last executing test programs:

4.006175078s ago: executing program 1 (id=5923):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000080)=""/13, 0xd, <r1=>0x0, &(0x7f00000000c0)=""/49, 0x31}}, 0x10)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, &(0x7f00000005c0)=""/240, 0x3e, 0xf0, 0x1}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffff2, '\x00', 0x0, r2, 0x0, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x68, 0x10, 0xffffff1f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4000080) (async)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x48890}, 0x24000000)

3.898228168s ago: executing program 1 (id=5924):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x13c, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_MASK={0xa4, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0xd9}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfd}, @CTA_EXPECT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) (async)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000280)={<r2=>0x0, @multicast2, @private}, &(0x7f00000002c0)=0xc)
bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x4, r2, 0x1d}, 0x10) (async, rerun: 64)
bind$xdp(r1, &(0x7f0000000340)={0x2c, 0x9, r2, 0x39}, 0x10) (async, rerun: 64)
gettid() (async, rerun: 64)
syz_emit_ethernet(0x1e, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@can={0xc, {{0x3, 0x1, 0x1}, 0x3, 0x1, 0x0, 0x0, "418524e5e366308a"}}}}, &(0x7f00000003c0)={0x1, 0x2, [0x41, 0xab2, 0x6e4, 0x612]}) (async, rerun: 64)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket(0x6, 0x6, 0x6)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async)
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), r1)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r4, 0x800, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x18}}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xc}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async, rerun: 64)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000005c0)={0x33, @rand_addr=0x64010102, 0x4e22, 0x4, 'dh\x00', 0x28, 0x6, 0x45}, 0x2c) (async, rerun: 64)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000600)="e97538391a433fa6f5849e4580c460f4395b0ac45cae14c2eaeb431509fde91fd4c0afe1620fa59bec0af6f511b517397b412dc51d436af2d62bc09482f11a1a24ea4ed8c818e6fc46fe66150c973dae46ea187e6cfd27c167fac3798f6db5c1ead64facf9517b00349cd78cd44332762bc35323fbda2beaddfd610b5f", 0x7d)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockname$inet(r5, &(0x7f0000000680)={0x2, 0x0, @initdev}, &(0x7f00000006c0)=0x10)
sendmsg$FOU_CMD_GET(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x40}}, 0x4) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x0, 0x2e, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x7}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc9}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @ldst={0x3, 0x0, 0x1, 0x9, 0x2, 0xe, 0xfffffffffffffffc}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='syzkaller\x00', 0x80, 0xef, &(0x7f00000009c0)=""/239, 0x41000, 0x42, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000ac0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000b00)={0x2, 0x0, 0x400, 0x4}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000b40)=[{0x1, 0x4, 0xc}], 0x10, 0xa}, 0x94) (async)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000c40)=0x800, 0x4) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000c80)={<r8=>0x0, 0x3}, &(0x7f0000000cc0)=0x8)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000000d00)={r8, 0x10, 0x916}, 0x8) (async)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000e00)={@un=@file={0x1, './file0\x00'}, {&(0x7f0000000d40)=""/101, 0x65}, &(0x7f0000000dc0), 0x60}, 0xa0) (async, rerun: 64)
ioctl$sock_SIOCINQ(r9, 0x541b, &(0x7f0000000ec0)) (async, rerun: 64)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r6)
sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000001040)={&(0x7f0000000f00), 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x6c, r10, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}]}, 0x6c}, 0x1, 0x0, 0x0, 0x804}, 0x44000) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x70, 0x2, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x18000}, 0x4000000)

3.686529107s ago: executing program 1 (id=5930):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}}, 0x0) (async)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000540)={&(0x7f00000000c0), 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, 0x1, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_USERDATA={0x83, 0x6, "c9f59d1588ea1ee6fea6fa6d18e09d62cd8d3395e8df2a0b37aaa5a1b34fc9536ac8c02f7470af8013c9f3b758a31854383634001546498fbaf5959826db18e5cdbab12995578d632aae6f59cecbecab660625a35ea0cca446cf9005a40183d6da9369b9819b1f2ebc513642152546e6cacd60184b246708d5b1170ac5253f"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x31, 0x6, "09a99d110d6b7e7ec5fdc3edbcdfd6a5984a7e41df11fa40ed836b2571a372774adf10ef124dbb6e425d4e0c6e"}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800)

3.605903751s ago: executing program 1 (id=5933):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x5, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x7c}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000005c0)={0x1, &(0x7f0000000180)=[{0xacd, 0x87, 0x6, 0x2}]}, 0x10)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000010000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000e2ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r5 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r5, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/57, 0x39}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f00000003c0)=""/213, 0xd5}, {&(0x7f00000004c0)=""/11, 0xb}, {&(0x7f0000000500)=""/29, 0x1d}], 0x7}, 0x3}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000900)=""/210, 0xd2}], 0x1}}], 0x2, 0x10100, 0x0)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000500)="05804ab38284c7d5a5b66406d704", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

577.923026ms ago: executing program 1 (id=5941):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3f, {0x1, 0x7, 0x7, 0x1, 0x3}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xfffffffe}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}}, 0x980)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_rdma(0x10, 0x3, 0x14)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, 0x2, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x81}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3000}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4048890)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r4, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="49723b3ab53a13274c", 0x0}, 0x50)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)

576.642464ms ago: executing program 1 (id=5942):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0xc, &(0x7f0000000140)=ANY=[@ANYRESDEC], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x20, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xa761}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@d}, @ringbuf_query, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=ANY=[@ANYBLOB="38000000180001bd000000000000000002000000fc00bd0900000000060015000200000014"], 0x38}, 0x1, 0x0, 0x0, 0x22004044}, 0x4048080)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r2, 0x84, 0x7f, &(0x7f0000000080)="0200ffff0880ff01", 0x8)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, @multicast}]})
r3 = socket(0x1a, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, '.\x00'}})
unshare(0x2a020400)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000040000fcffffef1000000008000600000000001800018014000200776c616e310000000000000000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x20004810}, 0x0)
getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000300)={<r7=>0x0, 0x7b, 0x4, 0xfffffffe}, &(0x7f00000003c0)=0x10)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000005c0)={r7, 0x7ff}, &(0x7f0000000600)=0x8)
r8 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001100), 0x200200, 0x0)
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x401, 0xf, 0x2, 0x210, 0x1, 0x0, '\x00', 0x0, r9, 0x0, 0x4, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f00000007c0)=ANY=[@ANYRES64=r8, @ANYRES32, @ANYBLOB="0000000000000000b7080000a14446000000007b8af8ff00000000bca2000000000000a6020000f8ffff07b7030000080000007b040000000000008500000008000000957c49dc53b0a62f8753ed9121682d0d3bfd02b5a3fafa78fd5df25221d8b2bb753dec476bf2f4c3da98b1090d91e0c786b169527011"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000700)={0x3c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xb, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x431}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x22}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xaf, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14000014}, 0x804)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400003000f0800014000000000340005800c0001007061796c6f61640024000280080004400000001c08000340000000b9080001400000000a08000240200000020900010073797a30000000000900020073797a32"], 0xc0}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x8000000, @private0={0xfc, 0x0, '\x00', 0x6}, 0x7}, @in={0x2, 0x4e23, @multicast2}]}, &(0x7f0000000080)=0x10)

330.597897ms ago: executing program 0 (id=5950):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRES32=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4004045}, 0x20000850)
r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async, rerun: 32)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r4=>0x0]}, &(0x7f0000000040)=0x8) (rerun: 32)
setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000000c0)={r4, 0xfffffc48}, 0x8) (async, rerun: 64)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={r4, 0x68d9}, 0x8) (rerun: 64)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}}, 0x0)

279.707298ms ago: executing program 0 (id=5951):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14001000010000000000000000000000000028000000800a0101000000005e1affd502000000090001000800024000001a9518983c9e671001030000e6ff00000000028000000900010073797a300000000009000300738b7a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '>'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x40010}, 0x0)

278.758608ms ago: executing program 0 (id=5953):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="b3ee025aa9509672000000000080f5b889b192bf98ee90f3e136902da03be179e1d6b82ac1cc300bb2f27e559ff348f18c828f83fc6290a18af3139d6098bc0b313416052c92e0283800b9cb528e489ea3283933f0b675dcf355b3d0dc35f230162a34c68d308af3fd77a4d331ed36fcf8ee8304d3b732edf7a98944b72b8754795ec90ad3f14230c1a4e01f7c7710777269865c5891f6592d39b441cea47606812a84076c1e8cb1b72fb0c36e99a0825937de191b8867c597ca1cb793ef0000000000000000", @ANYBLOB], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000600)="e02742e86c0d850800b8f125602f694dd17210339db4c7759109f6ce6134970b825c0a9c87ec9e8d58e101d85d442eb0458990199eeb2433e727dc5434475a1130a142e4c30f4007735500988c5f005728c1f87f92bacad200000000009a4e74585e9a91082c300fc832fcb64350305a8ac7360f35ead33bfe93314ee332b2466583e8de01a53f6c1b3f1a049c9f828da57e9b0ea73a1403038836865beef6", 0x0, 0x1300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x2a)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004090)
syz_emit_ethernet(0x5ea, &(0x7f0000001780)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x5b4, 0x3a, 0x0, @remote, @local, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x0, "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"}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4)
sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/14, 0xe}, 0xdabc}], 0x1, 0x10022, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'bridge0\x00', <r4=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000380)={'syztnl2\x00', <r5=>r4, 0x29, 0x3, 0x8, 0xf9, 0x16, @private2, @private2, 0x40, 0x8, 0x6, 0x9e}})
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001140)={&(0x7f0000002d80)={0x7c4, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0x1f0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0xffffffffffffffaf}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x284, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{}, {}, {0x0, 0x4, [{0x6, 0x5, 0x2, 0x7}, {0x1, 0x3, 0x1, 0x7}, {0x3, 0x3, 0x6, 0x6}, {0x1, 0x6, 0xd}, {0xa, 0xb2, 0x8d, 0x3}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe6}}, {0x8, 0x6, r4}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r4}, {0xd0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf2a}}, {0x24, 0x6, r5}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x2, 0x5c, 0x0, 0x7}, {0xf2, 0x8, 0x5, 0x8}, {0x4, 0x1, 0x7, 0xfffffffb}]}}}]}}, {{0x8, 0x1, r4}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x0, 0x1, @notify_peers_count={{}, {}, {0x0, 0x4, 0xfffff5d3}}}, {0x0, 0x1, @lb_port_stats={{{}, {}, {0x0, 0x4, 0x8}}, {0x0, 0x6, r5}}}]}}, {{0x8, 0x1, r4}, {0x3c}}, {{0x8, 0x1, r4}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x7c4}, 0x1, 0x0, 0x0, 0x44}, 0x8845)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001c00010029bd7000fedbdf2507000000", @ANYRES32=r4, @ANYBLOB="8000ba060a000200aaaaaaaaaa0c00001d60fb5b40f362a5143f9e3bc9b71c27b31c0f64b20d4f17df4fbf814fcec5d9e31f84622106ec12b202612f3b7479cf4c7188516e4b83047839f4f6dc412478d1259d728cd6f022d55a5a384114d4e48a869493900686dbabeb6c996fa9a9b554376dcd0549405b272edd841db2ef1ffef41f37ee9682b7b0fa198e932f6aab43445946a07a52276ae108a05f95d3add5b7fa1c10c224d1aa4483c8d285a675c3220edabf4c6fc1485b6517ddb7b61606cc2daa5fac794ae2dd6f7c"], 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000004040), 0xffffffffffffffff)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000206050000000000000000000700000505020073797a320000000014000780050015000000000008001240000000000500050002000000050001000600000015000300686173683a69702c706f72742c6e657400000000"], 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004080)={0x30, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4845}, 0x20000080)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r9=>0x0})
socket$kcm(0xa, 0x2, 0x0)
r10 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e21, 0x3, 'sh\x00', 0x1d, 0x9d43, 0x75}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44)
sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r9, 0x3007, 0x409}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x1, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}}, 0x20048014)
socket$nl_netfilter(0x10, 0x3, 0xc)

278.085231ms ago: executing program 0 (id=5954):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x58, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0xc082}, 0xc000)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffe}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}]}, 0x24}}, 0x0) (async, rerun: 32)
r6 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0) (rerun: 32)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000046d100180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000008208500000073000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$FICLONERANGE(r7, 0x4020940d, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000640000006910770000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
sendmsg$IPSET_CMD_SWAP(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x84, 0x6, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x8}, 0x800) (async)
ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000200))
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000040)="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", 0x28e}], 0x1}, 0xff00) (async)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x80004}, 0x1c)
bind$inet6(r8, &(0x7f0000000140)={0xa, 0x5e22, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r9, &(0x7f00000011c0)={@val={0x0, 0x800}, @void, @mpls={[], @ipv4=@dccp={{0x1a, 0x4, 0x3, 0x7, 0x1078, 0x66, 0x0, 0x9, 0x21, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x88, 0x3, 'f'}, @rr={0x7, 0xb, 0xe2, [@broadcast, @private=0xa010101]}, @cipso={0x86, 0xb, 0x3, [{0x7, 0x5, "86e7b3"}]}, @lsrr={0x83, 0xb, 0xaf, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @rr={0x7, 0xb, 0xcb, [@dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x1f, 0x5c, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @local, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @ra={0x94, 0x4}, @end]}}, {{0x4e20, 0x4e21, 0x4, 0x1, 0x9, 0x0, 0x0, 0xa, 0x6, "866318", 0x2, "74f878"}, "b08c9272f84c4139e8325ea6f8996184010634c6cacf8087d5556d934e9f18c27f9223cd2b51067cc034fe9ea2440c241534916c4ff1f152c84810ba7363175b279e5572103c469b7c67e90cb66b43098c9d02cbca688cfe10740cc50d688672f6a49f3e18245043113e51d694688696abbb80fb44a38c85005376727469bafa66c72b2eba175718788a1c3b5be5454afd369d03a2af6a1cba199ed114ffbc4d2f73499eea0336cd7253e01ca2fde61b53b036adefba2b44e07c38e318010ef9e34bc25c373ed5127a43ded11e96f4f592ca94677697b68fd4390c3ba13aa330cbba156948acfc1056e691982c5d2c021a5921d19630aa757f2e4a9fc1a3b3e6ec37a171cbc2c025aea1ec9b2cd0b2d72bd8d7e056ddb13dd452dad2f271e0c62cc5da9df61cf2a115935183bc76f534f77cc801c48401c7bf8058bc2a522468f8ed240df259c45f6e1bebbb78b3912d295a0675fe4f3cc73477d9b20463afa12cda472b581b36808a98da4243efbbd0537f20779dd500eb4a046bd05f65c3335512a96c253b0e389956fda0f7a4efa2aec3b7ac9b0907b2894487ab195a607239e8393675b081e38d66f6193ac953c2bf04c764b4ab14c270a5160fcc5116534d98fcdb5f1da6ffcab7048a7591cd81c264a3ab76a152c9e8ca1fa95376191793400ab68a620a3c2ce7e4f3f418eee8658cf5ab3e3dbf4232cef4acf20f17d72866d0811aed75684e9444d296b7f233f1e59c9d6d97c0c6bfb613dc1e047fe8cf5fd3c86ff2feb2c984fe839d41a3651fddb2954bffe32e9d42f5e1055efbbfc3c4cfa658751271729355595013d518ee5c069f635e02e024ae90e333274242b9bcccffc1408925fa931dd24c65e8b0a860a111fbd9a30bd5f82c28e25cb13a62774d4cc8a452c02048a20e156c8ad968e67ef85e178ed781a91170040fff16400335c7e8e1a5841973513d165c63ed0f3bb4039f02af91589a2c0382c03c49675e43e08905ee2601c17bab7853e8c10ecd93407eeca2a653402978f32f8b3448ed935ec2cdbaca5304057a8e98c0174d3043ac66f47fc456cbb9f9f3b1661e5baf2adfaf740b319612ea97a9d82b6a885e13bf3b453155e486785dd4a4b1d57eb341d3db43aa3a099d88327312fa12b263c749602682d3ecd6bfa0be40716e203546fb42480f3a142fda223f31611618e49566d603eb929fbd3216fc04f9c14f90ced1622483b1811149bcb4e5ff6e1b909d23dd727d5e77d4660f432c2c147682fe972eed7ab89f277be99fd791a8b62a7911d0ca6c12407805cd603ad483c68cf471512277fcf36c648923953c29714778331725a9dafbf32555a1c5fe90c757660c1fd5823a2932dc70f23d9190c988d6e0b589f0382b6d92db103c863ed3b83ab97b8d253bfd50e1211ce3d23af7009a2e68ca80430fdbaf1ed5ef0bfaff8667b95de8d80d2b4de5f3c3467425222313df8ac4377bd6ac22b7e9bf2c7802843a73dde144fc0de811edeea125733a225eb7752d0c92052947dba98c298d53bc1a52ac6a63aebad0c9b3b8ad28d7fa15e18538018a410909dbcd315609897de965b0534c6b3926e48fc8cdee37eaa7ec2d3b6822ea436895ed68c133cecfcdee590d16dc2446e276580350e7924bf228184996121b17fb940881479b96546d86d1d187e33cdea595d155e03552c3e0cc2c58cf54029baa835098b166d7f5e53e473973a14aa36d18c571bb8a76a6f0696962e5c2e15832565bbecca478f30716d49f84084a1080cd7ba8489b15ef2552b198d10964a6e50ec0e5301cfa123d2dc883100d4e9ab66119c67b39dc1b36b38a06bb0d7931a7575167b4ff90db8366039de479ea383d52579b0ad2803b4696c4b85f7f88983c3761051d7ad66e61ce8021852ff860970ba4d6746aa377bd966981472c2fba7a73cabd651ecb848625f590f943322154f3a185a65dc192e890a9a0f585a150c09e41646d7ec4b59ee9c0087e135df4e1f0c7607bbb4680339538b93398af101ca1161644c256b38139245a92a64d3047d6b647b2a8b1af3803eca8d57375db9bd7abcd59d9f7a253ae9d8e7d530583acf440047eb1d4f386826224acf100c278d428099ee79fec29ef00984f607b807fae3ffb965d4d2f1e8028a569f01a8a88859bdbe21c1edb7b1ac302bb480658134a98e47b6c456b59b660e0a8bae7498ddcb7bb8b79c9a4729dc0a9dc3e47a36483c744a5458f59645a46b926d5b116a5cf2e68d7911054f38150404584bb85e81d597ee8efb4cd6ffbfde9eb0573073c47297ac57f64a3fe254fc6691f395b075f678d04d944eea79a05805431bf09cd77ab8a45d3d5c316220486813a81af38d18c2f0692f2fed7fca035368ba5621e28cb71eca449993d4de7e52496476ae1e655cfc36c9a50c862be5c5b1ce8563923a3e89ebc322e989db340f440ac9cbf2ba079bc91c49e8e80e906b067966d18995d01384c80a2e1df8f7800d138e238d0d779f031329115413897aa6b787615882f87962cb1bab5ef52af88a6cfbf1f59db7b1035e0fea7a7739357bee3b1db63e24a4b53622aa9a0f0d481f35e5562524d72460220ba0ddbffa66cbd9679fabf4294e81d39966f38f9cbc170e532e420787603ec8036a6a419214aaa2ba094a903899ae201f2fa377e0ef6399f2a68560da5b3a29a9a57882b0bd3e350e0b358c61b8c94b5c754aa37e9f93f6afc5b2512b55dc50e1c5adbdb640609d2bee69ad6a9a9dc0153cd581e26652eec3c6dc3fe40db901c0730a6cf2e115451c1deaca4bbee8ff02076bef2b8a08e3e3d4adaa84a455f4e1bbf423da9c596906c3b01900df8804762874f8967190d5c775de0f9d8bd7ecdb3371a99c210b0e255844fe71b3c46e4b3cb399cca3df89bbf4ccccfe23048dce9bea2982722fe826b97cb27355508d733ac4536f0e75c4290a61b6760fb1f46e8ad0bc59cc681b5d6298a5beb59e5ee49a90e734f06e73e152839bbd8f2354c581798dd63bcdbfb6db87ffb5b9321c7fc516aa7d56950023eea2d8d7ef6e04d5ba85b1827c8de832c061f11991e7d460d38183208491b87b4647a9d6b611cee19219b635ebeab550fcc898de9466e1a029daa1b20e9c18fbbdb4018be985daa704fca42092bd9352883973dc3bf40341a2c806d384e4aaf58204639a895337d97bb7b3e47e95f970bb4f565ed1d1b23653ec4c8bfe34745c93dc73096a0ea7f1f5f2885c0f3bf707aa02952e67d06180a011fffbe59571bc33cda1fab88d697ad168996f7e7264fd5e2f0b46e9e6277748771e28c68cf9a41973745e3c619a766b4964ce6587eca5b2a031d9fad7cc228c83c84c66efe64eda701044c1d8c77048be2a51eba7e5e539e57c05105a4f001476a4766098c9a1bc793fa0c9073206fa4c4fefe944d01dea2cd77d9d1590bf7fc98309a1a2634e57f5391579b3f3754e837be9ec6e0948174a60f85899ab25e521b6724cfa4dd3930440090d5c7a4c1a6b7cc65cb14622464dfc9b3a19a4fa5a8cdd83943cb039e7e913cf1655adb8ba2588b401c9f2b62b1e761c63d4bfad142f2653886535bf231c6abc2b32b377e401928cfc8b6052c631470da73a23d4c777d4feaeedffcde3d9e692d77990d48b0d14d1012aa18fa6fe0950d3a79f70e6b08413686256399af8a3afacded7e37b6c41aa822f83cd64327453d640e7b2fb63efe66f4b4f6283c24dcda1e7a30f94262ff94775054e83c8e1c40920140423d27ade317563eaa1f6d39f09ae18eaea3e0926a658bf732e7efc9501568a7cdb5dab5e65bd6dea7f9092e73f81742b803c235f61bcffd5d70da3feb3d8a88e0625c86c58604f6bdba2f7f01bad5f2caf6307e2300ca1296b82ca093b29dc4f52c4e8d36b6ce534d51f25dc093eef6f801c0f5a117c7f709be902a5b6eac6713a3d560d55ba35490dd4e52c3e22b641c6da55124e3db63277cbeb0f230cd2dd5285b3a12915871e16c7cd209371e128c17b9877ac4240880757a62296dabb439c91d0a9b5bc2033940a9892a40b711b289a94f2b961d31178f14785715f052bcfb7f84fef067c17a9d73bee627e32ddb583bfef125652e96528e0b59e137853218422059ec931390c25b3aa4162aae56cbd41f9409662b209ad4dbd8531155151f866cfa3a00cd8f692cd29069bdcf5c6301c10d64263208aa17a9dbefbb3f0af58788a4f580bca45f74275c77b48e14c2077a4144e45894147b8184a5abd73a343d9687af9be6da29b3393107d30c68ba2a4d2184b7acf51ac9cb2e199fe6f391315b0fc74bac765d4fe7c69aa5004f4a627327b6f025c836ecd4dc5d9589b738d4ca20c8c115946c7d4f85b9d48fd48cf5c10526f37dd6c0362f73a487c3bb5af0f2cb45c7c38711b26cc88348375791555e263b8624b520a270c6753b8953a4efe2d67ff11063de3ad72b824c6e92d5244e4cb5f594258e0e4d32886530a458a726edd121436c34bbbc82f3ef7f350366523204058d83705869741e0d38195f0d0aa5ba6d00dbabd4cea9c6d1480cda3a2e8ff276d610b6af69369ee5ec859a6167b5c25a4f6e2d87f2c85620b4826cf41b00f44969f9327bb4ba5db7f7cb3c6fea9197828e78024e6b1c6533597b1ac7a8fb12a7cdcdc9f3034f9aaea0c2436f10a9f7625fa5ff493cc4465b57e9b5c72876dec4a91d519c3b2550238563abd127fa2bacaedff8b6ee8fb1506080e7b6f7caebda57cec10c1002237dcabb23192b78d37a41cfc81ef6c3629a80c47c50910a923dd081173c0dda74ea5bdb2cf22abaca8f170204736552f1da58f6f9f513c5b2e2198c228e2c07f9b02197ee1036dfa527d700a1611785509bf2475ee022ea12d9a2b9e796e4292ea72849530d02aef4073ecd2cf982aa2c2fbfc2c3af38a1c3ec848ff0232be39a198d448c5e381ff7b4f073837596911acbc045c199538d1bf0f0a1fc38e0d3ffdb52cdc48d4d089308da2c556d20cbe40c0ec3a05c04f4f8c3a3294cde27be2dbb48780187c1e2fbdf3636f99c836d0c690a03c3047c75d0296b0abda9242c7f85664c703d6b1ef79b68099178f8b2d9de37486a26126bde8440c25a7a3a933a898a94bd7d3da765d1b48181fb3d18d530e684e5703bb02f806f5c98934c1062498d11f6d75f58563fb42dd1ff03a87f753aa63da019e0abef584deed84fc2e87b9190cbc316dc87c77785097114e6dc8885ae8db0165dd322fd9737d1d5bb0d13574d3751ab68b1d560b36c535e687265ffba9eb2333d3519bd5e709cc0f8e6b58264b2a585b792d35063cac74fae3009ab6368dbabee148bd97e81d1a71ef74a7019ece78624af5f5d255db8bad4c27f11553417c0520d208b4a84bfe13ed91d256dd0ab02bf61f89e4efd1b87ee9076c823b23016b458d2efede663d32153f8efa5652bba3ecf1f989891af727a4c3408d3418c3e5f6860959b844632566ad1aa74b755b8a9ee6dfc4311c6969fc79304a55c6679504f329e7e74854ad7c675f229f3f61a32128e256fa5d557936cb93242d81e4e3e1d005c06ca0c2453cc05d8e677649a458d59ce5004dd67011348fb7847c28e01b7df9538921a743764a643a8c8b828ead714f1c5b62d9438568dd8d39dc95c3da5825678f07a2dd353ce402bacc86dfdcc4c1bc1d2d5efb2d33fac7b5ac66b379aac5f72f1f7ce495f52a19a739fba5015ec8c7be09957f8baea92cef90ed198fe511844bb42e2e87cebc8656336c5b45a4beeb84407690d6d99e0e91c094cc5abe6888e7229fe22071dbb54"}}}}, 0x107c) (async)
sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004880)={0x24, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @uid}]}]}, 0x24}], 0x1}, 0x44010) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)

119.029387ms ago: executing program 2 (id=5957):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x2000000, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

117.943239ms ago: executing program 2 (id=5958):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e6572000000480002800800024000000084080003400000000a080004400000000f080001400000000024000580090001006d6574610000000014000280080001400000000e08000240000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000100000a8421bebd3ec36494bf1d14f361bfd996621a91e0d6937ee33d6faf52016671a36294304b9bbcdb8c3a1cbd125d2f2d7e1d185d5ea2168f34edd8ae041ca6b62ff042282c2c44e1d3bf3574c5fad22926b2d93b3458a0365b077a392e40f99b24ff95b6cf85bdb49791b89d878e970bb24e217c185d628c81adafcd827dfb057ab93f61b77d3b89b9611fdc19485c67be5107b4e81be824dae612bda4da51149ab92ca3a7e5c8234954ba4dd5b2ebb4900c8fc344af5cf97d09cf463c7145bcd6f6b07c3920f3a7cb077192271961fc45951a4ab6dec134fbeb34fd650afcb6093a46bad9272a4d181425"], 0xb0}, 0x1, 0x0, 0x0, 0x11}, 0x0)

117.68648ms ago: executing program 2 (id=5959):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x32}]}}}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x20000884}, 0xc000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x6}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f08000140000000002c000580040001007061796c6f6164001c00028008000340000000e1080004400000008b08000240000000050900010073797a30000000000900020073797a32"], 0xb8}}, 0x0)

57.357889ms ago: executing program 0 (id=5960):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000180300002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x34, 0xa, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xb1fd}]}]}, 0x34}}, 0x40014)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x36}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x23}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}}, 0x0)
socket$unix(0x1, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000180300002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x34, 0xa, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xb1fd}]}]}, 0x34}}, 0x40014) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x36}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x23}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}}, 0x0) (async)
socket$unix(0x1, 0x0, 0x0) (async)

56.58787ms ago: executing program 2 (id=5961):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x6}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="187a42000000fcffffff0000000000000000d3314a00000000009500000000000000816e5c7500009a133d269f8526338aa6432213c32ba51c673d1516"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=ANY=[@ANYBLOB="38000000180001bd000000000000000002000000fc00bd0900000000060015000200000014"], 0x38}, 0x1, 0x0, 0x0, 0x22004044}, 0x4048080) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r2, 0x84, 0x7f, &(0x7f0000000080)="0200ffff0880ff01", 0x8) (async)
r3 = socket(0x1a, 0x3, 0x0) (async, rerun: 64)
r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, '.\x00'}})
unshare(0x2a020400)
getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000300)={<r5=>0x0, 0x7b, 0x4, 0xfffffffe}, &(0x7f00000003c0)=0x10)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000005c0)={r5, 0x7ff}, &(0x7f0000000600)=0x8)
r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001100), 0x200200, 0x0)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x401, 0xf, 0x2, 0x210, 0x1, 0x0, '\x00', 0x0, r7, 0x0, 0x4, 0x3}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64=r6, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000080000007b04000000000000850000000800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000000206050000000100000000000000000005007bc2d595d64a4cb70100070000000900020073797a32000000050005000000000014000780050015000300000008001240000000090d000300686173683a6d61630000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000002030102000000000000000001000008090002000000000b0200000008153100100204310800044000000022090200000000af0100000000"], 0x3c}, 0x1, 0x0, 0x0, 0x14000014}, 0x804)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50)
close(r9) (async)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r10, <r11=>0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r11, 0x0, 0x0}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r9, 0x0, &(0x7f0000001540)=""/155}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r9, 0x0, &(0x7f00000002c0)=""/4095}, 0x20)
socket$packet(0x11, 0x3, 0x300)

55.932813ms ago: executing program 0 (id=5962):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x7c}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000010000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000e2ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r4 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000180)={@empty, <r5=>0x0}, &(0x7f00000005c0)=0x14)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034)
sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x34, r6, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
sendmsg$kcm(r2, &(0x7f0000004180)={&(0x7f0000000600)=@ll={0x11, 0x15, r5, 0x1, 0x10, 0x6, @remote}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000000700)="c3572f1571be9846f0e5ecb3431b5d43747df73a0234e19b43194916bc36e7bcf2dc1b4674fca7004657430c6286f57c183ce5fe449345675913a5eaae380fe950754a3e3056f78e", 0x48}, {&(0x7f0000000800)="960103a148178082caf446bc96e6cc7a89e14ce995dfe80ef956dd7f5f25a934d8112758eb9a2624cb49f61455a51dfd143ed617fd15115d52b719fcd347802f6ec93fc90b49d7840b6ab31a82e6b302ab3c1cf2ce9f10688ccbf80e50e81a3c1d08c1d27d75a8505a7036d150b1e872d64f67c9461cd77e251d53da547ce3841edf8e77f6d149e89b5628a499c43b7cb6b753c56a16aa503c", 0x99}, {&(0x7f00000008c0)="0f8fcb34914941b9b540e777a0c350bfea88fea65b37ea5489c787e2", 0x1c}, {&(0x7f0000000a00)="d2afded9c21be0225b97035da1eed6388ebcea0f3eeb410e11a857e480323399f07b736fc97bd950c15a95f4fc9812b473170a307b2f166d57", 0x39}, {&(0x7f0000002b00)="cdfccba6f68e5a468df6369fa805646f116e90fa24c4c04b42c858217159d2c598666587a1acba9212f6177d663c17dc3b82ee3ba4fa4acea1dd40cd705e1cdf33f889d04486496afa73dbde1bc25036839b9ec1e6800d86bbf84f0102bf96cc6e3e9e16fd64ad08a443e48cd2029dacfc2a405c45ef0ce252124101ad3da1648cb2f5b58ec72aa0aebb642f0b1b687be70d0d13fa7adf80aaef0cc94c7fdff608edca598f104c06c88366b5862dc60a997dfbb8a66afb44d9aadc4c2644214ca6303a6ead28a36e9300c88a05a133d979b3ce5d89837249a3a545ebcf389c1bcec4cdae31d89feb94b8b6c134ac09500a568e4ec111cf975c3846d0728c1bc5b3909946474beeb8d34466e78b5023937e0adb8fb98841d9048b58b1e86b5c9485832c284015aaacfe85e3b664e6d7c9ff9a9b4622e4c504a9ce2dfe3a58193223af7f963cea518eda0363364a889b02de778cce389d9aee55a9aceac76b389b74b4f2954fd851a61dbdfbf04a1a3f189662845aade33028918590ce22b2ebaba65307bfbc6a9841bb633a9aed4863c630d6a9090b34e427b5ed917c2c202cc5cd9e270ae742fb0fef732ed5d49557640172a1e5dc75c34eb105a05884253e2f9665760a088f853861e16bafc99ced71a717670cbf5e111645e36791d02279b2fe9707a9b10567f7678333bde2a18185b624ec7147f5131ca14b0c7c2c4b57598dc0e7aa5d51dd0428a579ff86b374936576e15930d04a95140b2fba7152d8052d2a43ae3f986203f5e5adb449ebc8fd825bbcbae42b24e8984094f45ebbca57fc33348bc196548e80821fef58cf4d15ca3564f2ad471bcdbdf171bb94656b68ffa91e825d93e427e48c4954ef2cdb4a0905ae175a0f23946e76df6c4a1ce0d87ffbea25066776431ea803f60a398e262d958facb90638391ffb31aaf9092796bfb9a7ed90549fdf9b90cbad3e7d57b0606c600d8af4c9b7073e7531956a61c5a29f889f498a7e67929691725b21d23a59d7c2bbf91571d74aa3e219ec6b007a239cccf6d3e9ffbfd1a91372ac389d60bf0caa0224918611e6744c7f3dc1978972817e7b8194fbdba0080192a9f255f1d788798d155995b6af05f2a044a7001bc4a0e58e82d43fde95dc95355ca52b51b9fc88cc31b2e106a83bd07dece60796c14f09ed928417b9a14f02c9a1670cd4ae8b81f69d912db1c7c653927c749401a5647bac3d9c00ef1124d8fc0bb7f8ea72da38d80b9e6ce8b23d3d31c04cc060cd352def2c04bc221a512c435321e6e0731a420d0acc6b20114ba73e4f236bb1d6ac2bcb970a95133d82327b32940c050e4b88e08a2a43f488487b92197718cc645302afe5dc9ae774022fbf4cd483f82827fa35837ab210ed2264b32547cc798d60967f2691572c3b843dcf6150323050cca5d82ab811b4ac63264093d9fe6affe71691451fa17684154a2115942699fc14665af145e3ade0406085b7e821ec564d92821c9a91f7971ab4bb3c3219a7322baca5ec93ea84c1fd6e6657d5572ae9c1a53ad298a94989dcf8b21e6e6bbdbbaec151e3a6a0b904adcc2e14f8c199959536df477a96565640c6d945f008f97886beac7c873114fb41df4a4ee3bd2615b68978706da162cd60f1861d884942bb89f0111a50ec5562ae468bff1e79e313a7a504a35e5beba3313aff0d9c3936e73b9fd912b3d75304ae3ec6e19efd0bae2dcde5736f512880d19c6bbff4c121d1126a5cbf0970095e536f7adc2cac02f3134c019dfabdd1b9f1196fecb46dfa0e1c0d4f865fca76286c2f36d988e7f1eaf7b9362dca97ad45781165bdea895ed75ff4a1860ed6a8b5f947df8c765ac93985b3b0e570ac764372b3bca78a227bc319098c978e72dc9a7933a1273dac3c43ff217f8feb53bc2ed4701b9ff436173794c4cacb59a990bdd65c3574b6f8de3f392943e6de8240c1063f752169e998220f234b38dc30455c48e10b81450bcc995e144080bb65c7f191763cef7a3577239d83ba2a51734a9d9edede6d241f0b92c577829631098da46577e7f30cf2276e959d4395d10f22b2f7c3b674a29ede9b62e7dc7513a2e977ddab497dd98870e6e705d883e0570466be035db77f558f57ff0296607c2b8a5b8a97c29cc30d1f1c362057cd081acf1d602f6993586644a73ae8a4591b7208f95ae861cbe68ef53c72d7446070be20f5c10b2bdcd5b7edb2d90eda7d21f54babe4b993b30f6f82f033bb372a97809a99a826d8037303b0db59982f1defbbad61d74994f1596efd09e9d74c37a0a00020541403f49d5f35fe4d2509e96ccf2ea607f771ca9a4ff4f2a5941b88c98c6381228bf75d435640e6b59140e5c9d4c75f11041d3d9aed3df8460301d46b4027c45ff8cd1246a51f38c8d75653d49bfc269550fd4cd8e2dab954165a2936ea0e3a70948ce0b4a688bda475e4bd2b27666378d109a77c9b1665590f6364a7279e2a5627fa2d3a009d267060754625422565584521e601c2111947101ce74dd18e38a11697e015a621c7c23ac4b528f4be0158603d05cc8f4d7f4613fb57316e77b63720c9ffc8f13d2209574bb3b2993ff2922cca209ef689001c35cee3ee2a539e1b5e95c0601163953d345831e8693a8bb217128d716e12cce9a91e8ee865e319900e221dd84a58f4c31f0416ce4de57831b9d2ee7efc3694f2eeac17c0158428ede784e82464887aa656798b3440d0d534de328180be195aef4129ce58a56e4193b22b5bead7313c1ac593ec28276efc347b97c2485ddcb3fd93a3affd6559d382cbc4b344b62214e397fc39ab77ab147ae6b5f6ca4dc898e0f0adc1ee7184af4483524fb2493574799a8f1fca6e192fa093167463b2233aaa2a8ac7b96fdfc34336b246060d55d690caa64ef1da76f4b08909a3d33d15b66506cf95c54ba6b5c40fd4dfa4aa2ab06623880efa1ae65462819ea38838d82528e2db2b0bb7fffdf5efe449752d4d8803b3964a0f7886de36ddfa58cd802e99b69402614cb7869abb1baa6bf3b5154cb58e033a01f05e3d02f1d908acce86cbcc087f75d5ef43a6835c96a7a56bae10a3cd6ccd0d0bc068e1809a9457a754bc35de80100ccfd978fb0de2a685309a73f21e5f18890507468a28a484c9e7e11a1366fc348d2947c211386f35227e5c29d9067c107e2b0b60cbf4955f0339a9c8a8ff1fc6c50ef9cda07144f94c0b337e2921d67795b6d195b461c1ed3cf0417b787b6ffa5ff23379286ea55d1982ebec12007e5f62b696751340828b28e1c6a9ecebf3dd39ff15e7883d6abd495cfab92b4ac3fbbd2bae1f86ceb6517bba0f83bfca87303699453d7b5caed9a4255e48859d28006d311c574316d5e50b86479598209be31b9eb127f4cdbe10ffee48f1d37a4a2b560ab8dffaf82177fa41355c5fb0e534a878a7965ecbf1a1fae9f1902217bb320e14e1d5d34d7c349e2f6ccb4672b15af861aadcc77640fba6ba3d91f18e0f697a465b8c900e9a531597fd831c11ad477e6d1f9754ad467dce22dca43a187dcb8272a1797ce326ed3158134f18851e3c250253f9474fddb9c38cb3501e218b540696e42dacd3f3c5b7666522bf53ef2e1d04f76448dfbdacc56d2c5c410b679722cdee68f4bf31edbbf535e87fb5af7bc5bc891840d8f4c7414af5aa40e9259f55e5148fcd3e33350b12f4dbaad90bb16c41dbf2a3d91d699bb12e891e4fe9529e4fc9e6d092d0128bc76009731065e2704df4608ef55cdbf2605cd75f3f6e8cbe929262b1fe70924d14a5adf7a20f0f77fdc07deecfd7c52225f19c7fe8bfe04f8ecd0917fc6f7ad9d30e1973fe42c7e90e12d6c4b797f262ecb76f7fdcbcc0d37e40e0b9c2cf0e7cd453f326f4f05b2101e116a83b798e092ae4b2111f4baf38ddaa21892db6f24c55eda8acb98d53bac51925d6138acc59e069b61c84532c48e66b3579e2e335611848e92e9f329723e00edf3b8e7a78f651d957411e6b7933244a828dec648694a68840c33e3ff5c06a9000a064f5536b171f0feefcc52ea6d11c540dd637f700eb139da95fafebad4eb3b500123780403e901efc8051a1673dd68f5464c75a59dd2ca6048d4a4944d2c8f15475efea9576b47209f170c89806c308a1118185bdb90a49c3521da78cd4791a9f1cbcbaef47cdd1f7bb9ecd3b251c464ba521528032a8b1670618f57994cb4865c6d5139f381c93b79bffb0f8056656ed9a9da378a981508f1ac0d85f84a635ae78d2cefcc4c6276d701f4666dae0dc0fcab274cf3f864463f754f327df7308ed7acfb1db3ee510bf68ec9c679c9aed73524729fbc6acaf28cddf4b8ef2c233abbade89ef9ea939773d08acde7e6c9eeed5e28f10f3d5f669ef66eae652bb9f30d36a33a8714bc259400ac16862e30de4c75126ac7e6637940c39eb30faca64a4ea90fa83b33b31bf34b4b581927b5f89f3d8eee7a6605071ecae6fa65fa21f6f11118cc786396eb16c256d17333abdb08662aae0cb5e3328b96d3584221f03e095d8c2d0b2634a32e9f2728da1634759d351c7cde32378aa036d0b0e1618bf20690ebc04aebbc7015158b745427a9bdb36d860db004190a41d7e6ffeed66f44c49768f04d581e08ffea77f6af2e658331f0b20e2a171beca7d7f96432757cface790d499c1db052c22d8a382f5e98b055cf5a985ea57590e022fd5aa7a725ea40a44aa15b3352c8ce58eb2caced37cf67bc85a5e4391cf2d679929aec09514da6864ecbaf5a6e715b49e9ec7917445cde7c6b6889519f77ce693c5868188b9206e93ab07153582bce83881d19c2f4347881ff112cb9c69d0f1ccd7958f71b7ee036cce40c0fea26fdd65e293f0e2300cd397a63350c7fcacf161e6d7a733da21a5d9cec2ffda4c2fede71306a1772cda188cd8aee3500daae1d49fc140566459905492055e011ff8fca4d449e5a66c24e7c3679a3155c0554b9a9c890d33ce11cb216ed68f734b8214e51675c1f50706cdcf33490e1e4533ada63453e30d8674f0d9fa67b0726879684ababc606ea374cd3a10064272420c451851374e3d4f51da7094e1a27d0ff50eb328db11d05ff842adbd549603c5474dbded37710481f5c949c51e256aff3f4dad00038e9ca4df8cdc332b41390ade69a8c67e3b9961c09c99a1f56ea6d9606882fb61206ffb0c68988f71b4c55e509c34c77394cfdbfe25110f8fbc0514a6d99eab56022e5f8cd1937dc216b66791d5c74b354f901204760640177e12203db7b2c949bab417a173cc864d28376e5969d9180ed0051b176a13108ce9140f415e9756313d9fe058317f3b3866ae730ba66b4a34ec04157d35748bedd39f062d7bb8b1cfc3cbe4557376013935c29b04ef49693895c5d69cde909fe5ad59502e251f33d5b72a6659c6b7a7de8b281d6ce67359d1d41f8e0c828a3ebec20a749464fc5d94b1ea19862a3b4b952332222c737db11541061da96ed1b192d57692c3eecc28e01ec938a000e92b6790e3347dbfe4f1275b5d488b6f6176f40746662cb60c2abb68c79fbeb5451e8b4dc7b4dc8f3d2d76d37f14065112ad42a7e05143de4ffe954611c656c7807053218c337b40024c6beb1708c7f0bd4d7268fdcc1b2f748fdca9955df9ca2d8ed631768e07d17c394bd173d586351ed49b83abf45692eaabb43d144da3375c26dc2952e5010e362de6a3f48ee4c500bffb36081e507188ff3b161c10e915dba7dbb5d04cf88f619059039eec8a2e4238011381f289eb034f0ab0c19fef29b73e8335ba043203c5e1732c1c84f6ad58bc05e0aa", 0x1000}, {&(0x7f0000003b00)="bbbd3f78404476cfea246f14825fbf2e", 0x10}, {&(0x7f0000003b40)="c880fbe4a79812da086fb4361289f3720b480cea79a11bc0b11baa406a22200beda43e287afa51dcdaf95c9dc87aa05195fed116c57f67b9674a53ab44084478f9b7187a2e4927c0095cbcc28fb8193f47337856b40e6643456c279e01cc86709ac8068f9f8c9f95be21cc", 0x6b}], 0x7, &(0x7f0000003c40)=[{0x88, 0x84, 0xc, "db35c3f6f2cb760b55fa926c22fd7c0ad6f789ccdd5abbcd7f3d1ec5908861e1fb918a595e3f84181272b547ebe3e23df9be9fb98c301503805f7742c2d5b29e99f417bdbd4fcc282087f056f326edd50d03aa58ab4a0e1a3f5f57b58f613982db5c6204112010cbd90a023944279845fb62"}, {0xf8, 0x107, 0x8, "9123b353b6c7855befa9448ebe7aea5bd8f80e1ab0da78e0d14a36acd56f5ba8d1479da373a47f7cc28837e2e5eb7a1887c819014acf609df8d73653fe05df21d9dc04f7654211224c7570240b54a0033e29c3dbdeb8a8a29df562123d43b57adf4bf32b892f4040cd5a4564dde72866a13cbad830156b29aca53ad2680678cbf42f78f39f8c651a686138501b65f61b18f0d5119f9242eeb15b9216c90a40b1f86fc431e76635b743b1dacfd3d04fcb083768b225dae089efa5504a6fdaf3259a0d6f15b939c1eb2477471dcb711dc5b42bd27eb9c968a79a67e42922eab47f2d249c7cdcde7fe4"}, {0x40, 0x118, 0x8001, "d86d460db84e345e6e106629166d797d460999f83f9a12a1f03ab635e4c72bd2a3274f859705c55477d4569236"}, {0xc0, 0x10f, 0x8, "e5c9902d5fa7cf87724ad7d10fa3b89cbc821d344d94411124f4ba49ac5e9c26b987251176fdce61c4b6b49adb3fc57252ac229b0db92f0d65765df7e5dcc754e7baa8629bb933b3d9a3514f56894326525864199a388b35994a78fbe301caa8ce29d4906706066bfd600a67e0e55ed4803a28bde49b8667aa12ab90f854687202cc81f4761e4ef68be5522587dfb60f4ea38f5127a767f9896d57d90e6692ba592f3c97e27ac7c62c07"}, {0xc8, 0x10e, 0x3, "7dbf5b7210723924b556d77caa2f737466ab5d3e5f4a3e20bf3a0eb3b2f408bf63c7a44d3d6747d12457520cf8ab723ce5c22529549e9301687c790a9765c5c6bbe50dd4642ee6dc682b49b82462d65ebe98e75349f028828eb941f5e367a4ec8f63b8ef973e23e2d449e7e034027e80ffa78c5f24316970bf95efbfda0c3dec97d2ed78a552742f843617be816d5cfc14ed8b7943124bcc538dae0ef28b2e4ce1177cbcebbb893cc96f100b3f54a23379383063"}, {0xd8, 0x84, 0x1, "8f17a289527cdc226c5e08e42487975b19e06586387cc9bd50ee457233b3652d55b134b7eca83cefc3394ded80f3c927d4a5bd51540d345cd65d52da5ac2334ccec8fdfce229ff7d22a4a98baff629723d41f76c70b604273b4364674f4741db16daa91eee0f192f1e0f708b43451b651ae3a0edb6499d87d621c449f25f7c0e64acfdd1e79d707269051e2d31a4dd161f8e2e637f74b88e51d191e7586d55a13fb4dea23c65112d919d01b90a5401114012329d1c0724f5ad3448fd5f5559b2488819f8e7"}, {0x100, 0x109, 0x0, "acb0653c1c6af23dfaca4985176da486dc809b391d2860616749507ee73893d882b88df3b19eef06c28d98df820bcd8e5d88f0c8ba4955572636f5dc772b942ed2d7061571eb163291bc479dcd577734baf7269a94949df227b535cb0dc61a6e0d90f16b686ac54c8d3e19c29014d24c2d406ede4986ee57ad57b95f1d8229ec08dc36ce0368e08a09e40389085f2f31522f22dc7ed31bc9b0b73497cdd95113c2d08df9f71479f46b54a6ee279a91e9abb7418a07e740b6f461e58756044b8eb8a54626c59813a4af26d99b258192428ccb9d4e8ad58fe6f2b207286863029dc915a55f3be19caf4f4d51"}], 0x520}, 0x20040001)
recvmmsg(r4, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/57, 0x39}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f00000003c0)=""/213, 0xd5}, {&(0x7f00000004c0)=""/11, 0xb}, {&(0x7f0000000500)=""/29, 0x1d}], 0x7}, 0x3}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000900)=""/210, 0xd2}], 0x1}}], 0x2, 0x10100, 0x0)
sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000500)="05804ab38284c7d5a5b66406d704", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

53.279402ms ago: executing program 2 (id=5963):
r0 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x12, 0x0, &(0x7f0000001600))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b04f, 0x15b30}, [@IFLA_IFNAME={0x14, 0x3, 'gretap0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7, 0x2}}]}]}, @IFLA_MTU={0x8, 0x4, 0x1ff}]}, 0x50}, 0x1, 0x0, 0x0, 0xc1}, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x100, 0x0, @empty}, 0x1c)
sendmmsg$inet(r4, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000002c0)="e4e3b566ca4f987be34b31b7e0fb1e2f9a6241679f7e9896ed63b769f0f92845b69889cdf8971911", 0x28}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14}}], 0x30}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000000), 0x3)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x24004085)

0s ago: executing program 2 (id=5964):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r1 = socket$inet6(0xa, 0x5, 0x0)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c)
r2 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f0000001340)=[{&(0x7f0000004940)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0904000000a5dbeba830461eb102000000000200000118000480140001800a000100696e6e6572000000040002800900010073797a30000000000900020073797a3200000000050007403e000000140000001100010000000000"], 0x74}, 0x1, 0x0, 0x0, 0x40010}, 0x0)

kernel console output (not intermixed with test programs):

9] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  666.045051][T17699] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  666.051071][T17699] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  666.070723][T17702] netlink: 'syz.2.3474': attribute type 1 has an invalid length.
[  666.905968][T17711] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3480'.
[  667.056035][T17729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3487'.
[  669.185076][T17755] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3497'.
[  671.212999][ T5622] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  671.215509][ T5626] Bluetooth: hci2: command 0x0401 tx timeout
[  672.237969][T17761] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3499'.
[  672.319820][T17783] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3506'.
[  672.387764][T17791] netlink: 516 bytes leftover after parsing attributes in process `syz.2.3507'.
[  672.390663][T17791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3507'.
[  676.494966][T17817] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3517'.
[  676.501144][   T33] audit: type=1804 audit(1778603888.924:5): pid=17817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3517" name="/newroot/1182/memory.events" dev="tmpfs" ino=6041 res=1 errno=0
[  676.510430][   T33] audit: type=1800 audit(1778603888.934:6): pid=17817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3517" name="memory.events" dev="tmpfs" ino=6041 res=0 errno=0
[  676.519650][T17816] syzkaller1: entered promiscuous mode
[  676.525883][T17816] syzkaller1: entered allmulticast mode
[  676.541633][T17817] tipc: Resetting bearer <eth:syzkaller0>
[  676.588441][T15503] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  676.591424][T15503] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  676.595056][T15503] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  676.597966][T15503] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  676.600823][T15503] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  676.603949][T15503] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  676.607043][T15503] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  676.609879][T15503] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  676.624433][   T33] audit: type=1804 audit(1778603889.044:7): pid=17817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3517" name="/newroot/1182/memory.events" dev="tmpfs" ino=6041 res=1 errno=0
[  676.737383][T17838] syzkaller0: entered promiscuous mode
[  676.739229][T17838] syzkaller0: entered allmulticast mode
[  676.830565][T17848] syzkaller1: entered promiscuous mode
[  676.832477][T17848] syzkaller1: entered allmulticast mode
[  678.178622][T17858] netlink: 'syz.2.3530': attribute type 8 has an invalid length.
[  678.226403][T17866] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  678.229150][T17866] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  678.231883][T17866] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  681.111865][T17874] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3533'.
[  681.137327][T17878] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3535'.
[  681.159803][T17878] bond0: entered promiscuous mode
[  681.161749][T17878] 8021q: adding VLAN 0 to HW filter on device bond0
[  684.123879][T17878] bond0 (unregistering): Released all slaves
[  684.176733][T17894] ipt_rpfilter: unknown options
[  684.179582][T17894] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3538'.
[  684.196666][T17894] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3538'.
[  684.206032][T17900] netlink: 'syz.1.3540': attribute type 29 has an invalid length.
[  684.212025][T17900] netlink: 'syz.1.3540': attribute type 29 has an invalid length.
[  684.217166][T17900] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3540'.
[  684.381824][T17927] netlink: 'syz.2.3549': attribute type 29 has an invalid length.
[  684.385346][T17927] netlink: 'syz.2.3549': attribute type 29 has an invalid length.
[  684.389004][T17927] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3549'.
[  684.535921][T17949] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3556'.
[  684.602091][T17951] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3557'.
[  684.701148][T17963] SET target dimension over the limit!
[  684.772904][T17970] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3563'.
[  684.820144][T17976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3565'.
[  684.864176][T17983] netlink: 'syz.1.3567': attribute type 21 has an invalid length.
[  684.964768][T17994] netlink: 'syz.1.3570': attribute type 29 has an invalid length.
[  684.968801][T17994] netlink: 'syz.1.3570': attribute type 29 has an invalid length.
[  685.062181][T17997] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  688.013779][T18016] __nla_validate_parse: 3 callbacks suppressed
[  688.013790][T18016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3574'.
[  688.077014][T18028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3578'.
[  688.083744][T18028] netlink: 'syz.0.3578': attribute type 13 has an invalid length.
[  688.087008][T18028] netlink: 'syz.0.3578': attribute type 17 has an invalid length.
[  688.101417][T18028] erspan0: left promiscuous mode
[  688.133179][T18028] 8021q: adding VLAN 0 to HW filter on device bond0
[  688.138951][T18028] 8021q: adding VLAN 0 to HW filter on device team0
[  688.186066][T18028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  688.192211][T18028] veth1_vlan: left promiscuous mode
[  688.198325][T18028] veth1_vlan: left allmulticast mode
[  688.201643][T18028] veth0_vlan: left promiscuous mode
[  688.204207][T18028] veth0_vlan: entered promiscuous mode
[  688.208135][T18028] veth1_vlan: entered promiscuous mode
[  688.211652][T18028] ipvlan0: left allmulticast mode
[  688.213924][T18028] veth0_vlan: left allmulticast mode
[  688.217159][T18028] veth1_macvtap: left promiscuous mode
[  688.219642][T18028] veth0_macvtap: left promiscuous mode
[  688.222146][T18028] veth0_macvtap: entered promiscuous mode
[  688.229826][T18028] veth1_macvtap: entered promiscuous mode
[  688.235072][T18028] bridge0: port 3(vlan2) entered blocking state
[  688.237206][T18028] bridge0: port 3(vlan2) entered forwarding state
[  688.242539][T18028] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  688.245980][T18028] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  688.251185][T18028] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  688.260163][T18028] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  688.265689][T18028] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  688.271470][T18028] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  688.279874][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state
[  688.282210][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state
[  688.289324][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state
[  688.291683][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state
[  688.312273][T18031] bridge0: port 2(bridge_slave_1) entered disabled state
[  688.315790][ T5446] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  688.321225][ T5446] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  688.325914][ T5446] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  688.330354][ T5446] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  690.706685][T18063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3584'.
[  690.711677][T18063] netlink: 'syz.1.3584': attribute type 1 has an invalid length.
[  690.714918][T18063] netlink: 'syz.1.3584': attribute type 2 has an invalid length.
[  690.873001][T18081] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3591'.
[  690.894100][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  690.988967][T18016] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  691.019642][T18086] netlink: 'syz.0.3592': attribute type 61 has an invalid length.
[  691.132295][T18094] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3593'.
[  693.977376][T18105] netlink: 'syz.0.3599': attribute type 13 has an invalid length.
[  693.990378][T18105] netlink: 'syz.0.3599': attribute type 13 has an invalid length.
[  694.047503][T18123] veth0_to_bond: Caught tx_queue_len zero misconfig
[  695.830374][T18154] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3611'.
[  695.857279][T18143] SET target dimension over the limit!
[  695.941277][T18170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3615'.
[  695.953475][T18170] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3615'.
[  695.957781][T18174] sctp: [Deprecated]: syz.1.3616 (pid 18174) Use of struct sctp_assoc_value in delayed_ack socket option.
[  695.957781][T18174] Use struct sctp_sack_info instead
[  695.965800][T18174] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3616'.
[  696.012885][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  696.020460][T18179] team0: Device vlan0 is up. Set it down before adding it as a team port
[  696.137957][T18194] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3623'.
[  696.161669][T18196] IPVS: set_ctl: invalid protocol: 47 10.1.1.1:20000
[  699.161059][T18209] nftables ruleset with unbound chain
[  699.170179][T18209] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3626'.
[  699.195183][T18214] netlink: 'syz.2.3628': attribute type 4 has an invalid length.
[  699.197875][T18214] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3628'.
[  699.246105][T18217] macvtap1: entered allmulticast mode
[  699.280325][T18221] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  699.283078][T18221] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  699.285686][T18221] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  700.198207][T18230] team0: Device vlan0 is up. Set it down before adding it as a team port
[  700.209235][T18237] openvswitch: netlink: IP tunnel dst address not specified
[  700.288400][T18250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3636'.
[  700.299054][T18252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3640'.
[  700.333900][   T33] audit: type=1800 audit(1778603912.764:8): pid=18254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3641" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=6257 res=0 errno=0
[  700.373184][T18259] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  700.375798][T18259] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  700.378722][T18259] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  700.429322][T18261] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3642'.
[  701.116613][T18249] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  702.168269][T18295] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  702.171551][T18295] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  702.180282][T18295] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  702.333022][ T5626] Bluetooth: hci1: command 0x0406 tx timeout
[  702.428218][T18326] __nla_validate_parse: 1 callbacks suppressed
[  702.428229][T18326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3663'.
[  702.433831][T18326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3663'.
[  702.455296][T18326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3663'.
[  702.545132][T18329] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3664'.
[  702.569549][T18331] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3665'.
[  702.581797][T18331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3665'.
[  702.653069][T18339] openvswitch: netlink: IP tunnel dst address not specified
[  702.655900][T18339] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  702.713907][T18349] IPVS: set_ctl: invalid protocol: 22 172.30.0.3:20003
[  704.676753][T18381] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  704.680079][T18381] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  704.683684][T18381] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  704.926272][T18391] netlink: 'syz.2.3683': attribute type 10 has an invalid length.
[  705.054172][T18397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3684'.
[  705.057261][T18397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3684'.
[  705.060576][T18397] netlink: 'syz.2.3684': attribute type 18 has an invalid length.
[  706.100361][T18405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3688'.
[  706.252555][T18423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3693'.
[  708.353846][T18460] __nla_validate_parse: 2 callbacks suppressed
[  708.353857][T18460] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3704'.
[  708.478358][T18472] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  708.522014][T18478] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3710'.
[  708.545009][T18476] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  708.547855][T18476] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  708.550669][T18476] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  708.553447][T18478] syzkaller1: entered promiscuous mode
[  708.556032][T18478] syzkaller1: entered allmulticast mode
[  708.566342][   T55] block nbd3: Receive control failed (result -32)
[  708.709636][T18490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3715'.
[  711.765357][T18496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3716'.
[  711.770476][T18496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3716'.
[  711.797722][T18498] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3717'.
[  712.010780][T18527] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  715.070816][T18555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3733'.
[  715.078827][T18555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3733'.
[  715.166556][T18557] netlink: 'syz.2.3734': attribute type 4 has an invalid length.
[  715.247305][T18572] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3738'.
[  715.250318][T18572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3738'.
[  715.253395][T18571] netlink: 'syz.2.3737': attribute type 21 has an invalid length.
[  715.258276][T18572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3738'.
[  715.279478][T18571] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3737'.
[  715.286923][T18571] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3737'.
[  715.324753][T18583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3742'.
[  715.343980][T18585] netlink: 'syz.0.3743': attribute type 1 has an invalid length.
[  715.349806][T18585] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  716.377982][T18618] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3755'.
[  716.381447][T18618] netlink: 'syz.1.3755': attribute type 11 has an invalid length.
[  716.384455][T18618] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.3755'.
[  716.543598][T18640] netlink: 'syz.1.3762': attribute type 2 has an invalid length.
[  719.783132][T18681] ipip0: entered promiscuous mode
[  719.838257][T18687] ip6gre2: entered promiscuous mode
[  719.842931][T18687] ip6gre2: entered allmulticast mode
[  720.083819][T18711] __nla_validate_parse: 9 callbacks suppressed
[  720.083830][T18711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3783'.
[  722.954241][T18713] netlink: 'syz.0.3785': attribute type 4 has an invalid length.
[  723.082117][T18725] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3791'.
[  723.145636][T18728] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3792'.
[  723.151612][T18729] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3792'.
[  723.161169][T18731] team0: Device vlan0 is up. Set it down before adding it as a team port
[  723.166629][T18728] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  723.173717][T18728] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3792'.
[  723.177433][T18729] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3792'.
[  723.231639][T18739] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3796'.
[  723.348121][T18752] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3800'.
[  723.352669][T18752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3800'.
[  723.550014][T18758] netlink: 'syz.1.3802': attribute type 1 has an invalid length.
[  723.564010][T18758] 8021q: adding VLAN 0 to HW filter on device bond0
[  724.622887][T18772] netlink: 504 bytes leftover after parsing attributes in process `syz.2.3805'.
[  724.633088][T18772] netlink: 'syz.2.3805': attribute type 39 has an invalid length.
[  724.797017][T18784] netlink: 'syz.2.3811': attribute type 1 has an invalid length.
[  724.803081][T18784] netlink: 'syz.2.3811': attribute type 2 has an invalid length.
[  724.968823][T18797] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  725.068544][T18811] bond11: entered promiscuous mode
[  725.074456][T18811] 8021q: adding VLAN 0 to HW filter on device bond11
[  725.092586][T18811] 8021q: adding VLAN 0 to HW filter on device bond11
[  725.096811][T18811] bond11: (slave vti1): The slave device specified does not support setting the MAC address
[  725.101004][T18811] bond11: (slave vti1): Error -95 calling set_mac_address
[  725.135168][T18804] __nla_validate_parse: 7 callbacks suppressed
[  725.135182][T18804] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3814'.
[  725.142491][T18804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3814'.
[  725.228607][T18819] openvswitch: netlink: Message has 4 unknown bytes.
[  725.235894][T18819] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  725.412847][T18831] syzkaller1: entered promiscuous mode
[  725.415107][T18831] syzkaller1: entered allmulticast mode
[  725.428799][T18829] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3822'.
[  725.526232][   T33] audit: type=1804 audit(1778603937.954:9): pid=18845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3827" name="/newroot/1295/cgroup.controllers" dev="tmpfs" ino=6588 res=1 errno=0
[  725.538281][T18847] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3828'.
[  725.552871][   T33] audit: type=1800 audit(1778603937.954:10): pid=18845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3827" name="cgroup.controllers" dev="tmpfs" ino=6588 res=0 errno=0
[  725.662535][T18865] syzkaller1: entered promiscuous mode
[  725.665891][T18865] syzkaller1: entered allmulticast mode
[  725.697754][T18871] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3835'.
[  725.702148][T18871] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3835'.
[  725.730513][T18876] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3836'.
[  725.777492][T18880] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3838'.
[  725.831900][T18885] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000
[  725.837351][T18885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3840'.
[  725.847927][T18883] 8021q: adding VLAN 0 to HW filter on device bond6
[  725.853540][T18883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3837'.
[  725.989565][T18907] netlink: 'syz.2.3848': attribute type 1 has an invalid length.
[  725.992010][T18907] netlink: 'syz.2.3848': attribute type 4 has an invalid length.
[  725.995009][T18907] netlink: 'syz.2.3848': attribute type 1 has an invalid length.
[  725.997475][T18907] netlink: 'syz.2.3848': attribute type 4 has an invalid length.
[  726.024357][T18911] only policy match revision 0 supported
[  726.024365][T18911] unable to load match
[  726.069145][T18916] tipc: Enabling of bearer <dth:s> rejected, media not registered
[  726.083887][T18917] bond12: entered promiscuous mode
[  726.098117][T18918] bond13: entered promiscuous mode
[  726.528444][T18932] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  726.660389][T18945] SET target dimension over the limit!
[  726.671019][T18949] SET target dimension over the limit!
[  726.740315][T18955] openvswitch: netlink: Key type 142 is out of range max 32
[  726.851696][T18968] syzkaller1: entered promiscuous mode
[  726.853612][T18968] syzkaller1: entered allmulticast mode
[  726.856667][T18968] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96
[  730.015462][T18998] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  730.017895][T18998] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  730.084763][T18998] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  730.091425][T19001] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  730.096291][T19006] netlink: Unknown conntrack attr (type=2304, max=9)
[  730.265681][T19019] team_slave_1: Caught tx_queue_len zero misconfig
[  730.299412][T19019] __nla_validate_parse: 12 callbacks suppressed
[  730.299422][T19019] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3881'.
[  730.621112][T19066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3890'.
[  730.638558][T19067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3891'.
[  733.614263][T19079] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3894'.
[  733.617213][T19079] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3894'.
[  733.620182][T19080] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3892'.
[  733.626319][T19080] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3892'.
[  733.630360][T19079] syzkaller0: entered promiscuous mode
[  733.633023][T19079] syzkaller0: entered allmulticast mode
[  733.706651][T19082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3895'.
[  733.789014][T19095] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3898'.
[  733.849102][T19097] team0: Device vlan0 is up. Set it down before adding it as a team port
[  733.863605][T19103] bond1: entered allmulticast mode
[  733.871284][T19103] vcan1: entered allmulticast mode
[  733.875148][T19103] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3901'.
[  734.138826][T19129] team0: Device vlan0 is up. Set it down before adding it as a team port
[  734.512660][T19166] syzkaller1: entered promiscuous mode
[  734.515797][T19166] syzkaller1: entered allmulticast mode
[  734.927746][T19207] syzkaller1: entered promiscuous mode
[  734.929635][T19207] syzkaller1: entered allmulticast mode
[  736.077058][T19222] __nla_validate_parse: 8 callbacks suppressed
[  736.077069][T19222] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3930'.
[  737.572977][T19179] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  737.657958][T19235] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  737.662945][T19235] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  737.665701][T19235] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  737.717485][T19234] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  737.725609][T19234] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  737.729983][T19234] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  741.300828][T19285] xt_CT: You must specify a L4 protocol and not use inversions on it
[  741.311761][T19285] netlink: 'syz.0.3947': attribute type 21 has an invalid length.
[  741.328596][T19285] bridge_slave_0: left allmulticast mode
[  741.331266][T19285] bridge_slave_0: left promiscuous mode
[  741.335003][T19285] bridge0: port 1(bridge_slave_0) entered disabled state
[  741.349783][T19288] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3948'.
[  741.357553][T19285] bridge_slave_1: left promiscuous mode
[  741.364417][T19285] bridge0: port 2(bridge_slave_1) entered disabled state
[  741.369297][T19285] bond0: (slave bond_slave_0): Releasing backup interface
[  741.377233][T19285] bond0: (slave bond_slave_1): Releasing backup interface
[  741.399277][T19285] team0: Port device team_slave_0 removed
[  741.405379][T19295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3948'.
[  741.414642][T19285] team0: Port device team_slave_1 removed
[  741.423755][T19285] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  741.449568][T19294] ip6gre3: entered allmulticast mode
[  741.462376][T19294] team0: Refused to change device type
[  742.023914][T19306] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3952'.
[  742.032847][T19306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3952'.
[  742.465184][T19310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3953'.
[  742.492566][T19312] Cannot find set identified by id 0 to match
[  742.569939][T19322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3958'.
[  742.649412][T19329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3960'.
[  742.712321][T19335] netlink: 'syz.2.3961': attribute type 1 has an invalid length.
[  745.610590][T19340] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  745.620229][T19340] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  745.635918][T19340] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  745.678569][T19354] netlink: 'syz.2.3966': attribute type 2 has an invalid length.
[  745.681101][T19354] netlink: 'syz.2.3966': attribute type 1 has an invalid length.
[  745.684649][T19354] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3966'.
[  746.546234][T19360] syzkaller1: entered promiscuous mode
[  746.549773][T19360] syzkaller1: entered allmulticast mode
[  746.592214][T19364] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3969'.
[  746.597365][T19364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3969'.
[  746.600894][T19364] bond0: option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  746.668981][T19371] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  746.675402][T19371] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  746.679366][T19371] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  746.697943][T19374] ip6erspan0: entered allmulticast mode
[  746.704636][T19374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3973'.
[  746.756377][T19376] netlink: 'syz.2.3974': attribute type 12 has an invalid length.
[  746.771710][T19370] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  746.776205][T19376] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3974'.
[  746.781994][T19370] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  746.788040][T19370] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  746.837923][T19384] tap0: tun_chr_ioctl cmd 1074025680
[  746.842515][T19384] tap0: tun_chr_ioctl cmd 35108
[  746.954352][T19394] syzkaller1: entered promiscuous mode
[  746.956805][T19394] syzkaller1: entered allmulticast mode
[  746.996809][T19400] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3981'.
[  746.999679][T19400] openvswitch: netlink: Flow actions attr not present in new flow.
[  747.009373][T19400] openvswitch: netlink: IP tunnel TTL not specified.
[  747.079445][T19407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3983'.
[  747.146896][T19414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3987'.
[  747.177829][T19418] syzkaller1: entered promiscuous mode
[  747.179725][T19418] syzkaller1: entered allmulticast mode
[  748.892810][ T5622] Bluetooth: hci2: command 0x0401 tx timeout
[  750.315842][T19443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3995'.
[  750.354424][T19443] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3995'.
[  750.383027][T19449] syzkaller1: entered promiscuous mode
[  750.388371][T19449] syzkaller1: entered allmulticast mode
[  750.652253][T19469] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  750.655526][T19469] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  750.835540][T19483] syzkaller1: entered promiscuous mode
[  750.837443][T19483] syzkaller1: entered allmulticast mode
[  750.893453][T19488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4010'.
[  750.951390][T19498] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  750.956410][T19498] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  750.959173][T19498] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  751.059724][T19520] syzkaller1: entered promiscuous mode
[  751.061673][T19520] syzkaller1: entered allmulticast mode
[  751.077766][T19516] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  751.259389][T19545] team0: Device vlan0 is up. Set it down before adding it as a team port
[  751.322279][T19557] syzkaller1: entered promiscuous mode
[  751.330202][T19557] syzkaller1: entered allmulticast mode
[  751.504514][T19587] team0: Device vlan0 is up. Set it down before adding it as a team port
[  751.585742][T19606] syzkaller1: entered promiscuous mode
[  751.587893][T19606] syzkaller1: entered allmulticast mode
[  751.668534][T19612] tap0: tun_chr_ioctl cmd 2147767521
[  751.672203][T19612] __nla_validate_parse: 2 callbacks suppressed
[  751.672211][T19612] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4042'.
[  751.900707][T19642] team0: Device vlan0 is up. Set it down before adding it as a team port
[  751.949887][T19656] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4048'.
[  751.984164][T19659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4049'.
[  752.022440][T19662] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4050'.
[  752.079810][T19666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4051'.
[  752.105762][T19666] 8021q: adding VLAN 0 to HW filter on device bond7
[  752.110694][T19666] bond7: option mode: unable to set because the bond device is up
[  752.686903][T19677] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4053'.
[  755.119522][T19681] netlink: 'syz.0.4055': attribute type 10 has an invalid length.
[  755.189910][T19690] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4058'.
[  755.302650][T19705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4056'.
[  755.306406][T19705] netlink: 'syz.2.4056': attribute type 1 has an invalid length.
[  757.190277][T19685] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  757.202121][T19685] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  757.247707][T19685] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  757.250206][T19685] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  757.261839][T19712] netlink: 'syz.0.4062': attribute type 1 has an invalid length.
[  757.267106][T19714] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4061'.
[  760.319872][T19742] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  760.322441][T19742] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  760.326146][T19742] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  760.362168][T19747] netem: change failed
[  760.602549][T19747] bridge0: entered allmulticast mode
[  760.665209][T19774] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4068'.
[  760.688387][T19777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4069'.
[  760.753991][T19785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4071'.
[  760.766712][T19788] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4071'.
[  760.790155][T19791] netlink: 'syz.1.4072': attribute type 29 has an invalid length.
[  760.796082][T19791] netlink: 'syz.1.4072': attribute type 29 has an invalid length.
[  760.800084][T19791] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4072'.
[  760.835254][T19797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4074'.
[  760.930070][T19805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4073'.
[  761.674668][T19815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4081'.
[  764.053409][T19821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4083'.
[  764.056362][T19821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4083'.
[  764.079501][T19823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4082'.
[  764.953104][T19831] netlink: 476 bytes leftover after parsing attributes in process `syz.0.4084'.
[  764.973623][T19836] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4085'.
[  764.976745][T19836] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4085'.
[  764.980129][T19832] lo speed is unknown, defaulting to 1000
[  764.991976][T19832] lo speed is unknown, defaulting to 1000
[  764.997044][T19832] lo speed is unknown, defaulting to 1000
[  765.099553][T13625] lo speed is unknown, defaulting to 1000
[  765.103263][T19832] infiniband sqz0: set active
[  765.106484][T19832] infiniband sqz0: added lo
[  765.118466][T19832] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  765.123281][T19832] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  765.129417][T19832] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  765.143477][T19832] RDS/IB: sqz0: added
[  765.145105][T19832] smc: adding ib device sqz0 with port count 1
[  765.147208][T19832] smc:    ib device sqz0 port 1 has no pnetid
[  765.151434][T13625] lo speed is unknown, defaulting to 1000
[  765.164011][T19832] lo speed is unknown, defaulting to 1000
[  765.291233][T19832] lo speed is unknown, defaulting to 1000
[  765.377094][T19832] lo speed is unknown, defaulting to 1000
[  765.921226][T19853] sctp: [Deprecated]: syz.1.4090 (pid 19853) Use of struct sctp_assoc_value in delayed_ack socket option.
[  765.921226][T19853] Use struct sctp_sack_info instead
[  765.990119][T19863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4093'.
[  765.994035][T19864] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4095'.
[  769.085449][T19879] lo speed is unknown, defaulting to 1000
[  769.104510][T19888] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4100'.
[  769.140915][T19892] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4101'.
[  769.196721][T19897] netlink: 'syz.1.4104': attribute type 1 has an invalid length.
[  769.200162][T19897] netlink: 'syz.1.4104': attribute type 1 has an invalid length.
[  769.281359][T19904] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  769.425529][T19904] bridge0: port 1(vlan3) entered blocking state
[  769.433046][T19904] bridge0: port 1(vlan3) entered disabled state
[  769.437150][T19904] vlan3: entered allmulticast mode
[  769.440623][T19904] bridge0: entered allmulticast mode
[  770.226828][T19904] vlan3: left allmulticast mode
[  770.228690][T19904] bridge0: left allmulticast mode
[  770.245384][T19913] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  770.305988][T19923] openvswitch: netlink: IPv4 tun info is not correct
[  770.397718][T19930] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4112'.
[  770.403519][T19930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4112'.
[  770.511675][T19947] : renamed from vlan0
[  770.519914][T19947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4117'.
[  770.545862][T19949] netlink: 'syz.0.4118': attribute type 29 has an invalid length.
[  770.549419][T19949] netlink: 'syz.0.4118': attribute type 29 has an invalid length.
[  770.555429][T19949] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4118'.
[  770.601790][T19951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4119'.
[  770.640095][T19960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4122'.
[  770.680622][T19968] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4124'.
[  770.683862][T19969] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4124'.
[  770.765460][T19973] IPVS: set_ctl: invalid protocol: 44 172.30.0.1:20001
[  773.719428][T19976] netlink: 'syz.0.4127': attribute type 29 has an invalid length.
[  773.722253][T19976] netlink: 'syz.0.4127': attribute type 29 has an invalid length.
[  773.730906][T19978] bridge_slave_1: Caught tx_queue_len zero misconfig
[  773.734299][T19978] sch_fq: defrate 8 ignored.
[  773.748923][T19978] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  773.823285][T19993] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  773.927598][T19999] netlink: 'syz.0.4134': attribute type 9 has an invalid length.
[  774.006408][T20015] netlink: 'syz.0.4140': attribute type 27 has an invalid length.
[  777.126274][T20051] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  777.130365][T20051] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  777.137099][T20051] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  777.138246][T20054] __nla_validate_parse: 9 callbacks suppressed
[  777.138255][T20054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4149'.
[  777.146552][T20052] netlink: 'syz.0.4145': attribute type 1 has an invalid length.
[  777.151016][T20052] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4145'.
[  777.443006][T20077] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  777.479492][T20079] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4156'.
[  777.527216][T20081] netlink: 'syz.2.4157': attribute type 5 has an invalid length.
[  777.530442][T20082] netlink: 'syz.2.4157': attribute type 5 has an invalid length.
[  777.535316][T20081] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4157'.
[  777.583716][T20086] netlink: 'syz.2.4159': attribute type 1 has an invalid length.
[  780.648596][T20129] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4172'.
[  780.651444][T20129] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4172'.
[  780.656228][T20129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4172'.
[  783.826188][T20150] netlink: 'syz.1.4180': attribute type 29 has an invalid length.
[  783.830117][T20150] netlink: 'syz.1.4180': attribute type 29 has an invalid length.
[  783.834123][T20150] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4180'.
[  783.900731][T20161] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  783.966829][T20169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4187'.
[  783.970995][T20162] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  783.973954][T20162] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  783.979963][T20162] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  784.025355][T20175] netlink: 'syz.2.4190': attribute type 29 has an invalid length.
[  784.028569][T20175] netlink: 'syz.2.4190': attribute type 29 has an invalid length.
[  784.031602][T20175] netlink: 500 bytes leftover after parsing attributes in process `syz.2.4190'.
[  784.092040][T20183] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4193'.
[  784.617549][T20219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4206'.
[  784.670923][T20223] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4208'.
[  784.675394][T20223] openvswitch: netlink: Flow key attr not present in new flow.
[  784.826493][T20243] openvswitch: netlink: Flow actions attr not present in new flow.
[  784.830258][T20243] syzkaller1: entered promiscuous mode
[  784.832541][T20243] syzkaller1: entered allmulticast mode
[  784.858492][T20245] team0: Device vlan0 is up. Set it down before adding it as a team port
[  787.989696][T20260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4218'.
[  788.040494][ T5673] netdevsim netdevsim2 : unset [1, 0] type 2 family 0 port 6081 - 0
[  788.044639][ T5673] netdevsim netdevsim2 : unset [1, 1] type 2 family 0 port 20004 - 0
[  788.063390][ T5673] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  788.070419][ T5673] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  788.074274][ T5673] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  788.077235][ T5673] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  788.081145][ T5673] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  788.085319][ T5673] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  788.131557][T20268] syzkaller1: entered promiscuous mode
[  788.133847][T20268] syzkaller1: entered allmulticast mode
[  788.201291][T20274] netlink: 'syz.1.4225': attribute type 1 has an invalid length.
[  788.219668][T20278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4223'.
[  788.379383][T20290] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4228'.
[  788.433608][T20297] syzkaller1: entered promiscuous mode
[  788.436041][T20297] syzkaller1: entered allmulticast mode
[  788.499611][T20306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4233'.
[  788.665495][T20325] team0: Device vlan0 is up. Set it down before adding it as a team port
[  788.692372][T20334] syzkaller1: entered promiscuous mode
[  788.695620][T20334] syzkaller1: entered allmulticast mode
[  788.764372][T20339] netlink: 'syz.1.4244': attribute type 19 has an invalid length.
[  788.767033][T20339] netlink: 'syz.1.4244': attribute type 20 has an invalid length.
[  788.886577][T20355] __nla_validate_parse: 6 callbacks suppressed
[  788.886587][T20355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4250'.
[  788.892642][T20357] syzkaller1: entered promiscuous mode
[  788.894858][T20357] syzkaller1: entered allmulticast mode
[  789.075159][T20361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4252'.
[  789.149238][T20366] netlink: 'syz.2.4252': attribute type 21 has an invalid length.
[  789.152922][T20366] netlink: 'syz.2.4252': attribute type 22 has an invalid length.
[  789.157417][T20366] netlink: 'syz.2.4252': attribute type 23 has an invalid length.
[  789.161550][T20366] netlink: 'syz.2.4252': attribute type 25 has an invalid length.
[  789.166060][T20366] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4252'.
[  792.038616][T20379] tc_dump_action: action bad kind
[  792.041393][T20378] tc_dump_action: action bad kind
[  792.213834][T20403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4262'.
[  792.255138][T20413] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4264'.
[  795.387018][T20435] lo speed is unknown, defaulting to 1000
[  797.770438][T20455] team0: Device vlan0 is up. Set it down before adding it as a team port
[  797.970489][T20462] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4280'.
[  798.060578][T20474] netlink: 'syz.2.4284': attribute type 1 has an invalid length.
[  798.088803][T20474] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4284'.
[  798.160389][T20486] netlink: 'syz.1.4287': attribute type 29 has an invalid length.
[  798.167952][T20486] netlink: 'syz.1.4287': attribute type 29 has an invalid length.
[  798.170962][T20486] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4287'.
[  798.171405][T20488] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4288'.
[  798.249466][T20500] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4292'.
[  798.253468][T20500] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4292'.
[  798.297032][T20506] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  798.351918][T20509] netlink: 'syz.2.4296': attribute type 29 has an invalid length.
[  798.355924][T20509] netlink: 'syz.2.4296': attribute type 29 has an invalid length.
[  798.359239][T20509] netlink: 500 bytes leftover after parsing attributes in process `syz.2.4296'.
[  798.465361][T20520] netlink: 50 bytes leftover after parsing attributes in process `syz.2.4299'.
[  801.506554][T20533] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  801.509659][T20533] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  801.516182][T20533] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  801.666208][T20544] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4305'.
[  801.759994][T20553] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4308'.
[  801.891183][T20561] 8021q: adding VLAN 0 to HW filter on device bond14
[  802.041054][T20574] team0: Device vlan0 is up. Set it down before adding it as a team port
[  802.116953][T20587] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  802.132287][T20587] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  802.136088][T20587] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  802.139384][T20587] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  802.142684][T20587] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  802.147052][T20587] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  802.151745][T20587] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  802.165668][T20591] hma(kX: entered promiscuous mode
[  802.307386][T20607] syzkaller1: entered promiscuous mode
[  802.309621][T20607] syzkaller1: entered allmulticast mode
[  802.488490][T20620] netlink: 'syz.2.4328': attribute type 4 has an invalid length.
[  802.492235][T20620] netlink: 'syz.2.4328': attribute type 4 has an invalid length.
[  802.583859][T20640] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  803.262777][ T6332] tipc: Node number set to 2655230472
[  803.510092][T20658] netlink: 'syz.1.4338': attribute type 4 has an invalid length.
[  803.604048][T20666] netlink: 'syz.1.4340': attribute type 1 has an invalid length.
[  803.608094][T20666] netlink: 'syz.1.4340': attribute type 2 has an invalid length.
[  803.615417][T20665] __nla_validate_parse: 8 callbacks suppressed
[  803.615428][T20665] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4340'.
[  803.738670][T20680] bond15: invalid ARP target 0.0.0.0 specified for addition
[  803.741091][T20680] bond15: option arp_ip_target: invalid value (0)
[  803.744032][T20680] bond15 (unregistering): Released all slaves
[  803.779875][T20684] netlink: 'syz.1.4344': attribute type 3 has an invalid length.
[  803.785902][T20681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4342'.
[  803.965773][T20690] bond9 (unregistering): Released all slaves
[  803.984550][T20676] bridge_slave_1: entered promiscuous mode
[  803.993901][T20676] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  804.007547][ T6332] lo speed is unknown, defaulting to 1000
[  804.120731][T20712] bond9: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  804.125685][T20712] bond9 (unregistering): Released all slaves
[  804.270102][T20729] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4356'.
[  805.108105][T20733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4357'.
[  805.129602][T20733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4357'.
[  805.178639][T20746] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4362'.
[  805.244922][T20760] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4366'.
[  805.459047][T20767] netlink: 'syz.1.4366': attribute type 1 has an invalid length.
[  806.058614][T20766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4366'.
[  806.140680][T20770] netlink: 'syz.0.4367': attribute type 29 has an invalid length.
[  806.144486][T20770] netlink: 'syz.0.4367': attribute type 29 has an invalid length.
[  806.147254][T20770] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4367'.
[  806.176250][T20778] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4369'.
[  806.182980][T20778] mac80211_hwsim hwsim6 wlan1: Caught tx_queue_len zero misconfig
[  806.287018][T20784] netlink: 'syz.1.4371': attribute type 9 has an invalid length.
[  806.291135][T20784] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  806.295975][T20784] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  806.299275][T20784] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  809.264809][T20798] syzkaller1: entered promiscuous mode
[  809.266632][T20798] syzkaller1: entered allmulticast mode
[  812.288200][T20813] netlink: 'syz.0.4378': attribute type 29 has an invalid length.
[  812.295454][T20813] netlink: 'syz.0.4378': attribute type 29 has an invalid length.
[  812.299772][T20813] __nla_validate_parse: 3 callbacks suppressed
[  812.299780][T20813] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4378'.
[  812.304724][T20814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4379'.
[  812.354051][T20819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4380'.
[  812.535487][T20842] netlink: 'syz.1.4386': attribute type 29 has an invalid length.
[  812.541587][T20842] netlink: 'syz.1.4386': attribute type 29 has an invalid length.
[  812.556852][T20842] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4386'.
[  812.658911][T20857] syzkaller1: entered allmulticast mode
[  812.749186][T20871] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4389'.
[  812.752211][T20871] netlink: Unknown conntrack attr (0)
[  812.795202][T20876] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4390'.
[  812.955924][T20891] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  812.958703][T20891] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  812.961543][T20891] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  813.284324][T20917] netlink: 'syz.2.4396': attribute type 29 has an invalid length.
[  813.287670][T20917] netlink: 'syz.2.4396': attribute type 29 has an invalid length.
[  813.290393][T20917] netlink: 500 bytes leftover after parsing attributes in process `syz.2.4396'.
[  813.897618][T20951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4407'.
[  817.006787][T20963] netlink: 'syz.1.4411': attribute type 29 has an invalid length.
[  817.010123][T20963] netlink: 'syz.1.4411': attribute type 29 has an invalid length.
[  817.013197][T20963] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4411'.
[  817.061241][T20967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4412'.
[  817.217886][T20986] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  817.221182][T20986] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  817.225139][T20986] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  817.481432][T21016] __nla_validate_parse: 2 callbacks suppressed
[  817.481446][T21016] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4427'.
[  817.487587][T21016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4427'.
[  817.529438][T21020] netlink: 'syz.2.4428': attribute type 29 has an invalid length.
[  817.535056][T21020] netlink: 'syz.2.4428': attribute type 29 has an invalid length.
[  817.539008][T21020] netlink: 500 bytes leftover after parsing attributes in process `syz.2.4428'.
[  817.673446][T21027] lo speed is unknown, defaulting to 1000
[  817.713421][T21028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4431'.
[  818.127809][T21039] veth12: entered allmulticast mode
[  818.320926][T21060] netlink: 'syz.0.4438': attribute type 29 has an invalid length.
[  818.328642][T21060] netlink: 'syz.0.4438': attribute type 29 has an invalid length.
[  818.336383][T21060] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4438'.
[  818.411337][T21065] netlink: 'syz.0.4441': attribute type 1 has an invalid length.
[  818.452583][T21071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4444'.
[  818.540307][T21087] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4450'.
[  818.542246][T21091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4451'.
[  818.547713][T21092] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4452'.
[  818.550659][T21087] netlink: 'syz.2.4450': attribute type 1 has an invalid length.
[  818.677224][T21101] tap0: tun_chr_ioctl cmd 1074025680
[  818.687358][T21107] openvswitch: netlink: Key type 29 is not supported
[  818.743820][T21109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4459'.
[  818.865974][T21127] team0: Device vlan0 is up. Set it down before adding it as a team port
[  821.461837][T21161] lo speed is unknown, defaulting to 1000
[  827.640807][T21198] __nla_validate_parse: 12 callbacks suppressed
[  827.640822][T21198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4481'.
[  827.647689][T21201] netlink: 'syz.1.4482': attribute type 29 has an invalid length.
[  827.650824][T21201] netlink: 'syz.1.4482': attribute type 29 has an invalid length.
[  827.654687][T21201] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4482'.
[  827.807232][T21218] smc: net device wlan0 applied user defined pnetid SYZ0
[  827.836031][T21218] bond15: entered allmulticast mode
[  827.847219][T21220] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  827.858824][T21220] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  827.883109][T21218] macvlan4: entered promiscuous mode
[  827.887116][T21218] macvlan4: entered allmulticast mode
[  827.887166][T21223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4488'.
[  827.891813][T21218] bond15: entered promiscuous mode
[  827.894672][T21218] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  827.898782][T21218] bond15: left promiscuous mode
[  827.898797][T21223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4488'.
[  827.908420][T21223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4488'.
[  827.912685][T21223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4488'.
[  827.924790][T21223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4488'.
[  827.936314][T21223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4488'.
[  827.942631][T21223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4488'.
[  827.946877][T21223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4488'.
[  828.002588][T21226] tipc: Resetting bearer <eth:syzkaller0>
[  828.023788][ T6323] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  828.045094][T21232] bridge0: port 1(erspan0) entered blocking state
[  828.047513][T21232] bridge0: port 1(erspan0) entered disabled state
[  828.049730][T21232] erspan0: entered allmulticast mode
[  828.052223][T21232] erspan0: left allmulticast mode
[  828.593143][ T6323] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  830.272143][T21315] netlink: 'syz.1.4517': attribute type 1 has an invalid length.
[  831.703515][T21384] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  831.706948][T21384] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  831.709717][T21384] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  832.735808][T21407] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  832.740791][T21407] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  832.746164][T21407] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  832.968408][T21428] __nla_validate_parse: 40 callbacks suppressed
[  832.968419][T21428] netlink: 85 bytes leftover after parsing attributes in process `syz.0.4555'.
[  832.990606][T21428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4555'.
[  833.106880][T21442] netlink: 'syz.0.4560': attribute type 2 has an invalid length.
[  833.154859][T21451] tipc: Enabling <eth:lo> not permitted
[  833.156705][T21451] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  833.159849][T21451] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4561'.
[  833.165226][T21451] netlink: 15 bytes leftover after parsing attributes in process `syz.0.4561'.
[  833.254167][T21459] netlink: 'syz.2.4565': attribute type 1 has an invalid length.
[  833.291389][T21459] bond16: (slave vxcan1): The slave device specified does not support setting the MAC address
[  833.296151][T21459] bond16: (slave vxcan1): Error -95 calling set_mac_address
[  833.339232][T21464] bond16: (slave gretap2): making interface the new active one
[  833.346812][T21464] bond16: (slave gretap2): Enslaving as an active interface with an up link
[  833.358179][T21459] macvlan4: entered promiscuous mode
[  833.360274][T21459] macvlan4: entered allmulticast mode
[  833.363122][T21459] bond16: entered promiscuous mode
[  833.365277][T21459] gretap2: entered promiscuous mode
[  833.368695][T21459] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  833.374074][T21459] bond16: (slave macvlan4): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  833.379050][T21459] bond16: left promiscuous mode
[  833.381115][T21459] gretap2: left promiscuous mode
[  833.417490][T21464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4565'.
[  833.461071][T21466] x_tables: ip_tables: osf match: only valid for protocol 6
[  833.469792][T21466] netlink: 'syz.2.4567': attribute type 1 has an invalid length.
[  836.571576][T21490] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  836.579923][T21490] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  836.588085][T21490] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  836.600141][T21497] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4575'.
[  836.605305][T21497] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4575'.
[  836.623427][T21501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4574'.
[  836.652163][T21506] sctp: [Deprecated]: syz.0.4577 (pid 21506) Use of struct sctp_assoc_value in delayed_ack socket option.
[  836.652163][T21506] Use struct sctp_sack_info instead
[  836.936416][T21546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4588'.
[  837.877540][T21563] netlink: 'syz.1.4594': attribute type 3 has an invalid length.
[  837.880787][T21563] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4594'.
[  837.904283][T21566] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048)
[  837.955438][T21573] netlink: 'syz.2.4598': attribute type 29 has an invalid length.
[  837.963864][T21573] netlink: 'syz.2.4598': attribute type 29 has an invalid length.
[  840.954245][T21580] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  840.956736][T21580] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  840.965335][T21582] xt_TCPMSS: Only works on TCP SYN packets
[  841.114344][T21592] netlink: 'syz.1.4605': attribute type 29 has an invalid length.
[  841.123600][T21592] netlink: 'syz.1.4605': attribute type 29 has an invalid length.
[  841.131036][T21592] __nla_validate_parse: 1 callbacks suppressed
[  841.131043][T21592] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4605'.
[  841.235026][T21601] batman_adv: batadv0: Removing interface: dummy0
[  844.195460][T21601] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  844.219769][T21604] ip6gre3: entered allmulticast mode
[  844.221749][T21604] team0: Device ip6gre3 failed to enter team mode
[  844.224176][T21604] team0: Device ip6gre3 failed to enter team mode
[  844.316138][T21617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4611'.
[  844.322646][T21620] netlink: 'syz.1.4612': attribute type 3 has an invalid length.
[  844.332752][T21617] bond17: entered promiscuous mode
[  844.334664][T21617] 8021q: adding VLAN 0 to HW filter on device bond17
[  844.350224][T21617] veth13: entered promiscuous mode
[  844.352662][T21617] bond17: (slave veth13): Enslaving as an active interface with an up link
[  844.390042][T21625] netlink: 'syz.1.4613': attribute type 29 has an invalid length.
[  844.394025][T21625] netlink: 'syz.1.4613': attribute type 29 has an invalid length.
[  844.396955][T21625] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4613'.
[  844.531637][T21647] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4619'.
[  844.582482][T21654] x_tables: ip_tables: osf match: only valid for protocol 6
[  844.825546][T21655] netlink: 'syz.1.4620': attribute type 29 has an invalid length.
[  844.833674][T21655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  844.971468][T21674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4625'.
[  848.196550][T21695] netlink: 11 bytes leftover after parsing attributes in process `syz.0.4629'.
[  848.196563][T21698] netlink: 11 bytes leftover after parsing attributes in process `syz.0.4629'.
[  848.210744][T21695] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4629'.
[  848.219369][T21698] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4629'.
[  848.225322][T21700] IPv6: Can't replace route, no match found
[  848.362608][T21709] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4633'.
[  851.500083][T21740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4641'.
[  851.586273][T21771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4646'.
[  851.593941][T21771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4646'.
[  851.721349][T21782] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4648'.
[  851.805572][T21795] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4651'.
[  851.979355][T21824] netlink: 'syz.0.4656': attribute type 1 has an invalid length.
[  851.996382][T21824] bond8: (slave ip6gretap3): Enslaving as a backup interface with an up link
[  852.005542][ T5446] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  852.014871][T21824] 8021q: adding VLAN 0 to HW filter on device bond8
[  852.123112][ T5446] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  853.226468][T21880] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  853.236627][T21880] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  853.239854][T21880] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  854.732908][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  859.364533][T21908] syzkaller1: entered promiscuous mode
[  859.366335][T21908] syzkaller1: entered allmulticast mode
[  859.386553][T21907] __nla_validate_parse: 68 callbacks suppressed
[  859.386564][T21907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4676'.
[  859.409153][T21907] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  859.606501][T21940] syzkaller1: entered promiscuous mode
[  859.608341][T21940] syzkaller1: entered allmulticast mode
[  859.707378][T21947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4688'.
[  859.757795][T21950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4689'.
[  859.798440][T21960] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4691'.
[  859.798979][T21959] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4692'.
[  859.838653][T21964] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  859.840716][T21962] syzkaller1: entered promiscuous mode
[  859.843602][T21962] syzkaller1: entered allmulticast mode
[  859.882559][T21964] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4693'.
[  859.968587][T21967] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4695'.
[  859.971600][T21967] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4695'.
[  860.001258][T21969] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4696'.
[  860.006812][T21969] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  860.009171][T21969] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  860.157449][T15503] tipc: Subscription rejected, illegal request
[  860.205101][T21987] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  863.355348][T22004] syzkaller1: entered promiscuous mode
[  863.357289][T22004] syzkaller1: entered allmulticast mode
[  863.394020][T22006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4708'.
[  863.494871][T22017] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  863.616641][T22037] syzkaller1: entered promiscuous mode
[  863.618732][T22037] syzkaller1: entered allmulticast mode
[  864.505574][T22047] __nla_validate_parse: 3 callbacks suppressed
[  864.505585][T22047] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4721'.
[  864.510502][T22049] openvswitch: netlink: IP tunnel dst address not specified
[  867.639134][T22093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4734'.
[  868.478922][T22106] 8021q: VLANs not supported on ip_vti0
[  871.616883][T22131] netlink: 208 bytes leftover after parsing attributes in process `syz.2.4744'.
[  871.623671][T22131] netlink: 208 bytes leftover after parsing attributes in process `syz.2.4744'.
[  871.681931][T22144] netlink: 'syz.1.4749': attribute type 10 has an invalid length.
[  871.687285][T22144] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4749'.
[  871.778781][T22159] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  871.781717][T22159] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  871.784858][T22159] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  871.906044][T22172] netlink: 87 bytes leftover after parsing attributes in process `syz.0.4757'.
[  872.275613][T22196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4765'.
[  872.472142][T22204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4769'.
[  872.528825][T22207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4769'.
[  872.536979][T22207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4769'.
[  872.540377][T22207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4769'.
[  872.544398][T22207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4769'.
[  875.802016][T22234] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  875.875521][T22250] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  875.878362][T22250] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  875.881279][T22250] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  875.953072][T22263] pim6reg: entered allmulticast mode
[  875.956264][T22263] pim6reg: left allmulticast mode
[  876.829745][T22276] __nla_validate_parse: 9 callbacks suppressed
[  876.829756][T22276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4792'.
[  876.836465][T22276] netlink: 304 bytes leftover after parsing attributes in process `syz.1.4792'.
[  876.874576][T22282] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  876.901034][T22287] netlink: 'syz.1.4794': attribute type 1 has an invalid length.
[  877.009820][T22303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4797'.
[  877.161088][T22322] netlink: 'syz.1.4806': attribute type 1 has an invalid length.
[  877.186377][T22322] 8021q: adding VLAN 0 to HW filter on device bond11
[  877.463648][T22346] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  877.469322][T22352] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4814'.
[  877.476262][T22346] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  878.199101][T22364] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4818'.
[  878.202490][T22364] ksmbd: Unknown IPC event: 1, ignore.
[  878.273125][T22371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4820'.
[  878.279012][T22371] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4820'.
[  878.310559][T22371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4820'.
[  878.314253][T22371] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4820'.
[  878.416250][T22385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4824'.
[  878.523355][ T6332] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  878.570590][T22400] syzkaller1: entered promiscuous mode
[  878.577604][T22400] syzkaller1: entered allmulticast mode
[  878.668733][T22408] tls_set_device_offload_rx: netdev not found
[  878.902080][T22442] netlink: 'syz.1.4846': attribute type 1 has an invalid length.
[  878.905373][T22442] netlink: 'syz.1.4846': attribute type 2 has an invalid length.
[  878.912031][T22442] netlink: 'syz.1.4846': attribute type 1 has an invalid length.
[  878.916986][T22442] netlink: 'syz.1.4846': attribute type 2 has an invalid length.
[  879.112995][ T6332] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  882.131878][T22473] __nla_validate_parse: 8 callbacks suppressed
[  882.131889][T22473] netlink: 66 bytes leftover after parsing attributes in process `syz.2.4853'.
[  882.167426][T22483] netlink: 'syz.1.4851': attribute type 2 has an invalid length.
[  882.217707][T22487] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  882.296126][T22496] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  882.299762][T22496] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4859'.
[  885.381955][T22514] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4865'.
[  885.386678][T22514] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4865'.
[  885.391200][T22516] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4866'.
[  885.405362][T22516] netlink: 'syz.1.4866': attribute type 4 has an invalid length.
[  885.408048][T22516] netlink: 'syz.1.4866': attribute type 4 has an invalid length.
[  885.459192][T22528] geneve4: entered promiscuous mode
[  885.461919][T22528] geneve4: entered allmulticast mode
[  885.468677][ T5446] netdevsim netdevsim2 : set [1, 0] type 2 family 0 port 20000 - 0
[  885.471422][ T5446] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  885.474370][ T5446] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  885.477368][ T5446] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  885.490661][T22528] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  885.495626][T22532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4871'.
[  885.530048][T22532] Cannot find del_set index 3 as target
[  885.729204][T22550] netlink: 'syz.0.4877': attribute type 4 has an invalid length.
[  886.393656][T22570] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4882'.
[  886.399333][T22565] bond18: option resend_igmp: invalid value (2878)
[  886.408554][T22565] bond18: option resend_igmp: allowed values 0 - 255
[  886.425147][T22565] bond18 (unregistering): Released all slaves
[  889.426584][T22583] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4887'.
[  889.471036][T22590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4890'.
[  889.488597][T22589] team0: Device vlan0 is up. Set it down before adding it as a team port
[  889.518802][T22599] IPv6: sit3: Disabled Multicast RS
[  889.611371][T22616] netlink: 'syz.2.4898': attribute type 1 has an invalid length.
[  889.615018][T22616] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4898'.
[  889.618780][T22616] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4898'.
[  889.622512][T22616] netlink: 'syz.2.4898': attribute type 1 has an invalid length.
[  889.626419][T22616] netlink: 634 bytes leftover after parsing attributes in process `syz.2.4898'.
[  889.632004][T22618] team0: Device vlan0 is up. Set it down before adding it as a team port
[  892.625980][T22646] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  892.628624][T22645] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  892.663751][T22642] netlink: 277 bytes leftover after parsing attributes in process `syz.2.4907'.
[  892.690993][T22654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4908'.
[  892.695785][T22654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4908'.
[  892.770718][T22669] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4912'.
[  892.774161][T22669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4912'.
[  892.779094][T22654] lo speed is unknown, defaulting to 1000
[  893.858390][T22716] netlink: 'syz.2.4922': attribute type 1 has an invalid length.
[  893.928151][T22716] 8021q: adding VLAN 0 to HW filter on device bond18
[  894.253417][T22770] bond19: option ad_user_port_key: invalid value (65535)
[  894.255687][T22770] bond19: option ad_user_port_key: allowed values 0 - 1023
[  894.260883][T22770] bond19 (unregistering): Released all slaves
[  894.276597][T22774] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  894.324630][T22778] vcan0: tx drop: invalid da for name 0x0000000000000002
[  894.399414][T22790] netlink: 'syz.2.4938': attribute type 29 has an invalid length.
[  894.399440][T22791] netlink: 'syz.2.4938': attribute type 29 has an invalid length.
[  894.458094][T22795] netlink: 'syz.2.4940': attribute type 61 has an invalid length.
[  894.465424][T22795] __nla_validate_parse: 72 callbacks suppressed
[  894.465436][T22795] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4940'.
[  895.764188][T22830] lo speed is unknown, defaulting to 1000
[  898.886602][T22864] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4963'.
[  898.890078][T22864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4963'.
[  898.917996][T22866] netlink: 'syz.2.4962': attribute type 4 has an invalid length.
[  898.944387][T22866] netlink: 'syz.2.4962': attribute type 4 has an invalid length.
[  898.963754][T22866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4962'.
[  898.996477][T22882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4967'.
[  899.249279][T22900] netlink: 'syz.1.4971': attribute type 1 has an invalid length.
[  899.258687][T22900] netlink: 'syz.1.4971': attribute type 2 has an invalid length.
[  899.300321][T22912] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4973'.
[  899.359683][T22922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4977'.
[  899.389698][T22928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4979'.
[  899.445764][T22931] netlink: 'syz.2.4973': attribute type 21 has an invalid length.
[  899.449655][T22931] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4973'.
[  899.458587][T22931] netlink: 'syz.2.4973': attribute type 4 has an invalid length.
[  899.467836][T22931] netlink: 'syz.2.4973': attribute type 5 has an invalid length.
[  899.474408][T22931] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4973'.
[  899.488859][T22935] syzkaller1: entered promiscuous mode
[  899.491303][T22935] syzkaller1: entered allmulticast mode
[  899.598081][T22949] netlink: 'syz.0.4985': attribute type 29 has an invalid length.
[  899.606686][T22949] netlink: 'syz.0.4985': attribute type 29 has an invalid length.
[  899.610544][T22949] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4985'.
[  899.612528][T22951] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4986'.
[  899.708395][T22961] x_tables: duplicate underflow at hook 1
[  899.847722][T22973] netlink: 'syz.1.4993': attribute type 29 has an invalid length.
[  899.851925][T22973] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4993'.
[  900.218829][T22997] netlink: 41 bytes leftover after parsing attributes in process `syz.1.5003'.
[  900.222308][T22997] netlink: 120 bytes leftover after parsing attributes in process `syz.1.5003'.
[  900.228750][T22997] netlink: 41 bytes leftover after parsing attributes in process `syz.1.5003'.
[  900.472549][T23010] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5008'.
[  900.529804][T23012] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5009'.
[  900.567894][T23015] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5010'.
[  903.694681][T23048] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  903.703232][T23048] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  903.710306][T23048] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  906.743654][T23074] __nla_validate_parse: 6 callbacks suppressed
[  906.743665][T23074] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5028'.
[  906.775951][T23078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5031'.
[  906.796692][T23080] netlink: 200 bytes leftover after parsing attributes in process `syz.2.5032'.
[  906.808045][T23080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5032'.
[  907.022168][T23126] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5042'.
[  907.077389][T23134] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5037'.
[  910.167907][T23144] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5049'.
[  910.222394][T23148] netlink: 101 bytes leftover after parsing attributes in process `syz.2.5051'.
[  910.238726][T23148] validate_nla: 7 callbacks suppressed
[  910.238738][T23148] netlink: 'syz.2.5051': attribute type 1 has an invalid length.
[  910.257880][T23148] only policy match revision 0 supported
[  910.257894][T23148] unable to load match
[  910.319713][T23161] netlink: 'syz.1.5055': attribute type 29 has an invalid length.
[  910.324714][T23161] netlink: 'syz.1.5055': attribute type 29 has an invalid length.
[  910.329501][T23161] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5055'.
[  910.560141][T23176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5060'.
[  913.398225][T23181] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5061'.
[  913.401096][T23181] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5061'.
[  913.447940][T23187] netlink: 'syz.0.5063': attribute type 29 has an invalid length.
[  913.451646][T23187] netlink: 'syz.0.5063': attribute type 29 has an invalid length.
[  913.454389][T23187] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5063'.
[  913.491985][T23194] netlink: 'syz.1.5067': attribute type 1 has an invalid length.
[  913.521133][T23194] bond12: (slave bridge14): making interface the new active one
[  913.524086][T23194] bond12: (slave bridge14): Enslaving as an active interface with an up link
[  916.134771][T23221] netlink: 'syz.2.5073': attribute type 29 has an invalid length.
[  916.137914][T23221] netlink: 'syz.2.5073': attribute type 29 has an invalid length.
[  916.140657][T23221] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5073'.
[  916.159676][T23216] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5072'.
[  916.206028][T23235] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  916.212842][T23235] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  916.264205][T23239] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5078'.
[  916.312328][T23251] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  916.319312][T23251] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  916.350993][T23253] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  916.366781][T23251] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  916.367683][T23261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5084'.
[  916.404706][T23264] netlink: 'syz.1.5086': attribute type 1 has an invalid length.
[  916.419052][T23264] bond13: entered promiscuous mode
[  916.421293][T23264] 8021q: adding VLAN 0 to HW filter on device bond13
[  916.430457][T23264] ipvlan3: entered allmulticast mode
[  916.432223][T23264] bond13: entered allmulticast mode
[  916.437154][T23269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5087'.
[  916.438726][T23264] ipvlan4: entered allmulticast mode
[  916.454535][T23264] bond13: (slave bridge15): making interface the new active one
[  916.457370][T23264] bridge15: entered promiscuous mode
[  916.459381][T23264] bridge15: entered allmulticast mode
[  916.462293][T23264] bond13: (slave bridge15): Enslaving as an active interface with an up link
[  916.474965][T23272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5088'.
[  916.511478][T23264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5086'.
[  916.774714][T23317] netlink: 'syz.2.5102': attribute type 1 has an invalid length.
[  916.811058][T23314] netlink: 'syz.1.5103': attribute type 3 has an invalid length.
[  917.992130][T23372] xt_hashlimit: size too large, truncated to 1048576
[  918.942265][T23412] __nla_validate_parse: 8 callbacks suppressed
[  918.942281][T23412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5124'.
[  918.952288][T23412] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5124'.
[  919.078670][T23423] lo speed is unknown, defaulting to 1000
[  919.108396][T23424] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5122'.
[  919.595591][T23432] veth1: entered promiscuous mode
[  919.600029][T23432] veth1: entered allmulticast mode
[  922.764943][T23444] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5133'.
[  922.869298][T23450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5136'.
[  922.891269][T23456] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  922.895302][T23456] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  922.897915][T23456] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  922.922938][T23459] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  922.944671][T23459] team0: mtu less than device minimum
[  922.979342][T23465] netlink: 'syz.0.5141': attribute type 29 has an invalid length.
[  922.982261][T23465] netlink: 'syz.0.5141': attribute type 29 has an invalid length.
[  922.988554][T23465] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5141'.
[  926.115808][T23484] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  926.119938][T23484] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  926.138725][T23488] netlink: 19 bytes leftover after parsing attributes in process `syz.0.5148'.
[  927.290814][T23502] x_tables: duplicate underflow at hook 3
[  927.383982][T23500] bond14 (unregistering): Released all slaves
[  927.524708][T23518] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5157'.
[  927.777289][T23525] netlink: 'syz.2.5156': attribute type 10 has an invalid length.
[  927.780105][T23525] netlink: 16154 bytes leftover after parsing attributes in process `syz.2.5156'.
[  927.788746][T23529] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5156'.
[  930.352373][T23513] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5156'.
[  930.418859][T23535] netlink: 'syz.2.5161': attribute type 29 has an invalid length.
[  930.421653][T23535] netlink: 'syz.2.5161': attribute type 29 has an invalid length.
[  930.425164][T23535] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5161'.
[  930.450461][T23538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5162'.
[  930.542185][T23543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5163'.
[  930.685686][T23553] wg2: Caught tx_queue_len zero misconfig
[  931.087562][T23573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5170'.
[  931.090479][T23573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5170'.
[  931.338448][T23585] __nla_validate_parse: 1 callbacks suppressed
[  931.338458][T23585] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5176'.
[  931.344548][T23587] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5176'.
[  931.359797][T23585] netlink: 124 bytes leftover after parsing attributes in process `syz.2.5176'.
[  931.367234][T23589] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5175'.
[  931.372648][T23588] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5175'.
[  931.774769][T23602] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5179'.
[  932.945796][T23602] bridge0: port 3(vlan2) entered disabled state
[  933.184043][T23628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5190'.
[  933.253123][T23632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5192'.
[  934.151102][T23645] netlink: 160 bytes leftover after parsing attributes in process `syz.2.5195'.
[  934.158705][T23645] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5195'.
[  935.114987][T23660] netlink: 'syz.2.5199': attribute type 29 has an invalid length.
[  935.117860][T23660] netlink: 'syz.2.5199': attribute type 29 has an invalid length.
[  935.174103][T23664] can: request_module (can-proto-5) failed.
[  935.419167][T23686] netlink: 'syz.1.5208': attribute type 29 has an invalid length.
[  935.421964][T23686] netlink: 'syz.1.5208': attribute type 29 has an invalid length.
[  938.549254][T23708] netlink: 'syz.1.5216': attribute type 29 has an invalid length.
[  938.552093][T23708] netlink: 'syz.1.5216': attribute type 29 has an invalid length.
[  938.555484][T23708] __nla_validate_parse: 8 callbacks suppressed
[  938.555492][T23708] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5216'.
[  938.829130][T23725] netlink: 'syz.1.5222': attribute type 9 has an invalid length.
[  938.835611][T23725] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.5222'.
[  941.752607][T23730] netlink: 'syz.2.5224': attribute type 29 has an invalid length.
[  941.758948][T23730] netlink: 'syz.2.5224': attribute type 29 has an invalid length.
[  941.765970][T23730] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5224'.
[  942.026765][T23746] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5231'.
[  942.031045][T23746] netlink: 49 bytes leftover after parsing attributes in process `syz.0.5231'.
[  942.077360][T23752] netlink: 'syz.2.5232': attribute type 29 has an invalid length.
[  942.080209][T23752] netlink: 'syz.2.5232': attribute type 29 has an invalid length.
[  942.085125][T23752] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5232'.
[  942.167983][T23757] tipc: Resetting bearer <ib:geneve0>
[  942.181673][T23757] tipc: Resetting bearer <eth:syzkaller0>
[  942.196639][T23760] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  942.206953][T23760] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  942.217066][T23760] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  942.320999][T23767] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.5236'.
[  943.290848][T23780] netlink: 'syz.1.5241': attribute type 9 has an invalid length.
[  943.294892][T23780] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.5241'.
[  943.347307][T23784] xt_nat: multiple ranges no longer supported
[  943.395384][T23788] syzkaller1: entered promiscuous mode
[  943.397204][T23788] syzkaller1: entered allmulticast mode
[  943.604580][T23797] tipc: Resetting bearer <ib:geneve0>
[  943.617855][T23797] tipc: Resetting bearer <eth:syzkaller0>
[  943.727692][T23809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5248'.
[  943.782987][T23812] netlink: 'syz.2.5250': attribute type 29 has an invalid length.
[  943.801041][T23812] netlink: 'syz.2.5250': attribute type 29 has an invalid length.
[  943.816934][T23812] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5250'.
[  943.940592][T23815] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5251'.
[  944.622163][T23822] syzkaller1: entered promiscuous mode
[  944.624843][T23822] syzkaller1: entered allmulticast mode
[  946.808360][T23837] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5259'.
[  946.968061][T23854] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5263'.
[  947.052885][T23858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5265'.
[  947.062212][T23858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5265'.
[  949.990881][T23865] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5267'.
[  950.089741][T23870] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5269'.
[  950.091774][T23877] netlink: 'syz.1.5271': attribute type 29 has an invalid length.
[  950.104949][T23870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5269'.
[  950.108014][T23877] netlink: 'syz.1.5271': attribute type 29 has an invalid length.
[  950.118145][T23877] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5271'.
[  950.141608][T23880] syzkaller1: entered promiscuous mode
[  950.143479][T23880] syzkaller1: entered allmulticast mode
[  950.197030][T23886] netlink: 'syz.2.5272': attribute type 21 has an invalid length.
[  953.464832][T23932] netlink: 'syz.1.5283': attribute type 29 has an invalid length.
[  953.467729][T23932] netlink: 'syz.1.5283': attribute type 29 has an invalid length.
[  953.470479][T23932] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5283'.
[  953.544828][T23936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5285'.
[  953.744284][T23951] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  953.746862][T23951] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  953.749544][T23951] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  953.790597][T23954] netlink: 'syz.1.5291': attribute type 29 has an invalid length.
[  953.796284][T23954] netlink: 'syz.1.5291': attribute type 29 has an invalid length.
[  953.800816][T23954] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5291'.
[  953.899114][T23966] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0
[  953.906432][T23966] syzkaller1: entered promiscuous mode
[  953.908288][T23966] syzkaller1: entered allmulticast mode
[  953.918627][T23965] netlink: 'syz.1.5293': attribute type 3 has an invalid length.
[  953.941420][T23966] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5295'.
[  954.995580][T23989] netlink: 'syz.1.5299': attribute type 29 has an invalid length.
[  955.062014][T23989] netlink: 'syz.1.5299': attribute type 29 has an invalid length.
[  955.071189][T23989] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5299'.
[  955.164492][T24004] syzkaller1: entered promiscuous mode
[  955.177005][T24004] syzkaller1: entered allmulticast mode
[  955.209730][T24000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5303'.
[  955.213467][T24009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5305'.
[  955.350334][T24016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5308'.
[  955.428086][T24019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5307'.
[  955.441802][T24020] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5308'.
[  955.458581][T24020] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5308'.
[  955.620951][T24024] netlink: 'syz.2.5310': attribute type 29 has an invalid length.
[  955.633096][T24024] netlink: 'syz.2.5310': attribute type 29 has an invalid length.
[  955.638412][T24024] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5310'.
[  956.668411][T24037] syzkaller1: entered promiscuous mode
[  956.670428][T24037] syzkaller1: entered allmulticast mode
[  956.759707][T24045] syzkaller1: entered promiscuous mode
[  956.761765][T24045] syzkaller1: entered allmulticast mode
[  956.784446][T24041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5314'.
[  956.788076][T24041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5314'.
[  956.810752][T24040] netlink: 'syz.0.5314': attribute type 10 has an invalid length.
[  958.652388][T24126] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  959.368197][T24164] openvswitch: netlink: Actions may not be safe on all matching packets
[  959.376424][T24164] openvswitch: netlink: Actions may not be safe on all matching packets
[  959.383937][T24164] openvswitch: netlink: Actions may not be safe on all matching packets
[  959.389934][T24164] openvswitch: netlink: Actions may not be safe on all matching packets
[  959.396689][T24164] openvswitch: netlink: Actions may not be safe on all matching packets
[  959.403352][T24164] openvswitch: netlink: Actions may not be safe on all matching packets
[  959.410063][T24164] openvswitch: netlink: Actions may not be safe on all matching packets
[  959.416731][T24164] openvswitch: netlink: Actions may not be safe on all matching packets
[  959.425907][T24164] openvswitch: netlink: Actions may not be safe on all matching packets
[  959.754973][T24167] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  959.760905][T24167] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  959.767030][T24167] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  962.492678][T24194] __nla_validate_parse: 8 callbacks suppressed
[  962.495273][T24194] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.5370'.
[  962.568705][T24198] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5369'.
[  963.307664][T24204] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5372'.
[  963.514924][T24216] lo speed is unknown, defaulting to 1000
[  964.428469][T24226] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  964.496589][T24232] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.5379'.
[  964.532183][T24234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5382'.
[  964.566894][T24240] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5384'.
[  964.647652][T24249] netlink: 277 bytes leftover after parsing attributes in process `syz.0.5385'.
[  964.681642][T24250] sctp: [Deprecated]: syz.1.5386 (pid 24250) Use of int in max_burst socket option deprecated.
[  964.681642][T24250] Use struct sctp_assoc_value instead
[  965.231660][T24264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5390'.
[  967.760889][T24273] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5392'.
[  967.770136][T24274] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5392'.
[  967.917611][T24285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5394'.
[  967.977719][T24293] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  967.984529][T24293] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  967.991024][T24293] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  968.230160][T24297] lo speed is unknown, defaulting to 1000
[  970.067728][T24313] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5405'.
[  970.077779][T24313] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5405'.
[  970.129656][T24318] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  970.139147][T24319] tipc: Resetting bearer <eth:syzkaller0>
[  970.334883][T24326] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5411'.
[  970.470678][T24349] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  970.476588][T24349] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  970.484975][T24349] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  970.625309][T24358] syzkaller1: entered promiscuous mode
[  970.627541][T24358] syzkaller1: entered allmulticast mode
[  970.763153][T24366] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5420'.
[  970.822416][T24369] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5421'.
[  970.931592][T24376] netlink: 6068 bytes leftover after parsing attributes in process `syz.2.5423'.
[  970.934950][T24376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5423'.
[  971.206821][T24390] syzkaller1: entered promiscuous mode
[  971.208827][T24390] syzkaller1: entered allmulticast mode
[  971.377503][T24398] geneve4: entered promiscuous mode
[  971.382851][T20263] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 52769 - 0
[  971.387053][T20263] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 52769 - 0
[  971.390925][T20263] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 52769 - 0
[  971.399991][T20263] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 52769 - 0
[  971.609661][T24416] ipt_REJECT: TCP_RESET invalid for non-tcp
[  971.806640][T24434] netlink: 'syz.1.5443': attribute type 6 has an invalid length.
[  971.888185][T24443] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  971.895689][T24443] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  971.902518][T24443] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  972.785045][T24480] net_ratelimit: 57 callbacks suppressed
[  972.785059][T24480] openvswitch: netlink: EtherType 50a is less than min 600
[  972.941357][T24487] netlink: 'syz.1.5456': attribute type 29 has an invalid length.
[  972.950229][T24487] netlink: 'syz.1.5456': attribute type 29 has an invalid length.
[  972.953750][T24487] __nla_validate_parse: 9 callbacks suppressed
[  972.953760][T24487] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5456'.
[  973.192305][T24499] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5460'.
[  973.195789][T24499] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5460'.
[  974.104985][T24507] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  974.110929][T24507] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  974.115677][T24507] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  974.190070][T24514] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  974.196978][T24514] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  974.205604][T24514] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  974.212802][T24510] netlink: 'syz.0.5463': attribute type 2 has an invalid length.
[  974.217259][T24510] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5463'.
[  974.256084][T24519] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5466'.
[  974.260484][T24517] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5464'.
[  974.349276][T24524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5466'.
[  974.354717][T24524] netlink: 'syz.0.5466': attribute type 1 has an invalid length.
[  975.059552][T24544] netlink: 'syz.1.5474': attribute type 7 has an invalid length.
[  975.062329][T24544] netlink: 'syz.1.5474': attribute type 8 has an invalid length.
[  975.076890][T24544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5474'.
[  975.522611][T24571] team0: Device vlan0 is up. Set it down before adding it as a team port
[  975.710306][T24583] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5487'.
[  975.763696][T24588] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5487'.
[  975.891464][T24583] veth1_vlan: left allmulticast mode
[  975.946560][T24583] bond7: left allmulticast mode
[  975.948741][T24583] bond7: left promiscuous mode
[  975.977319][ T5446] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  975.981855][ T5446] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  975.988439][ T5446] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 40070 - 0
[  975.999970][ T5446] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  976.008854][ T5446] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  976.014958][ T5446] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 40070 - 0
[  976.020338][ T5446] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  976.024865][ T5446] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  976.027942][ T5446] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 40070 - 0
[  976.060680][ T5446] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  976.064188][ T5446] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  976.067484][ T5446] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 40070 - 0
[  977.227748][T24618] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  977.232105][T24618] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 52769 - 0
[  977.311680][T24618] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  977.315746][T24618] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 52769 - 0
[  977.421905][T24618] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  977.427865][T24618] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 52769 - 0
[  977.526706][T24618] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  977.530054][T24618] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 52769 - 0
[  977.714685][T14115] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 52769 - 0
[  977.719384][T14115] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  977.736846][T14115] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 52769 - 0
[  977.741564][T14115] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  977.766281][T14115] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 52769 - 0
[  977.771505][T14115] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  977.785866][T14115] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 52769 - 0
[  977.788909][T14115] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  978.114135][T24655] __nla_validate_parse: 3 callbacks suppressed
[  978.114147][T24655] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5508'.
[  981.164732][T24671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5511'.
[  981.412646][T24695] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003
[  981.507064][T24699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5519'.
[  981.510779][T24699] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5519'.
[  984.602969][T24725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  984.611688][T24725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  988.854583][T24787] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5537'.
[  988.943197][T24796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5537'.
[  988.960055][T24798] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5543'.
[  989.158978][T24809] netlink: 'syz.0.5548': attribute type 12 has an invalid length.
[  989.169911][T24809] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5548'.
[  989.179547][T24815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5550'.
[  990.081584][T24828] team0: Device vlan0 is up. Set it down before adding it as a team port
[  990.189222][T24837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5557'.
[  990.350496][T24849] netlink: 'syz.1.5560': attribute type 13 has an invalid length.
[  990.353767][T24849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5560'.
[  990.357757][T24849] gretap0: refused to change device tx_queue_len
[  990.360319][T24849] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  990.450985][T24851] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5562'.
[  990.559174][T24863] team0: No ports can be present during mode change
[  990.590669][T24858] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5564'.
[  990.612183][T24864] team0: Device vlan0 is up. Set it down before adding it as a team port
[  990.628073][T24867] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5567'.
[  990.694410][   T33] audit: type=1800 audit(1778604203.114:11): pid=24867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5567" name="memory.events" dev="tmpfs" ino=9684 res=0 errno=0
[  993.139824][T24909] xt_hashlimit: size too large, truncated to 1048576
[  993.163061][T24908] netlink: 'syz.1.5577': attribute type 29 has an invalid length.
[  993.168455][T24908] netlink: 'syz.1.5577': attribute type 29 has an invalid length.
[  993.217308][T24911] bridge_slave_0 (unregistering): left allmulticast mode
[  993.220010][T24911] bridge_slave_0 (unregistering): left promiscuous mode
[  993.229624][T24911] bridge0: port 1(bridge_slave_0) entered disabled state
[  993.246607][T24916] netlink: 'syz.2.5576': attribute type 1 has an invalid length.
[  993.364797][T24923] netlink: 'syz.1.5581': attribute type 1 has an invalid length.
[  993.479363][T24932] netlink: 'syz.1.5584': attribute type 29 has an invalid length.
[  993.488463][T24932] netlink: 'syz.1.5584': attribute type 29 has an invalid length.
[  993.520523][T24934] xt_l2tp: wrong L2TP version: 0
[  996.664723][T24975] netlink: 'syz.1.5592': attribute type 29 has an invalid length.
[  996.667515][T24975] netlink: 'syz.1.5592': attribute type 29 has an invalid length.
[  996.670251][T24975] __nla_validate_parse: 9 callbacks suppressed
[  996.670259][T24975] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5592'.
[  996.716372][T24978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5591'.
[  996.745939][T24982] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5594'.
[  996.795493][T24989] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5595'.
[  996.798819][T24989] x_tables: duplicate underflow at hook 1
[  996.992490][T25005] netlink: 'syz.2.5600': attribute type 29 has an invalid length.
[  996.999572][T25005] netlink: 'syz.2.5600': attribute type 29 has an invalid length.
[  997.004654][T25005] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5600'.
[  997.074756][T25014] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5602'.
[  997.083346][T25017] lo speed is unknown, defaulting to 1000
[  997.094321][T25017] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5603'.
[  997.100129][T25017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5603'.
[  997.137410][T25020] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  997.143639][T25020] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  997.149631][T25020] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  997.220636][T25028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5607'.
[  997.260637][T25026] netlink: 'syz.1.5605': attribute type 2 has an invalid length.
[  997.439456][T25037] netlink: 'syz.2.5609': attribute type 29 has an invalid length.
[  997.447452][T25037] netlink: 'syz.2.5609': attribute type 29 has an invalid length.
[  997.451338][T25037] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5609'.
[  998.203134][T25075] netlink: 'syz.2.5623': attribute type 1 has an invalid length.
[  998.222306][T25075] bond19: entered promiscuous mode
[  998.224929][T25075] 8021q: adding VLAN 0 to HW filter on device bond19
[  998.241187][T25075] bond19: (slave bridge13): making interface the new active one
[  998.245759][T25075] bridge13: entered promiscuous mode
[  998.249213][T25075] bond19: (slave bridge13): Enslaving as an active interface with an up link
[  998.328852][T25083] vlan0: entered promiscuous mode
[  998.331796][T25083] team0: Port device vlan0 added
[  998.339818][T25086] netlink: 'syz.1.5624': attribute type 29 has an invalid length.
[  998.346708][T25086] netlink: 'syz.1.5624': attribute type 29 has an invalid length.
[  998.416026][T25088] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20002
[ 1001.342368][T25140] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[ 1001.349415][T25140] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[ 1001.681053][T25165] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1001.684462][T25165] __nla_validate_parse: 16 callbacks suppressed
[ 1001.684471][T25165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5651'.
[ 1001.692510][T25167] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1001.866556][T25175] IPv6: NLM_F_REPLACE set, but no existing node found!
[ 1004.899248][T25189] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5660'.
[ 1005.213559][T25213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5664'.
[ 1005.294077][T25222] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5667'.
[ 1006.262505][T25240] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[ 1006.268543][T25240] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[ 1006.271960][T25240] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[ 1006.724074][T25274] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5683'.
[ 1006.727320][T25274] netlink: 'syz.0.5683': attribute type 2 has an invalid length.
[ 1006.764256][T25274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5683'.
[ 1006.767486][T25274] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5683'.
[ 1006.876116][T25278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5684'.
[ 1006.879067][T25278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5684'.
[ 1006.884832][T25278] netlink: 'syz.2.5684': attribute type 12 has an invalid length.
[ 1006.890824][T25278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5684'.
[ 1006.894174][T25278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5684'.
[ 1006.897180][T25278] netlink: 'syz.2.5684': attribute type 12 has an invalid length.
[ 1007.080749][T25296] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5690'.
[ 1007.210605][T25307] veth0_to_bridge: Caught tx_queue_len zero misconfig
[ 1007.258028][T25304] Bluetooth: hci0: Opcode 0x080f failed: -4
[ 1007.268500][T25308] Bluetooth: hci0: Opcode 0x080f failed: -4
[ 1009.743961][T25340] tc_dump_action: action bad kind
[ 1009.752377][T25340] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5702'.
[ 1009.942293][T25342] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5703'.
[ 1010.820380][T25347] netlink: 'syz.2.5705': attribute type 1 has an invalid length.
[ 1010.945582][T25355] team0: Device vlan0 is up. Set it down before adding it as a team port
[ 1010.993543][T25360] tls_set_device_offload_rx: netdev not found
[ 1011.769359][T25434] __nla_validate_parse: 4 callbacks suppressed
[ 1011.769372][T25434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5732'.
[ 1011.788317][T25434] netlink: 'syz.1.5732': attribute type 20 has an invalid length.
[ 1011.790940][T25434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5732'.
[ 1011.795644][T25434] netlink: 'syz.1.5732': attribute type 20 has an invalid length.
[ 1011.798210][T25434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5732'.
[ 1011.940922][T25452] netlink: 'syz.1.5737': attribute type 21 has an invalid length.
[ 1011.945312][T25452] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5737'.
[ 1012.004126][T25459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5738'.
[ 1012.126571][T25466] 8021q: VLANs not supported on wg2
[ 1012.197135][T25470] netlink: 'syz.1.5740': attribute type 29 has an invalid length.
[ 1012.200208][T25470] netlink: 'syz.1.5740': attribute type 29 has an invalid length.
[ 1012.203070][T25470] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5740'.
[ 1012.657365][T25480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5745'.
[ 1012.781661][T25499] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5748'.
[ 1012.791022][T25499] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5748'.
[ 1012.798123][T25499] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5748'.
[ 1013.061723][T13625] lo speed is unknown, defaulting to 1000
[ 1013.063913][T25502] netlink: 'syz.1.5749': attribute type 29 has an invalid length.
[ 1013.070408][T25505] netlink: 'syz.1.5749': attribute type 29 has an invalid length.
[ 1013.073248][T13625] sqz0: Port: 1 Link DOWN
[ 1013.080252][ T5673] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 52769 - 0
[ 1013.083700][ T5673] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[ 1013.086416][ T5673] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 52769 - 0
[ 1013.089179][ T5673] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[ 1013.094659][T13625] lo speed is unknown, defaulting to 1000
[ 1013.094682][ T5673] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 52769 - 0
[ 1013.114404][ T5673] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[ 1013.120452][ T5673] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 52769 - 0
[ 1013.129785][ T5673] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[ 1013.136905][T25513] netlink: 'syz.1.5752': attribute type 1 has an invalid length.
[ 1013.157747][T25513] bond14: entered promiscuous mode
[ 1013.160954][T25513] 8021q: adding VLAN 0 to HW filter on device bond14
[ 1016.458542][T25564] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1016.461740][T25564] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1017.267888][T25572] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[ 1017.270597][T25572] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[ 1017.274245][T25572] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[ 1017.371445][T25577] netlink: 'syz.0.5768': attribute type 1 has an invalid length.
[ 1017.483646][T25587] __nla_validate_parse: 280 callbacks suppressed
[ 1017.483657][T25587] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5771'.
[ 1017.492545][T25587] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5771'.
[ 1017.498924][T25587] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5771'.
[ 1017.502410][T25587] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5771'.
[ 1017.506448][T25587] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5771'.
[ 1017.509995][T25587] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5771'.
[ 1017.626645][T25595] syzkaller1: entered promiscuous mode
[ 1017.628996][T25595] syzkaller1: entered allmulticast mode
[ 1018.244396][T25622] lo: entered allmulticast mode
[ 1018.246249][T25622] lo: left allmulticast mode
[ 1018.456865][T25638] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5790'.
[ 1021.729095][T25667] syzkaller1: entered promiscuous mode
[ 1021.731423][T25667] syzkaller1: entered allmulticast mode
[ 1021.779484][T25678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5802'.
[ 1021.789149][T25678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5802'.
[ 1021.789706][T25679] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5803'.
[ 1021.873723][T25681] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1021.941854][T25687] netlink: 'syz.0.5806': attribute type 1 has an invalid length.
[ 1021.947502][T25687] netlink: 'syz.0.5806': attribute type 1 has an invalid length.
[ 1022.046265][T25697] syzkaller1: entered promiscuous mode
[ 1022.048172][T25697] syzkaller1: entered allmulticast mode
[ 1022.320949][T25716] netlink: 'syz.0.5815': attribute type 1 has an invalid length.
[ 1028.480473][T25762] netlink: 'syz.0.5827': attribute type 1 has an invalid length.
[ 1028.484118][T25762] netlink: 'syz.0.5827': attribute type 3 has an invalid length.
[ 1028.488234][T25762] __nla_validate_parse: 1 callbacks suppressed
[ 1028.488244][T25762] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5827'.
[ 1028.497775][T25764] netlink: 'syz.2.5828': attribute type 29 has an invalid length.
[ 1028.504759][T25764] netlink: 'syz.2.5828': attribute type 29 has an invalid length.
[ 1028.510254][T25764] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5828'.
[ 1031.482403][T25776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5830'.
[ 1031.524368][T25774] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[ 1031.531697][T25774] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[ 1031.547575][T25785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5835'.
[ 1031.591581][T25785] 8021q: adding VLAN 0 to HW filter on device bond20
[ 1031.602328][T25785] bond20: entered promiscuous mode
[ 1031.612842][T25785] bond20: entered allmulticast mode
[ 1031.617074][T25785] 8021q: adding VLAN 0 to HW filter on device bond20
[ 1031.626620][T25785] team0: Port device bond20 added
[ 1031.636298][T25785] team0: Port device team_slave_1 removed
[ 1031.644344][T25785] team_slave_1: entered allmulticast mode
[ 1031.647696][T25785] bond20: (slave team_slave_1): Enslaving as an active interface with an up link
[ 1031.731930][T25793] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5838'.
[ 1031.734978][T25793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5838'.
[ 1031.891191][T25808] lo speed is unknown, defaulting to 1000
[ 1031.891289][T25811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5844'.
[ 1032.116076][T25808] netlink: ct family unspecified
[ 1032.117806][T25808] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1034.994211][T25835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5850'.
[ 1038.277904][T25876] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1038.285170][T25876] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5860'.
[ 1038.379564][T25895] netlink: 'syz.2.5867': attribute type 32 has an invalid length.
[ 1038.387074][T25895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5867'.
[ 1038.411071][T25895] bond21: Setting coupled_control to off (0)
[ 1038.506172][T25915] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5873'.
[ 1038.521257][T25917] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5874'.
[ 1041.564197][T25933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5878'.
[ 1041.568195][T25933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5878'.
[ 1041.763225][T25955] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5886'.
[ 1041.800400][T25959] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1041.804905][T25960] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1041.845376][T25971] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5890'.
[ 1041.848484][T25969] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5890'.
[ 1041.892118][T25978] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5893'.
[ 1041.903649][T25978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5893'.
[ 1041.931093][T25982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5894'.
[ 1041.971986][T25985] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5895'.
[ 1042.110171][T26010] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5904'.
[ 1045.259986][T26036] netlink: 'syz.0.5912': attribute type 2 has an invalid length.
[ 1048.213223][T26056] __nla_validate_parse: 1 callbacks suppressed
[ 1048.213233][T26056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5915'.
[ 1048.273359][T26061] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5916'.
[ 1051.394757][T26085] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5922'.
[ 1051.563618][T26077] nbd5: detected capacity change from 0 to 63
[ 1051.590190][   T54] block nbd5: Receive control failed (result -104)
[ 1051.593338][ T7325] block nbd5: Receive control failed (result -32)
[ 1051.831345][T26129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5936'.
[ 1052.460172][T26141] xt_hashlimit: size too large, truncated to 1048576
[ 1054.736970][T26157] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5939'.
[ 1054.748175][T26157] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5939'.
[ 1054.752335][T26157] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5939'.
[ 1054.771094][T26163] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[ 1054.776549][T26163] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[ 1054.779334][T26163] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[ 1054.824620][T26159] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[ 1055.104059][T26215] x_tables: ip_tables: icmp match: only valid for protocol 1
[ 1055.260707][T26239] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 1055.325615][T26242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5962'.
[ 1055.334251][T26242] 
[ 1055.335056][T26242] ======================================================
[ 1055.337181][T26242] WARNING: possible circular locking dependency detected
[ 1055.339314][T26242] syzkaller #0 Not tainted
[ 1055.340784][T26242] ------------------------------------------------------
[ 1055.342992][T26242] syz.0.5962/26242 is trying to acquire lock:
[ 1055.344893][T26242] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660
[ 1055.347655][T26242] 
[ 1055.347655][T26242] but task is already holding lock:
[ 1055.349941][T26242] ffff8881b0f48530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50
[ 1055.352817][T26242] 
[ 1055.352817][T26242] which lock already depends on the new lock.
[ 1055.352817][T26242] 
[ 1055.355978][T26242] 
[ 1055.355978][T26242] the existing dependency chain (in reverse order) is:
[ 1055.358696][T26242] 
[ 1055.358696][T26242] -> #7 (&idev->mc_lock){+.+.}-{4:4}:
[ 1055.361067][T26242]        __mutex_lock+0x1a3/0x1550
[ 1055.362680][T26242]        __ipv6_dev_mc_inc+0x4e/0xa50
[ 1055.364373][T26242]        __ipv6_sock_mc_join+0x503/0x750
[ 1055.366129][T26242]        do_ipv6_mcast_group_source+0x3df/0x4c0
[ 1055.368079][T26242]        do_ipv6_setsockopt+0x16e9/0x3150
[ 1055.369885][T26242]        ipv6_setsockopt+0x59/0x170
[ 1055.371517][T26242]        do_sock_setsockopt+0x17c/0x1b0
[ 1055.373278][T26242]        __x64_sys_setsockopt+0x13d/0x1b0
[ 1055.375057][T26242]        do_syscall_64+0x15f/0xf80
[ 1055.376643][T26242]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1055.378606][T26242] 
[ 1055.378606][T26242] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[ 1055.381025][T26242]        lock_sock_nested+0x41/0x100
[ 1055.382704][T26242]        inet_shutdown+0x6a/0x390
[ 1055.384304][T26242]        nbd_mark_nsock_dead+0x2e9/0x560
[ 1055.386038][T26242]        sock_shutdown+0x15e/0x260
[ 1055.387596][T26242]        nbd_clear_sock+0x24/0x170
[ 1055.389213][T26242]        nbd_config_put+0x2dd/0x580
[ 1055.390959][T26242]        nbd_genl_connect+0x19d5/0x1cf0
[ 1055.392726][T26242]        genl_family_rcv_msg_doit+0x22a/0x330
[ 1055.394648][T26242]        genl_rcv_msg+0x61c/0x7a0
[ 1055.396196][T26242]        netlink_rcv_skb+0x232/0x4b0
[ 1055.397832][T26242]        genl_rcv+0x28/0x40
[ 1055.399286][T26242]        netlink_unicast+0x75c/0x8e0
[ 1055.401003][T26242]        netlink_sendmsg+0x813/0xb40
[ 1055.402679][T26242]        ____sys_sendmsg+0x972/0x9f0
[ 1055.404293][T26242]        ___sys_sendmsg+0x2a5/0x360
[ 1055.405916][T26242]        __x64_sys_sendmsg+0x1bd/0x2a0
[ 1055.407595][T26242]        do_syscall_64+0x15f/0xf80
[ 1055.409212][T26242]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1055.411211][T26242] 
[ 1055.411211][T26242] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[ 1055.413583][T26242]        __mutex_lock+0x1a3/0x1550
[ 1055.415212][T26242]        nbd_queue_rq+0x37b/0x1100
[ 1055.416803][T26242]        blk_mq_dispatch_rq_list+0xa70/0x1910
[ 1055.418607][T26242]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[ 1055.420754][T26242]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1055.422865][T26242]        blk_mq_run_hw_queue+0x348/0x4f0
[ 1055.424622][T26242]        blk_mq_dispatch_list+0xd16/0xe10
[ 1055.426390][T26242]        blk_mq_flush_plug_list+0x48d/0x570
[ 1055.428224][T26242]        __blk_flush_plug+0x3ed/0x4d0
[ 1055.429920][T26242]        __submit_bio+0x28d/0x580
[ 1055.431558][T26242]        submit_bio_noacct_nocheck+0x2f4/0xa40
[ 1055.433507][T26242]        block_read_full_folio+0x599/0x830
[ 1055.435355][T26242]        filemap_read_folio+0x137/0x3b0
[ 1055.437057][T26242]        do_read_cache_folio+0x358/0x590
[ 1055.438772][T26242]        read_part_sector+0xb6/0x2b0
[ 1055.440509][T26242]        adfspart_check_ICS+0xb1/0x960
[ 1055.442206][T26242]        bdev_disk_changed+0x817/0x1770
[ 1055.443973][T26242]        blkdev_get_whole+0x380/0x510
[ 1055.445679][T26242]        bdev_open+0x31e/0xd30
[ 1055.447169][T26242]        blkdev_open+0x470/0x610
[ 1055.448709][T26242]        do_dentry_open+0x785/0x14e0
[ 1055.450419][T26242]        vfs_open+0x3b/0x340
[ 1055.451884][T26242]        path_openat+0x2e08/0x3860
[ 1055.453501][T26242]        do_file_open+0x23e/0x4a0
[ 1055.455066][T26242]        do_sys_openat2+0x113/0x200
[ 1055.456699][T26242]        __x64_sys_openat+0x138/0x170
[ 1055.458348][T26242]        do_syscall_64+0x15f/0xf80
[ 1055.459990][T26242]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1055.461979][T26242] 
[ 1055.461979][T26242] -> #4 (&cmd->lock){+.+.}-{4:4}:
[ 1055.464225][T26242]        __mutex_lock+0x1a3/0x1550
[ 1055.465859][T26242]        nbd_queue_rq+0xc6/0x1100
[ 1055.467411][T26242]        blk_mq_dispatch_rq_list+0xa70/0x1910
[ 1055.469327][T26242]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[ 1055.471287][T26242]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1055.473265][T26242]        blk_mq_run_hw_queue+0x348/0x4f0
[ 1055.475050][T26242]        blk_mq_dispatch_list+0xd16/0xe10
[ 1055.476837][T26242]        blk_mq_flush_plug_list+0x48d/0x570
[ 1055.478640][T26242]        __blk_flush_plug+0x3ed/0x4d0
[ 1055.480341][T26242]        __submit_bio+0x28d/0x580
[ 1055.481890][T26242]        submit_bio_noacct_nocheck+0x2f4/0xa40
[ 1055.483832][T26242]        block_read_full_folio+0x599/0x830
[ 1055.485656][T26242]        filemap_read_folio+0x137/0x3b0
[ 1055.487367][T26242]        do_read_cache_folio+0x358/0x590
[ 1055.489128][T26242]        read_part_sector+0xb6/0x2b0
[ 1055.490807][T26242]        adfspart_check_ICS+0xb1/0x960
[ 1055.492482][T26242]        bdev_disk_changed+0x817/0x1770
[ 1055.494211][T26242]        blkdev_get_whole+0x380/0x510
[ 1055.495922][T26242]        bdev_open+0x31e/0xd30
[ 1055.497390][T26242]        blkdev_open+0x470/0x610
[ 1055.498915][T26242]        do_dentry_open+0x785/0x14e0
[ 1055.500648][T26242]        vfs_open+0x3b/0x340
[ 1055.502080][T26242]        path_openat+0x2e08/0x3860
[ 1055.503672][T26242]        do_file_open+0x23e/0x4a0
[ 1055.505265][T26242]        do_sys_openat2+0x113/0x200
[ 1055.506912][T26242]        __x64_sys_openat+0x138/0x170
[ 1055.508570][T26242]        do_syscall_64+0x15f/0xf80
[ 1055.510208][T26242]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1055.512173][T26242] 
[ 1055.512173][T26242] -> #3 (set->srcu){.+.+}-{0:0}:
[ 1055.514391][T26242]        __synchronize_srcu+0xca/0x300
[ 1055.516125][T26242]        elevator_switch+0x1e8/0x7a0
[ 1055.517771][T26242]        elevator_change+0x2cc/0x450
[ 1055.519430][T26242]        elevator_set_default+0x36c/0x430
[ 1055.521193][T26242]        blk_register_queue+0x3e9/0x4e0
[ 1055.522891][T26242]        __add_disk+0x677/0xd50
[ 1055.524417][T26242]        add_disk_fwnode+0xfb/0x480
[ 1055.526047][T26242]        nbd_dev_add+0x72c/0xb50
[ 1055.527605][T26242]        nbd_init+0x168/0x1f0
[ 1055.529070][T26242]        do_one_initcall+0x250/0x870
[ 1055.530757][T26242]        do_initcall_level+0x104/0x190
[ 1055.532427][T26242]        do_initcalls+0x59/0xa0
[ 1055.533876][T26242]        kernel_init_freeable+0x2a6/0x3e0
[ 1055.535596][T26242]        kernel_init+0x1d/0x1d0
[ 1055.537162][T26242]        ret_from_fork+0x514/0xb70
[ 1055.538765][T26242]        ret_from_fork_asm+0x1a/0x30
[ 1055.540557][T26242] 
[ 1055.540557][T26242] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[ 1055.542960][T26242]        __mutex_lock+0x1a3/0x1550
[ 1055.544547][T26242]        elevator_change+0x1b3/0x450
[ 1055.546250][T26242]        elevator_set_none+0xb5/0x140
[ 1055.547939][T26242]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[ 1055.550032][T26242]        nbd_start_device+0x17f/0xb10
[ 1055.551698][T26242]        nbd_genl_connect+0x165b/0x1cf0
[ 1055.553392][T26242]        genl_family_rcv_msg_doit+0x22a/0x330
[ 1055.555297][T26242]        genl_rcv_msg+0x61c/0x7a0
[ 1055.556921][T26242]        netlink_rcv_skb+0x232/0x4b0
[ 1055.558549][T26242]        genl_rcv+0x28/0x40
[ 1055.560030][T26242]        netlink_unicast+0x75c/0x8e0
[ 1055.561877][T26242]        netlink_sendmsg+0x813/0xb40
[ 1055.563538][T26242]        ____sys_sendmsg+0x972/0x9f0
[ 1055.565340][T26242]        ___sys_sendmsg+0x2a5/0x360
[ 1055.567017][T26242]        __x64_sys_sendmsg+0x1bd/0x2a0
[ 1055.568673][T26242]        do_syscall_64+0x15f/0xf80
[ 1055.570336][T26242]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1055.572320][T26242] 
[ 1055.572320][T26242] -> #1 (&q->q_usage_counter(io)#54){++++}-{0:0}:
[ 1055.574957][T26242]        blk_alloc_queue+0x546/0x680
[ 1055.576651][T26242]        __blk_mq_alloc_disk+0x197/0x390
[ 1055.578522][T26242]        nbd_dev_add+0x499/0xb50
[ 1055.580142][T26242]        nbd_init+0x168/0x1f0
[ 1055.581639][T26242]        do_one_initcall+0x250/0x870
[ 1055.583264][T26242]        do_initcall_level+0x104/0x190
[ 1055.584935][T26242]        do_initcalls+0x59/0xa0
[ 1055.586486][T26242]        kernel_init_freeable+0x2a6/0x3e0
[ 1055.588248][T26242]        kernel_init+0x1d/0x1d0
[ 1055.589798][T26242]        ret_from_fork+0x514/0xb70
[ 1055.591358][T26242]        ret_from_fork_asm+0x1a/0x30
[ 1055.592980][T26242] 
[ 1055.592980][T26242] -> #0 (fs_reclaim){+.+.}-{0:0}:
[ 1055.595172][T26242]        __lock_acquire+0x15a5/0x2cf0
[ 1055.596861][T26242]        lock_acquire+0x106/0x350
[ 1055.598424][T26242]        fs_reclaim_acquire+0x71/0x100
[ 1055.600155][T26242]        __kmalloc_cache_noprof+0x40/0x660
[ 1055.601955][T26242]        __ipv6_dev_mc_inc+0x44f/0xa50
[ 1055.603621][T26242]        ipv6_add_dev+0xe34/0x13a0
[ 1055.605254][T26242]        addrconf_notify+0x771/0x1050
[ 1055.607134][T26242]        notifier_call_chain+0x1ad/0x3d0
[ 1055.608877][T26242]        register_netdevice+0x18c9/0x1ec0
[ 1055.610646][T26242]        l2tp_eth_create+0x7f7/0xbe0
[ 1055.612263][T26242]        l2tp_nl_cmd_session_create+0x766/0xc60
[ 1055.614206][T26242]        genl_family_rcv_msg_doit+0x22a/0x330
[ 1055.616276][T26242]        genl_rcv_msg+0x61c/0x7a0
[ 1055.617867][T26242]        netlink_rcv_skb+0x232/0x4b0
[ 1055.619490][T26242]        genl_rcv+0x28/0x40
[ 1055.620884][T26242]        netlink_unicast+0x75c/0x8e0
[ 1055.622485][T26242]        netlink_sendmsg+0x813/0xb40
[ 1055.624122][T26242]        ____sys_sendmsg+0x972/0x9f0
[ 1055.625871][T26242]        ___sys_sendmsg+0x2a5/0x360
[ 1055.627526][T26242]        __x64_sys_sendmsg+0x1bd/0x2a0
[ 1055.629272][T26242]        do_syscall_64+0x15f/0xf80
[ 1055.630957][T26242]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1055.632908][T26242] 
[ 1055.632908][T26242] other info that might help us debug this:
[ 1055.632908][T26242] 
[ 1055.636101][T26242] Chain exists of:
[ 1055.636101][T26242]   fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock
[ 1055.636101][T26242] 
[ 1055.640226][T26242]  Possible unsafe locking scenario:
[ 1055.640226][T26242] 
[ 1055.642621][T26242]        CPU0                    CPU1
[ 1055.644375][T26242]        ----                    ----
[ 1055.646218][T26242]   lock(&idev->mc_lock);
[ 1055.647680][T26242]                                lock(sk_lock-AF_INET6);
[ 1055.649943][T26242]                                lock(&idev->mc_lock);
[ 1055.652194][T26242]   lock(fs_reclaim);
[ 1055.653497][T26242] 
[ 1055.653497][T26242]  *** DEADLOCK ***
[ 1055.653497][T26242] 
[ 1055.656196][T26242] 4 locks held by syz.0.5962/26242:
[ 1055.657838][T26242]  #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1055.660311][T26242]  #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1055.663029][T26242]  #2: ffffffff8fdcf900 (rtnl_mutex){+.+.}-{4:4}, at: l2tp_eth_create+0x7cf/0xbe0
[ 1055.666134][T26242]  #3: ffff8881b0f48530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50
[ 1055.669429][T26242] 
[ 1055.669429][T26242] stack backtrace:
[ 1055.671249][T26242] CPU: 1 UID: 0 PID: 26242 Comm: syz.0.5962 Not tainted syzkaller #0 PREEMPT(full) 
[ 1055.671260][T26242] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1055.671266][T26242] Call Trace:
[ 1055.671271][T26242]  <TASK>
[ 1055.671277][T26242]  dump_stack_lvl+0xe8/0x150
[ 1055.671288][T26242]  print_circular_bug+0x2e1/0x300
[ 1055.671300][T26242]  check_noncircular+0x12e/0x150
[ 1055.671312][T26242]  __lock_acquire+0x15a5/0x2cf0
[ 1055.671322][T26242]  ? rcu_is_watching+0x15/0xb0
[ 1055.671332][T26242]  ? trace_contention_end+0x3d/0x140
[ 1055.671343][T26242]  ? __mutex_lock+0x319/0x1550
[ 1055.671356][T26242]  ? __kmalloc_cache_noprof+0x40/0x660
[ 1055.671366][T26242]  lock_acquire+0x106/0x350
[ 1055.671374][T26242]  ? __kmalloc_cache_noprof+0x40/0x660
[ 1055.671385][T26242]  ? __pfx___mutex_lock+0x10/0x10
[ 1055.671396][T26242]  fs_reclaim_acquire+0x71/0x100
[ 1055.671407][T26242]  ? __kmalloc_cache_noprof+0x40/0x660
[ 1055.671417][T26242]  __kmalloc_cache_noprof+0x40/0x660
[ 1055.671428][T26242]  ? __ipv6_dev_mc_inc+0x44f/0xa50
[ 1055.671438][T26242]  __ipv6_dev_mc_inc+0x44f/0xa50
[ 1055.671467][T26242]  ? addrconf_sysctl_register+0x1a9/0x1c0
[ 1055.671479][T26242]  ipv6_add_dev+0xe34/0x13a0
[ 1055.671490][T26242]  addrconf_notify+0x771/0x1050
[ 1055.671502][T26242]  notifier_call_chain+0x1ad/0x3d0
[ 1055.671513][T26242]  register_netdevice+0x18c9/0x1ec0
[ 1055.671528][T26242]  ? __pfx_register_netdevice+0x10/0x10
[ 1055.671540][T26242]  ? __pfx_l2tp_session_register+0x10/0x10
[ 1055.671553][T26242]  ? l2tp_eth_create+0x383/0xbe0
[ 1055.671563][T26242]  l2tp_eth_create+0x7f7/0xbe0
[ 1055.671574][T26242]  ? l2tp_eth_create+0x383/0xbe0
[ 1055.671585][T26242]  ? __pfx_l2tp_eth_create+0x10/0x10
[ 1055.671597][T26242]  l2tp_nl_cmd_session_create+0x766/0xc60
[ 1055.671607][T26242]  ? rcu_is_watching+0x15/0xb0
[ 1055.671617][T26242]  ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10
[ 1055.671628][T26242]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[ 1055.671637][T26242]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[ 1055.671646][T26242]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1055.671655][T26242]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1055.671665][T26242]  ? bpf_lsm_capable+0x9/0x20
[ 1055.671673][T26242]  ? security_capable+0x7e/0x2c0
[ 1055.671683][T26242]  genl_rcv_msg+0x61c/0x7a0
[ 1055.671692][T26242]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1055.671700][T26242]  ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10
[ 1055.671712][T26242]  netlink_rcv_skb+0x232/0x4b0
[ 1055.671722][T26242]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1055.671730][T26242]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1055.671742][T26242]  ? down_read+0x270/0x2e0
[ 1055.671748][T26242]  ? genl_rcv+0xd/0x40
[ 1055.671756][T26242]  genl_rcv+0x28/0x40
[ 1055.671763][T26242]  netlink_unicast+0x75c/0x8e0
[ 1055.671773][T26242]  netlink_sendmsg+0x813/0xb40
[ 1055.671785][T26242]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1055.671796][T26242]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1055.671805][T26242]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1055.671822][T26242]  ____sys_sendmsg+0x972/0x9f0
[ 1055.671832][T26242]  ? __might_fault+0xaf/0x130
[ 1055.671844][T26242]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1055.671855][T26242]  ? import_iovec+0x73/0xa0
[ 1055.671868][T26242]  ___sys_sendmsg+0x2a5/0x360
[ 1055.671878][T26242]  ? __lock_acquire+0x6b5/0x2cf0
[ 1055.671888][T26242]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1055.671901][T26242]  ? futex_wait+0x2a2/0x390
[ 1055.671916][T26242]  ? __fget_files+0x2a/0x420
[ 1055.671925][T26242]  ? __fget_files+0x3a0/0x420
[ 1055.671935][T26242]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1055.671946][T26242]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1055.671959][T26242]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1055.671968][T26242]  do_syscall_64+0x15f/0xf80
[ 1055.671978][T26242]  ? trace_irq_disable+0x3b/0x140
[ 1055.671990][T26242]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1055.671998][T26242] RIP: 0033:0x7fb662b9cdd9
[ 1055.672008][T26242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1055.672015][T26242] RSP: 002b:00007fb660dcd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1055.672024][T26242] RAX: ffffffffffffffda RBX: 00007fb662e16090 RCX: 00007fb662b9cdd9
[ 1055.672030][T26242] RDX: 0000000020000034 RSI: 0000200000000140 RDI: 000000000000000b
[ 1055.672035][T26242] RBP: 00007fb662c32d69 R08: 0000000000000000 R09: 0000000000000000
[ 1055.672040][T26242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1055.672045][T26242] R13: 00007fb662e16128 R14: 00007fb662e16090 R15: 00007ffdafb889a8
[ 1055.672054][T26242]  </TASK>
[ 1055.914580][T26247] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5964'.
