516604][T28615] bridge43: left promiscuous mode
[ 1147.520302][T28615] bond49: (slave bridge44): Releasing backup interface
[ 1147.522742][T28615] bridge44: left promiscuous mode
[ 1147.529367][T28615] bond51: (slave bridge45): Releasing backup interface
[ 1147.532054][T28615] bridge45: left promiscuous mode
[ 1147.538883][T28615] bond52: (slave bridge46): Releasing backup interface
[ 1147.543036][T28615] bridge46: left promiscuous mode
[ 1147.552159][T28615] bond53: (slave bridge47): Releasing backup interface
[ 1147.554465][T28615] bridge47: left promiscuous mode
[ 1147.563122][T28615] bond55: (slave bridge48): Releasing backup interface
[ 1147.566487][T28615] bridge48: left promiscuous mode
[ 1147.571920][T28615] bond56: (slave bridge49): Releasing backup interface
[ 1147.574209][T28615] bridge49: left promiscuous mode
[ 1147.581087][T28615] bond58: (slave gretap2): Releasing active interface
[ 1147.587396][T28615] bond59: (slave bridge50): Releasing backup interface
[ 1147.589626][T28615] bridge50: left promiscuous mode
[ 1147.600008][T28615] bond60: (slave bridge51): Releasing backup interface
[ 1147.602283][T28615] bridge51: left promiscuous mode
[ 1147.608583][T28615] bond0: (slave bridge53): Releasing backup interface
[ 1147.611142][T28615] bridge53: left promiscuous mode
[ 1147.617971][T28615] bond63: (slave bridge55): Releasing backup interface
[ 1147.620398][T28615] bridge55: left promiscuous mode
[ 1147.625814][T28615] bond64: (slave bond65): Releasing backup interface
[ 1147.631320][T28615] bond68: (slave bridge56): Releasing backup interface
[ 1147.633632][T28615] bridge56: left promiscuous mode
[ 1147.640991][T28615] bond70: (slave bridge58): Releasing backup interface
[ 1147.643086][T28615] bridge58: left promiscuous mode
[ 1147.648452][T28615] bond71: (slave bridge59): Releasing backup interface
[ 1147.650570][T28615] bridge59: left promiscuous mode
[ 1147.656185][T28615] bond72: (slave bridge60): Releasing backup interface
[ 1147.658386][T28615] bridge60: left promiscuous mode
[ 1147.663552][T28615] bond73: (slave bridge61): Releasing backup interface
[ 1147.666856][T28615] bridge61: left promiscuous mode
[ 1147.673452][T28615] bond74: (slave bridge63): Releasing backup interface
[ 1147.676562][T28615] bridge63: left promiscuous mode
[ 1147.738552][T28629] 8021q: adding VLAN 0 to HW filter on device 
[ 1147.741626][T28629] team0: Device macvlan0 failed to change mtu
[ 1148.065930][T28659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1148.076764][T28659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1148.209622][T28658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1148.916561][ T1208] block nbd2: Possible stuck request ffff888029098000: control (read@0,1024B). Runtime 390 seconds
[ 1148.922543][ T1208] block nbd2: Possible stuck request ffff888029098200: control (read@1024,1024B). Runtime 390 seconds
[ 1148.928066][ T1208] block nbd2: Possible stuck request ffff888029098400: control (read@2048,1024B). Runtime 390 seconds
[ 1148.941177][ T1208] block nbd2: Possible stuck request ffff888029098600: control (read@3072,1024B). Runtime 390 seconds
[ 1151.790293][T28737] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1151.889744][T28784] __nla_validate_parse: 6 callbacks suppressed
[ 1151.902789][T28784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17967'.
[ 1152.066452][T28794] netlink: 'syz.1.17971': attribute type 21 has an invalid length.
[ 1152.115426][T28794] netlink: 'syz.1.17971': attribute type 21 has an invalid length.
[ 1152.150571][T28802] netlink: 104 bytes leftover after parsing attributes in process `syz.2.17974'.
[ 1152.253347][T28808] xt_hashlimit: size too large, truncated to 1048576
[ 1152.616132][T28822] netlink: 84 bytes leftover after parsing attributes in process `syz.2.17980'.
[ 1152.619542][T28822] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17980'.
[ 1152.754415][T28831] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17983'.
[ 1152.758881][T28831] netlink: 'syz.2.17983': attribute type 4 has an invalid length.
[ 1152.955073][T28837] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17986'.
[ 1152.970234][T28837] tipc: Bearer <udp:sy{>: already 2 bearers with priority 10
[ 1152.972531][T28837] tipc: Bearer <udp:sy{>: trying with adjusted priority
[ 1152.976489][T28837] tipc: Enabling of bearer <udp:sy{> rejected, max 3 bearers permitted
[ 1153.006882][T28841] syzkaller0: entered promiscuous mode
[ 1153.008968][T28841] syzkaller0: entered allmulticast mode
[ 1153.023440][T28841] tc action pedit offset must be on 32 bit boundaries
[ 1153.252580][T28863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17994'.
[ 1153.265365][T28863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17994'.
[ 1153.323466][T28863] bond81: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[ 1153.334066][T28871] netlink: 'syz.3.17998': attribute type 30 has an invalid length.
[ 1153.336087][T28863] bond81 (unregistering): Released all slaves
[ 1153.641848][T28892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18005'.
[ 1153.721892][T28889] netlink: 72 bytes leftover after parsing attributes in process `syz.1.18004'.
[ 1153.783135][T28903] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[ 1153.786386][T28903] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[ 1153.790864][T28903] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[ 1154.112897][T28927] sctp: [Deprecated]: syz.2.18016 (pid 28927) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1154.112897][T28927] Use struct sctp_sack_info instead
[ 1154.134209][T28927] tunl0: left allmulticast mode
[ 1154.181660][T28929] wg2: Caught tx_queue_len zero misconfig
[ 1154.360005][T28937] netlink: 'syz.2.18020': attribute type 1 has an invalid length.
[ 1154.382785][T28937] bond81: entered promiscuous mode
[ 1154.385146][T28937] 8021q: adding VLAN 0 to HW filter on device bond81
[ 1154.407538][T28937] bond81: (slave bridge62): making interface the new active one
[ 1154.410490][T28937] bridge62: entered promiscuous mode
[ 1154.413976][T28937] bond81: (slave bridge62): Enslaving as an active interface with an up link
[ 1154.593138][T28944] tun0: tun_chr_ioctl cmd 2147767507
[ 1155.473753][T29001] lo speed is unknown, defaulting to 1000
[ 1155.519143][T29003] tipc: Enabling of bearer <dth:s> rejected, media not registered
[ 1155.663075][T29001] lo speed is unknown, defaulting to 1000
[ 1155.864169][T29001] lo speed is unknown, defaulting to 1000
[ 1156.325559][T29071] netlink: 'syz.1.18064': attribute type 1 has an invalid length.
[ 1157.019703][T29126] netlink: 'syz.2.18082': attribute type 1 has an invalid length.
[ 1157.037249][T29126] bond83: entered promiscuous mode
[ 1157.039054][T29126] 8021q: adding VLAN 0 to HW filter on device bond83
[ 1157.073128][T29126] bond83: (slave bridge63): making interface the new active one
[ 1157.080329][T29126] bridge63: entered promiscuous mode
[ 1157.088226][T29126] bond83: (slave bridge63): Enslaving as an active interface with an up link
[ 1157.149562][T29137] __nla_validate_parse: 4 callbacks suppressed
[ 1157.149577][T29137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18086'.
[ 1157.203037][T29144] tc_dump_action: action bad kind
[ 1157.349886][T29163] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18093'.
[ 1157.411298][T29171] x_tables: duplicate underflow at hook 2
[ 1157.442140][T29176] netlink: 356 bytes leftover after parsing attributes in process `syz.3.18097'.
[ 1157.451223][T29177] netlink: 96 bytes leftover after parsing attributes in process `syz.3.18097'.
[ 1157.456806][T29176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18097'.
[ 1157.500111][T29182] tc_dump_action: action bad kind
[ 1157.612999][T29196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18102'.
[ 1157.630557][T29196] sctp: [Deprecated]: syz.3.18102 (pid 29196) Use of int in max_burst socket option.
[ 1157.630557][T29196] Use struct sctp_assoc_value instead
[ 1157.661459][T29196] netlink: 36 bytes leftover after parsing attributes in process `syz.3.18102'.
[ 1157.795487][T29215] sctp: [Deprecated]: syz.3.18109 (pid 29215) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1157.795487][T29215] Use struct sctp_sack_info instead
[ 1157.825588][T29222] netlink: 48 bytes leftover after parsing attributes in process `syz.2.18112'.
[ 1157.986054][T29244] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1157.997048][T29237] netlink: 59 bytes leftover after parsing attributes in process `syz.2.18117'.
[ 1158.002138][T29237] netlink: 59 bytes leftover after parsing attributes in process `syz.2.18117'.
[ 1158.015918][T29244] netlink: 'syz.3.18120': attribute type 1 has an invalid length.
[ 1158.049344][T29244] bond19 (unregistering): Released all slaves
[ 1158.083353][T29248] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR
[ 1158.102058][T29258] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[ 1161.316025][T29289] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1161.334002][T29293] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1161.442859][T29307] netlink: 'syz.2.18140': attribute type 1 has an invalid length.
[ 1161.445255][T29306] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[ 1161.449496][T29306] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[ 1161.453021][T29306] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[ 1161.477027][T29307] bond84: entered promiscuous mode
[ 1161.478970][T29307] 8021q: adding VLAN 0 to HW filter on device bond84
[ 1161.498843][T29307] bond84: (slave bridge64): making interface the new active one
[ 1161.505133][T29302] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[ 1161.508412][T29307] bridge64: entered promiscuous mode
[ 1161.510900][T29307] bond84: (slave bridge64): Enslaving as an active interface with an up link
[ 1161.516562][T29302] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[ 1161.519213][T29302] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[ 1162.002791][T29337] xt_socket: unknown flags 0x8
[ 1162.225984][T29359] __nla_validate_parse: 13 callbacks suppressed
[ 1162.225996][T29359] netlink: 104 bytes leftover after parsing attributes in process `syz.3.18161'.
[ 1162.238791][T29363] netlink: 32 bytes leftover after parsing attributes in process `syz.2.18162'.
[ 1162.259386][T29363] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18162'.
[ 1162.391132][T29373] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[ 1162.394242][T29373] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[ 1162.406339][T29373] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[ 1162.458468][T29376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18168'.
[ 1162.630580][T29394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18174'.
[ 1162.659119][T29396] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18175'.
[ 1162.661863][T29396] netlink: 35 bytes leftover after parsing attributes in process `syz.1.18175'.
[ 1162.696676][T29400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18177'.
[ 1162.748212][T29402] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18178'.
[ 1162.751583][T29402] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18178'.
[ 1162.758766][T29402] netlink: 'syz.1.18178': attribute type 4 has an invalid length.
[ 1163.293306][T29430] can: request_module (can-proto-0) failed.
[ 1163.360698][T29437] netlink: 'syz.1.18191': attribute type 29 has an invalid length.
[ 1163.364366][T29437] netlink: 'syz.1.18191': attribute type 29 has an invalid length.
[ 1164.036030][T29487] netlink: 'syz.3.18214': attribute type 4 has an invalid length.
[ 1164.297840][T29504] netlink: 'syz.2.18219': attribute type 4 has an invalid length.
[ 1164.444398][T29517] xt_CONNSECMARK: invalid mode: 0
[ 1164.553549][T29528] pim6reg1: entered allmulticast mode
[ 1164.702015][T29537] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 1164.706967][T29537] CPU: 0 UID: 0 PID: 29537 Comm: syz.1.18231 Not tainted syzkaller #0 PREEMPT(full) 
[ 1164.706988][T29537] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1164.707000][T29537] Call Trace:
[ 1164.707007][T29537]  <TASK>
[ 1164.707015][T29537]  dump_stack_lvl+0xe8/0x150
[ 1164.707045][T29537]  sysfs_warn_dup+0x8e/0xa0
[ 1164.707069][T29537]  sysfs_do_create_link_sd+0xc0/0x110
[ 1164.707092][T29537]  device_add_class_symlinks+0x1cf/0x240
[ 1164.707120][T29537]  device_add+0x475/0xb70
[ 1164.707147][T29537]  wiphy_register+0x1d73/0x2d50
[ 1164.707183][T29537]  ? __pfx_wiphy_register+0x10/0x10
[ 1164.707204][T29537]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1164.707221][T29537]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 1164.707246][T29537]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 1164.707276][T29537]  ieee80211_register_hw+0x3571/0x4220
[ 1164.707307][T29537]  ? ieee80211_register_hw+0x14c1/0x4220
[ 1164.707349][T29537]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1164.707404][T29537]  ? __hrtimer_setup+0x181/0x200
[ 1164.707431][T29537]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1164.707454][T29537]  mac80211_hwsim_new_radio+0x2f97/0x5330
[ 1164.707502][T29537]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1164.707525][T29537]  ? kstrndup+0xbf/0x160
[ 1164.707552][T29537]  hwsim_new_radio_nl+0xf35/0x1bd0
[ 1164.707595][T29537]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1164.707625][T29537]  ? rcu_is_watching+0x15/0xb0
[ 1164.707648][T29537]  ? trace_kmalloc+0x2a/0x110
[ 1164.707671][T29537]  ? __nla_parse+0x40/0x60
[ 1164.707695][T29537]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[ 1164.707750][T29537]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1164.707781][T29537]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1164.707815][T29537]  ? bpf_lsm_capable+0x9/0x20
[ 1164.707836][T29537]  ? security_capable+0x7e/0x2c0
[ 1164.707861][T29537]  genl_rcv_msg+0x61c/0x7a0
[ 1164.707888][T29537]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1164.707910][T29537]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1164.707934][T29537]  ? __lock_acquire+0x6b5/0x2cf0
[ 1164.707963][T29537]  netlink_rcv_skb+0x232/0x4b0
[ 1164.707982][T29537]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1164.708006][T29537]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1164.708039][T29537]  ? down_read+0x272/0x2e0
[ 1164.708055][T29537]  ? genl_rcv+0xd/0x40
[ 1164.708076][T29537]  genl_rcv+0x28/0x40
[ 1164.708096][T29537]  netlink_unicast+0x80f/0x9b0
[ 1164.708126][T29537]  ? __pfx_netlink_unicast+0x10/0x10
[ 1164.708145][T29537]  ? netlink_sendmsg+0x650/0xb40
[ 1164.708162][T29537]  ? skb_put+0x11b/0x210
[ 1164.708187][T29537]  netlink_sendmsg+0x813/0xb40
[ 1164.708214][T29537]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1164.708235][T29537]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1164.708256][T29537]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1164.708274][T29537]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1164.708292][T29537]  ____sys_sendmsg+0xa68/0xad0
[ 1164.708313][T29537]  ? futex_unqueue+0x211/0x240
[ 1164.708338][T29537]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1164.708376][T29537]  ? import_iovec+0x73/0xa0
[ 1164.708403][T29537]  ___sys_sendmsg+0x2a5/0x360
[ 1164.708433][T29537]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1164.708462][T29537]  ? futex_wait+0x29a/0x380
[ 1164.708506][T29537]  ? __fget_files+0x2a/0x420
[ 1164.708528][T29537]  ? __fget_files+0x3a0/0x420
[ 1164.708558][T29537]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1164.708583][T29537]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1164.708612][T29537]  ? fput+0xa0/0xd0
[ 1164.708642][T29537]  do_syscall_64+0x14d/0xf80
[ 1164.708665][T29537]  ? trace_irq_disable+0x3b/0x150
[ 1164.708686][T29537]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1164.708737][T29537]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1164.708756][T29537] RIP: 0033:0x7f063179cdd9
[ 1164.708775][T29537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1164.708789][T29537] RSP: 002b:00007f0632671028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1164.708808][T29537] RAX: ffffffffffffffda RBX: 00007f0631a15fa0 RCX: 00007f063179cdd9
[ 1164.708820][T29537] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[ 1164.708830][T29537] RBP: 00007f0631832d69 R08: 0000000000000000 R09: 0000000000000000
[ 1164.708842][T29537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1164.708852][T29537] R13: 00007f0631a16038 R14: 00007f0631a15fa0 R15: 00007ffdd29e89b8
[ 1164.708878][T29537]  </TASK>
[ 1164.947423][T29542] netlink: 'syz.1.18233': attribute type 1 has an invalid length.
[ 1164.987621][T29542] bond75: entered promiscuous mode
[ 1164.990205][T29542] 8021q: adding VLAN 0 to HW filter on device bond75
[ 1165.024353][T29542] bond75: (slave bridge64): making interface the new active one
[ 1165.028381][T29542] bridge64: entered promiscuous mode
[ 1165.030696][T29542] bond75: (slave bridge64): Enslaving as an active interface with an up link
[ 1165.033792][T29545] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[ 1165.201234][T29561] netlink: 'syz.3.18239': attribute type 3 has an invalid length.
[ 1165.436901][T29589] netlink: 'syz.3.18246': attribute type 1 has an invalid length.
[ 1165.454364][T29588] netlink: 'syz.1.18245': attribute type 1 has an invalid length.
[ 1165.525138][T29588] netlink: 'syz.1.18245': attribute type 1 has an invalid length.
[ 1165.529022][T29588] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1165.677825][T29603] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[ 1165.681000][T29603] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[ 1165.684226][T29603] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[ 1165.722697][T29607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1166.773609][T29678] netlink: 'syz.3.18279': attribute type 1 has an invalid length.
[ 1166.823621][T29678] bond19: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1166.828762][T29678] bond19: (slave vxcan3): Error -95 calling set_mac_address
[ 1166.890245][T29678] bond19: (slave bridge15): Enslaving as an active interface with a down link
[ 1166.895979][T29678] bond19: entered promiscuous mode
[ 1166.898784][T29687] nbd: couldn't find a device at index 0
[ 1166.901052][T29678] bond19: entered allmulticast mode
[ 1166.974462][T29690] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1167.330352][T29722] __nla_validate_parse: 45 callbacks suppressed
[ 1167.330372][T29722] netlink: 80 bytes leftover after parsing attributes in process `syz.2.18295'.
[ 1167.416964][T29730] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18298'.
[ 1167.840779][T29771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18308'.
[ 1167.876122][T29777] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18309'.
[ 1167.879351][T29777] netlink: 76 bytes leftover after parsing attributes in process `syz.2.18309'.
[ 1167.882497][T29777] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18309'.
[ 1168.465826][T29828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18329'.
[ 1168.578053][T29836] validate_nla: 1 callbacks suppressed
[ 1168.578070][T29836] netlink: 'syz.3.18330': attribute type 4 has an invalid length.
[ 1168.669989][T29843] netlink: 'syz.1.18335': attribute type 4 has an invalid length.
[ 1168.673671][T29844] netlink: 'syz.1.18335': attribute type 4 has an invalid length.
[ 1168.696781][    T9] lo speed is unknown, defaulting to 1000
[ 1168.699113][    T9] sqz0: Port: 1 Link ACTIVE
[ 1168.701122][    T9] lo speed is unknown, defaulting to 1000
[ 1168.708594][T29848] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.18336'.
[ 1168.781353][T29852] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18337'.
[ 1168.867399][T29864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18342'.
[ 1168.922822][T29868] netlink: 'syz.1.18343': attribute type 30 has an invalid length.
[ 1169.051330][T29878] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1169.220232][T29894] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[ 1169.223596][T29894] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[ 1169.228368][T29894] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[ 1169.473346][ T4380] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x42
[ 1169.675491][T29938] netlink: 'syz.1.18364': attribute type 2 has an invalid length.
[ 1169.678127][T29938] netlink: 'syz.1.18364': attribute type 1 has an invalid length.
[ 1170.336960][T29972] tipc: Started in network mode
[ 1170.338480][T29972] tipc: Node identity , cluster identity 4711
[ 1170.340359][T29972] tipc: Failed to obtain node identity
[ 1170.342082][T29972] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1170.370806][T29972] syzkaller0: entered promiscuous mode
[ 1170.372586][T29972] syzkaller0: entered allmulticast mode
[ 1172.780834][T29992] __nla_validate_parse: 11 callbacks suppressed
[ 1172.780852][T29992] netlink: 96 bytes leftover after parsing attributes in process `syz.2.18383'.
[ 1175.276180][T30024] netlink: 36 bytes leftover after parsing attributes in process `syz.3.18390'.
[ 1175.386201][T30034] netlink: 'syz.2.18394': attribute type 10 has an invalid length.
[ 1175.389280][T30034] netlink: 224 bytes leftover after parsing attributes in process `syz.2.18394'.
[ 1175.500532][T30043] netlink: 48 bytes leftover after parsing attributes in process `syz.3.18397'.
[ 1175.577218][T30051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18399'.
[ 1175.639523][T30056] tipc: Started in network mode
[ 1175.642340][T30056] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711
[ 1175.647549][T30056] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1175.651085][T30057] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1175.807381][T30071] netlink: zone id is out of range
[ 1175.863503][T30075] netlink: 72 bytes leftover after parsing attributes in process `syz.3.18408'.
[ 1175.867048][T30075] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18408'.
[ 1175.937544][T30085] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18411'.
[ 1175.973782][T30088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18413'.
[ 1176.084242][T30093] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20004
[ 1176.119487][T30102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18415'.
[ 1176.162217][T30102] syzkaller1: entered promiscuous mode
[ 1176.168912][T30102] syzkaller1: entered allmulticast mode
[ 1176.211953][T30104] netlink: 'syz.1.18416': attribute type 4 has an invalid length.
[ 1176.357404][T30111] netlink: 'syz.3.18420': attribute type 1 has an invalid length.
[ 1176.391346][T30111] bond21: entered promiscuous mode
[ 1176.393369][T30111] 8021q: adding VLAN 0 to HW filter on device bond21
[ 1176.406284][T30118] netlink: 'syz.2.18422': attribute type 4 has an invalid length.
[ 1176.415311][T30111] bridge0: Device is already in use.
[ 1176.641968][T30133] x_tables: duplicate underflow at hook 3
[ 1176.950679][T30169] netlink: 'syz.1.18439': attribute type 1 has an invalid length.
[ 1176.998136][T30169] bond76: entered promiscuous mode
[ 1177.001580][T30169] 8021q: adding VLAN 0 to HW filter on device bond76
[ 1177.024478][T30169] bond76: (slave bridge65): making interface the new active one
[ 1177.028834][T30169] bridge65: entered promiscuous mode
[ 1177.032388][T30169] bond76: (slave bridge65): Enslaving as an active interface with an up link
[ 1178.083564][T30192] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1178.405655][T30228] __nla_validate_parse: 8 callbacks suppressed
[ 1178.405666][T30228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18459'.
[ 1178.422571][T30229] netlink: 64 bytes leftover after parsing attributes in process `syz.3.18460'.
[ 1178.797405][T30233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18462'.
[ 1178.996993][ T1208] block nbd2: Possible stuck request ffff888029098000: control (read@0,1024B). Runtime 420 seconds
[ 1179.001376][ T1208] block nbd2: Possible stuck request ffff888029098200: control (read@1024,1024B). Runtime 420 seconds
[ 1179.006102][ T1208] block nbd2: Possible stuck request ffff888029098400: control (read@2048,1024B). Runtime 420 seconds
[ 1179.010344][ T1208] block nbd2: Possible stuck request ffff888029098600: control (read@3072,1024B). Runtime 420 seconds
[ 1179.271950][T30242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18465'.
[ 1179.276361][T30242] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18465'.
[ 1179.422727][T30254] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1179.428151][T30254] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0
[ 1179.552078][T30266] netlink: 'syz.1.18475': attribute type 1 has an invalid length.
[ 1179.567299][T30266] bond77: entered promiscuous mode
[ 1179.569047][T30266] 8021q: adding VLAN 0 to HW filter on device bond77
[ 1179.582029][T30266] bond77: (slave bridge66): making interface the new active one
[ 1179.595148][T30266] bridge66: entered promiscuous mode
[ 1179.597763][T30266] bond77: (slave bridge66): Enslaving as an active interface with an up link
[ 1179.793836][T30293] syzkaller1: entered promiscuous mode
[ 1179.798923][T30293] syzkaller1: entered allmulticast mode
[ 1179.854199][T30306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18487'.
[ 1179.923394][T30310] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18488'.
[ 1180.091115][T30320] netlink: 'syz.2.18492': attribute type 3 has an invalid length.
[ 1180.095257][T30320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18492'.
[ 1180.099858][T30320] netlink: 'syz.2.18492': attribute type 3 has an invalid length.
[ 1180.103092][T30320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18492'.
[ 1180.813050][T30341] macsec3: entered promiscuous mode
[ 1180.859038][T30343] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[ 1180.861920][T30343] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[ 1180.864973][T30343] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[ 1180.916278][T30345] netlink: 44 bytes leftover after parsing attributes in process `syz.3.18500'.
[ 1181.704746][T30371] netlink: 'syz.2.18509': attribute type 4 has an invalid length.
[ 1181.996208][T30397] netlink: 'syz.1.18518': attribute type 21 has an invalid length.
[ 1181.998598][T30397] netlink: 'syz.1.18518': attribute type 4 has an invalid length.
[ 1182.001283][T30397] netlink: 'syz.1.18518': attribute type 3 has an invalid length.
[ 1182.254557][T30423] netlink: 'syz.3.18529': attribute type 1 has an invalid length.
[ 1182.285522][T30423] 8021q: adding VLAN 0 to HW filter on device bond22
[ 1182.299035][T30423] macvlan4: entered promiscuous mode
[ 1182.300751][T30423] macvlan4: entered allmulticast mode
[ 1182.306071][T30423] bond22: entered promiscuous mode
[ 1182.308309][T30423] 8021q: adding VLAN 0 to HW filter on device macvlan4
[ 1182.316134][T30423] bond22: left promiscuous mode
[ 1182.416433][T30423] netlink: 'syz.3.18529': attribute type 4 has an invalid length.
[ 1183.025103][T30477] sctp: [Deprecated]: syz.3.18548 (pid 30477) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1183.025103][T30477] Use struct sctp_sack_info instead
[ 1183.630631][T30524] __nla_validate_parse: 13 callbacks suppressed
[ 1183.630648][T30524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18562'.
[ 1184.045897][T30549] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18570'.
[ 1184.102208][T30551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18571'.
[ 1184.116651][   T35] INFO: task udevd:10026 blocked for more than 143 seconds.
[ 1184.120571][   T35]       Not tainted syzkaller #0
[ 1184.122447][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1184.127986][   T35] task:udevd           state:D stack:22528 pid:10026 tgid:10026 ppid:5256   task_flags:0x400140 flags:0x00080002
[ 1184.132448][   T35] Call Trace:
[ 1184.133864][   T35]  <TASK>
[ 1184.135453][   T35]  __schedule+0x1585/0x5340
[ 1184.136798][T30551] 8021q: adding VLAN 0 to HW filter on device bond78
[ 1184.137141][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[ 1184.143837][   T35]  ? __pfx___schedule+0x10/0x10
[ 1184.147847][   T35]  ? schedule+0x90/0x360
[ 1184.149736][   T35]  schedule+0x164/0x360
[ 1184.151546][   T35]  io_schedule+0x7f/0xd0
[ 1184.153421][   T35]  folio_wait_bit_common+0x6d8/0xbc0
[ 1184.156501][   T35]  ? __pfx_folio_wait_bit_common+0x10/0x10
[ 1184.158937][   T35]  ? __pfx_wake_page_function+0x10/0x10
[ 1184.161253][   T35]  ? __filemap_get_folio_mpol+0x7a9/0xb00
[ 1184.163664][   T35]  do_read_cache_folio+0x1ad/0x590
[ 1184.166232][   T35]  ? __pfx_blkdev_read_folio+0x10/0x10
[ 1184.168579][   T35]  read_part_sector+0xb6/0x2b0
[ 1184.170652][   T35]  adfspart_check_POWERTEC+0x92/0xef0
[ 1184.172930][   T35]  ? __pfx_adfspart_check_ICS+0x10/0x10
[ 1184.176211][   T35]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[ 1184.178741][   T35]  bdev_disk_changed+0x7ba/0x1550
[ 1184.181268][   T35]  ? bdev_open+0xe0/0xd30
[ 1184.183121][   T35]  ? __pfx_bdev_disk_changed+0x10/0x10
[ 1184.186321][   T35]  blkdev_get_whole+0x380/0x510
[ 1184.188360][   T35]  bdev_open+0x31e/0xd30
[ 1184.190172][   T35]  blkdev_open+0x470/0x610
[ 1184.192117][   T35]  ? __pfx_blkdev_open+0x10/0x10
[ 1184.194266][   T35]  do_dentry_open+0x785/0x14e0
[ 1184.197072][   T35]  vfs_open+0x3b/0x340
[ 1184.198971][   T35]  ? path_openat+0x2df0/0x3860
[ 1184.201019][   T35]  path_openat+0x2e08/0x3860
[ 1184.203204][   T35]  ? __pfx_stack_trace_save+0x10/0x10
[ 1184.205925][   T35]  ? stack_depot_save_flags+0x33/0x810
[ 1184.208372][   T35]  ? __pfx_path_openat+0x10/0x10
[ 1184.210512][   T35]  ? __x64_sys_openat+0x138/0x170
[ 1184.213139][   T35]  ? do_syscall_64+0x14d/0xf80
[ 1184.216273][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1184.218663][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[ 1184.221025][   T35]  do_file_open+0x23e/0x4a0
[ 1184.223117][   T35]  ? __pfx_do_file_open+0x10/0x10
[ 1184.225769][   T35]  ? _raw_spin_unlock+0x28/0x50
[ 1184.227858][   T35]  ? alloc_fd+0x64b/0x6c0
[ 1184.229754][   T35]  do_sys_openat2+0x113/0x200
[ 1184.231805][   T35]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[ 1184.236218][   T35]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1184.238959][   T35]  ? rcu_is_watching+0x15/0xb0
[ 1184.241599][   T35]  __x64_sys_openat+0x138/0x170
[ 1184.243650][   T35]  do_syscall_64+0x14d/0xf80
[ 1184.246204][   T35]  ? trace_irq_disable+0x3b/0x150
[ 1184.248316][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1184.250886][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1184.254010][   T35] RIP: 0033:0x7f78a3f169a4
[ 1184.256569][   T35] RSP: 002b:00007fff5f3bf620 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1184.260289][   T35] RAX: ffffffffffffffda RBX: 00005635434298f0 RCX: 00007f78a3f169a4
[ 1184.263612][   T35] RDX: 00000000000a0800 RSI: 0000563543417c20 RDI: 00000000ffffff9c
[ 1184.266941][   T35] RBP: 0000563543417c20 R08: 0000000000000001 R09: 3fffffffffffffff
[ 1184.270107][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[ 1184.273821][   T35] R13: 0000563543423370 R14: 0000000000000001 R15: 0000563543405910
[ 1184.277897][   T35]  </TASK>
[ 1184.279457][   T35] 
[ 1184.279457][   T35] Showing all locks held in the system:
[ 1184.282510][T30551] bond78: entered promiscuous mode
[ 1184.282565][   T35] 3 locks held by kworker/0:0/9:
[ 1184.286791][   T35]  #0: ffff88810006b548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
[ 1184.287290][T30551] bond78: entered allmulticast mode
[ 1184.291130][   T35]  #1: ffffc900000e7c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
[ 1184.296894][T30551] 8021q: adding VLAN 0 to HW filter on device bond78
[ 1184.298682][   T35]  #2: ffff888110a12240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x202/0x3d0
[ 1184.305443][   T35] 1 lock held by khungtaskd/35:
[ 1184.307510][   T35]  #0: ffffffff8e760320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1184.310970][T30551] team0: Port device bond78 added
[ 1184.311412][   T35] 2 locks held by getty/5633:
[ 1184.315583][   T35]  #0: ffff88810ad920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1184.320350][   T35]  #1: ffffc900034402f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[ 1184.325801][   T35] 1 lock held by udevd/10026:
[ 1184.327851][T30553] team_slave_1: left allmulticast mode
[ 1184.330137][   T35]  #0: ffff8881ae3af358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[ 1184.336557][   T35] 5 locks held by kworker/0:10/13283:
[ 1184.339914][   T35] 3 locks held by kworker/u9:0/18774:
[ 1184.343537][T30553] team_slave_1: entered allmulticast mode
[ 1184.347386][   T35]  #0: ffff8881000ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
[ 1184.352031][   T35]  #1: ffffc9000682fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
[ 1184.359657][   T35]  #2: ffffffff8fbcc388 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[ 1184.363975][T30553] bond78: (slave team_slave_1): Enslaving as an active interface with an up link
[ 1184.368631][   T35] 3 locks held by syz.2.18560/30519:
[ 1184.370873][   T35]  #0: ffffffff8fc39ff0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1184.374226][   T35]  #1: ffff88816aa250e8 (&dev->mutex){....}-{4:4}, at: devlink_get_from_attrs_lock+0x246/0x3b0
[ 1184.379423][   T35]  #2: ffff88816aa24250 (&devlink->lock_key#3){+.+.}-{4:4}, at: devlink_get_from_attrs_lock+0x255/0x3b0
[ 1184.383758][   T35] 
[ 1184.385980][   T35] =============================================
[ 1184.385980][   T35] 
[ 1184.389385][   T35] NMI backtrace for cpu 1
[ 1184.389402][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1184.389418][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1184.389427][   T35] Call Trace:
[ 1184.389433][   T35]  <TASK>
[ 1184.389440][   T35]  dump_stack_lvl+0xe8/0x150
[ 1184.389465][   T35]  nmi_cpu_backtrace+0x274/0x2d0
[ 1184.389482][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1184.389501][   T35]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1184.389520][   T35]  sys_info+0x135/0x170
[ 1184.389535][   T35]  watchdog+0xfd9/0x1030
[ 1184.389559][   T35]  ? watchdog+0x21a/0x1030
[ 1184.389583][   T35]  kthread+0x388/0x470
[ 1184.389597][   T35]  ? __pfx_watchdog+0x10/0x10
[ 1184.389615][   T35]  ? __pfx_kthread+0x10/0x10
[ 1184.389629][   T35]  ret_from_fork+0x51e/0xb90
[ 1184.389649][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[ 1184.389666][   T35]  ? __switch_to+0xc7d/0x1450
[ 1184.389685][   T35]  ? __pfx_kthread+0x10/0x10
[ 1184.389736][   T35]  ret_from_fork_asm+0x1a/0x30
[ 1184.389768][   T35]  </TASK>
[ 1184.389773][   T35] Sending NMI from CPU 1 to CPUs 0:
[ 1184.428191][    C0] NMI backtrace for cpu 0
[ 1184.428204][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[ 1184.428213][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1184.428219][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1184.428236][    C0] Code: 8e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 43 3d 1c 00 fb f4 <e9> 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[ 1184.428243][    C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000202
[ 1184.428251][    C0] RAX: 000000000073bee5 RBX: ffffffff819a827d RCX: 0000000080000001
[ 1184.428257][    C0] RDX: 0000000000000001 RSI: ffffffff8def236f RDI: ffffffff8c27a880
[ 1184.428262][    C0] RBP: ffffffff8e407eb0 R08: ffff88812103395b R09: 1ffff1102420672b
[ 1184.428268][    C0] R10: dffffc0000000000 R11: ffffed102420672c R12: ffffffff90117eb0
[ 1184.428273][    C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000
[ 1184.428292][    C0] FS:  0000000000000000(0000) GS:ffff88818de67000(0000) knlGS:0000000000000000
[ 1184.428300][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1184.428305][    C0] CR2: 0000001b306feff8 CR3: 00000001722e6000 CR4: 00000000000006f0
[ 1184.428329][    C0] Call Trace:
[ 1184.428336][    C0]  <TASK>
[ 1184.428340][    C0]  default_idle+0x9/0x20
[ 1184.428349][    C0]  default_idle_call+0x72/0xb0
[ 1184.428358][    C0]  do_idle+0x1bd/0x500
[ 1184.428369][    C0]  ? asm_sysvec_call_function_single+0x1a/0x20
[ 1184.428379][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1184.428392][    C0]  cpu_startup_entry+0x43/0x60
[ 1184.428403][    C0]  rest_init+0x2de/0x300
[ 1184.428411][    C0]  start_kernel+0x385/0x3d0
[ 1184.428424][    C0]  x86_64_start_reservations+0x24/0x30
[ 1184.428433][    C0]  x86_64_start_kernel+0x143/0x1c0
[ 1184.428441][    C0]  common_startup_64+0x13e/0x147
[ 1184.428453][    C0]  </TASK>
[ 1184.500220][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[ 1184.502785][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1184.506442][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1184.510036][   T35] Call Trace:
[ 1184.511338][   T35]  <TASK>
[ 1184.512334][   T35]  vpanic+0x56c/0xa60
[ 1184.513780][   T35]  ? __pfx___schedule+0x10/0x10
[ 1184.515307][   T35]  ? __pfx_vpanic+0x10/0x10
[ 1184.516646][   T35]  ? __pfx_console_unlock+0x10/0x10
[ 1184.518150][   T35]  panic+0xc5/0xd0
[ 1184.519277][   T35]  ? __pfx_panic+0x10/0x10
[ 1184.520592][   T35]  ? preempt_schedule_thunk+0x16/0x30
[ 1184.522229][   T35]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 1184.524389][   T35]  watchdog+0x1023/0x1030
[ 1184.525724][   T35]  ? watchdog+0x21a/0x1030
[ 1184.527063][   T35]  kthread+0x388/0x470
[ 1184.528296][   T35]  ? __pfx_watchdog+0x10/0x10
[ 1184.529687][   T35]  ? __pfx_kthread+0x10/0x10
[ 1184.531168][   T35]  ret_from_fork+0x51e/0xb90
[ 1184.532611][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[ 1184.534206][   T35]  ? __switch_to+0xc7d/0x1450
[ 1184.535662][   T35]  ? __pfx_kthread+0x10/0x10
[ 1184.537097][   T35]  ret_from_fork_asm+0x1a/0x30
[ 1184.538537][   T35]  </TASK>
[ 1184.540129][   T35] Kernel Offset: disabled
[ 1184.541578][   T35] Rebooting in 86400 seconds..
