last executing test programs:

1.168910059s ago: executing program 2 (id=4813):
r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800)
pwrite64(r0, &(0x7f0000000080)="10ea140a1caf4b9a75d9ffe68d80afe1a7bdc36df4b580ed59d5f70623f5545eda46a870373dbbeedc24bd3b52c6b07b9c7202f7e0ad0e0298308f215112504453a30aeba000bf96a0aa3f8846f4c07e144fe0280efb53170a2f7cd4ca", 0x5d, 0x9)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100))
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x9, 0x1, 0x7922, 0x9, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x4}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000280)='.pending_reads\x00', 0x480, 0x108)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x2, '\x00', r2, r3, 0x4, 0x5, 0x3}, 0x50)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r5, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x7c}}}}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x41}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2b}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
pread64(r4, &(0x7f0000000500)=""/68, 0x44, 0x2db)
ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000580))
sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24000000)
ioctl$VT_RESIZE(r3, 0x5609, &(0x7f00000006c0)={0x6bc6, 0x6, 0x8})
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
read$rfkill(r3, &(0x7f0000000700), 0x8)
ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000740))
write$UHID_DESTROY(r3, &(0x7f0000000780), 0x4)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', r3, 0x4000, r7}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000008c0)={'syztnl1\x00', &(0x7f0000000840)={'ip6_vti0\x00', <r8=>r2, 0x4, 0x1, 0xb4, 0x4, 0x2, @empty, @local, 0x7800, 0x80, 0x30483115, 0x7d4bcca3}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000a00)={'gretap0\x00', &(0x7f0000000900)={'erspan0\x00', r8, 0x8710, 0x20, 0x80, 0x6, {{0x36, 0x4, 0x1, 0x4, 0xd8, 0x67, 0x0, 0x8, 0x4, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @timestamp={0x44, 0xc, 0xdd, 0x0, 0x7, [0x66f7eeaa, 0xfffffffa]}, @timestamp_addr={0x44, 0xc, 0x22, 0x1, 0x4, [{@private=0xa010102, 0x3f}]}, @timestamp={0x44, 0x14, 0x63, 0x0, 0x0, [0xfffff000, 0x5, 0x5, 0x7]}, @generic={0x7, 0x10, "963a8f97c618573f25953068ed6b"}, @cipso={0x86, 0x40, 0x3, [{0x4, 0xa, "109de3a750b1efd7"}, {0x0, 0x12, "b55c96f989ab26dcc56d4994919e004e"}, {0x2, 0x12, "68960e4954eddef4e0cdc4d0a4d04eb9"}, {0x6, 0xc, "5a15b89838ff5040e837"}]}, @timestamp={0x44, 0x20, 0xd1, 0x0, 0x9, [0x0, 0x9, 0x4, 0x2, 0x5, 0x8, 0x0]}, @timestamp={0x44, 0x1c, 0xa0, 0x0, 0x1, [0x4, 0x2, 0xe9, 0x2, 0xfffffffd, 0x3]}, @lsrr={0x83, 0xb, 0x4c, [@multicast2, @multicast2]}]}}}}})
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000a40)={r3, r3}, 0xc)
r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a80), 0x100, 0x0)
sendmsg$can_bcm(r9, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r2}, 0x10, &(0x7f0000000b80)={&(0x7f0000000b00)={0x3, 0x1, 0x0, {0x0, 0x2710}, {}, {0x1, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x0, 0x1}, 0x3a, 0x3, 0x0, 0x0, "ab773b50d0901da905e658b60b976e4a24869b9d61c4167d2685e957b3c73598cce8b8bf3c99ab770c51bee466dcc5ef3632d2a47b319eabc6704a428ff34be3"}}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x4000011)
getsockopt$ARPT_SO_GET_ENTRIES(r9, 0x0, 0x61, &(0x7f0000000c00)={'filter\x00', 0x71, "77a0096f92a3c78a029aefa4010b2b0aada2131833d33ec8704e9805c63feab76b17398359512ca74e8e6560b38d9ca9a72dbe9c721a990a3fc8d4f79089d197e25262cb7d93d580dde378b5e725439042f4c21c5f730300dc02a1ffffda717b21e0ee4733755040db0b8e79e9e3ac50da"}, &(0x7f0000000cc0)=0x95)
r10 = openat$cgroup_ro(r9, &(0x7f0000000d00)='blkio.bfq.io_merged\x00', 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r9)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), r9)
sendmsg$TIPC_NL_NET_SET(r10, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x68, r11, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8}, 0x20008050)

1.108824022s ago: executing program 0 (id=4814):
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="240000001e005f", 0x7)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
r2 = socket(0xa, 0x80002, 0x0)
ioctl$sock_ifreq(r2, 0x891f, &(0x7f0000000000)={'veth0_to_bond\x00', @ifru_names='bridge0\x00'})
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000002180), 0xffffffffffffffff)
sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r3, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x30}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000080)={'gre0\x00', <r4=>0x0, 0x10, 0x8, 0x6, 0x3, {{0x48, 0x4, 0x3, 0x1, 0x120, 0x64, 0x0, 0x6, 0x29, 0x0, @remote, @multicast2, {[@lsrr={0x83, 0x7, 0x4d, [@rand_addr=0x64010100]}, @lsrr={0x83, 0x2b, 0x21, [@empty, @rand_addr=0x64010102, @loopback, @loopback, @empty, @multicast1, @local, @local, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x2e}]}, @timestamp_prespec={0x44, 0x4c, 0xf8, 0x3, 0x6, [{@loopback, 0xa7b}, {@loopback, 0x4}, {@multicast2, 0x1}, {@local, 0x9}, {@local, 0x5}, {@local, 0x7fffffff}, {@broadcast, 0xc80d}, {@multicast1, 0x1e}, {@dev={0xac, 0x14, 0x14, 0x12}, 0xd5}]}, @cipso={0x86, 0x54, 0x2, [{0x5, 0x12, "bfd7efb8fae03edb63509f056f7b2a37"}, {0x5, 0xc, "cf783eca2ed842969b59"}, {0x2, 0x11, "c005cba36f4a0ee0822fa5a0f6114a"}, {0x0, 0xf, "f21780a42fa59f1fafe440c8c4"}, {0x1, 0x6, "b71ee476"}, {0x2, 0xa, "3fe97397dd55b29e"}]}, @cipso={0x86, 0x16, 0x0, [{0x2, 0x10, "d088ca6b2e909789bb45dfd2dfed"}]}, @end, @timestamp_addr={0x44, 0x14, 0xc7, 0x1, 0x6, [{@private=0xa010102, 0x2}, {@broadcast, 0x40}]}, @timestamp_prespec={0x44, 0xc, 0x3b, 0x3, 0x9, [{@multicast1, 0x9950}]}]}}}}})
sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1df06c6d75ecdf81}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r3, 0x6b5322f092da3be0, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2e}}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x1)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
write$binfmt_register(r0, &(0x7f0000000380)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'syz3', 0x3a, 'Q\x0ft\xba\x8a\x14\xbf\xa6_\x9d\xc5\"\xe1\x89\xca\xcc\x9f|fo\x96\x06v\x1b\xe0|X\xdd\xdc\\\x8cDZU%\x92\xc5\xaa\xef\xd4s:\x82\xb7\xe0k(;\xb7\x909\x88\xd1\xe7$[t\x16\xcb\xf5\x99\x1cV\x01\xbb\x1f\xd2G\xd5T\xbb\xec\xaf\xfc~\xcd', 0x3a, './file0', 0x3a, [0x50]}, 0x78)

1.107011717s ago: executing program 2 (id=4815):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x3f}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x8}}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5)
sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000a40)={0x1f0, r6, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa397}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x90000000000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4d}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfcb1}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x100, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x40, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xe4}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x12000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7845}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x12}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_NODE={0x34, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7ff}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x778}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xc}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x20004045}, 0x24008044)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x17)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r7, &(0x7f0000000140), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan1\x00'})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r10=>0x0})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="00012bbd7000fcdbdf251b0000000800010f00000000eb00968d321adeccf80df2d3e15673225710ae953a8fdd596597f9485b4d8f4998f12470681a7570fb15823a531fd704c95a6ac085bcab01c4f5dfa99d73763570295a3f2b9f5210241c3d7a6ccd7a7bc23baa5f9983a90bad3ff876279b8410307d720bfe4e35143beffa4f22d925a20c9b23337cd0ef2541d6526d3a5b1dcd42015ce49f6a21fbb6281768c0cffdec3f0e19bd4995429bd18743a2355ce1433177a068bb000000"], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x40000)
sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r10, @ANYBLOB="04005b000008000040000000b7447e33e45027ffbff7f2f13418ffa5d0641f825fa25b213006"], 0x28}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r12=>r8, {0xffffd421}}, './file0\x00'})
setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f00000003c0)="9908c06ae557e9fc78e616b7216111635b77007b26504cdfed08240316a067b81fe285c0765f44656505a6b3cbcf003654a8ac20b21a05748e2db6e44d4a580021eeb3944860e0382a20e87ce0f8fce3dbe4aa32bd6f05b07641b78ef983fa7ea828fc8a26d1311efbcce6a74b9be3cd501ae9c27cb474afc744ea882994143c8424f1b1ee170d68761ca79e48fdd121250d830d5a6dd6cf9f12487615b4da0a7756e390b7c938a58b36210028c7abafc3", 0xb1)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="0cd5bba25214a63a49a08026f528662f9d3d652fd71ec8c5c9730e02018373b5fd338ed2788b31397078762214ce977890999b1cf0ad01842bf78369f994de48382f88d37cf9", @ANYRES16=r5, @ANYRESDEC=r4, @ANYRESOCT=r5, @ANYBLOB="05f35b8735d3dd1cdcd4"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01008cdc4172d56f", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

1.104636635s ago: executing program 0 (id=4816):
r0 = socket$igmp6(0xa, 0x3, 0x3a)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
connect$ax25(r2, &(0x7f00000001c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xffffffdc}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0xa}, {0xa, 0x0, 0xfffffffd, @private2, 0x6}, 0x0, {[0x6, 0x200, 0x1, 0xfffffefc, 0x4, 0x1, 0x0, 0x200003]}}, 0x5c)
io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000001300)=[{0x3, 0x1, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/121, 0x79}, {&(0x7f00000001c0)=""/11, 0xb}, {&(0x7f0000000300)=""/4096, 0x1000}], &(0x7f0000000240)=[0x7]}], 0x1)

1.000379169s ago: executing program 2 (id=4817):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003"], 0xd8}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$netlink(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
listen(r4, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES16=r2], 0x54}, 0x1, 0x0, 0x0, 0x200004c1}, 0x0)

563.610496ms ago: executing program 0 (id=4822):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000001d78771b90bd8a3b4914783c58777003d5b953800000000030006000000000002000000000000000009000000000000020001000000000000000216ff000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
close(r0)

560.632887ms ago: executing program 1 (id=4824):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000cc0), 0xa0602, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d1400bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000012, 0xffe, 0x0, &(0x7f0000000c40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000000140)="fdae51450d817d7ceb3a00a55774c8c15816dea0ccf64ce77b4f9aa6405dc080b20ce17e24f7f4e8f6d43a1bee7e4889996bf8e0b20c1ca92b58bf39828541b2cca1719e2bf2c9d76e37f419b643876e72ff", 0x52, 0x8001})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1})

542.451114ms ago: executing program 0 (id=4825):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100004000000000000014000000180001801400020073797a5f74756e00000000000000000004000b0001000000"], 0x34}}, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000100)={0x5}, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r3 = socket(0x2, 0x80805, 0x0)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r4, 0x7b3, &(0x7f00000001c0))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e0000000000000003000010070000003d0000ca75ffffff00000000000000002e"], &(0x7f0000000040)=""/240, 0x46, 0xf0, 0x6}, 0x28)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r5], 0xc4}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000001480)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x800, 0x0, 0x4, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
unshare(0x20000400)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000002ac0)=<r8=>0x0, &(0x7f0000002b00)=0x4)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000002d40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002d00)={&(0x7f0000002b40)={0x1c0, r2, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20000004}, 0x10)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000001725c05400e24313c8c6ebb312230b44513a40d49affffff", @ANYRES32=0x0, @ANYBLOB="0000000014000300070000000000000200000000fbff0700"], 0x30}, 0x1, 0x0, 0x0, 0xc4}, 0xd0)
sendmsg$nl_route_sched(r6, &(0x7f0000005c40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtaction={0x2524, 0x30, 0x1, 0x0, 0x0, {}, [{0x2510, 0x1, [@m_bpf={0x40, 0x1, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r6}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x174, 0x0, 0x0, 0x0, {{0xc}, {0x8c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x80000000, 0x9, 0x0, 0xd, 0x7}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x101, 0xff, 0x8, 0x612bd665, 0xc00}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x9, 0xffffffffffffffff, 0x7fffffff, 0xb}}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0xfffffff8, 0x8, 0x6, 0x75fc3c78}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}]}, {0xbf, 0x6, "223178c6156685b01dc71d44dc1eb72cad6a532cc2200268fc1dc2f43b20ec43ec771770d18307e1e9d207100acb5fc3f770fc2a3e38baf909f4a67abca8bdaf816f175d256d890f160fdf49e92b91d1071f41a84bf60c3e1bd6fff9e19c13233d13fa2e73dcee202092371f37773627a3751a22b0b84625e1fa87633c466668a556997bb77dc84b001b70563e9faa4dbcef3b972946f34cceaf0518ef6ebd9ddfae59db099d7817e2f9c05537a84603e895311f84bcda6bdb7fc2"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x214, 0x1c, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x5, 0x8, 0x7, 0x4}, @broadcast, @multicast1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4b1, 0x101, 0x0, 0x401, 0x820a}, @loopback, @rand_addr=0x64010101, 0xffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x1, 0x2, 0x48, 0x10001}, @rand_addr=0x64010101, @multicast2, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x9, 0x5, 0x5a12, 0x3}, @remote, @broadcast, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x800, 0x6, 0x7, 0x3ff}, @private=0xa010102, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x8, 0x3, 0x1, 0x2}, @empty, @empty, 0xffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xcb56, 0x6, 0x0, 0x10000}, @loopback, @multicast1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xc0, 0x20000000, 0x1000, 0x8000}, @multicast2, @rand_addr=0x64010101, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000001, 0x200, 0x4, 0x400, 0x2}, @loopback, @remote}}]}, {0x83, 0x6, "baee019b10821c0f6f80f60c9fc9214774719b5d2eee77934d885ea8e4a0b98c4fe967208aec8b31afafb74aa9cc2030e5ebf9c491a259ed676a0962362fe0e0103ce6a6d602f600060264fd7ab66b19ef298a28218e6bc998e90cf0467a126918c9651b37d033efe7ab4d318baab0245007e7fd99cdabafc34e58a29144a4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_pedit={0x2144, 0x9, 0x0, 0x0, {{0xa}, {0x2040, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x84, 0x5, 0x0, 0x1, [{0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x9a2142fdbbdd47d3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x12c, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x74b5e7916caac4f4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x6ce155ce43b400d0}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}, @TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x3, 0x0, 0x1, 0x7, 0x101}, 0x1, 0x7f, [{0x8, 0x14, 0xaa3, 0x200, 0x6, 0x7}, {0x5, 0x6, 0x8, 0x9, 0x8, 0x7}]}, [{0x5, 0x1, 0x4, 0x2, 0x3, 0xa}, {0x1, 0xcc3, 0x1, 0xe, 0x0, 0x8}, {0x7, 0x8, 0x9, 0x3, 0x8, 0x99e5}, {0x3ff, 0x2, 0x9, 0x9, 0x6, 0xad4}, {0x1ff, 0x0, 0xff, 0x4000, 0xe, 0x5}, {0x0, 0xe7, 0x7, 0x6, 0x0, 0x5}, {0x2, 0x3, 0x9, 0x4, 0xe, 0xfff}, {0x3, 0x81, 0x8, 0x81, 0x8}, {0x1, 0x9, 0x3, 0xf, 0x6, 0x2}, {0x9, 0x4, 0x4, 0x8, 0x5, 0x8}, {0x6, 0xff, 0xfffffffd, 0x401, 0xffff, 0x101}, {0x3, 0x9, 0xb791, 0x8, 0x8, 0x800}, {0x102, 0x4, 0x1, 0x8, 0x5, 0xc}, {0x4, 0xf, 0x7, 0x4, 0x1, 0x3}, {0xe, 0x0, 0x2, 0x2, 0x8000, 0x8}, {0x1, 0x7521, 0x3, 0x8000, 0xfc9, 0xb579}, {0x1333, 0xaf65, 0x7ff, 0xffffffff, 0x5, 0x6}, {0x2, 0xbb16, 0x3, 0x3, 0x6, 0x5}, {0xed, 0x9, 0xd, 0xffff, 0x10, 0x9}, {0x5, 0x1, 0x0, 0x7, 0x6, 0x10}, {0x51a, 0x0, 0x1ff, 0x0, 0x80, 0x1}, {0x80000000, 0x6, 0x1d, 0x6, 0x1, 0x400}, {0x7, 0x5, 0x8, 0x635, 0xd, 0x9}, {0x7, 0x7bcb69cb, 0x3d, 0xf7, 0x0, 0x4}, {0x2, 0x9c, 0x7, 0x80000001, 0x5, 0x400}, {0x9b, 0x5, 0xd, 0x6, 0x6, 0x7fffffff}, {0x8, 0xfff, 0x8, 0x857, 0x5, 0x2}, {0x8, 0x9, 0x9, 0xfffffffd, 0x2, 0x800}, {0x3, 0x9473, 0x9, 0x8001, 0x8, 0x8001}, {0xfffffffb, 0x6f20, 0x9, 0x6, 0x6, 0xa}, {0x11, 0x1, 0x2, 0x4, 0x5, 0x1800000}, {0x27, 0x8, 0x2, 0xfffffffd, 0x8, 0x8}, {0x6, 0x80000000, 0x9, 0x1, 0x2, 0x1}, {0xfffffff4, 0x4, 0x200, 0x9, 0x4, 0xcd8a}, {0x0, 0x9, 0x9, 0x10000, 0x1a, 0x401}, {0xc310, 0x4, 0x0, 0xfffffff5, 0xd6, 0x1}, {0x4, 0x2, 0x9, 0x7, 0x7}, {0x81, 0x80, 0x6, 0x80000001, 0x4}, {0x7, 0x3b8f3391, 0x4, 0xfffffff7, 0xfffffff9, 0x4}, {0x6, 0x0, 0x7, 0xfffff001, 0x0, 0x5}, {0x4, 0xfffffff7, 0x82c, 0x81, 0xff, 0x80000000}, {0x2, 0x3, 0x9, 0x2, 0x2}, {0x10001, 0x2, 0x854, 0x2, 0x0, 0x7f}, {0x1ff, 0xc, 0x7, 0x99e, 0xffff0000, 0x80}, {0x2, 0x1, 0xb, 0xd, 0x5, 0x80}, {0x2, 0x7, 0x400, 0x3, 0x2, 0x6}, {0x1, 0xb, 0x9, 0x8, 0xfff, 0x9}, {0x4, 0x0, 0xb, 0x7, 0x7, 0x401}, {0x7f, 0xffffffff, 0x8, 0xc4, 0x47, 0x8}, {0x5, 0x2, 0xd7a, 0x7, 0x10, 0x240a}, {0x100, 0x3, 0x0, 0x8, 0x2, 0x9}, {0x1000, 0x6, 0x10000, 0x10, 0xfffffff9, 0x8}, {0x4, 0x2, 0x4, 0x10000, 0x2, 0x8}, {0x2d9, 0x6, 0xffff, 0x7fff, 0xffff}, {0x6, 0x81, 0x4, 0x100, 0xbc, 0x5}, {0xb, 0x0, 0x6, 0x6da, 0x9, 0x2}, {0x5, 0x29f6, 0x4, 0x4, 0x6, 0xfffffffb}, {0x7, 0x7, 0x8000, 0x6, 0x9526, 0x1}, {0x1ff, 0x81, 0x5, 0x1ff, 0x4, 0x7}, {0xb29b, 0x2, 0xad6, 0x6, 0xfff, 0x4}, {0x7, 0xf48e, 0x6, 0x80000000, 0xfffffffb, 0x6}, {0x6, 0x75b, 0x17, 0x5, 0x8, 0x3}, {0x7f, 0x663d, 0x3, 0x2, 0xc9, 0x1}, {0x16d4200, 0x7, 0x4, 0x3, 0x8, 0xfffffff7}, {0xc, 0x0, 0x80, 0x0, 0x0, 0x9a9c}, {0x8, 0x40, 0x6, 0x7, 0x2, 0x1}, {0x7, 0x1, 0x4000, 0xe, 0x8, 0x4}, {0x5, 0xfffffff8, 0x1, 0x4bef, 0xfffffff9, 0x6}, {0x6, 0xff, 0xeb, 0x10001, 0xc, 0x5}, {0xc, 0x0, 0x3, 0x1, 0x3, 0xfffffff8}, {0x7, 0x4, 0xec8a, 0x1, 0xffff, 0xac87}, {0xced, 0x2c9, 0xb02, 0x9, 0xfffffffc, 0x7f}, {0xac, 0x200, 0x2, 0x7fff, 0x5165, 0x9}, {0x9, 0x4, 0x7fffffff, 0x6, 0x6, 0xe}, {0xaa4e, 0x0, 0x2, 0x8, 0x3, 0x2f}, {0x57, 0x3, 0x3, 0x4, 0xe, 0x80}, {0x0, 0x9, 0x4, 0x9, 0x2, 0x7}, {0x1fd6, 0x2, 0x1, 0x0, 0xffffff01, 0x8000}, {0x3, 0x8, 0x7, 0x9, 0x2402, 0x3}, {0xdfb7, 0x22, 0x100, 0x6, 0x6, 0xed88}, {0x8, 0x4, 0x9, 0x5417, 0x7e000000, 0xa6}, {0x7, 0x0, 0x8, 0x0, 0x7, 0x1}, {0x6, 0x5, 0x9, 0x2, 0xab, 0x8}, {0x9, 0x6774, 0x9b6a, 0x1, 0x7, 0xfd}, {0x0, 0x7, 0x2, 0x9, 0xb, 0x5e}, {0x7fffffff, 0x3, 0x6, 0x3, 0x3, 0x2}, {0x95d1, 0x3, 0x9, 0x6, 0x8, 0x91f7}, {0x0, 0x0, 0x2, 0x8, 0x45f8, 0x2}, {0x7, 0x5e, 0x5, 0x1, 0x5, 0x5}, {0x4, 0x4, 0x4, 0x7, 0x3858, 0x8}, {0x3, 0x2, 0x4, 0x0, 0x0, 0x3ff}, {0x80000001, 0x8, 0x5, 0x1, 0xb, 0x8000}, {0xf, 0x8, 0x1, 0x1, 0x1ff3940e, 0x40}, {0xe, 0x97, 0x9, 0x9, 0x7, 0x9}, {0x4, 0x2, 0x1, 0xa, 0x8, 0x4}, {0x9, 0x8, 0x9, 0xffffff5f, 0x5afe, 0x6}, {0x9, 0x4, 0x0, 0x7, 0xa, 0xfffffff9}, {0x47c, 0x9, 0x3ff, 0x8, 0x2, 0x9}, {0xc, 0x4, 0xffffffc0, 0x5, 0x3, 0xa832}, {0x88, 0x0, 0xf, 0x1000, 0x7, 0x9}, {0x4, 0x2, 0x6, 0x100, 0x100, 0x5}, {0x2, 0x3, 0x6, 0x2, 0x5772, 0x80000000}, {0x8, 0x3ff, 0x200, 0xfffffffe, 0xf097, 0x8}, {0xc1, 0x4, 0x1, 0x81, 0x80, 0x3}, {0x6, 0x3, 0x9, 0x8, 0x40800000, 0x3}, {0x2, 0xfffffffb, 0x200000, 0x7, 0x0, 0x41c}, {0x7fe8, 0x200, 0x3ff, 0xf55, 0x8000, 0xffffffff}, {0x800, 0x2, 0x1c2fdcfd, 0x7, 0x2, 0x9}, {0x5, 0x2, 0x10000, 0x5, 0x1, 0x9}, {0x5563, 0xd, 0x3ff, 0xfffffffd, 0x80000001, 0x3}, {0x6b8, 0xa4, 0x7, 0x7, 0x4, 0x1}, {0x4, 0x2, 0x3ff, 0x9, 0x6, 0x2bcb}, {0x736, 0x3, 0xe, 0x0, 0xea, 0x101}, {0x8, 0xf636, 0xfab, 0x2, 0x2, 0x100}, {0x4, 0x5, 0x3, 0x7, 0x10, 0x6}, {0xa0c2, 0x3, 0x40, 0xf, 0x40, 0x6d2}, {0x5, 0x5, 0x7, 0x837, 0x2, 0x4da34615}, {0x5, 0x0, 0x1000, 0x4, 0x0, 0x2}, {0x9, 0x5, 0x0, 0x0, 0x0, 0x3}, {0x7, 0x2, 0x5, 0xcf88, 0x7, 0xfffffffb}, {0x5, 0x0, 0x0, 0x7, 0x2, 0x2}, {0x4, 0x5, 0x1, 0xfff, 0xa, 0xffffffff}, {0x6, 0x5, 0x0, 0xffffffff, 0xfff, 0x6}, {0xfffffffe, 0x3183, 0x9, 0xd2, 0x800000, 0x2}, {0xaaa, 0x101, 0x0, 0x5, 0x7, 0xa9}, {0x2, 0x1, 0x9, 0x82, 0xc}, {0x3, 0x7, 0x2, 0x9, 0x5, 0x2}, {0x5, 0x759218e5, 0x8, 0x6, 0xdd2, 0x5}], [{0x4}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x7}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0xd7757d6b55491ccd}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x5}, {}, {0x2}, {0x4}, {0x1, 0x1}, {0x5}, {0x1}, {0x5}, {0x5}, {0x1}, {0x1, 0x1}, {0x4, 0xf64f986e841685c9}, {0x3}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x2}, {0x2, 0x1}, {}, {0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x4}, {0x4}, {0x5}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {}, {0x3}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x1}, {}, {0x0, 0x1}, {0xfa55585ba9e7823a, 0x1}, {}, {0x4}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x7, 0x1}, {}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {}, {0x3}, {0x4}, {0x5}, {}, {0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x3}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x0, 0x1}, {}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0xffffffff, 0x2, 0x4, 0xad, 0x2c}, 0x2, 0x3, [{0x0, 0x57, 0x9, 0x5, 0x1, 0x2}, {0x0, 0xdb7, 0xfffffffa, 0x2, 0xffffffff, 0x6}, {0x7, 0x6, 0xd2, 0x3, 0xffffffff, 0x10000}, {0xa628, 0x0, 0x978, 0x9, 0x4, 0x3}]}, [{0x2, 0x3, 0x7, 0x81, 0x65, 0x2}, {0x19, 0x8001, 0xfffffff5, 0x8000, 0x400000, 0x3b1}, {0x8, 0xf, 0x83, 0x6, 0x96b, 0x17ff}, {0x883, 0xe7, 0x6, 0x5000, 0x12, 0x8000}, {0x4, 0x6, 0x1, 0x7, 0x7, 0x83}, {0x3, 0xfffffff9, 0x8, 0x1, 0x7, 0x100}, {0x2, 0x7ff, 0x58a2, 0x9, 0x8001, 0x3ff}, {0x7fffffff, 0x9, 0x7, 0x101, 0x1000, 0x3}, {0xffff, 0x0, 0x8, 0x7f, 0x0, 0x800}, {0x109a734f, 0x9, 0xc, 0x6, 0x0, 0x6}, {0x9, 0x40, 0x1, 0x80000001, 0x0, 0x8}, {0x9, 0x8001, 0x0, 0x1000, 0xfffffbeb, 0x53a54e51}, {0x8, 0x6, 0x92ed, 0x8, 0xf6b, 0x9}, {0xffffffff, 0x2, 0x2f, 0x165, 0x9, 0xffffffc0}, {0x1, 0x101, 0x4, 0x462a0aea, 0x7fff, 0x71a}, {0x4, 0x0, 0x8, 0x3, 0x6, 0x4}, {0x26, 0x10001, 0x9, 0x3, 0x200, 0xa000000}, {0x7, 0x2, 0xe, 0x9, 0x7, 0x4}, {0x5, 0x80000001, 0xb, 0x200040, 0x200, 0x1}, {0xfffffff9, 0x7, 0x80000001, 0x401, 0x4, 0x7fff}, {0x5bad, 0x6, 0x100, 0x9, 0x4, 0x80}, {0x80000000, 0x7fffffff, 0x2, 0x2, 0x5f4, 0x45e3}, {0xce43, 0x4, 0x8a, 0xa4bae03e, 0x8, 0x9}, {0x0, 0x60b, 0x2, 0x3, 0x583, 0x4}, {0x7, 0x1, 0x2958, 0x400, 0x9c56, 0x1}, {0x2, 0xc, 0x0, 0x23, 0x9, 0x80}, {0xfffffffe, 0x6, 0x7680, 0x9, 0x5, 0x9}, {0xc0, 0x527, 0x1, 0x4, 0x6, 0xd}, {0x2, 0x204, 0x400, 0x15f7, 0x0, 0x10}, {0x0, 0xfff, 0x4, 0xe40d, 0x35d6, 0x3}, {0x9, 0xfffffffc, 0x8001, 0xfffffff8, 0x8}, {0x59ed, 0x3, 0x9, 0x800, 0x7, 0x200}, {0x25ad, 0x1, 0x7fff, 0x200, 0x1, 0x6}, {0x5, 0xfffeffff, 0x39ca, 0x7, 0x1, 0x100}, {0x5, 0x8001, 0x3, 0x1, 0x9}, {0x10000, 0x7, 0x0, 0xfffffff2, 0xfffffffe, 0x1ff}, {0x2e14, 0x9, 0x36bd798b, 0x6, 0x5}, {0x0, 0x9, 0x81, 0x1000, 0x9, 0x3}, {0x8, 0x2, 0x7, 0x2, 0x80000001, 0x1ff}, {0x8000, 0x10003, 0x6, 0x3, 0xa, 0x2}, {0xace, 0x9, 0xee, 0xf20, 0x9, 0x80000001}, {0xf5c, 0x4, 0x8, 0xd, 0xffff7d76, 0x4}, {0x30d8, 0x9, 0x7, 0xb35, 0x0, 0x6}, {0x8, 0xe217, 0x6, 0x100, 0x6, 0x6}, {0xfffc0000, 0x10000, 0x3, 0x6, 0x7, 0x9}, {0x48, 0x1, 0xfb, 0x4, 0x4, 0x4}, {0x7, 0x4, 0x80, 0x13, 0x9}, {0x1, 0x6, 0x7c, 0x0, 0x1, 0x8}, {0x5, 0x6, 0x3, 0x0, 0x0, 0x8}, {0x81, 0xcfc, 0x6, 0x7, 0x40, 0x5}, {0x6, 0x7, 0x709, 0xbf, 0x9, 0x101}, {0x3, 0x68, 0x800, 0x7f, 0x0, 0x8}, {0x88, 0x300, 0xffff8001, 0x0, 0x7f, 0x10001}, {0xbe, 0x1, 0x9, 0x9, 0x80000001, 0x5}, {0x8, 0x3, 0x6, 0x4, 0x2, 0x9}, {0x1, 0x81, 0x3, 0x9, 0x0, 0x40}, {0x3, 0x6, 0x1, 0x6, 0x795, 0x1}, {0x3, 0x3, 0xfe, 0xb1, 0x3, 0x3275a68b}, {0x3, 0x0, 0x6, 0x6, 0x1, 0xe71a}, {0x400, 0x8, 0x9bbf, 0x3, 0xb7, 0xc}, {0x78, 0x0, 0xb, 0x2, 0x9, 0x8000}, {0x6ba, 0x400, 0xa, 0xffffff00, 0x3}, {0x6, 0x680000, 0x8, 0xfffffffd, 0x80000001, 0xffffffff}, {0xe, 0x10000, 0x1, 0x0, 0xd9a, 0xfffffffb}, {0x8, 0x0, 0x3, 0x8, 0x5, 0x80}, {0x9, 0x44, 0x9, 0x6, 0x4, 0x2}, {0x4, 0x1, 0x4, 0x59, 0x81, 0x5}, {0x7, 0x6, 0x2, 0x401, 0x7, 0x8}, {0x0, 0x5, 0x3, 0x40, 0x1, 0xfffffffe}, {0x1, 0x8, 0x6, 0x6, 0xb47e, 0x7fffffff}, {0x87cf5c6, 0x4, 0x6, 0x4, 0x7, 0xe78}, {0x0, 0x1, 0xfffffffb, 0x0, 0x7, 0x7}, {0x9, 0x1, 0x0, 0x3, 0x18}, {0xb42c, 0xbb, 0x10001, 0x200, 0xf, 0x1}, {0x6, 0x79829113, 0x6, 0x4, 0x4, 0x5}, {0x0, 0x4, 0x29e, 0x400, 0xb, 0x2}, {0x80000001, 0x7ff, 0x44, 0x3337, 0x4}, {0x8000, 0x81, 0x3, 0x1, 0xd08c, 0x8}, {0xffffd9b0, 0x9, 0x200, 0x3, 0xba25, 0xfe}, {0x7, 0x2, 0xf, 0x80000000, 0xaf, 0x69e0}, {0x7, 0x80000001, 0xfff, 0x81, 0x4, 0x6}, {0xfffffe01, 0x6, 0xd, 0x8, 0x400, 0xaf0}, {0x7fff, 0x8, 0x1, 0x3e6, 0xd, 0x400}, {0x8, 0x2fc, 0x5, 0x101, 0x1, 0x1}, {0x7, 0x1, 0x6b, 0x4, 0x2, 0x8d3}, {0x0, 0x1, 0x800, 0x1, 0xaf1b}, {0xff, 0x2, 0x6, 0x4, 0x1, 0xe}, {0x100, 0x5, 0x36, 0x2, 0x4, 0x4}, {0x1, 0x4, 0x8, 0xff, 0x6, 0x9}, {0x400, 0x3, 0x2, 0x6, 0x4, 0x80000001}, {0xfffffffa, 0x9, 0x4, 0x6, 0x2, 0x5}, {0x0, 0xfffffffc, 0xffff45ca, 0x3, 0x0, 0x8}, {0x80000000, 0x2, 0x6, 0x2c6c, 0x80, 0x100}, {0x9, 0x3, 0x8, 0xfff, 0x9, 0x7}, {0x4, 0x40, 0xffff, 0x6b3, 0x6, 0x6}, {0x3, 0x3, 0x6, 0x6, 0x9, 0x8001}, {0x7fff, 0xfff, 0x0, 0x4, 0x7}, {0xffff, 0x9, 0x2, 0x4, 0x80, 0xb04c}, {0xd34, 0x4, 0xff, 0x11, 0x6}, {0x7, 0x4, 0x3ff, 0x9, 0x3, 0x7fff}, {0x3, 0x3, 0xa, 0x9c, 0x1, 0x10}, {0xfffffffc, 0xd, 0x4, 0x5, 0x0, 0x5}, {0x2, 0x4, 0x0, 0xb9ac, 0x7, 0x6}, {0x3d4b4446, 0x5e, 0x101, 0x3, 0x7, 0x9}, {0x9, 0x337e318b, 0x401, 0xff, 0x7, 0xac}, {0x8, 0x6, 0x1, 0x19e, 0x10001, 0x8}, {0x6, 0x9, 0x4, 0x0, 0x7fffffff, 0x8}, {0xb, 0x4, 0x8, 0x2, 0x0, 0x7ff}, {0x1, 0x10000, 0x32f85b5b, 0x9, 0x5, 0x3}, {0x9, 0x3, 0x4, 0x0, 0xfffff71a, 0xfffffffb}, {0x3, 0x1000, 0x7f, 0xe, 0x2, 0x2}, {0x8, 0xffffffff, 0x8, 0x10, 0x10000, 0x5}, {0x3, 0x3, 0x9, 0x6, 0x4}, {0x4e, 0x3, 0x0, 0x7, 0x6, 0x9}, {0xf2, 0x4, 0x7ff, 0x0, 0x8, 0x8}, {0x4, 0x2, 0x8000, 0x400, 0x1ff, 0x3}, {0x4f40, 0xd, 0x0, 0xcce, 0x3, 0x6}, {0xe, 0x5, 0x1, 0x5, 0x3, 0xf0600}, {0x1, 0x3, 0x5, 0x7ff, 0x6, 0x70}, {0x0, 0x7ff, 0x1986, 0x7, 0xffffffff, 0x8001}, {0x6, 0x1ff, 0x1ff, 0xb, 0x6, 0x100}, {0x0, 0x2, 0x7, 0xfffffffd, 0x9, 0x9b}, {0x5, 0x1, 0x400, 0x13, 0x4, 0x5}, {0x1000, 0x7ff, 0x2, 0x5, 0x7, 0xffffff3d}, {0x401, 0x10000, 0x53, 0x1, 0xfffffff7, 0x9}, {0x8, 0x212d, 0xdf4, 0xc, 0x7, 0x401}, {0x9, 0x8, 0xdcec, 0x6, 0x5e9a, 0x2}, {0x80, 0x5, 0x1000, 0x8001, 0x2}], [{0x4}, {0x3}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5}, {0x5}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x51c20cd6799d68e3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x2}, {0x1, 0x7971ddb61e84311e}, {0x0, 0x1}, {0x4}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x2}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x3}, {0x2}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x2}, {}, {0x4}, {0x3}, {0x2}, {0x4, 0x1}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x0, 0x3}, {0x5, 0x1}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x1bc, 0x5, 0x0, 0x1, [{0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0xfffffffffffffe49}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0xf9c754f2c63822b6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}]}, {0xdc, 0x6, "23eac0343dc6198d684ad66b4d0ae4a651bbe5aeee85697f54ffe4b40242756f700ecb565ef0a22304be827dd1b3ba0062799a38301af4e7bba048bcf073cba53569d465e7e5865f4eaa08ce3cf5877a66052e9a76379d53564e76b9c1e27b4598c386dd3e0989ee95ecc5d4709c090abe1688f66d0ecf4c958f9bf80540a4878772b22ff9d28635e3c8af82bcaac807d2297bde0216a47242c0e0feb75720303dc06bddb44f31c9823cbb5d4f27075528685cfc11d8cfeca856b5e6121bbbc7efa2749a62bea95538fd44a63047952986dba48f1df330a4"}, {0xc}, {0xc}}}]}]}, 0x2524}}, 0x4c8d0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

448.200328ms ago: executing program 1 (id=4826):
write$sequencer(0xffffffffffffffff, &(0x7f0000000cc0)=[@t={0x81, 0x1, 0xf4, 0x6}, @x={0x94, 0x7, "a73818bd7bb4"}, @raw={0xc, 0x3, "d48d058a1471"}], 0x18)

447.571862ms ago: executing program 0 (id=4827):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f00000004c0)='GPL\x00'}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x2, 0x0, 0x4}}], 0x20, 0x4855}, 0x24000052)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {}, {0xff}}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x0, {0x8}}}, @common=@inet=@socket3={{0x28}, 0x6}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x3f, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0xfc}, @typed={0x8, 0x3, 0x0, 0x0, @u32=0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r5 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r5, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4)
write$tun(r2, &(0x7f0000000f00)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x38, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @time_exceed={0x3, 0x0, 0x0, 0x8, '\x00', {0x0, 0x6, "aabc2b", 0x2, 0x84, 0x1, @local, @private2}}}}}}, 0x6e)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000140)=<r6=>0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="180000001500010029bd7000fedbdf252d"], 0x18}}, 0x20000000)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000e00)={{r1}, r6, 0x4, @unused=[0x0, 0x1, 0x5, 0x2], @subvolid=0x2})
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x18, 0x67, 0xc949fdde9d1b2fb2, @dev, @local, {[@fragment={0x21, 0x0, 0x0, 0x0, 0x0, 0x2, 0x68}, @dstopts={0x0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9}]}]}}}}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xfffffff7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x125a2cee1ea71911}, 0x0)

445.762461ms ago: executing program 1 (id=4828):
sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x208, 0x70bd2b, 0x25dfdbff, {0x1, 0x1, 0x1, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20004086) (async, rerun: 64)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000100)=0x18, 0x4)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000180)={0x0, @reserved}) (async, rerun: 64)
clock_gettime(0x0, &(0x7f0000000240)={<r2=>0x0, <r3=>0x0}) (rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r4=>r0, {0x2f8c}}, './file0\x00'})
ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000002c0)=@fd={0x663, 0xa, 0x4, 0x10, 0xfffffffa, {r2, r3/1000+10000}, {0x0, 0xc, 0x4, 0x9, 0xff, 0x0, "7759f778"}, 0x4, 0x4, {<r5=>0xffffffffffffffff}, 0x0, 0x0, r4})
r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x180400, <r7=>0x0, <r8=>0xffffffffffffffff}) (rerun: 32)
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r6, 0xc00464c9, &(0x7f0000000400)={r7})
pselect6(0x40, &(0x7f0000000440)={0x6350, 0x8000000000000000, 0x0, 0x2, 0x1, 0x7a7, 0x3, 0x5}, &(0x7f0000000480)={0x9, 0xff, 0x6, 0x3, 0x4, 0x7, 0x3, 0x8}, &(0x7f00000004c0)={0xfffffffffffff579, 0x7, 0x2, 0x9b0, 0x723ca7be, 0x2, 0x10000, 0x5}, &(0x7f0000000500), &(0x7f0000000580)={&(0x7f0000000540)={[0xa]}, 0x8}) (async)
getsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, &(0x7f00000005c0), &(0x7f0000000600)=0x4) (async)
sendfile(0xffffffffffffffff, r5, &(0x7f0000000640)=0x4, 0x8000)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), r8) (async)
getsockopt$inet_mreqn(r8, 0x0, 0x24, &(0x7f0000000700)={@broadcast, @initdev, <r10=>0x0}, &(0x7f0000000740)=0xc)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x8c, r9, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x37}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000850) (async)
syz_80211_inject_frame(&(0x7f00000008c0)=@broadcast, &(0x7f0000000900)=@data_frame={@a_msdu=@type11={{0x0, 0x2, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x8}, @broadcast, @device_a, @random="584f963a3a1a", {0xa, 0x663}, @broadcast}, @random="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"}, 0x7a0) (async)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000001140)={&(0x7f00000010c0)=[0x0, <r11=>0x0], &(0x7f0000001100)=[0x0], 0x2, 0x0, 0xbbbbbbbb}) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000001280)={&(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000011c0)=[0x0, 0x0], &(0x7f0000001200)=[<r12=>0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x2, 0x5, 0x5}) (rerun: 32)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f00000012c0)={0xc, r11, r12})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000001300)={0x0, 0x0, <r13=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r13, 0xc00c642e, &(0x7f0000001340)={0x0, 0x0, r4}) (async)
write$rfkill(r8, &(0x7f0000001380)={0x9, 0x5, 0x3, 0x0, 0x1}, 0x8)
ioctl$TIOCCONS(r4, 0x541d)
socket$inet(0x2, 0x80000, 0x8) (async)
r14 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000013c0), 0x200300, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r14, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000891}, 0x20000810) (async)
r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001580), r14)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000001940)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001900)={&(0x7f0000001740)={0x1a4, r15, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000)

259.55022ms ago: executing program 1 (id=4829):
r0 = socket$igmp6(0xa, 0x3, 0x3a)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
connect$ax25(r2, &(0x7f00000001c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xffffffdc}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0xa}, {0xa, 0x0, 0xfffffffd, @private2, 0x6}, 0x0, {[0x6, 0x200, 0x1, 0xfffffefc, 0x4, 0x1, 0x0, 0x200003]}}, 0x5c)
io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000001300)=[{0x3, 0x1, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/121, 0x79}, {&(0x7f00000001c0)=""/11, 0xb}, {&(0x7f0000000300)=""/4096, 0x1000}], &(0x7f0000000240)=[0x7]}], 0x1)

258.904812ms ago: executing program 0 (id=4830):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtaction={0xcc0, 0x30, 0x1, 0x1, 0x0, {0x7a}, [{0xcac, 0x1, [@m_police={0xca8, 0x21, 0x0, 0x0, {{0xb}, {0xc7c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0xf0}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x2, 0x100, 0x6, 0x6, 0x80, 0x3, 0x0, 0x3, 0x500000, 0x3, 0x76, 0x8, 0x8, 0xa38, 0x1, 0x3, 0x2, 0x0, 0x5, 0x9, 0x7, 0xc, 0xd1, 0x3, 0xff, 0x7, 0x3, 0x6, 0x67, 0x8, 0xe0, 0x1, 0x2, 0x9, 0x7, 0x5, 0x1000, 0x80000000, 0x9, 0x11, 0xfffffff5, 0x0, 0x603, 0x100, 0x2, 0x40, 0xc0000000, 0x8, 0x2, 0xa6, 0x2, 0x9, 0x101, 0x7, 0x3ae, 0x6, 0x1, 0x64, 0x80000001, 0x5c0, 0x7fffffff, 0x7fffffff, 0x4, 0x40, 0xfffffffc, 0x3, 0x400, 0x5, 0x3, 0x3, 0xfffffff9, 0x8, 0xe, 0xced, 0x0, 0x7, 0x7, 0x6, 0x3, 0x7, 0x10000, 0x81, 0x8, 0x0, 0x4, 0x9, 0x2, 0x4, 0x6, 0x9, 0x6, 0xfff, 0xffff2e53, 0x185, 0x4, 0xbab, 0x8, 0xfff, 0x5, 0x1, 0xff, 0x5, 0x2, 0x3, 0x1, 0x6, 0x2, 0xfff, 0xd, 0x0, 0x100, 0x6, 0xce0, 0x7, 0xb, 0xf223, 0x0, 0x0, 0x505, 0x8, 0x1000, 0x1, 0x8, 0x5, 0x1ff, 0xd5, 0x2, 0x0, 0x8, 0x101, 0x6, 0x275e, 0x0, 0x3ff, 0x8000, 0x5, 0x0, 0x2, 0x0, 0xffffffff, 0x9, 0x6, 0x8, 0x5, 0x3, 0x2, 0x9940, 0x101, 0xbd4, 0x1d, 0x0, 0x4, 0xfffffff7, 0x7, 0xeff8, 0x9, 0x3, 0x400, 0x1, 0xffff, 0x1, 0x5, 0x8, 0x3, 0x5, 0x0, 0x0, 0x5, 0x100, 0x8, 0x4, 0x9, 0x4, 0x3, 0x402, 0x7f, 0x5, 0x4, 0x3, 0x9, 0x6, 0x6, 0xa, 0x1, 0x7, 0xf1, 0xb6, 0x8, 0x5, 0x7, 0x6, 0x3, 0x0, 0xf9ec, 0x8, 0x322, 0x9, 0x1, 0x607, 0x10, 0x6, 0xd, 0xfff, 0x6, 0xffffffff, 0x8, 0x1, 0x1, 0x40, 0xa5c, 0x0, 0x3f0, 0xc, 0x6, 0x5, 0x35, 0x0, 0x8, 0x6, 0x401, 0x1, 0x4, 0x8000, 0x3ff, 0x6c, 0x8, 0x6, 0x8, 0xfff2, 0x1, 0x1, 0x1ff, 0x2, 0x1, 0xe0000000, 0x3ff, 0x3, 0x6, 0x4, 0xfff, 0x5, 0xfffffffa, 0x5, 0x2, 0x0, 0x7, 0x2, 0x3, 0x9, 0x7, 0x8, 0x3, 0x35b48bd0, 0x2, 0xc]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0x0, 0x5, 0x5f, 0x0, 0x3, 0x4, 0x218, 0x3, 0x1, 0x8001, 0xf27d, 0x6248, 0x9, 0x616, 0xf, 0x100, 0x1, 0xf, 0x77cc8c13, 0x1ff, 0x4, 0x1, 0xe, 0x5, 0x4, 0x2, 0x6, 0x9, 0x7, 0xfff, 0xc, 0x7fffffff, 0x9, 0x6, 0x0, 0xc, 0x8, 0x6, 0x6, 0x7, 0x7, 0x1, 0x4, 0x65a1769, 0xa69, 0xa5d, 0x80, 0xff, 0x101, 0x1, 0x81, 0x2, 0x39cd, 0x10001, 0xffffffff, 0xfffff421, 0x6, 0x6, 0x8, 0xff, 0x7, 0x8, 0x800, 0x6, 0x401, 0x10001, 0x367, 0x0, 0x9, 0x1224, 0x81, 0x3, 0x5, 0x8, 0x6000, 0x7, 0x2, 0x3ff, 0x10000, 0x400, 0x7, 0x8, 0x968, 0x80004000, 0x4, 0x8, 0x8, 0x4, 0x1, 0x1, 0x10001, 0x100, 0x101e, 0x6, 0x0, 0x8, 0x4822, 0x5, 0x2, 0xedff, 0x9, 0x9, 0xfff, 0x7, 0x7, 0xfffffffa, 0x400, 0x8, 0x7fff, 0x5, 0x6, 0x2, 0x8, 0x480, 0x673, 0x8d8, 0x81, 0xfa35, 0x8, 0x2, 0xd36, 0x2, 0x4, 0x3, 0x0, 0x9, 0x4, 0x6, 0x8, 0x2, 0x8000, 0x8, 0x2, 0x1, 0x1200000, 0x0, 0x9d1b, 0x2, 0x4, 0x0, 0x1, 0x6, 0x0, 0x4, 0x7, 0x2, 0x1, 0xf2, 0x44b, 0x5, 0x9, 0x4, 0x9, 0x5, 0x3, 0x6, 0xb091, 0x7, 0x1, 0x1d, 0x4, 0xfffffff7, 0x4, 0x7fff, 0x1, 0x8, 0x6, 0x400, 0x0, 0x4, 0x7, 0x4, 0x1, 0x9, 0x4, 0x9, 0x6, 0xf5, 0x1, 0x7, 0x9, 0x2, 0x3, 0x2, 0x5, 0x6, 0x8, 0x8001, 0x2, 0x4, 0x5, 0x9c, 0x2, 0x0, 0x9, 0x5, 0x2, 0x6, 0x3, 0x3, 0x4, 0x8, 0xfffff305, 0x6, 0x5, 0xd, 0x1ff, 0x0, 0x7f, 0x7, 0x6, 0x9, 0x8000, 0xfffffffd, 0x40, 0x0, 0x7, 0x401, 0x2, 0x4, 0x2, 0xfffff000, 0x7fffffff, 0x9, 0x101, 0x7, 0x6, 0xff, 0x0, 0x4, 0xf82, 0xe, 0x8, 0x800, 0xfffffffe, 0x6, 0x9, 0x5, 0x3, 0x7, 0x8, 0x2, 0x2, 0xda35, 0x7, 0xc, 0x0, 0xbaa, 0xffffffff, 0x100, 0x7fffffff, 0x6, 0x0, 0xc1f, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8000, 0x5, 0x1ff, 0xff, 0x1, 0x2, 0xfffffff7, 0x9, 0x6, 0x4, 0x3, 0x4, 0x100, 0x100, 0x7, 0xf, 0x8, 0xffff8001, 0x3000000, 0x9, 0x8, 0x9f7, 0x6, 0x8, 0x0, 0x400, 0x1, 0x4, 0x2, 0xabf, 0x7, 0x8, 0x0, 0x6, 0x4, 0x8, 0x40, 0x4, 0x5, 0x3, 0x9, 0xe3, 0x1, 0x40, 0x80000001, 0x6, 0xfffffffb, 0x5, 0x5, 0x3, 0x9, 0x1, 0x1, 0x4, 0x1, 0x4, 0xfffffffb, 0x0, 0x8001, 0x0, 0x603, 0xa, 0x8, 0x4, 0x4, 0x4, 0xe118, 0x4, 0x1000, 0x7, 0x73, 0xb0, 0x1ff, 0x6, 0x1, 0xd2, 0x5, 0x8, 0x10, 0x0, 0x4, 0x6, 0x9, 0x7, 0x7fffffff, 0x24d0, 0x8, 0xa000000, 0x8, 0x8e, 0x7fffffff, 0xb63f, 0xad, 0x7, 0xa, 0x1000, 0x566, 0xe60, 0x2, 0x80000000, 0x2, 0x8000, 0xe2, 0x4, 0x10000, 0x8, 0x2, 0x6, 0x1, 0x9, 0x8, 0x1000, 0x2, 0x1, 0x7fffffff, 0x8, 0x0, 0x4, 0x1, 0x1, 0x10001, 0x9, 0x0, 0x3, 0x9, 0xffff77a6, 0x3, 0x6, 0x8, 0xc74, 0x3, 0x9d240353, 0x9, 0x5, 0x10000, 0x2, 0x2, 0x9, 0x4, 0x1, 0x0, 0x2, 0x0, 0x2e30, 0x7, 0x9c, 0x3, 0x5, 0x9, 0x4b0000, 0xad6, 0x0, 0x2, 0x1, 0x6, 0x1, 0xc3, 0x2, 0xfffffff8, 0x7f0, 0x8d, 0x2c400, 0x7fffffff, 0x6, 0x8, 0xe, 0x10, 0x64, 0x4ed, 0x9, 0x7, 0x4, 0x960, 0x1000, 0x7, 0x3, 0x3, 0x7, 0x9, 0x9, 0xd, 0x0, 0x4, 0x4, 0x2, 0x3f8, 0x6c, 0x82c1, 0x0, 0x10000, 0xfffffffe, 0x1, 0x3, 0x3, 0x6, 0xffffff7f, 0x8, 0x2, 0x1, 0x0, 0x9, 0x6, 0x10001, 0xe3ee, 0x7fffffff, 0x2822, 0x9, 0x81, 0x9, 0x7fffffff, 0xc899, 0x78f7a0e9, 0x7, 0x6, 0x7, 0x1, 0x1, 0x2, 0x2, 0x80000000, 0x1, 0x9, 0x9, 0x8964, 0xd, 0xe62, 0xffff, 0x79, 0x5, 0x5, 0x2, 0x6, 0x3ff, 0x80, 0x1, 0xffffffff, 0x80, 0x400, 0x5, 0x109d, 0x9, 0x1, 0x0, 0x3, 0x61, 0x0, 0x841e, 0x4de0, 0xe66, 0x8001, 0x10, 0x6, 0x57, 0x10001, 0xc060, 0x7fff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xcb73, 0xffffffffffffffff, 0x3, 0x1, 0x7, {0x3, 0x0, 0xe5, 0x762a, 0x4000, 0x3}, {0x8, 0x0, 0x40, 0x5, 0x4, 0x3}, 0x401, 0xca8, 0xff}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000000}]]}, {0x4}, {0xc, 0xb, {0x1, 0x1}}, {0xc, 0xa, {0x0, 0x3}}}}]}]}, 0xcc0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xbedf, 0xc, 0x0, 0xffff}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)=0x7fffffff, 0x4)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

163.642359ms ago: executing program 2 (id=4831):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, <r0=>0xffffffffffffffff}, 0x4)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(0x3)
sendmsg$inet(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x4, 0x0, r0, 0x1, '\x00', r1, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x40b, '\x00', r1, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0)
write$tun(r4, &(0x7f0000000240)={@void, @void, @ipv4=@udp={{0x12, 0x4, 0x2, 0x2, 0xcd, 0x68, 0x0, 0x6, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @multicast2, {[@cipso={0x86, 0xc, 0x2, [{0x1, 0x6, "0bbcb092"}]}, @lsrr={0x83, 0xb, 0x8, [@rand_addr=0x64010100, @multicast2]}, @noop, @generic={0x7, 0xa, "4e6c2c37005deb8e"}, @cipso={0x86, 0x10, 0x1, [{0x5, 0xa, "90351844f6fd2f49"}]}, @noop]}}, {0x4e21, 0x4e23, 0x85, 0x0, @opaque="d65fadca34637f8c125171d31212c2dfeaa435a39cbcec38e00ef392d4684837fc415bd17b7c1d099086d7c7189d05bbe9ed0361780879609943cf7cb908d00053a272721df11ff080941e3a4160ce1912a923ec0d0df04426167b166b26f285dc10765ae4962b5d65b64486374c4e0bf7ae74506242a2408ba4246f44"}}}, 0xcd)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000340)={<r5=>r3, 0x1, 0xffff, 0x3})
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x28004001}, 0x4000000)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="135edbb8", @ANYRES16=r6, @ANYBLOB="10002abd7000fedbdf25170000001400078008000200b62900000800010007000000"], 0x28}, 0x1, 0x0, 0x0, 0x8015}, 0x6085)
ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f0000000640)={'wlan1\x00', 0x4})
getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r5)
getsockopt$netrom_NETROM_T2(r5, 0x103, 0x2, &(0x7f0000000900)=0x7, &(0x7f0000000940)=0x4)
sendmsg$can_raw(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=@canfd={{0x4, 0x0, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "a263fdc39b280b67056098e5a654f85e04a2674b8751e8737cc184502a6c78a2d28b8218435e4d3062b0508da15ac410d334223df17eba2db68cd008652d0993"}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r5)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x1d8}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='\a'], 0x10)
sendmmsg$inet6(r8, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810)

80.678181ms ago: executing program 2 (id=4832):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101})
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = socket(0xa, 0x3, 0x3a)
getsockopt$MRT6(r2, 0x29, 0xd0, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0xc, 0x80000000, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010102}, 0x10)
socket$unix(0x1, 0x1, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000340)='syz0\x00')
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32, @ANYRESDEC=r3], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000a00)=""/4096}, 0x20)
getsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f0000000040)={@private1}, &(0x7f0000000100)=0x14)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={<r5=>0x0, 0x4, 0x1000, 0x101}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000000c0)={r5, 0x800}, 0x8)
socket$nl_sock_diag(0x10, 0x3, 0x4)

525.077µs ago: executing program 2 (id=4833):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb)
setsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f00000000c0)=0x9, 0x4)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb01001800000000000000640000006400000002000000060000000000000200000000000000000000000300cd30bf367ded397400000003000000040000000900000008000000010000930f0000000700000008000000070000000000000000100200000002000000020000060400000001000000018000000b000000aa04000000002f5611674ed039d091dd7255430577c92ea00d0678cf554a2c9224b4175fd15eee4e983bedb85676113c754188ac08918ee604ccacef5a9183c3ff233c940cb135ee5e2410dc06bcebe20b125797f6a395afccb272e0e1b6090000"], &(0x7f0000000440)=""/89, 0x7e, 0x59, 0x1, 0x3}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000200000000000000000000031dde8e7810cd1a0f6"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
r3 = socket$inet(0x2, 0x2, 0xfffffffc)
bind$inet(r3, &(0x7f00000004c0)={0x2, 0x4e21, @multicast2}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000d3041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r6, 0x0, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000180)={0x0, 0x4, 0x1, "df"}, 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000380)={0x0, 0x6}, 0x8)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10)
write(r7, &(0x7f0000000000)="240000001a005f0214f9f407000904001f0000000000000a000000000800040001000000", 0x24)
r8 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r9=>0x0})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000500)={0x4, 0x2, 0x4, 0x1}, 0x8)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r5)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r10, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r11, @ANYBLOB="00012cbd7000fddbdf250a0000001400068008000700", @ANYRES32=r9, @ANYBLOB="0800060001000000080002000300000005000500a400000040000680060001000a00000008000600040000000800038c3c02ba61640dc800bb00000014000400fc0100000000000000000000000000010800030000000000080004007c3900000800020001000000080004e00200000005000500fa000000040006807b00b99b4dc1d19a182ed4803c07d0202b0de937c8235104fa75b79036ac3287faa79a950a2bb2b0c7c6cfe8ff45ae117ae82821de3b7d09fcd9c9dc7816ae8d3b84e23bf3951e6c0dcebbcb84ca7b23a5a95b8b8ce42b73f7d6dfa0c2c1ec0d44b82249752eff672962aef22f8d89e00b5a9577b5b54dcf709a13153e"], 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x200188c1)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r9, {0xfff3, 0xe}, {0xf000, 0xfff1}, {0xfff3, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008849}, 0x10000000)

279.987µs ago: executing program 1 (id=4834):
write$sequencer(0xffffffffffffffff, &(0x7f0000000cc0)=[@t={0x81, 0x1, 0xf4, 0x6}, @x={0x94, 0x7, "a73818bd7bb4"}, @raw={0xc, 0x3, "d48d058a1471"}], 0x18)

0s ago: executing program 1 (id=4835):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0xa0802, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0, 0x58}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xfff3}, {0x10, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', <r4=>0x0})
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0xb, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x7ffffffd}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1400881c)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1})

kernel console output (not intermixed with test programs):

d allmulticast mode
[  252.799745][T14968] 0: reclassify loop, rule prio 0, protocol 800
[  253.267144][T15000] netlink: 'syz.2.2817': attribute type 1 has an invalid length.
[  253.499669][T15005] syz.0.2818 uses old SIOCAX25GETINFO
[  253.502212][T15005] netlink: 'syz.0.2818': attribute type 5 has an invalid length.
[  253.512979][T15005] netlink: 'syz.0.2818': attribute type 1 has an invalid length.
[  253.518007][T15005] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  253.569385][T15021] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  253.633325][T15017] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20002
[  253.709578][T15036] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  253.909967][T15060] ip6_vti0 speed is unknown, defaulting to 1000
[  254.363871][T15084] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  254.620931][T15090] IPVS: set_ctl: invalid protocol: 20551 0.0.0.0:0
[  254.623306][T15090] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  254.681885][T15092] xt_hashlimit: max too large, truncated to 1048576
[  254.715245][T15092] xt_hashlimit: max too large, truncated to 1048576
[  254.818729][T15099] ip6_vti0 speed is unknown, defaulting to 1000
[  254.999121][T15101] ip6_vti0 speed is unknown, defaulting to 1000
[  255.111862][T15110] __nla_validate_parse: 17 callbacks suppressed
[  255.111877][T15110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2849'.
[  255.226615][T15107] ip6_vti0 speed is unknown, defaulting to 1000
[  255.645903][T15117] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2851'.
[  255.651622][T15117] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  255.687755][T15117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2851'.
[  255.959977][T15136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2858'.
[  255.963821][T15136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2858'.
[  256.081956][T15148] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2858'.
[  256.089356][T15148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2858'.
[  256.093213][T15148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2858'.
[  256.097314][T15148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2858'.
[  256.111711][T15148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2858'.
[  256.166313][T15151] dvmrp12: entered allmulticast mode
[  256.183596][T15150] dvmrp12: left allmulticast mode
[  256.239659][T15143] netlink: 'syz.0.2859': attribute type 83 has an invalid length.
[  256.412412][T15162] binder: 15161:15162 ioctl c0306201 2000000002c0 returned -14
[  256.506098][T15166] pim6reg: entered allmulticast mode
[  256.602626][T15175] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20002
[  256.816629][T15180] netlink: 'syz.2.2871': attribute type 16 has an invalid length.
[  256.819582][T15180] netlink: 'syz.2.2871': attribute type 3 has an invalid length.
[  256.930696][T15187] dvmrp12: entered allmulticast mode
[  256.949006][T15186] dvmrp12: left allmulticast mode
[  256.979827][T15189] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  257.227623][   T33] audit: type=1400 audit(1761785341.499:8): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=15199 comm="syz.0.2879"
[  257.235954][T15201] nbd: must specify a size in bytes for the device
[  258.152447][T15238] netlink: del zone limit has 4 unknown bytes
[  258.862758][T15247] netlink: 'syz.2.2893': attribute type 9 has an invalid length.
[  258.867898][T15247] netlink: 'syz.2.2893': attribute type 7 has an invalid length.
[  258.870827][T15247] netlink: 'syz.2.2893': attribute type 8 has an invalid length.
[  259.043962][T15249] ip6gretap5: default qdisc (pfifo_fast) fail, fallback to noqueue
[  259.418295][T15263] : renamed from vlan0
[  259.449611][T15265] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  259.488817][T15268] ip6_vti0 speed is unknown, defaulting to 1000
[  259.892427][T15277] IPv6: Can't replace route, no match found
[  259.993724][T15283] netlink: 'syz.1.2903': attribute type 1 has an invalid length.
[  260.021669][T15283] 8021q: adding VLAN 0 to HW filter on device bond16
[  260.045201][T15283] 8021q: adding VLAN 0 to HW filter on device bond16
[  260.047554][T15283] bond16: (slave vxcan1): The slave device specified does not support setting the MAC address
[  260.051197][T15283] bond16: (slave vxcan1): Error -95 calling set_mac_address
[  260.097400][T15287] veth11: entered promiscuous mode
[  260.101590][T15287] bond16: (slave veth11): Enslaving as an active interface with a down link
[  260.180217][T15295] IPVS: length: 91 != 24
[  260.254804][T15297] __nla_validate_parse: 49 callbacks suppressed
[  260.254820][T15297] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2909'.
[  260.260970][T15297] 0X: renamed from caif0
[  260.266616][T15297] 0X: entered allmulticast mode
[  260.268617][T15297] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  260.301572][T15300] 8021q: adding VLAN 0 to HW filter on device bond7
[  260.317038][T15300] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  260.329081][T15300] bond7: (slave macvlan2): Enslaving as a backup interface with a down link
[  260.329181][T15305] netlink: 'syz.2.2912': attribute type 10 has an invalid length.
[  260.340187][T15305] team0: Cannot enslave team device to itself
[  260.346575][T15307] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2913'.
[  260.355175][T15300] bond7: (slave macvlan2): Releasing backup interface
[  260.490466][T15311] ip6gretap0: left promiscuous mode
[  260.503898][T15311] 8021q: adding VLAN 0 to HW filter on device team0
[  260.525082][T15311] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  260.534708][T15309] "syz.2.2914" (15309) uses obsolete ecb(arc4) skcipher
[  260.535360][T15320] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2915'.
[  260.814257][T15348] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2924'.
[  260.830068][T15348] sch_tbf: burst 88 is lower than device veth5 mtu (1514) !
[  260.927142][T15355] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.994208][T15355] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.030337][T15355] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.069631][T15355] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.108758][T15366] netlink: 'syz.0.2931': attribute type 7 has an invalid length.
[  261.172648][T15366] netlink: 'syz.0.2931': attribute type 7 has an invalid length.
[  261.185934][ T5687] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  261.205824][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  261.216367][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.230536][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.276681][T15369] ipt_rpfilter: unknown options
[  261.311104][T15374] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  261.551598][T15387] binder: 15386:15387 ioctl c00c620f 2000000000c0 returned -22
[  261.554850][T15387] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2939'.
[  261.609162][T15389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2940'.
[  261.612603][T15389] netlink: 'syz.1.2940': attribute type 12 has an invalid length.
[  261.616597][T15389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2940'.
[  261.619986][T15389] netlink: 'syz.1.2940': attribute type 12 has an invalid length.
[  261.624859][T15389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2940'.
[  261.628567][T15389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2940'.
[  261.673898][T15391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2941'.
[  262.066911][T15403] netlink: 'syz.1.2945': attribute type 13 has an invalid length.
[  262.069238][T15403] netlink: 'syz.1.2945': attribute type 17 has an invalid length.
[  262.077153][T15403] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  262.102745][T15403] ip6_vti0 speed is unknown, defaulting to 1000
[  262.235562][T15413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  262.338154][T15421] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  262.362234][T15420] syzkaller0: entered promiscuous mode
[  262.363880][T15420] syzkaller0: entered allmulticast mode
[  262.379943][T15424] netlink: 'syz.0.2953': attribute type 1 has an invalid length.
[  262.458099][T15429] ipvlan4: entered allmulticast mode
[  262.554948][T15429] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  262.595312][T15434] binder: 15433:15434 ioctl 9360 7f returned -22
[  263.599201][T15477] syzkaller0: entered allmulticast mode
[  263.887500][T15487] netlink: 'syz.0.2976': attribute type 4 has an invalid length.
[  263.892652][T15487] netlink: 'syz.0.2976': attribute type 4 has an invalid length.
[  263.921147][T15489] netlink: 'syz.1.2977': attribute type 10 has an invalid length.
[  263.932786][T15489] team0: Cannot enslave team device to itself
[  264.202469][T15503] netlink: 'syz.1.2983': attribute type 6 has an invalid length.
[  264.770514][T15526] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  265.434838][T15552] geneve2: left promiscuous mode
[  265.446562][T15552] bond13: left promiscuous mode
[  265.459549][T15552] veth11: left promiscuous mode
[  265.509161][ T5857] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20002 - 0
[  265.512455][ T5857] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20002 - 0
[  265.515743][ T5857] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20002 - 0
[  265.519569][ T5857] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20002 - 0
[  265.663277][ T9536] hid-generic 0003:000F:0007.0003: unknown main item tag 0x0
[  265.667326][ T9536] hid-generic 0003:000F:0007.0003: unknown main item tag 0x0
[  265.673569][ T9536] hid-generic 0003:000F:0007.0003: unknown main item tag 0x0
[  265.676813][ T9536] hid-generic 0003:000F:0007.0003: unknown main item tag 0x0
[  265.679136][ T9536] hid-generic 0003:000F:0007.0003: unknown main item tag 0x0
[  265.682061][ T9536] hid-generic 0003:000F:0007.0003: unknown main item tag 0x0
[  265.685604][ T9536] hid-generic 0003:000F:0007.0003: unknown main item tag 0x0
[  265.688426][ T9536] hid-generic 0003:000F:0007.0003: unknown main item tag 0x0
[  265.691180][ T9536] hid-generic 0003:000F:0007.0003: unknown main item tag 0x0
[  265.693925][ T9536] hid-generic 0003:000F:0007.0003: unknown main item tag 0x0
[  265.701755][ T9536] hid-generic 0003:000F:0007.0003: hidraw0: USB HID v0.02 Device [syz0] on syz0
[  265.994770][T15592] __nla_validate_parse: 12 callbacks suppressed
[  265.994786][T15592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3013'.
[  266.030793][T15592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3013'.
[  266.224522][T15607] netlink: 'syz.0.3018': attribute type 8 has an invalid length.
[  266.227380][T15607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3018'.
[  266.236204][T15607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3018'.
[  266.311284][T15615] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3021'.
[  266.415931][T15623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  266.512105][T15632] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3026'.
[  267.182144][T15651] validate_nla: 1 callbacks suppressed
[  267.182161][T15651] netlink: 'syz.2.3032': attribute type 5 has an invalid length.
[  267.190932][T15651] netlink: 'syz.2.3032': attribute type 28 has an invalid length.
[  267.193955][T15651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3032'.
[  267.311108][T15658] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3034'.
[  267.574760][T15670] netlink: 277 bytes leftover after parsing attributes in process `syz.1.3039'.
[  267.578502][T15671] netlink: 277 bytes leftover after parsing attributes in process `syz.1.3039'.
[  267.681846][T15680] netlink: 'syz.1.3043': attribute type 21 has an invalid length.
[  267.871468][T15699] sctp: [Deprecated]: syz.0.3048 (pid 15699) Use of int in max_burst socket option.
[  267.871468][T15699] Use struct sctp_assoc_value instead
[  267.973914][T15708] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  267.979179][T15708] syzkaller0: entered promiscuous mode
[  267.980855][T15708] syzkaller0: entered allmulticast mode
[  268.061031][T15714] ipvlan4: entered promiscuous mode
[  268.077789][T15715] tipc: Resetting bearer <eth:syzkaller0>
[  268.802367][T15706] tipc: Resetting bearer <eth:syzkaller0>
[  268.815784][T15706] tipc: Disabling bearer <eth:syzkaller0>
[  269.014202][T15735] netlink: 'syz.0.3059': attribute type 1 has an invalid length.
[  269.245142][T15754] veth1_to_bond: entered promiscuous mode
[  269.394203][T15757] nbd: nbd0 already in use
[  269.583956][T15770] netlink: 'syz.0.3069': attribute type 58 has an invalid length.
[  269.914580][T15788] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  269.919822][T15788] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  269.940561][T15790] syz.1.3075: calling unsupported SCSI_IOCTL_SEND_COMMAND
[  270.147204][T15804] team_slave_1: Caught tx_queue_len zero misconfig
[  270.246477][T15811] pim6reg: left allmulticast mode
[  270.794966][T15820] ip6_vti0 speed is unknown, defaulting to 1000
[  270.800416][T15822] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  270.977640][T15828] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1)
[  271.232326][T15837] __nla_validate_parse: 6 callbacks suppressed
[  271.232344][T15837] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3088'.
[  271.329074][T15848] xt_CT: No such helper "netbios-ns"
[  271.343497][T15848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3090'.
[  271.351475][T15848] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3090'.
[  271.356913][T15848] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3090'.
[  271.389593][T15851] ip6_vti0 speed is unknown, defaulting to 1000
[  271.461761][T15856] netlink: 'syz.2.3095': attribute type 1 has an invalid length.
[  271.482862][T15856] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR
[  271.563149][T15867] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3097'.
[  271.642825][T15872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3097'.
[  271.887368][T15887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3104'.
[  272.126127][ T5200] Bluetooth: hci2: command 0x0c1a tx timeout
[  272.197208][T15910] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004
[  272.229252][T15917] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3112'.
[  272.462590][T15920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3113'.
[  272.608691][T15924] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3114'.
[  273.367084][T15947] bridge18: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  273.388768][T15947] ip6_vti0 speed is unknown, defaulting to 1000
[  273.602441][T15954] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  273.676394][T15961] bridge19: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  273.831654][T15967] bridge0: port 1(macvtap0) entered blocking state
[  273.834221][T15967] bridge0: port 1(macvtap0) entered disabled state
[  273.844627][T15967] macvtap0: entered allmulticast mode
[  273.846934][T15967] bridge0: entered allmulticast mode
[  273.858789][T15967] macvtap0: left allmulticast mode
[  273.860888][T15967] bridge0: left allmulticast mode
[  274.118133][T15972] Timeout policy `syz1' can only be used by L3 protocol number 41216
[  274.165401][T15972] team0: Port device bridge0 removed
[  274.237985][T15983] bridge0: port 1(macvtap1) entered blocking state
[  274.240723][T15983] bridge0: port 1(macvtap1) entered disabled state
[  274.243447][T15983] macvtap1: entered allmulticast mode
[  274.250067][T15983] bridge0: entered allmulticast mode
[  274.255279][T15983] macvtap1: left allmulticast mode
[  274.256948][T15983] bridge0: left allmulticast mode
[  274.577258][T16013] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  274.584766][T16013] syzkaller0: entered promiscuous mode
[  274.586446][T16013] syzkaller0: entered allmulticast mode
[  274.606847][T16013] tipc: Resetting bearer <eth:syzkaller0>
[  274.640354][T16013] bond11: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  274.645370][T16013] bond11 (unregistering): Released all slaves
[  274.778106][T16012] tipc: Resetting bearer <eth:syzkaller0>
[  274.794903][T16012] tipc: Disabling bearer <eth:syzkaller0>
[  274.828634][T16025] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2
[  274.939692][T16033] netlink: 'syz.0.3144': attribute type 1 has an invalid length.
[  275.350344][T16040] bond0: invalid ARP target 0.0.0.0 specified for addition
[  275.354413][T16040] bond0: option arp_ip_target: invalid value (0)
[  275.622476][T16055] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[  275.860689][T16065] ip6_vti0 speed is unknown, defaulting to 1000
[  275.898475][T16068] x_tables: duplicate underflow at hook 2
[  276.421918][T16097] __nla_validate_parse: 16 callbacks suppressed
[  276.421931][T16097] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3165'.
[  276.427374][T16094] ip6_vti0 speed is unknown, defaulting to 1000
[  276.651406][T16114] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  276.660632][T16114] syzkaller0: entered promiscuous mode
[  276.668748][T16114] syzkaller0: entered allmulticast mode
[  276.685638][T16114] tipc: Resetting bearer <eth:syzkaller0>
[  276.942691][T16119] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  277.049203][T16125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3172'.
[  277.117033][T16127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3173'.
[  277.120946][T16127] netlink: 'syz.2.3173': attribute type 1 has an invalid length.
[  277.166480][T16127] bond17: entered promiscuous mode
[  277.168866][T16127] 8021q: adding VLAN 0 to HW filter on device bond17
[  277.174001][T16132] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3173'.
[  277.185074][T16127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3173'.
[  277.189056][T16130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3174'.
[  277.193354][T16127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3173'.
[  277.412557][T16109] tipc: Resetting bearer <eth:syzkaller0>
[  277.429742][T16109] tipc: Disabling bearer <eth:syzkaller0>
[  277.441638][T16145] 8021q: adding VLAN 0 to HW filter on device bond0
[  277.447703][T16145] team0: Port device bond0 added
[  277.449706][T16143] delete_channel: no stack
[  277.462865][T16143] input: syz1 as /devices/virtual/input/input35
[  277.517550][T16149] xt_policy: neither incoming nor outgoing policy selected
[  277.570781][T16151] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3180'.
[  277.677288][T16155] xt_CT: You must specify a L4 protocol and not use inversions on it
[  277.738910][T16158] netlink: 'syz.1.3183': attribute type 21 has an invalid length.
[  277.741834][T16158] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3183'.
[  277.837368][T16161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3184'.
[  277.913161][T16164] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  277.917416][T16164] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  277.921935][T16164] tipc: Resetting bearer <eth:syzkaller0>
[  278.644260][T16163] tipc: Disabling bearer <eth:syzkaller0>
[  279.556672][T16210] pimreg: entered allmulticast mode
[  280.014247][T16242] binfmt_misc: register: failed to install interpreter file ./file0
[  280.216963][T16261] netlink: 'syz.0.3216': attribute type 20 has an invalid length.
[  280.228555][ T5687] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  280.232239][ T5687] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  280.236281][T16261] netlink: 'syz.0.3216': attribute type 20 has an invalid length.
[  280.236362][ T5687] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  280.254930][ T5687] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  280.671739][T16280] netlink: 'syz.0.3221': attribute type 2 has an invalid length.
[  280.674240][T16280] netlink: 'syz.0.3221': attribute type 1 has an invalid length.
[  280.683327][T16280] can0: slcan on ttynull.
[  280.696835][T16286] ip6_vti0 speed is unknown, defaulting to 1000
[  280.715625][T16279] can0 (unregistered): slcan off ttynull.
[  280.772910][T16291] xt_socket: unknown flags 0x50
[  280.869156][T16293] veth0_to_team: entered promiscuous mode
[  280.871530][T16293] veth0_to_team: entered allmulticast mode
[  280.889243][T16291] ip6_vti0 speed is unknown, defaulting to 1000
[  281.346018][T16311] netlink: 'syz.2.3227': attribute type 2 has an invalid length.
[  281.598709][T16332] netlink: 'syz.2.3233': attribute type 1 has an invalid length.
[  281.601612][T16332] netlink: 'syz.2.3233': attribute type 11 has an invalid length.
[  281.605076][T16332] __nla_validate_parse: 11 callbacks suppressed
[  281.605090][T16332] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3233'.
[  281.889077][T16344] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  282.134060][T16363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3243'.
[  282.137871][T16363] netlink: 'syz.0.3243': attribute type 30 has an invalid length.
[  282.163921][T16365] ipvlan0: entered promiscuous mode
[  282.356197][T16369] GUP no longer grows the stack in syz.2.3245 (16369): 200000003000-20000000a000 (200000001000)
[  282.359968][T16369] CPU: 0 UID: 0 PID: 16369 Comm: syz.2.3245 Not tainted syzkaller #0 PREEMPT(full) 
[  282.359989][T16369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  282.359999][T16369] Call Trace:
[  282.360006][T16369]  <TASK>
[  282.360014][T16369]  dump_stack_lvl+0x189/0x250
[  282.360042][T16369]  ? __pfx_dump_stack_lvl+0x10/0x10
[  282.360062][T16369]  ? __pfx__printk+0x10/0x10
[  282.360073][T16369]  ? find_vma+0xe7/0x160
[  282.360102][T16369]  __get_user_pages+0x2470/0x2a00
[  282.360125][T16369]  ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10
[  282.360163][T16369]  ? rcu_is_watching+0x15/0xb0
[  282.360184][T16369]  __gup_longterm_locked+0xde4/0x1660
[  282.360199][T16369]  ? try_grab_folio_fast+0x1bf/0x6a0
[  282.360215][T16369]  ? gup_fast_fallback+0x1b86/0x22d0
[  282.360227][T16369]  gup_fast_fallback+0x1d65/0x22d0
[  282.360253][T16369]  ? __pfx_gup_fast_fallback+0x10/0x10
[  282.360262][T16369]  ? __mutex_lock+0x335/0x1350
[  282.360276][T16369]  ? is_valid_gup_args+0x11f/0x200
[  282.360287][T16369]  ? get_user_pages_fast+0x4d/0xb0
[  282.360298][T16369]  __iov_iter_get_pages_alloc+0x39f/0xb40
[  282.360312][T16369]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  282.360321][T16369]  ? wait_for_space+0x248/0x2d0
[  282.360329][T16369]  iov_iter_get_pages2+0x5e/0xa0
[  282.360341][T16369]  __se_sys_vmsplice+0x548/0x10d0
[  282.360353][T16369]  ? futex_private_hash_put+0x4b/0x280
[  282.360367][T16369]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  282.360376][T16369]  ? __pfx_futex_wake+0x10/0x10
[  282.360412][T16369]  ? do_syscall_64+0xbe/0xfa0
[  282.360423][T16369]  do_syscall_64+0xfa/0xfa0
[  282.360432][T16369]  ? lockdep_hardirqs_on+0x9c/0x150
[  282.360441][T16369]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.360449][T16369]  ? exc_page_fault+0xab/0x100
[  282.360459][T16369]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.360467][T16369] RIP: 0033:0x7f853398efc9
[  282.360476][T16369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  282.360484][T16369] RSP: 002b:00007f853485c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  282.360494][T16369] RAX: ffffffffffffffda RBX: 00007f8533be5fa0 RCX: 00007f853398efc9
[  282.360500][T16369] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007
[  282.360505][T16369] RBP: 00007f8533a11f91 R08: 0000000000000000 R09: 0000000000000000
[  282.360511][T16369] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  282.360516][T16369] R13: 00007f8533be6038 R14: 00007f8533be5fa0 R15: 00007ffeedd07f98
[  282.360530][T16369]  </TASK>
[  282.579693][T16382] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3251'.
[  282.595121][T16382] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3251'.
[  282.640647][T16384] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  282.643336][T16384] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  282.722259][T16391] syzkaller1: entered promiscuous mode
[  282.727231][T16391] syzkaller1: entered allmulticast mode
[  285.302743][T16409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3260'.
[  285.333247][T16412] xt_l2tp: wrong L2TP version: 1
[  285.479725][T16428] netlink: 'syz.1.3266': attribute type 1 has an invalid length.
[  285.506304][T16428] bond17: entered promiscuous mode
[  285.508176][T16428] 8021q: adding VLAN 0 to HW filter on device bond17
[  285.576513][T16435] pim6reg: entered allmulticast mode
[  285.592075][T16435] pim6reg: left allmulticast mode
[  285.737816][T16454] : renamed from veth0_to_bond
[  285.918773][T16468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3279'.
[  285.965674][T16457] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  285.968378][T16457] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  286.083287][T16482] syzkaller0: entered promiscuous mode
[  286.088692][T16482] syzkaller0: entered allmulticast mode
[  286.238993][T16491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3285'.
[  286.272260][T16493] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3286'.
[  286.275346][T16493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3286'.
[  286.300293][T16493] bond18: option primary_reselect: invalid value (255)
[  286.306959][T16493] bond18 (unregistering): Released all slaves
[  286.399680][T16507] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3290'.
[  286.455315][T16501] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  286.472847][T16501] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  286.736018][T16533] __nla_validate_parse: 2 callbacks suppressed
[  286.736031][T16533] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3296'.
[  286.800126][T16535] ip6_vti0 speed is unknown, defaulting to 1000
[  287.013786][T16542] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3300'.
[  287.142968][T16550] autofs4:pid:16550:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(3392.8192), cmd(0xc018937c)
[  287.149132][T16550] autofs4:pid:16550:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937c)
[  287.209952][T16557] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3305'.
[  287.472404][T16582] binder: BC_ACQUIRE_RESULT not supported
[  287.474572][T16582] binder: 16581:16582 ioctl c0306201 2000000002c0 returned -22
[  287.648886][T16592] bond18 (unregistering): Released all slaves
[  287.752936][T16598] netlink: 'syz.1.3317': attribute type 1 has an invalid length.
[  287.773358][T16598] 8021q: adding VLAN 0 to HW filter on device bond18
[  287.776731][T16597] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  287.803826][T16598] 8021q: adding VLAN 0 to HW filter on device bond18
[  287.811885][T16598] bond18: (slave vxcan1): The slave device specified does not support setting the MAC address
[  287.816879][T16598] bond18: (slave vxcan1): Error -95 calling set_mac_address
[  287.843413][T16603] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  287.850506][T16606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3319'.
[  287.889110][T16607] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  288.002415][T16616] binder: 16614:16616 ioctl c0306201 2000000002c0 returned -22
[  288.018141][T16617] syzkaller0: entered promiscuous mode
[  288.019876][T16617] syzkaller0: entered allmulticast mode
[  288.165868][T16626] batadv_slave_1: entered promiscuous mode
[  288.186675][T16625] batadv_slave_1: left promiscuous mode
[  288.283519][T16631] netlink: 428 bytes leftover after parsing attributes in process `syz.2.3327'.
[  288.582369][T16658] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3333'.
[  288.589243][T16657] delete_channel: no stack
[  288.694635][T16669] macsec1: entered promiscuous mode
[  288.697172][T16669] bridge0: entered promiscuous mode
[  288.697405][T16673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3338'.
[  288.700365][T16669] bridge0: port 1(macsec1) entered blocking state
[  288.704492][T16669] bridge0: port 1(macsec1) entered disabled state
[  288.706860][T16669] macsec1: entered allmulticast mode
[  288.708875][T16669] bridge0: entered allmulticast mode
[  288.712564][T16669] macsec1: left allmulticast mode
[  288.716137][T16669] bridge0: left allmulticast mode
[  288.718873][T16669] bridge0: left promiscuous mode
[  288.787034][T16675] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3339'.
[  288.856819][T16681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3341'.
[  288.875878][T16683] ubi14: attaching mtd0
[  288.878092][T16683] ubi14 error: ubi_attach_mtd_dev: bad VID header (16) or data offsets (80)
[  288.961911][T16681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3341'.
[  289.015686][T16692] veth1_to_bond: entered allmulticast mode
[  289.062879][T16695] Cannot find map_set index 43 as target
[  289.066343][T16692] veth1_to_bond (unregistering): left allmulticast mode
[  289.156177][T16699] netlink: 'syz.1.3349': attribute type 5 has an invalid length.
[  289.539746][T16726] bond12: (slave ip6tnl5): The slave device specified does not support setting the MAC address
[  289.543909][T16726] bond12: (slave ip6tnl5): Error -95 calling set_mac_address
[  289.589631][T16728] openvswitch: netlink: Message has 8 unknown bytes.
[  289.591704][T16728] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  290.055776][T16740] netlink: 'syz.2.3363': attribute type 5 has an invalid length.
[  290.058439][T16740] netlink: 'syz.2.3363': attribute type 5 has an invalid length.
[  290.575425][T16758] netlink: 'syz.1.3368': attribute type 5 has an invalid length.
[  291.080381][T16782] sctp: [Deprecated]: syz.2.3377 (pid 16782) Use of int in max_burst socket option.
[  291.080381][T16782] Use struct sctp_assoc_value instead
[  291.096770][T16782] IPv6: sit5: Disabled Multicast RS
[  291.690317][T16796] autofs4:pid:16796:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(3392.8192), cmd(0xc018937c)
[  291.696371][T16796] autofs4:pid:16796:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937c)
[  291.702311][T16794] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  291.720872][T16794] vlan0: entered promiscuous mode
[  291.722903][T16794] hsr_slave_1: entered promiscuous mode
[  292.090614][T16817] syzkaller0: entered promiscuous mode
[  292.092759][T16817] syzkaller0: entered allmulticast mode
[  292.357623][T16821] __nla_validate_parse: 14 callbacks suppressed
[  292.357642][T16821] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3391'.
[  292.381036][T16821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3391'.
[  292.543196][T16829] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3395'.
[  292.562236][T16829] ip6_vti0 speed is unknown, defaulting to 1000
[  292.782746][T16846] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  292.799109][T16847] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  292.809143][T16846] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  292.812059][T16846] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  292.871225][T16851] netlink: 'syz.1.3401': attribute type 1 has an invalid length.
[  292.874183][T16851] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3401'.
[  292.879671][T16851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3401'.
[  292.880778][T16852] syzkaller0: entered promiscuous mode
[  292.886818][T16852] syzkaller0: entered allmulticast mode
[  292.893136][T16852] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3402'.
[  292.923211][T16851] netlink: 1033 bytes leftover after parsing attributes in process `syz.1.3401'.
[  293.002567][T16857] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3404'.
[  293.030530][T16861] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  293.063111][T16857] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3404'.
[  293.566808][T16905] team0: Device gtp0 is of different type
[  293.746048][T16912] netlink: 'syz.1.3416': attribute type 23 has an invalid length.
[  294.018764][T16926] xt_limit: Overflow, try lower: 271964/0
[  294.076195][T16930] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode
[  294.274147][T16941] netlink: 'syz.0.3427': attribute type 1 has an invalid length.
[  294.312233][T16941] 8021q: adding VLAN 0 to HW filter on device bond13
[  294.323066][T16941] vlan0: entered promiscuous mode
[  294.324830][T16941] bond13: entered promiscuous mode
[  294.326456][T16941] vlan0: entered allmulticast mode
[  294.327970][T16941] bond13: entered allmulticast mode
[  294.331865][T16941] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3427'.
[  294.342176][T16941] bond13: (slave gretap3): making interface the new active one
[  294.345365][T16941] gretap3: entered promiscuous mode
[  294.347730][T16941] gretap3: entered allmulticast mode
[  294.351413][T16941] bond13: (slave gretap3): Enslaving as an active interface with an up link
[  294.382267][T16947] netlink: 'syz.2.3428': attribute type 16 has an invalid length.
[  294.385400][T16947] netlink: 'syz.2.3428': attribute type 17 has an invalid length.
[  294.489014][T16954] IPv6: NLM_F_REPLACE set, but no existing node found!
[  294.552336][ T5687] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  294.567622][T16958] geneve4: entered promiscuous mode
[  294.569498][T16958] geneve4: entered allmulticast mode
[  294.572047][ T5687] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  294.575493][ T5687] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  294.620271][ T5687] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  294.623175][ T5687] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  294.626401][ T5687] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  294.629411][ T5687] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  294.632233][ T5687] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  294.831301][T16967] ip6_vti0 speed is unknown, defaulting to 1000
[  295.429595][T17004] mkiss: ax0: crc mode is auto.
[  295.557307][T17014] macvlan0: entered promiscuous mode
[  295.558908][T17014] macvlan0: entered allmulticast mode
[  295.561358][T17014] bond18: (slave macvlan0): Opening slave failed
[  295.619374][T17019] blktrace: Concurrent blktraces are not allowed on nullb0
[  295.694091][T17032] netlink: 'syz.2.3455': attribute type 1 has an invalid length.
[  295.717403][T17030] mkiss: ax0: crc mode is auto.
[  295.775518][T17037] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  295.783183][T17037] syzkaller0: entered promiscuous mode
[  295.803255][T17037] syzkaller0: entered allmulticast mode
[  295.849308][T17037] tipc: Resetting bearer <eth:syzkaller0>
[  295.885628][T17034] tipc: Resetting bearer <eth:syzkaller0>
[  295.900176][T17034] tipc: Disabling bearer <eth:syzkaller0>
[  296.209801][T17076] netlink: 'syz.0.3472': attribute type 96 has an invalid length.
[  296.256841][T17077] sctp: [Deprecated]: syz.1.3471 (pid 17077) Use of struct sctp_assoc_value in delayed_ack socket option.
[  296.256841][T17077] Use struct sctp_sack_info instead
[  296.433451][T17087] netlink: 'syz.2.3473': attribute type 83 has an invalid length.
[  297.198098][T17090] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  297.204868][ T9536] ip6_vti0 speed is unknown, defaulting to 1000
[  297.207318][ T9536] syz2: Port: 1 Link ACTIVE
[  297.209098][ T9536] ip6_vti0 speed is unknown, defaulting to 1000
[  297.292051][T17096] ip6_vti0 speed is unknown, defaulting to 1000
[  297.315926][T17098] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  297.319388][T17098] syzkaller0: entered promiscuous mode
[  297.322389][T17098] syzkaller0: entered allmulticast mode
[  297.349220][T17101] tipc: Resetting bearer <eth:syzkaller0>
[  297.365889][T17101] tipc: Disabling bearer <eth:syzkaller0>
[  297.427192][T17104] ALSA: mixer_oss: invalid OSS volume ''
[  297.680351][T17121] netlink: 'syz.0.3485': attribute type 13 has an invalid length.
[  297.953043][  T792] ip6_vti0 speed is unknown, defaulting to 1000
[  297.953245][T17124] tipc: New replicast peer: 255.255.255.255
[  297.955347][  T792] syz2: Port: 1 Link DOWN
[  297.960880][T17124] tipc: Enabled bearer <udp:syz2>, priority 10
[  297.963190][ T7287] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  297.966151][ T7287] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  297.969558][  T792] ip6_vti0 speed is unknown, defaulting to 1000
[  297.971441][ T7287] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  297.973846][ T7287] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  297.976658][ T7287] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  297.979759][ T7287] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  297.982249][ T7287] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  297.985767][ T7287] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  298.640937][T17168] netlink: 'syz.0.3500': attribute type 1 has an invalid length.
[  298.688359][T17174] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  298.701983][T17171] syzkaller0: entered promiscuous mode
[  298.704149][T17171] syzkaller0: entered allmulticast mode
[  298.802254][T17174] tipc: Resetting bearer <eth:syzkaller0>
[  298.836634][T17169] tipc: Resetting bearer <eth:syzkaller0>
[  298.851317][T17169] tipc: Disabling bearer <eth:syzkaller0>
[  299.775006][ T7966] tipc: Node number set to 1402809242
[  300.020621][T17216] __nla_validate_parse: 29 callbacks suppressed
[  300.020637][T17216] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3515'.
[  300.028644][T17216] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3515'.
[  300.032060][T17216] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3515'.
[  300.035760][T17216] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3515'.
[  300.039508][T17216] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3515'.
[  300.042935][T17216] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3515'.
[  300.047891][T17216] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3515'.
[  300.051610][T17216] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3515'.
[  300.056327][T17216] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3515'.
[  300.060183][T17216] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3515'.
[  300.109932][T17217] bond20: ARP target 9.0.0.0 is already present
[  300.112354][T17217] bond20: option arp_ip_target: invalid value (9)
[  300.117721][T17217] bond20 (unregistering): Released all slaves
[  300.313722][T17227] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  300.318569][T17219] netlink: 'syz.0.3517': attribute type 4 has an invalid length.
[  300.651487][T17237] 0X: left allmulticast mode
[  300.661083][T17237] veth1_to_bond: left promiscuous mode
[  300.673582][T17237] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  300.695317][T17237] team1: left promiscuous mode
[  300.703715][T17237] team1: left allmulticast mode
[  300.710202][T17237] bond17: left promiscuous mode
[  300.767604][T17237] hsr_slave_0: left promiscuous mode
[  300.848551][T17244] ip6_vti0 speed is unknown, defaulting to 1000
[  301.216956][T17258] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  301.524908][T17271] syzkaller0: entered promiscuous mode
[  301.527145][T17271] syzkaller0: entered allmulticast mode
[  302.383729][T17298] bond15: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  302.487096][T17298] bond15 (unregistering): Released all slaves
[  302.652557][T17302] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  303.045569][T17311] syzkaller0: entered promiscuous mode
[  303.047639][T17311] syzkaller0: entered allmulticast mode
[  303.456250][T17326] netlink: 'syz.1.3551': attribute type 39 has an invalid length.
[  304.106056][T17353] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  304.306438][T17360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  304.321785][T17361] netlink: 'syz.1.3565': attribute type 1 has an invalid length.
[  304.327641][T17360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  304.368382][T17361] 8021q: adding VLAN 0 to HW filter on device bond19
[  304.383415][T17361] vlan2: entered promiscuous mode
[  304.391065][T17361] bond19: entered promiscuous mode
[  304.392863][T17361] vlan2: entered allmulticast mode
[  304.394610][T17361] bond19: entered allmulticast mode
[  304.410208][T17361] bond19: (slave gretap1): making interface the new active one
[  304.412893][T17361] gretap1: entered promiscuous mode
[  304.423325][T17361] gretap1: entered allmulticast mode
[  304.427063][T17361] bond19: (slave gretap1): Enslaving as an active interface with an up link
[  304.686883][T17374] sch_tbf: burst 2 is lower than device lo mtu (1550) !
[  304.709467][T17374] sch_tbf: burst 2 is lower than device lo mtu (1550) !
[  304.712157][T17374] sch_tbf: burst 2 is lower than device lo mtu (1550) !
[  305.125302][T17387] __nla_validate_parse: 23 callbacks suppressed
[  305.125320][T17387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3574'.
[  305.188650][T17390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3575'.
[  305.231233][T17396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3577'.
[  305.566260][T17421] syzkaller0: entered promiscuous mode
[  305.567922][T17421] syzkaller0: entered allmulticast mode
[  305.749699][T17420] ip6_vti0 speed is unknown, defaulting to 1000
[  305.857477][T17432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3587'.
[  305.860877][T17432] openvswitch: netlink: Missing key (keys=40, expected=80)
[  306.144046][T17448] [U] 
[  306.190626][T17453] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  306.253778][T17455] misc userio: No port type given on /dev/userio
[  306.272702][T17455] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3596'.
[  306.477799][T17477] rdma_op ffff888111fab1f0 conn xmit_rdma 0000000000000000
[  306.480184][T17477] rdma_op ffff888111faf1f0 conn xmit_rdma 0000000000000000
[  306.482542][T17477] rdma_op ffff888111fac1f0 conn xmit_rdma 0000000000000000
[  307.066342][T17510] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  307.459951][T17525] ip6_vti0 speed is unknown, defaulting to 1000
[  307.505863][T17496] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  307.972149][T17537] pim6reg1: entered promiscuous mode
[  307.973907][T17537] pim6reg1: entered allmulticast mode
[  309.955469][T17532] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  309.958630][T17532] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  310.325599][T17574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3635'.
[  310.325754][T17582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3635'.
[  310.332495][T17582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3635'.
[  310.526561][T17597] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3640'.
[  310.579139][T17603] netlink: 'syz.2.3643': attribute type 21 has an invalid length.
[  310.586599][T17603] netlink: 'syz.2.3643': attribute type 1 has an invalid length.
[  310.589407][T17603] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  310.646736][T17607] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3645'.
[  310.766512][T17616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3650'.
[  310.796923][T17618] netlink: 'syz.2.3649': attribute type 1 has an invalid length.
[  311.127338][T17647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3657'.
[  311.190078][T17650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3658'.
[  311.195386][T17648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3658'.
[  311.726316][T17666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3663'.
[  311.906040][T17680] syzkaller0: entered promiscuous mode
[  311.908338][T17680] syzkaller0: entered allmulticast mode
[  313.623694][T17714] ip6_vti0 speed is unknown, defaulting to 1000
[  313.723517][T17721] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  313.735315][T17721] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  314.601684][T17738] netlink: 'syz.1.3688': attribute type 1 has an invalid length.
[  314.629590][T17738] 8021q: adding VLAN 0 to HW filter on device bond21
[  314.672262][T17744] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  314.674626][T17744] IPv6: NLM_F_CREATE should be set when creating new route
[  314.676653][T17744] IPv6: NLM_F_CREATE should be set when creating new route
[  314.678805][T17744] IPv6: NLM_F_CREATE should be set when creating new route
[  314.681594][T17744] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  314.716933][T17747] vxcan0: entered allmulticast mode
[  314.861234][T17762] netlink: 'syz.2.3694': attribute type 1 has an invalid length.
[  314.888538][T17762] bond20: entered promiscuous mode
[  314.890924][T17762] 8021q: adding VLAN 0 to HW filter on device bond20
[  314.911568][T17762] 8021q: adding VLAN 0 to HW filter on device bond20
[  314.914899][T17762] bond20: (slave gre3): The slave device specified does not support setting the MAC address
[  314.918651][T17762] bond20: (slave gre3): Setting fail_over_mac to active for active-backup mode
[  314.925642][T17762] bond20: (slave gre3): Opening slave failed
[  315.662175][T17786] binder: 17783:17786 ioctl 89f1 200000000140 returned -22
[  315.697628][T17789] syz.1.3702: calling unsupported SCSI_IOCTL_SEND_COMMAND
[  315.732683][T17791] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  315.737529][T17791] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  316.209948][T17805] syzkaller0: entered promiscuous mode
[  316.211744][T17805] syzkaller0: entered allmulticast mode
[  317.930191][T17839] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  317.934879][T17839] __nla_validate_parse: 9 callbacks suppressed
[  317.934895][T17839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3714'.
[  317.962398][T17839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3714'.
[  318.010766][T17844] netlink: 'syz.1.3716': attribute type 21 has an invalid length.
[  318.016974][T17844] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3716'.
[  318.021075][T17844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3716'.
[  318.148504][T17860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3722'.
[  318.157310][T17854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3720'.
[  318.163692][T17854] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3720'.
[  318.169680][T17854] netlink: 'syz.2.3720': attribute type 3 has an invalid length.
[  318.172360][T17854] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3720'.
[  318.217378][T17868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3725'.
[  318.233657][T17868] 8021q: adding VLAN 0 to HW filter on device bond21
[  318.245139][T17868] bond21: entered promiscuous mode
[  318.246851][T17868] bond21: entered allmulticast mode
[  318.276403][T17875] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  318.288586][T17877] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  318.428674][T17884] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3731'.
[  318.516551][T17888] 1X: renamed from 60X
[  318.519630][T17888] 1X: entered allmulticast mode
[  318.521160][T17888] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  319.102774][T17925] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1
[  319.747453][T17951] netlink: 'syz.2.3754': attribute type 9 has an invalid length.
[  319.928423][T17951] can: request_module (can-proto-0) failed.
[  320.080842][T17966] x_tables: ip6_tables: DNPT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT
[  321.465340][   T57] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  321.686001][T17979] vlan3: entered promiscuous mode
[  321.828958][T17993] netlink: 'syz.2.3766': attribute type 4 has an invalid length.
[  322.001952][T18015] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  322.006639][T18015] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  322.100501][T18023] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  322.111762][T18023] tipc: Resetting bearer <eth:syzkaller0>
[  322.120332][T18019] tipc: Disabling bearer <eth:syzkaller0>
[  322.126754][T18025] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  322.342631][T18038] bond15: option all_slaves_active: invalid value (13)
[  322.348058][T18038] bond15 (unregistering): Released all slaves
[  322.442287][T18041] binder: 18040:18041 ioctl 5000940e 2000000010c0 returned -22
[  322.793492][T18048] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  322.985217][T18059] random: crng reseeded on system resumption
[  323.119025][T18066] netlink: 'syz.1.3792': attribute type 39 has an invalid length.
[  323.124034][T18066] __nla_validate_parse: 16 callbacks suppressed
[  323.124045][T18066] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3792'.
[  323.128667][T18066] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3792'.
[  323.131504][T18066] netlink: 'syz.1.3792': attribute type 5 has an invalid length.
[  323.133673][T18066] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3792'.
[  323.159015][T18065] vlan4: entered allmulticast mode
[  323.160969][T18065] bridge_slave_0: entered allmulticast mode
[  323.237801][T18069] ip6_vti0 speed is unknown, defaulting to 1000
[  323.703650][T18098] bond22: option xmit_hash_policy: invalid value (6)
[  323.720311][T18098] bond22 (unregistering): Released all slaves
[  323.757026][T18107] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3804'.
[  323.770136][T18102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3802'.
[  324.008665][T18132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3813'.
[  324.027060][T18132] bond22: entered promiscuous mode
[  324.030161][T18132] 8021q: adding VLAN 0 to HW filter on device bond22
[  324.039797][T18135] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3814'.
[  324.043264][T18135] nbd: must specify at least one socket
[  324.062898][T18132] 8021q: adding VLAN 0 to HW filter on device bond23
[  324.066850][T18132] bond23: entered promiscuous mode
[  324.070439][T18132] bond22: (slave bond23): Enslaving as an active interface with an up link
[  324.090798][T18139] ubi14: attaching mtd0
[  324.092113][T18139] ubi14 error: ubi_attach_mtd_dev: bad VID header (16) or data offsets (80)
[  324.805205][T18163] AppArmor: change_hat: Invalid input, NULL hat and NULL magic
[  324.897905][T18168] syzkaller0: entered promiscuous mode
[  324.902060][T18168] syzkaller0: entered allmulticast mode
[  324.916031][T18168] netlink: 'syz.1.3826': attribute type 2 has an invalid length.
[  324.920281][T18168] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3826'.
[  326.610291][T18174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3828'.
[  326.757614][T18181] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  326.763288][T18186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  326.787087][T18186] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3832'.
[  326.863714][T18192] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  326.974026][T18203] ip6erspan0: entered promiscuous mode
[  327.043590][T18209] netlink: 'syz.0.3839': attribute type 16 has an invalid length.
[  327.047160][T18209] netlink: 'syz.0.3839': attribute type 17 has an invalid length.
[  327.059876][T18209] IPv6: NLM_F_REPLACE set, but no existing node found!
[  327.264696][T18221] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  327.269270][T18221] syzkaller0: entered promiscuous mode
[  327.271495][T18221] syzkaller0: entered allmulticast mode
[  327.328379][T18216] bond23 (unregistering): Released all slaves
[  327.347630][T18221] tipc: Resetting bearer <eth:syzkaller0>
[  327.367748][T18220] tipc: Resetting bearer <eth:syzkaller0>
[  327.416682][T18220] tipc: Disabling bearer <eth:syzkaller0>
[  327.506442][T18228] ip6_vti0 speed is unknown, defaulting to 1000
[  327.661131][T18249] netlink: 'syz.0.3848': attribute type 12 has an invalid length.
[  327.739062][T18243] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  327.886718][T18259] netlink: 'syz.0.3850': attribute type 4 has an invalid length.
[  328.153399][T18279] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma?
[  328.161682][T18279] syzkaller1: tun_chr_ioctl cmd 1074025677
[  328.163506][T18279] syzkaller1: linktype set to 778
[  328.313455][T18294] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  328.336907][T18294] syzkaller0: entered promiscuous mode
[  328.338567][T18294] syzkaller0: entered allmulticast mode
[  328.352879][T18294] tipc: Resetting bearer <eth:syzkaller0>
[  328.387975][T18299] __nla_validate_parse: 5 callbacks suppressed
[  328.387988][T18299] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3865'.
[  328.551246][T18284] tipc: Resetting bearer <eth:syzkaller0>
[  328.567742][T18284] tipc: Disabling bearer <eth:syzkaller0>
[  329.547296][T18324] ip6_vti0 speed is unknown, defaulting to 1000
[  330.151051][T18361] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3885'.
[  330.219685][T18367] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3888'.
[  330.232244][T18370] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3889'.
[  330.236206][T18370] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3889'.
[  330.239421][T18370] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3889'.
[  330.242139][T18370] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3889'.
[  330.247574][T18367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3888'.
[  330.279405][T18372] xt_CT: You must specify a L4 protocol and not use inversions on it
[  330.334481][T18374] Can't find ip_set type hash:n
[  330.686502][T18395] netlink: 'syz.0.3895': attribute type 4 has an invalid length.
[  330.689412][T18395] netlink: 3593 bytes leftover after parsing attributes in process `syz.0.3895'.
[  330.711117][T18391] xt_connbytes: Forcing CT accounting to be enabled
[  330.737087][T18395] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  330.811446][T18401] rdma_rxe: rxe_newlink: failed to add ip6_vti0
[  330.862350][T18407] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3898'.
[  330.865443][T18407] netlink: 'syz.0.3898': attribute type 7 has an invalid length.
[  330.867812][T18407] netlink: 'syz.0.3898': attribute type 8 has an invalid length.
[  330.879173][T18407] syzkaller1: entered promiscuous mode
[  330.881441][T18407] syzkaller1: entered allmulticast mode
[  330.961633][T18413] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  330.968739][T18413] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  330.981739][T18413] ip6_vti0 speed is unknown, defaulting to 1000
[  331.094169][T18414] ip6_vti0 speed is unknown, defaulting to 1000
[  331.173363][T18422] bond24: Unable to set up delay as MII monitoring is disabled
[  331.177230][T18422] bond24 (unregistering): Released all slaves
[  331.225342][T18416] ip6_vti0 speed is unknown, defaulting to 1000
[  331.541727][T18440] C: renamed from lo
[  331.545474][T18440] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  331.590518][T18443] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  331.593229][T18443] syzkaller0: entered promiscuous mode
[  331.598181][T18443] syzkaller0: entered allmulticast mode
[  331.614785][T18443] tipc: Resetting bearer <eth:syzkaller0>
[  331.626619][T18442] tipc: Resetting bearer <eth:syzkaller0>
[  331.643927][T18442] tipc: Disabling bearer <eth:syzkaller0>
[  331.779600][T18449] bond24: entered promiscuous mode
[  331.781591][T18449] 8021q: adding VLAN 0 to HW filter on device bond24
[  331.927124][T18471] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  331.931933][T18471] syzkaller0: entered promiscuous mode
[  331.933763][T18471] syzkaller0: entered allmulticast mode
[  331.963958][T18471] tipc: Resetting bearer <eth:syzkaller0>
[  331.978811][T18473] 8021q: VLANs not supported on lo
[  332.063013][T18470] tipc: Resetting bearer <eth:syzkaller0>
[  332.079957][T18470] tipc: Disabling bearer <eth:syzkaller0>
[  332.230413][T18482] team0: No ports can be present during mode change
[  332.632595][T18506] bond0: (slave gre0): The slave device specified does not support setting the MAC address
[  332.638474][T18506] bond0: (slave gre0): Error -95 calling set_mac_address
[  332.643119][T18506] netlink: 'syz.1.3933': attribute type 39 has an invalid length.
[  332.799887][T18511] netlink: 'syz.1.3935': attribute type 4 has an invalid length.
[  333.123217][T18525] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  333.134156][T18525] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  333.232331][T18529] geneve3: entered promiscuous mode
[  333.242310][T18529] geneve3: entered allmulticast mode
[  333.246677][ T5687] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  333.250914][ T5687] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  333.254739][ T5687] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  333.258948][ T5687] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  333.269031][T18529] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  333.275515][ T9538] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  333.330818][T18529] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  333.447408][T18529] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  333.556058][T18529] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  333.862278][ T5687] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  333.884609][ T9531] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  333.954123][ T7287] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  334.025220][ T5687] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  334.287700][ T5687] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  334.290892][ T5687] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  335.065301][ T5687] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  335.070566][ T5687] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  335.264623][ T9531] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  335.709308][T18541] __nla_validate_parse: 15 callbacks suppressed
[  335.709320][T18541] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3948'.
[  335.784912][T18541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3948'.
[  335.791464][T18541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3948'.
[  335.983690][T18562] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  336.023223][T18568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3958'.
[  336.056338][T18570] mkiss: ax0: crc mode is auto.
[  336.209121][T18583] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  336.249920][T18583] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  336.311185][T18583] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  336.354015][T18583] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  336.405214][ T5687] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  336.416968][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  336.429253][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  336.437415][ T5687] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  336.567320][T18590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3966'.
[  336.818310][T18612] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  336.829367][T18612] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3974'.
[  336.832138][T18612] nbd: must specify at least one socket
[  336.864030][T18618] netlink: 'syz.2.3976': attribute type 1 has an invalid length.
[  336.880759][T18618] bond25: entered promiscuous mode
[  336.882356][T18618] bond25: entered allmulticast mode
[  336.884199][T18618] 8021q: adding VLAN 0 to HW filter on device bond25
[  336.962427][T18626] ip6_vti0 speed is unknown, defaulting to 1000
[  337.046515][T18633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3981'.
[  337.049262][T18633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3981'.
[  337.052050][T18633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3981'.
[  337.071961][T18633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3981'.
[  337.101423][T18634] tipc: Enabling of bearer <et:g> rejected, media not registered
[  337.110011][T18638] tipc: Enabling of bearer <et:g> rejected, media not registered
[  337.221395][T18649] netlink: 'syz.0.3984': attribute type 10 has an invalid length.
[  337.224557][T18649] openvswitch: netlink: Flow key attr not present in new flow.
[  337.456762][T18661] syzkaller0: entered promiscuous mode
[  337.458547][T18661] syzkaller0: entered allmulticast mode
[  337.461981][T18660] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  337.478240][T18662] tipc: Resetting bearer <eth:syzkaller0>
[  337.493956][T18662] tipc: Disabling bearer <eth:syzkaller0>
[  337.581573][T18665] ip6_vti0 speed is unknown, defaulting to 1000
[  337.807765][T18674] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  338.159790][T18696] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  338.419536][T18709] tap0: tun_chr_ioctl cmd 35108
[  338.922571][T18718] macsec0: entered promiscuous mode
[  338.924416][T18718] macsec0: entered allmulticast mode
[  338.971055][T18721] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  338.974206][T18721] syzkaller0: entered promiscuous mode
[  338.976551][T18721] syzkaller0: entered allmulticast mode
[  338.999217][T18721] tipc: Resetting bearer <eth:syzkaller0>
[  339.002402][T18720] tipc: Resetting bearer <eth:syzkaller0>
[  339.013863][T18720] tipc: Disabling bearer <eth:syzkaller0>
[  339.267322][T18723] 8021q: adding VLAN 0 to HW filter on device bond0
[  339.384652][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  339.526169][T18748] --map-set only usable from mangle table
[  339.588757][T18739] smc: net device bond0 applied user defined pnetid SYZ0
[  339.653142][T18759] netlink: 'syz.2.4018': attribute type 4 has an invalid length.
[  339.700465][T18763] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  339.933081][T18767] netlink: 'syz.0.4019': attribute type 1 has an invalid length.
[  339.935758][T18767] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  340.570279][T18784] netlink: 'syz.2.4026': attribute type 1 has an invalid length.
[  340.572492][T18784] netlink: 'syz.2.4026': attribute type 3 has an invalid length.
[  340.577419][T18784] NCSI netlink: No device for ifindex 813332851
[  340.719716][T18794] __nla_validate_parse: 16 callbacks suppressed
[  340.719728][T18794] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4031'.
[  340.947398][   T33] audit: type=1400 audit(1761785425.219:9): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=18806 comm="syz.2.4035"
[  341.178368][T18816] netlink: 'syz.2.4039': attribute type 9 has an invalid length.
[  341.329650][T18816] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4039'.
[  341.356081][T18816] can: request_module (can-proto-0) failed.
[  341.665945][T18834] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4044'.
[  341.894206][T18855] rdma_op ffff888120dfd1f0 conn xmit_rdma 0000000000000000
[  341.900323][T18856] rdma_op ffff888120dfd9f0 conn xmit_rdma 0000000000000000
[  341.961507][T18855] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4049'.
[  342.750399][T18883] sctp: [Deprecated]: syz.0.4056 (pid 18883) Use of int in max_burst socket option deprecated.
[  342.750399][T18883] Use struct sctp_assoc_value instead
[  342.862938][T18888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4058'.
[  342.968196][T18892] bond24: option ad_user_port_key: invalid value (65535)
[  342.970926][T18892] bond24: option ad_user_port_key: allowed values 0 - 1023
[  342.976707][T18892] bond24 (unregistering): Released all slaves
[  343.206561][T18902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4063'.
[  343.210372][T18902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4063'.
[  343.293797][T18906] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4065'.
[  343.331776][T18908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4066'.
[  343.344652][T18908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4066'.
[  343.345400][ T5687] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  343.352086][ T5687] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  343.359296][ T5687] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  343.362643][ T5687] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  343.368708][T18908] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  343.422418][T18908] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  343.495764][T18908] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  343.543951][T18908] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  343.619988][ T7287] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  343.632713][ T7287] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  343.644001][T18922] bridge_slave_1: entered promiscuous mode
[  343.646187][ T7287] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  343.657784][ T7287] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  343.742090][T18934] netlink: 'syz.0.4073': attribute type 1 has an invalid length.
[  343.781651][T18934] bond15: (slave geneve5): making interface the new active one
[  343.789402][T18934] bond15: (slave geneve5): Enslaving as an active interface with an up link
[  343.792346][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  343.795854][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  343.798935][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  343.798966][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  343.811975][T18939] openvswitch: netlink: IP tunnel dst address not specified
[  343.850150][T18941] netlink: 'syz.1.4076': attribute type 13 has an invalid length.
[  343.850941][T18934] netlink: 'syz.0.4073': attribute type 1 has an invalid length.
[  343.860430][T18934] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  343.862818][T18934] syzkaller0: entered promiscuous mode
[  343.865306][T18934] syzkaller0: entered allmulticast mode
[  343.873450][T18933] tipc: Resetting bearer <eth:syzkaller0>
[  343.898737][T18933] tipc: Disabling bearer <eth:syzkaller0>
[  343.914873][T18947] ubi14: attaching mtd0
[  343.917604][T18947] ubi14: scanning is finished
[  343.919000][T18947] ubi14: empty MTD device detected
[  343.986435][T18954] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  344.094517][T18954] netlink: 'syz.1.4078': attribute type 9 has an invalid length.
[  344.120548][T18947] ubi14: attached mtd0 (name "mtdram test device", size 0 MiB)
[  344.123327][T18947] ubi14: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  344.127027][T18963] veth0: entered promiscuous mode
[  344.135825][T18963] veth0 (unregistering): left promiscuous mode
[  344.254431][T18947] ubi14: min./max. I/O unit sizes: 1/64, sub-page size 1
[  344.256530][T18947] ubi14: VID header offset: 64 (aligned 64), data offset: 128
[  344.258945][T18947] ubi14: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  344.261131][T18947] ubi14: user volume: 0, internal volumes: 1, max. volumes count: 23
[  344.263632][T18947] ubi14: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1761902611
[  344.268711][T18947] ubi14: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  344.274063][T18964] ubi14: background thread "ubi_bgt14d" started, PID 18964
[  344.314119][T18978] netlink: 'syz.2.4086': attribute type 3 has an invalid length.
[  344.329171][T18978] netlink: 'syz.2.4086': attribute type 2 has an invalid length.
[  344.332133][T18978] netlink: 'syz.2.4086': attribute type 2 has an invalid length.
[  344.476673][T18988] autofs4:pid:18988:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(3392.8192), cmd(0xc018937c)
[  344.484542][T18988] autofs4:pid:18988:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937c)
[  345.413548][T19003] syzkaller0: entered promiscuous mode
[  345.416825][T19003] syzkaller0: entered allmulticast mode
[  345.447290][T19007] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  345.482420][T19007] tipc: Resetting bearer <eth:syzkaller0>
[  345.496573][T19006] tipc: Disabling bearer <eth:syzkaller0>
[  345.506482][T19013] netlink: 'syz.2.4099': attribute type 5 has an invalid length.
[  345.509395][T19013] netlink: 'syz.2.4099': attribute type 5 has an invalid length.
[  345.721837][T19035] 1X: renamed from 60X
[  345.725365][T19035] 1X: entered allmulticast mode
[  345.727054][T19035] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  345.736002][T19039] __nla_validate_parse: 13 callbacks suppressed
[  345.736014][T19039] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4108'.
[  345.736151][T19035] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4107'.
[  345.745911][T19037] bridge_slave_1: left promiscuous mode
[  345.762302][T19037] vlan0: left promiscuous mode
[  345.763861][T19037] hsr_slave_1: left promiscuous mode
[  345.770175][T19037] mac80211_hwsim hwsim23 wlan1: left allmulticast mode
[  345.780828][T19037] bond17: left promiscuous mode
[  345.787517][T19040] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4107'.
[  345.804254][T19037] vlan2: left promiscuous mode
[  345.807925][T19037] bond19: left promiscuous mode
[  345.809434][T19037] gretap1: left promiscuous mode
[  345.811204][T19037] vlan2: left allmulticast mode
[  345.812898][T19037] bond19: left allmulticast mode
[  345.815135][T19037] gretap1: left allmulticast mode
[  345.834255][T19037] bond22: left promiscuous mode
[  345.836311][T19037] bond23: left promiscuous mode
[  345.857058][T19042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4104'.
[  345.865818][T19037] geneve3: left promiscuous mode
[  345.867719][T19037] geneve3: left allmulticast mode
[  345.889826][T19039] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  345.897822][T19042] veth0_to_team: left promiscuous mode
[  345.904956][ T5687] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 19999 - 0
[  345.908235][ T5687] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 19999 - 0
[  345.910973][ T5687] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 19999 - 0
[  345.913874][ T5687] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 19999 - 0
[  345.942199][T19039] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  346.059167][T19039] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  346.129663][T19039] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  346.148784][T19054] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4112'.
[  346.159231][T19047] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4110'.
[  346.162218][T19047] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  346.207042][ T5687] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  346.221555][ T5687] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  346.239599][ T5687] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  346.253689][ T5687] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  346.316255][T19058] random: crng reseeded on system resumption
[  346.355216][T19062] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4116'.
[  346.389461][T19065] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4117'.
[  346.531801][T19075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4117'.
[  347.503807][T19102] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  347.512279][T19102] IPv6: NLM_F_CREATE should be specified when creating new route
[  347.640995][T19110] pim6reg1: entered promiscuous mode
[  347.642622][T19110] pim6reg1: entered allmulticast mode
[  347.853348][T19116] openvswitch: netlink: Missing valid actions attribute.
[  347.855706][T19116] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  348.182325][T19134] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  348.321999][T19143] netlink: 'syz.1.4143': attribute type 12 has an invalid length.
[  348.326457][T19143] xt_cgroup: path and classid specified
[  348.456174][T19150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4144'.
[  349.391755][T19178] netlink: 'syz.1.4154': attribute type 12 has an invalid length.
[  349.401718][T19178] netlink: 'syz.1.4154': attribute type 12 has an invalid length.
[  349.498907][T19186] ata3.00: invalid multi_count 1 ignored
[  350.771603][T19231] [U] 
[  350.802761][T19243] netlink: 'syz.0.4178': attribute type 4 has an invalid length.
[  350.810633][T19243] __nla_validate_parse: 16 callbacks suppressed
[  350.810651][T19243] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4178'.
[  351.036286][T19258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4181'.
[  351.327629][T19273] xt_cgroup: invalid path, errno=-2
[  351.460145][T19279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4188'.
[  351.518699][    T9] hid_parser_main: 8 callbacks suppressed
[  351.518716][    T9] hid-generic 0003:000F:0007.0004: unknown main item tag 0x0
[  351.523807][    T9] hid-generic 0003:000F:0007.0004: unknown main item tag 0x0
[  351.529418][    T9] hid-generic 0003:000F:0007.0004: unknown main item tag 0x0
[  351.532218][    T9] hid-generic 0003:000F:0007.0004: unknown main item tag 0x0
[  351.538740][    T9] hid-generic 0003:000F:0007.0004: unknown main item tag 0x0
[  351.543405][    T9] hid-generic 0003:000F:0007.0004: unknown main item tag 0x0
[  351.546847][    T9] hid-generic 0003:000F:0007.0004: unknown main item tag 0x0
[  351.547547][T19283] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4190'.
[  351.549612][    T9] hid-generic 0003:000F:0007.0004: unknown main item tag 0x0
[  351.549682][    T9] hid-generic 0003:000F:0007.0004: unknown main item tag 0x0
[  351.564544][    T9] hid-generic 0003:000F:0007.0004: unknown main item tag 0x0
[  351.568898][    T9] hid-generic 0003:000F:0007.0004: hidraw0: USB HID v0.02 Device [syz0] on syz0
[  351.610549][T19287] netlink: 'syz.0.4191': attribute type 1 has an invalid length.
[  351.641312][T19287] bond16: entered promiscuous mode
[  351.643482][T19287] bond16: entered allmulticast mode
[  351.645939][T19287] 8021q: adding VLAN 0 to HW filter on device bond16
[  351.667188][T19287] 8021q: adding VLAN 0 to HW filter on device bond17
[  351.670410][T19287] bond17: entered promiscuous mode
[  351.672124][T19287] bond17: entered allmulticast mode
[  351.674056][T19287] bond16: (slave bond17): Enslaving as a backup interface with a down link
[  351.719379][T19297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4194'.
[  351.881696][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  351.884693][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  351.887724][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  351.890466][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  351.893695][T19303] [U] 
[  352.117497][T19323] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4205'.
[  352.131966][T19323] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4205'.
[  352.135110][T19323] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4205'.
[  352.613653][T19328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4206'.
[  352.689913][T19335] netlink: 'syz.2.4208': attribute type 3 has an invalid length.
[  352.692622][T19335] netlink: 'syz.2.4208': attribute type 3 has an invalid length.
[  352.718689][T19336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4207'.
[  353.055213][T19354] geneve6: entered promiscuous mode
[  353.057319][T19354] geneve6: entered allmulticast mode
[  353.060896][ T5857] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 19999 - 0
[  353.063525][ T5857] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 19999 - 0
[  353.067413][ T5857] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 19999 - 0
[  353.070981][ T5857] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 19999 - 0
[  353.076860][T19354] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  353.079809][T19354] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  353.082752][T19354] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  353.200172][T19354] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  353.203762][T19354] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  353.304429][T19354] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  353.445810][T19354] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  353.449361][T19354] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  353.452613][T19354] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  353.657530][T19354] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  353.661007][T19354] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  353.754422][T19354] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  354.045952][ T5857] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  354.048495][ T5857] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  354.051356][ T5857] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  354.188486][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  354.190850][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  354.193232][   T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  354.204600][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  354.207056][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  354.209530][   T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  354.394498][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  354.397272][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  354.400191][   T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  356.748410][T19359] __nla_validate_parse: 1 callbacks suppressed
[  356.748436][T19359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4217'.
[  356.847319][T19367] ip6_vti0 speed is unknown, defaulting to 1000
[  356.966993][T19377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4223'.
[  356.970177][T19377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4223'.
[  356.979855][T19377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4223'.
[  356.982511][T19377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4223'.
[  357.298769][T19395] netlink: 'syz.1.4227': attribute type 11 has an invalid length.
[  357.301139][T19395] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4227'.
[  357.611137][T19426] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4236'.
[  357.669884][T19431] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4239'.
[  357.674018][T19431] binfmt_misc: register: failed to install interpreter file ./file0
[  357.895248][T19449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4244'.
[  357.899513][T19449] IPv6: NLM_F_REPLACE set, but no existing node found!
[  358.039868][T19455] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  358.043424][T19457] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40
[  358.048349][T19457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4248'.
[  358.159428][T19459] can0: slcan on ttynull.
[  358.205069][T19458] can0 (unregistered): slcan off ttynull.
[  358.244184][T19463] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  358.325825][T19469] misc userio: No port type given on /dev/userio
[  358.328099][T19469] sch_tbf: burst 6 is lower than device lo mtu (18) !
[  358.455841][T19480] bond13: (slave gretap3): Releasing active interface
[  358.462527][T19480] gretap3: left promiscuous mode
[  358.473873][T19480] gretap3: left allmulticast mode
[  358.500420][T19480] bond15: (slave geneve5): Releasing active interface
[  358.521779][T19480] bond16: (slave bond17): Releasing backup interface
[  358.525605][T19480] bond17: left promiscuous mode
[  358.527181][T19480] bond17: left allmulticast mode
[  358.581230][ T5857] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  358.630013][ T5857] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  358.730733][ T5857] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  358.923397][ T5857] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  359.022318][T19493] netlink: 'syz.0.4260': attribute type 1 has an invalid length.
[  359.089812][T19493] vlan3: entered allmulticast mode
[  359.092001][T19493] bridge0: entered allmulticast mode
[  359.421713][T19500] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  359.424159][T19500] syzkaller0: entered promiscuous mode
[  359.426415][T19500] syzkaller0: entered allmulticast mode
[  359.460018][T19507] nvme_fabrics: unknown parameter or missing value 'syz1' in ctrl creation request
[  359.475891][T19499] tipc: Resetting bearer <eth:syzkaller0>
[  359.503239][T19499] tipc: Disabling bearer <eth:syzkaller0>
[  359.718644][T19530] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  359.725216][T19530] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  359.871991][T19537] netlink: 'syz.1.4275': attribute type 2 has an invalid length.
[  359.875164][T19537] netlink: 'syz.1.4275': attribute type 2 has an invalid length.
[  361.059770][T19578] QAT: Invalid ioctl 1076925497
[  361.063330][T19578] QAT: Invalid ioctl -1068473177
[  361.237413][T19591] netlink: 'syz.1.4294': attribute type 11 has an invalid length.
[  362.258442][T19613] __nla_validate_parse: 8 callbacks suppressed
[  362.258459][T19613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4301'.
[  362.362476][T19617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4303'.
[  362.407314][T19617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4303'.
[  362.566701][T19617] team0: Port device vlan0 removed
[  362.626563][T19620] netlink: 'syz.0.4304': attribute type 29 has an invalid length.
[  362.629921][T19620] netlink: 'syz.0.4304': attribute type 29 has an invalid length.
[  362.632994][T19620] netlink: 'syz.0.4304': attribute type 29 has an invalid length.
[  362.636739][T19620] netlink: 'syz.0.4304': attribute type 29 has an invalid length.
[  362.639871][T19620] netlink: 'syz.0.4304': attribute type 29 has an invalid length.
[  362.642952][T19620] netlink: 'syz.0.4304': attribute type 29 has an invalid length.
[  362.648071][T19620] netlink: 'syz.0.4304': attribute type 29 has an invalid length.
[  362.651080][T19620] netlink: 'syz.0.4304': attribute type 29 has an invalid length.
[  362.653890][T19620] netlink: 'syz.0.4304': attribute type 29 has an invalid length.
[  362.658291][T19620] netlink: 'syz.0.4304': attribute type 29 has an invalid length.
[  362.763082][T19629] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4307'.
[  362.795306][T19636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4310'.
[  362.803638][T19636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4310'.
[  362.990774][T19647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4314'.
[  363.051295][T19649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4315'.
[  363.279158][T19654] bond26: option min_links: invalid value (18446744073709551612)
[  363.281423][T19654] bond26: option min_links: allowed values 0 - 2147483647
[  363.285320][T19654] bond26 (unregistering): Released all slaves
[  363.769617][T19667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4321'.
[  363.853540][T19676] binder: 19675:19676 ioctl c0306201 2000000002c0 returned -22
[  363.975686][T19685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4325'.
[  364.084358][T19692] xt_hashlimit: overflow, rate too high: 0
[  365.517459][T19738] ip6_vti0 speed is unknown, defaulting to 1000
[  365.854670][T19747] input: syz0 as /devices/virtual/input/input42
[  365.923178][T19750] can0: slcan on ttynull.
[  365.976292][T19749] can0 (unregistered): slcan off ttynull.
[  366.038235][T19713] syz.1.4338: vmalloc error: size 8351744, failed to allocated page array size 16312, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  366.043938][T19713] CPU: 0 UID: 0 PID: 19713 Comm: syz.1.4338 Not tainted syzkaller #0 PREEMPT(full) 
[  366.043951][T19713] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  366.043957][T19713] Call Trace:
[  366.043962][T19713]  <TASK>
[  366.043967][T19713]  dump_stack_lvl+0x189/0x250
[  366.043984][T19713]  ? __pfx_dump_stack_lvl+0x10/0x10
[  366.043996][T19713]  ? __pfx__printk+0x10/0x10
[  366.044004][T19713]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  366.044017][T19713]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  366.044030][T19713]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  366.044042][T19713]  warn_alloc+0x214/0x310
[  366.044058][T19713]  ? __pfx_warn_alloc+0x10/0x10
[  366.044074][T19713]  ? __get_vm_area_node+0x28f/0x300
[  366.044086][T19713]  ? vb2_vmalloc_alloc+0xef/0x340
[  366.044097][T19713]  __vmalloc_node_range_noprof+0x690/0x12d0
[  366.044110][T19713]  ? alloc_vmap_area+0xda0/0x14c0
[  366.044132][T19713]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  366.044143][T19713]  ? vb2_vmalloc_alloc+0xef/0x340
[  366.044152][T19713]  ? __get_vm_area_node+0x28f/0x300
[  366.044164][T19713]  ? vb2_vmalloc_alloc+0xef/0x340
[  366.044173][T19713]  __vmalloc_node_range_noprof+0x578/0x12d0
[  366.044184][T19713]  ? vb2_vmalloc_alloc+0xef/0x340
[  366.044206][T19713]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  366.044219][T19713]  ? __kasan_kmalloc+0x93/0xb0
[  366.044234][T19713]  vmalloc_user_noprof+0xad/0xf0
[  366.044245][T19713]  ? vb2_vmalloc_alloc+0xef/0x340
[  366.044254][T19713]  vb2_vmalloc_alloc+0xef/0x340
[  366.044277][T19713]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[  366.044286][T19713]  __vb2_queue_alloc+0x9c2/0x15a0
[  366.044306][T19713]  vb2_core_create_bufs+0x765/0xde0
[  366.044320][T19713]  ? __pfx_vb2_core_create_bufs+0x10/0x10
[  366.044329][T19713]  ? rcu_is_watching+0x15/0xb0
[  366.044340][T19713]  ? vb2_set_flags_and_caps+0x309/0x5f0
[  366.044355][T19713]  vb2_create_bufs+0x5b9/0xae0
[  366.044370][T19713]  ? __pfx_vb2_create_bufs+0x10/0x10
[  366.044383][T19713]  ? v4l_sanitize_format+0x5d6/0x9f0
[  366.044399][T19713]  v4l_create_bufs+0x18c/0x290
[  366.044413][T19713]  __video_do_ioctl+0xa59/0xc10
[  366.044426][T19713]  ? __pfx___video_do_ioctl+0x10/0x10
[  366.044441][T19713]  video_usercopy+0x82d/0x1450
[  366.044455][T19713]  ? __pfx___video_do_ioctl+0x10/0x10
[  366.044463][T19713]  ? __pfx_video_usercopy+0x10/0x10
[  366.044479][T19713]  ? __fget_files+0x3a0/0x420
[  366.044489][T19713]  v4l2_ioctl+0x18d/0x1e0
[  366.044498][T19713]  ? __pfx_v4l2_ioctl+0x10/0x10
[  366.044505][T19713]  __se_sys_ioctl+0xfc/0x170
[  366.044517][T19713]  do_syscall_64+0xfa/0xfa0
[  366.044527][T19713]  ? lockdep_hardirqs_on+0x9c/0x150
[  366.044537][T19713]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.044545][T19713]  ? exc_page_fault+0xab/0x100
[  366.044556][T19713]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.044564][T19713] RIP: 0033:0x7f925a38efc9
[  366.044572][T19713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  366.044580][T19713] RSP: 002b:00007f925b1aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  366.044611][T19713] RAX: ffffffffffffffda RBX: 00007f925a5e5fa0 RCX: 00007f925a38efc9
[  366.044622][T19713] RDX: 0000200000000000 RSI: 00000000c100565c RDI: 0000000000000005
[  366.044630][T19713] RBP: 00007f925a411f91 R08: 0000000000000000 R09: 0000000000000000
[  366.044637][T19713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  366.044645][T19713] R13: 00007f925a5e6038 R14: 00007f925a5e5fa0 R15: 00007fffd2a351b8
[  366.044662][T19713]  </TASK>
[  366.147573][T19713] Mem-Info:
[  366.148690][T19713] active_anon:4480 inactive_anon:0 isolated_anon:0
[  366.148690][T19713]  active_file:2077 inactive_file:38375 isolated_file:0
[  366.148690][T19713]  unevictable:1768 dirty:149 writeback:0
[  366.148690][T19713]  slab_reclaimable:11944 slab_unreclaimable:137299
[  366.148690][T19713]  mapped:18700 shmem:2459 pagetables:1132
[  366.148690][T19713]  sec_pagetables:0 bounce:0
[  366.148690][T19713]  kernel_misc_reclaimable:0
[  366.148690][T19713]  free:957456 free_pcp:21187 free_cma:0
[  366.164991][T19713] Node 0 active_anon:8232kB inactive_anon:0kB active_file:3272kB inactive_file:21648kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40464kB dirty:400kB writeback:0kB shmem:5108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8064kB pagetables:2644kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  366.174198][T19713] Node 1 active_anon:9688kB inactive_anon:0kB active_file:5036kB inactive_file:131852kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34336kB dirty:196kB writeback:0kB shmem:4728kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6032kB pagetables:1784kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  366.196095][T19713] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  366.207078][T19713] lowmem_reserve[]: 0 1597 2129 2129 2129
[  366.210628][T19713] Node 0 DMA32 free:1233332kB boost:0kB min:25140kB low:31424kB high:37708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB zspages:0kB present:2080636kB managed:1635840kB mlocked:0kB bounce:0kB free_pcp:27104kB local_pcp:12088kB free_cma:0kB
[  366.221575][T19713] lowmem_reserve[]: 0 0 531 531 531
[  366.223781][T19713] Node 0 Normal free:9120kB boost:0kB min:8516kB low:10644kB high:12772kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8148kB inactive_anon:0kB active_file:3272kB inactive_file:21640kB unevictable:3536kB writepending:400kB zspages:0kB present:1572868kB managed:544644kB mlocked:0kB bounce:0kB free_pcp:4856kB local_pcp:96kB free_cma:0kB
[  366.235759][T19713] lowmem_reserve[]: 0 0 0 0 0
[  366.237721][T19713] Node 1 Normal free:2572012kB boost:0kB min:56212kB low:70264kB high:84316kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9688kB inactive_anon:0kB active_file:5036kB inactive_file:131852kB unevictable:3536kB writepending:196kB zspages:0kB present:3670012kB managed:3594692kB mlocked:0kB bounce:0kB free_pcp:53236kB local_pcp:25932kB free_cma:0kB
[  366.249982][T19713] lowmem_reserve[]: 0 0 0 0 0
[  366.252110][T19713] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  366.258381][T19713] Node 0 DMA32: 1*4kB (M) 1*8kB (E) 1*16kB (E) 2*32kB (UM) 3*64kB (UME) 1*128kB (E) 2*256kB (ME) 5*512kB (UM) 3*1024kB (UME) 3*2048kB (M) 298*4096kB (M) = 1233308kB
[  366.265047][T19713] Node 0 Normal: 16*4kB (UM) 6*8kB (UM) 3*16kB (U) 36*32kB (UM) 49*64kB (M) 13*128kB (M) 8*256kB (M) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 9184kB
[  366.275360][T19713] Node 1 Normal: 2*4kB (E) 3*8kB (UME) 1*16kB (M) 78*32kB (UME) 69*64kB (UME) 37*128kB (M) 19*256kB (UM) 9*512kB (M) 7*1024kB (UM) 4*2048kB (UME) 619*4096kB (M) = 2571952kB
[  366.283353][T19713] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  366.286704][T19713] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  366.290084][T19713] 42911 total pagecache pages
[  366.291639][T19713] 0 pages in swap cache
[  366.293012][T19713] Free swap  = 124996kB
[  366.295334][T19713] Total swap = 124996kB
[  366.297267][T19713] 1834877 pages RAM
[  366.298592][T19713] 0 pages HighMem/MovableOnly
[  366.300135][T19713] 387243 pages reserved
[  366.302028][T19713] 0 pages cma reserved
[  366.886678][T19791] ip6_vti0 speed is unknown, defaulting to 1000
[  367.530545][T19815] syzkaller0: entered promiscuous mode
[  367.532822][T19815] syzkaller0: entered allmulticast mode
[  367.728657][T19826] ip6_vti0 speed is unknown, defaulting to 1000
[  368.356308][T19844] __nla_validate_parse: 11 callbacks suppressed
[  368.356325][T19844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4382'.
[  368.370494][T19841] syzkaller0: entered promiscuous mode
[  368.372458][T19841] syzkaller0: entered allmulticast mode
[  368.377804][T19841] 0: reclassify loop, rule prio 0, protocol 800
[  368.440600][T19849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4383'.
[  368.606836][T19862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4387'.
[  368.650760][T19862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4387'.
[  368.712296][T19866] netlink: zone id is out of range
[  368.714714][T19866] netlink: zone id is out of range
[  368.716668][T19866] netlink: zone id is out of range
[  368.718591][T19866] netlink: zone id is out of range
[  368.720494][T19866] netlink: zone id is out of range
[  368.722419][T19866] netlink: zone id is out of range
[  368.726571][T19866] netlink: zone id is out of range
[  368.728156][T19866] netlink: zone id is out of range
[  368.729768][T19866] netlink: zone id is out of range
[  368.799455][T19870] gre4: entered promiscuous mode
[  368.800936][T19870] gre4: entered allmulticast mode
[  368.958044][T19877] binder: 19876:19877 ioctl 400c620e 2000000000c0 returned -22
[  368.969936][T19877] mkiss: ax0: crc mode is auto.
[  369.052503][T19879] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4395'.
[  369.056346][T19879] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4395'.
[  369.319685][T19892] ip6_vti0 speed is unknown, defaulting to 1000
[  369.912271][T19917] netlink: 22 bytes leftover after parsing attributes in process `syz.2.4404'.
[  369.931182][T19919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4406'.
[  369.996962][T19919] rdma_rxe: rxe_newlink: failed to add vxcan1
[  370.156739][T19928] tipc: Enabling of bearer <ib:caif0> rejected, failed to enable media
[  370.497597][T19955] ubi: mtd0 is already attached to ubi14
[  370.910026][T19990] bond24: option tlb_dynamic_lb: invalid value (3)
[  371.142082][T19990] bond24 (unregistering): Released all slaves
[  371.247634][T20000] validate_nla: 49 callbacks suppressed
[  371.247649][T20000] netlink: 'syz.1.4432': attribute type 21 has an invalid length.
[  371.251846][T20000] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4432'.
[  371.260618][T20001] syzkaller0: entered promiscuous mode
[  371.262300][T20001] syzkaller0: entered allmulticast mode
[  371.345314][T20007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4434'.
[  371.412661][T20003] ip6_vti0 speed is unknown, defaulting to 1000
[  373.087974][T20073] random: crng reseeded on system resumption
[  373.364562][T20104] __nla_validate_parse: 15 callbacks suppressed
[  373.364579][T20104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4458'.
[  373.370473][T20104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4458'.
[  373.373890][T20104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4458'.
[  373.434017][T20111] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4460'.
[  373.593247][T20124] net_ratelimit: 2 callbacks suppressed
[  373.593258][T20124] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  373.656403][T20129] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4464'.
[  373.692729][T20133] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  373.739899][T20134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4465'.
[  373.841307][T20144] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4470'.
[  373.847895][T20144] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4470'.
[  373.893712][T20149] netlink: 'syz.2.4472': attribute type 101 has an invalid length.
[  373.897265][T20149] netlink: 'syz.2.4472': attribute type 7 has an invalid length.
[  373.931724][T20150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4473'.
[  373.934851][T20150] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4473'.
[  373.948755][T20150] bond19: option primary_reselect: invalid value (255)
[  373.952170][T20150] bond19 (unregistering): Released all slaves
[  373.970477][T20154] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  373.972902][T20156] syzkaller0: entered promiscuous mode
[  373.975121][T20156] syzkaller0: entered allmulticast mode
[  373.979219][T20154] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  373.992468][T20153] tipc: Resetting bearer <eth:syzkaller0>
[  374.006557][T20153] tipc: Disabling bearer <eth:syzkaller0>
[  374.083314][T20168] netlink: 'syz.0.4477': attribute type 2 has an invalid length.
[  374.151544][T20174] netlink: 'syz.0.4480': attribute type 21 has an invalid length.
[  374.153886][T20174] IPv6: NLM_F_CREATE should be specified when creating new route
[  374.156891][T20174] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  374.159124][T20174] IPv6: NLM_F_CREATE should be set when creating new route
[  374.161369][T20174] IPv6: NLM_F_CREATE should be set when creating new route
[  374.163608][T20174] IPv6: NLM_F_CREATE should be set when creating new route
[  374.179031][T20174] netlink: 'syz.0.4480': attribute type 5 has an invalid length.
[  374.220645][T20175] 1X: left allmulticast mode
[  374.226358][T20175] bond21: left promiscuous mode
[  374.228136][T20175] bond21: left allmulticast mode
[  374.232758][T20175] bond24: left promiscuous mode
[  374.240391][T20175] bond25: left promiscuous mode
[  374.242151][T20175] bond25: left allmulticast mode
[  374.251087][T20175] gre4: left promiscuous mode
[  374.252745][T20175] gre4: left allmulticast mode
[  374.257418][   T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  374.261173][   T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  374.264819][   T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  374.268131][   T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  374.352258][T20188] netlink: 'syz.2.4484': attribute type 4 has an invalid length.
[  374.362420][T20186] 8021q: adding VLAN 0 to HW filter on device bond19
[  374.521729][T20204] netlink: 'syz.2.4492': attribute type 29 has an invalid length.
[  374.600033][T20210] netlink: 'syz.2.4495': attribute type 1 has an invalid length.
[  374.602603][T20210] netlink: 'syz.2.4495': attribute type 4 has an invalid length.
[  374.647618][T20212] gretap4: entered allmulticast mode
[  374.788500][T20231] dlm: non-version read from control device 8224
[  374.823243][T20235] syzkaller0: entered promiscuous mode
[  374.826447][T20235] syzkaller0: entered allmulticast mode
[  374.942868][T20250] syzkaller0: entered promiscuous mode
[  374.944778][T20250] syzkaller0: entered allmulticast mode
[  375.109145][T20266] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  375.111632][T20266] syzkaller0: entered promiscuous mode
[  375.113222][T20266] syzkaller0: entered allmulticast mode
[  375.120720][T20265] tipc: Resetting bearer <eth:syzkaller0>
[  375.145593][T20270] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  375.149478][T20265] tipc: Disabling bearer <eth:syzkaller0>
[  375.205466][T20270] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  375.261408][T20276] ip6_vti0 speed is unknown, defaulting to 1000
[  376.740213][T20342] ip6_vti0 speed is unknown, defaulting to 1000
[  377.070607][T20360] nbd: must specify a size in bytes for the device
[  377.119221][T20363] batadv3: entered promiscuous mode
[  377.121242][T20363] batadv3: entered allmulticast mode
[  377.124091][T20363] 8021q: adding VLAN 0 to HW filter on device batadv3
[  377.229189][T20371] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check.
[  378.042886][T20412] ip6_vti0 speed is unknown, defaulting to 1000
[  378.547201][T20432] ip6_vti0 speed is unknown, defaulting to 1000
[  378.658009][T20441] __nla_validate_parse: 25 callbacks suppressed
[  378.658019][T20441] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4567'.
[  378.757034][T20441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4567'.
[  378.761707][T20441] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4567'.
[  378.925020][T20448] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4570'.
[  378.954199][T20450] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  379.015952][T20455] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  379.285279][T20469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4577'.
[  379.288603][T20469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4577'.
[  379.296215][T20470] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4577'.
[  379.332185][T20482] syzkaller0: entered promiscuous mode
[  379.338513][T20482] syzkaller0: entered allmulticast mode
[  379.402405][T20489] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4585'.
[  379.479558][T20496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4588'.
[  379.625310][T20508] syzkaller1: entered promiscuous mode
[  379.627505][T20508] syzkaller1: entered allmulticast mode
[  379.780581][T20512] ip6_vti0 speed is unknown, defaulting to 1000
[  380.180537][T20520] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4596'.
[  380.588942][T20537] validate_nla: 1 callbacks suppressed
[  380.588952][T20537] netlink: 'syz.0.4604': attribute type 1 has an invalid length.
[  380.613498][T20537] 8021q: adding VLAN 0 to HW filter on device bond20
[  380.673728][T20543] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  380.851436][T20552] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  381.078470][T20569] smc: net device bond0 erased user defined pnetid SYZ0
[  381.102305][T20569] vlan4: entered promiscuous mode
[  381.106263][T20569] vlan1: entered promiscuous mode
[  381.108069][T20569] team0: entered promiscuous mode
[  381.109794][T20569] team_slave_1: entered promiscuous mode
[  381.112824][T20569] bridge1: entered promiscuous mode
[  381.116619][T20569] bridge12: entered promiscuous mode
[  381.291422][T20587] sctp: [Deprecated]: syz.1.4617 (pid 20587) Use of int in max_burst socket option deprecated.
[  381.291422][T20587] Use struct sctp_assoc_value instead
[  381.407033][T20593] ip6_vti0 speed is unknown, defaulting to 1000
[  381.442619][T20601] xt_TCPMSS: Only works on TCP SYN packets
[  381.587384][T20599] ip6_vti0 speed is unknown, defaulting to 1000
[  381.967884][T20615] netlink: 'syz.0.4626': attribute type 1 has an invalid length.
[  382.178674][T20628] ip6_vti0 speed is unknown, defaulting to 1000
[  382.215562][T20633] netlink: 'syz.1.4633': attribute type 5 has an invalid length.
[  383.051333][T20642] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  383.051591][T20649] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  383.053736][T20642] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  383.117995][T20678] netlink: 'syz.0.4642': attribute type 12 has an invalid length.
[  383.263158][T20695] ip6gre1: entered promiscuous mode
[  383.323565][T20695] ata3.00: invalid multi_count 1 ignored
[  383.761233][T20722] __nla_validate_parse: 9 callbacks suppressed
[  383.761246][T20722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4658'.
[  383.772664][T20722] netlink: 'syz.1.4658': attribute type 5 has an invalid length.
[  383.784054][T20722] netlink: 'syz.1.4658': attribute type 8 has an invalid length.
[  383.788761][T20722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4658'.
[  383.798385][T20722] geneve4: entered promiscuous mode
[  383.800537][T20722] geneve4: entered allmulticast mode
[  383.804193][ T5857] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  383.807356][ T5857] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  383.810420][ T5857] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  383.813511][ T5857] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  383.888451][T20736] 8021q: adding VLAN 0 to HW filter on device bond24
[  383.892190][T20736] bond24: entered promiscuous mode
[  383.894459][T20736] bond0: (slave bond24): Enslaving as an active interface with a down link
[  383.903227][T20736] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4662'.
[  383.937143][T20740] netlink: 'syz.1.4663': attribute type 2 has an invalid length.
[  384.186077][T20751] netlink: 'syz.1.4668': attribute type 13 has an invalid length.
[  384.250424][ T5857] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  384.254765][ T5857] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  384.257256][ T5857] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  384.259531][ T5857] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  384.326151][T20754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4669'.
[  384.344883][ T5200] Bluetooth: hci1: command 0x0c1a tx timeout
[  384.372592][T20759] dvmrp8: entered allmulticast mode
[  384.391310][T20759] ip6_vti0 speed is unknown, defaulting to 1000
[  384.534063][T20765] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  384.598692][T20758] dvmrp8: left allmulticast mode
[  384.726805][T20778] netlink: 'syz.1.4674': attribute type 1 has an invalid length.
[  384.750792][T20778] workqueue: Failed to create a rescuer kthread for wq "bond25": -EINTR
[  385.065476][ T5200] Bluetooth: hci2: command 0x0c1a tx timeout
[  385.121409][T20804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4680'.
[  385.127488][T20799] warn_alloc: 1 callbacks suppressed
[  385.127502][T20799] syz.2.4680: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  385.135876][T20799] CPU: 0 UID: 0 PID: 20799 Comm: syz.2.4680 Not tainted syzkaller #0 PREEMPT(full) 
[  385.135890][T20799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  385.135896][T20799] Call Trace:
[  385.135900][T20799]  <TASK>
[  385.135905][T20799]  dump_stack_lvl+0x189/0x250
[  385.135922][T20799]  ? __pfx_dump_stack_lvl+0x10/0x10
[  385.135935][T20799]  ? __pfx__printk+0x10/0x10
[  385.135944][T20799]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  385.135955][T20799]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  385.135967][T20799]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  385.135995][T20799]  warn_alloc+0x214/0x310
[  385.136010][T20799]  ? stack_depot_save_flags+0x40/0x860
[  385.136025][T20799]  ? __pfx_warn_alloc+0x10/0x10
[  385.136045][T20799]  ? kasan_save_track+0x3e/0x80
[  385.136059][T20799]  ? __kasan_kmalloc+0x93/0xb0
[  385.136076][T20799]  ? xsk_setsockopt+0x4dc/0x8d0
[  385.136089][T20799]  ? do_sock_setsockopt+0x17c/0x1b0
[  385.136097][T20799]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  385.136104][T20799]  ? do_syscall_64+0xfa/0xfa0
[  385.136114][T20799]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.136127][T20799]  __vmalloc_node_range_noprof+0x125/0x12d0
[  385.136154][T20799]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  385.136167][T20799]  ? __kasan_kmalloc+0x93/0xb0
[  385.136181][T20799]  vmalloc_user_noprof+0xad/0xf0
[  385.136192][T20799]  ? xskq_create+0xbf/0x170
[  385.136234][T20799]  xskq_create+0xbf/0x170
[  385.136247][T20799]  xsk_init_queue+0xb0/0x110
[  385.136257][T20799]  xsk_setsockopt+0x4dc/0x8d0
[  385.136267][T20799]  ? __pfx_xsk_setsockopt+0x10/0x10
[  385.136277][T20799]  ? __pfx_aa_sk_perm+0x10/0x10
[  385.136289][T20799]  ? aa_sock_opt_perm+0xff/0x1b0
[  385.136302][T20799]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  385.136310][T20799]  ? __pfx_xsk_setsockopt+0x10/0x10
[  385.136323][T20799]  do_sock_setsockopt+0x17c/0x1b0
[  385.136340][T20799]  __x64_sys_setsockopt+0x13f/0x1b0
[  385.136359][T20799]  do_syscall_64+0xfa/0xfa0
[  385.136374][T20799]  ? lockdep_hardirqs_on+0x9c/0x150
[  385.136385][T20799]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.136393][T20799]  ? exc_page_fault+0xab/0x100
[  385.136404][T20799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.136412][T20799] RIP: 0033:0x7f853398efc9
[  385.136421][T20799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  385.136428][T20799] RSP: 002b:00007f853485c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  385.136438][T20799] RAX: ffffffffffffffda RBX: 00007f8533be5fa0 RCX: 00007f853398efc9
[  385.136451][T20799] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b
[  385.136456][T20799] RBP: 00007f8533a11f91 R08: 0000000000000004 R09: 0000000000000000
[  385.136461][T20799] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  385.136467][T20799] R13: 00007f8533be6038 R14: 00007f8533be5fa0 R15: 00007ffeedd07f98
[  385.136482][T20799]  </TASK>
[  385.136738][T20799] Mem-Info:
[  385.136892][T20822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4684'.
[  385.139816][T20799] active_anon:4505 inactive_anon:0 isolated_anon:0
[  385.139816][T20799]  active_file:2141 inactive_file:38383 isolated_file:0
[  385.139816][T20799]  unevictable:1768 dirty:193 writeback:0
[  385.139816][T20799]  slab_reclaimable:12108 slab_unreclaimable:142522
[  385.139816][T20799]  mapped:18747 shmem:2459 pagetables:1164
[  385.139816][T20799]  sec_pagetables:0 bounce:0
[  385.139816][T20799]  kernel_misc_reclaimable:0
[  385.139816][T20799]  free:1082961 free_pcp:21145 free_cma:0
[  385.205411][T20817] netlink: 'syz.1.4685': attribute type 1 has an invalid length.
[  385.207164][T20799] Node 0 active_anon:8224kB inactive_anon:0kB active_file:3276kB inactive_file:21672kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40684kB dirty:500kB writeback:0kB shmem:5108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8344kB pagetables:2940kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  385.263326][T20799] Node 1 active_anon:17712kB inactive_anon:0kB active_file:5288kB inactive_file:131860kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42304kB dirty:272kB writeback:0kB shmem:12728kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6008kB pagetables:1716kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  385.272699][T20799] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  385.281467][T20799] lowmem_reserve[]: 0 1597 2129 2129 2129
[  385.283233][T20799] Node 0 DMA32 free:1481936kB boost:0kB min:25140kB low:31424kB high:37708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:16kB unevictable:0kB writepending:4kB zspages:0kB present:2080636kB managed:1635840kB mlocked:0kB bounce:0kB free_pcp:25976kB local_pcp:10540kB free_cma:0kB
[  385.292966][T20799] lowmem_reserve[]: 0 0 531 531 531
[  385.294760][T20799] Node 0 Normal free:25076kB boost:0kB min:8516kB low:10644kB high:12772kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8240kB inactive_anon:0kB active_file:3272kB inactive_file:21656kB unevictable:3536kB writepending:496kB zspages:0kB present:1572868kB managed:544644kB mlocked:0kB bounce:0kB free_pcp:4572kB local_pcp:4436kB free_cma:0kB
[  385.305542][T20799] lowmem_reserve[]: 0 0 0 0 0
[  385.307314][T20799] Node 1 Normal free:2801220kB boost:0kB min:56212kB low:70264kB high:84316kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19812kB inactive_anon:0kB active_file:5288kB inactive_file:131860kB unevictable:3536kB writepending:272kB zspages:0kB present:3670012kB managed:3594692kB mlocked:0kB bounce:0kB free_pcp:52280kB local_pcp:31864kB free_cma:0kB
[  385.317631][T20799] lowmem_reserve[]: 0 0 0 0 0
[  385.319622][T20799] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  385.324469][T20799] Node 0 DMA32: 190*4kB (UME) 205*8kB (UME) 97*16kB (UME) 45*32kB (UM) 139*64kB (UM) 180*128kB (UME) 155*256kB (UME) 132*512kB (UME) 108*1024kB (UM) 13*2048kB (UM) 293*4096kB (UM) = 1481936kB
[  385.330965][T20799] Node 0 Normal: 658*4kB (UM) 406*8kB (UM) 296*16kB (UM) 150*32kB (UM) 78*64kB (UM) 12*128kB (M) 8*256kB (M) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 25016kB
[  385.336926][T20799] Node 1 Normal: 81*4kB (UE) 446*8kB (UM) 696*16kB (UME) 527*32kB (UME) 380*64kB (UME) 241*128kB (UME) 110*256kB (UME) 100*512kB (UME) 88*1024kB (UME) 4*2048kB (UM) 619*4096kB (M) = 2800148kB
[  385.342740][T20799] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  385.345823][T20799] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  385.349216][T20799] 45833 total pagecache pages
[  385.350933][T20799] 0 pages in swap cache
[  385.352541][T20799] Free swap  = 124996kB
[  385.354072][T20799] Total swap = 124996kB
[  385.355843][T20799] 1834877 pages RAM
[  385.357253][T20799] 0 pages HighMem/MovableOnly
[  385.358931][T20799] 387243 pages reserved
[  385.360448][T20799] 0 pages cma reserved
[  385.451153][T20831] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4688'.
[  385.605993][T20855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4695'.
[  385.768238][T20868] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4695'.
[  386.141433][T20886] validate_nla: 1 callbacks suppressed
[  386.141448][T20886] netlink: 'syz.1.4704': attribute type 5 has an invalid length.
[  386.603341][T20916] 8021q: adding VLAN 0 to HW filter on device team0
[  386.609039][T20916] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  386.667036][T20914] bridge_slave_1: entered promiscuous mode
[  386.806541][T20921] netlink: 'syz.2.4715': attribute type 1 has an invalid length.
[  386.839270][T20921] bond26: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  386.843904][ T5687] bond26: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  386.844904][T20921] 8021q: adding VLAN 0 to HW filter on device bond26
[  386.954789][   T12] bond26: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  387.144520][   T57] Bluetooth: hci2: command 0x0c1a tx timeout
[  387.154535][T20933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4719'.
[  387.370664][T20938] netlink: 'syz.1.4721': attribute type 4 has an invalid length.
[  387.515708][T20948] QAT: Invalid ioctl -1068473177
[  387.799607][T20980] binder: 20979:20980 ioctl 5000940e 2000000010c0 returned -22
[  387.808564][T20982] netlink: 'syz.0.4735': attribute type 1 has an invalid length.
[  387.810866][T20982] NCSI netlink: No device for ifindex 0
[  387.840780][T20984] netlink: 'syz.2.4736': attribute type 6 has an invalid length.
[  388.168352][T21011] wg1: entered promiscuous mode
[  388.170189][T21011] wg1: entered allmulticast mode
[  388.579104][T21021] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  388.596575][T21023] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  388.668708][T21028] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  388.850957][T21042] netlink: 'syz.2.4753': attribute type 11 has an invalid length.
[  389.111092][T21067] blkio.reset_stats is deprecated
[  389.159666][T21076] netlink: 'syz.1.4763': attribute type 1 has an invalid length.
[  389.177808][T21076] __nla_validate_parse: 8 callbacks suppressed
[  389.177819][T21076] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4763'.
[  389.519787][T21098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4768'.
[  389.525447][T21098] netlink: 'syz.0.4768': attribute type 4 has an invalid length.
[  389.540525][T21098] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.4768'.
[  389.689807][T21103] pimreg: entered allmulticast mode
[  389.692729][T21103] pimreg: left allmulticast mode
[  389.812281][T21114] vti1: entered promiscuous mode
[  389.872495][T21116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4774'.
[  389.875778][T21116] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4774'.
[  390.008555][T21127] can: request_module (can-proto-4) failed.
[  390.017280][T21130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4776'.
[  390.042578][T21130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4776'.
[  390.052024][T21130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4776'.
[  390.056943][T21130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4776'.
[  390.059667][T21130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4776'.
[  390.118682][T21137] syzkaller1: entered promiscuous mode
[  390.120302][T21137] syzkaller1: entered allmulticast mode
[  390.470242][T21161] netlink: 'syz.2.4785': attribute type 1 has an invalid length.
[  391.212008][T21182] netlink: 'syz.0.4789': attribute type 10 has an invalid length.
[  391.313822][T21186] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode
[  391.319215][T21186] nbd: must specify at least one socket
[  391.421236][T21198] netlink: 'syz.1.4796': attribute type 1 has an invalid length.
[  391.440096][T21196] netlink: 'syz.0.4795': attribute type 11 has an invalid length.
[  391.717442][T21210] x_tables: duplicate underflow at hook 1
[  391.799359][T21224] syzkaller0: entered promiscuous mode
[  391.801065][T21224] syzkaller0: entered allmulticast mode
[  391.803604][T21223] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  391.892228][T21221] tipc: Resetting bearer <eth:syzkaller0>
[  391.910185][T21221] tipc: Disabling bearer <eth:syzkaller0>
[  392.056122][T21240] dvmrp0: left allmulticast mode
[  392.491081][T21267] netlink: 'syz.1.4820': attribute type 1 has an invalid length.
[  392.515021][T21267] bond26: entered promiscuous mode
[  392.517202][T21267] 8021q: adding VLAN 0 to HW filter on device bond26
[  392.850702][T21292] netlink: 'syz.0.4825': attribute type 11 has an invalid length.
[  392.917017][T21295] ip6t_rpfilter: unknown options
[  392.953657][T21295] bond21: option updelay: invalid value (18446744073709551607)
[  392.961247][T21295] bond21: option updelay: allowed values 0 - 2147483647
[  392.964781][T21295] bond21 (unregistering): Released all slaves
[  393.436221][   T33] audit: type=1107 audit(1761785477.709:10): pid=21321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  393.444117][T21322] 
[  393.444888][T21322] ======================================================
[  393.446989][T21322] WARNING: possible circular locking dependency detected
[  393.449065][T21322] syzkaller #0 Not tainted
[  393.450541][T21322] ------------------------------------------------------
[  393.451980][T21326] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  393.453195][T21322] syz.1.4837/21322 is trying to acquire lock:
[  393.453203][T21322] ffffffff8f425298 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50
[  393.453228][T21322] 
[  393.453228][T21322] but task is already holding lock:
[  393.453231][T21322] ffff88810fd4f870 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[  393.453248][T21322] 
[  393.453248][T21322] which lock already depends on the new lock.
[  393.453248][T21322] 
[  393.453252][T21322] 
[  393.453252][T21322] the existing dependency chain (in reverse order) is:
[  393.453255][T21322] 
[  393.453255][T21322] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  393.453266][T21322]        lock_acquire+0x120/0x360
[  393.453274][T21322]        _raw_spin_lock_bh+0x36/0x50
[  393.453283][T21322]        nr_rt_device_down+0x12a/0x720
[  393.453290][T21322]        nr_device_event+0x137/0x150
[  393.453296][T21322]        notifier_call_chain+0x1b6/0x3e0
[  393.453304][T21322]        netif_close_many+0x29c/0x410
[  393.453314][T21322]        netif_close+0x158/0x210
[  393.453323][T21322]        dev_close+0x10a/0x220
[  393.453328][T21322]        bpq_device_event+0x377/0x6a0
[  393.453335][T21322]        notifier_call_chain+0x1b6/0x3e0
[  393.453343][T21322]        netif_close_many+0x29c/0x410
[  393.453351][T21322]        netif_close+0x158/0x210
[  393.453360][T21322]        dev_close+0x10a/0x220
[  393.453365][T21322]        bond_setup_by_slave+0x5f/0x3f0
[  393.453376][T21322]        bond_enslave+0x6ca/0x3860
[  393.453385][T21322]        bond_do_ioctl+0x635/0x9b0
[  393.453392][T21322]        dev_ifsioc+0x90b/0xf00
[  393.453402][T21322]        dev_ioctl+0x7b4/0x1150
[  393.453411][T21322]        sock_do_ioctl+0x22c/0x300
[  393.453419][T21322]        sock_ioctl+0x576/0x790
[  393.453426][T21322]        __se_sys_ioctl+0xfc/0x170
[  393.453435][T21322]        do_syscall_64+0xfa/0xfa0
[  393.453443][T21322]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.453451][T21322] 
[  393.453451][T21322] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  393.453462][T21322]        lock_acquire+0x120/0x360
[  393.453468][T21322]        _raw_spin_lock_bh+0x36/0x50
[  393.453475][T21322]        nr_rt_device_down+0xa9/0x720
[  393.453481][T21322]        nr_device_event+0x137/0x150
[  393.453487][T21322]        notifier_call_chain+0x1b6/0x3e0
[  393.453495][T21322]        netif_close_many+0x29c/0x410
[  393.456581][T21326] syzkaller0: entered promiscuous mode
[  393.457609][T21322]        netif_close+0x158/0x210
[  393.457632][T21322]        dev_close+0x10a/0x220
[  393.457640][T21322]        bpq_device_event+0x377/0x6a0
[  393.457646][T21322]        notifier_call_chain+0x1b6/0x3e0
[  393.457655][T21322]        netif_close_many+0x29c/0x410
[  393.461030][T21326] syzkaller0: entered allmulticast mode
[  393.463029][T21322]        netif_close+0x158/0x210
[  393.463043][T21322]        dev_close+0x10a/0x220
[  393.463053][T21322]        bond_setup_by_slave+0x5f/0x3f0
[  393.463063][T21322]        bond_enslave+0x6ca/0x3860
[  393.541176][T21322]        bond_do_ioctl+0x635/0x9b0
[  393.542752][T21322]        dev_ifsioc+0x90b/0xf00
[  393.544224][T21322]        dev_ioctl+0x7b4/0x1150
[  393.545736][T21322]        sock_do_ioctl+0x22c/0x300
[  393.547499][T21322]        sock_ioctl+0x576/0x790
[  393.549046][T21322]        __se_sys_ioctl+0xfc/0x170
[  393.550534][T21322]        do_syscall_64+0xfa/0xfa0
[  393.551990][T21322]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.553827][T21322] 
[  393.553827][T21322] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  393.556113][T21322]        validate_chain+0xb9b/0x2140
[  393.557753][T21322]        __lock_acquire+0xab9/0xd20
[  393.559363][T21322]        lock_acquire+0x120/0x360
[  393.560830][T21322]        _raw_spin_lock_bh+0x36/0x50
[  393.562350][T21322]        nr_rt_ioctl+0x390/0xd50
[  393.563790][T21322]        sock_do_ioctl+0xdc/0x300
[  393.565330][T21322]        sock_ioctl+0x576/0x790
[  393.566750][T21322]        __se_sys_ioctl+0xfc/0x170
[  393.568230][T21322]        do_syscall_64+0xfa/0xfa0
[  393.569797][T21322]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.571773][T21322] 
[  393.571773][T21322] other info that might help us debug this:
[  393.571773][T21322] 
[  393.574719][T21322] Chain exists of:
[  393.574719][T21322]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  393.574719][T21322] 
[  393.579027][T21322]  Possible unsafe locking scenario:
[  393.579027][T21322] 
[  393.581712][T21322]        CPU0                    CPU1
[  393.583366][T21322]        ----                    ----
[  393.584955][T21322]   lock(&nr_node->node_lock);
[  393.586624][T21322]                                lock(nr_node_list_lock);
[  393.589268][T21322]                                lock(&nr_node->node_lock);
[  393.591960][T21322]   lock(nr_neigh_list_lock);
[  393.593691][T21322] 
[  393.593691][T21322]  *** DEADLOCK ***
[  393.593691][T21322] 
[  393.596620][T21322] 2 locks held by syz.1.4837/21322:
[  393.598560][T21322]  #0: ffffffff8f4252f8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50
[  393.601793][T21322]  #1: ffff88810fd4f870 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[  393.604571][T21322] 
[  393.604571][T21322] stack backtrace:
[  393.606302][T21322] CPU: 0 UID: 0 PID: 21322 Comm: syz.1.4837 Not tainted syzkaller #0 PREEMPT(full) 
[  393.606313][T21322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  393.606319][T21322] Call Trace:
[  393.606325][T21322]  <TASK>
[  393.606329][T21322]  dump_stack_lvl+0x189/0x250
[  393.606343][T21322]  ? __pfx_dump_stack_lvl+0x10/0x10
[  393.606354][T21322]  ? __pfx__printk+0x10/0x10
[  393.606361][T21322]  ? stack_trace_save+0x9c/0xe0
[  393.606373][T21322]  print_circular_bug+0x2ee/0x310
[  393.606384][T21322]  check_noncircular+0x134/0x160
[  393.606393][T21322]  validate_chain+0xb9b/0x2140
[  393.606406][T21322]  __lock_acquire+0xab9/0xd20
[  393.606415][T21322]  ? nr_rt_ioctl+0x390/0xd50
[  393.606422][T21322]  lock_acquire+0x120/0x360
[  393.606429][T21322]  ? nr_rt_ioctl+0x390/0xd50
[  393.606437][T21322]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  393.606448][T21322]  ? nr_rt_ioctl+0x390/0xd50
[  393.606455][T21322]  _raw_spin_lock_bh+0x36/0x50
[  393.606464][T21322]  ? nr_rt_ioctl+0x390/0xd50
[  393.606471][T21322]  nr_rt_ioctl+0x390/0xd50
[  393.606481][T21322]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  393.606488][T21322]  ? lockdep_hardirqs_on+0x9c/0x150
[  393.606499][T21322]  ? apparmor_capable+0x137/0x1b0
[  393.606509][T21322]  ? capable+0x89/0xe0
[  393.606517][T21322]  ? nr_ioctl+0x1b1/0x3b0
[  393.606528][T21322]  sock_do_ioctl+0xdc/0x300
[  393.606538][T21322]  ? __pfx_sock_do_ioctl+0x10/0x10
[  393.606549][T21322]  sock_ioctl+0x576/0x790
[  393.606558][T21322]  ? __pfx_sock_ioctl+0x10/0x10
[  393.606567][T21322]  ? __fget_files+0x3a0/0x420
[  393.606591][T21322]  ? __fget_files+0x2a/0x420
[  393.606599][T21322]  ? bpf_lsm_file_ioctl+0x9/0x20
[  393.606608][T21322]  ? __pfx_sock_ioctl+0x10/0x10
[  393.606616][T21322]  __se_sys_ioctl+0xfc/0x170
[  393.606626][T21322]  do_syscall_64+0xfa/0xfa0
[  393.606636][T21322]  ? lockdep_hardirqs_on+0x9c/0x150
[  393.606644][T21322]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.606651][T21322]  ? exc_page_fault+0xab/0x100
[  393.606660][T21322]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.606668][T21322] RIP: 0033:0x7f925a38efc9
[  393.606675][T21322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  393.606683][T21322] RSP: 002b:00007f925b1aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  393.606692][T21322] RAX: ffffffffffffffda RBX: 00007f925a5e5fa0 RCX: 00007f925a38efc9
[  393.606698][T21322] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 000000000000000c
[  393.606702][T21322] RBP: 00007f925a411f91 R08: 0000000000000000 R09: 0000000000000000
[  393.606707][T21322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  393.606712][T21322] R13: 00007f925a5e6038 R14: 00007f925a5e5fa0 R15: 00007fffd2a351b8
[  393.606721][T21322]  </TASK>
[  393.697804][T21329] tipc: Resetting bearer <eth:syzkaller0>
[  393.704691][T21325] tipc: Resetting bearer <eth:syzkaller0>
[  393.708131][T21325] tipc: Disabling bearer <eth:syzkaller0>

VM DIAGNOSIS:
00:51:17  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900051cf130
R8 =ffff8881094f0237 R9 =1ffff1102129e046 R10=dffffc0000000000 R11=ffffffff8514bbe0
R12=dffffc0000000000 R13=ffffffff997d4918 R14=ffffffff99ae7f00 R15=0000000000000000
RIP=ffffffff8514bc5c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f925b1aa6c0 ffffffff 00c00000
GS =0000 ffff88818eb40000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f925b168d58 CR3=0000000111fe0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f925a5b7498 00007f925a5b7470 XMM03=00007f925a5b74a8 00007f925a5b74a0
XMM04=00007f925b11d100 00007f925a5b7460 XMM05=00007f925a5b7478 00007f925a5b74c0
XMM06=00007f925a5b74b8 00007f925a5b74b0 XMM07=00007f925a5b74a8 00007f925a5b74a0
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f925a41315a
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff920008d4d3c RBX=ffffffff997d48e0 RCX=dffffc0000000000 RDX=ffffc900046a69e0
RSI=0000000000001a50 RDI=ffffffff8de55040 RBP=ffffc900046a6a70 RSP=ffffc900046a6898
R8 =ffffc900046a69b7 R9 =0000000000000000 R10=ffffc900046a6960 R11=fffff520008d4d37
R12=ffffc900046a6960 R13=1ffff920008d4d20 R14=0000000000001a50 R15=0000000000000800
RIP=ffffffff81a15f30 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f853485c6c0 ffffffff 00c00000
GS =0000 ffff8882a9f40000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8533974f00 CR3=000000016e468000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffffffff00000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007f853471d100 00007f8533bb7460 XMM05=00007f8533bb7478 00007f8533bb74c0
XMM06=00007f8533bb74b8 00007f8533bb74b0 XMM07=00007f8533bb74a8 00007f8533bb74a0
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f8533a1315a
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
