last executing test programs:

2.049202255s ago: executing program 2 (id=4674):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
socket$alg(0x26, 0x5, 0x0) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) (async)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="b6", 0x1}], 0x1, 0x0, 0x0, 0x20040091}, 0x8000)
accept4(r1, 0x0, 0x0, 0x0) (async)
accept4(r1, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="18000040000000780c00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300004801000085000000d2000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000002a000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="18000040000000780c00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300004801000085000000d2000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000002a000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94)
r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4)
getsockopt$ax25_int(r4, 0x101, 0x9, 0x0, 0x0) (async)
getsockopt$ax25_int(r4, 0x101, 0x9, 0x0, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000440)={{{@in=@private=0xa010102, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e21, 0x65, 0x4e20, 0x0, 0xa, 0x0, 0x0, 0x32, 0x0, 0xee01}, {0x5, 0x6, 0x8, 0xe000000000000000, 0x1, 0x3, 0xb, 0x100}, {0x4, 0xffff, 0x6, 0x1}, 0x66, 0x6e6bbf, 0x1, 0x0, 0x1, 0x3}, {{@in6=@private0, 0x4d5, 0x3c}, 0xa, @in=@local, 0x3507, 0x3, 0x3, 0x2, 0x4, 0x600, 0xe66}}, 0xe8)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x21, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0xe76}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@tail_call, @tail_call, @call={0x85, 0x0, 0x0, 0xb4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @map_val={0x18, 0x9, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2fe4}, @alu={0x7, 0x0, 0x5, 0x5, 0x5, 0x50, 0x4}, @map_fd], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='GPL\x00', 0x7, 0xeb, &(0x7f0000000880)=""/235, 0x41100, 0x57, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000ac0)={0x5, 0x9, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000b00)=[r3, r3, r3, r5, 0xffffffffffffffff, r3, r3], &(0x7f0000000b40)=[{0x0, 0x1, 0x9, 0xb}, {0x1, 0x3, 0x4000b, 0x2}]}, 0x94)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "00008000e89700", "950000cffd914d4f51b57b3f80df847f", '\x00', "00000200"}, 0x28) (async)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "00008000e89700", "950000cffd914d4f51b57b3f80df847f", '\x00', "00000200"}, 0x28)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$inet6_sctp(0xa, 0x1, 0x84)
writev(r2, &(0x7f0000000300)=[{&(0x7f0000000380)}, {&(0x7f00000029c0)="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", 0xec4}, {&(0x7f0000000140)="e0c2e66c396af50c86950b5aa3c4d905f489b118a865ac614747e9f90200854a85fcebd0ff9355146e2ff7e43e6f39c5ea834c25e630240c022df9aac891d8a9c0b25dd7ef06f1e7dad414b91dab494e", 0x50}], 0x3)
gettid() (async)
gettid()
pipe(0x0)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r6, 0xffffffffffffffff, 0x26, 0x0, @val=@netfilter={0x0, 0x1, 0xea}}, 0x20)
socket(0x10, 0x803, 0x0)
shutdown(0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)

1.950209967s ago: executing program 2 (id=4675):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
socket$l2tp6(0xa, 0x2, 0x73) (async)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x400, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x330, 0x238, 0x238, 0x330, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@eui64={{0x28}}, @common=@inet=@sctp={{0x148}, {[0x4e21], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd], 0x0, [], 0x0, 0x0, 0x2000000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', {0x4000000000000000}}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad780bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
socket(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r3)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0100001a000100feffffff00010000fc020000000000000000000000000001fc0100000000000000000000000000014001071c4e2300050a0000003a446800", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000e000000100000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c25080000000000050000000000000081000000000000000000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffc030000ff0000008000000000350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014000e00ffffffff00"/260], 0x14c}}, 0x844) (async)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0100001a000100feffffff00010000fc020000000000000000000000000001fc0100000000000000000000000000014001071c4e2300050a0000003a446800", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000e000000100000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c25080000000000050000000000000081000000000000000000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffc030000ff0000008000000000350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014000e00ffffffff00"/260], 0x14c}}, 0x844)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r6, 0x1, 0x10, &(0x7f0000001280)=r3, 0x4)
getpid() (async)
r7 = getpid()
recvmsg(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000300)=""/79, 0x4f}, {&(0x7f0000000380)=""/63, 0x3f}, {&(0x7f0000000440)=""/69, 0x45}, {&(0x7f0000000940)=""/121, 0x79}, {&(0x7f00000009c0)=""/100, 0x64}], 0x5}, 0x40000100)
sendmsg$unix(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0), 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000007139bcb826615cd27980c32db129144137dcc2ba0009682d310085675b58f282e41e7ea260b55cdd381ecf62b579675e75fb549cf8850d1f3fb75b83ae3027a3"], 0x18, 0x20020091}, 0x20018814)
write$cgroup_pid(r3, &(0x7f0000000400)=r7, 0x12)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req={0x1, 0x80000000, 0xc4bd, 0x2}, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="f7e7c7efd79d89d51c5844a65036284efef1f8394fd3c5015e2aef5eabe5fa97d066d311e1d0e51a40166e970c528537915c51d77f721b1ef7dcb18b9a2e445421a27d14176199ece9f3fc402b9d5a672c842b9028af104945033cf097eef43763a795692051793d205e3c20cb16a3010cb85b163c7e5c35be5362527a75807a7d630cb45a4a694fd97e4837b14e2387ca44631084aff7fa8a6605a81c190a4040b07e89da7de469075da5b8422afe8d", @ANYRESOCT=r0], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r8}, 0x4)
bind$l2tp6(r2, &(0x7f0000000240)={0xa, 0x0, 0x3e600003, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf7ff0000}, 0x20)

1.880044217s ago: executing program 0 (id=4676):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f0000004240)=@delneigh={0x28, 0x1d, 0x1, 0x70bd25, 0x7, {0x2, 0x0, 0x0, 0x0, 0x0, 0x84, 0x2}, [@NDA_DST_MAC={0xa, 0x1, @multicast}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f7ffffffb703000018000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "b58d0be6cbedb8c1", "a50c9906078b348f73a8566e04b528036d4de59653c724dc9c9566e9f63a5fed", "18a3cf41", "df0e87a218d9f97f"}, 0x38)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x38, 0x140e, 0x100, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8850}, 0x20004080)
sendmsg$inet_sctp(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="200000000000000084"], 0x20, 0x4048800}, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r6 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xe69, 0x298d}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x2000c004)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x20000080)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "93b16e08a0a473d7", "3de1cf233ab75bc47bf466858f431c77", "5bb70402", "d5e971b35bc8ec9a"}, 0x28)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b00)=ANY=[@ANYRES32], 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0xc040841)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303, 0x36}, "00000007e4008000", "8b3de2aabceef22f419e59f30000000004000000000200", "e73400", "000000d900"}, 0x38)

1.879630669s ago: executing program 0 (id=4677):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) (async)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000dd0800020073797a31000000000800044000d01852c3ea5c87c0fe0000000900913d4d247a3000bc608c1f41b9e3870000000800034000000001140000001100010000000000"], 0x64}}, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0xd, 0x1fffd, 0x0, 0x3}, 0x10) (async)
write(r2, &(0x7f00000000c0)="1b0000001e005f0214fffffffffffff80700000001000000000000", 0x1b) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', <r3=>0x0}) (rerun: 64)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000440)={'syztnl1\x00', r3, 0x29, 0x97, 0x78, 0x5bdfa93d, 0x30, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x8000, 0x86f}}) (async)
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)

1.878675802s ago: executing program 0 (id=4678):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="1400000010000100000000001b0000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a300000000048000480440001800b000100657874686472000034000280080001400000000b080004400000001908000340000000f905000200830000000800064000000002"], 0xf8}}, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "0100008000", "cf6ff9ff337ed3010601bfc100", "dc07ff00", "16de86d67a8426bd"}, 0x28)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffffff, 0x2, 0x3, 0xe, 0x4101, 0x10}, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={<r3=>0x0, @rand_addr, @empty}, &(0x7f0000000200)=0xc)
sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000490000042dbd7000fcdbdf250a000000", @ANYRES32=r3, @ANYBLOB="ff0ba07f14000100ff010000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0xc814}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x2, 0x4, 0x8, 0xf}, 0x50)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r4}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
getsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4)
socketpair(0x1e, 0x6, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r8)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000016c0)={'wlan0\x00', <r10=>0x0})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$netlink(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x44, r9, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x0, 0x24}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r7, &(0x7f0000001640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001600)={&(0x7f0000000140)={0x14a8, r9, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x1494, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xe3, 0x0, "1400645e44f14a179bb461241e457aa183da56b3224220ddd142951016c190ac6a02f0c3f3c055216361bdd762ccb52f55270c81c8e6d85eec1df78ec34d8fa07ba58248f7e1da37c8b502cc0cb3b0d90db7bf11d8050aad48a6919cd5d6e60294c5923f86fe95c80fae1768ddd1e41ce5009d1bc83aefbe2b1b5f2cda8fd0e3f53babb618493703837a1ffbe3e613d84d922e040880b47074b57b71bd5bdf3c7d54fcdb9d729c5e83acfd9724c647193aedf22b9d3c506750866c5a14028fe5d6c4c12b5b4c24d6c3f6f983ff9cc9589eb9ecd45f0b9256330c6b700b881a"}, @NL80211_BAND_5GHZ={0x1004, 0x1, "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"}, @NL80211_BAND_6GHZ={0x2f, 0x3, "164e75c74be8a69e779a780ab4d6469566ae3851afaec732738c41fa4f6871d6e7c75093f51d295e6241b5"}, @NL80211_BAND_5GHZ={0x7e, 0x1, "def274dd7452aa5b544a820148cfad757b0fd5dc5c3580e465267a64a1c0c1a8896195e8f071690750813e119533b9fcf4185f2e3bf354a0d2c325e2fa81e46fbd24d568f5562fe12c84f6cc1969c51ecfa045b11460915c34942b228f8d7d4b74a48d0a5ec252f2858ac3d1759a6cced597200d29819052e8bb"}, @NL80211_BAND_5GHZ={0xcc, 0x1, "af6364913b465f4ab9e0eebbc7d821e167442516f9565dccc0cbde27c19b9c582d1a2d72a091a366e6c8cbfa22a40c9d7f806691f460b411f7b69af58cf4a45817b380b7605d01897b79d07236fab1f5dedb001fce8d0cac0bd600e4d758e36ad1bc4fd2537b7b0f0a510b6f2ccfc84971d6ef81df2c840f19388daf199b0b494328145019cf9f9ada4255e2f971576181138b29cc214a8bc44325af18bf010d1ae21f822ac655100eb5771567050ae6522683d50ee7943148ae56f9589b38e64f8cd0448db0b784"}, @NL80211_BAND_5GHZ={0xe0, 0x1, "bc91b9cb4fc2c50fdad7fe71645623fb68211eeae74d40b4348d1c9744218f1f7eff41b9d22045e51b996988e691be33ceef19de131ddcbb0ade1ec0231db2cd29f77d1d1bd9dc50c88b283cd0cdc0994b2fb7f4a34bd57bc1ff33e292cedc01ef4568d750db637a565f8806f7beeb23d851c1154d3be2bca8b6fb325a4e10b5900bbc412bf41731fc204b13ffbb735a482ce171ae76867aabbf7be2b1ed03fcd106f3c8081037e994efab878146a4360d8bc5e2f2c094c3fd108d9c87c43a1fec9e15059073fdfd3d04f4ec06822beb4ba8a19bb509b4e1e8864015"}, @NL80211_BAND_6GHZ={0x54, 0x3, "83e22d0829c93eef8819694d5bfd6cb81ea4d6319c405b207343febe6b2e820037e282ed6deb13f93a83a469fec9569b832da9c315706b2e218172ac26d070e430f3c74483c1999ab496fce5e251c708"}, @NL80211_BAND_60GHZ={0xb2, 0x2, "ec6b1aa79a7cc4772fc308790d4e10305bdca143a31d9e973de61c528610300b32f4101e08e93786b71bd0fda5b7ac66d7f5945e05225b5a4c64e9f6e2ae9db56cdcea4cd86c5957f1aee9e22276bc720e907113b9988cb97d406f21d2663a767bb60039cfc694943cb0710787a8cde4476b8a59097389a055fe21213aa9a1db507bb87781a4eab0d38d0b2b74e72148d5f4c7289114b9df78045196bcf0d1fe87b87dc45e3d7ddce12a83a1ba84"}, @NL80211_BAND_6GHZ={0x44, 0x3, "fa3dd400aea70dd2b48083a4d849419488961c2346dd8e0e25b55e2150745900f2175a7777c6294b329cbd0d86ed3b90659ddb552bd8af0f5775e460fb2f7246"}]}]}, 0x14a8}, 0x1, 0x0, 0x0, 0x24000845}, 0x40)
ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100))
ioctl$int_in(r0, 0x5452, &(0x7f0000001f00)=0xf)
recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x1, 0x0, 0x0)

1.080181199s ago: executing program 2 (id=4684):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x7ff, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000500)="4002", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}], 0x1}}], 0x2, 0xc0400d0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="24070200"/20, @ANYRES32=0x0, @ANYBLOB="0c000d800500030004000000"], 0x24}, 0x1, 0x5502000000000000}, 0x4000)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, r7, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x4000000)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)
r8 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4)
socket$inet(0x2, 0x1, 0x0)

1.0783585s ago: executing program 2 (id=4685):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r2, 0x29, 0x38, 0x0, 0x0)
poll(&(0x7f00000002c0)=[{r1, 0x8504}], 0x1, 0xfffffffb)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @remote, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010003000000ffdbdf2502"], 0x2c}, 0x1, 0x0, 0x0, 0x4048002}, 0x90)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)

979.735413ms ago: executing program 0 (id=4686):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "c9bae94572726b2d", "4c502b3961ae7dacec77d5362bc897ab", "bd18e953", "091000c56a001700"}, 0x28) (async)
sendto$inet6(r0, &(0x7f0000000240)="c6", 0x1, 0x8040, 0x0, 0x0) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000008164000000000000000000000071122e0000000000950000002e056426e85bdb02530000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async, rerun: 32)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
readv(r2, &(0x7f00000000c0)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1) (async)
write(r0, 0x0, 0x1)

400.064676ms ago: executing program 1 (id=4689):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r1 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@rc, &(0x7f0000000000)=0x80)
sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xf4, 0x0, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x404e}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x800}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4a}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1a}]}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8001}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) (async)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0xfffffffe, @empty}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="ed6f644c0f", @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x4008041}, 0x200c1) (async)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000e80)=@gcm_256={{0x303, 0x36}, "437e509e2d2800", "8b3de2aabceef2a0640000d5a66fd32f419e59f3000000000400", "7d939a3c"}, 0x38)

398.424927ms ago: executing program 1 (id=4690):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000300)=0x100000001, 0xfffffffffffffef7)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r1)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r2, 0x100, 0x70bd27, 0x25dfdc02, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4885}, 0x90)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@ipv6_delrule={0x4c, 0x21, 0x20, 0x70bd29, 0x25dfdbfe, {0xa, 0x80, 0x10, 0x9, 0x80, 0x0, 0x0, 0x5, 0x10}, [@FRA_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e23}}, @FRA_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x9, 0x7})
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r8, 0x6, 0x15, &(0x7f0000000280)=0xffff, 0x4)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0)
r10 = accept4(r9, 0x0, 0x0, 0x800)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0xb0, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x9c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x29, 0x4, "9ebf89a6efed047a754a2dd316fbd22de257b81aec75ce93c9c989f1a9e3a1eb278565932b"}, @ETHTOOL_A_BITSET_MASK={0x61, 0x5, "a4f827345ff1072c2aaabce6f7c81bd8c0e78f44f55daecbd4f5e21df266dd83949a027838d5c258816744a078a99048bb706383df8efb9a2ca03ae858de7c9be84c86b6d1709f6295c6961c06d3a06f98e6a21887ad7e5c09ed761ac5"}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
getpid()

330.008243ms ago: executing program 2 (id=4691):
socket$inet(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000000), &(0x7f0000000140)=r6}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f00000001c0), &(0x7f0000000280)=r7}, 0x20)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@ccm_128={{0x303}, "d579f7bf7a8547e5", "d38800000000d9e119e8021a6cf000", "7eb09414", "976f2a244e5025c9"}, 0x28)
sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000006000000040000000000000e0300000000000000010000000000001200000000000000000000000202000000002e000061006ec98464a77fdec73833b92449c799d666d3f2115f23a5e7448c107f833b7f7f3aaefa64ae08e4a3b57e928baae335f8fada7ba3cf62b20a7d73e17458fb8a644d9d4257c90177f100009334ac502803efa2"], 0x0, 0x46}, 0x28)
close(r0)

324.616778ms ago: executing program 2 (id=4692):
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000f80)="f6fd4b4371b9cee432fc34e3b0cde3c10d835add05a2a055159b2312cff09dcbea4964835e21d0bdce7cec7a3ccf45ade70cdfa3244c6283342b161cf9be8a3390867042297df641f139ed0e0f6ee57129d551ca34c4b59067be7d74b1f483aee866db92965e73ce2299d080ea0d6b2233b2b8f43150ec0758c7f59f9f4fd5b7c4", 0x81}], 0x1)
close(0x4) (async)
close(0x4)
listen(r0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0) (async)
listen(r2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20)
sendmmsg$inet6(r2, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x4, 0x1, 0x2, 0x0, 0x110}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x13}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x80f, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r7 = socket(0xa, 0x5, 0x0)
r8 = getpid()
socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r10, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) (async)
sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r10, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
sendmsg$inet_sctp(r7, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x34000}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x5}}, @sndinfo={0x20, 0x84, 0x2, {0x89, 0x9, 0x2, 0xd}}], 0x38, 0x4008000}, 0x28008841)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10)

229.96964ms ago: executing program 1 (id=4693):
ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000380)=0x20) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
recvfrom$inet6(r1, &(0x7f0000002780)=""/4096, 0x1000, 0x10180, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000004c0)=ANY=[@ANYRES16=r0], 0x54}, 0x1, 0x0, 0x0, 0x24004081}, 0x40) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "60db399c363a35d0", "d03d0a336d45d681db9d813f3bec5a97", "00001000", "00000052a1078f00"}, 0x28) (async)
sendto$inet6(r0, &(0x7f0000000240)="c6", 0x1, 0x8040, 0x0, 0x0) (async)
r4 = socket$alg(0x26, 0x5, 0x0) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r5 = socket$kcm(0x29, 0x2, 0x0) (async)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={r6})
setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000300)={0x5, "da0661"}, 0x6) (async)
bind$alg(r4, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async)
accept$alg(r4, 0x0, 0x0) (async)
socket$inet(0x2, 0x4, 0x80000001) (async)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$igmp(0x2, 0x3, 0x2)
r8 = socket$inet_icmp(0x2, 0x2, 0x1)
sendfile(r8, r3, &(0x7f0000000100)=0x4, 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf2500000000000000000000000000000000ff010000000000000000000000000001000400004e210001000000002e000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="06"], 0x15c}, 0x1, 0x0, 0x0, 0x890}, 0x2014)
socket$nl_netfilter(0x10, 0x3, 0xc)

140.203761ms ago: executing program 1 (id=4694):
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xb, 0x9, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async)
socket(0x22, 0x2, 0x3)
socket(0x21, 0x6, 0x8)
syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff)
unshare(0x2020400) (async)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r3, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r7=>0x0}) (async)
socket$kcm(0x2, 0xf, 0x2)
write$tun(0xffffffffffffffff, 0x0, 0xffe)
r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00')
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) (async)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)={0x34, r2, 0x200, 0xffffffff, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'Mbd\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x4048840)

139.763212ms ago: executing program 1 (id=4695):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x4040090) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x50)
ioctl$XFS_IOC_RTGROUP_GEOMETRY(r3, 0xc0805841, &(0x7f0000000480)={0xbb, 0x922c, 0x3, 0x0, 0x6}) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x14, r5, 0x1, 0x70bd2b, 0x0, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0x4000000) (async)
close(r4)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0}) (async)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0xba, 0x2, 0x6, 0x0, 0xa1, 0x6, 0xfc, 0xfd, 0x0, 0x0, 0xff, 0x1}, 0xe) (async)
shutdown(r9, 0x0) (async)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r10, &(0x7f0000000c80)={0x2, 0x4e23, @local}, 0x10) (async)
r11 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r11, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async)
setsockopt$inet_mreqsrc(r10, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r7, 0x5, 0x0, 0x0, {{0x5d}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) (async)
sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r7, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x20000811)

138.723449ms ago: executing program 0 (id=4696):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x2, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x4000)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x14, r6, 0x1, 0xffffffff}, 0x14}}, 0x4000000)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4)
socket$inet(0x2, 0x1, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x88, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}]}, 0x88}}, 0x20000000)
r9 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x5, 0x5, 0x80000001, 0x7, 0x8, 0xbb, 0x7fffffffffffffff}, &(0x7f0000000240)={0x100000000, 0x80000001, 0x8000000000000000, 0x5, 0x4, 0x7, 0x1, 0x2}, &(0x7f0000000300)={0x3, 0x1, 0x80000001, 0x9, 0x8000, 0x7fffffffffffffff, 0x9, 0x7fc8}, &(0x7f0000000340)={0x77359400}, &(0x7f0000000540)={&(0x7f0000000440)={[0x3]}, 0x8})
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2033}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
bind$llc(0xffffffffffffffff, 0x0, 0x0)

60.303673ms ago: executing program 1 (id=4697):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r1 = socket$inet6(0xa, 0x5, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x300, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x20000444)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000540)={0x2c, 0x8, 0x2, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast1}, @dev={0xfe, 0x80, '\x00', 0x37}, @ipv4={'\x00', '\xff\xff', @remote}]}, 0x48)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x92}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x24}, 0x100001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)={0x81, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFCTH_POLICY={0x0, 0x4, 0x0, 0x1, {0x0, 0x1, 0x1, 0x0, 0x7fff}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40894}, 0x4000080)
close(r5)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r7 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4e21, 0x5, @empty, 0x3}, 0xd)
connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r8, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
listen(r8, 0x80)
accept$netrom(r8, 0x0, 0x0)
connect$inet6(r4, 0x0, 0x0)
writev(r3, &(0x7f0000000300)=[{&(0x7f0000000140)="08b4cf06ba5c6d4c2d2174fcbdb577922d5fcdf47c0bd13e1e0316da4a63f89dea22c04bedbf286f740b1d1297fa9c5bd67ffc5d73db2986be9549f68212bbc59e84a174bcefc6826f9a39461aa40a066c83ffe6e91c9f9faf63c80b2cf500"/108, 0x1}, {&(0x7f00000003c0)="f6fd4b4371b9cee432fc34e3b0cde3c10d835add05a2a055159b2312cff09dcbea4964835e21d0bdce7cec7a3ccf45ade70cdfa3244c6283342b161cf9be8a3390867042297df641f139ed0e0f6ee57129d551ca34c4b59067be7d74b1f483aee866db92965e73ce2299d080ea0d6b2233b2b8f43150ec0758c7f59f9f4fd5b7c4", 0xffffff0d}], 0x2)

0s ago: executing program 0 (id=4698):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x80000000, 0x0, 0x0, 0x20780, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x80)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x7, 0x8, 0xb}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r2, 0x7}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20)
sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)="b0", 0x1}], 0x11}}], 0x2, 0x1)

kernel console output (not intermixed with test programs):

:(READ) flags 0x800000 phys_seg 1 prio class 2
[  255.495740][T11807] Buffer I/O error on dev nbd0, logical block 0, async page read
[  255.498870][T11807] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  255.505884][T11807] Buffer I/O error on dev nbd0, logical block 1, async page read
[  255.510461][T11807] ldm_validate_partition_table(): Disk read failed.
[  255.512702][T11807] Dev nbd0: unable to read RDB block 0
[  255.514662][T11807]  nbd0: unable to read partition table
[  255.518074][T11807] ldm_validate_partition_table(): Disk read failed.
[  255.520798][T11807] Dev nbd0: unable to read RDB block 0
[  255.523259][T11807]  nbd0: unable to read partition table
[  255.646375][T14950] nbd: must specify at least one socket
[  255.648455][T14950] block nbd1: NBD_DISCONNECT
[  255.651034][T14950] block nbd1: shutting down sockets
[  255.651652][T14948] bond0: entered promiscuous mode
[  255.654744][T14948] bond_slave_0: entered promiscuous mode
[  255.656981][T14948] bond_slave_1: entered promiscuous mode
[  255.659211][T14948] bond0: entered allmulticast mode
[  255.661697][T14948] bond_slave_0: entered allmulticast mode
[  255.663860][T14948] bond_slave_1: entered allmulticast mode
[  255.712148][T14951] dvmrp0: left allmulticast mode
[  255.789949][T14953] syzkaller0: entered promiscuous mode
[  255.792069][T14953] syzkaller0: entered allmulticast mode
[  255.813545][T14950] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  255.932458][T14962] block nbd1: NBD_DISCONNECT
[  255.956271][T14965] siw: device registration error -23
[  256.057690][T14967] bond7: entered promiscuous mode
[  256.059801][T14967] bond7: entered allmulticast mode
[  256.062221][T14967] 8021q: adding VLAN 0 to HW filter on device bond7
[  256.071790][T14967] macvlan3: entered promiscuous mode
[  256.073656][T14967] macvlan3: entered allmulticast mode
[  256.076956][T14967] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  256.585232][T15014] validate_nla: 3 callbacks suppressed
[  256.585246][T15014] netlink: 'syz.0.2577': attribute type 3 has an invalid length.
[  256.601032][T15014] siw: device registration error -23
[  256.655667][T15019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2579'.
[  256.666530][T15019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2579'.
[  256.669505][T15019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2579'.
[  256.846171][T15046] netlink: 'syz.0.2585': attribute type 1 has an invalid length.
[  257.083888][T15074] netlink: 'syz.1.2588': attribute type 3 has an invalid length.
[  257.140038][T15063] nbd0: detected capacity change from 0 to 63
[  257.144717][T15071] block nbd0: NBD_DISCONNECT
[  257.146434][T15071] block nbd0: Disconnected due to user request.
[  257.149108][T15071] block nbd0: shutting down sockets
[  257.161032][T11807] ldm_validate_partition_table(): Disk read failed.
[  257.163788][T11807] Dev nbd0: unable to read RDB block 0
[  257.164179][T15074] nbd: must specify an index to disconnect
[  257.165872][T11807]  nbd0: unable to read partition table
[  257.175520][T15063] nbd: must specify a device to reconfigure
[  257.177826][T15074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  257.187079][T11807] ldm_validate_partition_table(): Disk read failed.
[  257.196344][T11807] Dev nbd0: unable to read RDB block 0
[  257.199079][T11807]  nbd0: unable to read partition table
[  257.231718][T15083] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  257.878297][T15143] netlink: 'syz.2.2602': attribute type 1 has an invalid length.
[  257.912944][T15145] netlink: 'syz.2.2603': attribute type 3 has an invalid length.
[  257.919815][T15145] netlink: zone id is out of range
[  257.921899][T15145] netlink: zone id is out of range
[  257.923583][T15145] netlink: zone id is out of range
[  257.925239][T15145] netlink: zone id is out of range
[  258.040032][T15151] nbd2: detected capacity change from 0 to 63
[  258.046063][T15151] block nbd2: NBD_DISCONNECT
[  258.048200][T15151] block nbd2: Disconnected due to user request.
[  258.051165][T15151] block nbd2: shutting down sockets
[  258.055466][T11807] ldm_validate_partition_table(): Disk read failed.
[  258.058570][T11807] Dev nbd2: unable to read RDB block 0
[  258.065672][T11807]  nbd2: unable to read partition table
[  258.071178][T11807] ldm_validate_partition_table(): Disk read failed.
[  258.075789][T11807] Dev nbd2: unable to read RDB block 0
[  258.077996][T11807]  nbd2: unable to read partition table
[  258.179102][T15167] netlink: 'syz.2.2610': attribute type 3 has an invalid length.
[  258.195651][T15167] block nbd2: NBD_DISCONNECT
[  258.240601][   T56] block nbd0: Receive control failed (result -1)
[  259.071042][T15194] net_ratelimit: 3 callbacks suppressed
[  259.071055][T15194] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  259.306188][T15212] __nla_validate_parse: 12 callbacks suppressed
[  259.306210][T15212] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2624'.
[  259.335087][T15212] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2624'.
[  259.381637][T15215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2625'.
[  259.935314][T15234] netlink: 'syz.0.2631': attribute type 13 has an invalid length.
[  260.137616][T15251] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2636'.
[  260.193032][T15256] netlink: 'syz.1.2637': attribute type 3 has an invalid length.
[  260.228075][T15256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2637'.
[  260.231858][T15256] nbd: must specify an index to disconnect
[  260.238625][T15258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2638'.
[  260.545639][T15279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  260.551429][T15279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  260.555617][T15279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  260.561966][T15279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  260.566224][T15279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  260.576013][T15279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  260.578976][T15279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  260.582641][T15279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  260.586258][T15279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  260.728204][T15283] netlink: 'syz.2.2644': attribute type 3 has an invalid length.
[  260.819691][T15296] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2647'.
[  260.862914][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  260.898794][T15303] sctp: [Deprecated]: syz.0.2649 (pid 15303) Use of struct sctp_assoc_value in delayed_ack socket option.
[  260.898794][T15303] Use struct sctp_sack_info instead
[  261.612131][    C1] vcan0: j1939_tp_rxtimer: 0xffff888178d6d800: rx timeout, send abort
[  262.112185][    C1] vcan0: j1939_tp_rxtimer: 0xffff888178d6dc00: rx timeout, send abort
[  262.115617][    C1] vcan0: j1939_tp_rxtimer: 0xffff888178d6d800: abort rx timeout. Force session deactivation
[  262.244152][T15379] Cannot find del_set index 4 as target
[  262.254212][T15379] tunl0: Caught tx_queue_len zero misconfig
[  262.273960][T15375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2668'.
[  262.352545][T15387] netlink: 'syz.2.2672': attribute type 8 has an invalid length.
[  262.401117][T15389] IPVS: length: 111 != 24
[  262.460977][T15392] netlink: 'syz.2.2674': attribute type 1 has an invalid length.
[  262.463943][T15392] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2674'.
[  262.615209][    C1] vcan0: j1939_tp_rxtimer: 0xffff888178d6dc00: abort rx timeout. Force session deactivation
[  262.806183][T15403] virt_wifi0 speed is unknown, defaulting to 1000
[  262.814081][T15404] virt_wifi0 speed is unknown, defaulting to 1000
[  263.023346][T15409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2679'.
[  263.133246][T15414] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  263.362130][T15436] netlink: 'syz.2.2686': attribute type 3 has an invalid length.
[  263.376130][T15436] block nbd2: NBD_DISCONNECT
[  263.404680][T15436] 8021q: adding VLAN 0 to HW filter on device bond0
[  263.521662][   T56] block nbd1: Receive control failed (result -1)
[  264.109384][T15457] sctp: [Deprecated]: syz.1.2694 (pid 15457) Use of int in max_burst socket option.
[  264.109384][T15457] Use struct sctp_assoc_value instead
[  264.139714][T15459] netlink: 'syz.0.2695': attribute type 1 has an invalid length.
[  264.168668][T15462] netlink: 'syz.1.2696': attribute type 12 has an invalid length.
[  264.279776][T15468] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  265.339673][T15518] __nla_validate_parse: 10 callbacks suppressed
[  265.339700][T15518] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2710'.
[  265.372814][T15524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2712'.
[  265.406730][T15528] block nbd0: NBD_DISCONNECT
[  265.408256][T15528] block nbd0: shutting down sockets
[  265.480244][T15535] xt_ipcomp: unknown flags 1D
[  265.489432][T15535] xt_CT: You must specify a L4 protocol and not use inversions on it
[  265.520482][T15531] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2714'.
[  265.575752][T15549] nbd: nbd1 already in use
[  265.774468][T15541] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2716'.
[  265.781389][T15541] batman_adv: batadv0: Interface activated: batadv_slave_0
[  265.785234][T15541] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  266.574640][T15592] netlink: 'syz.1.2730': attribute type 3 has an invalid length.
[  266.586584][T15592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2730'.
[  266.593537][T15592] nbd: must specify a size in bytes for the device
[  266.596938][T15592] block nbd1: NBD_DISCONNECT
[  266.599077][T15592] block nbd1: shutting down sockets
[  266.676894][T15597] net_ratelimit: 737 callbacks suppressed
[  266.676902][T15597] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  266.739628][T15595] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2731'.
[  266.851421][T15608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2734'.
[  266.854501][T15609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2734'.
[  266.876362][T15609] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  266.882802][T15602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2732'.
[  266.952553][T15618] xt_CT: You must specify a L4 protocol and not use inversions on it
[  266.987699][T15618] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2735'.
[  267.050210][T15620] nbd2: detected capacity change from 0 to 63
[  267.053820][T15622] block nbd2: NBD_DISCONNECT
[  267.055458][T15622] block nbd2: Disconnected due to user request.
[  267.057569][T15622] block nbd2: shutting down sockets
[  267.068709][    C0] blk_print_req_error: 419 callbacks suppressed
[  267.068722][    C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  267.074655][    C0] buffer_io_error: 418 callbacks suppressed
[  267.074664][    C0] Buffer I/O error on dev nbd2, logical block 0, async page read
[  267.079184][    C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  267.082907][    C0] Buffer I/O error on dev nbd2, logical block 1, async page read
[  267.085831][    C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  267.088774][    C0] Buffer I/O error on dev nbd2, logical block 2, async page read
[  267.091449][    C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  267.094452][    C0] Buffer I/O error on dev nbd2, logical block 3, async page read
[  267.097300][T11807] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  267.100533][T11807] Buffer I/O error on dev nbd2, logical block 0, async page read
[  267.103007][T11807] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  267.105904][T11807] Buffer I/O error on dev nbd2, logical block 1, async page read
[  267.112051][T11807] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  267.115015][T11807] Buffer I/O error on dev nbd2, logical block 2, async page read
[  267.117406][T11807] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  267.127595][T11807] Buffer I/O error on dev nbd2, logical block 3, async page read
[  267.130221][T11807] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  267.133244][T11807] Buffer I/O error on dev nbd2, logical block 0, async page read
[  267.136228][T11807] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  267.143395][T11807] Buffer I/O error on dev nbd2, logical block 1, async page read
[  267.150350][T11807] ldm_validate_partition_table(): Disk read failed.
[  267.152620][T11807] Dev nbd2: unable to read RDB block 0
[  267.170293][T11807]  nbd2: unable to read partition table
[  267.181835][T11807] ldm_validate_partition_table(): Disk read failed.
[  267.184884][T11807] Dev nbd2: unable to read RDB block 0
[  267.186858][T11807]  nbd2: unable to read partition table
[  267.218899][T15641] netlink: 'syz.0.2743': attribute type 3 has an invalid length.
[  267.383093][T15653] netlink: 'syz.0.2746': attribute type 3 has an invalid length.
[  267.413560][T15653] bond0: left promiscuous mode
[  267.415128][T15653] bond_slave_0: left promiscuous mode
[  267.416846][T15653] bond_slave_1: left promiscuous mode
[  267.418565][T15653] bond0: left allmulticast mode
[  267.420285][T15653] bond_slave_0: left allmulticast mode
[  267.421950][T15653] bond_slave_1: left allmulticast mode
[  267.424709][T15653] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  267.732649][T15669] netlink: 'syz.1.2750': attribute type 3 has an invalid length.
[  268.123451][T15702] virt_wifi0 speed is unknown, defaulting to 1000
[  268.163450][T15708] netlink: 'syz.2.2760': attribute type 3 has an invalid length.
[  268.212989][T15708] block nbd2: NBD_DISCONNECT
[  268.221121][T15708] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  268.455182][T15728] erspan0: entered promiscuous mode
[  268.555767][T15737] netlink: 'syz.1.2769': attribute type 3 has an invalid length.
[  268.570490][T15737] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  269.406222][T15776] sctp: [Deprecated]: syz.1.2783 (pid 15776) Use of struct sctp_assoc_value in delayed_ack socket option.
[  269.406222][T15776] Use struct sctp_sack_info instead
[  270.335013][T15819] 8021q: adding VLAN 0 to HW filter on device bond15
[  270.342008][T15819] __nla_validate_parse: 22 callbacks suppressed
[  270.342019][T15819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2792'.
[  270.347096][T15819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2792'.
[  270.353158][T15819] 8021q: adding VLAN 0 to HW filter on device bond0
[  270.358719][T15819] bond15: (slave bond0): making interface the new active one
[  270.362964][T15819] bond15: (slave bond0): Enslaving as an active interface with an up link
[  270.395880][T15819] syz.1.2792 (15819) used greatest stack depth: 19400 bytes left
[  270.423747][T15824] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  270.491319][T15832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2794'.
[  270.510755][T15829] syzkaller1: entered promiscuous mode
[  270.513453][T15829] syzkaller1: entered allmulticast mode
[  270.710830][T15853] netlink: 'syz.1.2802': attribute type 1 has an invalid length.
[  270.767544][T15854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2802'.
[  270.779141][T15855] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0
[  270.785310][T15853] IPVS: stopping backup sync thread 15855 ...
[  270.867850][T15857] tls_set_device_offload_rx: netdev not found
[  270.921875][T15859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2804'.
[  271.056520][T15869] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2807'.
[  271.201733][T15872] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2808'.
[  271.205354][T15872] nbd: must specify at least one socket
[  271.519469][T15878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2811'.
[  271.522505][T15878] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2811'.
[  271.529652][T15879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2811'.
[  271.698447][T15901] netlink: 'syz.0.2817': attribute type 3 has an invalid length.
[  271.738788][T15907] netlink: 'syz.0.2818': attribute type 1 has an invalid length.
[  271.742055][T15907] netlink: 'syz.0.2818': attribute type 2 has an invalid length.
[  272.989701][T15959] virt_wifi0 speed is unknown, defaulting to 1000
[  273.359470][T15987] netlink: 'syz.1.2841': attribute type 3 has an invalid length.
[  273.366955][T15987] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  273.369284][T15987] IPv6: NLM_F_CREATE should be set when creating new route
[  273.372180][T15987] IPv6: NLM_F_CREATE should be set when creating new route
[  273.374793][T15987] IPv6: NLM_F_CREATE should be set when creating new route
[  273.378043][T15987] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  273.390270][T15987] block nbd1: NBD_DISCONNECT
[  274.088905][T16022] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  274.190524][T16030] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  274.229662][T16032] netlink: 'syz.2.2855': attribute type 3 has an invalid length.
[  274.890353][T16054] nbd1: detected capacity change from 0 to 63
[  274.893358][T16063] nbd: must specify an index to disconnect
[  274.897810][   T56] block nbd1: Receive control failed (result -104)
[  274.940236][ T5816] Bluetooth: hci2: command 0x0405 tx timeout
[  275.105455][T16073] netlink: 'syz.1.2866': attribute type 3 has an invalid length.
[  275.117128][T16073] nbd: nbd1 already in use
[  275.122967][T16073] netlink: 'syz.1.2866': attribute type 1 has an invalid length.
[  275.321614][T16081] netlink: 'syz.2.2870': attribute type 3 has an invalid length.
[  275.342276][T16081] block nbd2: NBD_DISCONNECT
[  275.415792][T16079] __nla_validate_parse: 24 callbacks suppressed
[  275.415801][T16079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2869'.
[  275.564255][T16094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2874'.
[  275.678209][T16101] netlink: 'syz.0.2876': attribute type 3 has an invalid length.
[  275.806105][T16109] netlink: 'syz.0.2878': attribute type 1 has an invalid length.
[  275.831889][T16109] 8021q: adding VLAN 0 to HW filter on device bond10
[  275.836571][T16109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2878'.
[  275.839415][T16109] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2878'.
[  275.849171][T16109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2878'.
[  275.856047][T16109] bond10 (unregistering): Released all slaves
[  276.095879][T16121] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2881'.
[  276.188230][T16128] bridge_slave_1: mtu less than device minimum
[  276.207238][T16130] netlink: 'syz.0.2884': attribute type 3 has an invalid length.
[  276.257742][T16132] netlink: 'syz.2.2885': attribute type 3 has an invalid length.
[  276.265245][T16130] block nbd0: NBD_DISCONNECT
[  276.271739][T16130] siw: device registration error -23
[  276.284770][T16130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  276.310496][T16132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  276.411465][T16142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  276.541538][T16152] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2891'.
[  276.609820][T16155] netlink: 'syz.2.2892': attribute type 3 has an invalid length.
[  276.618016][T16155] nbd: must specify at least one socket
[  276.713914][T16164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2895'.
[  277.112636][T16190] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  277.197412][T16198] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2905'.
[  277.375009][T16211] virt_wifi0 speed is unknown, defaulting to 1000
[  277.387564][T16213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2910'.
[  277.539764][T16222] xt_CT: You must specify a L4 protocol and not use inversions on it
[  277.549115][T16222] Bluetooth: MGMT ver 1.23
[  278.075533][T16229] netem: change failed
[  278.356982][T16241] virt_wifi0 speed is unknown, defaulting to 1000
[  278.516599][T16255] syzkaller1: entered promiscuous mode
[  278.518814][T16255] syzkaller1: entered allmulticast mode
[  278.714834][T16260] validate_nla: 1 callbacks suppressed
[  278.714850][T16260] netlink: 'syz.2.2922': attribute type 3 has an invalid length.
[  278.810167][T16273] netlink: 'syz.1.2926': attribute type 3 has an invalid length.
[  278.825881][T16272] block nbd1: NBD_DISCONNECT
[  278.827765][T16272] block nbd1: Send disconnect failed -32
[  278.829789][T16272] block nbd1: shutting down sockets
[  278.834987][    C0] blk_print_req_error: 138 callbacks suppressed
[  278.834998][    C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  278.840237][    C0] buffer_io_error: 138 callbacks suppressed
[  278.840250][    C0] Buffer I/O error on dev nbd1, logical block 0, async page read
[  278.845607][T16271] nbd: nbd1 already in use
[  278.847487][    C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  278.851075][    C0] Buffer I/O error on dev nbd1, logical block 1, async page read
[  278.854248][    C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  278.858015][    C0] Buffer I/O error on dev nbd1, logical block 2, async page read
[  278.860851][    C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  278.864529][    C0] Buffer I/O error on dev nbd1, logical block 3, async page read
[  278.868026][T15961] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  278.871947][T15961] Buffer I/O error on dev nbd1, logical block 0, async page read
[  278.875106][T15961] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  278.878850][T15961] Buffer I/O error on dev nbd1, logical block 1, async page read
[  278.885307][T15961] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  278.888881][T15961] Buffer I/O error on dev nbd1, logical block 2, async page read
[  278.893476][T15961] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  278.896861][T15961] Buffer I/O error on dev nbd1, logical block 3, async page read
[  278.899365][T15961] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  278.904597][T15961] Buffer I/O error on dev nbd1, logical block 0, async page read
[  278.907566][T15961] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  278.911858][T15961] Buffer I/O error on dev nbd1, logical block 1, async page read
[  278.915481][T15961] ldm_validate_partition_table(): Disk read failed.
[  278.918415][T15961] Dev nbd1: unable to read RDB block 0
[  278.922025][T15961]  nbd1: unable to read partition table
[  278.929088][T15961] ldm_validate_partition_table(): Disk read failed.
[  278.939696][T15961] Dev nbd1: unable to read RDB block 0
[  278.951111][T15961]  nbd1: unable to read partition table
[  279.666636][T16338] tipc: New replicast peer: 172.30.1.2
[  279.829351][T16346] vlan2: entered promiscuous mode
[  279.833685][T16346] bridge0: entered promiscuous mode
[  280.042844][T16364] netlink: 'syz.0.2955': attribute type 1 has an invalid length.
[  280.045959][T16364] netlink: 'syz.0.2955': attribute type 1 has an invalid length.
[  280.048542][T16364] netlink: 'syz.0.2955': attribute type 1 has an invalid length.
[  280.051465][T16364] netlink: 'syz.0.2955': attribute type 1 has an invalid length.
[  280.053955][T16364] netlink: 'syz.0.2955': attribute type 1 has an invalid length.
[  280.056620][T16364] netlink: 'syz.0.2955': attribute type 1 has an invalid length.
[  280.059232][T16364] netlink: 'syz.0.2955': attribute type 1 has an invalid length.
[  280.062056][T16364] netlink: 'syz.0.2955': attribute type 1 has an invalid length.
[  281.011398][T16425] __nla_validate_parse: 82 callbacks suppressed
[  281.011413][T16425] netlink: 45 bytes leftover after parsing attributes in process `syz.2.2972'.
[  281.122392][T16432] syzkaller1: entered promiscuous mode
[  281.124244][T16432] syzkaller1: entered allmulticast mode
[  281.469190][T16464] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2982'.
[  281.611437][T16475] block nbd2: NBD_DISCONNECT
[  281.633843][T16475] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  281.795185][T16504] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2991'.
[  282.021209][T16518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2996'.
[  282.070943][   T57] block nbd0: Receive control failed (result -1)
[  282.305657][T16533] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2999'.
[  282.318509][T16533] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2999'.
[  282.400304][T16539] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3001'.
[  282.447402][T16539] ieee802154 phy1 wpan1: encryption failed: -22
[  282.521462][T16543] virt_wifi0 speed is unknown, defaulting to 1000
[  282.666075][T16551] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  282.789245][T16556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3006'.
[  282.794782][T16556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3006'.
[  282.798795][T16556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3006'.
[  282.986022][T16565] virt_wifi0 speed is unknown, defaulting to 1000
[  283.237877][T16577] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  283.240951][T16577] batman_adv: batadv0: Removing interface: batadv_slave_0
[  283.244299][T16577] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  283.247063][T16577] batman_adv: batadv0: Removing interface: batadv_slave_1
[  283.709175][T16601] nbd: must specify a size in bytes for the device
[  284.215471][T16620] validate_nla: 14 callbacks suppressed
[  284.215484][T16620] netlink: 'syz.0.3026': attribute type 64 has an invalid length.
[  284.275368][T16626] block nbd0: NBD_DISCONNECT
[  284.277034][T16626] block nbd0: shutting down sockets
[  284.281952][T16626] siw: device registration error -23
[  284.286191][T16626] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  284.412836][T16636] netlink: 'syz.0.3031': attribute type 3 has an invalid length.
[  284.498832][T16647] tc_dump_action: action bad kind
[  284.528152][T16647] xt_CT: No such helper "syz0"
[  284.582704][T16652] netlink: 'syz.0.3036': attribute type 3 has an invalid length.
[  284.585916][T16650] netlink: 'syz.1.3035': attribute type 1 has an invalid length.
[  284.751862][T16657] nbd0: detected capacity change from 0 to 63
[  284.755395][T16658] block nbd0: NBD_DISCONNECT
[  284.757144][T16658] block nbd0: Disconnected due to user request.
[  284.759270][T16658] block nbd0: shutting down sockets
[  284.765625][    C1] blk_print_req_error: 138 callbacks suppressed
[  284.765641][    C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  284.770940][    C1] buffer_io_error: 138 callbacks suppressed
[  284.770949][    C1] Buffer I/O error on dev nbd0, logical block 0, async page read
[  284.775646][    C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  284.778833][    C1] Buffer I/O error on dev nbd0, logical block 1, async page read
[  284.781992][    C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  284.785034][    C1] Buffer I/O error on dev nbd0, logical block 2, async page read
[  284.787876][    C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  284.791229][    C1] Buffer I/O error on dev nbd0, logical block 3, async page read
[  284.794485][T16082] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  284.797599][T16082] Buffer I/O error on dev nbd0, logical block 0, async page read
[  284.800478][T16082] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  284.803679][T16082] Buffer I/O error on dev nbd0, logical block 1, async page read
[  284.806757][T16082] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  284.810925][T16082] Buffer I/O error on dev nbd0, logical block 2, async page read
[  284.814052][T16082] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  284.817781][T16082] Buffer I/O error on dev nbd0, logical block 3, async page read
[  284.822132][T16082] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  284.825899][T16082] Buffer I/O error on dev nbd0, logical block 0, async page read
[  284.829081][T16082] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  284.833133][T16082] Buffer I/O error on dev nbd0, logical block 1, async page read
[  284.836719][T16082] ldm_validate_partition_table(): Disk read failed.
[  284.839696][T16082] Dev nbd0: unable to read RDB block 0
[  284.842582][T16082]  nbd0: unable to read partition table
[  284.846790][T16664] block nbd0: NBD_DISCONNECT
[  284.847556][T16082] ldm_validate_partition_table(): Disk read failed.
[  284.848747][T16664] block nbd0: Send disconnect failed -32
[  284.890747][T16082] Dev nbd0: unable to read RDB block 0
[  284.893450][T16082]  nbd0: unable to read partition table
[  284.897377][T16664] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  284.941101][T16666] syzkaller0: entered promiscuous mode
[  284.943206][T16666] syzkaller0: entered allmulticast mode
[  285.416461][T16672] siw: device registration error -23
[  285.589069][T16688] netlink: 'syz.1.3046': attribute type 2 has an invalid length.
[  285.896189][T16714] tls_set_device_offload: netdev not found
[  285.947479][T16719] block nbd1: NBD_DISCONNECT
[  285.980257][T16719] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  286.074453][T16731] __nla_validate_parse: 11 callbacks suppressed
[  286.074463][T16731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3057'.
[  286.081563][T16731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3057'.
[  286.084776][T16731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3057'.
[  286.087927][T16731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3057'.
[  286.091995][T16731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3057'.
[  286.170311][T16732] nbd1: detected capacity change from 0 to 63
[  286.177453][   T56] block nbd1: Receive control failed (result -104)
[  286.213987][T16737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3059'.
[  286.219596][T16737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3059'.
[  286.224201][T16736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3058'.
[  286.224920][T16737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3059'.
[  286.231861][T16737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3059'.
[  286.501498][T16757] block nbd2: NBD_DISCONNECT
[  286.514479][T16757] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  286.692416][   T56] block nbd0: Receive control failed (result -1)
[  287.187797][T16804] bond10: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  287.203397][T16804] bond10 (unregistering): Released all slaves
[  287.328284][T16816] netlink: 'syz.2.3080': attribute type 3 has an invalid length.
[  287.558058][T16836] nbd: nbd1 already in use
[  287.561102][T16836] block nbd1: NBD_DISCONNECT
[  287.564250][T16836] block nbd1: Send disconnect failed -32
[  287.566445][T16836] block nbd1: shutting down sockets
[  287.601400][T16082] ldm_validate_partition_table(): Disk read failed.
[  287.604973][T16836] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  287.611200][T16082] Dev nbd1: unable to read RDB block 0
[  287.613488][T16082]  nbd1: unable to read partition table
[  287.626110][T16082] ldm_validate_partition_table(): Disk read failed.
[  287.629133][T16082] Dev nbd1: unable to read RDB block 0
[  287.632171][T16082]  nbd1: unable to read partition table
[  287.685790][T16847] netlink: 'syz.2.3088': attribute type 3 has an invalid length.
[  287.797161][T16863] netlink: 'syz.0.3092': attribute type 1 has an invalid length.
[  287.860460][T16867] netlink: 'syz.2.3091': attribute type 83 has an invalid length.
[  287.991093][T16871] netlink: 'syz.1.3095': attribute type 3 has an invalid length.
[  289.644784][T16955] validate_nla: 1 callbacks suppressed
[  289.644805][T16955] netlink: 'syz.2.3116': attribute type 3 has an invalid length.
[  289.776301][T16959] 5gQ[: renamed from lo
[  289.860038][T16957] nbd2: detected capacity change from 0 to 63
[  289.863858][T16966] block nbd2: NBD_DISCONNECT
[  289.865517][T16966] block nbd2: Disconnected due to user request.
[  289.867612][T16966] block nbd2: shutting down sockets
[  289.870715][    C1] blk_print_req_error: 284 callbacks suppressed
[  289.870725][    C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  289.876151][    C1] buffer_io_error: 286 callbacks suppressed
[  289.876162][    C1] Buffer I/O error on dev nbd2, logical block 0, async page read
[  289.881339][    C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  289.884309][    C1] Buffer I/O error on dev nbd2, logical block 1, async page read
[  289.886750][    C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  289.889646][    C1] Buffer I/O error on dev nbd2, logical block 2, async page read
[  289.892244][    C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  289.895169][    C1] Buffer I/O error on dev nbd2, logical block 3, async page read
[  289.898549][T16082] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  289.901787][T16082] Buffer I/O error on dev nbd2, logical block 0, async page read
[  289.904624][T16082] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  289.908141][T16082] Buffer I/O error on dev nbd2, logical block 1, async page read
[  289.920195][T16082] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  289.926873][T16082] Buffer I/O error on dev nbd2, logical block 2, async page read
[  289.930273][T16082] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  289.934924][T16082] Buffer I/O error on dev nbd2, logical block 3, async page read
[  289.940827][T16082] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  289.946658][T16975] delete_channel: no stack
[  289.947581][T16082] Buffer I/O error on dev nbd2, logical block 0, async page read
[  289.955067][T16975] delete_channel: no stack
[  289.955479][T16082] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  289.965251][T16082] Buffer I/O error on dev nbd2, logical block 1, async page read
[  289.968106][T16082] ldm_validate_partition_table(): Disk read failed.
[  289.975117][T16082] Dev nbd2: unable to read RDB block 0
[  289.979484][T16082]  nbd2: unable to read partition table
[  289.991013][T16082] ldm_validate_partition_table(): Disk read failed.
[  289.993308][T16981] syzkaller0: entered promiscuous mode
[  289.995499][T16981] syzkaller0: entered allmulticast mode
[  289.998193][T16082] Dev nbd2: unable to read RDB block 0
[  290.001566][T16082]  nbd2: unable to read partition table
[  290.130843][   T56] block nbd1: Receive control failed (result -1)
[  290.656775][T17037] netlink: 'syz.0.3130': attribute type 1 has an invalid length.
[  290.684954][T17037] bond11: (slave bridge3): making interface the new active one
[  290.688412][T17037] bond11: (slave bridge3): Enslaving as an active interface with an up link
[  290.722412][T17040] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  290.725003][T17040] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  290.732580][T17040] tls_set_device_offload: netdev not found
[  290.810256][T17047] netlink: 'syz.0.3133': attribute type 3 has an invalid length.
[  290.817754][T17047] nbd: nbd0 already in use
[  290.819423][T17048] nbd: nbd0 already in use
[  290.822190][T17047] block nbd0: NBD_DISCONNECT
[  290.823882][T17047] block nbd0: shutting down sockets
[  290.880422][T17048] siw: device registration error -23
[  290.882868][T17049] siw: device registration error -23
[  291.264293][T17070] __nla_validate_parse: 24 callbacks suppressed
[  291.264309][T17070] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3140'.
[  291.285629][T17072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3141'.
[  291.290697][T17072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3141'.
[  291.293866][T17072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3141'.
[  291.296858][T17072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3141'.
[  291.300501][T17072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3141'.
[  291.329082][T17075] netlink: 'syz.0.3142': attribute type 3 has an invalid length.
[  291.366773][T17075] block nbd0: NBD_DISCONNECT
[  291.372888][T17075] siw: device registration error -23
[  291.401774][T17075] 8021q: adding VLAN 0 to HW filter on device bond0
[  291.412447][T17075] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  291.431558][T17086] nbd: nbd1 already in use
[  291.443014][T17086] block nbd1: NBD_DISCONNECT
[  291.444569][T17086] block nbd1: Send disconnect failed -32
[  291.446503][T17086] block nbd1: shutting down sockets
[  291.475870][T17091] netlink: 'syz.1.3147': attribute type 3 has an invalid length.
[  291.495717][T17091] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  291.515455][T17096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3146'.
[  291.551916][   T56] block nbd0: Receive control failed (result -1)
[  291.555523][T17093] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3148'.
[  291.948570][T17118] netlink: 'syz.1.3155': attribute type 3 has an invalid length.
[  291.973648][T17118] block nbd1: NBD_DISCONNECT
[  291.991227][T17118] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  292.348808][T17135] netlink: 'syz.0.3158': attribute type 3 has an invalid length.
[  292.363119][T17135] nbd: nbd0 already in use
[  292.367536][T17135] block nbd0: NBD_DISCONNECT
[  292.370259][T17135] block nbd0: shutting down sockets
[  292.397008][T17138] netlink: 'syz.1.3159': attribute type 1 has an invalid length.
[  292.428617][T17141] siw: device registration error -23
[  292.435704][T17139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  292.454784][T17141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  293.378350][T17158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3164'.
[  293.399734][T17160] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3165'.
[  293.523701][T17172] bond17: (slave bond_slave_1): Device is not bonding slave
[  293.526427][T17172] bond17: option active_slave: invalid value (bond_slave_1)
[  293.543095][T17172] bond17 (unregistering): Released all slaves
[  293.693644][T17193] syzkaller0: entered promiscuous mode
[  293.695370][T17193] syzkaller0: entered allmulticast mode
[  293.747594][T17190] virt_wifi0 speed is unknown, defaulting to 1000
[  293.750067][T17195] netlink: 'syz.2.3176': attribute type 3 has an invalid length.
[  293.792276][T17195] nbd: couldn't find device at index 1024
[  293.951840][T17210] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  294.023016][T17214] nbd: nbd2 already in use
[  294.052266][T17216] netlink: 'syz.2.3182': attribute type 3 has an invalid length.
[  294.074548][T17216] block nbd2: NBD_DISCONNECT
[  294.112486][T17219] tls_set_device_offload: netdev not found
[  294.361704][   T57] block nbd0: Receive control failed (result -1)
[  294.646997][T17247] openvswitch: netlink: Flow actions attr not present in new flow.
[  294.816567][T17255] netlink: 'syz.1.3192': attribute type 1 has an invalid length.
[  295.037253][T17265] netlink: 'syz.1.3195': attribute type 3 has an invalid length.
[  295.081917][T17267] nbd: must specify a size in bytes for the device
[  295.084644][T17263] nbd: must specify a size in bytes for the device
[  295.144686][T17267] nbd: must specify an index to disconnect
[  295.274840][T17281] nbd: must specify an index to disconnect
[  295.348742][T17284] netlink: 'syz.2.3200': attribute type 3 has an invalid length.
[  295.391869][T17284] block nbd2: NBD_DISCONNECT
[  295.407465][T17284] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  296.191273][T17306] tls_set_device_offload_rx: netdev not found
[  296.494026][T17323] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  296.587003][T17329] __nla_validate_parse: 13 callbacks suppressed
[  296.587015][T17329] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3215'.
[  296.590116][T17330] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3215'.
[  296.914724][T17352] netlink: 'syz.0.3221': attribute type 3 has an invalid length.
[  296.984280][T17360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3223'.
[  297.735201][T17366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3225'.
[  297.739637][T17367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3225'.
[  297.745940][T17367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3225'.
[  297.749772][T17367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3225'.
[  297.753735][T17367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3225'.
[  298.117713][T17406] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  298.202038][T17422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3238'.
[  298.206524][T17422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3238'.
[  298.239215][T17409] batadv0: entered promiscuous mode
[  298.242598][T17409] erspan0: entered promiscuous mode
[  298.252336][T17424] syz_tun: entered allmulticast mode
[  298.256160][T17422] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  298.695856][   T33] audit: type=1800 audit(1773234103.308:4): pid=17446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3245" name="memory.events" dev="tmpfs" ino=5620 res=0 errno=0
[  298.985962][T17466] netlink: 'syz.0.3252': attribute type 1 has an invalid length.
[  299.028032][T17419] syz_tun: left allmulticast mode
[  299.076728][T17477] m1Ie5: entered promiscuous mode
[  299.154166][T17482] openvswitch: netlink: Flow actions attr not present in new flow.
[  299.242939][T17489] bond0: entered allmulticast mode
[  299.244624][T17489] bond_slave_0: entered allmulticast mode
[  299.246449][T17489] bond_slave_1: entered allmulticast mode
[  299.248784][T17489] syz_tun: entered allmulticast mode
[  299.416756][T17508] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  299.424459][T17518] netlink: 'syz.2.3265': attribute type 3 has an invalid length.
[  299.439388][T17509] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  299.483979][T17526] netlink: 'syz.0.3267': attribute type 3 has an invalid length.
[  299.512326][T17528] nbd: nbd0 already in use
[  299.513893][T17526] nbd: nbd0 already in use
[  299.515572][T17528] nbd: must specify an index to disconnect
[  299.524316][T17526] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  299.535756][T17528] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  299.811160][T17547] netlink: 'syz.2.3274': attribute type 1 has an invalid length.
[  299.926789][T17553] nbd: nbd0 already in use
[  299.930202][T17553] block nbd0: NBD_DISCONNECT
[  299.932988][T17553] block nbd0: shutting down sockets
[  299.955463][T17554] siw: device registration error -23
[  299.957799][T17558] siw: device registration error -23
[  300.049554][T17563] sctp: [Deprecated]: syz.2.3280 (pid 17563) Use of int in maxseg socket option.
[  300.049554][T17563] Use struct sctp_assoc_value instead
[  300.135158][T17574] netlink: 'syz.0.3283': attribute type 3 has an invalid length.
[  300.143652][T17574] batadv_slave_0: Caught tx_queue_len zero misconfig
[  300.154724][T17574] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  300.254480][T17584] netlink: 'syz.2.3286': attribute type 3 has an invalid length.
[  300.312455][T17590] netlink: 'syz.2.3288': attribute type 1 has an invalid length.
[  300.315181][T17590] netlink: 'syz.2.3288': attribute type 2 has an invalid length.
[  300.738376][T17622] syzkaller1: tun_chr_ioctl cmd 35111
[  301.222350][T17638] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  301.475914][T17648] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  301.546469][T17656] SET target dimension over the limit!
[  301.551907][T17656] batadv1: entered promiscuous mode
[  301.553602][T17656] batadv1: entered allmulticast mode
[  301.556118][T17656] 8021q: adding VLAN 0 to HW filter on device batadv1
[  302.080740][T17672] netlink: 'syz.2.3311': attribute type 3 has an invalid length.
[  302.156223][T17672] block nbd2: NBD_DISCONNECT
[  302.167407][T17672] bond0: left allmulticast mode
[  302.169374][T17672] bond_slave_0: left allmulticast mode
[  302.171784][T17672] bond_slave_1: left allmulticast mode
[  302.173997][T17672] syz_tun: left allmulticast mode
[  302.176849][T17672] 8021q: adding VLAN 0 to HW filter on device bond0
[  302.181699][T17672] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  302.440747][T17688] __nla_validate_parse: 43 callbacks suppressed
[  302.440766][T17688] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3315'.
[  302.533826][T17705] netlink: 'syz.0.3321': attribute type 3 has an invalid length.
[  302.906324][T17741] netlink: 'syz.0.3330': attribute type 3 has an invalid length.
[  302.986956][T17750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3333'.
[  302.991324][T17750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3333'.
[  302.994763][T17750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3333'.
[  302.998453][T17750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3333'.
[  303.002243][T17750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3333'.
[  303.124773][T17756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3333'.
[  303.142412][T17756] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3333'.
[  303.147621][T17756] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  303.278505][T17763] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3337'.
[  303.941535][T17780] netlink: 'syz.2.3340': attribute type 1 has an invalid length.
[  303.946421][T17780] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3340'.
[  304.604284][T17810] netlink: 'syz.1.3348': attribute type 3 has an invalid length.
[  304.864032][T17819] netlink: 'syz.1.3350': attribute type 3 has an invalid length.
[  304.926694][T17829] delete_channel: no stack
[  305.771573][   T56] block nbd0: Receive control failed (result -1)
[  305.785845][T17900] openvswitch: netlink: Flow actions attr not present in new flow.
[  306.206202][T17922] netlink: 'syz.0.3378': attribute type 2 has an invalid length.
[  306.555418][T17946] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  306.583315][T17948] netlink: 'syz.0.3384': attribute type 3 has an invalid length.
[  306.595016][T17948] nbd: nbd0 already in use
[  306.597326][T17948] block nbd0: NBD_DISCONNECT
[  306.599491][T17948] block nbd0: shutting down sockets
[  306.616578][T17948] siw: device registration error -23
[  306.622144][T17948] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  306.828851][T17958] nbd: must specify an index to disconnect
[  306.855968][T17958] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  306.932541][T17960] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40
[  307.085666][T17971] netlink: 'syz.2.3391': attribute type 5 has an invalid length.
[  307.320101][T17986] netlink: 'syz.1.3396': attribute type 1 has an invalid length.
[  307.580330][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  307.596773][T17999] __nla_validate_parse: 18 callbacks suppressed
[  307.596788][T17999] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3398'.
[  307.817912][T18014] netlink: 'syz.1.3402': attribute type 1 has an invalid length.
[  308.148506][T18033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3408'.
[  308.393724][T18042] netlink: 'syz.2.3411': attribute type 3 has an invalid length.
[  308.412525][T18042] block nbd2: NBD_DISCONNECT
[  308.431439][T18042] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  308.468486][T18045] netlink: 'syz.2.3412': attribute type 3 has an invalid length.
[  308.481987][T18045] nbd: couldn't find device at index -1407266247
[  308.488753][T18045] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  308.495157][T18046] netlink: 'syz.0.3410': attribute type 1 has an invalid length.
[  308.508152][T18046] netlink: 'syz.0.3410': attribute type 2 has an invalid length.
[  308.747703][T18057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3416'.
[  308.776053][T18059] tls_set_device_offload: netdev not found
[  308.890602][T18064] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3419'.
[  309.849701][T18081] hsr0: entered promiscuous mode
[  309.853028][T18081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3425'.
[  309.966331][T18089] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3426'.
[  309.995149][T18094] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  310.117399][T18097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3428'.
[  310.243799][T18108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3430'.
[  310.366302][T18108] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.370478][T18108] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.372892][T18108] bridge0: port 1(bridge_slave_0) entered forwarding state
[  310.388656][   T56] block nbd0: Receive control failed (result -32)
[  310.465167][T18112] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3431'.
[  310.468764][T18112] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3431'.
[  310.629040][T18125] netlink: 'syz.2.3435': attribute type 3 has an invalid length.
[  310.632677][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.781008][   T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.834332][T18141] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  311.331276][T18156] nbd1: detected capacity change from 0 to 63
[  311.334596][T18157] block nbd1: NBD_DISCONNECT
[  311.336140][T18157] block nbd1: Disconnected due to user request.
[  311.338359][T18157] block nbd1: shutting down sockets
[  311.343727][    C0] blk_print_req_error: 138 callbacks suppressed
[  311.343739][    C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  311.348860][    C0] buffer_io_error: 138 callbacks suppressed
[  311.348869][    C0] Buffer I/O error on dev nbd1, logical block 0, async page read
[  311.354071][    C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  311.357917][    C0] Buffer I/O error on dev nbd1, logical block 1, async page read
[  311.361129][    C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  311.364882][    C0] Buffer I/O error on dev nbd1, logical block 2, async page read
[  311.367799][    C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  311.371020][    C0] Buffer I/O error on dev nbd1, logical block 3, async page read
[  311.374001][T18055] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  311.377037][T18055] Buffer I/O error on dev nbd1, logical block 0, async page read
[  311.379556][T18055] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  311.384037][T18055] Buffer I/O error on dev nbd1, logical block 1, async page read
[  311.387125][T18055] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  311.391107][T18055] Buffer I/O error on dev nbd1, logical block 2, async page read
[  311.393752][T18055] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  311.396780][T18055] Buffer I/O error on dev nbd1, logical block 3, async page read
[  311.399437][T18055] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  311.402917][T18055] Buffer I/O error on dev nbd1, logical block 0, async page read
[  311.406272][T18055] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  311.410319][T18055] Buffer I/O error on dev nbd1, logical block 1, async page read
[  311.414114][T18055] ldm_validate_partition_table(): Disk read failed.
[  311.417401][T18055] Dev nbd1: unable to read RDB block 0
[  311.420604][T18055]  nbd1: unable to read partition table
[  311.426645][T18055] ldm_validate_partition_table(): Disk read failed.
[  311.429767][T18055] Dev nbd1: unable to read RDB block 0
[  311.433524][T18055]  nbd1: unable to read partition table
[  311.948823][T18183] netlink: 'syz.0.3450': attribute type 6 has an invalid length.
[  312.060069][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  312.189991][T18194] nbd1: detected capacity change from 0 to 63
[  312.194297][   T57] block nbd1: Receive control failed (result -32)
[  312.200067][T18055] block nbd1: Dead connection, failed to find a fallback
[  312.203020][T18055] block nbd1: shutting down sockets
[  312.205625][T18055] ldm_validate_partition_table(): Disk read failed.
[  312.207951][T18055] Dev nbd1: unable to read RDB block 0
[  312.210609][T18055]  nbd1: unable to read partition table
[  312.216671][T18055] ldm_validate_partition_table(): Disk read failed.
[  312.219062][T18055] Dev nbd1: unable to read RDB block 0
[  312.221934][T18055]  nbd1: unable to read partition table
[  312.345176][T18209] virt_wifi0 speed is unknown, defaulting to 1000
[  312.926785][T18240] sctp: [Deprecated]: syz.0.3466 (pid 18240) Use of int in maxseg socket option.
[  312.926785][T18240] Use struct sctp_assoc_value instead
[  313.146925][T18250] netlink: 'syz.0.3469': attribute type 9 has an invalid length.
[  313.150258][T18250] netlink: 'syz.0.3469': attribute type 11 has an invalid length.
[  313.153297][T18250] netlink: 'syz.0.3469': attribute type 12 has an invalid length.
[  313.156367][T18250] __nla_validate_parse: 7 callbacks suppressed
[  313.156382][T18250] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.3469'.
[  313.251620][T18255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3470'.
[  313.276438][T18257] netlink: 'syz.1.3471': attribute type 3 has an invalid length.
[  313.286240][T18257] nbd: nbd1 already in use
[  313.294694][T18257] block nbd1: NBD_DISCONNECT
[  313.296793][T18257] block nbd1: Send disconnect failed -32
[  313.348668][T18262] netlink: 'syz.0.3473': attribute type 21 has an invalid length.
[  313.352079][T18262] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3473'.
[  313.355843][T18260] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  313.363527][T18262] netlink: 'syz.0.3473': attribute type 4 has an invalid length.
[  313.366752][T18262] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3473'.
[  313.398313][T18262] netlink: 'syz.0.3473': attribute type 1 has an invalid length.
[  313.401494][T18262] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3473'.
[  313.437436][T18265] netlink: 'syz.1.3474': attribute type 3 has an invalid length.
[  313.545875][T18265] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  313.554304][T18269] netlink: 'syz.0.3475': attribute type 3 has an invalid length.
[  313.562596][T18269] nbd: nbd0 already in use
[  313.564520][T18269] block nbd0: NBD_DISCONNECT
[  313.566352][T18269] block nbd0: Send disconnect failed -32
[  313.569795][T18269] block nbd0: shutting down sockets
[  313.593113][T18269] siw: device registration error -23
[  313.600046][T18269] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  313.660931][ T8877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  313.722634][T18279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3479'.
[  313.775824][T18286] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3481'.
[  313.962731][T18295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3484'.
[  313.973481][   T56] block nbd0: Receive control failed (result -1)
[  313.980333][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  313.984193][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  313.987569][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.095886][T18302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3486'.
[  314.099343][T18303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3486'.
[  315.003295][T18323] tipc: Invalid UDP bearer configuration
[  315.003342][T18323] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  315.535344][T18353] nbd: must specify a size in bytes for the device
[  315.847007][T18395] nbd: nbd0 already in use
[  315.849016][T18395] block nbd0: NBD_DISCONNECT
[  315.856079][T18395] block nbd0: shutting down sockets
[  315.885323][T18395] siw: device registration error -23
[  315.887925][T18396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  315.896123][T18395] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  315.904099][T15867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  315.911931][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  315.916965][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  315.924374][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  316.091522][   T57] block nbd0: Receive control failed (result -1)
[  316.700338][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  316.940338][ T8870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.262827][T18465] validate_nla: 1 callbacks suppressed
[  317.262839][T18465] netlink: 'syz.0.3534': attribute type 3 has an invalid length.
[  317.284865][T18465] nbd: nbd0 already in use
[  317.286991][T18465] block nbd0: NBD_DISCONNECT
[  317.288637][T18465] block nbd0: shutting down sockets
[  317.394412][T18471] netlink: 'syz.2.3535': attribute type 3 has an invalid length.
[  317.402931][T18471] nbd: must specify a size in bytes for the device
[  317.684143][T18489] IPVS: Scheduler module ip_vs_ not found
[  317.687387][T18489] IPVS: length: 24 != 36888
[  317.992583][T18496] netlink: 'syz.2.3543': attribute type 1 has an invalid length.
[  318.234267][T18526] __nla_validate_parse: 20 callbacks suppressed
[  318.234282][T18526] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3550'.
[  318.239054][T18526] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3550'.
[  318.267749][T18526] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3550'.
[  318.271723][T18526] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3550'.
[  318.275135][T18528] netlink: 'syz.0.3551': attribute type 3 has an invalid length.
[  318.286692][T18528] block nbd0: NBD_DISCONNECT
[  318.293638][T18528] siw: device registration error -23
[  318.298454][T18528] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  318.323918][T18531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3552'.
[  318.382031][   T56] block nbd0: Receive control failed (result -1)
[  318.934902][T18538] x_tables: duplicate underflow at hook 2
[  319.089118][T18542] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3556'.
[  319.133299][T18549] netlink: 'syz.1.3558': attribute type 12 has an invalid length.
[  319.176091][T18554] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3559'.
[  319.221864][T18559] netlink: 'syz.2.3560': attribute type 3 has an invalid length.
[  319.225378][T18558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3561'.
[  319.236279][T18559] openvswitch: netlink: IP tunnel dst address not specified
[  319.269568][T18558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3561'.
[  319.277253][T18558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3561'.
[  319.295440][T18558] team_slave_1: Caught tx_queue_len zero misconfig
[  319.354572][T18564] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  320.159814][T18578] virt_wifi0 speed is unknown, defaulting to 1000
[  320.208751][T18579] virt_wifi0 speed is unknown, defaulting to 1000
[  320.350995][   T56] block nbd1: Receive control failed (result -1)
[  320.453495][T18596] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  320.762588][T18612] geneve2: entered promiscuous mode
[  320.804395][T18614] nbd: nbd1 already in use
[  320.806558][T18614] block nbd1: NBD_DISCONNECT
[  320.808623][T18614] block nbd1: shutting down sockets
[  320.880686][T18616] block nbd1: NBD_DISCONNECT
[  321.100113][    C1] net_ratelimit: 4 callbacks suppressed
[  321.100125][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.104890][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.107719][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.110765][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.113932][ T8870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  322.000377][T18661] netlink: 'syz.0.3591': attribute type 3 has an invalid length.
[  322.011835][T18654] syzkaller0: entered promiscuous mode
[  322.016834][T18654] syzkaller0: entered allmulticast mode
[  322.102599][T18667] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  322.114145][T18668] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  322.140633][ T8870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  322.431686][   T57] block nbd1: Receive control failed (result -1)
[  322.455859][T18684] ip6gretap2: entered promiscuous mode
[  322.458342][T18684] ip6gretap2: entered allmulticast mode
[  322.780197][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.180144][ T8870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.243921][T18693] __nla_validate_parse: 22 callbacks suppressed
[  323.243933][T18693] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3601'.
[  323.253450][T18693] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3601'.
[  323.257844][T18693] netlink: 'syz.0.3601': attribute type 5 has an invalid length.
[  323.271318][T18695] openvswitch: netlink: Message has 8 unknown bytes.
[  323.278304][T18693] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3601'.
[  323.286565][T18693] netlink: 'syz.0.3601': attribute type 22 has an invalid length.
[  323.289594][T18693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3601'.
[  323.300553][T18693] netlink: 'syz.0.3601': attribute type 22 has an invalid length.
[  323.303328][T18693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3601'.
[  323.324551][T18693] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3601'.
[  323.328785][T18693] nbd: must specify a size in bytes for the device
[  323.331766][T18693] block nbd0: NBD_DISCONNECT
[  323.333554][T18693] block nbd0: shutting down sockets
[  323.455851][T18712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  323.533256][T18718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3606'.
[  323.792645][T18727] netlink: 'syz.1.3609': attribute type 1 has an invalid length.
[  323.795096][T18727] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3609'.
[  323.952759][T18739] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  323.955513][T18739] syzkaller0: entered promiscuous mode
[  323.957444][T18739] syzkaller0: entered allmulticast mode
[  323.966457][T18738] tipc: Resetting bearer <eth:syzkaller0>
[  323.987309][T18738] tipc: Disabling bearer <eth:syzkaller0>
[  324.120742][T18745] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3614'.
[  324.123612][T18745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3614'.
[  324.225936][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  324.330697][T18749] netlink: 'syz.2.3616': attribute type 3 has an invalid length.
[  324.495351][T18757] tls_set_device_offload_rx: netdev not found
[  324.510096][T18759] netlink: 'syz.1.3619': attribute type 1 has an invalid length.
[  324.544280][T18762] bond18: option all_slaves_active: invalid value (13)
[  324.547471][T18762] bond18 (unregistering): Released all slaves
[  324.792425][T18773] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  325.151776][T18791] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  325.322258][T18799] siw: device registration error -23
[  325.841113][T18817] tc_dump_action: action bad kind
[  325.849408][T18817] syz_tun: entered allmulticast mode
[  325.853319][T18816] syz_tun: left allmulticast mode
[  325.972695][T18822] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  326.024069][T18820] virt_wifi0 speed is unknown, defaulting to 1000
[  326.300205][ T8870] net_ratelimit: 3 callbacks suppressed
[  326.300223][ T8870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  326.364574][T18857] netlink: 'syz.0.3648': attribute type 3 has an invalid length.
[  326.390857][T18857] block nbd0: NBD_DISCONNECT
[  326.517652][T18871] netlink: 'syz.1.3652': attribute type 1 has an invalid length.
[  326.546552][T18873] block nbd0: NBD_DISCONNECT
[  326.614559][T18878] Cannot find add_set index 2 as target
[  326.617984][T18878] x_tables: duplicate underflow at hook 1
[  326.715236][T18884] netlink: 'syz.1.3657': attribute type 3 has an invalid length.
[  326.862659][T18895] netlink: 'syz.1.3659': attribute type 4 has an invalid length.
[  327.629398][T18967] sctp: [Deprecated]: syz.0.3679 (pid 18967) Use of int in max_burst socket option.
[  327.629398][T18967] Use struct sctp_assoc_value instead
[  327.635353][T18967] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20003
[  327.756978][T18975] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  327.782999][T18974] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  328.049739][T18992] syzkaller1: entered promiscuous mode
[  328.054459][T18992] syzkaller1: entered allmulticast mode
[  328.343764][T18998] __nla_validate_parse: 23 callbacks suppressed
[  328.343785][T18998] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3686'.
[  328.350495][T18998] validate_nla: 3 callbacks suppressed
[  328.350509][T18998] netlink: 'syz.2.3686': attribute type 7 has an invalid length.
[  328.355984][T18998] netlink: 'syz.2.3686': attribute type 8 has an invalid length.
[  328.359067][T18998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3686'.
[  328.685960][T19010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3690'.
[  328.711648][T19006] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  328.775555][T19013] trusted_key: syz.0.3691 sent an empty control message without MSG_MORE.
[  328.850379][T19018] netlink: 'syz.1.3692': attribute type 1 has an invalid length.
[  328.853038][T19018] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3692'.
[  329.028716][T19035] tls_set_device_offload: netdev not found
[  329.223487][T19042] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3698'.
[  329.309625][T19047] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3701'.
[  329.362764][T19051] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3698'.
[  329.388269][T19052] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3700'.
[  329.512721][T19061] nbd0: detected capacity change from 0 to 63
[  329.518773][T19061] block nbd0: NBD_DISCONNECT
[  329.530310][T19061] block nbd0: Disconnected due to user request.
[  329.532938][T19061] block nbd0: shutting down sockets
[  329.560532][    C1] blk_print_req_error: 286 callbacks suppressed
[  329.560546][    C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  329.566564][    C1] buffer_io_error: 286 callbacks suppressed
[  329.566574][    C1] Buffer I/O error on dev nbd0, logical block 0, async page read
[  329.571973][    C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  329.575101][    C1] Buffer I/O error on dev nbd0, logical block 1, async page read
[  329.577754][    C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  329.580890][    C1] Buffer I/O error on dev nbd0, logical block 2, async page read
[  329.583497][    C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  329.586598][    C1] Buffer I/O error on dev nbd0, logical block 3, async page read
[  329.589268][T18055] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  329.595613][T18055] Buffer I/O error on dev nbd0, logical block 0, async page read
[  329.598125][T18055] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  329.603785][T18055] Buffer I/O error on dev nbd0, logical block 1, async page read
[  329.611973][T18055] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  329.615935][T18055] Buffer I/O error on dev nbd0, logical block 2, async page read
[  329.618723][T18055] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  329.628857][T18055] Buffer I/O error on dev nbd0, logical block 3, async page read
[  329.637777][T18055] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  329.644501][T18055] Buffer I/O error on dev nbd0, logical block 0, async page read
[  329.652275][T18055] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  329.655611][T18055] Buffer I/O error on dev nbd0, logical block 1, async page read
[  329.659118][T18055] ldm_validate_partition_table(): Disk read failed.
[  329.665658][T18055] Dev nbd0: unable to read RDB block 0
[  329.668012][T18055]  nbd0: unable to read partition table
[  329.672542][T18055] ldm_validate_partition_table(): Disk read failed.
[  329.675188][T18055] Dev nbd0: unable to read RDB block 0
[  329.677539][T18055]  nbd0: unable to read partition table
[  330.548318][T19091] tls_set_device_offload_rx: netdev not found
[  330.587582][T19093] netlink: 'syz.1.3712': attribute type 1 has an invalid length.
[  330.613791][T19093] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3712'.
[  330.618920][T19093] 8021q: adding VLAN 0 to HW filter on device bond23
[  330.624655][T19093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3712'.
[  330.917428][T19114] syzkaller0: entered promiscuous mode
[  330.919708][T19114] syzkaller0: entered allmulticast mode
[  331.185341][T19127] virt_wifi0 speed is unknown, defaulting to 1000
[  331.403736][T19145] netlink: 'syz.2.3725': attribute type 1 has an invalid length.
[  331.407251][T19145] tls_set_device_offload: netdev not found
[  331.848856][T19182] sit0: entered promiscuous mode
[  331.855659][T19182] netlink: 'syz.1.3738': attribute type 1 has an invalid length.
[  332.377471][T19236] 8021q: adding VLAN 0 to HW filter on device bond18
[  332.473751][T19243] netlink: 'syz.2.3754': attribute type 3 has an invalid length.
[  332.493607][T19243] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  332.531233][T19245] tls_set_device_offload_rx: netdev not found
[  332.565570][T19249] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001
[  332.913513][T19269] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  332.916017][T19269] batman_adv: batadv0: Removing interface: batadv_slave_0
[  332.933562][T19269] batadv0 (unregistering): left promiscuous mode
[  333.272464][T19297] netlink: 'syz.1.3772': attribute type 3 has an invalid length.
[  333.282162][T19297] nbd: nbd1 already in use
[  333.284257][T19298] block nbd1: NBD_DISCONNECT
[  333.286240][T19298] block nbd1: shutting down sockets
[  334.036906][T19311] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  334.043248][T19311] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  334.046691][T19311] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  334.272947][T19332] __nla_validate_parse: 9 callbacks suppressed
[  334.272959][T19332] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3780'.
[  334.280821][T19332] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3780'.
[  334.284064][T19332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3780'.
[  334.295610][T19335] IPv6: NLM_F_CREATE should be specified when creating new route
[  334.354902][T19341] netlink: 'syz.1.3782': attribute type 3 has an invalid length.
[  334.385959][T19344] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3784'.
[  334.394779][T19343] can: request_module (can-proto-0) failed.
[  334.433563][T19351] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3782'.
[  334.436883][T19351] nbd: must specify at least one socket
[  334.454007][T19341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3782'.
[  334.497757][T19356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3785'.
[  334.512577][T19353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3785'.
[  334.515582][T19353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3785'.
[  334.528532][T19353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3785'.
[  334.654252][T19375] xt_HMARK: proto mask must be zero with L3 mode
[  334.783490][T19381] ip6tnl0: Caught tx_queue_len zero misconfig
[  334.808693][T19382] xt_CT: No such helper "netbios-ns"
[  335.844939][T19424] netlink: 'syz.0.3803': attribute type 3 has an invalid length.
[  335.861093][T19424] block nbd0: NBD_DISCONNECT
[  336.120745][T19447] virt_wifi0 speed is unknown, defaulting to 1000
[  337.399073][T19499] netlink: 'syz.2.3821': attribute type 3 has an invalid length.
[  337.402759][T19494] nftables ruleset with unbound set
[  338.656621][T19539] netlink: 'syz.0.3832': attribute type 4 has an invalid length.
[  339.150578][   T57] block nbd0: Receive control failed (result -1)
[  339.814171][T19550] __nla_validate_parse: 14 callbacks suppressed
[  339.814185][T19550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3835'.
[  339.819714][T19550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3835'.
[  339.833005][T19550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3835'.
[  339.836799][T19550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3835'.
[  339.841541][T19550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3835'.
[  340.210719][T19575] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3842'.
[  341.201784][T19589] dvmrp0: entered allmulticast mode
[  342.247274][T19629] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3856'.
[  342.438722][T19645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3860'.
[  342.619397][T19651] netlink: 'syz.2.3862': attribute type 3 has an invalid length.
[  342.634328][T19654] netlink: 'syz.2.3862': attribute type 3 has an invalid length.
[  342.642854][T19654] nbd: nbd0 already in use
[  343.485470][T19670] tls_set_device_offload_rx: netdev not found
[  344.059153][T19699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3877'.
[  344.144105][T19706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3880'.
[  344.147187][T19707] netlink: 'syz.1.3879': attribute type 3 has an invalid length.
[  344.156736][T19706] nbd: must specify an index to disconnect
[  344.165248][T19706] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  344.174493][T19707] block nbd1: NBD_DISCONNECT
[  344.181929][T19707] dvmrp0: left allmulticast mode
[  344.211158][T19709] netlink: 'syz.0.3881': attribute type 1 has an invalid length.
[  344.506877][T19727] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  344.510161][T19727] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  344.516330][T19727] netlink: 'syz.0.3887': attribute type 1 has an invalid length.
[  344.542846][T19727] 8021q: adding VLAN 0 to HW filter on device bond16
[  344.568238][T19727] bond16: (slave veth9): Enslaving as an active interface with a down link
[  344.579174][T19727] bond16: (slave dummy0): making interface the new active one
[  344.582660][T19727] dummy0: entered promiscuous mode
[  344.584682][T19727] bond16: (slave dummy0): Enslaving as an active interface with an up link
[  345.129152][T19757] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  345.281685][T19768] __nla_validate_parse: 3 callbacks suppressed
[  345.281705][T19768] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3897'.
[  345.342732][T19775] netlink: 'syz.1.3898': attribute type 3 has an invalid length.
[  345.371778][T19775] block nbd1: NBD_DISCONNECT
[  345.410653][T19775] sit0: left promiscuous mode
[  345.430333][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.433821][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.448931][T19775] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  345.455868][T19779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3901'.
[  345.464269][T19779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3901'.
[  345.481324][T19779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3901'.
[  345.484585][T19779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3901'.
[  345.487875][T19779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3901'.
[  345.548345][T19779] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  345.612158][T19794] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3906'.
[  345.629223][T19796] netlink: 'syz.2.3905': attribute type 3 has an invalid length.
[  345.691468][T19803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3908'.
[  345.751494][T19809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3911'.
[  345.900264][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.903758][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.907218][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.909790][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  346.022545][T19838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3918'.
[  347.236593][T19899] netlink: 'syz.2.3933': attribute type 3 has an invalid length.
[  347.249488][T19899] netlink: 'syz.2.3933': attribute type 3 has an invalid length.
[  347.833936][T19949] x_tables: duplicate underflow at hook 3
[  347.839460][T19949] x_tables: duplicate underflow at hook 3
[  347.846152][T19949] x_tables: duplicate underflow at hook 3
[  347.849287][T19949] x_tables: duplicate underflow at hook 3
[  347.852102][T19949] x_tables: duplicate underflow at hook 3
[  347.854306][T19949] x_tables: duplicate underflow at hook 3
[  347.862544][T19949] x_tables: duplicate underflow at hook 3
[  347.864905][T19949] x_tables: duplicate underflow at hook 3
[  347.867400][T19949] x_tables: duplicate underflow at hook 3
[  347.869722][T19949] x_tables: duplicate underflow at hook 3
[  347.943952][T19959] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  348.028087][   T33] audit: type=1800 audit(1773234152.638:5): pid=19963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3951" name="blkio.bfq.time_recursive" dev="tmpfs" ino=6888 res=0 errno=0
[  348.175124][T19975] 8021q: VLANs not supported on wg1
[  348.211315][T19979] bridge: RTM_NEWNEIGH with invalid ether address
[  348.224532][T19979] bridge: RTM_NEWNEIGH with invalid ether address
[  348.313458][T19988] netlink: 'syz.0.3959': attribute type 3 has an invalid length.
[  348.423302][T19999] block nbd2: NBD_DISCONNECT
[  349.240774][T20053] block nbd0: NBD_DISCONNECT
[  349.242823][T20053] block nbd0: shutting down sockets
[  349.428586][T20064] netlink: 'syz.1.3982': attribute type 3 has an invalid length.
[  349.767942][T20085] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.776366][T20085] bridge_slave_1: left allmulticast mode
[  349.778862][T20085] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.788337][T20085] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  350.015462][T20087] netlink: 'syz.0.3988': attribute type 3 has an invalid length.
[  350.033867][T20087] siw: device registration error -23
[  350.084081][T20089] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  350.086897][T20089] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  350.384566][T20111] __nla_validate_parse: 21 callbacks suppressed
[  350.384585][T20111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3996'.
[  350.392057][T20111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3996'.
[  350.395264][T20111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3996'.
[  350.398646][T20111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3996'.
[  350.401993][T20111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3996'.
[  350.598155][T20121] netlink: 'syz.2.3999': attribute type 15 has an invalid length.
[  350.602203][T20121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3999'.
[  350.608976][T11011] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[  350.615484][T11011] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[  350.618286][T11011] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[  350.621421][T20121] netlink: 'syz.2.3999': attribute type 15 has an invalid length.
[  350.624079][T20121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3999'.
[  350.628061][T11011] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[  350.728748][T20132] xt_ecn: cannot match TCP bits for non-tcp packets
[  350.734607][T20132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4002'.
[  350.824628][T20138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4004'.
[  350.827477][T20138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4004'.
[  351.137246][T20154] netlink: 'syz.2.4007': attribute type 1 has an invalid length.
[  351.168148][T20158] block nbd0: Unsupported socket: should be TCP or UNIX.
[  351.422928][T20167] net_ratelimit: 8 callbacks suppressed
[  351.422933][T20167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  351.437271][T20171] netlink: 'syz.0.4014': attribute type 1 has an invalid length.
[  352.470239][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.473880][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.477358][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.480832][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.932809][T20220] IPVS: set_ctl: invalid protocol: 62603 224.0.0.2:20002
[  353.140750][T20226] block nbd0: Unsupported socket: should be TCP or UNIX.
[  353.162994][T20226] syzkaller0: entered promiscuous mode
[  353.165287][T20226] syzkaller0: entered allmulticast mode
[  353.182666][T20228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  353.371840][T20248] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  354.025161][T20257] sock: sock_set_timeout: `syz.0.4038' (pid 20257) tries to set negative timeout
[  354.289565][T20272] netlink: 'syz.1.4043': attribute type 1 has an invalid length.
[  354.415314][T20283] netlink: 'syz.2.4047': attribute type 5 has an invalid length.
[  355.057346][T20337] netlink: 'syz.1.4052': attribute type 1 has an invalid length.
[  355.264970][T20354] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  355.439076][T20371] __nla_validate_parse: 29 callbacks suppressed
[  355.439090][T20371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4063'.
[  355.485108][T20376] netlink: 'syz.1.4064': attribute type 3 has an invalid length.
[  355.495922][T20376] nbd: must specify at least one socket
[  355.498660][T20376] nbd: couldn't find device at index 11611137
[  355.518837][T20376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  355.548427][T20380] netlink: 'syz.1.4065': attribute type 3 has an invalid length.
[  355.551199][T20380] netlink: 'syz.1.4065': attribute type 3 has an invalid length.
[  355.680786][T11011] dummy0: left promiscuous mode
[  355.760212][T20401] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4069'.
[  355.778202][T20405] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4070'.
[  355.782877][T20405] netlink: 'syz.1.4070': attribute type 3 has an invalid length.
[  355.795332][T20405] nbd: couldn't find device at index 20682
[  355.912677][T20416] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4073'.
[  355.975628][T20421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4075'.
[  355.992326][T20421] netlink: 'syz.2.4075': attribute type 3 has an invalid length.
[  356.243396][T20446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4082'.
[  356.261644][T20446] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4082'.
[  356.311930][T20450] ipvlan1: Caught tx_queue_len zero misconfig
[  356.318648][T20450] sctp: [Deprecated]: syz.0.4083 (pid 20450) Use of int in maxseg socket option.
[  356.318648][T20450] Use struct sctp_assoc_value instead
[  356.337411][T20449] veth1_to_bond: entered allmulticast mode
[  356.341221][T20449] veth1_to_bond: left allmulticast mode
[  356.447172][T20457] xt_hashlimit: size too large, truncated to 1048576
[  356.667394][T20458] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4087'.
[  356.670755][T20458] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up
[  356.931845][T20486] netlink: 'syz.1.4093': attribute type 3 has an invalid length.
[  357.255475][T20516] netlink: 'syz.1.4101': attribute type 13 has an invalid length.
[  357.386451][T20513] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.398285][T20522] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4103'.
[  357.534107][T20535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4106'.
[  357.562076][   T57] block nbd0: Receive control failed (result -1)
[  358.212622][T20516] 8021q: adding VLAN 0 to HW filter on device `
[  358.218729][T20516] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  358.274327][ T8876] syz0: Port: 1 Link DOWN
[  358.276203][ T5683] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  358.279260][ T5683] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  358.291934][ T5683] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  358.294765][ T5683] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  358.297875][ T5683] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  358.310072][ T5683] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  358.312922][ T5683] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  358.316168][ T5683] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  358.468520][T20552] block nbd1: NBD_DISCONNECT
[  358.684294][T20572] nbd: nbd0 already in use
[  358.686229][T20572] block nbd0: NBD_DISCONNECT
[  358.687906][T20572] block nbd0: shutting down sockets
[  358.912889][T20579] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  359.305587][T20582] sctp: [Deprecated]: syz.2.4119 (pid 20582) Use of int in max_burst socket option.
[  359.305587][T20582] Use struct sctp_assoc_value instead
[  359.676011][T20596] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  359.739711][T20601] xt_recent: hitcount (4194304) is larger than allowed maximum (65535)
[  359.743942][T20598] 8021q: VLANs not supported on sit0
[  359.746556][T20598] validate_nla: 3 callbacks suppressed
[  359.746564][T20598] netlink: 'syz.1.4123': attribute type 2 has an invalid length.
[  359.987677][T20609] netlink: 'syz.0.4126': attribute type 3 has an invalid length.
[  360.005652][T20609] siw: device registration error -23
[  360.048441][T20612] nbd: couldn't find device at index 24
[  360.275806][   T33] audit: type=1800 audit(1773234164.888:6): pid=20629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4131" name="e" dev="tmpfs" ino=7437 res=0 errno=0
[  360.347200][T20631] netlink: 'syz.2.4132': attribute type 9 has an invalid length.
[  360.629357][T20635] __nla_validate_parse: 6 callbacks suppressed
[  360.629369][T20635] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4133'.
[  360.730749][T20639] netlink: 'syz.1.4134': attribute type 3 has an invalid length.
[  360.743963][T20639] block nbd1: NBD_DISCONNECT
[  360.761619][T20639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  360.963302][T20645] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4137'.
[  360.967080][T20645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4137'.
[  361.080306][T20654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4140'.
[  361.086065][T20654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4140'.
[  361.092587][T20654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4140'.
[  361.096125][T20654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4140'.
[  361.101320][T20654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4140'.
[  361.188575][T20665] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4143'.
[  361.216365][T20667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4144'.
[  361.338547][T20679] netlink: 'syz.0.4147': attribute type 3 has an invalid length.
[  361.378193][T20687] netlink: 'syz.2.4146': attribute type 3 has an invalid length.
[  361.382251][T20679] nbd: must specify an index to disconnect
[  361.393130][T20679] rdma_rxe: rxe_newlink: failed to add veth0_to_team
[  361.443521][T20680] pimreg: entered allmulticast mode
[  364.218231][T20672] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  364.457375][T20719] netlink: 'syz.0.4154': attribute type 8 has an invalid length.
[  364.675058][T20728] tls_set_device_offload_rx: netdev not found
[  365.353443][T20742] netlink: 'syz.0.4163': attribute type 2 has an invalid length.
[  365.357429][T20742] netlink: 'syz.0.4163': attribute type 2 has an invalid length.
[  365.578207][T20754] netlink: 'syz.2.4168': attribute type 5 has an invalid length.
[  366.113939][T20775] netlink: 'syz.1.4175': attribute type 3 has an invalid length.
[  367.273926][T20809] tap0: tun_chr_ioctl cmd 1074025692
[  367.343460][T20817] __nla_validate_parse: 10 callbacks suppressed
[  367.343476][T20817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4186'.
[  367.354701][T20817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4186'.
[  367.406664][T20823] netlink: 'syz.1.4188': attribute type 3 has an invalid length.
[  367.414662][T20819] netlink: 'syz.0.4187': attribute type 1 has an invalid length.
[  367.418340][T20819] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4187'.
[  367.442248][T20823] pimreg: left allmulticast mode
[  367.494920][T20824] rdma_rxe: rxe_newlink: failed to add veth0_to_team
[  367.498606][T20824] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4188'.
[  367.514075][T20824] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  367.587741][T20828] netlink: 'syz.0.4190': attribute type 3 has an invalid length.
[  367.599324][T20826] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4189'.
[  367.618355][T20828] block nbd0: NBD_DISCONNECT
[  367.623268][T20828] siw: device registration error -23
[  367.628787][T20828] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  367.727456][T20835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4191'.
[  368.080107][T20842] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4194'.
[  368.130196][T20842] nbd2: detected capacity change from 0 to 63
[  368.135914][T20842] block nbd2: NBD_DISCONNECT
[  368.139089][T20842] block nbd2: Disconnected due to user request.
[  368.142803][T20842] block nbd2: shutting down sockets
[  368.147881][    C1] blk_print_req_error: 138 callbacks suppressed
[  368.147905][    C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  368.154171][    C1] buffer_io_error: 138 callbacks suppressed
[  368.154188][    C1] Buffer I/O error on dev nbd2, logical block 1, async page read
[  368.160027][    C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  368.163779][    C1] Buffer I/O error on dev nbd2, logical block 2, async page read
[  368.166997][    C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  368.170757][    C1] Buffer I/O error on dev nbd2, logical block 3, async page read
[  368.173140][    C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  368.176504][    C1] Buffer I/O error on dev nbd2, logical block 0, async page read
[  368.179351][T20829] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  368.183665][T20829] Buffer I/O error on dev nbd2, logical block 0, async page read
[  368.187029][T20829] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  368.191195][T20829] Buffer I/O error on dev nbd2, logical block 1, async page read
[  368.194339][T20829] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  368.198166][T20829] Buffer I/O error on dev nbd2, logical block 2, async page read
[  368.201732][T20829] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  368.205767][T20829] Buffer I/O error on dev nbd2, logical block 3, async page read
[  368.208621][T20829] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  368.212139][T20829] Buffer I/O error on dev nbd2, logical block 0, async page read
[  368.212165][T20844] netlink: 'syz.2.4195': attribute type 3 has an invalid length.
[  368.215489][T20829] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  368.222998][T20829] Buffer I/O error on dev nbd2, logical block 1, async page read
[  368.226444][T20829] ldm_validate_partition_table(): Disk read failed.
[  368.229129][T20829] Dev nbd2: unable to read RDB block 0
[  368.235577][T20829]  nbd2: unable to read partition table
[  368.241861][T20829] ldm_validate_partition_table(): Disk read failed.
[  368.244886][T20844] nbd: nbd2 already in use
[  368.245156][T20829] Dev nbd2: unable to read RDB block 0
[  368.249413][T20844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4195'.
[  368.249764][T20829]  nbd2: unable to read partition table
[  368.253820][T20844] nbd: must specify an index to disconnect
[  368.265693][T20844] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  368.429794][T20848] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4197'.
[  368.565775][T20854] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4198'.
[  368.635451][T20859] virt_wifi0 speed is unknown, defaulting to 1000
[  368.735078][T20868] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  368.862060][T20887] IPVS: length: 151 != 8
[  368.863427][T20887] IPVS: length: 151 != 8
[  368.879965][T20887] IPVS: length: 151 != 8
[  368.883092][T20887] IPVS: length: 151 != 8
[  368.884459][T20887] IPVS: length: 151 != 8
[  368.885776][T20887] IPVS: length: 151 != 8
[  368.887425][T20887] IPVS: length: 151 != 8
[  368.888743][T20887] IPVS: length: 151 != 8
[  368.890831][T20887] IPVS: length: 151 != 8
[  368.892276][T20887] IPVS: length: 151 != 8
[  368.893866][T20887] IPVS: length: 151 != 8
[  368.895330][T20887] IPVS: length: 151 != 8
[  368.896752][T20887] IPVS: length: 151 != 8
[  368.898367][T20887] IPVS: length: 151 != 8
[  368.899967][T20887] IPVS: length: 151 != 8
[  368.901416][T20887] IPVS: length: 151 != 8
[  368.914578][T20887] IPVS: length: 151 != 8
[  368.915914][T20887] IPVS: length: 151 != 8
[  368.917281][T20887] IPVS: length: 151 != 8
[  368.919773][T20887] IPVS: length: 151 != 8
[  370.128241][T20941] wg1: entered promiscuous mode
[  370.130360][T20941] wg1: entered allmulticast mode
[  370.385498][T20964] netlink: 'syz.1.4230': attribute type 3 has an invalid length.
[  370.487340][T20979] netlink: 'syz.1.4233': attribute type 3 has an invalid length.
[  370.496634][T20977] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  370.735679][T21001] 8021q: VLANs not supported on ipvlan0
[  370.805622][T21007] netlink: 'syz.2.4241': attribute type 3 has an invalid length.
[  370.816244][T21007] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  370.892616][T21018] net veth1_virt_wifi : renamed from virt_wifi0
[  370.930289][T21018] nbd1: detected capacity change from 0 to 63
[  370.934129][T21018] block nbd1: NBD_DISCONNECT
[  370.936165][T21018] block nbd1: Disconnected due to user request.
[  370.948157][T21018] block nbd1: shutting down sockets
[  370.957447][T20829] ldm_validate_partition_table(): Disk read failed.
[  370.966278][T20829] Dev nbd1: unable to read RDB block 0
[  370.972599][T20829]  nbd1: unable to read partition table
[  370.981695][T20829] ldm_validate_partition_table(): Disk read failed.
[  370.984043][T20829] Dev nbd1: unable to read RDB block 0
[  370.990314][T20829]  nbd1: unable to read partition table
[  371.017734][T21028] netlink: 'syz.1.4246': attribute type 3 has an invalid length.
[  371.051635][T21028] block nbd1: NBD_DISCONNECT
[  371.070073][T21028] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  371.556800][T21063] netlink: 'syz.2.4257': attribute type 4 has an invalid length.
[  371.643711][T21076] netlink: 'syz.0.4261': attribute type 3 has an invalid length.
[  371.646547][T21077] netlink: 'syz.0.4261': attribute type 3 has an invalid length.
[  371.824431][T21088] netlink: 'syz.0.4263': attribute type 12 has an invalid length.
[  371.898318][   T56] block nbd0: Receive control failed (result -32)
[  372.388747][T21116] __nla_validate_parse: 16 callbacks suppressed
[  372.388763][T21116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4272'.
[  372.411799][T21116] nbd: nbd0 already in use
[  372.414125][T21116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4272'.
[  372.417916][T21116] nbd: must specify an index to disconnect
[  372.426551][T21116] siw: device registration error -23
[  372.431412][T21116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4272'.
[  372.961967][T21160] netlink: 'syz.2.4284': attribute type 1 has an invalid length.
[  372.965287][T21160] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4284'.
[  373.184721][T21167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4286'.
[  373.513106][T21181] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4289'.
[  374.231888][T21188] IPVS: length: 24 != 6936
[  374.390290][T21191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4293'.
[  374.393270][T21191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4293'.
[  374.443296][T21191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4293'.
[  374.571335][T21201] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4295'.
[  374.574230][T21201] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  375.119146][T21234] IPVS: ip_vs_edit_dest(): server weight less than zero
[  375.151334][T21234] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  375.288897][T21245] netlink: 'syz.2.4305': attribute type 3 has an invalid length.
[  375.589047][T21261] netlink: 'syz.0.4310': attribute type 3 has an invalid length.
[  375.604874][T21261] nbd: nbd0 already in use
[  375.654070][T21261] block nbd0: NBD_DISCONNECT
[  375.656236][T21261] block nbd0: Send disconnect failed -32
[  375.658715][T21261] block nbd0: shutting down sockets
[  376.267380][T21300] veth1_to_bond: entered allmulticast mode
[  376.273587][T21300] veth1_to_bond: left allmulticast mode
[  376.372703][T21306] tls_set_device_offload_rx: netdev not found
[  376.430686][T21304] nbd0: detected capacity change from 0 to 63
[  376.436207][T21309] block nbd0: NBD_DISCONNECT
[  376.440221][T21309] block nbd0: Disconnected due to user request.
[  376.443477][T21309] block nbd0: shutting down sockets
[  376.451477][    C1] blk_print_req_error: 286 callbacks suppressed
[  376.451497][    C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  376.457555][    C1] buffer_io_error: 286 callbacks suppressed
[  376.457570][    C1] Buffer I/O error on dev nbd0, logical block 0, async page read
[  376.463833][    C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  376.467566][    C1] Buffer I/O error on dev nbd0, logical block 1, async page read
[  376.470805][    C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  376.474455][    C1] Buffer I/O error on dev nbd0, logical block 2, async page read
[  376.477560][    C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  376.481385][    C1] Buffer I/O error on dev nbd0, logical block 3, async page read
[  376.486011][T21246] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  376.489734][T21246] Buffer I/O error on dev nbd0, logical block 0, async page read
[  376.493026][T21246] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  376.496861][T21246] Buffer I/O error on dev nbd0, logical block 1, async page read
[  376.502090][T21246] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  376.505818][T21246] Buffer I/O error on dev nbd0, logical block 2, async page read
[  376.509057][T21246] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  376.518584][T21246] Buffer I/O error on dev nbd0, logical block 3, async page read
[  376.521386][T21246] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  376.529050][T21246] Buffer I/O error on dev nbd0, logical block 0, async page read
[  376.533044][T21246] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  376.540501][T21246] Buffer I/O error on dev nbd0, logical block 1, async page read
[  376.545520][T21246] ldm_validate_partition_table(): Disk read failed.
[  376.550707][T21246] Dev nbd0: unable to read RDB block 0
[  376.556694][T21246]  nbd0: unable to read partition table
[  376.563308][T21246] ldm_validate_partition_table(): Disk read failed.
[  376.565730][T21246] Dev nbd0: unable to read RDB block 0
[  376.567838][T21246]  nbd0: unable to read partition table
[  376.618104][T21326] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  376.621277][T21326] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  376.786482][T21337] macvtap0: entered promiscuous mode
[  376.889107][T21347] siw: device registration error -23
[  376.940659][   T56] block nbd0: Receive control failed (result -1)
[  377.260478][T21362] xt_check_table_hooks: 55 callbacks suppressed
[  377.260490][T21362] x_tables: duplicate underflow at hook 1
[  377.710539][T21365] __nla_validate_parse: 18 callbacks suppressed
[  377.710555][T21365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4339'.
[  377.770916][T21378] tls_set_device_offload_rx: netdev not found
[  377.787380][T21380] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4342'.
[  377.897176][T21394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4347'.
[  377.941556][T21399] netlink: 'syz.1.4349': attribute type 3 has an invalid length.
[  377.956958][T21402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4348'.
[  377.981796][T21396] nbd2: detected capacity change from 0 to 63
[  377.986336][T21402] block nbd2: NBD_DISCONNECT
[  377.987952][T21402] block nbd2: Disconnected due to user request.
[  377.990504][T21402] block nbd2: shutting down sockets
[  378.001613][T21246] ldm_validate_partition_table(): Disk read failed.
[  378.004110][T21246] Dev nbd2: unable to read RDB block 0
[  378.006140][T21246]  nbd2: unable to read partition table
[  378.021596][T21246] ldm_validate_partition_table(): Disk read failed.
[  378.023879][T21399] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  378.041121][T21246] Dev nbd2: unable to read RDB block 0
[  378.042671][T21401] nbd: nbd0 already in use
[  378.043090][T21246]  nbd2: unable to read partition table
[  378.075887][T21401] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  378.148985][T21414] netlink: 'syz.0.4353': attribute type 1 has an invalid length.
[  378.156185][T21414] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4353'.
[  378.210765][T21406] nbd2: detected capacity change from 0 to 63
[  378.214165][T21416] block nbd2: NBD_DISCONNECT
[  378.216585][T21416] block nbd2: Disconnected due to user request.
[  378.219218][T21416] block nbd2: shutting down sockets
[  378.230846][T21246] ldm_validate_partition_table(): Disk read failed.
[  378.243640][T21246] Dev nbd2: unable to read RDB block 0
[  378.246391][T21246]  nbd2: unable to read partition table
[  378.251529][T21246] ldm_validate_partition_table(): Disk read failed.
[  378.254105][T21246] Dev nbd2: unable to read RDB block 0
[  378.256028][T21246]  nbd2: unable to read partition table
[  378.290658][T21425] netlink: 'syz.1.4357': attribute type 3 has an invalid length.
[  378.336525][T21430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4358'.
[  378.345394][T21430] block nbd0: NBD_DISCONNECT
[  378.347365][T21430] block nbd0: shutting down sockets
[  378.354752][T21425] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  378.387595][T21433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4360'.
[  378.391363][T21433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4360'.
[  378.394183][T21433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4360'.
[  378.451258][T21427] nbd2: detected capacity change from 0 to 63
[  378.453838][T21428] block nbd2: NBD_DISCONNECT
[  378.456187][T21428] block nbd2: Disconnected due to user request.
[  378.464814][T21428] block nbd2: shutting down sockets
[  378.497077][T21246] ldm_validate_partition_table(): Disk read failed.
[  378.499453][T21246] Dev nbd2: unable to read RDB block 0
[  378.512775][T21246]  nbd2: unable to read partition table
[  378.516682][T21441] nbd: must specify at least one socket
[  378.517720][T21246] ldm_validate_partition_table(): Disk read failed.
[  378.529537][T21246] Dev nbd2: unable to read RDB block 0
[  378.531818][T21246]  nbd2: unable to read partition table
[  378.606125][T21452] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4365'.
[  378.617089][T21454] netlink: 'syz.2.4366': attribute type 4 has an invalid length.
[  378.622037][T21454] netlink: 'syz.2.4366': attribute type 4 has an invalid length.
[  378.991724][T21479] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  379.501934][T21489] netlink: 'syz.0.4376': attribute type 3 has an invalid length.
[  380.942638][T21601] netlink: 'syz.2.4410': attribute type 1 has an invalid length.
[  381.589489][T21616] syzkaller0: entered promiscuous mode
[  381.596111][T21616] syzkaller0: entered allmulticast mode
[  381.790051][T21640] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  381.806383][T21642] nbd: must specify at least one socket
[  382.795556][T21697] netlink: 'syz.0.4434': attribute type 3 has an invalid length.
[  383.014738][T21701] siw: device registration error -23
[  383.021948][T21701] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  385.361353][T21682] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  385.367933][T21698] __nla_validate_parse: 33 callbacks suppressed
[  385.367947][T21698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4434'.
[  385.517283][T21714] netlink: 'syz.2.4439': attribute type 3 has an invalid length.
[  385.540384][T21714] block nbd2: NBD_DISCONNECT
[  385.549542][T21714] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  385.614383][T21720] netlink: 'syz.2.4441': attribute type 11 has an invalid length.
[  385.674514][T21712] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4438'.
[  385.807321][T21730] xt_hashlimit: size too large, truncated to 1048576
[  385.817268][T21737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4445'.
[  385.822834][T21737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4445'.
[  385.826955][T21737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4445'.
[  385.833123][T21737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4445'.
[  385.838383][T21737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4445'.
[  385.842681][T21737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4445'.
[  385.853687][T21737] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.4445'.
[  386.002027][T21748] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  386.043885][T21752] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4450'.
[  386.438597][T21791] netlink: 'syz.0.4463': attribute type 1 has an invalid length.
[  386.669604][T21813] syzkaller0: entered promiscuous mode
[  386.671572][T21813] syzkaller0: entered allmulticast mode
[  387.389092][T21825] netlink: 'syz.2.4473': attribute type 3 has an invalid length.
[  387.402940][T21825] block nbd2: NBD_DISCONNECT
[  387.414595][T21825] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  387.795304][T21865] nbd: must specify a size in bytes for the device
[  388.753275][T21888] 8021q: VLANs not supported on ip_vti0
[  389.402180][T21902] netlink: 'syz.2.4497': attribute type 21 has an invalid length.
[  389.568419][T21919] netlink: 'syz.2.4504': attribute type 3 has an invalid length.
[  389.592743][T21919] block nbd2: NBD_DISCONNECT
[  389.651344][   T57] block nbd0: Receive control failed (result -1)
[  390.232239][T21949] netlink: 'syz.2.4513': attribute type 3 has an invalid length.
[  390.245190][T21949] nbd: must specify at least one socket
[  390.255689][T21949] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  390.278300][T21949] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  390.960543][T21972] virt_wifi0 speed is unknown, defaulting to 1000
[  391.351825][T21995] __nla_validate_parse: 23 callbacks suppressed
[  391.351870][T21995] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4527'.
[  391.445756][T22005] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4530'.
[  391.655250][T22015] delete_channel: no stack
[  391.760182][T22032] syzkaller1: entered promiscuous mode
[  391.762068][T22032] syzkaller1: entered allmulticast mode
[  391.835344][T22037] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4538'.
[  392.046954][T22044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4539'.
[  392.050787][T22044] netlink: 'syz.0.4539': attribute type 1 has an invalid length.
[  392.076697][T22044] 8021q: adding VLAN 0 to HW filter on device bond20
[  392.113355][T22043] bond20: (slave veth11): Enslaving as an active interface with a down link
[  392.337681][T22072] virt_wifi0 speed is unknown, defaulting to 1000
[  392.431333][T22083] netlink: 'syz.1.4552': attribute type 3 has an invalid length.
[  392.454433][T22089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4553'.
[  392.477073][T22083] nbd: must specify an index to disconnect
[  392.494991][T22083] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  392.527284][T22092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4554'.
[  392.532079][T22092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4554'.
[  392.536278][T22092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4554'.
[  392.542384][T22092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4554'.
[  392.546136][T22092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4554'.
[  392.602762][T22092] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  392.812686][T22111] nbd: nbd0 already in use
[  392.815975][T22111] block nbd0: NBD_DISCONNECT
[  392.818997][T22111] block nbd0: Send disconnect failed -32
[  392.823390][T22111] block nbd0: shutting down sockets
[  392.843227][T22111] siw: device registration error -23
[  392.873976][T22118] netlink: 'syz.1.4562': attribute type 3 has an invalid length.
[  393.003684][T22130] netlink: 'syz.1.4565': attribute type 3 has an invalid length.
[  393.328631][T22173] ipt_REJECT: TCP_RESET invalid for non-tcp
[  393.384632][T22179] macsec1: entered promiscuous mode
[  393.528363][T22185] xt_policy: too many policy elements
[  393.767133][T22203] netlink: 'syz.1.4587': attribute type 3 has an invalid length.
[  393.848906][T22203] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  393.869469][T22208] netlink: 'syz.2.4589': attribute type 1 has an invalid length.
[  393.877951][T22208] NCSI netlink: No device for ifindex 0
[  393.926046][T22215] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  393.928468][T22215] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  393.952454][T22215] netlink: 'syz.2.4591': attribute type 1 has an invalid length.
[  394.114910][T22226] nbd1: detected capacity change from 0 to 63
[  394.118875][T22226] block nbd1: NBD_DISCONNECT
[  394.121339][T22226] block nbd1: Disconnected due to user request.
[  394.123880][T22226] block nbd1: shutting down sockets
[  394.242380][T22244] netlink: 'syz.1.4598': attribute type 1 has an invalid length.
[  394.609218][T22276] vlan0: entered promiscuous mode
[  394.612039][T22276] bridge0: entered promiscuous mode
[  394.847774][T22298] workqueue: name exceeds WQ_NAME_LEN. Truncating to: π,xb)%	]3DL̥
[  395.094083][T22315] netlink: 'syz.2.4616': attribute type 10 has an invalid length.
[  395.463326][T22334] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  395.612288][T22349] netlink: 'syz.1.4623': attribute type 3 has an invalid length.
[  395.699143][T22349] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  396.200639][T22386] bridge0: entered allmulticast mode
[  396.664747][T22415] __nla_validate_parse: 35 callbacks suppressed
[  396.664757][T22415] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4642'.
[  396.814730][T22418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4643'.
[  396.935480][T22424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4645'.
[  397.726758][T22471] virt_wifi0 speed is unknown, defaulting to 1000
[  397.764990][T22470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  397.869972][T22475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4659'.
[  398.077874][T22498] validate_nla: 1 callbacks suppressed
[  398.077884][T22498] netlink: 'syz.0.4664': attribute type 2 has an invalid length.
[  398.352674][T22509] netlink: 'syz.1.4667': attribute type 4 has an invalid length.
[  398.367248][T22509] netlink: 'syz.1.4667': attribute type 4 has an invalid length.
[  398.403925][T22513] netlink: zone id is out of range
[  398.405585][T22513] netlink: zone id is out of range
[  398.407500][T22513] netlink: zone id is out of range
[  398.409323][T22513] netlink: zone id is out of range
[  398.411378][T22513] netlink: zone id is out of range
[  398.413078][T22513] netlink: zone id is out of range
[  398.415124][T22513] netlink: zone id is out of range
[  398.417282][T22513] netlink: zone id is out of range
[  398.419471][T22513] netlink: zone id is out of range
[  398.828406][T22518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4669'.
[  398.925853][T22523] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4670'.
[  398.982824][T22528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4671'.
[  399.024433][T22533] netlink: 'syz.0.4672': attribute type 1 has an invalid length.
[  399.027571][T22533] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4672'.
[  399.317627][T22560] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4680'.
[  399.554239][T22569] syzkaller0: entered promiscuous mode
[  399.556490][T22569] syzkaller0: entered allmulticast mode
[  400.094323][T22574] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4685'.
[  400.844490][T22597] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  400.849080][T22597] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.877443][T22597] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  400.880862][T22597] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.923431][T22597] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  400.927029][T22597] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.967604][T22597] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  400.971135][T22597] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.978754][T22616] netlink: 'syz.0.4696': attribute type 3 has an invalid length.
[  400.988562][T22616] nbd: must specify at least one socket
[  400.993309][T22616] siw: device registration error -23
[  401.003142][T22616] bridge0: left allmulticast mode
[  401.011700][T22616] net_ratelimit: 355 callbacks suppressed
[  401.011706][T22616] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  401.084750][T20386] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 2816 - 0
[  401.087736][T20386] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  401.097200][T20386] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 2816 - 0
[  401.100556][T20386] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  401.115132][T11011] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 2816 - 0
[  401.117831][T11011] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  401.136599][T11011] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 2816 - 0
[  401.140367][T11011] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  401.148474][T22598] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  401.153584][T22598] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.163276][T11011] ==================================================================
[  401.166590][T11011] BUG: KASAN: slab-use-after-free in __mutex_lock+0x157/0x1300
[  401.169649][T11011] Read of size 8 at addr ffff88811e8298b0 by task kworker/u8:4/11011
[  401.173846][T11011] 
[  401.174857][T11011] CPU: 0 UID: 0 PID: 11011 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  401.174873][T11011] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  401.174883][T11011] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  401.174903][T11011] Call Trace:
[  401.174911][T11011]  <TASK>
[  401.174923][T11011]  dump_stack_lvl+0xe8/0x150
[  401.174940][T11011]  print_report+0xba/0x230
[  401.174952][T11011]  ? __mutex_lock+0x157/0x1300
[  401.174966][T11011]  kasan_report+0x117/0x150
[  401.174981][T11011]  ? __mutex_lock+0x157/0x1300
[  401.174995][T11011]  __mutex_lock+0x157/0x1300
[  401.175008][T11011]  ? __mutex_lock+0x5ac/0x1300
[  401.175020][T11011]  ? udp_tunnel_nic_device_sync_work+0x39/0xa10
[  401.175034][T11011]  ? __pfx___mutex_lock+0x10/0x10
[  401.175048][T11011]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  401.175062][T11011]  udp_tunnel_nic_device_sync_work+0x39/0xa10
[  401.175076][T11011]  ? process_scheduled_works+0xa25/0x1830
[  401.175090][T11011]  ? process_scheduled_works+0xa25/0x1830
[  401.175103][T11011]  process_scheduled_works+0xb02/0x1830
[  401.175124][T11011]  ? __pfx_process_scheduled_works+0x10/0x10
[  401.175141][T11011]  ? assign_work+0x3d5/0x5e0
[  401.175156][T11011]  worker_thread+0xa50/0xfc0
[  401.175177][T11011]  kthread+0x388/0x470
[  401.175188][T11011]  ? __pfx_worker_thread+0x10/0x10
[  401.175202][T11011]  ? __pfx_kthread+0x10/0x10
[  401.175213][T11011]  ret_from_fork+0x51e/0xb90
[  401.175229][T11011]  ? __pfx_ret_from_fork+0x10/0x10
[  401.175242][T11011]  ? __switch_to+0xc7d/0x1450
[  401.175255][T11011]  ? __pfx_kthread+0x10/0x10
[  401.175265][T11011]  ret_from_fork_asm+0x1a/0x30
[  401.175284][T11011]  </TASK>
[  401.175288][T11011] 
[  401.241308][T11011] Allocated by task 22597:
[  401.243137][T11011]  kasan_save_track+0x3e/0x80
[  401.245064][T11011]  __kasan_kmalloc+0x93/0xb0
[  401.246922][T11011]  __kmalloc_noprof+0x35c/0x760
[  401.248897][T11011]  udp_tunnel_nic_netdevice_event+0x4c3/0x17d0
[  401.251389][T11011]  notifier_call_chain+0x1be/0x400
[  401.253412][T11011]  register_netdevice+0x173a/0x1cf0
[  401.255519][T11011]  nsim_create+0xb92/0x1100
[  401.257353][T11011]  __nsim_dev_port_add+0x72a/0xb50
[  401.259384][T11011]  nsim_dev_port_add_all+0x37/0xf0
[  401.261462][T11011]  nsim_dev_reload_up+0x45f/0x7c0
[  401.263506][T11011]  devlink_reload+0x505/0x8d0
[  401.265416][T11011]  devlink_nl_reload_doit+0x9d4/0xc80
[  401.267582][T11011]  genl_family_rcv_msg_doit+0x22a/0x330
[  401.269841][T11011]  genl_rcv_msg+0x61c/0x7a0
[  401.271695][T11011]  netlink_rcv_skb+0x232/0x4b0
[  401.273606][T11011]  genl_rcv+0x28/0x40
[  401.275220][T11011]  netlink_unicast+0x80f/0x9b0
[  401.277190][T11011]  netlink_sendmsg+0x813/0xb40
[  401.279143][T11011]  ____sys_sendmsg+0x972/0x9f0
[  401.281091][T11011]  ___sys_sendmsg+0x2a5/0x360
[  401.283026][T11011]  __x64_sys_sendmsg+0x1bd/0x2a0
[  401.285040][T11011]  do_syscall_64+0x14d/0xf80
[  401.286892][T11011]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.289281][T11011] 
[  401.290272][T11011] Freed by task 22598:
[  401.291961][T11011]  kasan_save_track+0x3e/0x80
[  401.293913][T11011]  kasan_save_free_info+0x46/0x50
[  401.295964][T11011]  __kasan_slab_free+0x5c/0x80
[  401.297825][T11011]  kfree+0x1c1/0x630
[  401.299359][T11011]  udp_tunnel_nic_netdevice_event+0x11ed/0x17d0
[  401.301948][T11011]  notifier_call_chain+0x1be/0x400
[  401.304051][T11011]  unregister_netdevice_many_notify+0x186a/0x2370
[  401.306631][T11011]  unregister_netdevice_queue+0x31f/0x360
[  401.308955][T11011]  nsim_destroy+0x1e5/0x680
[  401.310805][T11011]  __nsim_dev_port_del+0x14d/0x1b0
[  401.312922][T11011]  nsim_dev_reload_destroy+0x288/0x490
[  401.315139][T11011]  nsim_dev_reload_down+0x8a/0xc0
[  401.317208][T11011]  devlink_reload+0x1d1/0x8d0
[  401.319138][T11011]  devlink_nl_reload_doit+0x9d4/0xc80
[  401.321308][T11011]  genl_family_rcv_msg_doit+0x22a/0x330
[  401.323536][T11011]  genl_rcv_msg+0x61c/0x7a0
[  401.325381][T11011]  netlink_rcv_skb+0x232/0x4b0
[  401.327331][T11011]  genl_rcv+0x28/0x40
[  401.328968][T11011]  netlink_unicast+0x80f/0x9b0
[  401.330839][T11011]  netlink_sendmsg+0x813/0xb40
[  401.332755][T11011]  ____sys_sendmsg+0x972/0x9f0
[  401.334664][T11011]  ___sys_sendmsg+0x2a5/0x360
[  401.336623][T11011]  __x64_sys_sendmsg+0x1bd/0x2a0
[  401.338637][T11011]  do_syscall_64+0x14d/0xf80
[  401.340540][T11011]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.342924][T11011] 
[  401.343867][T11011] Last potentially related work creation:
[  401.346147][T11011]  kasan_save_stack+0x3e/0x60
[  401.348039][T11011]  kasan_record_aux_stack+0xbd/0xd0
[  401.350097][T11011]  insert_work+0x3d/0x330
[  401.351863][T11011]  __queue_work+0xbe1/0x1020
[  401.353763][T11011]  queue_work_on+0x106/0x1d0
[  401.355676][T11011]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  401.358016][T11011]  udp_tunnel_push_rx_port+0x186/0x210
[  401.360247][T11011]  geneve_offload_rx_ports+0xc7/0x150
[  401.362455][T11011]  geneve_netdevice_event+0x6a/0x80
[  401.364539][T11011]  notifier_call_chain+0x1be/0x400
[  401.366519][T11011]  call_netdevice_notifiers+0x90/0xd0
[  401.368615][T11011]  udp_tunnel_nic_netdevice_event+0xdef/0x17d0
[  401.371141][T11011]  notifier_call_chain+0x1be/0x400
[  401.373238][T11011]  register_netdevice+0x173a/0x1cf0
[  401.375355][T11011]  nsim_create+0xb92/0x1100
[  401.377240][T11011]  __nsim_dev_port_add+0x72a/0xb50
[  401.379281][T11011]  nsim_dev_port_add_all+0x37/0xf0
[  401.381212][T11011]  nsim_dev_reload_up+0x45f/0x7c0
[  401.383234][T11011]  devlink_reload+0x505/0x8d0
[  401.385167][T11011]  devlink_nl_reload_doit+0x9d4/0xc80
[  401.387308][T11011]  genl_family_rcv_msg_doit+0x22a/0x330
[  401.389561][T11011]  genl_rcv_msg+0x61c/0x7a0
[  401.391380][T11011]  netlink_rcv_skb+0x232/0x4b0
[  401.393269][T11011]  genl_rcv+0x28/0x40
[  401.394925][T11011]  netlink_unicast+0x80f/0x9b0
[  401.396892][T11011]  netlink_sendmsg+0x813/0xb40
[  401.398854][T11011]  ____sys_sendmsg+0x972/0x9f0
[  401.400815][T11011]  ___sys_sendmsg+0x2a5/0x360
[  401.402737][T11011]  __x64_sys_sendmsg+0x1bd/0x2a0
[  401.404773][T11011]  do_syscall_64+0x14d/0xf80
[  401.406686][T11011]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.409104][T11011] 
[  401.410113][T11011] Second to last potentially related work creation:
[  401.412771][T11011]  kasan_save_stack+0x3e/0x60
[  401.414702][T11011]  kasan_record_aux_stack+0xbd/0xd0
[  401.416834][T11011]  insert_work+0x3d/0x330
[  401.418609][T11011]  __queue_work+0xd03/0x1020
[  401.420523][T11011]  queue_work_on+0x106/0x1d0
[  401.422384][T11011]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  401.424658][T11011]  udp_tunnel_push_rx_port+0x186/0x210
[  401.426959][T11011]  vxlan_offload_rx_ports+0x129/0x1f0
[  401.428988][T11011]  vxlan_netdevice_event+0x111/0x480
[  401.430959][T11011]  notifier_call_chain+0x1be/0x400
[  401.433058][T11011]  call_netdevice_notifiers+0x90/0xd0
[  401.435062][T11011]  udp_tunnel_nic_netdevice_event+0xdef/0x17d0
[  401.437121][T11011]  notifier_call_chain+0x1be/0x400
[  401.438974][T11011]  register_netdevice+0x173a/0x1cf0
[  401.440954][T11011]  nsim_create+0xb92/0x1100
[  401.442810][T11011]  __nsim_dev_port_add+0x72a/0xb50
[  401.444846][T11011]  nsim_dev_port_add_all+0x37/0xf0
[  401.446856][T11011]  nsim_dev_reload_up+0x45f/0x7c0
[  401.448834][T11011]  devlink_reload+0x505/0x8d0
[  401.450681][T11011]  devlink_nl_reload_doit+0x9d4/0xc80
[  401.452841][T11011]  genl_family_rcv_msg_doit+0x22a/0x330
[  401.455022][T11011]  genl_rcv_msg+0x61c/0x7a0
[  401.456882][T11011]  netlink_rcv_skb+0x232/0x4b0
[  401.458866][T11011]  genl_rcv+0x28/0x40
[  401.460420][T11011]  netlink_unicast+0x80f/0x9b0
[  401.462308][T11011]  netlink_sendmsg+0x813/0xb40
[  401.464218][T11011]  ____sys_sendmsg+0x972/0x9f0
[  401.466123][T11011]  ___sys_sendmsg+0x2a5/0x360
[  401.467957][T11011]  __x64_sys_sendmsg+0x1bd/0x2a0
[  401.469857][T11011]  do_syscall_64+0x14d/0xf80
[  401.471609][T11011]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.473931][T11011] 
[  401.474896][T11011] The buggy address belongs to the object at ffff88811e829800
[  401.474896][T11011]  which belongs to the cache kmalloc-256 of size 256
[  401.480223][T11011] The buggy address is located 176 bytes inside of
[  401.480223][T11011]  freed 256-byte region [ffff88811e829800, ffff88811e829900)
[  401.485491][T11011] 
[  401.486524][T11011] The buggy address belongs to the physical page:
[  401.489084][T11011] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11e828
[  401.492453][T11011] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  401.495421][T11011] flags: 0x17ff00000000040(head|node=0|zone=2|lastcpupid=0x7ff)
[  401.497874][T11011] page_type: f5(slab)
[  401.499120][T11011] raw: 017ff00000000040 ffff888100041b40 dead000000000100 dead000000000122
[  401.502322][T11011] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  401.505628][T11011] head: 017ff00000000040 ffff888100041b40 dead000000000100 dead000000000122
[  401.509011][T11011] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  401.512403][T11011] head: 017ff00000000001 ffffea00047a0a01 00000000ffffffff 00000000ffffffff
[  401.515560][T11011] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  401.518457][T11011] page dumped because: kasan: bad access detected
[  401.520737][T11011] page_owner tracks the page as allocated
[  401.522443][T11011] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 22440, tgid 22431 (syz.0.4648), ts 397844912918, free_ts 391841938500
[  401.530664][T11011]  post_alloc_hook+0x231/0x280
[  401.532592][T11011]  get_page_from_freelist+0x24dc/0x2580
[  401.534825][T11011]  __alloc_frozen_pages_noprof+0x18d/0x380
[  401.537194][T11011]  allocate_slab+0x77/0x660
[  401.539049][T11011]  refill_objects+0x331/0x3c0
[  401.540987][T11011]  __pcs_replace_empty_main+0x2b9/0x620
[  401.543257][T11011]  __kmalloc_noprof+0x474/0x760
[  401.545188][T11011]  iter_file_splice_write+0x1da/0x10f0
[  401.547444][T11011]  direct_splice_actor+0x101/0x160
[  401.549503][T11011]  splice_direct_to_actor+0x53a/0xc70
[  401.551653][T11011]  do_splice_direct+0x195/0x290
[  401.553611][T11011]  do_sendfile+0x535/0x7d0
[  401.555417][T11011]  __se_sys_sendfile64+0x144/0x1a0
[  401.557473][T11011]  do_syscall_64+0x14d/0xf80
[  401.559356][T11011]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.561696][T11011] page last free pid 22031 tgid 22031 stack trace:
[  401.564184][T11011]  __free_frozen_pages+0xc2b/0xdb0
[  401.566153][T11011]  device_release+0x9e/0x1d0
[  401.567932][T11011]  kobject_put+0x228/0x560
[  401.569675][T11011]  netdev_run_todo+0xc75/0xde0
[  401.571584][T11011]  tun_chr_close+0x13c/0x1c0
[  401.573414][T11011]  __fput+0x44f/0xa70
[  401.575062][T11011]  task_work_run+0x1d9/0x270
[  401.576921][T11011]  exit_to_user_mode_loop+0xed/0x480
[  401.579063][T11011]  do_syscall_64+0x32d/0xf80
[  401.581214][T11011]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.583582][T11011] 
[  401.584576][T11011] Memory state around the buggy address:
[  401.586864][T11011]  ffff88811e829780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  401.590120][T11011]  ffff88811e829800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  401.593302][T11011] >ffff88811e829880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  401.596456][T11011]                                      ^
[  401.598684][T11011]  ffff88811e829900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  401.601819][T11011]  ffff88811e829980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  401.604934][T11011] ==================================================================
[  401.611983][T11011] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  401.614882][T11011] CPU: 0 UID: 0 PID: 11011 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  401.618586][T11011] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  401.622643][T11011] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  401.625509][T11011] Call Trace:
[  401.626893][T11011]  <TASK>
[  401.628085][T11011]  vpanic+0x56c/0xa60
[  401.629669][T11011]  ? __pfx_vpanic+0x10/0x10
[  401.631503][T11011]  panic+0xc5/0xd0
[  401.633052][T11011]  ? __pfx_panic+0x10/0x10
[  401.634841][T11011]  ? preempt_schedule_thunk+0x16/0x30
[  401.636984][T11011]  ? __mutex_lock+0x157/0x1300
[  401.639024][T11011]  ? preempt_schedule_thunk+0x16/0x30
[  401.641074][T11011]  ? __mutex_lock+0x157/0x1300
[  401.643020][T11011]  check_panic_on_warn+0x89/0xb0
[  401.644565][T11011]  ? __mutex_lock+0x157/0x1300
[  401.646341][T11011]  end_report+0x73/0x180
[  401.647806][T11011]  ? __mutex_lock+0x157/0x1300
[  401.649678][T11011]  kasan_report+0x128/0x150
[  401.651190][T11011]  ? __mutex_lock+0x157/0x1300
[  401.652671][T11011]  __mutex_lock+0x157/0x1300
[  401.654151][T11011]  ? __mutex_lock+0x5ac/0x1300
[  401.655737][T11011]  ? udp_tunnel_nic_device_sync_work+0x39/0xa10
[  401.657740][T11011]  ? __pfx___mutex_lock+0x10/0x10
[  401.659329][T11011]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  401.661320][T11011]  udp_tunnel_nic_device_sync_work+0x39/0xa10
[  401.663821][T11011]  ? process_scheduled_works+0xa25/0x1830
[  401.666140][T11011]  ? process_scheduled_works+0xa25/0x1830
[  401.668461][T11011]  process_scheduled_works+0xb02/0x1830
[  401.670680][T11011]  ? __pfx_process_scheduled_works+0x10/0x10
[  401.673076][T11011]  ? assign_work+0x3d5/0x5e0
[  401.674952][T11011]  worker_thread+0xa50/0xfc0
[  401.676813][T11011]  kthread+0x388/0x470
[  401.678413][T11011]  ? __pfx_worker_thread+0x10/0x10
[  401.680402][T11011]  ? __pfx_kthread+0x10/0x10
[  401.682207][T11011]  ret_from_fork+0x51e/0xb90
[  401.684072][T11011]  ? __pfx_ret_from_fork+0x10/0x10
[  401.686132][T11011]  ? __switch_to+0xc7d/0x1450
[  401.688013][T11011]  ? __pfx_kthread+0x10/0x10
[  401.689837][T11011]  ret_from_fork_asm+0x1a/0x30
[  401.691768][T11011]  </TASK>
[  401.693848][T11011] Kernel Offset: disabled
[  401.695584][T11011] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:03:25  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000073 RBX=0000000000000073 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90007cd7290
R8 =ffff888100b38237 R9 =1ffff11020167046 R10=dffffc0000000000 R11=ffffffff854048b0
R12=dffffc0000000000 R13=ffffffff9a2b1a85 R14=ffffffff9a5c98e0 R15=0000000000000000
RIP=ffffffff8540492c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818de65000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8b093f5ff8 CR3=0000000111808000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000010 RBX=ffff88810eb3a330 RCX=32dc4701795a7600 RDX=0000000000140cca
RSI=0000000000000010 RDI=ffffc900063fef80 RBP=ffffc900063ff070 RSP=ffffc900063fef38
R8 =ffffc900063feed0 R9 =000000000000000f R10=ffffc900063fee58 R11=ffffffff81b0bb70
R12=dffffc0000000000 R13=1ffff11021d67466 R14=ffffc900063fef80 R15=1ffff92000c7fdec
RIP=ffffffff84ea7ba0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f5417c526c0 ffffffff 00c00000
GS =0000 ffff8882a9465000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8b093f6d58 CR3=0000000120c3a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=dc089f9caece22c7 f9b78f541c13d566
XMM06=56eb3f92b6734e6a 8f157ccbd3417187 XMM07=cedb7318dc3947b5 9de94ea975412dc1
XMM08=81035640438a52ad ea73230aaf5d3986 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
