last executing test programs:

3.676150498s ago: executing program 0 (id=5008):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
connect(r0, &(0x7f00000005c0)=@ll={0x11, 0xf6, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x80)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}}, 0x0)

3.616029034s ago: executing program 0 (id=5011):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) (async)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f00000000c0)=r3, 0x4) (async)
setsockopt$sock_attach_bpf(r1, 0x1, 0x24, &(0x7f0000000000)=r3, 0x4) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r4=>0x0}) (rerun: 32)
sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x4c}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000000) (async, rerun: 32)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) (rerun: 32)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}}, 0x0) (async, rerun: 64)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x4009, 0x0, 0xffffffffffffffff, 0x4}, 0x50) (async, rerun: 64)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000018100000", @ANYRES32=r6, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r7, 0xfb, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$XFS_IOC_FSGROWFSDATA(r8, 0x4010586e, &(0x7f0000000380)={0x4a, 0xc000000})

2.731698979s ago: executing program 0 (id=5019):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={@local, @private=0xa010102, 0x0, 0x1c}})
sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdc01, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}}, 0x2400c000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYRES32=r2, @ANYRES8=r2], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x20000801)

1.681969687s ago: executing program 1 (id=5021):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000880)=ANY=[], 0x32600) (async, rerun: 32)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async, rerun: 32)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}}, 0x24000840) (async)
socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 32)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0xe, &(0x7f0000000680)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="2000000016000d002cbd7000bedbdf25127c00000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x20048891}, 0x8010) (async, rerun: 32)
r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x1, 0x0, {0x0, 0x0, 0x4, 0x0, 0x8301, 0x31e1c}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x8044) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = accept(r6, &(0x7f0000000240)=@l2tp={0x2, 0x0, @remote}, &(0x7f00000002c0)=0x80) (async)
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5201)
ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5201) (async)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000000c1430002bbd7000000000000800010a01000000080001000200000008000000000800030004000000080001e80bc8260008003d0004000000ca80f98445c330ec0b14164e140347b3ad5ec6b8a66703000000fb31d9734b90a5c9bfd6c4734d863cb41c93fe14fc7b422499a53054e0fd664b4e1d2d4804b2659ba9702312bafcaba435f75ec25c647614d11f56b155a3a3562e2dfe5ef305e2b58d5c5b0058665fbb46513565ac5b4fc2dd4da54a1d66d01d45f1"], 0x40}, 0x1, 0x0, 0x0, 0xc001}, 0x9010) (async)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x154}}, 0x8044)

1.452339329s ago: executing program 1 (id=5023):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
sendto$rxrpc(r0, 0x0, 0x0, 0x4000, 0x0, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000380)={0x8, 0x4e22, @broadcast}, 0x10, &(0x7f00000001c0)=[{0x0, 0x27}, {&(0x7f0000000800)="08003b117c123a3d", 0x8}], 0x2}, 0x20008890)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'veth0_macvtap\x00', @random="002000000102"})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'})
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x7, 0x0, 0x4, 0x0, 0x1}, {0x1000000000000, 0x0, 0xe06}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x20}}, 0xe8)
socket$nl_xfrm(0x10, 0x3, 0x6)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
close(0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r8, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r7, 0x56836000)
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0xfd}, 0x3d)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.13214136s ago: executing program 0 (id=5025):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000440), 0xc, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}}, 0x0)

1.032124117s ago: executing program 0 (id=5026):
r0 = socket$kcm(0x2, 0x3, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0)
r2 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000002c0))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040))
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e3, &(0x7f0000000180)={r2})
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r1, r1, 0x2f}, 0x20)
sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @local}}}], 0x20}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}}, 0x0)

841.52327ms ago: executing program 2 (id=5027):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c2090144d771a05793c1dec7a4b95752dca1e52879febb1fb85bbe67839da"], 0x154}, 0x1, 0x0, 0x0, 0x40004}, 0x4008011)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000600)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)={0x2c, r3, 0xa11, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x100080d0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00'})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', <r6=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="cc000000", @ANYRES8=r6, @ANYBLOB="10002abd7000fbdbdf2518000000a400308005000200ff000000050002008000000014000400bdf1e7c9376f29d5a5effcdd7b23c25824000300ec69724eb5ad4e30ade682d2155f1ca228843612bca311761ae3181237020d5724000300ba8c753b68adf0685c3008553e2340f54244dab3e6820d106d34db0ed6688cf9240003006866fa30f7668d81bff6fadb941071c75d1bf0b066278eff30703057c22d1cb80500020080000000050002002f00000008000300", @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r6, @ANYRESOCT=0x0], 0xcc}, 0x1, 0x0, 0x0, 0x40890}, 0xc11)
setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000), 0x4)

750.899884ms ago: executing program 1 (id=5028):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x0, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xfffc}, {0xb, 0xf}}}, 0x24}}, 0x80800)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1}, [@FRA_DST={0x8, 0x1, @empty}]}, 0x24}}, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2)
socket$inet(0x2, 0x3, 0x1)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a)
socket$inet6_sctp(0xa, 0x6, 0x84)
setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, 0x0, 0x0)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000001240)={@loopback, 0x3, 0x0, 0x2, 0xa, 0x9, 0x1}, &(0x7f0000001280)=0x20)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r0, r4, 0x0, 0x20000000002)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x810)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="34000000100001080000e3015b08162335a00000", @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000300", @ANYRES32=r7, @ANYBLOB="440d08121b8ae80af2518f9501aff15d80cae6e7fb63c016ea75b4d89daa9ffcfba5b57d3016126a80feb6d4abdbfa032068278c647f3c6a423439d5862555ccc998e39af4abf647e7cfcdd0d93c32d23672e009d9e1a08c55c1ad0dd0429d87cbe6d40580077c31"], 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x64, 0x30, 0x871a15abc695fa3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3468800, 0x40, 0x1, 0x3, 0x80000000}, 0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000040)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
connect$netlink(r9, &(0x7f00000000c0)=@unspec, 0xc)

744.568354ms ago: executing program 2 (id=5029):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r2=>0x0}) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket(0x9, 0x2, 0xffff)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r6=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r7=>0x0})
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x0, {0x7, r6}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x0, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r2, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) (async)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000125bd7000fedbdf255f5b4a4708007a00", @ANYRES32=r2, @ANYBLOB="0c009900030000001b0000000800ef0005000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$kcm(0x10, 0x400000002, 0x0) (async)
sendmsg$NFNL_MSG_CTHELPER_GET(r8, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x78, 0x1, 0x9, 0x0, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
write$cgroup_subtree(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async)
recvmsg(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001900)=""/4131, 0x1023}, {&(0x7f0000000900)=""/4071, 0xfe7}, {&(0x7f0000004880)=""/4161, 0x1041}, {&(0x7f0000000680)=""/195, 0xc3}, {&(0x7f0000000040)=""/59, 0x3b}], 0x5}, 0x12100)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x8000)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newnexthop={0x30, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x5}, {0x0, 0x6}]}, @NHA_FDB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r12 = openat$cgroup_freezer_state(r11, &(0x7f0000000140), 0x2, 0x0)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r12, 0xf517, 0x0)
mkdirat$cgroup(r11, &(0x7f00000000c0)='syz1\x00', 0x1ff) (async)
write$cgroup_freezer_state(r12, &(0x7f0000000040)='FROZEN\x00', 0x7)
sendfile(r12, r12, 0x0, 0x9) (async)
r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r3)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="08002cbd7000ffdbdf25038194e757d976924c880000000000000000000000000001f39b4f9e247cad9f885c6ebb1deda9f124c4f66620d2c31c4f531942a469bd41d418596bd3ae83b6ac524a27dfbdc97491160a28fb4a666bb685428e094fff78bc333d136a3c3f7f6638c2aaa74554f1ac84fe34b8840aa0ea4f8171245d94e1ec0d0943fe841e4927ec79e3f710563d6526fdade6fbea68867867ea57c63a80cee4e456285ba0ba4e832ca1478f858d0d32d4ccab5c8a5a475092dcb6b3a403c0a4b6"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async)
sendmsg$NFT_BATCH(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0xc05, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}}, 0x0)

650.472818ms ago: executing program 0 (id=5030):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000024c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0xc880)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000040)=<r3=>0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe)
listen(r4, 0x3)
accept4$bt_l2cap(r4, 0x0, 0x0, 0x800)
setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000080), 0x4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r5)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0)
write$nci(r2, &(0x7f0000000880)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9}}, 0x5)
write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="4173db192939fb844fc9c421b56c06000100"], 0x4)
sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x24, r6, 0x1, 0x123, 0x40000234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x8a}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="5200060005b32f67500dd2ff2da7a8dc92d6db8b8a4dd82922ede42175870193907f40afeb2c37f0bc2fed3b58ac5fccdb408a60268ec7a1e5851f61244aec1aa5d5405b6d2127147269cee27a375082b5b37e8674dd1dd7d1860cfde29890438967dfbc869b7df0c9473eee6b48ba20dee4bebe158541851c8a99a8e2f07373da746436bcfbb212"], 0x5)
socket$netlink(0x10, 0x3, 0xc)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000037000701f3fffffffedbd72501"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8050)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0x12, 0x0, 0x1000, 0x0, 0x400000, 0x7ff, 0x40004, 0xc0000000, 0x402, 0x9, 0x4, 0x5, 0x3, 0x4006, 0x84, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x5, 0x424f, 0x3}})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000100)="6183c2d282", 0x1003, r8}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r8, &(0x7f0000000180)='v', 0x0}, 0x20)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000037000701f2ffffffffdbd72504"], 0x14}, 0x1, 0x0, 0x0, 0x48011}, 0x40008090)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x37, 0x1, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r10 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r10, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4)
close(0x3)

439.494722ms ago: executing program 2 (id=5031):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a050c0000000000000000050000000900010073797a30000000000900020073797a320000227fa2000068000480345d376f9a14f20001800c0001007061796c6f616400240002800800024000000000080003400000000608000440000000034300014000000001300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c0002800800018000000001140000001100010000000000000084a26938bdbfb87d67135cd739"], 0xbc}}, 0x0)

292.154234ms ago: executing program 2 (id=5032):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000068a00800000000004000000cb200400f100000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}}, 0x0)

230.781453ms ago: executing program 2 (id=5033):
syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000082ada487c05ac94a12e9de55a5873cbc7c38b2b93b9abb7ed77ff4cfa4d93ad50945", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf254a0000000f00a8007365636f6e646e616d6500000800030000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x48001}, 0x8000)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x8001, 0xfffffffffffffece)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x23}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1)
sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xe0, r4, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8ec}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffb0c}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x801}, 0x8011)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x1400, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x104}}, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000082ada487c05ac94a12e9de55a5873cbc7c38b2b93b9abb7ed77ff4cfa4d93ad50945", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf254a0000000f00a8007365636f6e646e616d6500000800030000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x8001, 0xfffffffffffffece) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x23}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) (async)
sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xe0, r4, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8ec}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffb0c}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x801}, 0x8011) (async)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x1400, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x104}}, 0x0) (async)

142.14124ms ago: executing program 1 (id=5034):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0)

135.867375ms ago: executing program 2 (id=5035):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$rxrpc(0x21, 0x2, 0xa) (async)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24)
syz_emit_ethernet(0x86, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @local, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x20, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback}]}]}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x86, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @local, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x20, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback}]}]}}}}}}}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x24, 0x25, 0x301, 0x670bd24, 0x25dfdbfc, {0x15}, [@typed={0x10, 0x15e, 0x0, 0x0, @binary="378d39000000000245cd295c"}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) (async)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x24, 0x25, 0x301, 0x670bd24, 0x25dfdbfc, {0x15}, [@typed={0x10, 0x15e, 0x0, 0x0, @binary="378d39000000000245cd295c"}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008840}, 0x0)
connect$inet(r2, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
socket$kcm(0x29, 0x2, 0x0) (async)
r4 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$inet(r4, &(0x7f00000028c0)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)}, {&(0x7f0000000340)}, {&(0x7f0000000400)="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", 0xeef}], 0x3}}, {{&(0x7f0000001400)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000001800)=[{&(0x7f0000001440)="85ac6755b3764d9d8071a63907858eec8443bec7adaaea2c917ac41790a95d62511755a808b50539fb719daae0341b7d172229c58deb7f2d95c793aee3365bd04cc81c838294ad5237c74cd19b3ea8431a190ea1caf0524e623f56791d2d55bf1a24c7c7b42198afd133af01bbbd167d04159bceb80648e2e740f1d58b762d50ed842933815a8f167dc01363284d8f27e69a83509fd9f1dd0cdeca61ffdb9524f408d698154fbb2ff5381369933e1815ed1703e58405478629", 0xb9}, {&(0x7f0000001540)="2aba9e4cc9b55274aa3a5dbd35f30d62249f7226e2ffa535df463037a323c732a94981bd91b9d134d79106da4929ddf57f26696b8911da0e8126ca4c7a6f10192c1ef6dc0191c8a10b6526df22206120b8767c1a1ec3be23fe90f3e3c0092aca4116e03096593f7964ac3c077036e624ff82f8348afba5254a1105", 0x7b}, {0x0}, {0x0}, {&(0x7f0000001700)="567dde672061bf3404515d0852fd1d1f17ccfa51f23ae8fc7318bb8f550b9e0b2e3af9f50d1c0ccbe76adc32baeee13e8f009c6fe2eb40759f8385a1938e95ffbc67cc59819f5509b4b76204741df20894b1a81a77247a1eb6707d10a31168935ed151cafc78aacfc5ab2a1fe8410352369fff3112495a19d0d18c910adcca16ec1c110e383ab9c4b76f26701d399ea8cd3e30d044cd300b666c5929fbca2e52d4b480a9df35b76ae60f7dd5b5585eced76c2b5847b1b1676c5bd1c0e9eb87abc71d2497808d4580ff0864e97e7980d50565e56eacf9e592370129e3b6d10a96eb028740e18b92b2f579dcbeb7b8", 0xee}], 0x5}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000002a00)="c5cbb48bbe4c12df6d6e92a1ebf5be22e055dec1ef877ccbb8e451d40000bd56b900ad74f797fcf9414b455374469a5a8cce2f27c3cce47b2efdaabd7a11a9502e290ca101858fca10cb443c7f2944ecda6be6e52ef233fa100cb37c1e9cecbbb17b29d4ba94d34a482628b1d169cdfe6afc1ad9e24be88763cc4d3d23030043c8351378c99b890e050f2e659f98f7c7911c093a2edb84c9bab01721d8454d4aead293a3c5b40fe21e25f400000036316b74f55ce81ef972ca2a8494db27aa32ee368ed440dd598b53e3b0e41f7684a23cb389beedc0efa75826f842602d54fc5b3a453a67876fc52cc76456cabe8f8fff4bd05c81cbf2ae917d06fbbdcf82d4020c3e110c99b6f85c6cdc8055ddbf4d609aa5faee2752ae1d8bbd0beda6570fa1b65c62", 0x124}, {&(0x7f0000001600)}], 0x2}}], 0x3, 0x40)
close(r4)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e23, 0x27bf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x3}, 0x1c)
socket$kcm(0x2, 0x200000000000001, 0x106)
getgid()
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
r7 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffe, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
writev(r6, &(0x7f00000000c0), 0x52)
getsockname$packet(r1, 0x0, &(0x7f0000000200))
pipe(&(0x7f0000000100)={<r9=>0xffffffffffffffff})
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={0xffffffffffffffff, r9, 0x26, 0x0, @val=@netfilter={0x7, 0x1, 0xea}}, 0x20) (async)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={0xffffffffffffffff, r9, 0x26, 0x0, @val=@netfilter={0x7, 0x1, 0xea}}, 0x20)

2.04077ms ago: executing program 1 (id=5036):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r0, 0x0) (async)
gettid() (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x2000000)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x20, r4, 0x8c9bf23a4f3aa8ed, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x881d}, 0x4000800) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "01000000"}]}]}}}, {0x18, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x9c}}, 0x0)

0s ago: executing program 1 (id=5037):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a05040000000000000000050000000900010073797a0300000000140000001100010000000000000000000500000a"], 0x48}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5cfc00ff010000000000000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000228000480080001d869919a30a3bea8a42b20b33ea5db4000000000080002400000000a140003006e657464657673690100000000000097497f2b6bda559707aef83d347b7a8571"], 0x84}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000)
socket$alg(0x26, 0x5, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0xffffffff, 0x4)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000000, 0x3032, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x5)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000001000390400"/20, @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x94}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x600, 0xf, 0x80, 0x0, 0x0, 0xfc, 0x1, 0x80, 0x4, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4]}})
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r5, 0x0)
setsockopt$inet6_buf(r5, 0x29, 0xd3, 0x0, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="38000000031401002dbd700002dcdf250900020073607a310000000008004100736977001400330073797a5f74756e00"], 0x38}, 0x1, 0x0, 0x0, 0x14f7325ddd07b80}, 0x44000)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000214010023bd7000fddbdf080800010000000000090002007379"], 0x24}, 0x1, 0x0, 0x0, 0x60408a0}, 0x488c0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r8, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x80010, r8, 0x1000)

kernel console output (not intermixed with test programs):

p_tables: NFQUEUE target: not valid for this family
[  346.784905][T16006] xt_CT: You must specify a L4 protocol and not use inversions on it
[  346.931313][T16014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.282317][T16022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.790783][T16038] __nla_validate_parse: 10 callbacks suppressed
[  347.790796][T16038] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2765'.
[  347.889160][T16042] xt_CT: You must specify a L4 protocol and not use inversions on it
[  347.942542][T16045] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  347.974020][T16045] netlink: 'syz.0.2769': attribute type 3 has an invalid length.
[  347.979236][T16045] netlink: 'syz.0.2769': attribute type 3 has an invalid length.
[  348.114670][T16052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2771'.
[  348.290240][T16066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2774'.
[  348.475405][T16078] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2778'.
[  348.537667][T16082] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2781'.
[  348.596034][T16084] xt_CT: You must specify a L4 protocol and not use inversions on it
[  348.731386][T16105] netlink: 'syz.0.2785': attribute type 1 has an invalid length.
[  348.772904][T16106] xt_cluster: node mask cannot exceed total number of nodes
[  349.527960][T16156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2791'.
[  349.570905][T16158] sit0: entered promiscuous mode
[  349.579126][T16158] netlink: 'syz.2.2792': attribute type 1 has an invalid length.
[  349.587063][T16158] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2792'.
[  349.792240][T16169] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2795'.
[  349.867875][T16173] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2796'.
[  349.897599][T16170] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  349.903543][T16173] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  349.906909][T16171] netlink: 'syz.2.2794': attribute type 3 has an invalid length.
[  349.912415][T16171] netlink: 'syz.2.2794': attribute type 3 has an invalid length.
[  349.930110][T16173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2796'.
[  349.938150][T16172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  350.122638][T16184] wg2 speed is unknown, defaulting to 1000
[  350.887665][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.075079][T16197] batadv_slave_1: entered promiscuous mode
[  353.077554][T16198] batadv_slave_1: left promiscuous mode
[  353.813815][T16257] netlink: 'syz.1.2819': attribute type 12 has an invalid length.
[  353.817034][T16257] __nla_validate_parse: 2 callbacks suppressed
[  353.817053][T16257] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2819'.
[  353.857092][T16262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2821'.
[  353.871806][T16263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2821'.
[  353.875833][T16262] netlink: 'syz.0.2821': attribute type 12 has an invalid length.
[  353.883406][T16263] netlink: 'syz.0.2821': attribute type 12 has an invalid length.
[  353.933616][T16268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2823'.
[  353.998579][T16273] netlink: 'syz.0.2825': attribute type 1 has an invalid length.
[  354.136705][T16273] 8021q: adding VLAN 0 to HW filter on device bond2
[  354.152279][T16276] syzkaller0: entered promiscuous mode
[  354.156049][T16276] syzkaller0: entered allmulticast mode
[  354.182559][T16287] netlink: 'syz.2.2829': attribute type 12 has an invalid length.
[  354.185621][T16287] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2829'.
[  354.351845][T16291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2830'.
[  354.370736][T16293] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2832'.
[  354.718706][T16322] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2840'.
[  354.741735][T16319] Bluetooth: hci0: unsupported parameter 5161
[  354.756189][T16319] Bluetooth: hci0: unsupported parameter 8192
[  354.764467][T16319] Bluetooth: hci0: unsupported parameter 5161
[  354.769905][T16319] Bluetooth: hci0: unsupported parameter 8192
[  354.777853][T16326] xt_recent: Unsupported userspace flags (000000c5)
[  354.884375][T16333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2844'.
[  354.897809][T16337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2844'.
[  355.441847][ T5663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  355.661097][T16369] tc_dump_action: action bad kind
[  355.924492][T14519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  356.120320][T16401] netlink: 'syz.1.2866': attribute type 12 has an invalid length.
[  356.179376][T16405] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  356.482143][T16428] netlink: 'syz.0.2873': attribute type 1 has an invalid length.
[  356.517109][T16428] xt_socket: unknown flags 0x4c
[  356.537046][T16436] netlink: 'syz.2.2875': attribute type 12 has an invalid length.
[  356.602501][T16443] netlink: 'syz.2.2877': attribute type 32 has an invalid length.
[  356.788678][T16446] netlink: 'syz.2.2878': attribute type 8 has an invalid length.
[  357.335709][T16454] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  357.371828][T16433] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  357.710662][T16474] syzkaller0: entered promiscuous mode
[  357.714832][T16474] syzkaller0: entered allmulticast mode
[  357.722690][T16476] geneve1: entered promiscuous mode
[  357.737370][T16476] syzkaller0: entered promiscuous mode
[  357.741404][T16476] syzkaller0: entered allmulticast mode
[  357.874484][T16480] netlink: 'syz.2.2886': attribute type 3 has an invalid length.
[  357.879165][T16480] netlink: 'syz.2.2886': attribute type 3 has an invalid length.
[  357.928649][T16484] netlink: 'syz.1.2889': attribute type 1 has an invalid length.
[  357.947700][T16484] 8021q: adding VLAN 0 to HW filter on device bond3
[  358.004812][  T508] block nbd1: Possible stuck request ffff888100f88000: control (read@0,1024B). Runtime 60 seconds
[  358.008257][  T508] block nbd1: Possible stuck request ffff888100f98000: control (read@1024,1024B). Runtime 60 seconds
[  358.011818][  T508] block nbd1: Possible stuck request ffff888100f98200: control (read@2048,1024B). Runtime 60 seconds
[  358.015252][  T508] block nbd1: Possible stuck request ffff888100f98400: control (read@3072,1024B). Runtime 60 seconds
[  358.046651][T16494] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  358.087275][T16494] Bluetooth: MGMT ver 1.23
[  358.368034][T16511] xt_CT: You must specify a L4 protocol and not use inversions on it
[  358.542565][T16515] bond6: entered allmulticast mode
[  358.578677][T16510] macvlan0: entered promiscuous mode
[  358.583545][T16510] macvlan0: entered allmulticast mode
[  358.588565][T16510] bond6: (slave macvlan0): Opening slave failed
[  358.881738][T16541] __nla_validate_parse: 21 callbacks suppressed
[  358.881752][T16541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2905'.
[  359.028166][T16541] veth9: entered allmulticast mode
[  359.997884][T16596] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2921'.
[  360.063056][T16600] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2922'.
[  360.087620][T16599] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  360.159956][ T5610] Bluetooth: hci2: command 0x0406 tx timeout
[  360.162327][   T55] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  360.273921][T16614] x_tables: ip_tables: socket match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT
[  360.277686][T16614] IPVS: Unknown mcast interface: pimreg
[  360.284181][   T34] audit: type=1804 audit(1789682185.002:8): pid=16614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2927" name="/newroot/892/cgroup.controllers" dev="tmpfs" ino=4585 res=1 errno=0
[  360.300179][   T34] audit: type=1800 audit(1789682185.002:9): pid=16614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2927" name="cgroup.controllers" dev="tmpfs" ino=4585 res=0 errno=0
[  360.370922][T16617] xt_CT: You must specify a L4 protocol and not use inversions on it
[  360.467417][T16626] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2931'.
[  360.521749][T16618] bond3: ARP target 9.0.0.0 is already present
[  360.531948][T16618] bond3: option arp_ip_target: invalid value (9)
[  360.547606][T16618] bond3 (unregistering): Released all slaves
[  360.582118][T16633] netlink: 'syz.1.2933': attribute type 4 has an invalid length.
[  360.631500][T16633] netlink: 564 bytes leftover after parsing attributes in process `syz.1.2933'.
[  360.673372][T16635] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2934'.
[  361.045087][T16663] netlink: 'syz.0.2944': attribute type 12 has an invalid length.
[  361.047674][T16663] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2944'.
[  361.053730][T16663] netlink: 59 bytes leftover after parsing attributes in process `syz.0.2944'.
[  362.022039][T16676] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2948'.
[  362.110643][T16686] netlink: 3596 bytes leftover after parsing attributes in process `syz.2.2949'.
[  362.581321][T16713] IPVS: set_ctl: invalid protocol: 173 172.30.0.1:20001
[  363.880349][T16759] validate_nla: 1 callbacks suppressed
[  363.880365][T16759] netlink: 'syz.1.2972': attribute type 10 has an invalid length.
[  363.905958][T16761] syzkaller0: left promiscuous mode
[  363.909456][T16761] syzkaller0: left allmulticast mode
[  363.959613][T16765] netlink: 'syz.2.2975': attribute type 7 has an invalid length.
[  363.962534][T16765] netlink: 'syz.2.2975': attribute type 3 has an invalid length.
[  363.965023][T16765] __nla_validate_parse: 8 callbacks suppressed
[  363.965033][T16765] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2975'.
[  364.930982][T16775] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2976'.
[  365.275296][T16800] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2985'.
[  365.307416][T16803] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2987'.
[  365.446885][T16815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2991'.
[  365.457267][T16815] sctp: [Deprecated]: syz.0.2991 (pid 16815) Use of struct sctp_assoc_value in delayed_ack socket option.
[  365.457267][T16815] Use struct sctp_sack_info instead
[  365.474190][T16815] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2991'.
[  365.483662][T16817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2991'.
[  365.484383][T16815] sctp: [Deprecated]: syz.0.2991 (pid 16815) Use of struct sctp_assoc_value in delayed_ack socket option.
[  365.484383][T16815] Use struct sctp_sack_info instead
[  365.508088][T16818] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2991'.
[  365.750986][T16827] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  365.863612][T16827] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  365.954818][T16827] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  365.975471][T16836] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2998'.
[  366.201036][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  366.218802][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  366.270344][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  366.302200][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  366.351296][T16854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3003'.
[  366.388280][T16854] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  366.478287][T16854] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  366.604579][ T5052] udevd[5052]: worker [13792] /devices/virtual/block/nbd1 is taking a long time
[  366.927280][T16893] netlink: 'syz.1.3014': attribute type 12 has an invalid length.
[  367.330431][T16916] netlink: 'syz.0.3021': attribute type 12 has an invalid length.
[  367.374350][T16918] Bluetooth: hci0: unsupported parameter 5135
[  367.376711][T16918] Bluetooth: hci0: unsupported parameter 8192
[  367.378971][T16918] Bluetooth: hci0: unsupported parameter 5135
[  367.383794][T16918] Bluetooth: hci0: unsupported parameter 8192
[  368.245425][T16952] syzkaller1: entered promiscuous mode
[  368.247953][T16952] syzkaller1: entered allmulticast mode
[  368.258168][T16952] af_packet: tpacket_rcv: packet too big, clamped from 64862 to 3952. macoff=96
[  370.905999][T16939] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  371.004723][T16965] __nla_validate_parse: 13 callbacks suppressed
[  371.004740][T16965] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3034'.
[  371.310899][T16990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3042'.
[  371.335230][T16986] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3039'.
[  371.558661][T17010] netlink: 'syz.0.3046': attribute type 1 has an invalid length.
[  371.706465][T17013] sch_fq: defrate 4294967293 ignored.
[  371.714627][T17013] netlink: 'syz.0.3047': attribute type 3 has an invalid length.
[  371.717416][T17013] netlink: 'syz.0.3047': attribute type 3 has an invalid length.
[  371.726981][T17013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3047'.
[  371.731612][T17013] netlink: 'syz.0.3047': attribute type 2 has an invalid length.
[  371.898029][ T5670] IPVS: starting estimator thread 0...
[  371.991851][T17018] IPVS: using max 64 ests per chain, 153600 per kthread
[  372.134629][T17026] gretap1: entered promiscuous mode
[  372.143355][T17026] netlink: 'syz.0.3051': attribute type 1 has an invalid length.
[  372.360285][T17033] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3054'.
[  372.369402][T17033] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3054'.
[  372.539952][T17056] netlink: 'syz.0.3058': attribute type 30 has an invalid length.
[  372.567468][T17059] netlink: 'syz.0.3058': attribute type 30 has an invalid length.
[  372.676160][T17067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3060'.
[  372.691317][T17067] tipc: Resetting bearer <eth:syzkaller0>
[  372.766315][T17067] tipc: Disabling bearer <eth:syzkaller0>
[  372.840648][T17067] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for syzkaller0
[  372.895138][   T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.898168][   T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.906485][T17069] syzkaller0: left promiscuous mode
[  372.908578][T17069] syzkaller0: left allmulticast mode
[  372.949570][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  372.969313][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  372.976767][T17076] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3061'.
[  373.050345][T17081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3063'.
[  373.123008][T17081] tc action pedit offset must be on 32 bit boundaries
[  373.127675][T17081] tc action pedit offset must be on 32 bit boundaries
[  373.129952][T17081] tc action pedit offset must be on 32 bit boundaries
[  373.132291][T17081] tc action pedit offset must be on 32 bit boundaries
[  373.134452][T17081] tc action pedit offset must be on 32 bit boundaries
[  373.136610][T17081] tc action pedit offset must be on 32 bit boundaries
[  373.138697][T17081] tc action pedit offset must be on 32 bit boundaries
[  373.141012][T17081] tc action pedit offset must be on 32 bit boundaries
[  373.143265][T17081] tc action pedit offset must be on 32 bit boundaries
[  373.145371][T17081] tc action pedit offset must be on 32 bit boundaries
[  373.147646][T17081] 0: reclassify loop, rule prio 0, protocol 800
[  373.423447][T17100] rdma_rxe: rxe_newlink: failed to add ipvlan1
[  373.915360][T17124] netlink: 'syz.2.3070': attribute type 15 has an invalid length.
[  373.976606][T17127] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  376.246528][T17092] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  376.485331][T17139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3075'.
[  376.494744][T17142] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3074'.
[  376.556151][T17145] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3077'.
[  376.664422][T17145] tipc: Enabling of bearer <eth:vxcan1> rejected, failed to enable media
[  376.866413][T17158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3078'.
[  376.963751][T17153] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  376.966904][T17164] netpci0: tun_chr_ioctl cmd 1074025678
[  376.969203][T17164] netpci0: group set to 0
[  376.990075][T17158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3078'.
[  377.056948][   T12] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0
[  377.060882][   T12] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0
[  377.081757][   T12] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0
[  377.219146][T17177] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3087'.
[  379.125336][ T1372] ieee802154 phy1 wpan1: encryption failed: -22
[  381.828362][T17240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3103'.
[  381.920972][T17246] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3104'.
[  381.993883][T17249] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20001
[  381.997692][T17248] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20001
[  382.991786][T17292] openvswitch: netlink: Missing valid actions attribute.
[  382.994190][T17292] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  382.997596][T17292] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3119'.
[  383.002623][T17292] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3119'.
[  383.006734][T17292] batadv_slave_0: entered promiscuous mode
[  383.071180][T17291] batadv_slave_0: left promiscuous mode
[  383.207463][T17308] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3122'.
[  383.256956][T17311] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3123'.
[  383.441163][T17321] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  383.615693][T17332] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3128'.
[  385.920808][T17287] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  386.060397][T17354] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3133'.
[  386.072761][T17355] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3133'.
[  386.095088][T17349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3132'.
[  386.970272][T17405] __nla_validate_parse: 2 callbacks suppressed
[  386.970294][T17405] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3141'.
[  386.991584][T17405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3141'.
[  387.570067][T17416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3143'.
[  388.080901][  T508] block nbd1: Possible stuck request ffff888100f88000: control (read@0,1024B). Runtime 90 seconds
[  388.084288][  T508] block nbd1: Possible stuck request ffff888100f98000: control (read@1024,1024B). Runtime 90 seconds
[  388.087484][  T508] block nbd1: Possible stuck request ffff888100f98200: control (read@2048,1024B). Runtime 90 seconds
[  388.093001][  T508] block nbd1: Possible stuck request ffff888100f98400: control (read@3072,1024B). Runtime 90 seconds
[  389.654190][T17406] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  389.664389][T17406] bond3 (unregistering): Released all slaves
[  392.601219][T17419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3143'.
[  392.790988][T17426] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  392.850053][T17429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  393.064292][T17454] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3150'.
[  393.589714][T17477] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3156'.
[  393.610546][T17479] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3157'.
[  393.722801][T17485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3159'.
[  393.733224][T17485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3159'.
[  393.756517][T17485] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3159'.
[  393.886471][T17488] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  393.892833][T17491] netlink: 'syz.1.3160': attribute type 3 has an invalid length.
[  393.896221][T17491] netlink: 'syz.1.3160': attribute type 3 has an invalid length.
[  394.193508][T17509] netlink: 'syz.2.3168': attribute type 1 has an invalid length.
[  394.214848][T17509] bond7: entered promiscuous mode
[  394.217071][T17509] 8021q: adding VLAN 0 to HW filter on device bond7
[  394.246627][T17509] bond7: (slave bridge4): making interface the new active one
[  394.251872][T17509] bridge4: entered promiscuous mode
[  394.254924][T17509] bond7: (slave bridge4): Enslaving as an active interface with an up link
[  394.382448][T17515] netlink: 'syz.2.3170': attribute type 1 has an invalid length.
[  394.455561][T17510] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.600928][T17519] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3170'.
[  394.604342][T17519] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3170'.
[  394.799120][T17510] macvlan0: left promiscuous mode
[  394.899386][T17510] macvtap0: left promiscuous mode
[  394.913234][T17523] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3172'.
[  394.970678][T17510] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  395.031753][T17529] xt_hashlimit: size too large, truncated to 1048576
[  395.034075][T17529] xt_hashlimit: max too large, truncated to 1048576
[  395.036438][T17529] xt_hashlimit: Unknown mode mask B86BCC12, kernel too old?
[  395.051548][T17510] vti0: left promiscuous mode
[  395.061330][T17510] vti0: left allmulticast mode
[  395.183678][T17510] geneve2: left promiscuous mode
[  395.187465][T17510] geneve2: left allmulticast mode
[  395.210292][T17510] gretap1: left promiscuous mode
[  395.215145][T17510] geneve3: left promiscuous mode
[  395.347199][T17510] veth9: left allmulticast mode
[  395.449138][T17515] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  395.520754][   T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  395.529559][   T13] netdevsim netdevsim1 netdevsim1: unset [0, 1] type 1 family 0 port 4352 - 0
[  395.539743][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  395.544656][   T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  395.556644][   T13] netdevsim netdevsim1 netdevsim2: unset [0, 1] type 1 family 0 port 4352 - 0
[  395.570759][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  395.584305][   T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  395.592184][   T13] netdevsim netdevsim1 netdevsim3: unset [0, 1] type 1 family 0 port 4352 - 0
[  395.602533][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  396.216598][T17572] netlink: 'syz.2.3191': attribute type 21 has an invalid length.
[  396.219355][T17572] IPv6: NLM_F_CREATE should be specified when creating new route
[  396.347729][T17576] wg2 speed is unknown, defaulting to 1000
[  396.394371][T17576] netlink: 'syz.2.3192': attribute type 1 has an invalid length.
[  396.423351][T17576] 8021q: adding VLAN 0 to HW filter on device bond8
[  396.429121][T17576] bond8: entered promiscuous mode
[  396.435264][T17576] bond8: entered allmulticast mode
[  398.136447][T17592] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  398.379145][T17618] netlink: 'syz.2.3200': attribute type 4 has an invalid length.
[  398.392541][T17618] netlink: 'syz.2.3200': attribute type 4 has an invalid length.
[  398.571868][T17628] __nla_validate_parse: 6 callbacks suppressed
[  398.571888][T17628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3202'.
[  398.576770][T17629] netlink: 'syz.0.3202': attribute type 3 has an invalid length.
[  398.593340][T17629] netlink: 'syz.0.3202': attribute type 3 has an invalid length.
[  398.771663][T17641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3205'.
[  398.779878][T17641] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3205'.
[  398.928702][T17648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3208'.
[  399.156126][T17663] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3215'.
[  399.173552][T17663] syzkaller1: entered promiscuous mode
[  399.177684][T17663] syzkaller1: entered allmulticast mode
[  399.233244][T17667] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3216'.
[  399.395077][T17675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  399.402922][T17675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  399.409316][T17673] ieee802154 phy1 wpan1: encryption failed: -22
[  400.034712][T17683] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  400.038744][T17683] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  400.045552][T17683] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  400.058645][T14498] bridge0: port 2(bridge_slave_1) entered blocking state
[  400.061164][T14498] bridge0: port 2(bridge_slave_1) entered forwarding state
[  400.093613][T17683] validate_nla: 56 callbacks suppressed
[  400.093628][T17683] netlink: 'syz.1.3222': attribute type 3 has an invalid length.
[  400.098367][T17683] netlink: 'syz.1.3222': attribute type 3 has an invalid length.
[  400.179353][T17687] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3223'.
[  400.340393][T17694] lo speed is unknown, defaulting to 1000
[  400.342696][T17694] lo speed is unknown, defaulting to 1000
[  400.345327][T17694] lo speed is unknown, defaulting to 1000
[  400.348453][T17694] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  400.385412][T17694] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  400.424802][T17694] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  400.466364][T17694] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22
[  400.623227][T17694] lo speed is unknown, defaulting to 1000
[  400.657524][T17705] batman_adv: batadv0: Adding interface: veth0
[  400.663851][T17705] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  400.686694][T17705] batman_adv: batadv0: Interface activated: veth0
[  400.693340][T17694] lo speed is unknown, defaulting to 1000
[  400.704217][T17705] batman_adv: batadv0: Removing interface: gretap1
[  400.718356][T17705] batman_adv: batadv0: Interface deactivated: veth0
[  400.724784][T17705] batman_adv: batadv0: Removing interface: veth0
[  400.768604][T17705] team0: Port device vlan0 removed
[  400.851437][T17694] lo speed is unknown, defaulting to 1000
[  400.967427][T17716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3231'.
[  401.029389][T17718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3231'.
[  401.727940][T17726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  401.914316][T17731] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3235'.
[  402.107409][T17739] netem: change failed
[  402.265115][T17746] netlink: 'syz.0.3241': attribute type 1 has an invalid length.
[  402.308813][T17746] bond4: option mode: invalid value (7)
[  402.317486][T17746] bond4 (unregistering): Released all slaves
[  402.341221][T17747] : renamed from dummy0
[  402.573111][T17768] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  402.606493][   T32] lo speed is unknown, defaulting to 1000
[  402.624246][T17769] netlink: 'syz.0.3246': attribute type 3 has an invalid length.
[  402.640864][T17769] netlink: 'syz.0.3246': attribute type 3 has an invalid length.
[  403.626922][T17827] syzkaller0: entered promiscuous mode
[  403.630567][T17827] syzkaller0: entered allmulticast mode
[  407.062262][T17853] __nla_validate_parse: 8 callbacks suppressed
[  407.062275][T17853] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3273'.
[  407.141142][T14348] block nbd64: NBD_DISCONNECT
[  407.178988][T17858] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3275'.
[  407.197864][   T34] audit: type=1804 audit(1789682231.912:10): pid=17858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3275" name="/newroot/634/cgroup.controllers" dev="tmpfs" ino=3269 res=1 errno=0
[  407.208556][T17861] netlink: 62 bytes leftover after parsing attributes in process `syz.1.3274'.
[  407.216826][   T34] audit: type=1800 audit(1789682231.912:11): pid=17858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3275" name="cgroup.controllers" dev="tmpfs" ino=3269 res=0 errno=0
[  407.247822][   T34] audit: type=1800 audit(1789682231.942:12): pid=17859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3275" name="cgroup.controllers" dev="tmpfs" ino=3269 res=0 errno=0
[  407.458211][T17871] netlink: 592 bytes leftover after parsing attributes in process `syz.1.3280'.
[  407.474748][T17872] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3279'.
[  407.499751][T17872] netlink: 'syz.2.3279': attribute type 7 has an invalid length.
[  407.509731][T17872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3279'.
[  407.516897][T17874] netlink: 884 bytes leftover after parsing attributes in process `syz.0.3281'.
[  407.566321][T17877] netlink: 'syz.0.3282': attribute type 1 has an invalid length.
[  407.672626][T17884] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  408.327602][T17892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3285'.
[  408.498452][T17894] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  408.506951][T17895] netlink: 'syz.1.3286': attribute type 3 has an invalid length.
[  408.517707][T17895] netlink: 'syz.1.3286': attribute type 3 has an invalid length.
[  408.580717][T17897] netlink: 'syz.0.3287': attribute type 1 has an invalid length.
[  408.698672][T17897] 8021q: adding VLAN 0 to HW filter on device bond5
[  408.722162][T17897] No such timeout policy "syz1"
[  408.729491][T17897] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  408.738646][T17897] syzkaller0: entered promiscuous mode
[  408.742596][T17897] syzkaller0: entered allmulticast mode
[  408.745666][T17897] tipc: Resetting bearer <eth:syzkaller0>
[  408.789174][T17897] tipc: Resetting bearer <eth:syzkaller0>
[  408.811473][T17897] bond5: (slave geneve3): making interface the new active one
[  408.815946][T17897] bond5: (slave geneve3): Enslaving as an active interface with an up link
[  408.822967][T17897] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3287'.
[  408.922907][T17918] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3290'.
[  409.763484][T17960] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  409.910113][T17972] veth1_macvtap: left promiscuous mode
[  409.913528][T17972] macsec0: entered promiscuous mode
[  410.261790][T17988] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  410.294196][T18000] pim6reg1: entered promiscuous mode
[  410.296194][T18000] pim6reg1: entered allmulticast mode
[  411.303211][T18047] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  414.251827][T18050] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  414.255863][T18051] __nla_validate_parse: 5 callbacks suppressed
[  414.255880][T18051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3329'.
[  415.448719][T18140] xt_CT: You must specify a L4 protocol and not use inversions on it
[  415.587718][T18149] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3348'.
[  415.614083][T18149] xt_TCPMSS: Only works on TCP SYN packets
[  415.615624][T18151] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3349'.
[  415.752084][T18158] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9
[  416.196986][T18188] xt_CT: You must specify a L4 protocol and not use inversions on it
[  416.214836][T18190] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  416.257277][T18191] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  416.274605][T18190] netlink: 'syz.1.3361': attribute type 3 has an invalid length.
[  416.278273][T18190] netlink: 'syz.1.3361': attribute type 3 has an invalid length.
[  416.420456][T18206] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3366'.
[  416.468964][T18209] xt_CT: You must specify a L4 protocol and not use inversions on it
[  416.537111][T18213] macsec1: entered promiscuous mode
[  416.588237][T18219] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3372'.
[  416.605146][T18220] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3372'.
[  416.717091][T18228] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3375'.
[  416.754902][T18231] xt_CT: You must specify a L4 protocol and not use inversions on it
[  417.679347][T18238] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3378'.
[  417.752115][T18246] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3379'.
[  417.758215][T18246] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3379'.
[  418.162818][  T508] block nbd1: Possible stuck request ffff888100f88000: control (read@0,1024B). Runtime 120 seconds
[  418.166374][  T508] block nbd1: Possible stuck request ffff888100f98000: control (read@1024,1024B). Runtime 120 seconds
[  418.169967][  T508] block nbd1: Possible stuck request ffff888100f98200: control (read@2048,1024B). Runtime 120 seconds
[  418.173448][  T508] block nbd1: Possible stuck request ffff888100f98400: control (read@3072,1024B). Runtime 120 seconds
[  418.213160][T18271] xt_CT: You must specify a L4 protocol and not use inversions on it
[  418.653554][T18293] netlink: 'syz.2.3389': attribute type 9 has an invalid length.
[  418.664833][T18294] netlink: 'syz.2.3389': attribute type 10 has an invalid length.
[  419.092651][T18314] tipc: Resetting bearer <eth:syzkaller0>
[  419.225556][T18313] tipc: Resetting bearer <eth:syzkaller0>
[  419.229254][T14496] tipc: Resetting bearer <eth:syzkaller0>
[  419.243518][T18322] Bluetooth: hci0: invalid length 0, exp 1 for type 31
[  419.493329][T18329] __nla_validate_parse: 4 callbacks suppressed
[  419.493349][T18329] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3402'.
[  419.531742][T18336] bond5: option mode: invalid value (7)
[  419.543352][T18336] bond5 (unregistering): Released all slaves
[  419.593770][T18328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3402'.
[  419.603382][T18328] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3402'.
[  419.618531][T18329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3402'.
[  419.628986][T18329] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3402'.
[  419.811464][T18357] No such timeout policy "syz1"
[  419.956449][T18365] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3410'.
[  419.963642][T18365] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3410'.
[  420.152551][T18375] xt_CT: You must specify a L4 protocol and not use inversions on it
[  420.239996][T18380] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  420.256723][T18380] netlink: 'syz.2.3414': attribute type 3 has an invalid length.
[  420.259464][T18380] netlink: 'syz.2.3414': attribute type 3 has an invalid length.
[  422.471636][T18336] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  422.699047][T18395] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3418'.
[  422.769370][T18396] xt_CT: You must specify a L4 protocol and not use inversions on it
[  423.017393][T18407] syzkaller0: entered promiscuous mode
[  423.032912][T18407] syzkaller0: entered allmulticast mode
[  423.149407][T18413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3424'.
[  423.220164][T18413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3424'.
[  423.477745][T18432] netlink: 'syz.1.3427': attribute type 1 has an invalid length.
[  423.497760][T18431] veth1_macvtap: entered promiscuous mode
[  423.503701][T18431] macsec1: entered promiscuous mode
[  423.625941][T18438] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  423.721447][T18444] netlink: 'syz.0.3434': attribute type 11 has an invalid length.
[  423.791965][T18447] xt_hashlimit: size too large, truncated to 1048576
[  424.204563][T18469] 8021q: adding VLAN 0 to HW filter on device bond0
[  424.222912][T18469] bond6: (slave bond0): making interface the new active one
[  424.228536][T18469] bond6: (slave bond0): Enslaving as an active interface with an up link
[  424.233485][T18469] netlink: 'syz.0.3444': attribute type 4 has an invalid length.
[  424.243754][T18469] .`: renamed from bond0 (while UP)
[  424.252580][T18473] xt_CT: You must specify a L4 protocol and not use inversions on it
[  424.622002][T18496] __nla_validate_parse: 12 callbacks suppressed
[  424.622024][T18496] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3453'.
[  424.637959][T18490] ip_tables: iptables: counters copy to user failed while replacing table
[  424.717566][   T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0
[  424.728046][   T12] netdevsim netdevsim0 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0
[  424.738199][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  425.629360][T18514] lo: entered allmulticast mode
[  425.642373][T18514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3459'.
[  425.652247][T18514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3459'.
[  425.683179][T18514] netlink: 'syz.0.3459': attribute type 6 has an invalid length.
[  425.693862][T18516] netlink: 'syz.1.3460': attribute type 1 has an invalid length.
[  425.697803][T18519] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3461'.
[  425.763662][T18522] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3459'.
[  425.829151][T18513] lo: left allmulticast mode
[  426.113748][T18538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3465'.
[  426.327135][T18557] netlink: 'syz.1.3472': attribute type 1 has an invalid length.
[  426.389158][T18560] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  426.404120][T18560] bond5 (unregistering): Released all slaves
[  426.805788][T18577] xt_CT: You must specify a L4 protocol and not use inversions on it
[  426.860939][T18580] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3478'.
[  426.866898][T18580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3478'.
[  426.877507][T18580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3478'.
[  426.887111][T18580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3478'.
[  426.997057][T18586] tipc: Resetting bearer <eth:syzkaller0>
[  427.021363][T18586] syzkaller0: left promiscuous mode
[  427.023163][T18586] syzkaller0: left allmulticast mode
[  427.028180][T18585] tipc: Resetting bearer <eth:syzkaller0>
[  427.059446][T18590] SET target dimension over the limit!
[  427.232375][T18601] atomic_op ffff888114798198 conn xmit_atomic 0000000000000000
[  427.251021][T18609] rdma_op ffff88816c1fa1f0 conn xmit_rdma 0000000000000000
[  427.254108][T18609] rdma_op ffff8881b9b5e1f0 conn xmit_rdma 0000000000000000
[  427.259528][T18609] rdma_op ffff8881b9b599f0 conn xmit_rdma 0000000000000000
[  427.267616][T18609] rdma_op ffff8881b9b5d1f0 conn xmit_rdma 0000000000000000
[  427.273794][T18609] rdma_op ffff88816b5851f0 conn xmit_rdma 0000000000000000
[  427.282119][T18609] rdma_op ffff88816b5849f0 conn xmit_rdma 0000000000000000
[  427.292665][T18609] rdma_op ffff88811479f1f0 conn xmit_rdma 0000000000000000
[  427.305039][T18609] rdma_op ffff88811479b9f0 conn xmit_rdma 0000000000000000
[  427.321101][T18609] rdma_op ffff88811479b1f0 conn xmit_rdma 0000000000000000
[  427.324677][T18609] rdma_op ffff8881147989f0 conn xmit_rdma 0000000000000000
[  427.482994][T14498] tipc: Resetting bearer <eth:syzkaller0>
[  427.729296][T18645] netlink: 'syz.1.3498': attribute type 1 has an invalid length.
[  427.773492][T18645] bond5: entered promiscuous mode
[  427.778372][T18645] 8021q: adding VLAN 0 to HW filter on device bond5
[  427.799358][T18645] 8021q: adding VLAN 0 to HW filter on device bond5
[  427.803695][T18645] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  427.807834][T18645] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  427.820114][T18645] bond5: (slave ip6gre1): making interface the new active one
[  427.823185][T18645] ip6gre1: entered promiscuous mode
[  427.826314][T18645] bond5: (slave ip6gre1): Enslaving as an active interface with an up link
[  427.902654][T18656] bridge0: port 1(syz_tun) entered blocking state
[  427.918788][T18656] bridge0: port 1(syz_tun) entered disabled state
[  427.924205][T18656] syz_tun: entered allmulticast mode
[  427.934987][T18656] syz_tun: entered promiscuous mode
[  427.937993][T18656] bridge0: port 1(syz_tun) entered blocking state
[  427.942420][T18656] bridge0: port 1(syz_tun) entered forwarding state
[  428.115120][T18666] sctp: [Deprecated]: syz.2.3502 (pid 18666) Use of struct sctp_assoc_value in delayed_ack socket option.
[  428.115120][T18666] Use struct sctp_sack_info instead
[  428.725549][T18704] IPVS: length: 15 != 8
[  428.728828][T18704] x_tables: ip6_tables: mh match: only valid for protocol 135
[  429.664467][T18735] netlink: 'syz.0.3521': attribute type 3 has an invalid length.
[  429.689426][T18735] netlink: 'syz.0.3521': attribute type 3 has an invalid length.
[  430.098624][T18753] gretap3: entered promiscuous mode
[  430.417539][T18764] netlink: 'syz.1.3531': attribute type 1 has an invalid length.
[  430.421485][T18764] __nla_validate_parse: 27 callbacks suppressed
[  430.421503][T18764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3531'.
[  430.842713][T18780] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3537'.
[  430.974960][T18787] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  430.991688][T18787] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  431.055644][T18793] syzkaller0: entered promiscuous mode
[  431.064137][T18793] syzkaller0: entered allmulticast mode
[  431.315976][T18799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3543'.
[  431.318864][T18799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3543'.
[  432.806873][T18863] xt_CT: You must specify a L4 protocol and not use inversions on it
[  432.848649][T18865] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3555'.
[  432.873268][T18867] dvmrp1: entered allmulticast mode
[  432.910294][T18865] bridge0: port 3(veth0) entered blocking state
[  432.931490][T18865] bridge0: port 3(veth0) entered disabled state
[  432.934553][T18865] veth0: entered allmulticast mode
[  432.947009][T18865] veth0: entered promiscuous mode
[  432.963863][T18865] bridge0: port 3(veth0) entered blocking state
[  432.966421][T18865] bridge0: port 3(veth0) entered forwarding state
[  433.155076][T18882] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3562'.
[  433.218347][T18887] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3564'.
[  433.553656][T18910] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3570'.
[  433.564105][T18912] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3570'.
[  433.770477][T18927] netlink: 'syz.1.3575': attribute type 1 has an invalid length.
[  433.839403][T18933] sctp: [Deprecated]: syz.2.3577 (pid 18933) Use of struct sctp_assoc_value in delayed_ack socket option.
[  433.839403][T18933] Use struct sctp_sack_info instead
[  433.868703][T18927] 8021q: adding VLAN 0 to HW filter on device bond6
[  434.042748][T18943] syzkaller1: entered promiscuous mode
[  434.060328][T18943] syzkaller1: entered allmulticast mode
[  434.065115][T18945] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3580'.
[  434.166247][T18948] xt_CT: You must specify a L4 protocol and not use inversions on it
[  434.317238][T18960] netlink: 'syz.1.3585': attribute type 8 has an invalid length.
[  434.388876][T18966] netlink: 'syz.1.3585': attribute type 8 has an invalid length.
[  434.397938][T18967] netlink: 'syz.1.3585': attribute type 8 has an invalid length.
[  435.439466][T19010] netlink: 'syz.0.3598': attribute type 4 has an invalid length.
[  435.504410][ T5670] lo speed is unknown, defaulting to 1000
[  435.527868][ T5670] syz_device_name_32_chars_1234567: Port: 1 Link DOWN
[  435.708681][T19027] __nla_validate_parse: 15 callbacks suppressed
[  435.708694][T19027] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3605'.
[  435.773203][T19035] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3606'.
[  435.838180][T19025] Unknown options in mask 6
[  435.845803][T19025] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3603'.
[  435.854137][T19025] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3603'.
[  436.034663][T19031] 8021q: adding VLAN 0 to HW filter on device .`
[  436.046796][T19031] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  436.054506][    T9] lo speed is unknown, defaulting to 1000
[  436.056306][    T9] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE
[  436.415289][T19074] sctp: [Deprecated]: syz.0.3617 (pid 19074) Use of struct sctp_assoc_value in delayed_ack socket option.
[  436.415289][T19074] Use struct sctp_sack_info instead
[  436.512852][T19083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3620'.
[  436.826274][T19099] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3626'.
[  436.858588][T19099] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3626'.
[  437.018223][T19111] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0
[  437.027977][T19112] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3628'.
[  437.035183][T19112] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3628'.
[  437.054055][T19117] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  437.079479][T19117] netlink: 'syz.2.3630': attribute type 3 has an invalid length.
[  437.085807][T19112] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3628'.
[  437.094430][T19117] netlink: 'syz.2.3630': attribute type 3 has an invalid length.
[  437.237810][T19126] netlink: 'syz.0.3633': attribute type 2 has an invalid length.
[  437.307702][T19129] IPVS: Scheduler module ip_vs_mh  not found
[  437.430204][T19140] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  438.597033][T19182] netlink: 'syz.0.3648': attribute type 4 has an invalid length.
[  438.797740][T19191] netlink: 'syz.0.3649': attribute type 1 has an invalid length.
[  439.327131][T19204] IPVS: set_ctl: invalid protocol: 47 10.1.1.2:20004
[  439.677295][T19215] netlink: 'syz.0.3657': attribute type 6 has an invalid length.
[  439.772666][T19224] netlink: 'syz.0.3660': attribute type 12 has an invalid length.
[  439.907720][T19228] xt_CT: You must specify a L4 protocol and not use inversions on it
[  440.098901][T19240] syzkaller0: entered promiscuous mode
[  440.105093][T19240] syzkaller0: entered allmulticast mode
[  440.118972][T19241] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  440.138471][T19235] tipc: Resetting bearer <eth:syzkaller0>
[  440.296045][T19235] tipc: Disabling bearer <eth:syzkaller0>
[  440.316019][T19246] netlink: 'syz.0.3667': attribute type 3 has an invalid length.
[  440.319261][T19246] netlink: 'syz.0.3667': attribute type 3 has an invalid length.
[  440.575381][ T1372] ieee802154 phy1 wpan1: encryption failed: -22
[  440.603185][T19258] xt_CT: You must specify a L4 protocol and not use inversions on it
[  440.676915][T19260] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  440.692224][T19266] xt_TPROXY: Can be used only with -p tcp or -p udp
[  440.722691][T19260] bond0 (unregistering): Released all slaves
[  440.778414][T19270] __nla_validate_parse: 10 callbacks suppressed
[  440.778428][T19270] netlink: 18 bytes leftover after parsing attributes in process `syz.1.3675'.
[  440.787330][T19270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3675'.
[  440.792290][T19270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3675'.
[  440.943913][T19273] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3674'.
[  440.977451][T19277] sctp: [Deprecated]: syz.1.3678 (pid 19277) Use of int in maxseg socket option.
[  440.977451][T19277] Use struct sctp_assoc_value instead
[  441.279310][T19283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3679'.
[  441.351985][T19286] xt_CT: You must specify a L4 protocol and not use inversions on it
[  441.570181][T19295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3683'.
[  441.575915][T19295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3683'.
[  441.648553][T19299] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3685'.
[  441.736889][T19310] xt_CT: You must specify a L4 protocol and not use inversions on it
[  441.963660][T19325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3693'.
[  442.147175][T19328] ip_tables: iptables: counters copy to user failed while replacing table
[  442.447209][T19338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3697'.
[  442.632055][T19348] syzkaller0: entered promiscuous mode
[  442.635601][T19348] syzkaller0: entered allmulticast mode
[  442.641864][T19348] tipc: Resetting bearer <eth:syzkaller0>
[  443.071204][   T57] block nbd3: Receive control failed (result -32)
[  443.286299][T19398] validate_nla: 48 callbacks suppressed
[  443.286320][T19398] netlink: 'syz.1.3708': attribute type 1 has an invalid length.
[  443.568528][T19406] bond0 (unregistering): Released all slaves
[  444.420390][T19437] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  444.661094][T19444] sctp: [Deprecated]: syz.2.3721 (pid 19444) Use of int in max_burst socket option.
[  444.661094][T19444] Use struct sctp_assoc_value instead
[  444.868980][T19452] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  444.923591][T19455] netlink: 'syz.2.3722': attribute type 3 has an invalid length.
[  444.928466][T19455] netlink: 'syz.2.3722': attribute type 3 has an invalid length.
[  445.276981][T19466] xt_CT: You must specify a L4 protocol and not use inversions on it
[  445.415762][T19473] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  445.457403][T19477] netlink: 'syz.0.3727': attribute type 3 has an invalid length.
[  445.475087][T19477] netlink: 'syz.0.3727': attribute type 3 has an invalid length.
[  445.572248][T19482] x_tables: duplicate underflow at hook 1
[  446.222134][T19486] __nla_validate_parse: 4 callbacks suppressed
[  446.222162][T19486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3730'.
[  446.277077][T19485] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3730'.
[  446.299532][T19485] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3730'.
[  446.313720][T19485] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3730'.
[  446.325150][T19485] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3730'.
[  446.348902][T19485] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3730'.
[  446.354496][T19485] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3730'.
[  446.368811][T19485] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3730'.
[  446.380428][T19485] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3730'.
[  446.391010][T19485] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3730'.
[  446.668805][T19509] xt_CT: You must specify a L4 protocol and not use inversions on it
[  447.388901][T19560] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  447.674201][T19582] macvtap0: entered promiscuous mode
[  448.244317][  T508] block nbd1: Possible stuck request ffff888100f88000: control (read@0,1024B). Runtime 150 seconds
[  448.247835][  T508] block nbd1: Possible stuck request ffff888100f98000: control (read@1024,1024B). Runtime 150 seconds
[  448.251368][  T508] block nbd1: Possible stuck request ffff888100f98200: control (read@2048,1024B). Runtime 150 seconds
[  448.254936][  T508] block nbd1: Possible stuck request ffff888100f98400: control (read@3072,1024B). Runtime 150 seconds
[  449.030360][T19633] tipc: Resetting bearer <eth:syzkaller0>
[  449.043529][T19632] tipc: Resetting bearer <eth:syzkaller0>
[  449.411648][T14500] tipc: Resetting bearer <eth:syzkaller0>
[  449.739560][T19681] nbd: must specify at least one socket
[  449.765027][T19687] Set syz0 is full, maxelem 0 reached
[  449.778671][T19689] Set syz0 is full, maxelem 0 reached
[  449.821435][T19687] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  449.823736][T19687] IPv6: NLM_F_CREATE should be set when creating new route
[  450.029389][T19704] SET target dimension over the limit!
[  450.186967][T19712] netlink: 'syz.0.3789': attribute type 1 has an invalid length.
[  450.681295][T19740] 8021q: adding VLAN 0 to HW filter on device bond7
[  450.781972][   T34] audit: type=1107 audit(1789682275.492:13): pid=19756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Oc(5XU~#6161&PvARUOav״3"ĊD* $INX&hںy"^	ځ[H*If2 `*ch`}No֍a%b>Mn.%Xly	j%e2U'
[  451.918131][T19780] netlink: 'syz.0.3805': attribute type 2 has an invalid length.
[  451.925989][T19781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  451.936321][T19780] netlink: 'syz.0.3805': attribute type 1 has an invalid length.
[  451.941593][T19780] __nla_validate_parse: 82 callbacks suppressed
[  451.941612][T19780] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3805'.
[  451.952827][T19789] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3804'.
[  452.533088][T19798] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3809'.
[  452.549072][T19798] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3809'.
[  452.560568][T19798] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3809'.
[  452.685293][T19800] netlink: 'syz.1.3810': attribute type 5 has an invalid length.
[  452.757026][T19802] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3811'.
[  452.794572][T19802] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3811'.
[  453.519548][T19828] netlink: 'syz.2.3817': attribute type 21 has an invalid length.
[  453.527237][T19828] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3817'.
[  453.533031][T19828] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3817'.
[  455.277849][T19870] )fl: entered promiscuous mode
[  455.461338][T19870] tunl0: entered promiscuous mode
[  455.480858][T19870] gre0: entered promiscuous mode
[  455.493694][T19870] gretap0: entered promiscuous mode
[  455.513015][T19870] erspan0: entered promiscuous mode
[  455.529313][T19870] ip_vti0: entered promiscuous mode
[  455.544315][T19870] ip6_vti0: entered promiscuous mode
[  455.599352][T19870] ip6tnl0: entered promiscuous mode
[  455.657801][T19870] ip6gre0: entered promiscuous mode
[  455.673830][T19870] syz_tun: entered promiscuous mode
[  455.708829][T19870] ip6gretap0: entered promiscuous mode
[  455.724523][T19870] bridge0: entered promiscuous mode
[  455.784127][T19887] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3830'.
[  455.823396][T19892] netlink: 'syz.0.3832': attribute type 11 has an invalid length.
[  455.885840][T19892] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  456.282862][T19918] syzkaller0: entered promiscuous mode
[  456.289244][T19918] syzkaller0: entered allmulticast mode
[  456.385234][T19911] .`: (slave bond_slave_1): Releasing backup interface
[  456.896145][T19937] wg2 speed is unknown, defaulting to 1000
[  456.899360][T19937] lo speed is unknown, defaulting to 1000
[  456.952725][T19941] __nla_validate_parse: 4 callbacks suppressed
[  456.952744][T19941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3845'.
[  457.494320][T19964] bond0: entered allmulticast mode
[  457.712660][T19980] ip6erspan1: entered allmulticast mode
[  457.724531][T19981] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3856'.
[  457.730377][T19981] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3856'.
[  458.159524][T19996] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3858'.
[  458.169734][T19996] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3858'.
[  458.375943][T20007] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3861'.
[  458.624632][T20014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3864'.
[  458.643186][T20014] netlink: 13 bytes leftover after parsing attributes in process `syz.1.3864'.
[  458.792678][T20024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3867'.
[  458.957746][T20033] ip_tables: iptables: counters copy to user failed while replacing table
[  459.338953][T20052] x_tables: duplicate underflow at hook 1
[  459.366843][T20052] Bluetooth: hci0: invalid length 0, exp 2 for type 4
[  462.024434][T20044] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  462.316210][T20074] xt_CT: You must specify a L4 protocol and not use inversions on it
[  462.395245][T20076] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3883'.
[  462.740739][T17044] bridge0: port 2(bridge_slave_1) entered disabled state
[  463.391510][T20116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3892'.
[  463.394638][T20116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3892'.
[  464.056415][T20152] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3903'.
[  464.153145][T20157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3905'.
[  464.321648][T20162] can: request_module (can-proto-3) failed.
[  464.362677][T20169] netlink: 'syz.2.3908': attribute type 11 has an invalid length.
[  464.365716][T20169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3908'.
[  464.409377][T20171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3909'.
[  464.551690][T20176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3911'.
[  464.670839][T20184] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3912'.
[  465.573299][T20230] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3921'.
[  468.341555][T20212] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  468.561244][T20237] No such timeout policy "syz0"
[  468.565420][T20242] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3925'.
[  468.603216][T20238] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3923'.
[  468.614803][T20237] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3923'.
[  468.825870][T20270] xt_CT: You must specify a L4 protocol and not use inversions on it
[  468.996788][    C1] vcan0: j1939_tp_rxtimer: 0xffff88816b2d0000: rx timeout, send abort
[  469.033990][T20282] IPVS: Scheduler module ip_vs_sip not found
[  469.044507][T20282] netlink: 'syz.1.3933': attribute type 1 has an invalid length.
[  469.086432][T20282] 8021q: adding VLAN 0 to HW filter on device bond8
[  469.104606][T20289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3933'.
[  469.214099][T20295] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3936'.
[  469.307534][T20308] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3940'.
[  469.377137][T20303] wg2 speed is unknown, defaulting to 1000
[  469.442897][T20320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3942'.
[  469.463292][T20320] tipc: Resetting bearer <eth:syzkaller0>
[  469.496998][    C1] vcan0: j1939_tp_rxtimer: 0xffff88817223e800: rx timeout, send abort
[  469.505515][    C1] vcan0: j1939_tp_rxtimer: 0xffff88816b2d0000: abort rx timeout. Force session deactivation
[  469.542136][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88817223e800: connection exists (fe ff). last cmd: 20
[  469.560185][T20320] block nbd4: server does not support multiple connections per device.
[  469.563391][T20320] block nbd4: shutting down sockets
[  469.622475][T20319] tipc: Resetting bearer <eth:syzkaller0>
[  469.626187][T14496] tipc: Resetting bearer <eth:syzkaller0>
[  469.747175][T20331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3945'.
[  469.804849][    C1] vcan0: j1939_tp_rxtimer: 0xffff888172049400: rx timeout, send abort
[  469.962477][T20335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3947'.
[  470.194152][T20358] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3951'.
[  470.201507][T20358] syzkaller0: entered promiscuous mode
[  470.203630][T20358] syzkaller0: entered allmulticast mode
[  470.308320][    C1] vcan0: j1939_tp_rxtimer: 0xffff888172049400: abort rx timeout. Force session deactivation
[  470.544555][T20374] syzkaller1: entered promiscuous mode
[  470.549712][T20374] syzkaller1: entered allmulticast mode
[  470.737671][T20387] Bluetooth: hci0: unsupported parameter 5134
[  470.745292][T20387] Bluetooth: hci0: unsupported parameter 8192
[  470.752172][T20387] Bluetooth: hci0: unsupported parameter 5134
[  470.761060][T20387] Bluetooth: hci0: unsupported parameter 8192
[  473.874082][T20401] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3964'.
[  474.742119][T20432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3970'.
[  475.696967][T20449] netlink: 'syz.0.3971': attribute type 3 has an invalid length.
[  475.701313][T20449] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3971'.
[  477.089184][T20417] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  477.248116][T20453] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3972'.
[  477.544006][T20470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3976'.
[  477.716462][T20478] xt_CT: You must specify a L4 protocol and not use inversions on it
[  477.743925][T20480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3979'.
[  478.002132][T20497] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3983'.
[  478.261303][T20512] tipc: Resetting bearer <eth:syzkaller0>
[  478.310084][T20511] tipc: Resetting bearer <eth:syzkaller0>
[  478.325012][  T508] block nbd1: Possible stuck request ffff888100f88000: control (read@0,1024B). Runtime 180 seconds
[  478.328653][  T508] block nbd1: Possible stuck request ffff888100f98000: control (read@1024,1024B). Runtime 180 seconds
[  478.332553][  T508] block nbd1: Possible stuck request ffff888100f98200: control (read@2048,1024B). Runtime 180 seconds
[  478.336175][  T508] block nbd1: Possible stuck request ffff888100f98400: control (read@3072,1024B). Runtime 180 seconds
[  478.611537][T20531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3993'.
[  478.622584][T20531] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3993'.
[  478.743393][T20541] xt_CT: You must specify a L4 protocol and not use inversions on it
[  478.897576][T20547] can: request_module (can-proto-3) failed.
[  479.247802][T20562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4001'.
[  479.253297][T20562] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4001'.
[  479.259067][T20562] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4001'.
[  479.406811][T20569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4001'.
[  479.573895][T20576] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4004'.
[  479.713026][T20583] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4007'.
[  479.716545][T14498] tipc: Resetting bearer <eth:syzkaller0>
[  479.736028][T20567] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  479.742831][T20565] syzkaller1: entered promiscuous mode
[  479.744981][T20565] syzkaller1: entered allmulticast mode
[  479.847384][T20587] Bluetooth: hci0: invalid length 0, exp 2 for type 23
[  479.988949][T20585] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4008'.
[  480.179789][T20597] xt_CT: You must specify a L4 protocol and not use inversions on it
[  480.319122][T20607] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4015'.
[  481.395682][T20629] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4023'.
[  481.496953][T20639] netlink: 'syz.2.4020': attribute type 1 has an invalid length.
[  481.705375][T20655] tipc: Resetting bearer <eth:syzkaller0>
[  481.822997][T20655] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4027'.
[  481.860216][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  481.886874][T20654] tipc: Resetting bearer <eth:syzkaller0>
[  481.917777][T20670] xt_ecn: cannot match TCP bits for non-tcp packets
[  482.272801][T20699] IPVS: Unknown mcast interface: nr0
[  482.491375][T20716] tipc: Resetting bearer <eth:syzkaller0>
[  482.504891][T20719] netlink: 'syz.1.4050': attribute type 1 has an invalid length.
[  482.522244][T20722] syzkaller0: left promiscuous mode
[  482.525489][T20722] syzkaller0: left allmulticast mode
[  482.617845][T20727] bond9: (slave geneve4): making interface the new active one
[  482.625725][T20727] bond9: (slave geneve4): Enslaving as an active interface with an up link
[  482.633002][T20715] tipc: Resetting bearer <eth:syzkaller0>
[  482.636234][ T5716] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  482.640582][ T5716] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  482.643574][ T5716] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  482.679772][T20719] 8021q: adding VLAN 0 to HW filter on device bond9
[  482.939563][T14500] tipc: Resetting bearer <eth:syzkaller0>
[  483.443853][T20772] bridge9: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  483.490911][T20779] netlink: 'syz.0.4066': attribute type 4 has an invalid length.
[  483.504012][T20779] nbd: must specify at least one socket
[  483.556768][T20779] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  483.573404][T20779] bond0 (unregistering): Released all slaves
[  486.700632][T20793] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  486.851835][T20862] __nla_validate_parse: 6 callbacks suppressed
[  486.851850][T20862] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4089'.
[  487.003470][T20884] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4090'.
[  487.597939][T20986] Bluetooth: hci0: unsupported parameter 5135
[  487.608478][T20986] Bluetooth: hci0: unsupported parameter 8192
[  487.616842][T20986] Bluetooth: hci0: unsupported parameter 5135
[  487.617917][T20985] tipc: New replicast peer: 172.20.20.187
[  487.631116][T20986] Bluetooth: hci0: unsupported parameter 8192
[  487.641145][T20985] tipc: Enabled bearer <udp:syz0>, priority 5
[  488.396171][T21010] veth0_to_bridge: entered promiscuous mode
[  488.402902][T21010] macvtap1: entered allmulticast mode
[  488.404704][T21010] veth0_to_bridge: entered allmulticast mode
[  488.452732][T21010] veth0_to_bridge: left allmulticast mode
[  488.454963][T21010] veth0_to_bridge: left promiscuous mode
[  488.900654][T21020] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4102'.
[  488.910782][T21020] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4102'.
[  489.364063][T21034] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4105'.
[  490.016511][T21049] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4109'.
[  490.226123][T21058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4112'.
[  490.234773][T21058] netlink: 'syz.0.4112': attribute type 1 has an invalid length.
[  490.242546][T21058] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4112'.
[  490.263076][T21058] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4112'.
[  490.301095][T21064] netlink: 'syz.1.4114': attribute type 7 has an invalid length.
[  490.433727][T21075] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4116'.
[  490.525107][T21086] vcan0: tx address claim with dlc 0
[  490.539017][T21086] syzkaller1: entered promiscuous mode
[  490.545440][T21086] syzkaller1: entered allmulticast mode
[  490.752167][T21101] xt_connbytes: Forcing CT accounting to be enabled
[  490.759293][T21101] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  491.376798][T21119] xt_CT: You must specify a L4 protocol and not use inversions on it
[  491.741667][ T5052] udevd[5052]: worker [13792] /devices/virtual/block/nbd1 timeout; kill it
[  491.748748][ T5052] udevd[5052]: seq 15350 '/devices/virtual/block/nbd1' killed
[  491.886255][T21140] __nla_validate_parse: 2 callbacks suppressed
[  491.886267][T21140] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4135'.
[  491.899293][T21140] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4135'.
[  491.946464][T21149] netlink: 'syz.0.4138': attribute type 9 has an invalid length.
[  492.031740][T21156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4140'.
[  492.060448][T21156] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4140'.
[  492.161821][T21163] tipc: Trying to set illegal importance in message
[  492.234606][T21168] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4144'.
[  492.238691][T21168] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4144'.
[  492.255564][T21170] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4144'.
[  492.262053][T21170] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4144'.
[  492.573798][T21182] trusted_key: syz.1.4148 sent an empty control message without MSG_MORE.
[  492.634332][T21190] mac80211_hwsim hwsim8 wlan0: left allmulticast mode
[  492.878937][T21209] netlink: 10217 bytes leftover after parsing attributes in process `syz.0.4153'.
[  492.885193][T21209] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  492.889264][T21209] bridge0: entered allmulticast mode
[  492.936351][T21213] xt_CT: You must specify a L4 protocol and not use inversions on it
[  492.963779][T21216] tipc: Resetting bearer <eth:syzkaller0>
[  493.638004][T21257] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4164'.
[  493.803234][T21215] tipc: Resetting bearer <eth:syzkaller0>
[  493.967250][T21288] xt_CT: You must specify a L4 protocol and not use inversions on it
[  494.521378][T21339] xt_CT: You must specify a L4 protocol and not use inversions on it
[  494.976957][T17044] tipc: Resetting bearer <eth:syzkaller0>
[  495.488415][T21378] syzkaller0: entered promiscuous mode
[  495.491934][T21378] syzkaller0: entered allmulticast mode
[  495.897358][T21395] xt_CT: You must specify a L4 protocol and not use inversions on it
[  496.027670][T21404] xt_hashlimit: size too large, truncated to 1048576
[  496.150590][T21414] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  496.292768][T21428] Bluetooth: hci0: unsupported parameter 5161
[  496.297874][T21428] Bluetooth: hci0: unsupported parameter 8192
[  496.303507][T21428] Bluetooth: hci0: unsupported parameter 5161
[  496.308951][T21428] Bluetooth: hci0: unsupported parameter 8192
[  496.345117][T21430] xt_CT: You must specify a L4 protocol and not use inversions on it
[  496.752059][T21459] netlink: 'syz.1.4220': attribute type 1 has an invalid length.
[  496.936204][T21460] netlink: 'syz.1.4220': attribute type 1 has an invalid length.
[  496.970661][T21460] __nla_validate_parse: 5 callbacks suppressed
[  496.970676][T21460] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4220'.
[  497.038060][T21474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4223'.
[  497.501697][T21492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4228'.
[  498.120563][T21519] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  498.126212][T21531] netlink: 'syz.2.4236': attribute type 3 has an invalid length.
[  498.133328][T21531] netlink: 'syz.2.4236': attribute type 3 has an invalid length.
[  498.213619][T21534] xt_hashlimit: size too large, truncated to 1048576
[  498.338602][T21536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4237'.
[  498.815639][T21571] x_tables: duplicate underflow at hook 3
[  499.107041][T21593] netlink: 'syz.1.4247': attribute type 7 has an invalid length.
[  499.119064][T21593] netlink: 'syz.1.4247': attribute type 3 has an invalid length.
[  499.135187][T21593] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4247'.
[  499.143208][T21595] netlink: 'syz.1.4247': attribute type 7 has an invalid length.
[  499.147740][T21595] netlink: 'syz.1.4247': attribute type 3 has an invalid length.
[  499.154959][T21595] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4247'.
[  499.335628][T21612] xt_policy: output policy not valid in PREROUTING and INPUT
[  499.428073][T21623] dvmrp1: left allmulticast mode
[  499.568770][T21633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4253'.
[  500.816710][T21656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4258'.
[  500.828178][T21656] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4258'.
[  500.976564][T21664] bridge0: port 1(syz_tun) entered disabled state
[  501.001886][T21664] syz_tun (unregistering): left allmulticast mode
[  501.004516][T21664] syz_tun (unregistering): left promiscuous mode
[  501.007173][T21664] bridge0: port 1(syz_tun) entered disabled state
[  501.116269][T21671] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4263'.
[  501.803239][T21710] netlink: 'syz.0.4273': attribute type 29 has an invalid length.
[  501.811264][T21710] netlink: 'syz.0.4273': attribute type 29 has an invalid length.
[  501.821670][T21713] nbd: must specify an index to disconnect
[  501.884807][T21716] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  501.896158][T21716] netlink: 'syz.0.4275': attribute type 3 has an invalid length.
[  501.898917][T21716] netlink: 'syz.0.4275': attribute type 3 has an invalid length.
[  501.920896][T21722] nbd: must specify an index to disconnect
[  502.020436][ T1372] ieee802154 phy1 wpan1: encryption failed: -22
[  502.104278][T21734] lo: entered allmulticast mode
[  502.108239][T21734] lo: left allmulticast mode
[  502.727838][T21790] netlink: 'syz.2.4293': attribute type 10 has an invalid length.
[  502.731880][T21790] __nla_validate_parse: 4 callbacks suppressed
[  502.731898][T21790] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4293'.
[  503.278416][T21804] xt_CT: You must specify a L4 protocol and not use inversions on it
[  503.575744][T21826] tipc: Resetting bearer <eth:syzkaller0>
[  503.596750][T21828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4301'.
[  503.650192][T21828] veth6: entered promiscuous mode
[  503.791409][T21825] tipc: Resetting bearer <eth:syzkaller0>
[  503.864386][T21850] netlink: 70 bytes leftover after parsing attributes in process `syz.2.4302'.
[  503.913940][T14498] tipc: Resetting bearer <eth:syzkaller0>
[  503.999527][T21861] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4305'.
[  504.259366][T21876] veth8: entered promiscuous mode
[  504.268571][T21876] veth8: entered allmulticast mode
[  504.274806][T21876] team0: Device veth8 is up. Set it down before adding it as a team port
[  504.363631][T21882] syzkaller0: entered promiscuous mode
[  504.373268][T21882] syzkaller0: entered allmulticast mode
[  504.397485][T21886] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  504.604056][T21896] netlink: 'syz.0.4312': attribute type 61 has an invalid length.
[  505.731904][T21919] macsec0: left promiscuous mode
[  505.743317][T21917] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4320'.
[  506.001831][T21933] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4326'.
[  506.066504][T21927] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4325'.
[  506.175494][T21941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4328'.
[  506.282672][T21948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4330'.
[  506.615152][T21970] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4339'.
[  506.712365][T21978] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  506.731412][T21978] netlink: 'syz.0.4341': attribute type 3 has an invalid length.
[  506.734188][T21978] netlink: 'syz.0.4341': attribute type 3 has an invalid length.
[  507.617294][T22007] tipc: Resetting bearer <eth:syzkaller0>
[  507.807968][T22015] __nla_validate_parse: 3 callbacks suppressed
[  507.807981][T22015] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4354'.
[  507.847235][T22007] bond6: (slave .`): Releasing active interface
[  507.895009][T22007] veth0: left allmulticast mode
[  507.897444][T22007] veth0: left promiscuous mode
[  507.900972][T22007] bridge0: port 3(veth0) entered disabled state
[  507.935039][T22007] bridge_slave_0: left allmulticast mode
[  507.940851][T22007] bridge_slave_0: left promiscuous mode
[  507.945297][T22007] bridge0: port 1(bridge_slave_0) entered disabled state
[  507.962269][T22007] bridge_slave_1: left allmulticast mode
[  507.968722][T22007] bridge0: port 2(bridge_slave_1) entered disabled state
[  507.995985][T22007] .`: (slave bond_slave_0): Releasing backup interface
[  508.033817][T22007] team0: Failed to send options change via netlink (err -105)
[  508.043812][T22007] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  508.050927][T22007] team0: Port device team_slave_0 removed
[  508.057982][T22007] team0: Failed to send options change via netlink (err -105)
[  508.064831][T22007] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[  508.073563][T22007] team0: Port device team_slave_1 removed
[  508.078611][T22007] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  508.090630][T22007] batman_adv: batadv0: Removing interface: batadv_slave_0
[  508.096848][T22007] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  508.106145][T22007] batman_adv: batadv0: Removing interface: batadv_slave_1
[  508.245816][T22007] bond5: (slave geneve3): Releasing active interface
[  508.300935][T22006] tipc: Resetting bearer <eth:syzkaller0>
[  508.444239][  T508] block nbd1: Possible stuck request ffff888100f88000: control (read@0,1024B). Runtime 210 seconds
[  508.448214][  T508] block nbd1: Possible stuck request ffff888100f98000: control (read@1024,1024B). Runtime 210 seconds
[  508.452771][  T508] block nbd1: Possible stuck request ffff888100f98200: control (read@2048,1024B). Runtime 210 seconds
[  508.457110][  T508] block nbd1: Possible stuck request ffff888100f98400: control (read@3072,1024B). Runtime 210 seconds
[  508.738365][T22044] xt_CT: You must specify a L4 protocol and not use inversions on it
[  508.884585][T22048] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4361'.
[  508.893920][T22048] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  508.928059][T22048] syzkaller0: entered promiscuous mode
[  508.931694][T22048] syzkaller0: entered allmulticast mode
[  508.934305][T22048] tipc: Resetting bearer <eth:syzkaller0>
[  508.941284][T22045] tipc: Resetting bearer <eth:syzkaller0>
[  512.838687][T22045] tipc: Disabling bearer <eth:syzkaller0>
[  512.848046][T14500] tipc: Resetting bearer <eth:syzkaller0>
[  512.950355][T22059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4363'.
[  513.019894][T22062] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4364'.
[  513.025324][T22063] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4364'.
[  513.172191][T22073] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  513.188511][T22074] tipc: Resetting bearer <eth:syzkaller0>
[  513.197439][T22073] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4367'.
[  513.202316][T22073] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4367'.
[  513.285227][    C1] vcan0: j1939_tp_rxtimer: 0xffff888171312800: rx timeout, send abort
[  513.336164][T22077] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4368'.
[  513.366354][T22082] netlink: 'syz.0.4366': attribute type 4 has an invalid length.
[  513.432613][T22069] tipc: Resetting bearer <eth:syzkaller0>
[  513.532756][T22091] netlink: 'syz.0.4369': attribute type 1 has an invalid length.
[  513.561515][T22091] 8021q: adding VLAN 0 to HW filter on device bond0
[  513.634636][T22094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4370'.
[  513.649740][T22094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4370'.
[  513.785359][    C1] vcan0: j1939_tp_rxtimer: 0xffff88816f71dc00: rx timeout, send abort
[  513.788400][    C1] vcan0: j1939_tp_rxtimer: 0xffff888171312800: abort rx timeout. Force session deactivation
[  513.934141][T14501] tipc: Resetting bearer <eth:syzkaller0>
[  514.172902][T22114] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4374'.
[  514.288337][    C1] vcan0: j1939_tp_rxtimer: 0xffff88816f71dc00: abort rx timeout. Force session deactivation
[  515.367467][T22142] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4382'.
[  515.518342][T22153] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  515.627410][T22153] netlink: 'syz.2.4384': attribute type 3 has an invalid length.
[  515.638070][T22153] netlink: 'syz.2.4384': attribute type 3 has an invalid length.
[  515.833103][T22167] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  516.161593][T22193] netlink: 'syz.2.4396': attribute type 1 has an invalid length.
[  516.254591][T22193] 8021q: adding VLAN 0 to HW filter on device bond9
[  516.314877][T22197] bond9: (slave veth19): Enslaving as an active interface with a down link
[  516.353309][T22193] 8021q: adding VLAN 0 to HW filter on device batadv0
[  516.356536][T22193] bond9: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  516.600851][T22201] bond5: entered allmulticast mode
[  516.608280][T22201] ip6gre1: entered allmulticast mode
[  516.618808][T22199] bond5: left allmulticast mode
[  516.624768][T22199] ip6gre1: left allmulticast mode
[  516.746499][T22214] tipc: Resetting bearer <eth:syzkaller0>
[  516.807828][T22217] syzkaller0: entered promiscuous mode
[  516.816311][T22217] syzkaller0: entered allmulticast mode
[  516.821562][T22217] tipc: Resetting bearer <eth:syzkaller0>
[  517.632283][T22247] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  517.639161][T22248] netlink: 'syz.2.4411': attribute type 3 has an invalid length.
[  517.644141][T22248] netlink: 'syz.2.4411': attribute type 3 has an invalid length.
[  517.835892][T22253] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  517.859421][T22255] wg2 speed is unknown, defaulting to 1000
[  517.863302][T22255] lo speed is unknown, defaulting to 1000
[  518.591204][T22294] __nla_validate_parse: 9 callbacks suppressed
[  518.591226][T22294] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4426'.
[  518.868016][T22309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4430'.
[  518.891766][T22310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4430'.
[  519.005216][T22314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4433'.
[  519.035513][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881a812b400: rx timeout, send abort
[  519.057384][T22319] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  519.059993][T22319] IPv6: NLM_F_CREATE should be set when creating new route
[  519.062580][T22319] IPv6: NLM_F_CREATE should be set when creating new route
[  519.064950][T22319] IPv6: NLM_F_CREATE should be set when creating new route
[  519.070253][T22320] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  519.207003][T22325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4436'.
[  519.210876][T22325] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4436'.
[  519.307217][T22333] IPv6: NLM_F_CREATE should be specified when creating new route
[  519.319976][T22333] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  519.322443][T22333] IPv6: NLM_F_CREATE should be set when creating new route
[  519.535654][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881a812b000: rx timeout, send abort
[  519.539243][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881a812b400: abort rx timeout. Force session deactivation
[  520.018317][T22361] netlink: 'syz.1.4445': attribute type 1 has an invalid length.
[  520.039226][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881a812b000: abort rx timeout. Force session deactivation
[  520.092192][T22361] bond10: entered promiscuous mode
[  520.101056][T22361] 8021q: adding VLAN 0 to HW filter on device bond10
[  520.186485][T22361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4445'.
[  520.531778][T22374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4449'.
[  520.609863][T22382] syzkaller0: entered promiscuous mode
[  520.612024][T22382] syzkaller0: entered allmulticast mode
[  520.672908][T22383] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  520.704974][T22386] tipc: Resetting bearer <eth:syzkaller0>
[  520.882804][T22399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4453'.
[  520.889028][T22399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4453'.
[  521.039374][T22405] tipc: Resetting bearer <eth:syzkaller0>
[  521.055905][T22404] tipc: Resetting bearer <eth:syzkaller0>
[  521.333369][T22372] tipc: Resetting bearer <eth:syzkaller0>
[  521.443676][T22372] tipc: Disabling bearer <eth:syzkaller0>
[  521.462516][T14500] tipc: Resetting bearer <eth:syzkaller0>
[  521.748515][T22437] netlink: 'syz.2.4464': attribute type 4 has an invalid length.
[  522.274912][T22465] xt_CT: You must specify a L4 protocol and not use inversions on it
[  523.541299][T22535] xt_CT: You must specify a L4 protocol and not use inversions on it
[  525.017632][T22571] __nla_validate_parse: 16 callbacks suppressed
[  525.017647][T22571] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4490'.
[  525.032640][T22571] netlink: 1648 bytes leftover after parsing attributes in process `syz.0.4490'.
[  525.237187][T22586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4495'.
[  525.248588][T22588] lo: entered promiscuous mode
[  525.281425][T22588] tunl0: entered promiscuous mode
[  525.289830][T22588] gre0: entered promiscuous mode
[  525.339875][T22588] gretap0: entered promiscuous mode
[  525.378531][T22588] erspan0: entered promiscuous mode
[  525.397563][T22588] ip_vti0: entered promiscuous mode
[  525.410267][T22588] ip6_vti0: entered promiscuous mode
[  525.418420][T22588] sit0: entered promiscuous mode
[  525.434657][T22588] ip6tnl0: entered promiscuous mode
[  525.452029][T22588] ip6gre0: entered promiscuous mode
[  525.465889][T22588] syz_tun: entered promiscuous mode
[  525.480346][T22596] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4498'.
[  525.491980][T22596] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4498'.
[  525.497742][T22588] ip6gretap0: entered promiscuous mode
[  525.509478][T22588] bridge0: entered promiscuous mode
[  525.527576][T22588] vcan0: entered promiscuous mode
[  525.544968][T22588] .`: entered promiscuous mode
[  525.552932][T22588] tipc: Resetting bearer <eth:team0>
[  525.562387][T22588] team0: entered promiscuous mode
[  525.582098][T22588] nlmon0: entered promiscuous mode
[  525.585432][T22588] batadv0: entered promiscuous mode
[  525.601358][T22588] veth0: entered promiscuous mode
[  525.627497][T22588] veth1: entered promiscuous mode
[  525.655347][T22588] wg0: entered promiscuous mode
[  525.686195][T22588] wg1: entered promiscuous mode
[  525.707256][T22588] wg2: entered promiscuous mode
[  525.714743][T22588] veth0_to_bridge: entered promiscuous mode
[  525.726658][T22588] bridge_slave_0: entered promiscuous mode
[  525.737365][T22588] veth1_to_bridge: entered promiscuous mode
[  525.763937][T22588] veth0_to_bond: entered promiscuous mode
[  525.773103][T22588] bond_slave_0: entered promiscuous mode
[  525.777758][T22588] veth0_to_team: entered promiscuous mode
[  525.789412][T22588] team_slave_0: entered promiscuous mode
[  525.795884][T22588] veth1_to_team: entered promiscuous mode
[  525.805065][T22588] team_slave_1: entered promiscuous mode
[  525.811481][T22588] veth0_to_batadv: entered promiscuous mode
[  525.825149][T22588] batadv_slave_0: entered promiscuous mode
[  525.837879][T22588] veth1_to_batadv: entered promiscuous mode
[  525.853953][T22588] batadv_slave_1: entered promiscuous mode
[  525.868487][T22588] xfrm0: entered promiscuous mode
[  525.888512][T22588] veth0_to_hsr: entered promiscuous mode
[  525.901681][T22588] hsr_slave_0: entered promiscuous mode
[  525.912121][T22588] veth1_to_hsr: entered promiscuous mode
[  525.924543][T22588] hsr_slave_1: entered promiscuous mode
[  525.937623][T22588] veth1_virt_wifi: entered promiscuous mode
[  525.952034][T22588] veth0_virt_wifi: entered promiscuous mode
[  525.963189][T22588] virt_wifi0: entered promiscuous mode
[  526.032118][T22588] vlan1: entered promiscuous mode
[  526.038814][T22588] macvlan0: entered promiscuous mode
[  526.059032][T22588] macvlan1: entered promiscuous mode
[  526.091773][T22588] ipvlan0: entered promiscuous mode
[  526.098602][T22588] ipvlan1: entered promiscuous mode
[  526.140329][T22588] macvtap0: entered promiscuous mode
[  526.148838][T22588] macsec0: entered promiscuous mode
[  526.156167][T22588] geneve0: entered promiscuous mode
[  526.164371][T22588] geneve1: entered promiscuous mode
[  526.187194][T22588] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  526.204230][T22588] netdevsim netdevsim0 netdevsim1: entered promiscuous mode
[  526.218624][T22588] netdevsim netdevsim0 netdevsim2: entered promiscuous mode
[  526.235118][T22588] netdevsim netdevsim0 netdevsim3: entered promiscuous mode
[  526.245076][T22588] bridge1: entered promiscuous mode
[  526.251914][T22588] bond1: entered promiscuous mode
[  526.260748][T22588] macvlan2: entered promiscuous mode
[  526.265699][T22588] ipip0: entered promiscuous mode
[  526.275741][T22588] @: entered promiscuous mode
[  526.286195][T22588] gtp0: entered promiscuous mode
[  526.307267][T22588] bridge2: entered promiscuous mode
[  526.315142][T22588] bond_slave_0.2: entered promiscuous mode
[  526.319593][T22588] : entered promiscuous mode
[  526.324572][T22588] : entered promiscuous mode
[  526.328069][T22588] vlan4: entered promiscuous mode
[  526.335333][T22588] tipc: Resetting bearer <eth:syzkaller0>
[  526.340780][T22588] syztnl2: entered promiscuous mode
[  526.345023][T22588] bond2: entered promiscuous mode
[  526.347834][T22588] veth2: entered promiscuous mode
[  526.353221][T22588] veth3: entered promiscuous mode
[  526.355244][T22588] ip6tnl1: entered promiscuous mode
[  526.358224][T22588] ip6tnl2: entered promiscuous mode
[  526.368311][T22588] bridge3: entered promiscuous mode
[  526.374325][T22588] bond3: entered promiscuous mode
[  526.377933][T22588] bond4: entered promiscuous mode
[  526.383491][T22588] bond5: entered promiscuous mode
[  526.388459][T22588] geneve3: entered promiscuous mode
[  526.395083][T22588] ip6erspan0: entered promiscuous mode
[  526.401851][T22588] bond6: entered promiscuous mode
[  526.406872][T22588] macvlan3: entered promiscuous mode
[  526.410643][T22588] vxlan0: entered promiscuous mode
[  526.414961][T22588] dvmrp0: entered promiscuous mode
[  526.417246][T22588] syztnl1: entered promiscuous mode
[  526.419129][T22588] veth4: entered promiscuous mode
[  526.422526][T22588] pimreg: entered promiscuous mode
[  526.424525][T22588] syztnl0: entered promiscuous mode
[  526.426550][T22588] gre1: entered promiscuous mode
[  526.428538][T22588] ip6tnl3: entered promiscuous mode
[  526.431504][T22588] veth5: entered promiscuous mode
[  526.434333][T22588] bond0: entered promiscuous mode
[  526.440364][T21530] lo speed is unknown, defaulting to 1000
[  526.444954][T21530] syz_device_name_32_chars_1234567: Port: 1 Link DOWN
[  526.450413][T22598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4499'.
[  526.538475][ T5716] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0
[  526.553580][ T5716] netdevsim netdevsim0 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0
[  526.565644][ T5716] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  526.581524][ T5716] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0
[  526.592966][ T5716] netdevsim netdevsim0 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0
[  526.604883][ T5716] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  526.671140][ T5716] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0
[  526.675411][ T5716] netdevsim netdevsim0 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0
[  526.679002][ T5716] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  526.688966][T22607] syzkaller1: entered promiscuous mode
[  526.692265][T22607] syzkaller1: entered allmulticast mode
[  526.871344][T22620] smc: net device lo applied user defined pnetid SYZ2
[  526.876296][T22620] smc: net device lo erased user defined pnetid SYZ2
[  526.956875][T22611] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4503'.
[  527.228761][T22633] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4510'.
[  527.375748][T22646] ip_tables: iptables: counters copy to user failed while replacing table
[  527.450905][T22652] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4517'.
[  527.513418][T22656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4518'.
[  527.837919][T22674] nbd: nbd1 already in use
[  527.843689][T22673] nbd: nbd1 already in use
[  527.848556][T22673] block nbd1: NBD_DISCONNECT
[  527.853042][T22673] block nbd1: Send disconnect failed -32
[  527.866170][T22673] block nbd1: shutting down sockets
[  528.043402][T22681] netlink: 'syz.1.4523': attribute type 1 has an invalid length.
[  528.106958][T22681] 8021q: adding VLAN 0 to HW filter on device bond11
[  528.204819][T22682] bond11: (slave veth15): Enslaving as an active interface with a down link
[  528.353334][    C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  528.357008][    C1] Buffer I/O error on dev nbd1, logical block 0, async page read
[  528.362926][    C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  528.365680][    C0] Buffer I/O error on dev nbd1, logical block 1, async page read
[  528.368102][    C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  528.371242][    C0] Buffer I/O error on dev nbd1, logical block 2, async page read
[  528.374414][    C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  528.377882][    C0] Buffer I/O error on dev nbd1, logical block 3, async page read
[  528.380566][T13792] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  528.389700][T13792] Buffer I/O error on dev nbd1, logical block 0, async page read
[  528.395465][T13792] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  528.403038][T13792] Buffer I/O error on dev nbd1, logical block 1, async page read
[  528.409858][T13792] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  528.419719][T13792] Buffer I/O error on dev nbd1, logical block 2, async page read
[  528.422542][T13792] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  528.425345][T13792] Buffer I/O error on dev nbd1, logical block 3, async page read
[  528.427846][T13792] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  528.439718][T13792] Buffer I/O error on dev nbd1, logical block 0, async page read
[  528.444238][T13792] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  528.452523][T13792] Buffer I/O error on dev nbd1, logical block 1, async page read
[  528.473433][T13792] ldm_validate_partition_table(): Disk read failed.
[  528.485952][T13792] Dev nbd1: unable to read RDB block 0
[  528.493052][T13792]  nbd1: unable to read partition table
[  528.561764][ T5052] udevd[5052]: worker [13792] terminated by signal 9 (Killed)
[  528.566698][ T5052] udevd[5052]: worker [13792] failed while handling '/devices/virtual/block/nbd1'
[  529.209576][T22749] xt_CT: You must specify a L4 protocol and not use inversions on it
[  529.618631][T22776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  529.687525][T22776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  530.033931][   T55] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  530.035700][T22806] __nla_validate_parse: 5 callbacks suppressed
[  530.035714][T22806] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4557'.
[  530.160064][T22815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4560'.
[  530.164632][T22815] netlink: 'syz.2.4560': attribute type 11 has an invalid length.
[  530.167927][T22815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4560'.
[  530.173297][T22815] netlink: 'syz.2.4560': attribute type 11 has an invalid length.
[  530.256737][T22822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  530.321907][T22824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  530.383186][T22819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  530.441838][T22819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  530.491196][T22828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4565'.
[  530.495166][T22828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4565'.
[  530.625163][T22836] netlink: 'syz.1.4568': attribute type 49 has an invalid length.
[  531.068168][T22847] netlink: 'syz.0.4571': attribute type 3 has an invalid length.
[  531.082420][T22847] xfrm0: left promiscuous mode
[  531.651372][T22853] syzkaller0: entered promiscuous mode
[  531.660316][T22853] syzkaller0: entered allmulticast mode
[  532.013877][T22868] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  532.021206][T14499] bridge0: port 2(bridge_slave_1) entered blocking state
[  532.023641][T14499] bridge0: port 2(bridge_slave_1) entered forwarding state
[  532.042364][T22868] netlink: 'syz.1.4580': attribute type 3 has an invalid length.
[  532.046287][T22868] netlink: 'syz.1.4580': attribute type 3 has an invalid length.
[  532.209698][T22881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4581'.
[  532.241572][T22884] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4583'.
[  532.328846][T22877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4581'.
[  532.479514][T22897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4587'.
[  532.623667][T22901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4587'.
[  532.825721][T22909] netlink: 'syz.2.4588': attribute type 16 has an invalid length.
[  534.282020][T22976] netlink: 'syz.2.4608': attribute type 1 has an invalid length.
[  534.323501][T22976] 8021q: adding VLAN 0 to HW filter on device bond10
[  534.616794][T23001] netlink: 'syz.2.4613': attribute type 2 has an invalid length.
[  534.956158][T23011] vcan0: tx address claim with dlc 0
[  535.082500][T23021] __nla_validate_parse: 7 callbacks suppressed
[  535.082513][T23021] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4615'.
[  535.402724][T23036] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4623'.
[  535.454698][T23037] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4624'.
[  535.525911][T23043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4625'.
[  535.543733][T23043] macsec1: entered promiscuous mode
[  535.548821][T23043] batadv0: entered promiscuous mode
[  535.554445][T23043] macsec1: entered allmulticast mode
[  535.556652][T23043] batadv0: entered allmulticast mode
[  535.560565][T23043] 8021q: adding VLAN 0 to HW filter on device macsec1
[  535.565073][T23043] batadv0: left allmulticast mode
[  535.570874][T23043] batadv0: left promiscuous mode
[  535.901299][T23069] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4633'.
[  535.916455][T23068] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  535.920574][T23066] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4633'.
[  536.120539][T23077] sctp: [Deprecated]: syz.0.4635 (pid 23077) Use of struct sctp_assoc_value in delayed_ack socket option.
[  536.120539][T23077] Use struct sctp_sack_info instead
[  536.143288][T23077] xt_ecn: cannot match TCP bits for non-tcp packets
[  539.090664][T23090] ip6erspan1: entered allmulticast mode
[  539.254901][T23103] dvmrp0: entered allmulticast mode
[  539.282389][T23103] dvmrp1: entered allmulticast mode
[  539.288404][T23103] dvmrp0: left allmulticast mode
[  539.294230][T23103] dvmrp1: left allmulticast mode
[  539.344168][T23104] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001
[  540.090394][T23106] tipc: Resetting bearer <eth:syzkaller0>
[  540.167011][T23109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4645'.
[  540.351078][T23115] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4647'.
[  540.537832][T23122] tipc: Resetting bearer <eth:syzkaller0>
[  540.593655][T23122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4650'.
[  540.604196][T23121] tipc: Resetting bearer <eth:syzkaller0>
[  540.925861][T23132] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4653'.
[  541.120806][T23141] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  541.287256][T23148] 8021q: adding VLAN 0 to HW filter on device .`
[  541.295645][T23148] 8021q: adding VLAN 0 to HW filter on device team0
[  541.310865][T23148] 8021q: adding VLAN 0 to HW filter on device batadv0
[  541.388130][T23148] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  541.400309][T10425] lo speed is unknown, defaulting to 1000
[  541.407913][T10425] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE
[  541.413303][T14499] tipc: Resetting bearer <eth:syzkaller0>
[  541.445895][T23152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4660'.
[  541.502194][T23148] netlink: 'syz.0.4659': attribute type 3 has an invalid length.
[  541.506168][T23148] netlink: 'syz.0.4659': attribute type 3 has an invalid length.
[  541.574957][T23156] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.4661'.
[  541.583044][T23157] team_slave_1: left promiscuous mode
[  541.588843][T23157] team_slave_1: entered allmulticast mode
[  542.020882][T23169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4663'.
[  542.408384][T23183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4671'.
[  542.424044][T23183] bond0: option downdelay: invalid value (18446744073675997440)
[  542.431373][T23185] netlink: 50 bytes leftover after parsing attributes in process `syz.1.4670'.
[  542.437957][T23183] bond0: option downdelay: allowed values 0 - 2147483647
[  542.547087][T23187] A link change request failed with some changes committed already. Interface 04)fl may have been left with an inconsistent configuration, please check.
[  542.602414][T23189] netlink: 'syz.0.4673': attribute type 4 has an invalid length.
[  542.623114][T23189] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4673'.
[  542.685541][T23189] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check.
[  543.533104][T23222] syzkaller1: entered promiscuous mode
[  543.537219][T23222] syzkaller1: entered allmulticast mode
[  543.737063][T23229] netlink: 'syz.2.4684': attribute type 1 has an invalid length.
[  543.747373][T23229] netlink: 'syz.2.4684': attribute type 1 has an invalid length.
[  543.956350][T23240] macsec1: entered promiscuous mode
[  543.965466][T23240] bridge0: entered promiscuous mode
[  544.024874][T23240] syzkaller0: entered promiscuous mode
[  544.038511][T23240] syzkaller0: entered allmulticast mode
[  544.057846][T23240] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  544.103729][T23246] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  544.127455][T23237] tipc: Resetting bearer <eth:syzkaller0>
[  544.200388][T23237] tipc: Disabling bearer <eth:syzkaller0>
[  545.521716][T23310] __nla_validate_parse: 3 callbacks suppressed
[  545.521729][T23310] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4702'.
[  546.124143][T23319] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  546.134820][T23321] netlink: 'syz.2.4707': attribute type 3 has an invalid length.
[  546.145901][T23321] netlink: 'syz.2.4707': attribute type 3 has an invalid length.
[  547.624958][T23387] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4724'.
[  547.631199][T23387] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4724'.
[  547.778439][T23392] syzkaller1: entered promiscuous mode
[  547.785991][T23392] syzkaller1: entered allmulticast mode
[  547.804755][T23395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4726'.
[  547.831290][T23395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4726'.
[  548.367363][T23407] x_tables: duplicate underflow at hook 1
[  548.371636][T23408] x_tables: duplicate underflow at hook 1
[  548.681509][T23428] tipc: Resetting bearer <eth:syzkaller0>
[  548.744228][T23435] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  548.866745][T23426] tipc: Resetting bearer <eth:syzkaller0>
[  549.669234][T23453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4738'.
[  549.860801][T17042] tipc: Resetting bearer <eth:syzkaller0>
[  549.969553][T23443] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  550.227012][T23464] tipc: Resetting bearer <eth:syzkaller0>
[  550.472360][T23464] tipc: Resetting bearer <eth:syzkaller0>
[  550.687409][T23484] syzkaller0: left promiscuous mode
[  550.704368][T23484] syzkaller0: left allmulticast mode
[  550.710993][T23484] tipc: Resetting bearer <eth:syzkaller0>
[  550.769584][T23487] netem: change failed
[  550.796706][T23484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4741'.
[  550.908597][T23489] netlink: 'syz.1.4743': attribute type 4 has an invalid length.
[  550.932942][T23492] tipc: Resetting bearer <eth:syzkaller0>
[  551.006113][T23492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4744'.
[  551.025029][T23491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4744'.
[  551.142168][T23500] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4745'.
[  551.463713][T23518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4752'.
[  551.467020][T23519] netlink: 284 bytes leftover after parsing attributes in process `syz.2.4752'.
[  551.472218][T23520] xt_socket: unknown flags 0x4c
[  551.570411][T23527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4753'.
[  551.574464][T23527] netlink: 312 bytes leftover after parsing attributes in process `syz.2.4753'.
[  551.578304][T23527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4753'.
[  551.825311][T23544] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  551.827878][T23544] IPv6: NLM_F_CREATE should be set when creating new route
[  551.830254][T23544] IPv6: NLM_F_CREATE should be set when creating new route
[  551.832539][T23544] IPv6: NLM_F_CREATE should be set when creating new route
[  551.838151][T23544] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  552.137705][T23557] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4766'.
[  553.433306][T23608] xt_cgroup: xt_cgroup: no path or classid specified
[  553.693907][T23634] pim6reg1: entered promiscuous mode
[  553.702605][T23634] pim6reg1: entered allmulticast mode
[  554.032684][T23664] tipc: Resetting bearer <eth:syzkaller0>
[  554.055455][T23660] tipc: Resetting bearer <eth:syzkaller0>
[  554.115054][T23668] IPVS: set_ctl: invalid protocol: 22 172.20.20.187:20001
[  554.185682][T23677] netlink: 'syz.0.4793': attribute type 29 has an invalid length.
[  554.189456][T23677] netlink: 'syz.0.4793': attribute type 5 has an invalid length.
[  554.199190][T23679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  554.268568][T23684] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  554.284222][T23688] netlink: 'syz.0.4796': attribute type 1 has an invalid length.
[  554.294548][T23684] netlink: 'syz.1.4797': attribute type 3 has an invalid length.
[  554.297913][T23684] netlink: 'syz.1.4797': attribute type 3 has an invalid length.
[  554.329377][   T55] Bluetooth: hci2: SCO packet for unknown connection handle 0
[  555.046650][T14498] tipc: Resetting bearer <eth:syzkaller0>
[  555.843012][T23778] __nla_validate_parse: 21 callbacks suppressed
[  555.843028][T23778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4816'.
[  555.947149][T23782] xt_CT: You must specify a L4 protocol and not use inversions on it
[  556.147247][T23790] netlink: 'syz.2.4819': attribute type 5 has an invalid length.
[  556.671806][T23811] syzkaller0: entered promiscuous mode
[  556.675932][T23811] syzkaller0: entered allmulticast mode
[  556.693492][T23808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4824'.
[  556.764092][T23816] syzkaller1: entered promiscuous mode
[  556.770548][T23816] syzkaller1: entered allmulticast mode
[  556.981371][T23828] netlink: 1042 bytes leftover after parsing attributes in process `syz.0.4829'.
[  557.302501][T23852] netlink: 880 bytes leftover after parsing attributes in process `syz.1.4834'.
[  557.340901][T23854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4835'.
[  557.432592][T23858] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  557.443073][T23858] netlink: 'syz.2.4837': attribute type 3 has an invalid length.
[  557.445915][T23858] netlink: 'syz.2.4837': attribute type 3 has an invalid length.
[  557.941348][T23871] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  557.949292][T23871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4842'.
[  558.051020][T23878] sctp: [Deprecated]: syz.2.4844 (pid 23878) Use of struct sctp_assoc_value in delayed_ack socket option.
[  558.051020][T23878] Use struct sctp_sack_info instead
[  558.456073][T23905] xt_policy: output policy not valid in PREROUTING and INPUT
[  558.685804][T23909] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4850'.
[  558.694329][T23909] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4850'.
[  558.722630][T23909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4850'.
[  558.732467][T23909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4850'.
[  559.064263][T23941] tipc: Resetting bearer <eth:syzkaller0>
[  559.156809][T23940] tipc: Resetting bearer <eth:syzkaller0>
[  559.635084][T14500] tipc: Resetting bearer <eth:syzkaller0>
[  560.303589][T24017] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  560.450793][T24029] xt_hashlimit: size too large, truncated to 1048576
[  560.504034][T24032] x_tables: duplicate underflow at hook 1
[  560.826133][T24042] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  560.854455][T24042] netlink: 'syz.1.4883': attribute type 3 has an invalid length.
[  560.865624][T24042] netlink: 'syz.1.4883': attribute type 3 has an invalid length.
[  563.456579][ T1372] ieee802154 phy1 wpan1: encryption failed: -22
[  563.954113][T24054] __nla_validate_parse: 4 callbacks suppressed
[  563.954134][T24054] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4885'.
[  563.963597][T24051] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4887'.
[  564.007401][T24051] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4887'.
[  564.097294][T24069] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  564.118081][T24069] netlink: 'syz.0.4890': attribute type 3 has an invalid length.
[  564.128007][T24069] netlink: 'syz.0.4890': attribute type 3 has an invalid length.
[  564.249595][T24081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4893'.
[  564.265068][T24081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4893'.
[  564.270093][T24085] Cannot find del_set index 4 as target
[  564.274207][T24081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4893'.
[  564.283322][T24081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4893'.
[  564.292697][T24081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4893'.
[  564.299426][T24081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4893'.
[  564.305403][T24081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4893'.
[  564.322177][T24087] tipc: Resetting bearer <eth:syzkaller0>
[  564.671535][T24100] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  564.691204][T24100] netlink: 'syz.2.4900': attribute type 3 has an invalid length.
[  564.697562][T24100] netlink: 'syz.2.4900': attribute type 3 has an invalid length.
[  564.742650][T24086] tipc: Resetting bearer <eth:syzkaller0>
[  564.978698][T24111] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  565.200456][T24117] tipc: Resetting bearer <eth:syzkaller0>
[  565.210795][T24116] tipc: Resetting bearer <eth:syzkaller0>
[  565.335318][T14501] tipc: Resetting bearer <eth:syzkaller0>
[  565.403878][T24131] sit4: entered promiscuous mode
[  565.428820][T24132] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  566.034186][T24143] netlink: 'syz.2.4915': attribute type 5 has an invalid length.
[  568.003604][T24225] xt_CT: You must specify a L4 protocol and not use inversions on it
[  568.097801][T24230] netlink: 'syz.0.4943': attribute type 1 has an invalid length.
[  568.163429][T24230] 8021q: adding VLAN 0 to HW filter on device bond7
[  568.557083][T24265] xt_CT: You must specify a L4 protocol and not use inversions on it
[  568.785965][T24272] netlink: 'syz.1.4952': attribute type 3 has an invalid length.
[  569.023506][T24291] TCP: TCP_TX_DELAY enabled
[  569.259552][T24301] xt_CT: You must specify a L4 protocol and not use inversions on it
[  569.327417][T24317] __nla_validate_parse: 78 callbacks suppressed
[  569.327431][T24317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4966'.
[  569.339405][T24317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4966'.
[  569.343501][T24317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4966'.
[  569.347545][T24317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4966'.
[  569.357668][T24317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4966'.
[  569.367749][T24317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4966'.
[  569.380998][T24317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4966'.
[  569.385890][T24317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4966'.
[  569.390268][T24317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4966'.
[  569.393498][T24317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4966'.
[  569.983564][T24365] tipc: Resetting bearer <eth:syzkaller0>
[  570.159742][T24364] tipc: Resetting bearer <eth:syzkaller0>
[  570.226024][T24383] netlink: 'syz.1.4982': attribute type 1 has an invalid length.
[  570.232364][T24382] xt_CT: You must specify a L4 protocol and not use inversions on it
[  570.412179][T17040] tipc: Resetting bearer <eth:syzkaller0>
[  570.427201][T24395] netlink: 'syz.2.4986': attribute type 2 has an invalid length.
[  570.482065][T24383] 8021q: adding VLAN 0 to HW filter on device bond12
[  570.607644][T24390] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  570.896538][T24403] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  571.001818][T24426] bridge0: port 1(wlan0) entered blocking state
[  571.016338][T24426] bridge0: port 1(wlan0) entered disabled state
[  571.018818][T24426] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  571.022996][T24426] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  571.046451][T24425] bond12: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms
[  571.054598][T24425] bond12 (unregistering): Released all slaves
[  571.321557][T24438] macvtap0: refused to change device tx_queue_len
[  571.488021][T24452] sctp: [Deprecated]: syz.1.4996 (pid 24452) Use of int in max_burst socket option deprecated.
[  571.488021][T24452] Use struct sctp_assoc_value instead
[  572.288558][T24489] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  572.324418][T24508] netlink: 'syz.1.5004': attribute type 3 has an invalid length.
[  572.335067][T24508] netlink: 'syz.1.5004': attribute type 3 has an invalid length.
[  572.473569][T24521] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  572.602113][T24520] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  572.609067][T24534] netlink: 'syz.2.5010': attribute type 3 has an invalid length.
[  572.614840][T24534] netlink: 'syz.2.5010': attribute type 3 has an invalid length.
[  572.662162][T24534] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  572.671626][T24525] netlink: 'syz.2.5010': attribute type 3 has an invalid length.
[  572.674864][T24525] netlink: 'syz.2.5010': attribute type 3 has an invalid length.
[  572.677621][T24520] netlink: 'syz.2.5010': attribute type 3 has an invalid length.
[  572.682726][T24520] netlink: 'syz.2.5010': attribute type 3 has an invalid length.
[  573.804003][T24573] infiniband syz0: set down
[  573.811505][T24573] infiniband syz0: added bond0
[  573.916288][T24573] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  573.930234][T24573] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  573.948003][T24573] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  574.013967][T24573] RDS/IB: syz0: added
[  574.023161][T24573] smc: adding ib device syz0 with port count 1
[  574.030725][T24573] smc:    ib device syz0 port 1 has pnetid SYZ2 (user defined)
[  575.429547][T24611] __nla_validate_parse: 36 callbacks suppressed
[  575.429566][T24611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5028'.
[  575.434412][T24613] netlink: 'syz.2.5029': attribute type 11 has an invalid length.
[  575.497391][   T57] block nbd1: Receive control failed (result -1)
[  575.695246][T24628] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5031'.
[  575.864398][T24634] netlink: 'syz.2.5033': attribute type 3 has an invalid length.
[  575.873528][T24634] netlink: 'syz.2.5033': attribute type 3 has an invalid length.
[  575.899397][T24637] netlink: 'syz.2.5033': attribute type 3 has an invalid length.
[  575.910939][T24637] netlink: 'syz.2.5033': attribute type 3 has an invalid length.
[  576.226483][T24652] 
[  576.227554][T24652] ======================================================
[  576.230340][T24652] WARNING: possible circular locking dependency detected
[  576.233142][T24652] syzkaller #0 Not tainted
[  576.234916][T24652] ------------------------------------------------------
[  576.237080][T24652] syz.1.5037/24652 is trying to acquire lock:
[  576.238976][T24652] ffffffff8ea84c40 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  576.242199][T24652] 
[  576.242199][T24652] but task is already holding lock:
[  576.244463][T24652] ffff8881012cc980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x800
[  576.247971][T24652] 
[  576.247971][T24652] which lock already depends on the new lock.
[  576.247971][T24652] 
[  576.252036][T24652] 
[  576.252036][T24652] the existing dependency chain (in reverse order) is:
[  576.255607][T24652] 
[  576.255607][T24652] -> #9 (&root->kernfs_rwsem){++++}-{4:4}:
[  576.258787][T24652]        down_write+0x96/0x200
[  576.260741][T24652]        kernfs_add_one+0x41/0x5d0
[  576.262800][T24652]        kernfs_create_dir_ns+0xde/0x130
[  576.265033][T24652]        internal_create_group+0x440/0x1180
[  576.267400][T24652]        cpuhp_invoke_callback+0x448/0x860
[  576.269728][T24652]        cpuhp_issue_call+0x3f0/0x750
[  576.271873][T24652]        __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0
[  576.274198][T24652]        __cpuhp_setup_state+0x3f/0x60
[  576.276294][T24652]        do_one_initcall+0x250/0x870
[  576.278280][T24652]        do_initcall_level+0x10a/0x1a0
[  576.280277][T24652]        do_initcalls+0x59/0xa0
[  576.282115][T24652]        kernel_init_freeable+0x29d/0x3e0
[  576.284012][T24652]        kernel_init+0x1d/0x1d0
[  576.285737][T24652]        ret_from_fork+0x514/0xb70
[  576.287472][T24652]        ret_from_fork_asm+0x1a/0x30
[  576.289291][T24652] 
[  576.289291][T24652] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}:
[  576.291886][T24652] 
[  576.291886][T24652] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  576.294822][T24652]        cpus_read_lock+0x42/0x160
[  576.296861][T24652]        static_key_slow_inc+0x12/0x30
[  576.298942][T24652]        ipv6_flowlabel_opt+0x1cb2/0x2ae0
[  576.301308][T24652]        do_ipv6_setsockopt+0xe0e/0x3190
[  576.303637][T24652]        ipv6_setsockopt+0x59/0x170
[  576.305811][T24652]        do_sock_setsockopt+0x17c/0x1b0
[  576.308093][T24652]        __x64_sys_setsockopt+0x13d/0x1b0
[  576.310461][T24652]        do_syscall_64+0x174/0x580
[  576.312531][T24652]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.314944][T24652] 
[  576.314944][T24652] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  576.317556][T24652]        lock_sock_nested+0x41/0x100
[  576.319397][T24652]        inet_shutdown+0x6a/0x390
[  576.321251][T24652]        nbd_mark_nsock_dead+0x2cb/0x550
[  576.323110][T24652]        recv_work+0x1cef/0x1e10
[  576.324700][T24652]        process_scheduled_works+0xa8e/0x14e0
[  576.326603][T24652]        worker_thread+0xa47/0xfb0
[  576.328223][T24652]        kthread+0x389/0x470
[  576.329674][T24652]        ret_from_fork+0x514/0xb70
[  576.331281][T24652]        ret_from_fork_asm+0x1a/0x30
[  576.332940][T24652] 
[  576.332940][T24652] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  576.335311][T24652]        __mutex_lock+0x19d/0x1590
[  576.336920][T24652]        nbd_queue_rq+0x373/0x1150
[  576.338536][T24652]        blk_mq_dispatch_rq_list+0x499/0x1990
[  576.340449][T24652]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  576.342560][T24652]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  576.344526][T24652]        blk_mq_run_hw_queue+0x348/0x4f0
[  576.346334][T24652]        blk_mq_dispatch_list+0xd11/0xe10
[  576.348143][T24652]        blk_mq_flush_plug_list+0x45f/0x540
[  576.350008][T24652]        __blk_flush_plug+0x3ed/0x4d0
[  576.351702][T24652]        __submit_bio+0x465/0x560
[  576.353272][T24652]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  576.355178][T24652]        block_read_full_folio+0x599/0x830
[  576.356980][T24652]        filemap_read_folio+0x12c/0x3a0
[  576.358730][T24652]        do_read_cache_folio+0x354/0x590
[  576.360481][T24652]        read_part_sector+0xb6/0x2b0
[  576.362128][T24652]        adfspart_check_ICS+0xb1/0x960
[  576.363845][T24652]        bdev_disk_changed+0x82b/0x1780
[  576.365564][T24652]        blkdev_get_whole+0x372/0x510
[  576.367292][T24652]        bdev_open+0x324/0xd70
[  576.368798][T24652]        blkdev_open+0x461/0x600
[  576.370328][T24652]        do_dentry_open+0x816/0x1380
[  576.371967][T24652]        vfs_open+0x3b/0x340
[  576.373502][T24652]        path_openat+0x2e3b/0x3890
[  576.375249][T24652]        do_file_open+0x23e/0x4a0
[  576.376882][T24652]        do_sys_openat2+0x113/0x200
[  576.378548][T24652]        __x64_sys_openat+0x138/0x170
[  576.380237][T24652]        do_syscall_64+0x174/0x580
[  576.381867][T24652]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.383841][T24652] 
[  576.383841][T24652] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  576.386082][T24652]        __mutex_lock+0x19d/0x1590
[  576.387700][T24652]        nbd_queue_rq+0xc1/0x1150
[  576.389277][T24652]        blk_mq_dispatch_rq_list+0x499/0x1990
[  576.391533][T24652]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  576.393793][T24652]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  576.395854][T24652]        blk_mq_run_hw_queue+0x348/0x4f0
[  576.397703][T24652]        blk_mq_dispatch_list+0xd11/0xe10
[  576.399598][T24652]        blk_mq_flush_plug_list+0x45f/0x540
[  576.401466][T24652]        __blk_flush_plug+0x3ed/0x4d0
[  576.403175][T24652]        __submit_bio+0x465/0x560
[  576.404766][T24652]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  576.406885][T24652]        block_read_full_folio+0x599/0x830
[  576.408852][T24652]        filemap_read_folio+0x12c/0x3a0
[  576.410582][T24652]        do_read_cache_folio+0x354/0x590
[  576.412482][T24652]        read_part_sector+0xb6/0x2b0
[  576.414168][T24652]        adfspart_check_ICS+0xb1/0x960
[  576.415901][T24652]        bdev_disk_changed+0x82b/0x1780
[  576.417676][T24652]        blkdev_get_whole+0x372/0x510
[  576.419447][T24652]        bdev_open+0x324/0xd70
[  576.420982][T24652]        blkdev_open+0x461/0x600
[  576.422599][T24652]        do_dentry_open+0x816/0x1380
[  576.424289][T24652]        vfs_open+0x3b/0x340
[  576.425771][T24652]        path_openat+0x2e3b/0x3890
[  576.427384][T24652]        do_file_open+0x23e/0x4a0
[  576.428989][T24652]        do_sys_openat2+0x113/0x200
[  576.430620][T24652]        __x64_sys_openat+0x138/0x170
[  576.432328][T24652]        do_syscall_64+0x174/0x580
[  576.433962][T24652]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.435966][T24652] 
[  576.435966][T24652] -> #3 (set->srcu){.+.+}-{0:0}:
[  576.438215][T24652]        __synchronize_srcu+0xc9/0x2f0
[  576.439986][T24652]        elevator_switch+0x1e8/0x7b0
[  576.441714][T24652]        elevator_change+0x2fa/0x480
[  576.443446][T24652]        elevator_set_default+0x375/0x440
[  576.445245][T24652]        blk_register_queue+0x3f3/0x4e0
[  576.447013][T24652]        __add_disk+0x6cb/0xe30
[  576.448644][T24652]        add_disk_fwnode+0xfb/0x4b0
[  576.450316][T24652]        nbd_dev_add+0x733/0xb60
[  576.451880][T24652]        nbd_init+0x15f/0x1e0
[  576.453373][T24652]        do_one_initcall+0x250/0x870
[  576.455048][T24652]        do_initcall_level+0x10a/0x1a0
[  576.456797][T24652]        do_initcalls+0x59/0xa0
[  576.458490][T24652]        kernel_init_freeable+0x29d/0x3e0
[  576.460356][T24652]        kernel_init+0x1d/0x1d0
[  576.461923][T24652]        ret_from_fork+0x514/0xb70
[  576.463573][T24652]        ret_from_fork_asm+0x1a/0x30
[  576.465254][T24652] 
[  576.465254][T24652] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  576.467711][T24652]        __mutex_lock+0x19d/0x1590
[  576.469320][T24652]        elevator_change+0x1af/0x480
[  576.471008][T24652]        elevator_set_none+0xb5/0x140
[  576.472683][T24652]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  576.474666][T24652]        nbd_start_device+0x189/0xb30
[  576.476347][T24652]        nbd_genl_connect+0x1597/0x1c10
[  576.478151][T24652]        genl_family_rcv_msg_doit+0x233/0x340
[  576.480113][T24652]        genl_rcv_msg+0x614/0x7a0
[  576.481731][T24652]        netlink_rcv_skb+0x226/0x4a0
[  576.483393][T24652]        genl_rcv+0x28/0x40
[  576.484902][T24652]        netlink_unicast+0x7bb/0x940
[  576.486970][T24652]        netlink_sendmsg+0x813/0xb40
[  576.489133][T24652]        ____sys_sendmsg+0x9b9/0xa20
[  576.491146][T24652]        ___sys_sendmsg+0x2a5/0x360
[  576.493262][T24652]        __x64_sys_sendmsg+0x1bd/0x2a0
[  576.495513][T24652]        do_syscall_64+0x174/0x580
[  576.497567][T24652]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.500153][T24652] 
[  576.500153][T24652] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}:
[  576.503654][T24652]        blk_alloc_queue+0x544/0x690
[  576.505824][T24652]        __blk_mq_alloc_disk+0x194/0x390
[  576.508149][T24652]        nbd_dev_add+0x494/0xb60
[  576.510226][T24652]        nbd_init+0x15f/0x1e0
[  576.512145][T24652]        do_one_initcall+0x250/0x870
[  576.514313][T24652]        do_initcall_level+0x10a/0x1a0
[  576.516801][T24652]        do_initcalls+0x59/0xa0
[  576.518879][T24652]        kernel_init_freeable+0x29d/0x3e0
[  576.521241][T24652]        kernel_init+0x1d/0x1d0
[  576.523279][T24652]        ret_from_fork+0x514/0xb70
[  576.525341][T24652]        ret_from_fork_asm+0x1a/0x30
[  576.527527][T24652] 
[  576.527527][T24652] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  576.530522][T24652]        __lock_acquire+0x1520/0x2cd0
[  576.532739][T24652]        lock_acquire+0x106/0x350
[  576.534827][T24652]        fs_reclaim_acquire+0x71/0x100
[  576.537077][T24652]        __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  576.539867][T24652]        kstrdup+0x42/0x100
[  576.541768][T24652]        kernfs_rename_ns+0x45e/0x800
[  576.543920][T24652]        sysfs_rename_link_ns+0x16e/0x1b0
[  576.546002][T24652]        device_rename+0x110/0x210
[  576.547745][T24652]        ib_device_rename+0x27c/0x6c0
[  576.549704][T24652]        nldev_set_doit+0x2d8/0x4c0
[  576.551574][T24652]        rdma_nl_rcv+0x6ef/0xa40
[  576.553610][T24652]        netlink_unicast+0x7bb/0x940
[  576.555698][T24652]        netlink_sendmsg+0x813/0xb40
[  576.557890][T24652]        ____sys_sendmsg+0x9b9/0xa20
[  576.560084][T24652]        ___sys_sendmsg+0x2a5/0x360
[  576.562268][T24652]        __x64_sys_sendmsg+0x1bd/0x2a0
[  576.564576][T24652]        do_syscall_64+0x174/0x580
[  576.566719][T24652]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.569339][T24652] 
[  576.569339][T24652] other info that might help us debug this:
[  576.569339][T24652] 
[  576.573493][T24652] Chain exists of:
[  576.573493][T24652]   fs_reclaim --> cpuhp_state_mutex --> &root->kernfs_rwsem
[  576.573493][T24652] 
[  576.578763][T24652]  Possible unsafe locking scenario:
[  576.578763][T24652] 
[  576.581813][T24652]        CPU0                    CPU1
[  576.583987][T24652]        ----                    ----
[  576.586190][T24652]   lock(&root->kernfs_rwsem);
[  576.588186][T24652]                                lock(cpuhp_state_mutex);
[  576.591033][T24652]                                lock(&root->kernfs_rwsem);
[  576.594017][T24652]   lock(fs_reclaim);
[  576.595447][T24652] 
[  576.595447][T24652]  *** DEADLOCK ***
[  576.595447][T24652] 
[  576.598157][T24652] 3 locks held by syz.1.5037/24652:
[  576.600065][T24652]  #0: ffffffff9a882828 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x33d/0xa40
[  576.603517][T24652]  #1: ffffffff8fb4a5e8 (devices_rwsem){++++}-{4:4}, at: ib_device_rename+0x89/0x6c0
[  576.607300][T24652]  #2: ffff8881012cc980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x800
[  576.611302][T24652] 
[  576.611302][T24652] stack backtrace:
[  576.613744][T24652] CPU: 1 UID: 0 PID: 24652 Comm: syz.1.5037 Not tainted syzkaller #0 PREEMPT(full) 
[  576.613766][T24652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  576.613778][T24652] Call Trace:
[  576.613786][T24652]  <TASK>
[  576.613793][T24652]  dump_stack_lvl+0xe8/0x150
[  576.613817][T24652]  print_circular_bug+0x2e1/0x300
[  576.613840][T24652]  check_noncircular+0x12e/0x150
[  576.613861][T24652]  __lock_acquire+0x1520/0x2cd0
[  576.613881][T24652]  ? __lock_acquire+0x683/0x2cd0
[  576.613900][T24652]  ? __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  576.613914][T24652]  lock_acquire+0x106/0x350
[  576.613929][T24652]  ? __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  576.613943][T24652]  ? kernfs_root+0x1c/0x230
[  576.613957][T24652]  fs_reclaim_acquire+0x71/0x100
[  576.613972][T24652]  ? __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  576.613987][T24652]  __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  576.614003][T24652]  ? kernfs_name_hash+0x1ef/0x230
[  576.614014][T24652]  ? kernfs_rename_ns+0x45e/0x800
[  576.614031][T24652]  kstrdup+0x42/0x100
[  576.614041][T24652]  kernfs_rename_ns+0x45e/0x800
[  576.614052][T24652]  sysfs_rename_link_ns+0x16e/0x1b0
[  576.614061][T24652]  device_rename+0x110/0x210
[  576.614070][T24652]  ib_device_rename+0x27c/0x6c0
[  576.614082][T24652]  ? __pfx_ib_device_rename+0x10/0x10
[  576.614090][T24652]  ? ib_device_get_by_index+0x1e7/0x270
[  576.614100][T24652]  ? nla_strscpy+0x10f/0x170
[  576.614110][T24652]  nldev_set_doit+0x2d8/0x4c0
[  576.614119][T24652]  ? __lock_acquire+0x683/0x2cd0
[  576.614129][T24652]  ? __pfx_nldev_set_doit+0x10/0x10
[  576.614154][T24652]  ? bpf_lsm_capable+0x9/0x20
[  576.614162][T24652]  ? security_capable+0x7e/0x2c0
[  576.614173][T24652]  ? __pfx_nldev_set_doit+0x10/0x10
[  576.614180][T24652]  rdma_nl_rcv+0x6ef/0xa40
[  576.614190][T24652]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  576.614202][T24652]  ? netlink_deliver_tap+0x2e/0x1b0
[  576.614213][T24652]  ? netlink_deliver_tap+0x2e/0x1b0
[  576.614223][T24652]  netlink_unicast+0x7bb/0x940
[  576.614235][T24652]  netlink_sendmsg+0x813/0xb40
[  576.614246][T24652]  ? __pfx_netlink_sendmsg+0x10/0x10
[  576.614257][T24652]  ? aa_sock_msg_perm+0xf1/0x1b0
[  576.614267][T24652]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  576.614274][T24652]  ? __pfx_netlink_sendmsg+0x10/0x10
[  576.614284][T24652]  ____sys_sendmsg+0x9b9/0xa20
[  576.614295][T24652]  ? __might_fault+0xaf/0x130
[  576.614306][T24652]  ? __pfx_____sys_sendmsg+0x10/0x10
[  576.614318][T24652]  ? import_iovec+0x73/0xa0
[  576.614327][T24652]  ___sys_sendmsg+0x2a5/0x360
[  576.614337][T24652]  ? __lock_acquire+0x683/0x2cd0
[  576.614347][T24652]  ? __pfx____sys_sendmsg+0x10/0x10
[  576.614358][T24652]  ? futex_wake+0x4d7/0x5b0
[  576.614369][T24652]  ? __fget_files+0x2a/0x420
[  576.614380][T24652]  ? __fget_files+0x3a2/0x420
[  576.614392][T24652]  __x64_sys_sendmsg+0x1bd/0x2a0
[  576.614442][T24652]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  576.614464][T24652]  ? rcu_is_watching+0x15/0xb0
[  576.614486][T24652]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.614502][T24652]  do_syscall_64+0x174/0x580
[  576.614521][T24652]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.614535][T24652] RIP: 0033:0x7f855259e159
[  576.614549][T24652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  576.614561][T24652] RSP: 002b:00007f8553391028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  576.614576][T24652] RAX: ffffffffffffffda RBX: 00007f8552826090 RCX: 00007f855259e159
[  576.614586][T24652] RDX: 00000000000488c0 RSI: 0000200000000040 RDI: 000000000000000b
[  576.614594][T24652] RBP: 00007f855263506b R08: 0000000000000000 R09: 0000000000000000
[  576.614602][T24652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  576.614609][T24652] R13: 00007f8552826128 R14: 00007f8552826090 R15: 00007ffc63e6ff08
[  576.614626][T24652]  </TASK>
[  576.790734][T24652] smbdirect: ib_dev[syz2] renamed to [sys]
[  578.446346][T24616] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  578.452352][T24629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5030'.
