last executing test programs:

2.77729633s ago: executing program 2 (id=1375):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x72, 0xffffffffffffffff, 0x2bebc000) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x2c, r1, 0x701, 0x0, 0xfffffffd, {{}, {@val={0x8, 0x1, 0x8}, @val={0x8, 0x15}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}]}, 0x2c}}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="ffffffff04ca0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async, rerun: 64)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000480)=[{0x3, 0x4, 0xb, 0x5}, {0x1, 0x4, 0xb, 0x5}], 0x10, 0x3}, 0x94) (async, rerun: 64)
r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) (async, rerun: 64)
writev(r0, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0xff57}, {&(0x7f0000000140)="e2b5de1b04c03054271995b320812ed7ded5ec71d0c57c5f11366f435a79a10e509bdfc4425719a03d2647f06c09e0a6dfc63acef45296e824c5c25945387c1840340d7203c4bc7f6228a7b0388ba698f8e8bb15ee5762f41d1f8953e00ef286a2426181912541e43bb71a016fd7cffaccd2cf79da80b0c67a87e82dfa52ac31dac584f37ebe1a25c62d9b55b678598cf69428a806b8fc096bb97053e0099600d4bc78e717b612c96807e519cb7300"/188, 0xbc}, {&(0x7f0000000300)="1c7e6b9e688e6270cf440480946456f950e37af773e53874c663dd2a336df10d2d1187d48719ed7fd17ca09b6bdaa49710183eb991f93aef84adb0a2dad9bb05b690e65758d5c66e64d6fdd07ce5771e98a47f7756a093c6e8b0fbf8cb95f4f6df7f227ef95f7f5f56b2e239c2e17453daf057527e74136084dba4b9572f8e4f383e8bc24757e5b7c0f1c45fcf0308bc40cb43c41a47e18b7b4bc100a4ebe7d2bfd31fc526da97e4b202fe79ddce36ec2f00627d3b86c3fa66bcbf6ec036aef16e0c4f39b441abda436dd5e85adfdd0720a51c91106b737750335c2697", 0xdd}], 0x3) (rerun: 64)

2.691882495s ago: executing program 2 (id=1378):
socket$kcm(0xa, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20)
sendmmsg$inet6(r2, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0x1}], 0x1}}], 0x1, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r5, 0x107, 0x17, &(0x7f0000000340)=0x5, 0x4)
connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)

1.770203945s ago: executing program 2 (id=1390):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a6c000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400048000d2800128024000180090001006c6173740000000004000280100001800c000100636f756e74657200080003400000013414000000110001001d410e1701a6000000000000"], 0x94}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000)

1.686584196s ago: executing program 2 (id=1394):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028006002700000fff0005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x600000000000000)

1.620399322s ago: executing program 2 (id=1395):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
accept4(r0, 0x0, 0x0, 0x80000) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000040)=@srh={0x3c, 0x0, 0x4, 0x0, 0x5, 0x10, 0x1}, 0x8) (async)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000003c0)=ANY=[], 0xc0) (async)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
recvmmsg(r1, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f00000018c0)=""/205, 0xcd}, {0x0}, {&(0x7f0000001a80)=""/81, 0x51}], 0x10000075}, 0x3}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, &(0x7f0000002840)}, 0xf5f0d7}], 0x4, 0x40010002, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x0) (async)
r3 = socket(0x2b, 0x80801, 0x1)
getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000fc0)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x7, 0x772a, 0xffffffffe, 0x1]}, &(0x7f0000000000)=0x78)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "c8bf5d03ac85c25d", "9a5d38a17f00c500000000feff00", "a1c4776d", "3c84a3a3be2adbff"}, 0x28) (async)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0a374a64476f0894", "e167f11f57eefc23d5fcf0c1eb9620032d134fcf5e7ee59701f58cea555339a0", "7c232291", "1da92f9190d941ea"}, 0x38)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1)

1.209622166s ago: executing program 0 (id=1408):
socket$kcm(0x29, 0x0, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x1}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@ccm_128={{0x303}, "0e57b3d487e2db32", "4f2c3e223509000000000000000000d3", '\x00', "6775c975b6b15e11"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28)
writev(r0, &(0x7f0000000140), 0x0)
readv(r0, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0xff1}], 0x1) (async)
r1 = socket$inet6(0xa, 0x2, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="050000000e000000400000000300000041000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
unshare(0x2020600) (async)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r5, &(0x7f0000000e00), 0x12) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)="82e507abdfd1f18bdbb54891cb9158d266e62430999546f1d96304212d9979303ccab1db4a222041d4fc3f38b9aa65bc0c28bf42bb1c8ff35ed169788d746b6c582b4e13cbd817185cd9552244434bb0e1e02c96b10beb12f7f00000000000000000", &(0x7f0000000040), 0x1003, r4}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r4, &(0x7f0000000300), 0x0}, 0x20) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendto$inet6(r0, &(0x7f0000000480)="b3f7f5414f2e2fd545ccc2d3675bd82d9fc06f3226e02ef7afe5eea65e6d367604135dc923754ed09dce53b7431e58554f183acca91dc8bf9f3f91a20867561f4586ced2bba441f14fdb7f863913421d438bf2b67c72e4851b5934c25e32f1f2746577ae3d", 0x65, 0x10, &(0x7f0000000800)={0xa, 0x4e23, 0x2, @private0, 0x8}, 0x1c) (async)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES8=r6], 0x1c}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r7, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) (async)
sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000000000000000000070000001c000000000000000000000008000000", @ANYRES32=r7], 0x30}}], 0x1, 0xc0)
pipe(&(0x7f00000045c0)={<r8=>0xffffffffffffffff}) (async)
r9 = socket$alg(0x26, 0x5, 0x0)
setsockopt$inet_tcp_TLS_RX(r8, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303}, "481709993624cf37", "43803e0c8d600173429aefe5e5f80dd98812c4210ae6b802db5a3120f908fb4e", "9aca37fe", "915f2bbd2d5a9046"}, 0x38) (async)
bind$alg(r9, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) (async)
accept4(r9, 0x0, 0x0, 0x0)

1.147278773s ago: executing program 0 (id=1409):
socket(0x28, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$kcm(0x21, 0x2, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@cred={{0x1c}}], 0x20}, 0x40000002)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xf)
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0xa8002, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x300000000000000)

1.145436804s ago: executing program 0 (id=1410):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4a61, 0x2, @loopback, 0xaa}, 0x1c) (async)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4a61, 0x2, @loopback, 0xaa}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "8aee8aad3300", "000000dfffffff008778caae00", '\x00\t\b\x00', "2300ff0400"}, 0x28)
socket$nl_netfilter(0x10, 0x3, 0xc)
writev(r0, &(0x7f0000000400)=[{&(0x7f00000006c0)="f0fecb55d93446ef61dea4ee2ff3cf2852355efbb6bb41dabd3e1e70d2673777770e3feaddc3018e71326c8c4fb6ea7264ac8003df7b38672e265d8a38206d98bf39b40f36118fc3e59804e6f1a945deafabbf21d947adca50662159df62955b60dd315b1456a02377c0a2c42f8d3852a6f402cb0cc2bedcff400c2e89bcab82bd5683a6f3df58dd29a0464285fcdfd082361d603b97b9", 0x97}, {&(0x7f0000002780)="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", 0x76e}, {0x0}, {&(0x7f0000000300)="1ece12e5b613a208ae25e18e2c156ca240449c317215a4b7e9526275c14d0448984af30f71ef55c229c44906cfad61aa19509a395575e46ad5272fa048c77388dac6ac795cf27c00d13fd4072b2a1fd439c27bbe6e6818915f70f3fc8b50dba1bbb348d1c81caa21c50c8b2ba9c056", 0x6f}], 0x4) (async)
writev(r0, &(0x7f0000000400)=[{&(0x7f00000006c0)="f0fecb55d93446ef61dea4ee2ff3cf2852355efbb6bb41dabd3e1e70d2673777770e3feaddc3018e71326c8c4fb6ea7264ac8003df7b38672e265d8a38206d98bf39b40f36118fc3e59804e6f1a945deafabbf21d947adca50662159df62955b60dd315b1456a02377c0a2c42f8d3852a6f402cb0cc2bedcff400c2e89bcab82bd5683a6f3df58dd29a0464285fcdfd082361d603b97b9", 0x97}, {&(0x7f0000002780)="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", 0x76e}, {0x0}, {&(0x7f0000000300)="1ece12e5b613a208ae25e18e2c156ca240449c317215a4b7e9526275c14d0448984af30f71ef55c229c44906cfad61aa19509a395575e46ad5272fa048c77388dac6ac795cf27c00d13fd4072b2a1fd439c27bbe6e6818915f70f3fc8b50dba1bbb348d1c81caa21c50c8b2ba9c056", 0x6f}], 0x4)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r3, 0x29, 0x46, 0x0, 0x0)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfe80, @loopback}, 0x1c) (async)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfe80, @loopback}, 0x1c)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
socket$inet6(0xa, 0x2, 0x3a) (async)
r5 = socket$inet6(0xa, 0x2, 0x3a)
pipe(&(0x7f00000045c0)) (async)
pipe(&(0x7f00000045c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f00000019c0)=[{&(0x7f0000001a00)="ce", 0x1}], 0x1, 0x1) (async)
vmsplice(r7, &(0x7f00000019c0)=[{&(0x7f0000001a00)="ce", 0x1}], 0x1, 0x1)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
r9 = accept4(r8, 0x0, 0x0, 0x0)
splice(r6, 0x0, r9, 0x0, 0x2, 0xe)
sendto$inet6(r5, &(0x7f0000000080)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0)
getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)

1.03890403s ago: executing program 0 (id=1411):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000580)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x800000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$unix(0x1, 0x1, 0x0)
socket$kcm(0x11, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000140)={<r9=>0x0, 0x5}, &(0x7f0000000280)=0x8)
ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000780)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @broadcast}, 0xa0, 0x0, 0x0, 0x0, 0x200, &(0x7f0000000300)='pim6reg\x00', 0x9, 0x4, 0x5})
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000440)={r9, @in6={{0xa, 0x4e20, 0x7f, @dev={0xfe, 0x80, '\x00', 0xd}, 0x8}}, 0x1, 0x9, 0x5, 0x8, 0x1}, &(0x7f0000000500)=0x98)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="5daa000000000000611010000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0x108, 0x30, 0x25, 0x0, 0x0, {}, [{0xf4, 0x1, [@m_pedit={0xf0, 0x1f, 0x0, 0x0, {{0xa}, {0xc4, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xc0, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x80}, 0xd1)
r11 = socket(0x400000000010, 0x3, 0x0)
r12 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x7, 0xf9}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @TCA_RATE={0x6, 0x5, {0x5, 0x7}}, @TCA_RATE={0x6, 0x5, {0x8, 0x5}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)

769.905048ms ago: executing program 2 (id=1412):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x18, 0x5, 0x400, 0x9, 0x1}, 0x48)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000)=0x9a, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
socket(0x1a, 0x3, 0x3)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x303}, "6ae04425ace3f60c", "acba84f091ccf68a710300f23c58140000ffffffffffffffdf002100", "0f9dafb4", "ffffffffffffffff"}, 0x38)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)

466.987103ms ago: executing program 1 (id=1417):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x4)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48)
mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r2, 0x0)
mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)={0x14, 0x0, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmmsg$inet(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000540)='*', 0x1}, {&(0x7f0000000340)='\x00', 0x1}, {&(0x7f0000001980)='\x00\x00', 0x2}, {&(0x7f0000000580)="ff", 0x1}, {&(0x7f0000000140)='m', 0x1}, {&(0x7f0000000200)='d', 0x1}, {&(0x7f0000000180)='s', 0x1}, {&(0x7f0000000380)}, {&(0x7f0000000400)="b571", 0x2}], 0x9}}], 0x1, 0x4000000)
setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r4, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000080)={0xe, 0xc208, 0x6, 0x3}, 0x10)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)

269.799273ms ago: executing program 1 (id=1418):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0xffffffd5, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
close(0x3)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000200)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r6}, 0x8)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'pim6reg0\x00', 0x2})
ioctl$TUNSETPERSIST(r7, 0x400454c9, 0x1)
ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x1)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
pipe(&(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={<r10=>0x0, 0x497f1fba}, &(0x7f0000000180)=0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f00000001c0)={r10, 0xfffffff7}, 0x8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000121400022dbd7000fbdbdf25080015000300000008000b0003000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x24040008)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "0fa078cb740abd49", "b4381a5eba3323f7b88b9db91e14fed8722cb4cb185679675bd421905c7bb444", "164ad2b9", "23eb573e21dc656c"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "ea1fa4e7dafbe5c4", "9acef68fbad63af48cf1d61404373451df04b6cd8b5c4953e386f98e08ba6dd0", "5f17ef0d", "3d518eb5b60db7c9"}, 0x44)
sendmsg$NFT_BATCH(r9, &(0x7f0000000e00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000dc0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x678}, 0x1, 0x0, 0x0, 0x4000010}, 0x5)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r9)

218.368283ms ago: executing program 1 (id=1419):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "0000650381c66e54", "27c8291a0f479e020000002cb3237cb1", '\x00', "38cb8a873cfcabba"}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
shutdown(r0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@generic={0x91, 0x1, 0x1, 0x82}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c0007000000000000000000080009007100000007000600727200000800"], 0x54}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x400040, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040), 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x28)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0)
r6 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000300)={0x2, 'bridge0\x00', 0x1}, 0x18)
socket$inet_smc(0x2b, 0x1, 0x0)
pipe(&(0x7f0000000140))
unshare(0x6020400)

212.44667ms ago: executing program 0 (id=1420):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x83b, @mcast2, 0x3}, 0x1c)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
r2 = socket$kcm(0x28, 0x1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3c, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001e00)}, 0x3}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, &(0x7f0000002840)}, 0x9}], 0x4, 0x40010002, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "c8bf5d03ac85c25d", "9a5d38a17f00c500000000feff00", "a1c4776d", "3c84a3a3be2adbff"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "faffffff", "ecba06893bcdc493"}, 0x28)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)

90.255499ms ago: executing program 1 (id=1421):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000010000304000100"/20, @ANYRES32=r2, @ANYBLOB="00ffffffc30000000a000100aaaaaaaaaa00000008000400f20f0004"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0)

74.014344ms ago: executing program 0 (id=1422):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0xff, 0x1, 0x0, 0x2000000, 0x0, 0x2}})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800)
sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005ac0)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="eb13456f46", 0x5}, {&(0x7f0000000240)="507e2f928007b69a4031e0493acb6f45d7503a0a161dbafa0c78cab0353a46e2922de0564a553db0477aba9107a9f8aedcd4", 0x32}, {&(0x7f00000003c0)="1a", 0x1}], 0x3, 0x0, 0x0, 0x40045}], 0x1, 0x4081)
close(r0)
connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
recvmmsg(r1, &(0x7f000000bcc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000000300)=""/67, 0x43}], 0x1}, 0xf}], 0x1, 0x102, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "c8bf5d03ac85c25d", "9a5d38a17f00c500000000feff00", "a1c4776d", "3c84a3a3be2adbff"}, 0x28)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xa, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xb1}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x1}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20)
r6 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r6, 0x0, 0x0, 0x20000000, &(0x7f00000001c0)={0x11, 0x5, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14)
setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f00000000c0), 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1)

66.510983ms ago: executing program 1 (id=1423):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000000)=0xfffffffe, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4a61, 0x2, @loopback, 0xaa}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0x76, &(0x7f0000000180)={0x9, 0x0, 0x0, 0x1001}, &(0x7f0000000280)=0x20) (async)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "c150dc4f1635eb64", "1a466be6cc733a4c59bc2aac74406dfb7d5c3ccf3eeb8283a0f82d3e63cdbc50", "de5159b9", "7bb0941d5fa01d04"}, 0x38) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
writev(r0, &(0x7f0000000400)=[{&(0x7f00000006c0)="f0fecb55d93446ef61dea4ee2ff3cf2852355efbb6bb41dabd3e1e70d2673777770e3feaddc3018e71326c8c4fb6ea7264ac8003df7b38672e265d8a38206d98bf39b40f36118fc3e59804e6f1a945deafabbf21d947adca50662159df62955b60dd315b1456a02377c0a2c42f8d3852a6f402cb0cc2bedcff400c2e89bcab82bd5683a6f3df58dd29a0464285fcdfd082361d603b97b9", 0x97}, {&(0x7f0000002780)="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", 0x76e}, {0x0}, {&(0x7f0000000300)="1ece12e5b613a208ae25e18e2c156ca240449c317215a4b7e9526275c14d0448984af30f71ef55c229c44906cfad61aa19509a395575e46ad5272fa048c77388dac6ac795cf27c00d13fd4072b2a1fd439c27bbe6e6818915f70f3fc8b50dba1bbb348d1c81caa21c50c8b2ba9c056", 0x6f}], 0x4) (async)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x3a)
pipe(&(0x7f00000045c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000880)={&(0x7f0000000100)="467e0cd24a4ea7b6af60cf088d13eaa37d7c59e719a2849b633061a70a1421e0ea104250829fa9ea2682516ac194ab6f0460fafff1a07bd2995e3d41ebdb2e7bf3bb5ca6634cf92528c033b7cce957eb1e9f3b5396f86bba29", &(0x7f0000000480)=""/197, &(0x7f0000000580)="881007c09e2538cba44281b92a6c1dde3c4f3437cc96c20aa33c9ae218752544b975f02c0722f25227200a0f1771a7259bd605d622d0ee8d9dd4d766e921843c1772ca16c6bfec4faffc66faf031109fbdbe26ecab1045635490b38fb37a0da06812aeab9806caa0dbb791de17fca8c6520e599dfa8cab7baea36e4427cf500f10f271cd96e48cb713ae44351d1fa2bf89c2b11d20bfd7fe49946c3c9f", &(0x7f0000000780)="a6b1bef9bf67b29fcef9ff5d47ffbf3eb338bf0beadb164044468154e9f648ddb3bc3a689477e1db6512f100a165a21b682b875367e17d91c9658a21e255e2514dc8d064ad62a0d6875917cca4046eed22a3d912c28f1ba4f5eb9ef1e53e8e3f4a5672c543a6abdea8abde94176632bb7464ea0e8e4d8f69dfb144dd91363fbcc3b29b0b549f232ef3c82886ed79402b8370404970b87fef43dfbc889e9d9aa064c1f56bfa1387a0e97d1401ff6fc44c12edff13a2d8f28a02abec78ccafadea18e2477668ee7934a8a2f62469d3e3587f824f3d773dc5ef566bc121424c390210d82249252b4bc235bafc9ebd", 0x8, r6, 0x4}, 0x38) (async)
vmsplice(r6, &(0x7f00000019c0)=[{&(0x7f0000001a00)="ce", 0x1}], 0x1, 0x1)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) (async)
r8 = accept4(r7, 0x0, 0x0, 0x0)
splice(r5, 0x0, r8, 0x0, 0x2, 0xe)
sendto$inet6(r4, &(0x7f0000000080)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) (async)
getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) (async)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "000037d7009400", "cdb6c5b29ca2d538d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)

0s ago: executing program 1 (id=1424):
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000440)={<r0=>0xffffffffffffffff, &(0x7f0000000240)='&-%b%\x00', 0x400000, &(0x7f0000000380)={@align=0x81, {0x8, 0x7, 0x7fff, 0x6}}, 0x5, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0xffff8000})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@newtclass={0x34, 0x28, 0x100, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xd, 0x10}, {0xc}, {0xa, 0x1f}}, [@TCA_RATE={0x6, 0x5, {0x8, 0xa}}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc004}, 0x10)
r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x223}], 0x1, 0x0, 0x0, 0x10}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f00000004c0)=0x8)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000640)={<r7=>r3, &(0x7f0000000140)='devlink\x00', 0x100, &(0x7f0000000300)={@_ha_fsid={[0xffffffff, 0xf]}, {0x4, 0x0, 0xd1, 0x1}}, 0x1, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000540)=0x1})
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000040)={r6}, &(0x7f0000000080)=0x8)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000)
syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x54, r10, 0x1, 0x70bd27, 0x25dfdc02, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x2000000000fc}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc084}, 0x2404c8c4)
sendmsg$inet6(r4, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="1400000000000000290000000000000000800000000000004800000000000000"], 0x380}, 0x8000)
sendfile(r2, r3, 0x0, 0xffffffff000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:64216' (ED25519) to the list of known hosts.
syzkaller login: [   50.056476][ T5551] cgroup: Unknown subsys name 'net'
[   50.163821][ T5551] cgroup: Unknown subsys name 'cpuset'
[   50.169880][ T5551] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.556276][ T5551] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.037392][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.041714][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.045053][ T5611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.048965][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.052979][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.077492][ T5611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.081306][ T5611] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.084097][ T5611] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.086723][ T5611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.089307][ T5611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.095581][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.103807][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.107588][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.111019][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.113860][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.576071][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.580838][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.583220][ T5609] bridge_slave_0: entered allmulticast mode
[   55.586001][ T5609] bridge_slave_0: entered promiscuous mode
[   55.600889][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.603252][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.605485][ T5609] bridge_slave_1: entered allmulticast mode
[   55.608091][ T5609] bridge_slave_1: entered promiscuous mode
[   55.661717][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.664286][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.666863][ T5615] bridge_slave_0: entered allmulticast mode
[   55.670318][ T5615] bridge_slave_0: entered promiscuous mode
[   55.677237][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.682175][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.693474][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.696668][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.699965][ T5615] bridge_slave_1: entered allmulticast mode
[   55.703302][ T5615] bridge_slave_1: entered promiscuous mode
[   55.719989][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.723121][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.726131][ T5613] bridge_slave_0: entered allmulticast mode
[   55.729782][ T5613] bridge_slave_0: entered promiscuous mode
[   55.758003][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.760609][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.763042][ T5613] bridge_slave_1: entered allmulticast mode
[   55.765825][ T5613] bridge_slave_1: entered promiscuous mode
[   55.771467][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.776577][ T5609] team0: Port device team_slave_0 added
[   55.788046][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.798347][ T5609] team0: Port device team_slave_1 added
[   55.822913][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.828553][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.833163][ T5615] team0: Port device team_slave_0 added
[   55.849205][ T5615] team0: Port device team_slave_1 added
[   55.852136][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.854561][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.862991][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.882343][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.884982][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.893214][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.903700][ T5613] team0: Port device team_slave_0 added
[   55.915713][ T5613] team0: Port device team_slave_1 added
[   55.925507][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.927963][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.936138][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.957099][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.960128][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.968116][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.990072][ T5609] hsr_slave_0: entered promiscuous mode
[   55.992754][ T5609] hsr_slave_1: entered promiscuous mode
[   55.997603][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.001051][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.012021][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.018030][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.021481][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.031950][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.085870][ T5615] hsr_slave_0: entered promiscuous mode
[   56.088167][ T5615] hsr_slave_1: entered promiscuous mode
[   56.090844][ T5615] debugfs: 'hsr0' already exists in 'hsr'
[   56.093268][ T5615] Cannot create hsr debugfs directory
[   56.121448][ T5613] hsr_slave_0: entered promiscuous mode
[   56.123936][ T5613] hsr_slave_1: entered promiscuous mode
[   56.126260][ T5613] debugfs: 'hsr0' already exists in 'hsr'
[   56.128143][ T5613] Cannot create hsr debugfs directory
[   56.361468][ T5609] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.370226][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   56.376578][ T5609] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.384012][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   56.386862][ T5609] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.392936][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   56.396867][ T5609] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.403634][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   56.447521][ T5613] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.456870][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   56.459873][ T5613] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.464470][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   56.478339][ T5613] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.483347][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   56.488434][ T5613] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.495118][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   56.557657][ T5615] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.562570][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   56.565509][ T5615] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.571979][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   56.576545][ T5615] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.583193][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   56.591715][ T5615] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.596230][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   56.669515][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.692128][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.705132][ T5609] 8021q: adding VLAN 0 to HW filter on device team0
[   56.720681][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.724021][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.736226][ T5613] 8021q: adding VLAN 0 to HW filter on device team0
[   56.750792][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.753577][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.765944][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.768329][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.782645][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.791590][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.793968][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.821867][ T5615] 8021q: adding VLAN 0 to HW filter on device team0
[   56.842241][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.844886][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.857842][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.860180][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.091260][ T5000] Bluetooth: hci0: command tx timeout
[   57.147913][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.173675][ T5000] Bluetooth: hci1: command tx timeout
[   57.174566][ T5621] Bluetooth: hci2: command tx timeout
[   57.178738][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.193904][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.226103][ T5609] veth0_vlan: entered promiscuous mode
[   57.235158][ T5609] veth1_vlan: entered promiscuous mode
[   57.279916][ T5615] veth0_vlan: entered promiscuous mode
[   57.311570][ T5613] veth0_vlan: entered promiscuous mode
[   57.320129][ T5609] veth0_macvtap: entered promiscuous mode
[   57.325311][ T5615] veth1_vlan: entered promiscuous mode
[   57.334956][ T5609] veth1_macvtap: entered promiscuous mode
[   57.343010][ T5613] veth1_vlan: entered promiscuous mode
[   57.369812][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.385064][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.407446][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.411742][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.417241][ T5615] veth0_macvtap: entered promiscuous mode
[   57.421974][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.424740][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.444772][ T5615] veth1_macvtap: entered promiscuous mode
[   57.463614][ T5613] veth0_macvtap: entered promiscuous mode
[   57.478715][ T5613] veth1_macvtap: entered promiscuous mode
[   57.514605][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.536523][   T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.538675][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.547254][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.550982][   T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.555340][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.592498][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.596976][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.609063][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.613410][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.620173][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.624887][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.628131][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.631875][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.647935][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.652451][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.722907][ T5609] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.740102][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.748052][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.781630][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.786805][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.815796][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.818863][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.835455][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.840600][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.084857][ T5744] warning: `syz.1.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.167865][ T5740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5'.
[   58.475986][ T5781] syzkaller0: entered promiscuous mode
[   58.478691][ T5781] syzkaller0: entered allmulticast mode
[   58.687950][ T5791] bond1: option miimon: invalid value (18446744073709551607)
[   58.691747][ T5791] bond1: option miimon: allowed values 0 - 2147483647
[   58.697097][ T5791] bond1 (unregistering): Released all slaves
[   59.115669][ T5811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24'.
[   59.169428][ T5621] Bluetooth: hci0: command tx timeout
[   59.249485][ T5621] Bluetooth: hci1: command tx timeout
[   59.249506][ T5000] Bluetooth: hci2: command tx timeout
[   59.473151][ T5821] netlink: 124 bytes leftover after parsing attributes in process `syz.1.25'.
[   59.568806][ T5826] virt_wifi0: entered allmulticast mode
[   59.612292][ T5830] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.626285][ T5830] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.663723][ T5834] sit0: entered promiscuous mode
[   59.668551][ T5834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27'.
[   60.066747][ T5853] syz.0.34 uses obsolete (PF_INET,SOCK_PACKET)
[   60.132052][ T5855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.35'.
[   60.500229][ T5871] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.40'.
[   60.502541][ T5869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.42'.
[   60.503583][ T5871] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.40'.
[   60.616907][ T5878] syzkaller0: entered promiscuous mode
[   60.618690][ T5878] syzkaller0: entered allmulticast mode
[   60.700819][ T5882] Zero length message leads to an empty skb
[   61.017680][ T5859] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   61.262705][ T5621] Bluetooth: hci0: command tx timeout
[   61.329984][ T5621] Bluetooth: hci2: command tx timeout
[   61.330128][ T5000] Bluetooth: hci1: command tx timeout
[   61.856585][ T5923] netlink: 256 bytes leftover after parsing attributes in process `syz.1.56'.
[   61.917103][ T5928] tls_set_device_offload: netdev not found
[   62.053755][ T5943] netlink: 20 bytes leftover after parsing attributes in process `syz.0.61'.
[   62.216017][ T5960] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   62.311040][ T5970] tipc: Started in network mode
[   62.313907][ T5970] tipc: Node identity 080211000001, cluster identity 4711
[   62.316576][ T5970] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.330215][ T5970] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[   62.335749][ T5970] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[   62.352349][ T5970] tipc: Resetting bearer <eth:syzkaller0>
[   62.360661][ T5970] veth0_to_team: entered promiscuous mode
[   62.568986][ T5986] openvswitch: netlink: Message has 4 unknown bytes.
[   62.583533][ T5987] gtp0: entered promiscuous mode
[   62.589048][ T5987] gtp0: entered allmulticast mode
[   63.054123][ T6007] netlink: 'syz.2.84': attribute type 14 has an invalid length.
[   63.330845][   T24] tipc: Node number set to 134418688
[   63.339263][ T5621] Bluetooth: hci0: command 0x0419 tx timeout
[   63.360873][ T6027] __nla_validate_parse: 2 callbacks suppressed
[   63.360892][ T6027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.90'.
[   63.409245][ T5621] Bluetooth: hci1: command tx timeout
[   63.418363][   T55] block nbd0: Receive control failed (result -1)
[   63.421259][ T5621] Bluetooth: hci2: command tx timeout
[   63.646912][ T6036] netlink: 16 bytes leftover after parsing attributes in process `syz.1.92'.
[   63.911797][ T6043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.94'.
[   63.964603][ T6045] netlink: 7 bytes leftover after parsing attributes in process `syz.1.94'.
[   64.011502][ T6043] syzkaller1: entered promiscuous mode
[   64.015677][ T6043] syzkaller1: entered allmulticast mode
[   64.190378][ T6051] netlink: 40 bytes leftover after parsing attributes in process `syz.1.97'.
[   64.346630][ T6069] netlink: 52 bytes leftover after parsing attributes in process `syz.0.100'.
[   64.418248][ T6069] block nbd0: NBD_DISCONNECT
[   64.420362][ T6069] block nbd0: shutting down sockets
[   64.483996][   T55] block nbd1: Receive control failed (result -32)
[   64.548277][ T6078] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   64.581643][ T6080] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   64.648214][ T6090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.106'.
[   64.658514][ T6090] team0: Cannot enslave team device to itself
[   64.711055][ T6094] netlink: 'syz.0.109': attribute type 3 has an invalid length.
[   64.720214][ T6094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.109'.
[   64.768649][ T6094] bond1 (unregistering): Released all slaves
[   64.969781][ T6106] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   65.121553][ T6121] netlink: 204 bytes leftover after parsing attributes in process `syz.0.117'.
[   65.124628][ T6120] netlink: 204 bytes leftover after parsing attributes in process `syz.0.117'.
[   65.409626][ T5621] Bluetooth: hci0: command 0x0419 tx timeout
[   65.502932][ T6160] netlink: 'syz.0.128': attribute type 6 has an invalid length.
[   65.665788][ T6176] Illegal XDP return value 65535 on prog  (id 25) dev N/A, expect packet loss!
[   65.824405][ T6180] veth3: entered allmulticast mode
[   65.848488][ T6180] bond1: (slave veth3): Enslaving as an active interface with an up link
[   65.880646][ T6180] bond1 (unregistering): (slave veth3): Releasing backup interface
[   65.904488][ T6180] bond1 (unregistering): Released all slaves
[   66.201035][ T6202] gretap0: entered promiscuous mode
[   66.208252][ T6202] vlan2: entered promiscuous mode
[   66.925153][ T6224] netlink: 'syz.0.144': attribute type 1 has an invalid length.
[   66.938102][ T6224] NCSI netlink: No device for ifindex 0
[   67.097375][ T6246] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   67.593808][ T6288] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   67.644121][ T6290] tipc: Failed to remove unknown binding: 66,0,0/0:1219762444/1219762446
[   67.648140][ T6290] tipc: Failed to remove unknown binding: 66,0,0/0:1219762444/1219762445
[   67.705660][ T6292] IPVS: length: 142 != 8
[   67.814835][ T6294] veth3: entered allmulticast mode
[   67.823142][ T6294] bond2: (slave veth3): Enslaving as an active interface with an up link
[   67.936102][ T6305] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   68.508901][ T6329] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   68.601883][ T6332] __nla_validate_parse: 7 callbacks suppressed
[   68.601897][ T6332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.178'.
[   68.636621][ T6331] veth7: entered allmulticast mode
[   68.640825][ T6331] bond1: (slave veth7): Enslaving as an active interface with an up link
[   68.647985][ T6331] bond1 (unregistering): (slave veth7): Releasing backup interface
[   68.652569][ T6331] bond1 (unregistering): Released all slaves
[   69.011674][ T6347] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   69.998492][ T6393] netlink: 'syz.0.199': attribute type 21 has an invalid length.
[   70.001658][ T6393] netlink: 128 bytes leftover after parsing attributes in process `syz.0.199'.
[   70.004520][ T6393] netlink: 'syz.0.199': attribute type 4 has an invalid length.
[   70.007048][ T6393] netlink: 'syz.0.199': attribute type 5 has an invalid length.
[   70.011946][ T6393] netlink: 3 bytes leftover after parsing attributes in process `syz.0.199'.
[   70.248127][ T6407] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20002
[   70.638205][ T6430] netlink: 24 bytes leftover after parsing attributes in process `syz.0.210'.
[   70.646575][ T6430] netlink: 24 bytes leftover after parsing attributes in process `syz.0.210'.
[   71.164401][ T6489] netlink: 'syz.0.227': attribute type 14 has an invalid length.
[   71.328342][ T6505] syzkaller1: entered promiscuous mode
[   71.335527][ T6505] syzkaller1: entered allmulticast mode
[   71.564216][ T6529] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   72.212191][ T6541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.245'.
[   72.411551][ T6554] tipc: Can't bind to reserved service type 2
[   72.442693][ T6561] netlink: 'syz.2.252': attribute type 1 has an invalid length.
[   72.469277][ T6561] bond4: entered promiscuous mode
[   72.471919][ T6561] bond4: entered allmulticast mode
[   72.473865][ T6561] 8021q: adding VLAN 0 to HW filter on device bond4
[   72.484863][ T6561] macvlan2: entered promiscuous mode
[   72.486615][ T6561] macvlan2: entered allmulticast mode
[   72.487001][ T6566] netlink: 'syz.1.253': attribute type 4 has an invalid length.
[   72.491192][ T6561] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   72.536111][ T6568] netlink: 28 bytes leftover after parsing attributes in process `syz.2.252'.
[   72.539752][ T6568] bond4: left promiscuous mode
[   72.542477][ T6568] bond4: left allmulticast mode
[   72.655764][ T6575] netlink: 24 bytes leftover after parsing attributes in process `syz.2.255'.
[   72.783642][ T6584] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   73.031519][ T6611] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   73.056331][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.269'.
[   73.075995][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.269'.
[   73.138491][ T6619] netlink: 'syz.0.272': attribute type 11 has an invalid length.
[   74.664991][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.290'.
[   74.848064][ T6678] syz_tun: entered allmulticast mode
[   74.946443][ T6684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.295'.
[   74.980613][ T6684] 8021q: adding VLAN 0 to HW filter on device bond1
[   75.022585][ T6684] 8021q: adding VLAN 0 to HW filter on device bond2
[   75.026792][ T6684] bond1: (slave bond2): Enslaving as an active interface with an up link
[   75.032238][ T6684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.295'.
[   75.042403][ T6684] bond1 (unregistering): (slave bond2): Releasing backup interface
[   75.046318][ T6684] bond1 (unregistering): Released all slaves
[   75.126518][ T6696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.298'.
[   75.150951][ T6699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.299'.
[   75.152534][ T6696] netlink: 36 bytes leftover after parsing attributes in process `syz.2.298'.
[   75.175118][ T6696] netlink: 48 bytes leftover after parsing attributes in process `syz.2.298'.
[   75.189558][ T6699] veth3: entered allmulticast mode
[   75.195705][ T6699] bond2: (slave veth3): Enslaving as an active interface with an up link
[   75.202029][ T6696] bond5 (unregistering): Released all slaves
[   75.218474][ T6699] bond2 (unregistering): (slave veth3): Releasing backup interface
[   75.223366][ T6699] bond2 (unregistering): Released all slaves
[   75.427657][ T6710] gretap0: entered promiscuous mode
[   75.432900][ T6710] vlan2: entered promiscuous mode
[   75.725490][ T6725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.307'.
[   75.747596][ T6728] ip6t_srh: unknown srh invflags 4000
[   75.855484][ T6736] netlink: 40 bytes leftover after parsing attributes in process `syz.2.311'.
[   75.932602][ T6741] netlink: 'syz.2.314': attribute type 1 has an invalid length.
[   76.353523][ T6788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.326'.
[   76.392030][ T6788] veth5: entered allmulticast mode
[   76.400443][ T6788] bond3: (slave veth5): Enslaving as an active interface with an up link
[   76.413818][ T6788] bond3 (unregistering): (slave veth5): Releasing backup interface
[   76.421698][ T6788] bond3 (unregistering): Released all slaves
[   76.477887][ T6792] gretap0: entered promiscuous mode
[   76.482280][ T6792] vlan2: entered promiscuous mode
[   76.564990][ T6797] 8021q: adding VLAN 0 to HW filter on device bond3
[   76.568853][ T6797] bond3: option mode: unable to set because the bond device is up
[   76.577210][ T6797] ip6t_srh: unknown srh invflags 4000
[   76.613871][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[   76.616895][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[   77.004307][ T6813] veth7: entered allmulticast mode
[   77.013340][ T6813] bond4: (slave veth7): Enslaving as an active interface with an up link
[   77.023829][ T6813] bond4 (unregistering): (slave veth7): Releasing backup interface
[   77.029708][ T6813] bond4 (unregistering): Released all slaves
[   77.451459][ T6839] syzkaller1: entered promiscuous mode
[   77.453676][ T6839] syzkaller1: entered allmulticast mode
[   77.872645][ T6872] xt_TCPMSS: Only works on TCP SYN packets
[   77.914480][ T6874] Bluetooth: MGMT ver 1.23
[   77.917071][ T6874] Bluetooth: hci1: expected 36 bytes, got 2 bytes
[   77.965233][ T6881] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[   78.174692][ T6836] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   79.137647][ T6925] veth9: entered allmulticast mode
[   79.322507][ T6940] netlink: 'syz.1.372': attribute type 1 has an invalid length.
[   79.324416][ T6941] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0
[   79.410286][ T5621] Bluetooth: hci0: command 0x0419 tx timeout
[   79.882718][ T6986] __nla_validate_parse: 13 callbacks suppressed
[   79.882739][ T6986] netlink: 20 bytes leftover after parsing attributes in process `syz.1.384'.
[   79.889574][ T6986] netlink: 44 bytes leftover after parsing attributes in process `syz.1.384'.
[   79.931635][ T6990] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   80.387674][ T7006] netlink: 200188 bytes leftover after parsing attributes in process `syz.2.389'.
[   80.912553][ T7022] netlink: 124 bytes leftover after parsing attributes in process `syz.0.395'.
[   81.093346][ T7032] netlink: 'syz.0.398': attribute type 1 has an invalid length.
[   81.198069][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.400'.
[   81.207905][ T7037] netlink: 56 bytes leftover after parsing attributes in process `syz.0.400'.
[   81.321868][ T7051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.402'.
[   81.455626][ T7064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.406'.
[   81.498297][ T7064] veth9: entered allmulticast mode
[   81.502827][ T7064] bond4: (slave veth9): Enslaving as an active interface with an up link
[   81.512156][ T7064] bond4 (unregistering): (slave veth9): Releasing backup interface
[   81.516670][ T7064] bond4 (unregistering): Released all slaves
[   82.070661][ T7089] netlink: 504 bytes leftover after parsing attributes in process `syz.0.412'.
[   82.077149][ T7089] netlink: 20 bytes leftover after parsing attributes in process `syz.0.412'.
[   82.144729][ T7093] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   82.283030][ T7109] Unknown options in mask 6
[   82.353685][ T7115] netlink: 'syz.0.420': attribute type 50 has an invalid length.
[   82.636002][ T7142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   82.706981][ T7136] veth5: entered promiscuous mode
[   82.872679][    T9] IPVS: starting estimator thread 0...
[   82.926361][ T7165] SET target dimension over the limit!
[   82.944442][ T7165] openvswitch: netlink: Unknown nsh attribute 0
[   82.969275][ T7161] IPVS: using max 80 ests per chain, 192000 per kthread
[   83.188136][ T7180] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   83.420947][ T7193] veth7: entered allmulticast mode
[   83.426422][ T7193] bond6: (slave veth7): Enslaving as an active interface with an up link
[   83.609571][ T7209] syzkaller0: entered promiscuous mode
[   83.612943][ T7209] syzkaller0: entered allmulticast mode
[   83.626422][ T7209] tc action pedit offset must be on 32 bit boundaries
[   83.712470][ T7220] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   83.728779][ T7219] netlink: set zone limit has 8 unknown bytes
[   84.105916][ T7257] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20000
[   84.209035][ T7261] syzkaller0: entered promiscuous mode
[   84.216897][ T7261] syzkaller0: entered allmulticast mode
[   84.302650][ T7265] netlink: 'syz.1.473': attribute type 1 has an invalid length.
[   84.533391][ T7279] syzkaller0: entered promiscuous mode
[   84.536069][ T7279] syzkaller0: entered allmulticast mode
[   85.361668][ T7291] __nla_validate_parse: 13 callbacks suppressed
[   85.361689][ T7291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.482'.
[   86.247425][ T7302] netlink: 32 bytes leftover after parsing attributes in process `syz.2.485'.
[   86.274385][ T7300] syzkaller0: entered promiscuous mode
[   86.276621][ T7300] syzkaller0: entered allmulticast mode
[   86.282162][ T7304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.486'.
[   86.337894][ T7306] netlink: 36 bytes leftover after parsing attributes in process `syz.2.487'.
[   86.856602][   T10] cfg80211: failed to load regulatory.db
[   87.312850][ T7345] openvswitch: netlink: Missing valid actions attribute.
[   87.315741][ T7345] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   87.404184][ T7354] netlink: 'syz.0.500': attribute type 3 has an invalid length.
[   87.407922][ T7354] netlink: 'syz.0.500': attribute type 1 has an invalid length.
[   87.463010][ T7356] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   87.472995][ T7357] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.500'.
[   87.988396][ T7382] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   88.154246][ T7391] Bluetooth: MGMT ver 1.23
[   88.213405][ T7392] x_tables: duplicate underflow at hook 1
[   89.007724][ T7400] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   89.728696][ T7405] vlan2: entered promiscuous mode
[   90.328159][ T7438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.528'.
[   90.381857][   T56] block nbd0: Receive control failed (result -1)
[   90.814196][ T7451] netlink: 'syz.0.530': attribute type 3 has an invalid length.
[   91.035427][ T7462] netlink: 'syz.2.533': attribute type 49 has an invalid length.
[   91.215950][ T7474] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   91.277536][ T7477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.537'.
[   91.639863][ T7502] netlink: 'syz.0.545': attribute type 1 has an invalid length.
[   91.679226][ T7502] bond4: (slave geneve2): making interface the new active one
[   91.682735][ T7502] bond4: (slave geneve2): Enslaving as an active interface with an up link
[   91.685697][   T13] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   91.688993][   T13] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   91.693080][   T13] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   91.698442][   T13] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   91.868180][ T7515] netlink: 60 bytes leftover after parsing attributes in process `syz.1.549'.
[   92.060447][ T7534] netlink: 60 bytes leftover after parsing attributes in process `syz.0.557'.
[   92.163644][ T7543] batadv_slave_1: entered promiscuous mode
[   92.184730][ T7540] batadv_slave_1: left promiscuous mode
[   92.188474][ T7545] netlink: 40 bytes leftover after parsing attributes in process `syz.1.561'.
[   92.630217][ T7561] netlink: 84 bytes leftover after parsing attributes in process `syz.2.566'.
[   92.633150][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.566'.
[   92.640727][ T7561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.566'.
[   92.666951][ T7561] veth9: entered allmulticast mode
[   92.670593][ T7561] bond8: (slave veth9): Enslaving as an active interface with an up link
[   92.676337][ T7561] bond8 (unregistering): (slave veth9): Releasing backup interface
[   92.683047][ T7561] bond8 (unregistering): Released all slaves
[   92.762460][ T7564] geneve2: entered promiscuous mode
[   92.981477][ T7578] tls_set_device_offload_rx: netdev not found
[   93.007952][ T7580] netlink: 'syz.0.573': attribute type 29 has an invalid length.
[   93.010997][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'.
[   93.014464][ T7580] netlink: 'syz.0.573': attribute type 29 has an invalid length.
[   93.016960][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'.
[   93.020484][ T7580] netlink: 'syz.0.573': attribute type 29 has an invalid length.
[   93.022976][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'.
[   93.026772][ T7580] netlink: 'syz.0.573': attribute type 29 has an invalid length.
[   93.029964][ T7580] netlink: 'syz.0.573': attribute type 29 has an invalid length.
[   93.032701][ T7580] netlink: 'syz.0.573': attribute type 29 has an invalid length.
[   93.035338][ T7580] netlink: 'syz.0.573': attribute type 29 has an invalid length.
[   93.038209][ T7580] netlink: 'syz.0.573': attribute type 29 has an invalid length.
[   93.042917][ T7580] netlink: 'syz.0.573': attribute type 29 has an invalid length.
[   93.045695][ T7580] netlink: 'syz.0.573': attribute type 29 has an invalid length.
[   93.360628][ T7606] syzkaller0: entered promiscuous mode
[   93.362681][ T7606] syzkaller0: entered allmulticast mode
[   93.464289][ T7611] sctp: [Deprecated]: syz.0.582 (pid 7611) Use of struct sctp_assoc_value in delayed_ack socket option.
[   93.464289][ T7611] Use struct sctp_sack_info instead
[   94.861499][ T7615] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   95.046603][ T7655] netem: change failed
[   95.572951][ T7701] veth11: entered allmulticast mode
[   95.579442][ T7701] bond4: (slave veth11): Enslaving as an active interface with an up link
[   95.588206][ T7701] bond4 (unregistering): (slave veth11): Releasing backup interface
[   95.594138][ T7701] bond4 (unregistering): Released all slaves
[   95.759635][ T7717] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[   95.777680][ T7717] tls_set_device_offload: netdev not found
[   95.980570][ T7735] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   96.096385][ T7747] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   96.139289][ T5621] Bluetooth: hci0: command 0x0419 tx timeout
[   96.353930][ T7766] __nla_validate_parse: 26 callbacks suppressed
[   96.353938][ T7765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.633'.
[   96.353947][ T7766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.633'.
[   96.393809][ T7768] bond5 (unregistering): Released all slaves
[   96.693808][ T7781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.639'.
[   96.807559][ T7785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.641'.
[   96.947378][ T7787] xt_TCPMSS: Only works on TCP SYN packets
[   96.996359][ T7794] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.644'.
[   97.001924][ T7794] netlink: 72 bytes leftover after parsing attributes in process `syz.2.644'.
[   97.095310][ T7799] syzkaller0: entered promiscuous mode
[   97.097713][ T7799] syzkaller0: entered allmulticast mode
[   97.105292][ T7799] TC_ACT_REPEAT abuse ?
[   97.377821][ T7815] netlink: 60 bytes leftover after parsing attributes in process `syz.0.652'.
[   97.678945][ T7831] tipc: Resetting bearer <eth:syzkaller0>
[   97.734127][ T7837] netlink: 76 bytes leftover after parsing attributes in process `syz.0.657'.
[   98.191452][ T7872] syzkaller0: entered promiscuous mode
[   98.194376][ T7872] syzkaller0: entered allmulticast mode
[   98.210402][ T5621] Bluetooth: hci0: command 0x0419 tx timeout
[   98.304789][ T7886] netlink: 72 bytes leftover after parsing attributes in process `syz.2.669'.
[   98.597150][ T7917] validate_nla: 6 callbacks suppressed
[   98.597163][ T7917] netlink: 'syz.2.674': attribute type 3 has an invalid length.
[   98.609363][ T7917] netlink: 244 bytes leftover after parsing attributes in process `syz.2.674'.
[   98.754799][ T7939] xt_bpf: check failed: parse error
[   98.874691][ T7947] nbd: must specify a size in bytes for the device
[   99.320551][ T7991] bridge1: entered promiscuous mode
[   99.323011][ T7991] bridge1: entered allmulticast mode
[   99.328708][ T7991] team0: Port device bridge1 added
[   99.338244][ T7993] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   99.359026][ T7991] bridge0: port 3(team0) entered blocking state
[   99.382785][ T7991] bridge0: port 3(team0) entered disabled state
[   99.386377][ T7991] team0: entered allmulticast mode
[   99.388326][ T7991] team_slave_0: entered allmulticast mode
[   99.390881][ T7991] team_slave_1: entered allmulticast mode
[   99.396897][ T7991] team0: entered promiscuous mode
[   99.398632][ T7991] team_slave_0: entered promiscuous mode
[   99.401551][ T7991] team_slave_1: entered promiscuous mode
[   99.404426][ T7991] bridge0: port 3(team0) entered blocking state
[   99.407595][ T7991] bridge0: port 3(team0) entered forwarding state
[   99.411362][ T7995] netlink: 'syz.0.694': attribute type 2 has an invalid length.
[   99.861994][ T8056] netlink: 'syz.1.713': attribute type 1 has an invalid length.
[  100.008807][ T8084] netlink: 'syz.2.721': attribute type 1 has an invalid length.
[  100.424700][ T8126] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  100.487207][ T8135] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.570792][ T8145] bond0: Unable to set up delay as MII monitoring is disabled
[  100.584121][ T8146] bond0: Unable to set up delay as MII monitoring is disabled
[  100.807174][ T8171] vlan2: entered promiscuous mode
[  101.089038][   T56] block nbd2: Receive control failed (result -1)
[  101.226352][ T8198] x_tables: duplicate underflow at hook 2
[  101.250043][ T8198] veth11: entered allmulticast mode
[  101.253478][ T8198] bond8: (slave veth11): Enslaving as an active interface with an up link
[  101.505649][ T8215] __nla_validate_parse: 50 callbacks suppressed
[  101.505669][ T8215] netlink: 20 bytes leftover after parsing attributes in process `syz.0.750'.
[  101.534259][ T8215] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048)
[  101.587674][ T8222] veth11: entered allmulticast mode
[  101.831251][ T8228] openvswitch: netlink: Tunnel attr 11013 out of range max 16
[  101.841243][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.760'.
[  101.920019][ T8260] netlink: 'syz.0.763': attribute type 1 has an invalid length.
[  101.924822][ T8259] netlink: 'syz.0.763': attribute type 1 has an invalid length.
[  101.927559][ T8259] netlink: 'syz.0.763': attribute type 1 has an invalid length.
[  101.930341][ T8259] netlink: 'syz.0.763': attribute type 1 has an invalid length.
[  101.933009][ T8259] netlink: 'syz.0.763': attribute type 1 has an invalid length.
[  101.935690][ T8259] netlink: 'syz.0.763': attribute type 1 has an invalid length.
[  102.240712][ T8271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.766'.
[  102.554375][ T8236] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  102.734832][ T8294] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.775'.
[  102.937510][ T8309] bond5: entered promiscuous mode
[  102.944333][ T8309] 8021q: adding VLAN 0 to HW filter on device bond5
[  102.947276][ T8309] bridge0: port 3(bond5) entered blocking state
[  102.949596][ T8309] bridge0: port 3(bond5) entered disabled state
[  102.952310][ T8309] bond5: entered allmulticast mode
[  102.956351][ T8309] bridge0: port 3(bond5) entered blocking state
[  102.959985][ T8309] bridge0: port 3(bond5) entered forwarding state
[  103.044964][ T8321] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.784'.
[  103.169398][ T8325] netlink: 676 bytes leftover after parsing attributes in process `syz.2.786'.
[  103.644945][ T8346] sctp: [Deprecated]: syz.2.794 (pid 8346) Use of struct sctp_assoc_value in delayed_ack socket option.
[  103.644945][ T8346] Use struct sctp_sack_info instead
[  103.729413][ T5621] Bluetooth: hci0: command 0x0419 tx timeout
[  103.822655][   T27] bridge0: port 3(bond5) entered disabled state
[  103.902887][ T8375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.803'.
[  103.913453][ T8382] x_tables: duplicate underflow at hook 3
[  103.954123][   T55] block nbd3: Receive control failed (result -1)
[  104.014943][ T8375] netlink: 16 bytes leftover after parsing attributes in process `syz.1.803'.
[  104.027506][ T8392] validate_nla: 17 callbacks suppressed
[  104.027519][ T8392] netlink: 'syz.2.808': attribute type 2 has an invalid length.
[  104.318315][ T8410] netlink: 144 bytes leftover after parsing attributes in process `syz.0.813'.
[  104.423241][ T8417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.816'.
[  104.451876][ T8417] veth13: entered allmulticast mode
[  104.457725][ T8417] bond9: (slave veth13): Enslaving as an active interface with an up link
[  104.488065][ T8421] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  104.733101][ T8427] vlan2: entered promiscuous mode
[  105.033860][ T8444] xt_l2tp: v2 doesn't support IP mode
[  105.155253][ T5672] IPVS: starting estimator thread 0...
[  105.239261][ T8452] IPVS: using max 49 ests per chain, 117600 per kthread
[  105.700066][ T8488] bridge0: port 3(vlan2) entered blocking state
[  105.703901][ T8488] bridge0: port 3(vlan2) entered disabled state
[  105.706835][ T8488] vlan2: entered allmulticast mode
[  105.710367][ T8488] geneve0: entered allmulticast mode
[  105.714562][ T8488] vlan2: entered promiscuous mode
[  105.716680][ T8488] geneve0: entered promiscuous mode
[  105.764448][   T55] block nbd4: Receive control failed (result -1)
[  106.118179][ T8509] netlink: 'syz.1.845': attribute type 1 has an invalid length.
[  106.429786][ T8526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.717623][ T8552] __nla_validate_parse: 4 callbacks suppressed
[  106.717638][ T8552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.859'.
[  106.764043][ T8552] veth11: entered allmulticast mode
[  106.771966][ T8552] bond6: (slave veth11): Enslaving as an active interface with an up link
[  106.786051][ T8557] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20000
[  106.880073][ T8565] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  106.934448][ T8569] vlan0: entered promiscuous mode
[  106.936654][ T8569] gretap0: entered promiscuous mode
[  106.981320][ T8573] netlink: 32 bytes leftover after parsing attributes in process `syz.2.866'.
[  106.985233][ T8573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.866'.
[  107.023107][ T8573] veth15: entered allmulticast mode
[  107.046553][ T8573] bond10: (slave veth15): Enslaving as an active interface with an up link
[  107.078812][ T8575] bond10 (unregistering): (slave veth15): Releasing backup interface
[  107.090113][ T8575] bond10 (unregistering): Released all slaves
[  107.137803][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'.
[  107.193741][ T8581] netlink: 'syz.0.868': attribute type 7 has an invalid length.
[  107.213429][ T8581] netlink: 'syz.0.868': attribute type 7 has an invalid length.
[  107.221004][ T8581] netlink: 332 bytes leftover after parsing attributes in process `syz.0.868'.
[  107.225107][ T8581] netlink: 'syz.0.868': attribute type 9 has an invalid length.
[  107.229192][ T8581] netlink: 108 bytes leftover after parsing attributes in process `syz.0.868'.
[  107.243428][ T8581] netlink: 32 bytes leftover after parsing attributes in process `syz.0.868'.
[  107.455548][ T8602] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  107.703576][ T8622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.883'.
[  107.790997][ T8622] veth17: entered allmulticast mode
[  107.794974][ T8622] bond10: (slave veth17): Enslaving as an active interface with an up link
[  107.843598][ T8632] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  107.883982][ T8634] netlink: 20 bytes leftover after parsing attributes in process `syz.0.887'.
[  107.886913][ T8634] netlink: 'syz.0.887': attribute type 4 has an invalid length.
[  108.088385][ T8655] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  108.319747][ T8673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.901'.
[  108.373672][ T8673] netlink: 'syz.1.901': attribute type 1 has an invalid length.
[  108.376668][ T8676] syzkaller0: entered promiscuous mode
[  108.383236][ T8676] syzkaller0: entered allmulticast mode
[  108.785911][ T8700] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[  108.975272][ T8717] netlink: get zone limit has 4 unknown bytes
[  109.065705][ T8724] xt_hashlimit: invalid rate
[  109.242400][ T8743] smc: net device wlan0 applied user defined pnetid SYZ0
[  109.311980][ T8750] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048)
[  110.616853][ T8797] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  111.134666][   T55] block nbd5: Receive control failed (result -1)
[  111.378007][ T8881] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  111.724476][ T8907] netlink: 'syz.2.978': attribute type 5 has an invalid length.
[  111.987731][ T8920] sctp: [Deprecated]: syz.0.984 (pid 8920) Use of int in maxseg socket option.
[  111.987731][ T8920] Use struct sctp_assoc_value instead
[  112.425841][ T8962] netlink: 'syz.1.997': attribute type 4 has an invalid length.
[  112.428651][ T8962] __nla_validate_parse: 17 callbacks suppressed
[  112.428666][ T8962] netlink: 240 bytes leftover after parsing attributes in process `syz.1.997'.
[  112.525866][ T8976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1001'.
[  112.727369][ T8992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1006'.
[  112.760854][ T8992] veth13: entered allmulticast mode
[  112.766268][ T8992] bond7: (slave veth13): Enslaving as an active interface with an up link
[  112.773625][ T8992] bond7 (unregistering): (slave veth13): Releasing backup interface
[  112.777477][ T8992] bond7 (unregistering): Released all slaves
[  113.470209][ T9043] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1021'.
[  113.537142][ T9048] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1024'.
[  113.540353][ T9048] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1024'.
[  113.587347][ T9055] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1027'.
[  113.593964][ T9055] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1027'.
[  113.602092][ T9053] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1026'.
[  113.634762][ T9060] netlink: 'syz.2.1028': attribute type 1 has an invalid length.
[  113.677662][ T9068] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.1026'.
[  114.612854][ T9072] kthread_run failed with err -4
[  115.104855][ T9124] syzkaller1: tun_chr_ioctl cmd 1074025677
[  115.107156][ T9124] syzkaller1: linktype set to 780
[  115.292353][ T9131] netlink: 'syz.1.1046': attribute type 7 has an invalid length.
[  115.306203][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  115.306330][ T9131] netlink: 'syz.1.1046': attribute type 7 has an invalid length.
[  115.310155][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  115.317877][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  115.324021][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  116.250154][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x42
[  116.823342][ T9186] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  116.831975][ T9183] syzkaller1: entered promiscuous mode
[  116.834410][ T9183] syzkaller1: entered allmulticast mode
[  117.101288][ T9208] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  117.218435][ T9214] veth13: entered allmulticast mode
[  117.227949][ T9214] bond6: (slave veth13): Enslaving as an active interface with an up link
[  117.249053][ T9214] bond6 (unregistering): (slave veth13): Releasing backup interface
[  118.085262][ T9214] bond6 (unregistering): Released all slaves
[  118.127035][ T9224] __nla_validate_parse: 10 callbacks suppressed
[  118.127048][ T9224] netlink: 9976 bytes leftover after parsing attributes in process `syz.2.1076'.
[  118.224994][ T9231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1078'.
[  118.230892][ T9231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1078'.
[  118.260550][ T9232] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1079'.
[  118.307058][ T9239] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1081'.
[  118.320844][ T9241] netlink: 'syz.2.1083': attribute type 1 has an invalid length.
[  118.323551][ T9241] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1083'.
[  118.329859][ T9243] IPVS: length: 528 != 1152
[  118.382120][ T9248] netlink: 'syz.2.1083': attribute type 1 has an invalid length.
[  118.547666][ T9256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1087'.
[  118.593118][ T9260] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1088'.
[  119.367974][ T9276] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  119.378301][ T9264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1090'.
[  119.478953][ T9280] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1097'.
[  119.789026][ T9336] netlink: 'syz.1.1113': attribute type 23 has an invalid length.
[  119.816351][ T9338] openvswitch: netlink: Message has 496 unknown bytes.
[  119.819006][ T9338] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.885947][ T9376] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  120.894271][ T9376] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  120.971677][ T9381] syzkaller1: entered promiscuous mode
[  120.973611][ T9381] syzkaller1: entered allmulticast mode
[  121.072775][ T9383] syzkaller0: entered promiscuous mode
[  121.074617][ T9383] syzkaller0: entered allmulticast mode
[  122.623870][ T9426] netlink: 'syz.0.1140': attribute type 4 has an invalid length.
[  122.835587][ T9434] vlan2: entered promiscuous mode
[  123.762944][ T9475] 8021q: VLANs not supported on tunl0
[  123.832407][ T9482] __nla_validate_parse: 4 callbacks suppressed
[  123.832418][ T9482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1156'.
[  123.852812][ T9482] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1156'.
[  123.995509][ T9494] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1160'.
[  124.064673][ T9496] netlink: 'syz.0.1161': attribute type 39 has an invalid length.
[  124.273524][ T9501] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1163'.
[  124.276528][ T9501] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1163'.
[  124.333160][ T9506] pim6reg: entered allmulticast mode
[  124.340234][ T9508] syzkaller1: entered promiscuous mode
[  124.342220][ T9508] syzkaller1: entered allmulticast mode
[  124.585295][ T9522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1170'.
[  124.787241][ T9530] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1173'.
[  124.816301][ T9530] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1173'.
[  124.819319][ T9530] nbd: device at index 64 is going down
[  124.957124][ T9536] syzkaller1: entered promiscuous mode
[  124.958984][ T9536] syzkaller1: entered allmulticast mode
[  125.386154][ T9551] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  125.443784][ T9554] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1179'.
[  125.577051][ T9563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1184'.
[  125.657334][ T9563] veth15: entered allmulticast mode
[  125.676526][ T9563] bond6: (slave veth15): Enslaving as an active interface with an up link
[  125.693204][ T9563] bond6 (unregistering): (slave veth15): Releasing backup interface
[  125.707839][ T9563] bond6 (unregistering): Released all slaves
[  126.197392][ T9603] netlink: 'syz.2.1198': attribute type 2 has an invalid length.
[  127.116231][ T9607] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  127.326495][ T9638] bond7: Invalid ad_actor_system MAC address.
[  127.329445][ T9638] bond7: option ad_actor_system: invalid value (7)
[  127.335253][ T9638] bond7 (unregistering): Released all slaves
[  127.403365][ T9647] syzkaller0: entered promiscuous mode
[  127.405178][ T9647] syzkaller0: entered allmulticast mode
[  127.619944][ T9664] sctp: [Deprecated]: syz.2.1219 (pid 9664) Use of struct sctp_assoc_value in delayed_ack socket option.
[  127.619944][ T9664] Use struct sctp_sack_info instead
[  127.723392][ T9674] netlink: 'syz.1.1222': attribute type 2 has an invalid length.
[  128.086558][ T9709] netlink: 'syz.0.1231': attribute type 142 has an invalid length.
[  128.379223][ T5621] Bluetooth: hci0: command 0x0419 tx timeout
[  128.946435][ T9726] syzkaller0: entered promiscuous mode
[  128.954047][ T9726] syzkaller0: entered allmulticast mode
[  129.218687][ T9738] syzkaller0: entered promiscuous mode
[  129.228676][ T9738] syzkaller0: entered allmulticast mode
[  129.257125][ T9738] sctp: [Deprecated]: syz.2.1240 (pid 9738) Use of struct sctp_assoc_value in delayed_ack socket option.
[  129.257125][ T9738] Use struct sctp_sack_info instead
[  129.497879][ T9765] __nla_validate_parse: 7 callbacks suppressed
[  129.497891][ T9765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1249'.
[  129.590008][ T9774] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1252'.
[  129.596453][ T9774] sctp: [Deprecated]: syz.0.1252 (pid 9774) Use of struct sctp_assoc_value in delayed_ack socket option.
[  129.596453][ T9774] Use struct sctp_sack_info instead
[  129.798552][ T9789] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1257'.
[  129.802914][ T9789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1257'.
[  129.808574][ T9789] netlink: 'syz.2.1257': attribute type 10 has an invalid length.
[  129.843480][ T9792] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1258'.
[  129.909477][ T9796] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1259'.
[  129.918412][ T9796] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1259'.
[  129.934018][ T9796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1259'.
[  130.018794][ T9798] veth19: entered allmulticast mode
[  130.358221][ T9813] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1264'.
[  130.367484][ T9813] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1264'.
[  130.523227][ T9822] syzkaller0: entered promiscuous mode
[  130.534276][ T9822] syzkaller0: entered allmulticast mode
[  131.628519][ T9877] veth17: entered allmulticast mode
[  131.632962][ T9877] bond7: (slave veth17): Enslaving as an active interface with an up link
[  131.639246][ T9877] bond7 (unregistering): (slave veth17): Releasing backup interface
[  131.643474][ T9877] bond7 (unregistering): Released all slaves
[  131.747367][ T9882] IPVS: set_ctl: invalid protocol: 58 172.20.20.61:20004
[  131.798427][ T9884] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  132.013350][ T9908] veth15: entered allmulticast mode
[  132.020524][ T9908] bond7: (slave veth15): Enslaving as an active interface with an up link
[  132.076668][ T9912] veth17: entered allmulticast mode
[  132.222273][ T9931] sctp: [Deprecated]: syz.0.1298 (pid 9931) Use of struct sctp_assoc_value in delayed_ack socket option.
[  132.222273][ T9931] Use struct sctp_sack_info instead
[  132.405300][ T9951] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  132.627675][ T9988] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  132.653223][ T9991] xt_HMARK: proto mask must be zero with L3 mode
[  133.032814][T10031] syzkaller0: entered promiscuous mode
[  133.034682][T10031] syzkaller0: entered allmulticast mode
[  133.048529][T10033] veth19: entered allmulticast mode
[  134.200191][T10064] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  134.471409][T10076] macvtap1: entered promiscuous mode
[  134.477293][T10076] macvtap1: entered allmulticast mode
[  134.481700][T10076] veth1_vlan: entered allmulticast mode
[  134.501020][T10076] macvtap2: entered promiscuous mode
[  134.506136][T10076] macvtap2: entered allmulticast mode
[  134.821399][T10087] netlink: 'syz.2.1342': attribute type 4 has an invalid length.
[  134.836556][T10087] netlink: 'syz.2.1342': attribute type 4 has an invalid length.
[  135.487743][T10092] netlink: 'syz.1.1343': attribute type 3 has an invalid length.
[  135.491699][T10092] nbd: nbd1 already in use
[  135.523734][T10092] __nla_validate_parse: 14 callbacks suppressed
[  135.523747][T10092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1343'.
[  135.555141][T10103] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  135.581707][T10105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1347'.
[  135.584752][T10105] netlink: 94 bytes leftover after parsing attributes in process `syz.1.1347'.
[  135.587978][T10105] netlink: 'syz.1.1347': attribute type 1 has an invalid length.
[  135.590820][T10105] netlink: 568 bytes leftover after parsing attributes in process `syz.1.1347'.
[  135.732668][T10121] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  135.792014][T10125] syzkaller0: entered promiscuous mode
[  135.793942][T10125] syzkaller0: entered allmulticast mode
[  136.478410][T10154] dvmrp1: tun_chr_ioctl cmd 1074025677
[  136.480595][T10154] dvmrp1: linktype set to 804
[  136.486688][T10154] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1362'.
[  136.535276][T10156] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1363'.
[  136.665756][T10166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1367'.
[  136.694589][T10166] openvswitch: netlink: IP tunnel TTL not specified.
[  136.705360][T10166] veth19: entered allmulticast mode
[  136.710399][T10166] bond7: (slave veth19): Enslaving as an active interface with an up link
[  136.716934][T10166] bond7 (unregistering): (slave veth19): Releasing backup interface
[  136.721619][T10166] bond7 (unregistering): Released all slaves
[  137.580346][T10180] vlan0: entered promiscuous mode
[  137.582200][T10180] gretap0: entered promiscuous mode
[  137.592488][T10182] vlan0: entered promiscuous mode
[  138.050999][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  138.053241][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  138.964696][T10136] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  139.098602][T10198] block nbd0: NBD_DISCONNECT
[  139.104097][T10198] block nbd0: Send disconnect failed -104
[  139.109486][T10198] block nbd0: shutting down sockets
[  139.161040][T10203] xt_l2tp: invalid flags combination: 0
[  139.652749][T10221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1384'.
[  139.656695][T10221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1384'.
[  139.674975][T10221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1384'.
[  140.557247][T10298] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  141.227604][T10322] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  141.694112][T10341] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  141.846882][T10352] ------------[ cut here ]------------
[  141.850109][T10352] 1
[  141.850121][T10352] WARNING: net/ipv4/route.c:1275 at ip_rt_bug+0x2d/0x140, CPU#0: syz.1.1424/10352
[  141.854940][T10352] Modules linked in:
[  141.857871][T10352] CPU: 0 UID: 0 PID: 10352 Comm: syz.1.1424 Not tainted syzkaller #0 PREEMPT(full) 
[  141.861751][T10352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  141.865915][T10352] RIP: 0010:ip_rt_bug+0x2d/0x140
[  141.867948][T10352] Code: fa 55 41 57 41 56 41 55 41 54 53 48 89 d3 e8 5a eb b8 f7 66 90 e8 53 eb b8 f7 31 ff 48 89 de ba 02 00 00 00 e8 44 72 68 ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 49
[  141.875724][T10352] RSP: 0018:ffffc90007cd71c0 EFLAGS: 00010286
[  141.878133][T10352] RAX: 90fa127820ab2300 RBX: ffff8881143a8900 RCX: 0000000080000401
[  141.880797][T10352] RDX: 0000000000000002 RSI: ffffffff8dfa67b3 RDI: ffffffff8c28ade0
[  141.883744][T10352] RBP: ffffc90007cd74c0 R08: ffffffff9030b0f7 R09: 1ffffffff206161e
[  141.886527][T10352] R10: dffffc0000000000 R11: fffffbfff206161f R12: dffffc0000000000
[  141.889059][T10352] R13: 0000000000000000 R14: ffff8881143a8900 R15: dffffc0000000000
[  141.891735][T10352] FS:  00007f5c0c3e66c0(0000) GS:ffff88818dc8d000(0000) knlGS:0000000000000000
[  141.894669][T10352] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  141.897134][T10352] CR2: 000000110c296c7a CR3: 0000000114026000 CR4: 00000000000006f0
[  141.900535][T10352] Call Trace:
[  141.901930][T10352]  <TASK>
[  141.903169][T10352]  ip_push_pending_frames+0x8b/0x110
[  141.905373][T10352]  __icmp_send+0x11e4/0x1690
[  141.907294][T10352]  ? __icmp_send+0x22b/0x1690
[  141.909325][T10352]  ? __pfx___icmp_send+0x10/0x10
[  141.911407][T10352]  ? ip_route_input_noref+0xad/0x270
[  141.913590][T10352]  ? __pfx_ip_route_input_noref+0x10/0x10
[  141.915906][T10352]  ? tcp_v4_early_demux+0x465/0x9c0
[  141.917993][T10352]  ? tcp_v4_early_demux+0x5a7/0x9c0
[  141.920157][T10352]  ip_options_compile+0x80/0xb0
[  141.922152][T10352]  ip_rcv_finish_core+0xaa2/0x1c00
[  141.924280][T10352]  ip_rcv_finish+0x14c/0x2a0
[  141.926220][T10352]  NF_HOOK+0x336/0x3c0
[  141.927936][T10352]  ? sock_wfree+0x26e/0x750
[  141.929874][T10352]  ? __pfx_ip_rcv_finish+0x10/0x10
[  141.931987][T10352]  ? NF_HOOK+0x9e/0x3c0
[  141.933740][T10352]  ? __pfx_NF_HOOK+0x10/0x10
[  141.935648][T10352]  ? __pfx_ip_rcv_finish+0x10/0x10
[  141.937703][T10352]  ? netif_receive_skb+0x102/0xbf0
[  141.939915][T10352]  ? __pfx_ip_rcv+0x10/0x10
[  141.941793][T10352]  netif_receive_skb+0x45b/0xbf0
[  141.943832][T10352]  ? __pfx_netif_receive_skb+0x10/0x10
[  141.946084][T10352]  ? tun_rx_batched+0x185/0x790
[  141.948093][T10352]  tun_rx_batched+0x1de/0x790
[  141.950145][T10352]  ? __build_skb+0x62/0x440
[  141.952045][T10352]  ? __pfx_tun_rx_batched+0x10/0x10
[  141.954180][T10352]  ? tun_get_user+0x2787/0x43e0
[  141.956179][T10352]  ? tun_get_user+0x2787/0x43e0
[  141.958189][T10352]  ? tun_get_user+0x2394/0x43e0
[  141.960272][T10352]  ? tun_get_user+0x2394/0x43e0
[  141.962306][T10352]  ? __local_bh_enable_ip+0xd0/0x130
[  141.964546][T10352]  tun_get_user+0x2bbc/0x43e0
[  141.966450][T10352]  ? tun_get_user+0x2787/0x43e0
[  141.968448][T10352]  ? aa_file_perm+0x50e/0x15e0
[  141.970861][T10352]  ? __pfx_tun_get_user+0x10/0x10
[  141.973007][T10352]  ? __lock_acquire+0x6b5/0x2cf0
[  141.975055][T10352]  ? ref_tracker_alloc+0x35c/0x4c0
[  141.977158][T10352]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  141.979522][T10352]  ? tun_get+0x1c/0x2f0
[  141.981270][T10352]  ? tun_get+0x1c/0x2f0
[  141.983026][T10352]  ? tun_get+0x1c/0x2f0
[  141.984759][T10352]  ? tun_get+0x1c/0x2f0
[  141.986480][T10352]  tun_chr_write_iter+0x113/0x200
[  141.988558][T10352]  vfs_write+0x61d/0xb90
[  141.990435][T10352]  ? __pfx_vfs_write+0x10/0x10
[  141.992428][T10352]  ? __fget_files+0x2a/0x420
[  141.994479][T10352]  ksys_write+0x150/0x270
[  141.996423][T10352]  ? __pfx_ksys_write+0x10/0x10
[  141.998600][T10352]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.001242][T10352]  do_syscall_64+0x15f/0xf80
[  142.002818][T10352]  ? trace_irq_disable+0x3b/0x140
[  142.004453][T10352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.006326][T10352] RIP: 0033:0x7f5c0b55d60e
[  142.007752][T10352] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  142.013787][T10352] RSP: 002b:00007f5c0c3e5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  142.016413][T10352] RAX: ffffffffffffffda RBX: 00007f5c0c3e66c0 RCX: 00007f5c0b55d60e
[  142.018881][T10352] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8
[  142.021391][T10352] RBP: 00007f5c0b632d69 R08: 0000000000000000 R09: 0000000000000000
[  142.023820][T10352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  142.026358][T10352] R13: 00007f5c0b816128 R14: 00007f5c0b816090 R15: 00007ffc3ba5a918
[  142.028897][T10352]  </TASK>
[  142.029971][T10352] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  142.032265][T10352] CPU: 0 UID: 0 PID: 10352 Comm: syz.1.1424 Not tainted syzkaller #0 PREEMPT(full) 
[  142.035247][T10352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  142.038537][T10352] Call Trace:
[  142.039702][T10352]  <TASK>
[  142.040902][T10352]  vpanic+0x56c/0xa60
[  142.042568][T10352]  ? __pfx__printk+0x10/0x10
[  142.044476][T10352]  ? __pfx_vpanic+0x10/0x10
[  142.046361][T10352]  ? is_bpf_text_address+0x292/0x2b0
[  142.048491][T10352]  ? is_bpf_text_address+0x26/0x2b0
[  142.050686][T10352]  panic+0xc5/0xd0
[  142.052248][T10352]  ? __pfx_panic+0x10/0x10
[  142.054140][T10352]  __warn+0x315/0x4c0
[  142.055820][T10352]  ? ip_rt_bug+0x2d/0x140
[  142.057581][T10352]  ? ip_rt_bug+0x2d/0x140
[  142.059230][T10352]  __report_bug+0x29a/0x540
[  142.060897][T10352]  ? NF_HOOK+0x336/0x3c0
[  142.062417][T10352]  ? netif_receive_skb+0x45b/0xbf0
[  142.064142][T10352]  ? tun_rx_batched+0x1de/0x790
[  142.065791][T10352]  ? ip_rt_bug+0x2d/0x140
[  142.067584][T10352]  ? __pfx___report_bug+0x10/0x10
[  142.069571][T10352]  ? ip_rt_bug+0x2d/0x140
[  142.071228][T10352]  report_bug+0x16a/0x220
[  142.072896][T10352]  ? ip_rt_bug+0x2d/0x140
[  142.074388][T10352]  ? ip_rt_bug+0x2f/0x140
[  142.075955][T10352]  handle_bug+0x9c/0x200
[  142.077338][T10352]  exc_invalid_op+0x1a/0x50
[  142.078823][T10352]  asm_exc_invalid_op+0x1a/0x20
[  142.080374][T10352] RIP: 0010:ip_rt_bug+0x2d/0x140
[  142.082098][T10352] Code: fa 55 41 57 41 56 41 55 41 54 53 48 89 d3 e8 5a eb b8 f7 66 90 e8 53 eb b8 f7 31 ff 48 89 de ba 02 00 00 00 e8 44 72 68 ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 49
[  142.088294][T10352] RSP: 0018:ffffc90007cd71c0 EFLAGS: 00010286
[  142.090284][T10352] RAX: 90fa127820ab2300 RBX: ffff8881143a8900 RCX: 0000000080000401
[  142.092984][T10352] RDX: 0000000000000002 RSI: ffffffff8dfa67b3 RDI: ffffffff8c28ade0
[  142.095469][T10352] RBP: ffffc90007cd74c0 R08: ffffffff9030b0f7 R09: 1ffffffff206161e
[  142.098029][T10352] R10: dffffc0000000000 R11: fffffbfff206161f R12: dffffc0000000000
[  142.100536][T10352] R13: 0000000000000000 R14: ffff8881143a8900 R15: dffffc0000000000
[  142.103142][T10352]  ip_push_pending_frames+0x8b/0x110
[  142.104876][T10352]  __icmp_send+0x11e4/0x1690
[  142.106401][T10352]  ? __icmp_send+0x22b/0x1690
[  142.107954][T10352]  ? __pfx___icmp_send+0x10/0x10
[  142.109575][T10352]  ? ip_route_input_noref+0xad/0x270
[  142.111331][T10352]  ? __pfx_ip_route_input_noref+0x10/0x10
[  142.113234][T10352]  ? tcp_v4_early_demux+0x465/0x9c0
[  142.114920][T10352]  ? tcp_v4_early_demux+0x5a7/0x9c0
[  142.116609][T10352]  ip_options_compile+0x80/0xb0
[  142.118174][T10352]  ip_rcv_finish_core+0xaa2/0x1c00
[  142.119775][T10352]  ip_rcv_finish+0x14c/0x2a0
[  142.121286][T10352]  NF_HOOK+0x336/0x3c0
[  142.122763][T10352]  ? sock_wfree+0x26e/0x750
[  142.124211][T10352]  ? __pfx_ip_rcv_finish+0x10/0x10
[  142.126083][T10352]  ? NF_HOOK+0x9e/0x3c0
[  142.127556][T10352]  ? __pfx_NF_HOOK+0x10/0x10
[  142.129267][T10352]  ? __pfx_ip_rcv_finish+0x10/0x10
[  142.131001][T10352]  ? netif_receive_skb+0x102/0xbf0
[  142.132973][T10352]  ? __pfx_ip_rcv+0x10/0x10
[  142.134440][T10352]  netif_receive_skb+0x45b/0xbf0
[  142.136093][T10352]  ? __pfx_netif_receive_skb+0x10/0x10
[  142.137940][T10352]  ? tun_rx_batched+0x185/0x790
[  142.139537][T10352]  tun_rx_batched+0x1de/0x790
[  142.141272][T10352]  ? __build_skb+0x62/0x440
[  142.143111][T10352]  ? __pfx_tun_rx_batched+0x10/0x10
[  142.144874][T10352]  ? tun_get_user+0x2787/0x43e0
[  142.146729][T10352]  ? tun_get_user+0x2787/0x43e0
[  142.148350][T10352]  ? tun_get_user+0x2394/0x43e0
[  142.149960][T10352]  ? tun_get_user+0x2394/0x43e0
[  142.151633][T10352]  ? __local_bh_enable_ip+0xd0/0x130
[  142.153428][T10352]  tun_get_user+0x2bbc/0x43e0
[  142.155027][T10352]  ? tun_get_user+0x2787/0x43e0
[  142.156633][T10352]  ? aa_file_perm+0x50e/0x15e0
[  142.158311][T10352]  ? __pfx_tun_get_user+0x10/0x10
[  142.160031][T10352]  ? __lock_acquire+0x6b5/0x2cf0
[  142.161757][T10352]  ? ref_tracker_alloc+0x35c/0x4c0
[  142.163490][T10352]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  142.165655][T10352]  ? tun_get+0x1c/0x2f0
[  142.167271][T10352]  ? tun_get+0x1c/0x2f0
[  142.168973][T10352]  ? tun_get+0x1c/0x2f0
[  142.170666][T10352]  ? tun_get+0x1c/0x2f0
[  142.172303][T10352]  tun_chr_write_iter+0x113/0x200
[  142.174376][T10352]  vfs_write+0x61d/0xb90
[  142.175900][T10352]  ? __pfx_vfs_write+0x10/0x10
[  142.177404][T10352]  ? __fget_files+0x2a/0x420
[  142.178923][T10352]  ksys_write+0x150/0x270
[  142.180336][T10352]  ? __pfx_ksys_write+0x10/0x10
[  142.181976][T10352]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.183917][T10352]  do_syscall_64+0x15f/0xf80
[  142.185487][T10352]  ? trace_irq_disable+0x3b/0x140
[  142.187162][T10352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.189088][T10352] RIP: 0033:0x7f5c0b55d60e
[  142.190539][T10352] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  142.196896][T10352] RSP: 002b:00007f5c0c3e5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  142.199594][T10352] RAX: ffffffffffffffda RBX: 00007f5c0c3e66c0 RCX: 00007f5c0b55d60e
[  142.202310][T10352] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8
[  142.205613][T10352] RBP: 00007f5c0b632d69 R08: 0000000000000000 R09: 0000000000000000
[  142.208833][T10352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  142.211971][T10352] R13: 00007f5c0b816128 R14: 00007f5c0b816090 R15: 00007ffc3ba5a918
[  142.215236][T10352]  </TASK>
[  142.217261][T10352] Kernel Offset: disabled
[  142.219037][T10352] Rebooting in 86400 seconds..
