last executing test programs:

2.699586716s ago: executing program 2 (id=8720):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000005c0)=0x200000, 0x4)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r2=>0x0})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000600)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, <r3=>0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000a00)={r3, "39d6cfe671413529c5fe10b1370d9ef1"})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x800, 0x4)

2.684045778s ago: executing program 1 (id=8723):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x3)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
recvmmsg(r1, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x20000020, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, <r3=>0xffffffffffffffff}, 0x0, 0x0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r3}, 0x8)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c40)={0x6, 0x3, &(0x7f0000001d40)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYBLOB="c9f3dbbea3fc7a52316ebe9988e06d7d9eb33dec2eabec6575456cbffe476813b9f0a434ead9d63335b25e901545e6ea4bd453ecff72f6b0fc635ed44f8c516c9b5a6b9e3d3656af323feb6738d7d0f8170c958fde01046c8fbadc3f35c92dfc3b082fb14320bc3555e561d225b9bed4a4a57676766cf6beb72014d63b998b48144113a01ffb608907bdb6c6c51e105c94066294a19d0e1155cabc4a167f913b6a4de6d268aea91e2eb1b947822c00", @ANYBLOB="d099bf0fcc20a53b5e57768749971c8710d075aefb656352d125864a37e61e061138b4aa62d4dce9218fc420872c7b98b4a62994218e6bd74f938f1a95a0cb9499f9e4cf077af1535a3e08f18ce1dcd17a52a47a6c963921b27925873f592bb118cd6e000b3786404d97b748f306f01deb665cc513728bf94eb48b0584a8acc7b778dadfd4977fd840ccef26a8c3de1b668f2e394d8783f9d073f590d0ffb97bddfafe8d69494b106b4ea563b09844e69c1c2a28c6d48633ac0012e6d142a1730f8b539085d6a51ef60b89e161e76d355a72a3211b712b14ca8e"], 0x0, 0x2003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$int_in(r5, 0x5452, &(0x7f0000000280)=0x3a0af83a)
shutdown(r5, 0x1)
listen(r5, 0x28)
poll(&(0x7f0000000080)=[{r5, 0x408}], 0x1, 0x40000400)
shutdown(r5, 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001900)={r4, 0xe0, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2d, &(0x7f00000006c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000700), 0x0, 0x0, 0x2a, 0x8, 0x8, &(0x7f0000000780)}}, 0x10)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000001940)={r0, 0x0, 0x10001, 0x7})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001a80)={{r6}, &(0x7f0000001a00), &(0x7f0000001a40)='%pI4   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001ac0), 0x4)

1.887907683s ago: executing program 2 (id=8730):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000000)=0x8, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)={0x34, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0x9, 0x14, 0x0, 0x1, [@nested={0x4, 0x2}, @generic="13"]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

1.790123159s ago: executing program 1 (id=8733):
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x1, @remote, 0x1000}], 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd70000000001f29000000180001801400020064756d6d7930"], 0x2c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00001900000000006fab5ceb30366bccf7d9dd0b6ffe010000000000"], 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={r5, &(0x7f0000000340)="b8e736880bbcd7e87aa6bf262ebf97b4db173c0a930dfa4356fce74171648c6164b3e65a1b1c260ac53bb790b5b6e062c3", &(0x7f0000000380)=""/56, 0x4}, 0x20)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = socket$nl_crypto(0x10, 0x3, 0x15)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r8, 0x0, 0x13, &(0x7f0000000040), 0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280), 0x0)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @multicast1}}}, 0x84)
sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r8, @ANYRES16=r7], 0x44}, 0x1, 0x0, 0x0, 0x20004084}, 0x0)
close(0x4)
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000000400)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}, 0x4}}, 0x10, &(0x7f0000001940)=[{&(0x7f0000000440)="8fc60fbd169239ff5e92ef78b11f1893fdd6884208f93a679bb043628b460e07b21b308b4ab7781b0400657c68f5575bb9cba75200dca1a4b49d485109860110bcb2162102b7b31225ef6fe364b52bbb9284526afe07d6c112e9a222442a0dbec970a895a4a398abeedb6f9788fe01e03f05a08d6e6a750151035ef323946e1176f7df813304a789088554ebcca978135f8356ad77e09d9b7e88d9aa124096ab33ccc1f1faf9f472555a45cd66235084a1f706630f6280bda581b068fef97b38d88b1fc284874a3b61149de195016e4e3cd20859c9a7782ee3757e3cb4cdc48752a0c26ca7", 0xe5}, {&(0x7f0000000540)="c6cc19cf1b2cc9e46a87f0e710b9dcc4ed19750ab19ac624649314", 0x1b}, {&(0x7f0000000580)="e87428e1566c562937b9a2cd50ce3c621ad7ece63abc1c627429133b34181c3b4eed4a45dc166b83a757b5e8c937f86d6654f504d7dff6108877a9ff2848b34be94c09893ad17d9686e517a0a55dd72ed195a9fe", 0x54}, {&(0x7f0000000940)="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", 0x1000}], 0x4, &(0x7f0000001980)="e8f5", 0x2, 0x840}, 0x805)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0)
syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r9, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r9, 0x89ed, 0x0)

1.686966295s ago: executing program 4 (id=8734):
close(0x3)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x3}}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
close(0x3)

1.580280508s ago: executing program 2 (id=8735):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2d}, 0x94)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x100bf28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0xfffff805}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$rds(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r3, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
connect$inet6(r3, &(0x7f0000000800)={0xa, 0x4e24, 0x4bf, @empty, 0x34bbe269}, 0x1c)
writev(r4, &(0x7f0000000680)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108ec50000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
sendto$inet6(r1, 0x0, 0x3d, 0x4088010, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440))
socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000040)={@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x2, [@rand_addr=0x64010102, @multicast2]}, 0x18)

1.506001921s ago: executing program 4 (id=8736):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x138, 0x210, 0x2b0, 0x0, 0x2b0, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x3f00, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'tunl0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0xa, @rand_addr=0x64010100, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffff6a}}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440)

1.371786833s ago: executing program 3 (id=8738):
r0 = socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x10, 0x4, 0x4, 0x7, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r1)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, r2, 0x701, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x4000)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000190000012bfe02fd01002d00000000000000000000000000b63686c2500557f4c1622b3d1a787639ce1dd154abadac4ddda640eb77e05c278e8f37f3dffe2c008d0c8b583a6a49f677e2e2517c7d74e98e6f4c753d280e61c7e7520c0ce51e20e0162c25ce0de4e726c0dc7bb8bcf03e1164ef5f"], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@can_newroute={0x1c, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0x1d, 0x1, 0x5}, [@CGW_LIM_HOPS={0x5}]}, 0x1c}}, 0x0)

1.352276938s ago: executing program 4 (id=8739):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000840)=ANY=[@ANYRES8=0x0], &(0x7f0000000140)='GPL\x00'}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x9)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000017c0)=r0, 0x4) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) (async)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94)
syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x16, 0xe, &(0x7f0000000880)=@raw=[@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff6}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_query], &(0x7f0000000300)='GPL\x00', 0x9, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x400c095}, 0x44) (async)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000000e14000180090001006c617374"], 0x290}}, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x3, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x11, 0x0}, @private=0xa010101}}}}) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x68}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="44010000100001000000000800000000ac1e00010000000000000000000000000000000000000000000000000000000000000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000805600000000000000000000000000000000000000000000000000000010000000090000000200000000000000000000000200010000000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="f0654fb65c1177502cf4e945d9f24f540fef"], 0x144}}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="b5bb2802ce2409907fee9d5342061a9ac301e0292dfe3a8c1aaf51da00000000000000044d19a05aac69e8088b0576b12a5cd875ac8c41bde3416afc", @ANYRES16=r7, @ANYBLOB="01002cbd700000dcdf251a0000004c00228004000080040000803400008008000100ef0000000800070001010000080004004725ffff0800030000000000080006000700000008000300050000000400008004000080040000804c0022800c0000800800040009000000140000800800030007000000080003000b0000001c00008008000100ffffffff080003000400000008000400800000000c0000800800040006000000"], 0xac}, 0x1, 0x0, 0x0, 0x4040001}, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r8, 0x0, 0x0, 0x4000000)
r9 = socket(0x40000000015, 0x5, 0x0)
sendmsg$inet(r9, 0x0, 0x40) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r9, 0x0, 0x4000800) (async)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_buf(r10, 0x1, 0x31, &(0x7f0000000180)=""/87, 0x0)

1.312091772s ago: executing program 0 (id=8740):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'erspan0\x00', <r2=>0x0})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)
r7 = openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.freeze\x00', 0x275a, 0xfffe)
preadv(r7, &(0x7f0000002c00)=[{0x0}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', <r8=>0x0})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="40380072002400028008000200", @ANYRES32=r8, @ANYBLOB="080001007255694c6baa5d9e58481202832a1853c6f82d345db51d35af9a823be362ee032b7c195889916b30329cb061070518025335bb42c1a2ce3ea39ffd82ef", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)

1.241674726s ago: executing program 3 (id=8741):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32)
r2 = socket$unix(0x1, 0x2, 0x0) (rerun: 32)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0}) (rerun: 32)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x6ef, 0xfffb, 0x8632, 0x80000}, {0x6, 0x3, 0x6, 0xfeff, 0x6c, 0x200}, 0x6aba0e4b, 0x1, 0xd04}}, @TCA_TBF_RATE64={0xc, 0x4, 0x9b3bc4fd75e29128}, @TCA_TBF_PRATE64={0xc, 0x5, 0xb91e316295c500f1}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r8=>0x0})
sendto$packet(r7, &(0x7f00000004c0)="05031400d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x7, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0) (async)
r11 = socket(0x11, 0x80a, 0x0)
syz_emit_ethernet(0x1ee, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x1b8, 0x3a, 0x0, @remote, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0x0, 0x200000000000006c, '\x00', [@ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @generic={0x0, 0x32, "8b168e4b48529453d91cea424030c8b200632af95e7c30322241dd567db14507f8b523b418a0edc41397a2f639f9f6c3b379"}, @calipso={0x7, 0x8}]}]}}}}}}}, 0x0) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async, rerun: 32)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'batadv_slave_0\x00', &(0x7f0000000040)=@ethtool_channels={0x3d, 0x5, 0x7, 0x9, 0x2, 0x2, 0x8, 0x3, 0x4}}) (async)
setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x50, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x406cc50}, 0x0) (async, rerun: 32)
sendmsg$nl_route(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYBLOB="88861bf92658f97b0302043c0f514d26e202243df98927ea2170cf6e9c00abdc45b942d408fda69a1335505f664f33d30d2769281ac78fc961bc449c006b4a0024d6cafb2d102a7da7223e74a13cf3be3cde519d34cd114b6db2e6a4e50fba001f3b1b1b255b4419416dc2e020c18f9a1fb374b9b319ce", @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) (rerun: 32)
sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0)

1.111770817s ago: executing program 4 (id=8742):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000008f97dfa00043a0e67bef6f9542a06d33f48f310b63c5df4fbdfd8daa2fb84c67b65a78c6091263c1e656d4cd504a74b13b7c4a489e38a5ae4191687a37528e59052f9ea8d1e566236e01ab3ef26edc22410e52da3cdc086df19ab53b41d07ea614ea6cee698809a0e230441f7280dcdd3a88dbb090868c2b5a769301d339074711434009c0c392f38c5d21df7db9bbf1497e2ee1f6d2279c9a93dfb972b26259bed8099f285d20c989c46c5d2be3d173dc565ee8b2a15c4345b0fd3d10038ce029b578674eed", @ANYRES16=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4040840}, 0x4044890)
sendmsg$nl_route_sched(r0, 0x0, 0x10814)
unshare(0x22020400)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000003f80)={<r6=>0x0, 0xb3}, &(0x7f0000003fc0)=0x8)
sendmsg$inet_sctp(r0, &(0x7f0000004080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x8c8, @dev={0xfe, 0x80, '\x00', 0x23}, 0x1}, 0x1c, &(0x7f0000003ec0)=[{&(0x7f0000000640)="238d8370c6d92b5e6c1e23f49f9865d969192198ad9527186f06acc7f4eef4bf7f23c4d3a2f63e7fe1e7f712b92609f4246392dbbcb8fa70e85be2b186006f41f84d4f68b80327daef02592770c47336bba6a87066bbb8807bc80ed939632dbf9b6b08e8f4aeb2cb884f9840dd3eabe9b2f351b250e18e1aaba5eef75a5c4caa817d40bb1e893bbb3fe6037104512a8cefc52f23c8dcfcae6be4d0bf0acafced002ac9d65dcd2dfdc529a3af6614", 0xae}, {&(0x7f0000000900)="260f53a2d73048a4e88b34bbf17aebbde3f0713563a36c178f7a5b88e21483de3aab50d873038f583cbe27c1d0d0c0b2fd437990e2afe9057160de4b40a2789e26bb6ec66ffec1ae273fbf9f41099603c76276bf9a164041e48c5119202aa80f67606e132c6d0c4de71b8d55bc2536c24c4dcd001d25ebff2d5563198771b0a81b4422fc96ba23e33524ca649ed6", 0x8e}, {&(0x7f00000009c0)="c4e73d73bde7eee5843efac4a763f75a28d4e7c86b58c53a459fec090fb8009b3112c36afdeb8a2a01763c86149d7202b6f62df7c50b28e5846d3f34f37df3f7f051f3675d5c6a4cd81f18ed5912999c6482c68474866c559fd875dc9651cc538ebf2434835d4eba3f51df61c93ddd93c17d095add12505781fe7c4ba113b405a272190f81bc2dfa0037add91e3fb13e189d4604f7eb73e606c32b5ed4a8e92987b761e16b7df4bb8abbeb681c67b24eece275be8ab5674c800b75645301", 0xbe}, {&(0x7f0000000a80)="aae1ed82f0d7080d0a12f68bc1e6143a814d631229f5ef", 0x17}, {&(0x7f0000000ac0)="513c6a74699b6179ccdd00218e8428aed7469ac013da838cc343795dc8686b72f65623d508e8eae8325ad839fa1df11ac45f518f4d8ff5dded6a50e2a3c371953b72caf07bcaeead1327d877e92fe53851e278d12134dea8eb836cf137f2f564314694c137d559ec6b77a7f220f83e94482918e085d3ad0aedd846b84cfe5f", 0x7f}, {&(0x7f0000000b40)="515fe9051d86ed5f6488c67c0f9ce91251f775c4f47addb4fe255c9479b50d2064a9e67cb62bbc256662e9985f3c", 0x2e}, {&(0x7f0000002e00)="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", 0x1000}, {&(0x7f0000003e00)="c888e8bd46dbfeec83981df248f885555142523bb89cccb16291fb2f0cf0b41ee9193ab5484cc2b3897bf6b85d", 0x2d}, {&(0x7f0000003e40)="f3a52dd58d12cc772b2469c4c29ed4c87428cceb82259ea4ae9864a89474b61285e912d4113bd2aa4d5e5cfe51706171960398ce4bad94f637e99fb578391cc7f3097009b08cbe2ee51d9fd685c6b2312b3cea08d8db3b5810a8cf6fbdf0833b978405e4148e1a595416807347a545424bffb64e9a", 0x75}], 0x9, &(0x7f0000004000)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0xc}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x4}}, @init={0x18, 0x84, 0x0, {0xf2, 0x1, 0xe1a, 0x5}}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x5, 0x1c, 0x8, r6}}], 0x80, 0x34000001}, 0x1)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x3c0488d0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1820000000000000000000000000008095"], &(0x7f00000008c0)='GPL\x00', 0x9, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xca}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000706010804000000000000000a00000405000100070000005c34d4fe56b5d20945fdff40177cce4fa032302192fcc5ef1ae7420a65eb4bb015b8d504d844264064c88f006ca761a04f5b812056ff40f09397b332fd10e45391575b37a9777c63c66ca98ce55617ab781e2cc5c68134acd4ce934707ce7748cfd6f293654a4d0b1009f77964634dfcc4a74c96f29bef9ffc2da7057e460eab9618135ea7ccf0ef722613f11659e5ca525749b85011721fd7a37713b4aeb3c92d371b40cb5933010ab9b1931540"], 0x1c}, 0x1, 0x0, 0x0, 0x20048004}, 0x80)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4)
getpeername(r4, &(0x7f0000000700)=@qipcrtr, &(0x7f0000000840)=0x80)
socket$kcm(0x29, 0x5, 0x0)

1.101091517s ago: executing program 0 (id=8743):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) (fail_nth: 1)

1.061362714s ago: executing program 1 (id=8744):
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x1402, 0x400, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x880)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x94}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x5, 0x3, 0x4, 0x1ff}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0xa}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8000}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000400007012bbd7000fadbdf25039400000400c2801c0001801800108014000d00ff02000000000000000000000000000104000800ddee"], 0x38}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)

619.134289ms ago: executing program 0 (id=8745):
r0 = socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r1, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
r3 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x1000000)

618.273069ms ago: executing program 3 (id=8746):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x5, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8fffeffb702000008000000b50af8ff000000008500"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000305fcffffff0000040000000000", @ANYRES32=0x0, @ANYBLOB="1111020031000000280012800b0001006d61637365630000180002800c0004000400000100c280000800050058a3", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed", 0x48}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r4, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
connect$inet(r4, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0xfffffff9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3}, 0x1c)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000015, 0x810, 0xffffffffffffffff, 0x1000)
setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0xe8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0xffffffff}}}, {{@arp={@local, @multicast2, 0x0, 0xff000000, 0x10, 0x4, {@mac, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x7, 0xde35, 0x5, 0xd88, 0x9, 0x9, 'veth0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x242}, 0xc0, 0x110, 0x0, {0xe800}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="16e4ec77bff1", @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x17}, @multicast1, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)

616.25858ms ago: executing program 2 (id=8747):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f0000000440)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x26)

457.176429ms ago: executing program 0 (id=8748):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe80, 0x0, &(0x7f0000000300)="c5dfb080cd20d308098e000086dd6b", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)

456.595811ms ago: executing program 3 (id=8749):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x138, 0x210, 0x2b0, 0x0, 0x2b0, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x3f00, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'tunl0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0xa, @rand_addr=0x64010100, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffff7f}}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440)

456.308065ms ago: executing program 1 (id=8750):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050)
accept4(r0, &(0x7f0000000080)=@rc={0x1f, @fixed}, &(0x7f0000000100)=0x80, 0x800)

455.105556ms ago: executing program 4 (id=8751):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001100)={0x3c, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1, 0x8e, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x8800)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x34, 0x701, 0x0, 0xffffffff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}]}, 0x1c}}, 0x20008080)
r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @none}, &(0x7f0000002400)=0xe, 0x800)
setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000002440)={0x3, 0xee}, 0x2)
sendmsg$rds(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)=""/31, 0x1f}, {&(0x7f0000000140)=""/81, 0x51}, {&(0x7f00000001c0)=""/207, 0xcf}, {&(0x7f00000002c0)=""/145, 0x91}], 0x4, &(0x7f0000002080)=[@mask_cswp={0x58, 0x114, 0x9, {{0x7, 0x800}, &(0x7f00000003c0)=0x9, &(0x7f0000000400), 0x12000, 0x1, 0x9, 0x5, 0x21, 0x9}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000440)=""/168, 0xa8}, &(0x7f0000000500), 0x30}}, @rdma_args={0x48, 0x114, 0x1, {{0x4, 0x8}, {&(0x7f0000000540)=""/44, 0x2c}, &(0x7f0000000a00)=[{&(0x7f0000000580)=""/181, 0xb5}, {&(0x7f0000000640)=""/215, 0xd7}, {&(0x7f0000000740)=""/27, 0x1b}, {&(0x7f0000000780)=""/82, 0x52}, {&(0x7f0000000800)=""/159, 0x9f}, {&(0x7f00000008c0)=""/60, 0x3c}, {&(0x7f0000000900)=""/238, 0xee}], 0x7, 0x1, 0xb}}, @fadd={0x58, 0x114, 0x6, {{0x7, 0x5}, &(0x7f0000000a80)=0xba17, &(0x7f0000000ac0)=0x4, 0x8, 0x0, 0x8, 0xf, 0x0, 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{0x2, 0xa}, {&(0x7f0000000b00)=""/70, 0x46}, &(0x7f0000000c40)=[{&(0x7f0000000b80)=""/152, 0x98}], 0x1, 0x7a, 0x4}}, @mask_fadd={0x58, 0x114, 0x8, {{0x4800, 0x4a7}, &(0x7f0000000c80)=0x42ee, &(0x7f0000000cc0)=0x5, 0x8, 0x4, 0x8, 0x101, 0x73, 0x7}}, @cswp={0x58, 0x114, 0x7, {{0x9, 0xac86}, &(0x7f0000000d00)=0xca, &(0x7f0000000d40)=0x2, 0x80, 0x4, 0x3ff, 0x7, 0x0, 0x1}}, @mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x918}, &(0x7f0000000d80)=0x43e4, &(0x7f0000000dc0)=0x5, 0x6e2, 0xfffffffffffff8bb, 0x9, 0x8000, 0xb, 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {&(0x7f0000000e00)=""/255, 0xff}, &(0x7f0000001fc0)=[{&(0x7f0000000f00)=""/60, 0x3c}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/99, 0x63}], 0x3, 0x4, 0x200}}, @fadd={0x58, 0x114, 0x6, {{0x6b8ae353, 0xa8a}, &(0x7f0000002000)=0x2, &(0x7f0000002040)=0x5, 0x0, 0x98, 0x7, 0x81, 0x38, 0x2}}], 0x318, 0x24000800}, 0x4084)

404.509401ms ago: executing program 2 (id=8752):
unshare(0x20400)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_getmulticast={0x0, 0x3a, 0x4, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x9e}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f00000026c0)={0x28, r3, 0x303, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}}, 0x8000)
connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0xb)

307.651459ms ago: executing program 3 (id=8753):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000c9e20bf7ffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000020000000000000801000000000000000000000000000000440005000a010101000000000000000000000000000000003c00000000000000fe880000000000000000000000000101020000000403"], 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011000a0101010000000000000000000000007f000001000000000000000000000000fc02000000060000000000e174534101000007000000000000000000000000013c04000000e5"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

291.07335ms ago: executing program 1 (id=8754):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x140, 0xb, 0xd0e0011, 0x140, 0xc6, 0x218, 0x1d8, 0x190, 0x218, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0xffffff00, 'nr0\x00', '\x00', {}, {0xff}, 0x1}, 0x0, 0xd8, 0x140, 0x7000000, {}, [@common=@icmp={{0x28}, {0x11, "0010"}}, @common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x8000000000000000}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x2, 0x19a6ffbc, 0x9, 'syz0\x00', 'syz0\x00'}}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xff44)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000104000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRESDEC], 0x44}}, 0x0)
socket$inet(0x2, 0x1, 0x0) (async)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x140, 0xb, 0xd0e0011, 0x140, 0xc6, 0x218, 0x1d8, 0x190, 0x218, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0xffffff00, 'nr0\x00', '\x00', {}, {0xff}, 0x1}, 0x0, 0xd8, 0x140, 0x7000000, {}, [@common=@icmp={{0x28}, {0x11, "0010"}}, @common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x8000000000000000}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x2, 0x19a6ffbc, 0x9, 'syz0\x00', 'syz0\x00'}}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xff44) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000104000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRESDEC], 0x44}}, 0x0) (async)

232.325522ms ago: executing program 4 (id=8755):
r0 = socket$inet(0x2, 0x2, 0x1)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@fallback, 0xffffffffffffffff, 0x1c, 0x2011}, 0x20)
socket$netlink(0x10, 0x3, 0x4)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_int(r1, 0x0, 0x1, &(0x7f0000000000)=0xab7, 0x4)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}]}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000c80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)=@RTM_NEWMDB={0xd8, 0x54, 0x1, 0x70bd27, 0x25dfdbff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x4, {@ip4=@rand_addr=0x64010100}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x4, {@in6_addr=@remote, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x4, {@in6_addr=@private0, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x4, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x40}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x2, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x2, 0x3, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x86dd}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000008}, 0x20044004)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3f00000092000000240012800b0001006272696467650000140002800500260000000000050030"], 0x44}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRESOCT, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r10 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r10, 0x10f, 0x81, &(0x7f0000000480), 0x4)
recvmmsg(r10, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=""/175, 0xaf}], 0x1, &(0x7f0000001fc0)=""/65, 0x41}, 0x7}], 0x1, 0x40002122, 0x0)
sendmsg$tipc(r10, &(0x7f0000000340)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)}, 0x2000c8c0)
bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write(r9, &(0x7f0000000000)="2a000200010078", 0x7)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a428040000cc8b00d7781400350064756d6d824c5cc570300000000000000000000008950c9397f1714efe9ab336d95ff1eb5600", @ANYRES32=r7, @ANYBLOB], 0x3c}}, 0x8000)
sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000300)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1, &(0x7f0000000040)}, 0x804)

227.98626ms ago: executing program 2 (id=8756):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$l2tp6(0xa, 0x2, 0x73) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) (async)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x2, &(0x7f00000002c0)=@raw=[@map_fd={0x18, 0x2}], &(0x7f0000000300)='GPL\x00', 0x5, 0xc1, &(0x7f0000000340)=""/193, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0x0, 0x101, 0x5}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000500)=[{0x5, 0x1, 0x6, 0x4}, {0x1, 0x3, 0xe, 0xa}, {0x5, 0x2, 0x8, 0x3}, {0x1, 0x3, 0xc, 0x3}, {0x1, 0x4, 0x10, 0xc}, {0x5, 0x2, 0x7, 0x7}, {0x4, 0x2, 0x6, 0x2}, {0x4, 0x2, 0xb, 0x8}, {0x1, 0x4, 0x1, 0x5}], 0x10, 0x80}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r2}, &(0x7f0000000280), &(0x7f0000000680)=r3}, 0x20)
ioctl$XFS_IOC_GETBMAPA(0xffffffffffffffff, 0xc020582c, &(0x7f0000000000)={0x7fffffff, 0x3, 0x100000000, 0x8, 0x3}) (async, rerun: 64)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) (rerun: 64)
poll(0x0, 0x0, 0x9) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0xc000, 0x0) (async)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'veth1\x00', 0x10})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) (async, rerun: 64)
r5 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="000008060000", @ANYRES16=r4], 0xfdef)
getsockopt$inet6_buf(r1, 0x29, 0xca, 0x0, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRESOCT=0x0, @ANYBLOB="21000000000000001800128008000100687372000c00028008000100", @ANYRESHEX=r1, @ANYBLOB="6e78d328d162611de8a490f17e4dcbaea2e083cbd9bb0c6f087f5625a23d08d7e5df2ef68f348abf6eeed5ff0b75253b69a5ec7ef74c678ea270f80358804f909a5334158135e0e0829b917d62b89ccb890545c7f2dd036679ecaf522a99be71bdc9ff1393e3aad7b81a3fb97d715fed7848e332fd79da214509210d9c4429f2c96361c60a0b7eb8a6a7f44dbff4f5f435d719a39d1f"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

201.035212ms ago: executing program 0 (id=8757):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xe)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
shutdown(0xffffffffffffffff, 0x7ffffffe)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20004081}, 0x48810)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000300000000000000000000090000000000000000000000010500000008000000010000000000000f440000000000000000000003000000000300000002000000000000000061"], 0x0, 0x5b}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000004000800e3db62f3bf70cdca6ebc2a0f954fcd818ba1f27ef44275f7d2200381b52c374bb61bff6bf1a3f43b2632f9323dc941484477c9edcd7a9a40922f5cc492c88b45c602576c76a789ccb235146a19d81bd3b5652c9dc1bf0dec59a9a58a5f362ec6a4602df0a8bcb4059d008fabdf5f6472e19e1ee2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
close(0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x18, 0x30, 0xb, 0x5, 0x25df5bfc, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xf646d5f7286d7fdb}, 0x40)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000010c0)=""/4096, 0x8})
socket$nl_crypto(0x10, 0x3, 0x15)

195.017179ms ago: executing program 3 (id=8758):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000800)={{<r1=>r0, &(0x7f0000000240)='ethtool\x00', 0x40000, &(0x7f0000000280)={@align=0xdb, {0x8, 0xb, 0x3, 0x1}}, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0xfffffffc}, 0x2, &(0x7f00000007c0)=[{0x1, 0x2, &(0x7f0000000580)='ethtool\x00', &(0x7f00000005c0)="a26dd6cd48ebf98309f8773412ae9a73bf9bb0e0a28e564855f259c768ceb2b1e60d263711a84c06927e513eb9ab1f09de13766d37583004c33dfa25310dd4b8883ebf5dbe233fb3fd9a17646ad98348a595e9b70eb85f442dc7aedfdca363aac25ea4628b3c4e30862a909279cb73e7880f2507a78c64dce08ee018329390b3c3c441fc5b9393180b7c769ae85220875ab7afa2973f0ca76bae2833911ae172b706f546cce73e0067cc5c407153ccd58142e58354043eac5533b88e7b022951adbdaea30a78479724eb7a19d92d", 0xce, 0x30}, {0x3, 0x1, &(0x7f00000006c0)='\x00', &(0x7f0000000700)="bb398b59591d1112e1b92459cc514d3d047770f008041728fd51fd2db0e795958261c134cf13df369a202af6d99c4b27dfd9fe0f7dbe35b0a54dd94265e14f4d8cc962eebf98230464861e9f0fd4e56f7f75a84ba7b9fefa525166eb89a248b198456f291e2c25947b249cdc8db5d78c192b260347d692d99acdccdb5af9edd34b7d408065b69dde04b0ec181a062ac6b875dff8aa8a366315f2", 0x9a, 0x20}]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r4=>0x0})
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r4, 0x38, r5}, 0x10)
sendmsg$nl_route_sched_retired(r1, &(0x7f0000001080)={&(0x7f0000000880), 0xc, &(0x7f0000001040)={&(0x7f0000000bc0)=@delchain={0x46c, 0x65, 0x4, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x8, 0xf}, {0xffe0, 0x5}, {0x0, 0x8}}, [@f_tcindex={{0xc}, {0x43c, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0xbf48}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xd243}, @TCA_TCINDEX_POLICE={0x420, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc, 0xd, 0x3, 0x6, 0x7, 0xffffffff, 0x81, 0x8000, 0xfffffffc, 0x8, 0x5, 0x5, 0xe, 0x7, 0x9, 0x5, 0x7, 0x2, 0x3, 0x5, 0x3, 0x3, 0xa3a, 0xfffffff8, 0x2, 0x4, 0x6, 0x2, 0x1, 0xbb75, 0xffffffff, 0x0, 0x7, 0x7, 0xe3d1, 0x5, 0x5, 0x80000000, 0x4, 0x7, 0xce, 0x80000000, 0x100, 0x0, 0x9, 0x6, 0x4f, 0x6, 0x3, 0x9, 0x8, 0xff, 0x2, 0x1925, 0x5788, 0x0, 0x5, 0x0, 0x6, 0x1, 0x10000, 0x3, 0x638, 0x753, 0x7ff, 0x10000, 0x8001, 0xc, 0x8001, 0x8, 0x6, 0x7, 0x5, 0x7, 0x3, 0x49b07631, 0xa0ac, 0x9a, 0x7f, 0x1135, 0xf6, 0x3, 0x780ca916, 0x1ff, 0x0, 0x6, 0x0, 0x4, 0x5, 0x5, 0x7, 0x3, 0x26b, 0x4, 0xef1e, 0x8, 0x6, 0x6b, 0x0, 0x101, 0x4, 0x800, 0x6, 0x5, 0x1, 0x8, 0x80000, 0x800, 0x593f20ca, 0x6026, 0x9, 0xfaad, 0x1363, 0x1, 0xce8f, 0x1, 0x7, 0x6db, 0x2, 0x10, 0x7ff, 0x3, 0xe, 0x0, 0x7fff, 0x2, 0xf, 0xd61b, 0x5, 0x5b, 0x1, 0xf, 0xc, 0xc, 0x10001, 0xa577, 0x24e73dfe, 0xc, 0x2, 0x7, 0x1, 0x7, 0x101, 0x9, 0x3ff, 0x3, 0xd, 0xb149, 0x4, 0x8, 0x8001, 0x6, 0xff, 0x7, 0xaaf, 0x6, 0x1, 0x9, 0x9, 0x6, 0xf2fb, 0xcb52, 0x3, 0x2c000, 0x8, 0x1, 0x7, 0x788291ec, 0x80, 0x0, 0x100, 0x0, 0x0, 0xfffffffd, 0xa, 0x3ff, 0x8, 0x5, 0x2, 0x5, 0x3, 0xffffffff, 0x4, 0x6, 0x7, 0x1000, 0x10000, 0x7d, 0x2, 0x7, 0x2, 0x8, 0x0, 0x3, 0x8, 0x5, 0x7fff, 0x5, 0x4, 0x23, 0xff, 0x7, 0x3, 0x0, 0xc0, 0x0, 0xe7d, 0xffffffff, 0x1, 0x9, 0x3, 0x7, 0x4, 0x8, 0xc071, 0x80000000, 0x4, 0x1, 0xefa60c2, 0x61758472, 0x4, 0x100, 0x8, 0xed, 0x1, 0x8, 0x10000, 0x0, 0xfffff7a9, 0x6, 0xe63, 0x8001, 0x4, 0x5, 0x0, 0x7fff, 0x100, 0x8, 0xe, 0x6, 0x4, 0x7, 0x8, 0xffffff22, 0x3ff, 0xfff, 0xb4, 0x0, 0x3, 0x800, 0x1, 0x8001, 0x7f, 0x7, 0x200, 0x10001]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9b}]}, @TCA_TCINDEX_FALL_THROUGH={0x8}]}}]}, 0x46c}}, 0x1)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x18c0}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendto$inet6(r7, &(0x7f0000000000)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47ed2345653602648dcaaf6c26c291214549f100000000000000ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a009b00000000000000000000080000000eceb6b342a570f4f2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e0000e195cd4e00fbdbdf2503000900800000001cdc0dca089f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c01000000030005000000000002004e21ac1e01010000000000000000010014000b000000"], 0x70}, 0x1, 0x7}, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f00000000c0)={'veth0_to_bond\x00', @random="0131013000"})
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6)
sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00032cbd7000fddbdf2510000000080008005d3b000008000900000000000800070000000000080008005efe00000c00018008000300030000000800080007000000"], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x40000)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg(r6, &(0x7f0000000240), 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x24002014}, 0x40010)
r11 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendfile(r11, r9, &(0x7f00000008c0)=0x5, 0x7fffffffffffffff)

20.086048ms ago: executing program 0 (id=8759):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="77d2bcbdedb6eddc072584bc4ed3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)

0s ago: executing program 1 (id=8760):
r0 = socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r1, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
r3 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x100000000000000)

kernel console output (not intermixed with test programs):

1833]  ? trace_irq_disable+0x3b/0x140
[  860.759598][T31833]  ? clear_bhb_loop+0x40/0x90
[  860.759619][T31833]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  860.759633][T31833] RIP: 0033:0x7f0b29f9ce59
[  860.759648][T31833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  860.759662][T31833] RSP: 002b:00007f0b2ae50028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  860.759680][T31833] RAX: ffffffffffffffda RBX: 00007f0b2a215fa0 RCX: 00007f0b29f9ce59
[  860.759693][T31833] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  860.759704][T31833] RBP: 00007f0b2ae50090 R08: 0000000000000000 R09: 0000000000000000
[  860.759715][T31833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  860.759724][T31833] R13: 00007f0b2a216038 R14: 00007f0b2a215fa0 R15: 00007fffd94ec8e8
[  860.759754][T31833]  </TASK>
[  861.287836][T31825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7490'.
[  861.289587][T31837] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7493'.
[  861.332868][T31826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7490'.
[  861.533681][T31846] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7497'.
[  861.638584][T31854] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  861.842112][T31863] FAULT_INJECTION: forcing a failure.
[  861.842112][T31863] name failslab, interval 1, probability 0, space 0, times 0
[  861.848716][T31850] macvtap1: entered allmulticast mode
[  861.863569][T31850] dummy0: entered allmulticast mode
[  861.869351][T31850] dummy0: entered promiscuous mode
[  861.876907][T31863] CPU: 0 UID: 0 PID: 31863 Comm: syz.4.7505 Not tainted syzkaller #0 PREEMPT(full) 
[  861.876931][T31863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  861.876942][T31863] Call Trace:
[  861.876950][T31863]  <TASK>
[  861.876958][T31863]  dump_stack_lvl+0xe8/0x150
[  861.876985][T31863]  should_fail_ex+0x40c/0x560
[  861.877016][T31863]  should_failslab+0xa8/0x100
[  861.877041][T31863]  ? skb_clone+0x212/0x3a0
[  861.877059][T31863]  kmem_cache_alloc_noprof+0x87/0x650
[  861.877090][T31863]  ? apparmor_capable+0x126/0x170
[  861.877118][T31863]  skb_clone+0x212/0x3a0
[  861.877135][T31863]  ? nfnetlink_rcv+0x4b0/0x28c0
[  861.877166][T31863]  nfnetlink_rcv+0x4de/0x28c0
[  861.877195][T31863]  ? __dev_queue_xmit+0x29b/0x37f0
[  861.877220][T31863]  ? __local_bh_enable_ip+0xd0/0x130
[  861.877239][T31863]  ? lockdep_hardirqs_on+0x7a/0x110
[  861.877259][T31863]  ? __dev_queue_xmit+0x29b/0x37f0
[  861.877277][T31863]  ? __local_bh_enable_ip+0xd0/0x130
[  861.877316][T31863]  ? __dev_queue_xmit+0x29b/0x37f0
[  861.877336][T31863]  ? __dev_queue_xmit+0x1ed7/0x37f0
[  861.877354][T31863]  ? ____sys_sendmsg+0x9b9/0xa20
[  861.877372][T31863]  ? ___sys_sendmsg+0x2a5/0x360
[  861.877400][T31863]  ? __dev_queue_xmit+0x29b/0x37f0
[  861.877421][T31863]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  861.877463][T31863]  ? ref_tracker_free+0x689/0x830
[  861.877485][T31863]  ? __pfx_ref_tracker_free+0x10/0x10
[  861.877512][T31863]  ? __skb_clone+0x449/0x6c0
[  861.877537][T31863]  ? skb_clone+0x246/0x3a0
[  861.877560][T31863]  ? __netlink_deliver_tap+0x811/0x860
[  861.877578][T31863]  ? netlink_deliver_tap+0x2e/0x1b0
[  861.877604][T31863]  ? netlink_deliver_tap+0x2e/0x1b0
[  861.877622][T31863]  ? netlink_deliver_tap+0x2e/0x1b0
[  861.877647][T31863]  netlink_unicast+0x7bb/0x940
[  861.877684][T31863]  netlink_sendmsg+0x813/0xb40
[  861.877710][T31863]  ? __pfx_netlink_sendmsg+0x10/0x10
[  861.877733][T31863]  ? aa_sock_msg_perm+0xf1/0x1b0
[  861.877759][T31863]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  861.877782][T31863]  ? __pfx_netlink_sendmsg+0x10/0x10
[  861.877803][T31863]  ____sys_sendmsg+0x9b9/0xa20
[  861.877822][T31863]  ? __might_fault+0xaf/0x130
[  861.877850][T31863]  ? __pfx_____sys_sendmsg+0x10/0x10
[  861.877878][T31863]  ? import_iovec+0x73/0xa0
[  861.877901][T31863]  ___sys_sendmsg+0x2a5/0x360
[  861.877919][T31863]  ? __lock_acquire+0x683/0x2cd0
[  861.877941][T31863]  ? __pfx____sys_sendmsg+0x10/0x10
[  861.877993][T31863]  ? __fget_files+0x2a/0x420
[  861.878017][T31863]  ? __fget_files+0x3a2/0x420
[  861.878045][T31863]  __x64_sys_sendmsg+0x1bd/0x2a0
[  861.878070][T31863]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  861.878107][T31863]  ? __pfx_ksys_write+0x10/0x10
[  861.878141][T31863]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  861.878161][T31863]  do_syscall_64+0x174/0x580
[  861.878181][T31863]  ? trace_irq_disable+0x3b/0x140
[  861.878206][T31863]  ? clear_bhb_loop+0x40/0x90
[  861.878229][T31863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  861.878247][T31863] RIP: 0033:0x7efef8f9ce59
[  861.878265][T31863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  861.878281][T31863] RSP: 002b:00007efef9dd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  861.878301][T31863] RAX: ffffffffffffffda RBX: 00007efef9215fa0 RCX: 00007efef8f9ce59
[  861.878315][T31863] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  861.878327][T31863] RBP: 00007efef9dd1090 R08: 0000000000000000 R09: 0000000000000000
[  861.878338][T31863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  861.878350][T31863] R13: 00007efef9216038 R14: 00007efef9215fa0 R15: 00007ffcc2d311b8
[  861.878381][T31863]  </TASK>
[  861.880581][T31867] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7504'.
[  861.930162][ T5644] Bluetooth: hci4: command 0x0405 tx timeout
[  861.938566][T31850] dummy0: left allmulticast mode
[  862.433917][T20848] dummy0: left promiscuous mode
[  862.454316][T31875] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  862.682099][T31892] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  862.720408][T31893] FAULT_INJECTION: forcing a failure.
[  862.720408][T31893] name failslab, interval 1, probability 0, space 0, times 0
[  862.755230][T31893] CPU: 0 UID: 0 PID: 31893 Comm: syz.2.7512 Not tainted syzkaller #0 PREEMPT(full) 
[  862.755257][T31893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  862.755268][T31893] Call Trace:
[  862.755276][T31893]  <TASK>
[  862.755284][T31893]  dump_stack_lvl+0xe8/0x150
[  862.755311][T31893]  should_fail_ex+0x40c/0x560
[  862.755345][T31893]  should_failslab+0xa8/0x100
[  862.755374][T31893]  __kvmalloc_node_noprof+0x16e/0x890
[  862.755400][T31893]  ? alloc_netdev_mqs+0xa9/0x1220
[  862.755423][T31893]  ? snprintf+0xe8/0x140
[  862.755452][T31893]  alloc_netdev_mqs+0xa9/0x1220
[  862.755475][T31893]  ? __pfx_snprintf+0x10/0x10
[  862.755495][T31893]  ? __pfx_macvlan_setup+0x10/0x10
[  862.755524][T31893]  rtnl_create_link+0x321/0xd70
[  862.755553][T31893]  rtnl_newlink_create+0x25f/0xb00
[  862.755576][T31893]  ? __mutex_lock+0x5c5/0x1590
[  862.755615][T31893]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  862.755638][T31893]  ? __pfx___mutex_lock+0x10/0x10
[  862.755667][T31893]  ? ns_capable+0x89/0xe0
[  862.755688][T31893]  rtnl_newlink+0x167f/0x1bd0
[  862.755729][T31893]  ? __pfx_rtnl_newlink+0x10/0x10
[  862.755750][T31893]  ? do_syscall_64+0x174/0x580
[  862.755769][T31893]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  862.755823][T31893]  ? kasan_quarantine_put+0xbb/0x1f0
[  862.755847][T31893]  ? lockdep_hardirqs_on+0x7a/0x110
[  862.755870][T31893]  ? nlmon_xmit+0xb0/0x100
[  862.755886][T31893]  ? kmem_cache_free+0x182/0x650
[  862.755922][T31893]  ? __lock_acquire+0x683/0x2cd0
[  862.755945][T31893]  ? __dev_queue_xmit+0x29b/0x37f0
[  862.755970][T31893]  ? __local_bh_enable_ip+0xd0/0x130
[  862.755988][T31893]  ? lockdep_hardirqs_on+0x7a/0x110
[  862.756006][T31893]  ? __dev_queue_xmit+0x29b/0x37f0
[  862.756023][T31893]  ? __local_bh_enable_ip+0xd0/0x130
[  862.756039][T31893]  ? __dev_queue_xmit+0x29b/0x37f0
[  862.756067][T31893]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  862.756109][T31893]  ? __pfx_rtnl_newlink+0x10/0x10
[  862.756132][T31893]  rtnetlink_rcv_msg+0x802/0xc00
[  862.756162][T31893]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  862.756187][T31893]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  862.756210][T31893]  ? ref_tracker_free+0x689/0x830
[  862.756233][T31893]  ? __pfx_ref_tracker_free+0x10/0x10
[  862.756262][T31893]  netlink_rcv_skb+0x226/0x4a0
[  862.756284][T31893]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  862.756313][T31893]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  862.756345][T31893]  ? netlink_deliver_tap+0x2e/0x1b0
[  862.756364][T31893]  ? netlink_deliver_tap+0x2e/0x1b0
[  862.756389][T31893]  netlink_unicast+0x7bb/0x940
[  862.756427][T31893]  netlink_sendmsg+0x813/0xb40
[  862.756456][T31893]  ? __pfx_netlink_sendmsg+0x10/0x10
[  862.756480][T31893]  ? aa_sock_msg_perm+0xf1/0x1b0
[  862.756512][T31893]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  862.756535][T31893]  ? __pfx_netlink_sendmsg+0x10/0x10
[  862.756556][T31893]  ____sys_sendmsg+0x9b9/0xa20
[  862.756577][T31893]  ? __might_fault+0xaf/0x130
[  862.756607][T31893]  ? __pfx_____sys_sendmsg+0x10/0x10
[  862.756635][T31893]  ? import_iovec+0x73/0xa0
[  862.756660][T31893]  ___sys_sendmsg+0x2a5/0x360
[  862.756678][T31893]  ? __lock_acquire+0x683/0x2cd0
[  862.756701][T31893]  ? __pfx____sys_sendmsg+0x10/0x10
[  862.756726][T31893]  ? kstrtouint+0x6e/0xe0
[  862.756776][T31893]  ? __fget_files+0x2a/0x420
[  862.756797][T31893]  ? __fget_files+0x3a2/0x420
[  862.756829][T31893]  __sys_sendmmsg+0x27c/0x4e0
[  862.756865][T31893]  ? __pfx___sys_sendmmsg+0x10/0x10
[  862.756881][T31893]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  862.756930][T31893]  ? ksys_write+0x242/0x270
[  862.756957][T31893]  ? __pfx_ksys_write+0x10/0x10
[  862.756991][T31893]  __x64_sys_sendmmsg+0xa0/0xc0
[  862.757010][T31893]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  862.757029][T31893]  do_syscall_64+0x174/0x580
[  862.757048][T31893]  ? trace_irq_disable+0x3b/0x140
[  862.757073][T31893]  ? clear_bhb_loop+0x40/0x90
[  862.757095][T31893]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  862.757113][T31893] RIP: 0033:0x7f3a2259ce59
[  862.757131][T31893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  862.757146][T31893] RSP: 002b:00007f3a233aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  862.757166][T31893] RAX: ffffffffffffffda RBX: 00007f3a22816090 RCX: 00007f3a2259ce59
[  862.757179][T31893] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003
[  862.757191][T31893] RBP: 00007f3a233aa090 R08: 0000000000000000 R09: 0000000000000000
[  862.757223][T31893] R10: 00000000000000fc R11: 0000000000000246 R12: 0000000000000001
[  862.757234][T31893] R13: 00007f3a22816128 R14: 00007f3a22816090 R15: 00007ffe01710388
[  862.757265][T31893]  </TASK>
[  863.379118][T31902] FAULT_INJECTION: forcing a failure.
[  863.379118][T31902] name failslab, interval 1, probability 0, space 0, times 0
[  863.419675][T31902] CPU: 0 UID: 0 PID: 31902 Comm: syz.0.7518 Not tainted syzkaller #0 PREEMPT(full) 
[  863.419702][T31902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  863.419714][T31902] Call Trace:
[  863.419722][T31902]  <TASK>
[  863.419730][T31902]  dump_stack_lvl+0xe8/0x150
[  863.419757][T31902]  should_fail_ex+0x40c/0x560
[  863.419790][T31902]  should_failslab+0xa8/0x100
[  863.419819][T31902]  __kmalloc_cache_noprof+0x88/0x660
[  863.419843][T31902]  ? nft_pernet+0x23/0x240
[  863.419866][T31902]  ? nf_tables_newchain+0xf9c/0x28b0
[  863.419894][T31902]  nf_tables_newchain+0xf9c/0x28b0
[  863.419942][T31902]  ? __pfx_nf_tables_newchain+0x10/0x10
[  863.419993][T31902]  ? nfnl_pernet+0x23/0x240
[  863.420020][T31902]  ? nfnl_pernet+0x23/0x240
[  863.420052][T31902]  ? __nla_parse+0x40/0x60
[  863.420075][T31902]  nfnetlink_rcv+0x1288/0x28c0
[  863.420098][T31902]  ? is_bpf_text_address+0x292/0x2b0
[  863.420144][T31902]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  863.420214][T31902]  ? netlink_deliver_tap+0x2e/0x1b0
[  863.420241][T31902]  ? netlink_deliver_tap+0x2e/0x1b0
[  863.420258][T31902]  ? netlink_deliver_tap+0x2e/0x1b0
[  863.420283][T31902]  netlink_unicast+0x7bb/0x940
[  863.420316][T31902]  netlink_sendmsg+0x813/0xb40
[  863.420341][T31902]  ? __pfx_netlink_sendmsg+0x10/0x10
[  863.420362][T31902]  ? aa_sock_msg_perm+0xf1/0x1b0
[  863.420386][T31902]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  863.420406][T31902]  ? __pfx_netlink_sendmsg+0x10/0x10
[  863.420425][T31902]  ____sys_sendmsg+0x9b9/0xa20
[  863.420445][T31902]  ? __might_fault+0xaf/0x130
[  863.420473][T31902]  ? __pfx_____sys_sendmsg+0x10/0x10
[  863.420500][T31902]  ? import_iovec+0x73/0xa0
[  863.420522][T31902]  ___sys_sendmsg+0x2a5/0x360
[  863.420540][T31902]  ? __lock_acquire+0x683/0x2cd0
[  863.420564][T31902]  ? __pfx____sys_sendmsg+0x10/0x10
[  863.420621][T31902]  ? __fget_files+0x2a/0x420
[  863.420640][T31902]  ? __fget_files+0x3a2/0x420
[  863.420669][T31902]  __x64_sys_sendmsg+0x1bd/0x2a0
[  863.420689][T31902]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  863.420716][T31902]  ? __pfx_ksys_write+0x10/0x10
[  863.420750][T31902]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  863.420770][T31902]  do_syscall_64+0x174/0x580
[  863.420790][T31902]  ? trace_irq_disable+0x3b/0x140
[  863.420814][T31902]  ? clear_bhb_loop+0x40/0x90
[  863.420836][T31902]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  863.420852][T31902] RIP: 0033:0x7feed7f9ce59
[  863.420870][T31902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  863.420885][T31902] RSP: 002b:00007feed8ea5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  863.420904][T31902] RAX: ffffffffffffffda RBX: 00007feed8215fa0 RCX: 00007feed7f9ce59
[  863.420915][T31902] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  863.420934][T31902] RBP: 00007feed8ea5090 R08: 0000000000000000 R09: 0000000000000000
[  863.420946][T31902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  863.420955][T31902] R13: 00007feed8216038 R14: 00007feed8215fa0 R15: 00007ffff8cfaa38
[  863.420984][T31902]  </TASK>
[  863.816004][T31909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7519'.
[  863.850952][T31909] x_tables: duplicate underflow at hook 1
[  864.021059][T31916] virt_wifi0 speed is unknown, defaulting to 1000
[  864.094168][T31916] virt_wifi0 speed is unknown, defaulting to 1000
[  864.162000][T31923] FAULT_INJECTION: forcing a failure.
[  864.162000][T31923] name failslab, interval 1, probability 0, space 0, times 0
[  864.174729][T31923] CPU: 1 UID: 0 PID: 31923 Comm: syz.0.7525 Not tainted syzkaller #0 PREEMPT(full) 
[  864.174752][T31923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  864.174763][T31923] Call Trace:
[  864.174770][T31923]  <TASK>
[  864.174778][T31923]  dump_stack_lvl+0xe8/0x150
[  864.174805][T31923]  should_fail_ex+0x40c/0x560
[  864.174838][T31923]  should_failslab+0xa8/0x100
[  864.174867][T31923]  kmem_cache_alloc_bulk_noprof+0x8c/0x7d0
[  864.174904][T31923]  bpf_test_run_xdp_live+0x16e9/0x1c20
[  864.174934][T31923]  ? bpf_test_run_xdp_live+0x43e/0x1c20
[  864.174964][T31923]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  864.175005][T31923]  ? 0xffffffffa0201670
[  864.175020][T31923]  ? 0xffffffffa02016d4
[  864.175036][T31923]  ? 0xffffffffa0201750
[  864.175077][T31923]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  864.175110][T31923]  ? _copy_from_user+0x94/0xb0
[  864.175131][T31923]  ? bpf_test_init+0x113/0x150
[  864.175148][T31923]  ? xdp_convert_md_to_buff+0x5b/0x330
[  864.175172][T31923]  bpf_prog_test_run_xdp+0x7d8/0x11d0
[  864.175208][T31923]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  864.175234][T31923]  ? __fget_files+0x2a/0x420
[  864.175260][T31923]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  864.175282][T31923]  bpf_prog_test_run+0x2c5/0x340
[  864.175304][T31923]  __sys_bpf+0x643/0x950
[  864.175332][T31923]  ? __pfx___sys_bpf+0x10/0x10
[  864.175372][T31923]  ? ksys_write+0x242/0x270
[  864.175400][T31923]  ? __pfx_ksys_write+0x10/0x10
[  864.175429][T31923]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  864.175457][T31923]  __x64_sys_bpf+0x7c/0x90
[  864.175482][T31923]  do_syscall_64+0x174/0x580
[  864.175502][T31923]  ? trace_irq_disable+0x3b/0x140
[  864.175532][T31923]  ? clear_bhb_loop+0x40/0x90
[  864.175556][T31923]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  864.175576][T31923] RIP: 0033:0x7feed7f9ce59
[  864.175593][T31923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  864.175608][T31923] RSP: 002b:00007feed8ea5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  864.175626][T31923] RAX: ffffffffffffffda RBX: 00007feed8215fa0 RCX: 00007feed7f9ce59
[  864.175638][T31923] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  864.175650][T31923] RBP: 00007feed8ea5090 R08: 0000000000000000 R09: 0000000000000000
[  864.175661][T31923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  864.175672][T31923] R13: 00007feed8216038 R14: 00007feed8215fa0 R15: 00007ffff8cfaa38
[  864.175699][T31923]  </TASK>
[  864.208711][T31930] netlink: 'syz.2.7526': attribute type 1 has an invalid length.
[  864.553171][T31935] 8021q: adding VLAN 0 to HW filter on device macvlan8
[  864.568307][T31937] FAULT_INJECTION: forcing a failure.
[  864.568307][T31937] name failslab, interval 1, probability 0, space 0, times 0
[  864.665825][T31937] CPU: 1 UID: 0 PID: 31937 Comm: syz.1.7527 Not tainted syzkaller #0 PREEMPT(full) 
[  864.665852][T31937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  864.665863][T31937] Call Trace:
[  864.665871][T31937]  <TASK>
[  864.665879][T31937]  dump_stack_lvl+0xe8/0x150
[  864.665906][T31937]  should_fail_ex+0x40c/0x560
[  864.665935][T31937]  ? __d_alloc+0x37/0x6e0
[  864.665960][T31937]  should_failslab+0xa8/0x100
[  864.665988][T31937]  kmem_cache_alloc_lru_noprof+0x87/0x640
[  864.666016][T31937]  ? __d_lookup+0x66/0x790
[  864.666046][T31937]  __d_alloc+0x37/0x6e0
[  864.666075][T31937]  d_alloc+0x4b/0x190
[  864.666096][T31937]  ? lookup_one_qstr_excl+0xc4/0x360
[  864.666123][T31937]  lookup_one_qstr_excl+0xd8/0x360
[  864.666147][T31937]  ? lookup_noperm_common+0x245/0x430
[  864.666172][T31937]  start_dirop+0x5c/0x90
[  864.666195][T31937]  simple_start_creating+0xcc/0x110
[  864.666220][T31937]  ? __pfx_simple_start_creating+0x10/0x10
[  864.666244][T31937]  ? do_raw_spin_unlock+0xf5/0x210
[  864.666268][T31937]  ? mntput+0x65/0xc0
[  864.666292][T31937]  debugfs_start_creating+0xdb/0x1a0
[  864.666315][T31937]  __debugfs_create_file+0x6f/0x400
[  864.666340][T31937]  debugfs_create_file_full+0x3f/0x60
[  864.666364][T31937]  ref_tracker_dir_debugfs+0x197/0x360
[  864.666385][T31937]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  864.666441][T31937]  ? __kvmalloc_node_noprof+0x53d/0x890
[  864.666466][T31937]  ? alloc_netdev_mqs+0xa9/0x1220
[  864.666491][T31937]  ? __raw_spin_lock_init+0x45/0x100
[  864.666518][T31937]  alloc_netdev_mqs+0x275/0x1220
[  864.666538][T31937]  ? __pfx_snprintf+0x10/0x10
[  864.666562][T31937]  ? __pfx_macvlan_setup+0x10/0x10
[  864.666585][T31937]  rtnl_create_link+0x321/0xd70
[  864.666614][T31937]  rtnl_newlink_create+0x25f/0xb00
[  864.666640][T31937]  ? __mutex_lock+0x5c5/0x1590
[  864.666663][T31937]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  864.666687][T31937]  ? __pfx___mutex_lock+0x10/0x10
[  864.666718][T31937]  ? ns_capable+0x89/0xe0
[  864.666742][T31937]  rtnl_newlink+0x167f/0x1bd0
[  864.666785][T31937]  ? __pfx_rtnl_newlink+0x10/0x10
[  864.666808][T31937]  ? do_syscall_64+0x174/0x580
[  864.666827][T31937]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  864.666885][T31937]  ? kasan_quarantine_put+0xbb/0x1f0
[  864.666908][T31937]  ? lockdep_hardirqs_on+0x7a/0x110
[  864.666932][T31937]  ? nlmon_xmit+0xb0/0x100
[  864.666948][T31937]  ? kmem_cache_free+0x182/0x650
[  864.666985][T31937]  ? __lock_acquire+0x683/0x2cd0
[  864.667008][T31937]  ? __dev_queue_xmit+0x29b/0x37f0
[  864.667032][T31937]  ? __local_bh_enable_ip+0xd0/0x130
[  864.667050][T31937]  ? lockdep_hardirqs_on+0x7a/0x110
[  864.667069][T31937]  ? __dev_queue_xmit+0x29b/0x37f0
[  864.667088][T31937]  ? __local_bh_enable_ip+0xd0/0x130
[  864.667103][T31937]  ? __dev_queue_xmit+0x29b/0x37f0
[  864.667131][T31937]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  864.667175][T31937]  ? __pfx_rtnl_newlink+0x10/0x10
[  864.667199][T31937]  rtnetlink_rcv_msg+0x802/0xc00
[  864.667229][T31937]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  864.667254][T31937]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  864.667278][T31937]  ? ref_tracker_free+0x689/0x830
[  864.667301][T31937]  ? __pfx_ref_tracker_free+0x10/0x10
[  864.667335][T31937]  netlink_rcv_skb+0x226/0x4a0
[  864.667358][T31937]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  864.667386][T31937]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  864.667425][T31937]  ? netlink_deliver_tap+0x2e/0x1b0
[  864.667444][T31937]  ? netlink_deliver_tap+0x2e/0x1b0
[  864.667469][T31937]  netlink_unicast+0x7bb/0x940
[  864.667508][T31937]  netlink_sendmsg+0x813/0xb40
[  864.667539][T31937]  ? __pfx_netlink_sendmsg+0x10/0x10
[  864.667563][T31937]  ? aa_sock_msg_perm+0xf1/0x1b0
[  864.667590][T31937]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  864.667612][T31937]  ? __pfx_netlink_sendmsg+0x10/0x10
[  864.667633][T31937]  ____sys_sendmsg+0x9b9/0xa20
[  864.667654][T31937]  ? __might_fault+0xaf/0x130
[  864.667683][T31937]  ? __pfx_____sys_sendmsg+0x10/0x10
[  864.667713][T31937]  ? import_iovec+0x73/0xa0
[  864.667738][T31937]  ___sys_sendmsg+0x2a5/0x360
[  864.667756][T31937]  ? __lock_acquire+0x683/0x2cd0
[  864.667780][T31937]  ? __pfx____sys_sendmsg+0x10/0x10
[  864.667805][T31937]  ? kstrtouint+0x6e/0xe0
[  864.667860][T31937]  ? __fget_files+0x2a/0x420
[  864.667881][T31937]  ? __fget_files+0x3a2/0x420
[  864.667912][T31937]  __sys_sendmmsg+0x27c/0x4e0
[  864.667938][T31937]  ? __pfx___sys_sendmmsg+0x10/0x10
[  864.667955][T31937]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  864.668005][T31937]  ? ksys_write+0x242/0x270
[  864.668033][T31937]  ? __pfx_ksys_write+0x10/0x10
[  864.668065][T31937]  __x64_sys_sendmmsg+0xa0/0xc0
[  864.668084][T31937]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  864.668103][T31937]  do_syscall_64+0x174/0x580
[  864.668121][T31937]  ? trace_irq_disable+0x3b/0x140
[  864.668147][T31937]  ? clear_bhb_loop+0x40/0x90
[  864.668169][T31937]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  864.668186][T31937] RIP: 0033:0x7f8c3739ce59
[  864.668204][T31937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  864.668219][T31937] RSP: 002b:00007f8c381ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  864.668239][T31937] RAX: ffffffffffffffda RBX: 00007f8c37616090 RCX: 00007f8c3739ce59
[  864.668252][T31937] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003
[  864.668265][T31937] RBP: 00007f8c381ff090 R08: 0000000000000000 R09: 0000000000000000
[  864.668277][T31937] R10: 00000000000000fc R11: 0000000000000246 R12: 0000000000000001
[  864.668288][T31937] R13: 00007f8c37616128 R14: 00007f8c37616090 R15: 00007ffc2635b5a8
[  864.668321][T31937]  </TASK>
[  865.238270][T31937] 8021q: adding VLAN 0 to HW filter on device macvlan9
[  865.289381][T31954] FAULT_INJECTION: forcing a failure.
[  865.289381][T31954] name failslab, interval 1, probability 0, space 0, times 0
[  865.302147][T31954] CPU: 1 UID: 0 PID: 31954 Comm: syz.4.7530 Not tainted syzkaller #0 PREEMPT(full) 
[  865.302173][T31954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  865.302184][T31954] Call Trace:
[  865.302192][T31954]  <TASK>
[  865.302200][T31954]  dump_stack_lvl+0xe8/0x150
[  865.302228][T31954]  should_fail_ex+0x40c/0x560
[  865.302260][T31954]  should_failslab+0xa8/0x100
[  865.302289][T31954]  __kmalloc_cache_noprof+0x88/0x660
[  865.302315][T31954]  ? nfnetlink_rcv+0x1021/0x28c0
[  865.302354][T31954]  nfnetlink_rcv+0x1021/0x28c0
[  865.302415][T31954]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  865.302459][T31954]  ? ref_tracker_free+0x689/0x830
[  865.302503][T31954]  ? skb_clone+0x246/0x3a0
[  865.302527][T31954]  ? __netlink_deliver_tap+0x811/0x860
[  865.302556][T31954]  ? netlink_deliver_tap+0x2e/0x1b0
[  865.302574][T31954]  ? netlink_deliver_tap+0x2e/0x1b0
[  865.302600][T31954]  netlink_unicast+0x7bb/0x940
[  865.302639][T31954]  netlink_sendmsg+0x813/0xb40
[  865.302669][T31954]  ? __pfx_netlink_sendmsg+0x10/0x10
[  865.302693][T31954]  ? aa_sock_msg_perm+0xf1/0x1b0
[  865.302720][T31954]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  865.302742][T31954]  ? __pfx_netlink_sendmsg+0x10/0x10
[  865.302765][T31954]  ____sys_sendmsg+0x9b9/0xa20
[  865.302785][T31954]  ? __might_fault+0xaf/0x130
[  865.302814][T31954]  ? __pfx_____sys_sendmsg+0x10/0x10
[  865.302842][T31954]  ? import_iovec+0x73/0xa0
[  865.302867][T31954]  ___sys_sendmsg+0x2a5/0x360
[  865.302886][T31954]  ? __lock_acquire+0x683/0x2cd0
[  865.302909][T31954]  ? __pfx____sys_sendmsg+0x10/0x10
[  865.302967][T31954]  ? __fget_files+0x2a/0x420
[  865.302988][T31954]  ? __fget_files+0x3a2/0x420
[  865.303020][T31954]  __x64_sys_sendmsg+0x1bd/0x2a0
[  865.303042][T31954]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  865.303070][T31954]  ? __pfx_ksys_write+0x10/0x10
[  865.303104][T31954]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  865.303124][T31954]  do_syscall_64+0x174/0x580
[  865.303144][T31954]  ? trace_irq_disable+0x3b/0x140
[  865.303168][T31954]  ? clear_bhb_loop+0x40/0x90
[  865.303191][T31954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  865.303209][T31954] RIP: 0033:0x7efef8f9ce59
[  865.303227][T31954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  865.303243][T31954] RSP: 002b:00007efef9dd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  865.303262][T31954] RAX: ffffffffffffffda RBX: 00007efef9215fa0 RCX: 00007efef8f9ce59
[  865.303276][T31954] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  865.303288][T31954] RBP: 00007efef9dd1090 R08: 0000000000000000 R09: 0000000000000000
[  865.303299][T31954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  865.303310][T31954] R13: 00007efef9216038 R14: 00007efef9215fa0 R15: 00007ffcc2d311b8
[  865.303349][T31954]  </TASK>
[  865.777335][T31930] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  865.993099][T31977] netlink: 'syz.1.7538': attribute type 2 has an invalid length.
[  866.270543][T31982] syzkaller0: entered promiscuous mode
[  866.292397][T31982] syzkaller0: entered allmulticast mode
[  866.481982][T32013] __nla_validate_parse: 1 callbacks suppressed
[  866.481998][T32013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7544'.
[  866.533202][T32009] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  869.319852][T32019] virt_wifi0 speed is unknown, defaulting to 1000
[  869.330904][T32023] syzkaller0: entered promiscuous mode
[  869.345906][T32023] syzkaller0: entered allmulticast mode
[  869.361843][T32019] virt_wifi0 speed is unknown, defaulting to 1000
[  869.492951][T32036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7553'.
[  869.685970][T32035] syzkaller0: entered promiscuous mode
[  869.698828][T32035] syzkaller0: entered allmulticast mode
[  869.949948][T32057] netlink: 'syz.2.7556': attribute type 1 has an invalid length.
[  870.059289][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  873.013490][T32057] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  873.018062][T32060] netlink: 'syz.3.7557': attribute type 1 has an invalid length.
[  873.036793][T32060] netlink: 244 bytes leftover after parsing attributes in process `syz.3.7557'.
[  873.312224][T32074] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7558'.
[  873.370587][T32074] netlink: 'syz.3.7558': attribute type 1 has an invalid length.
[  873.388353][T32074] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7558'.
[  873.423968][T32074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  873.694112][T32099] 8021q: adding VLAN 0 to HW filter on device macvlan10
[  873.762479][T32103] 8021q: adding VLAN 0 to HW filter on device macvlan11
[  873.771011][T32102] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  873.809990][T32105] netlink: 'syz.2.7568': attribute type 1 has an invalid length.
[  873.901934][T32111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7570'.
[  873.912693][T32111] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7570'.
[  873.925528][T32105] 8021q: adding VLAN 0 to HW filter on device bond5
[  873.956312][T32107] bond5: (slave veth5): Enslaving as an active interface with a down link
[  874.370686][T32130] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7575'.
[  874.543530][T32126] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma?
[  874.967187][T32153] virt_wifi0 speed is unknown, defaulting to 1000
[  874.989791][T32153] virt_wifi0 speed is unknown, defaulting to 1000
[  875.046932][T32160] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7586'.
[  875.201760][T32170] netlink: 160 bytes leftover after parsing attributes in process `syz.3.7589'.
[  875.293257][T32170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7589'.
[  875.355182][T32178] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  875.357227][T32176] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  875.372746][T32178] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  875.384077][T32178] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  875.585895][T32181] netlink: 'syz.0.7592': attribute type 2 has an invalid length.
[  876.345726][T32205] syzkaller0: entered promiscuous mode
[  876.359366][T32205] syzkaller0: entered allmulticast mode
[  876.583849][T32223] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  880.236008][T32246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7608'.
[  880.237531][T32248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7606'.
[  880.283478][T32248] netlink: 'syz.3.7606': attribute type 3 has an invalid length.
[  880.291359][T32246] x_tables: duplicate underflow at hook 1
[  880.528281][T32258] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  880.699786][T32264] macvtap1: entered promiscuous mode
[  880.719928][T32264] vlan0: entered promiscuous mode
[  880.808934][T32264] vlan0: left promiscuous mode
[  880.935217][T32267] bridge0: port 1(vlan3) entered blocking state
[  880.954666][T32267] bridge0: port 1(vlan3) entered disabled state
[  880.991529][T32267] vlan3: entered allmulticast mode
[  881.002251][T32267] bridge0: entered allmulticast mode
[  881.025925][T32267] vlan3: left allmulticast mode
[  881.037557][T32267] bridge0: left allmulticast mode
[  881.340491][T32281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7619'.
[  881.370640][T32281] tun0: tun_chr_ioctl cmd 1074025675
[  881.388346][T32281] tun0: persist enabled
[  881.413403][T32281] tun0: tun_chr_ioctl cmd 1074025675
[  881.423252][T32287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7622'.
[  881.431685][T32281] tun0: persist disabled
[  881.459336][T32287] x_tables: duplicate underflow at hook 1
[  881.638552][T32301] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  881.911257][T32314] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check.
[  882.050402][T32332] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 3, id = 0
[  882.398393][T32346] tipc: Enabled bearer <udp:s>, priority 26
[  882.495233][T32348] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  883.072344][T32353] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  883.242373][T32355] macsec1: entered promiscuous mode
[  883.412275][T32353] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  883.468223][T32378] sctp: [Deprecated]: syz.3.7653 (pid 32378) Use of int in maxseg socket option.
[  883.468223][T32378] Use struct sctp_assoc_value instead
[  883.519577][T19927] tipc: Node number set to 3297750096
[  883.611091][T32388] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7654'.
[  883.762461][T32353] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  883.954953][T32353] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  884.239868][T32401] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  884.536603][T32411] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  884.544003][T32411] IPv6: NLM_F_CREATE should be set when creating new route
[  884.551333][T32411] IPv6: NLM_F_CREATE should be set when creating new route
[  884.558669][T32411] IPv6: NLM_F_CREATE should be set when creating new route
[  884.599882][   T35] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  884.613065][T32411] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  884.703486][   T35] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  884.791656][ T3387] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  884.898260][ T3387] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  884.945111][T32426] netlink: 'syz.3.7662': attribute type 1 has an invalid length.
[  885.031269][T32426] bond7: entered promiscuous mode
[  885.041482][T32426] 8021q: adding VLAN 0 to HW filter on device bond7
[  885.114218][T32443] FAULT_INJECTION: forcing a failure.
[  885.114218][T32443] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  885.128622][T32443] CPU: 1 UID: 0 PID: 32443 Comm: syz.0.7664 Not tainted syzkaller #0 PREEMPT(full) 
[  885.128647][T32443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  885.128658][T32443] Call Trace:
[  885.128666][T32443]  <TASK>
[  885.128674][T32443]  dump_stack_lvl+0xe8/0x150
[  885.128701][T32443]  should_fail_ex+0x40c/0x560
[  885.128732][T32443]  _copy_from_user+0x2d/0xb0
[  885.128754][T32443]  ___sys_sendmsg+0x1c6/0x360
[  885.128773][T32443]  ? __lock_acquire+0x683/0x2cd0
[  885.128797][T32443]  ? __pfx____sys_sendmsg+0x10/0x10
[  885.128852][T32443]  ? __fget_files+0x2a/0x420
[  885.128873][T32443]  ? __fget_files+0x3a2/0x420
[  885.128907][T32443]  __x64_sys_sendmsg+0x1bd/0x2a0
[  885.128930][T32443]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  885.128959][T32443]  ? rcu_is_watching+0x15/0xb0
[  885.128989][T32443]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  885.129007][T32443]  do_syscall_64+0x174/0x580
[  885.129025][T32443]  ? trace_irq_disable+0x3b/0x140
[  885.129048][T32443]  ? clear_bhb_loop+0x40/0x90
[  885.129070][T32443]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  885.129086][T32443] RIP: 0033:0x7feed7f9ce59
[  885.129103][T32443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  885.129117][T32443] RSP: 002b:00007feed8ea5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  885.129137][T32443] RAX: ffffffffffffffda RBX: 00007feed8215fa0 RCX: 00007feed7f9ce59
[  885.129150][T32443] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000003
[  885.129162][T32443] RBP: 00007feed8ea5090 R08: 0000000000000000 R09: 0000000000000000
[  885.129173][T32443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  885.129184][T32443] R13: 00007feed8216038 R14: 00007feed8215fa0 R15: 00007ffff8cfaa38
[  885.129216][T32443]  </TASK>
[  885.341064][T32442] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  885.351121][T32426] bond7: (slave bridge9): making interface the new active one
[  885.393524][T32426] bridge9: entered promiscuous mode
[  885.442603][T32426] bond7: (slave bridge9): Enslaving as an active interface with an up link
[  885.633711][T32452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7667'.
[  885.668693][  T137] bridge7: left allmulticast mode
[  886.050649][T32475] x_tables: duplicate underflow at hook 2
[  886.507190][  T137] bond0 (unregistering): Released all slaves
[  886.520218][  T137] bond1 (unregistering): Released all slaves
[  886.555029][  T137] bond2 (unregistering): Released all slaves
[  886.784832][  T137] tipc: Disabling bearer <udp:syz2>
[  886.830232][  T137] tipc: Left network mode
[  887.345046][T32513] netlink: 'syz.2.7683': attribute type 6 has an invalid length.
[  887.763613][T17810] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  887.778693][  T219] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  887.809572][  T219] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  887.836737][T32532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7691'.
[  887.863199][T32532] vlan3: entered promiscuous mode
[  887.875425][T32532] gretap0: entered promiscuous mode
[  889.501973][ T5295] veth1_vlan: left promiscuous mode
[  889.725984][T32573] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7700'.
[  889.778156][  T137] hsr_slave_0: left promiscuous mode
[  889.806250][T32577] netlink: 120 bytes leftover after parsing attributes in process `syz.4.7701'.
[  889.822845][  T137] hsr_slave_1: left promiscuous mode
[  889.891031][T32580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7700'.
[  889.893722][T32582] netlink: 'syz.2.7702': attribute type 1 has an invalid length.
[  890.010786][  T137] veth1_macvtap: left promiscuous mode
[  890.025855][  T137] veth0_macvtap: left promiscuous mode
[  890.035018][  T137] veth1_vlan: left promiscuous mode
[  890.041396][  T137] veth0_vlan: left promiscuous mode
[  890.556968][T32594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7705'.
[  890.610622][T32584] 8021q: adding VLAN 0 to HW filter on device bond7
[  890.626685][T32584] bond6: (slave bond7): making interface the new active one
[  890.636167][T32584] bond6: (slave bond7): Enslaving as an active interface with an up link
[  890.660799][T32585] bond6: (slave gretap1): Enslaving as a backup interface with an up link
[  890.684993][T32586] 8021q: adding VLAN 0 to HW filter on device bond6
[  890.850356][T32594] erspan0: entered promiscuous mode
[  890.863174][T32604] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7708'.
[  890.875064][T32594] macvtap1: entered promiscuous mode
[  890.909785][T32594] macvtap1: entered allmulticast mode
[  890.913875][T32610] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7710'.
[  890.926086][T32594] erspan0: entered allmulticast mode
[  890.981285][T32596] erspan0: left allmulticast mode
[  891.000955][T32596] erspan0: left promiscuous mode
[  891.021781][T32596] macvtap1: left promiscuous mode
[  891.033794][T32596] macvtap1: left allmulticast mode
[  891.196570][T32615] hmó3)ó: entered promiscuous mode
[  891.553918][  T137] IPVS: stop unused estimator thread 0...
[  891.560988][T32642] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  891.981436][T32658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7720'.
[  892.133632][T32661] vlan3: entered promiscuous mode
[  892.231776][T32666] ip6tnl2: entered allmulticast mode
[  892.389874][T32666] bond0: (slave vlan2): Enslaving as an active interface with an up link
[  892.413509][T19927] dummy0: entered promiscuous mode
[  892.421486][T32676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7729'.
[  892.789030][T32697] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  892.990707][T32702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7735'.
[  893.011908][T32710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7736'.
[  893.180341][T32720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7742'.
[  893.194571][T32720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7742'.
[  893.489319][T32737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7747'.
[  893.523900][T32737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7747'.
[  893.542578][T32739] netlink: 'syz.4.7749': attribute type 1 has an invalid length.
[  893.579622][ T1117] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  893.620911][ T1117] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  893.643130][ T1117] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  893.665226][ T1117] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  893.694895][T32745] netlink: 'syz.2.7750': attribute type 1 has an invalid length.
[  893.843343][T32758] netlink: 'syz.2.7750': attribute type 10 has an invalid length.
[  893.909287][T32763] netlink: 'syz.2.7750': attribute type 10 has an invalid length.
[  893.930014][T32758] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  893.941360][T32758] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[  893.952511][T32758] team0: Port device netdevsim1 added
[  893.997032][T32763] netdevsim netdevsim2 netdevsim1: left allmulticast mode
[  894.035494][T32763] team0: Port device netdevsim1 removed
[  894.044745][T32763] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  894.055206][T32763] netdevsim netdevsim2 netdevsim1: entered promiscuous mode
[  894.577163][  T336] macsec1: entered promiscuous mode
[  894.610159][  T331] xt_cluster: node mask cannot exceed total number of nodes
[  895.082418][  T362] pim6reg: entered allmulticast mode
[  895.299409][  T368] syzkaller0: entered promiscuous mode
[  895.316732][  T368] syzkaller0: entered allmulticast mode
[  895.673223][    C0] IPVS: rr: UDP 0.0.0.0:0 - no destination available
[  897.072150][  T401] __nla_validate_parse: 8 callbacks suppressed
[  897.072167][  T401] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7784'.
[  897.743121][   T50] Bluetooth: hci2: command 0x0406 tx timeout
[  899.771916][  T385] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7781'.
[  899.796697][   T13] lo: left allmulticast mode
[  900.132839][   T13] bond0 (unregistering): Released all slaves
[  900.150486][   T13] bond1 (unregistering): Released all slaves
[  900.173637][   T13] bond2 (unregistering): Released all slaves
[  900.186717][  T389] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  900.307477][   T13] tipc: Left network mode
[  900.432110][  T419] netlink: 'syz.3.7790': attribute type 1 has an invalid length.
[  900.441343][  T418] FAULT_INJECTION: forcing a failure.
[  900.441343][  T418] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  900.491922][  T418] CPU: 1 UID: 0 PID: 418 Comm: syz.4.7791 Not tainted syzkaller #0 PREEMPT(full) 
[  900.491944][  T418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  900.491954][  T418] Call Trace:
[  900.491960][  T418]  <TASK>
[  900.491968][  T418]  dump_stack_lvl+0xe8/0x150
[  900.491993][  T418]  should_fail_ex+0x40c/0x560
[  900.492025][  T418]  _copy_from_user+0x2d/0xb0
[  900.492046][  T418]  ___sys_sendmsg+0x1c6/0x360
[  900.492064][  T418]  ? __lock_acquire+0x683/0x2cd0
[  900.492089][  T418]  ? __pfx____sys_sendmsg+0x10/0x10
[  900.492143][  T418]  ? __fget_files+0x2a/0x420
[  900.492164][  T418]  ? __fget_files+0x3a2/0x420
[  900.492194][  T418]  __x64_sys_sendmsg+0x1bd/0x2a0
[  900.492216][  T418]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  900.492245][  T418]  ? __pfx_ksys_write+0x10/0x10
[  900.492278][  T418]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  900.492298][  T418]  do_syscall_64+0x174/0x580
[  900.492318][  T418]  ? trace_irq_disable+0x3b/0x140
[  900.492343][  T418]  ? clear_bhb_loop+0x40/0x90
[  900.492365][  T418]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  900.492384][  T418] RIP: 0033:0x7efef8f9ce59
[  900.492401][  T418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  900.492416][  T418] RSP: 002b:00007efef9dd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  900.492435][  T418] RAX: ffffffffffffffda RBX: 00007efef9215fa0 RCX: 00007efef8f9ce59
[  900.492447][  T418] RDX: 0000000000008800 RSI: 0000200000003740 RDI: 0000000000000003
[  900.492458][  T418] RBP: 00007efef9dd1090 R08: 0000000000000000 R09: 0000000000000000
[  900.492468][  T418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  900.492477][  T418] R13: 00007efef9216038 R14: 00007efef9215fa0 R15: 00007ffcc2d311b8
[  900.492505][  T418]  </TASK>
[  900.832536][  T413] netlink: 260 bytes leftover after parsing attributes in process `syz.1.7789'.
[  901.338668][  T444] netlink: 'syz.3.7797': attribute type 1 has an invalid length.
[  901.386238][  T437] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  901.400462][  T437] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  901.407490][  T446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7797'.
[  901.434503][  T446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7797'.
[  901.674029][  T443] syzkaller0: entered promiscuous mode
[  901.688036][  T443] syzkaller0: entered allmulticast mode
[  901.775464][  T444] bond8: entered promiscuous mode
[  901.781967][  T444] 8021q: adding VLAN 0 to HW filter on device bond8
[  901.805073][  T447] bond8: (slave bridge10): making interface the new active one
[  901.812910][  T447] bridge10: entered promiscuous mode
[  901.820231][  T447] bond8: (slave bridge10): Enslaving as an active interface with an up link
[  901.838313][ T3387] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  901.847413][ T3387] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  901.857876][ T3387] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  901.889018][  T451] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  901.926674][  T452] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  902.098766][  T465] netlink: 'syz.0.7802': attribute type 142 has an invalid length.
[  903.573639][  T477] FAULT_INJECTION: forcing a failure.
[  903.573639][  T477] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  903.598759][  T477] CPU: 1 UID: 0 PID: 477 Comm: syz.2.7807 Not tainted syzkaller #0 PREEMPT(full) 
[  903.598784][  T477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  903.598794][  T477] Call Trace:
[  903.598801][  T477]  <TASK>
[  903.598820][  T477]  dump_stack_lvl+0xe8/0x150
[  903.598845][  T477]  should_fail_ex+0x40c/0x560
[  903.598874][  T477]  prepare_alloc_pages+0x230/0x650
[  903.598906][  T477]  __alloc_frozen_pages_noprof+0x12f/0x380
[  903.598934][  T477]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  903.598960][  T477]  ? __pfx_policy_nodemask+0x10/0x10
[  903.598987][  T477]  ? __lock_acquire+0x683/0x2cd0
[  903.599007][  T477]  alloc_pages_mpol+0x212/0x380
[  903.599035][  T477]  folio_alloc_mpol_noprof+0x39/0x160
[  903.599061][  T477]  vma_alloc_folio_noprof+0xe1/0x1e0
[  903.599081][  T477]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  903.599097][  T477]  ? __pte_offset_map+0x29/0x240
[  903.599117][  T477]  ? __pte_offset_map+0x29/0x240
[  903.599139][  T477]  do_pte_missing+0x1750/0x3540
[  903.599178][  T477]  handle_mm_fault+0x1b38/0x3080
[  903.599209][  T477]  ? handle_mm_fault+0xec/0x3080
[  903.599235][  T477]  ? __pfx_handle_mm_fault+0x10/0x10
[  903.599251][  T477]  ? lock_vma_under_rcu+0x45a/0x500
[  903.599272][  T477]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  903.599313][  T477]  do_user_addr_fault+0xa4d/0x1340
[  903.599341][  T477]  ? trace_page_fault_user+0x84/0x1e0
[  903.599360][  T477]  exc_page_fault+0x6a/0xc0
[  903.599379][  T477]  asm_exc_page_fault+0x26/0x30
[  903.599395][  T477] RIP: 0033:0x7f3a2245e60b
[  903.599416][  T477] Code: 00 00 00 48 8d 3d 8d a0 1a 00 48 89 c1 31 c0 e8 cb 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d c1 a0 1a 00 48 89 34 24 48 8b 14 24 48 8b
[  903.599429][  T477] RSP: 002b:00007f3a233c9fa0 EFLAGS: 00010206
[  903.599444][  T477] RAX: 0000000000000000 RBX: 00007f3a22815fa0 RCX: 0000000000000000
[  903.599454][  T477] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000a40
[  903.599464][  T477] RBP: 00007f3a233cb090 R08: 0000000000000000 R09: 0000000000000000
[  903.599474][  T477] R10: 0000200000000a40 R11: 0000000000000000 R12: 0000000000000001
[  903.599484][  T477] R13: 00007f3a22816038 R14: 00007f3a22815fa0 R15: 00007ffe01710388
[  903.599513][  T477]  </TASK>
[  903.833703][  T477] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  904.153860][  T480] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7808'.
[  905.470246][ T3387] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  905.486909][   T13] hsr_slave_0: left promiscuous mode
[  905.493073][   T13] hsr_slave_1: left promiscuous mode
[  905.967907][  T486] tipc: Enabled bearer <eth:macvlan1>, priority 0
[  906.010421][  T488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7809'.
[  906.149310][  T498] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.7812'.
[  906.220430][  T506] ipvlan0: entered allmulticast mode
[  906.242250][  T508] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7813'.
[  906.281910][  T506] veth0_vlan: entered allmulticast mode
[  906.303281][  T506] team0: Device ipvlan0 failed to register rx_handler
[  906.418854][  T516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7815'.
[  906.580393][   T13] IPVS: stop unused estimator thread 0...
[  906.603911][  T511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7814'.
[  906.714249][  T515] netlink: 'syz.3.7814': attribute type 58 has an invalid length.
[  906.747532][  T515] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7814'.
[  907.317847][  T552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7821'.
[  907.778491][  T580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7831'.
[  907.781446][  T579] FAULT_INJECTION: forcing a failure.
[  907.781446][  T579] name failslab, interval 1, probability 0, space 0, times 0
[  907.860326][  T579] CPU: 0 UID: 0 PID: 579 Comm: syz.4.7829 Not tainted syzkaller #0 PREEMPT(full) 
[  907.860355][  T579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  907.860365][  T579] Call Trace:
[  907.860372][  T579]  <TASK>
[  907.860381][  T579]  dump_stack_lvl+0xe8/0x150
[  907.860411][  T579]  should_fail_ex+0x40c/0x560
[  907.860442][  T579]  should_failslab+0xa8/0x100
[  907.860469][  T579]  ? skb_clone+0x212/0x3a0
[  907.860488][  T579]  kmem_cache_alloc_noprof+0x87/0x650
[  907.860514][  T579]  ? apparmor_capable+0x126/0x170
[  907.860541][  T579]  skb_clone+0x212/0x3a0
[  907.860559][  T579]  ? nfnetlink_rcv+0x4b0/0x28c0
[  907.860591][  T579]  nfnetlink_rcv+0x4de/0x28c0
[  907.860615][  T579]  ? is_bpf_text_address+0x292/0x2b0
[  907.860639][  T579]  ? kernel_text_address+0xa5/0xe0
[  907.860664][  T579]  ? __kernel_text_address+0xd/0x30
[  907.860687][  T579]  ? unwind_get_return_address+0x4d/0x90
[  907.860709][  T579]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  907.860734][  T579]  ? arch_stack_walk+0xfb/0x150
[  907.860769][  T579]  ? __lock_acquire+0x683/0x2cd0
[  907.860789][  T579]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  907.860835][  T579]  ? __lock_acquire+0x683/0x2cd0
[  907.860865][  T579]  ? __netlink_lookup+0xc6/0x8b0
[  907.860895][  T579]  ? netlink_deliver_tap+0x2e/0x1b0
[  907.860915][  T579]  ? netlink_deliver_tap+0x2e/0x1b0
[  907.860946][  T579]  ? netlink_deliver_tap+0x2e/0x1b0
[  907.860965][  T579]  ? netlink_deliver_tap+0x2e/0x1b0
[  907.860989][  T579]  netlink_unicast+0x7bb/0x940
[  907.861025][  T579]  netlink_sendmsg+0x813/0xb40
[  907.861053][  T579]  ? __pfx_netlink_sendmsg+0x10/0x10
[  907.861076][  T579]  ? aa_sock_msg_perm+0xf1/0x1b0
[  907.861103][  T579]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  907.861125][  T579]  ? __pfx_netlink_sendmsg+0x10/0x10
[  907.861146][  T579]  ____sys_sendmsg+0x9b9/0xa20
[  907.861164][  T579]  ? __might_fault+0xaf/0x130
[  907.861193][  T579]  ? __pfx_____sys_sendmsg+0x10/0x10
[  907.861220][  T579]  ? import_iovec+0x73/0xa0
[  907.861244][  T579]  ___sys_sendmsg+0x2a5/0x360
[  907.861261][  T579]  ? __lock_acquire+0x683/0x2cd0
[  907.861285][  T579]  ? __pfx____sys_sendmsg+0x10/0x10
[  907.861341][  T579]  ? __fget_files+0x2a/0x420
[  907.861362][  T579]  ? __fget_files+0x3a2/0x420
[  907.861393][  T579]  __x64_sys_sendmsg+0x1bd/0x2a0
[  907.861414][  T579]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  907.861442][  T579]  ? __pfx_ksys_write+0x10/0x10
[  907.861474][  T579]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  907.861494][  T579]  do_syscall_64+0x174/0x580
[  907.861514][  T579]  ? trace_irq_disable+0x3b/0x140
[  907.861538][  T579]  ? clear_bhb_loop+0x40/0x90
[  907.861561][  T579]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  907.861578][  T579] RIP: 0033:0x7efef8f9ce59
[  907.861596][  T579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  907.861611][  T579] RSP: 002b:00007efef9dd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  907.861631][  T579] RAX: ffffffffffffffda RBX: 00007efef9215fa0 RCX: 00007efef8f9ce59
[  907.861644][  T579] RDX: 0000000000000800 RSI: 0000200000002280 RDI: 0000000000000003
[  907.861656][  T579] RBP: 00007efef9dd1090 R08: 0000000000000000 R09: 0000000000000000
[  907.861667][  T579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  907.861678][  T579] R13: 00007efef9216038 R14: 00007efef9215fa0 R15: 00007ffcc2d311b8
[  907.861708][  T579]  </TASK>
[  908.536680][  T597] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  908.978446][  T636] atomic_op ffff888077738998 conn xmit_atomic 0000000000000000
[  909.031821][  T642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7840'.
[  909.063778][  T642] netlink: 'syz.0.7840': attribute type 4 has an invalid length.
[  909.329194][  T637] __nla_validate_parse: 1 callbacks suppressed
[  909.330469][  T637] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7838'.
[  909.387515][  T637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7838'.
[  909.557245][  T664] virt_wifi0 speed is unknown, defaulting to 1000
[  909.587925][  T664] virt_wifi0 speed is unknown, defaulting to 1000
[  909.692227][  T671] syzkaller0: entered promiscuous mode
[  909.704817][  T671] syzkaller0: entered allmulticast mode
[  909.723409][  T670] tipc: Started in network mode
[  909.734032][  T670] tipc: Node identity 46026e06962b, cluster identity 4711
[  909.750723][  T670] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  909.807549][  T670] tipc: Resetting bearer <eth:syzkaller0>
[  909.846308][  T670] tipc: Disabling bearer <eth:syzkaller0>
[  909.984196][  T679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7845'.
[  910.548766][  T697] netlink: 'syz.2.7851': attribute type 11 has an invalid length.
[  910.572739][  T697] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.7851'.
[  910.610408][  T711] netlink: 'syz.3.7857': attribute type 5 has an invalid length.
[  910.672452][  T714] tipc: Bearer <eth:syzkaller0>: already 2 bearers with priority 0
[  910.709682][  T714] tipc: Enabling of bearer <eth:syzkaller0> rejected, cannot adjust to lower
[  910.867233][  T724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7859'.
[  911.184862][  T744] bridge_slave_0: left allmulticast mode
[  911.201542][  T744] bridge_slave_0: left promiscuous mode
[  911.218663][  T744] bridge0: port 1(bridge_slave_0) entered disabled state
[  911.235164][  T744] bridge_slave_1: left allmulticast mode
[  911.245929][  T744] bridge_slave_1: left promiscuous mode
[  911.258961][  T744] bridge0: port 2(bridge_slave_1) entered disabled state
[  911.281907][  T744] bond0: (slave bond_slave_0): Releasing backup interface
[  911.288053][  T752] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7869'.
[  911.317045][  T744] bond0: (slave bond_slave_1): Releasing backup interface
[  911.357112][  T744] team_slave_0: left promiscuous mode
[  911.380614][  T744] team0: Port device team_slave_0 removed
[  911.408476][  T744] team_slave_1: left promiscuous mode
[  911.421650][  T744] team0: Port device team_slave_1 removed
[  911.445078][  T744] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  911.453492][  T744] batman_adv: batadv0: Removing interface: batadv_slave_0
[  911.464314][  T744] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  911.472806][  T744] batman_adv: batadv0: Removing interface: batadv_slave_1
[  911.484867][  T744] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  911.560405][  T748] team0: Refused to change device type
[  911.581552][  T750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7868'.
[  911.814691][  T768] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  911.872412][  T768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7872'.
[  911.901728][  T768] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7872'.
[  912.246169][  T781] netlink: 'syz.1.7877': attribute type 10 has an invalid length.
[  912.266123][  T781] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7877'.
[  912.333911][  T781] geneve1: entered promiscuous mode
[  912.367118][  T781] team0: Port device geneve1 added
[  912.542994][  T783] tipc: Started in network mode
[  912.568474][  T783] tipc: Node identity 22fd83e3f5c7, cluster identity 4711
[  912.601888][  T783] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  912.644857][  T783] tipc: Resetting bearer <eth:syzkaller0>
[  912.733959][  T782] tipc: Disabling bearer <eth:syzkaller0>
[  912.993457][  T810] 8021q: VLANs not supported on ip6tnl0
[  913.070767][  T813] openvswitch: netlink: Missing valid actions attribute.
[  913.093769][  T813] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  913.196620][  T813] lo speed is unknown, defaulting to 1000
[  913.264955][  T824] xt_CT: No such helper "syz0"
[  913.347571][  T813] lo speed is unknown, defaulting to 1000
[  913.391336][  T813] lo speed is unknown, defaulting to 1000
[  913.420896][  T833] FAULT_INJECTION: forcing a failure.
[  913.420896][  T833] name failslab, interval 1, probability 0, space 0, times 0
[  913.444780][  T833] CPU: 0 UID: 0 PID: 833 Comm: syz.2.7892 Not tainted syzkaller #0 PREEMPT(full) 
[  913.444809][  T833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  913.444820][  T833] Call Trace:
[  913.444828][  T833]  <TASK>
[  913.444836][  T833]  dump_stack_lvl+0xe8/0x150
[  913.444863][  T833]  should_fail_ex+0x40c/0x560
[  913.444894][  T833]  should_failslab+0xa8/0x100
[  913.444919][  T833]  kmem_cache_alloc_node_noprof+0x8f/0x680
[  913.444943][  T833]  ? __alloc_skb+0x189/0x7a0
[  913.444968][  T833]  ? __alloc_skb+0x1d7/0x7a0
[  913.444988][  T833]  ? __local_bh_enable_ip+0xd0/0x130
[  913.445010][  T833]  __alloc_skb+0x1d7/0x7a0
[  913.445038][  T833]  netlink_ack+0x136/0xb30
[  913.445062][  T833]  ? __kmalloc_cache_noprof+0x318/0x660
[  913.445094][  T833]  nfnetlink_rcv+0x260c/0x28c0
[  913.445153][  T833]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  913.445195][  T833]  ? ref_tracker_free+0x689/0x830
[  913.445238][  T833]  ? skb_clone+0x246/0x3a0
[  913.445260][  T833]  ? __netlink_deliver_tap+0x811/0x860
[  913.445287][  T833]  ? netlink_deliver_tap+0x2e/0x1b0
[  913.445306][  T833]  ? netlink_deliver_tap+0x2e/0x1b0
[  913.445331][  T833]  netlink_unicast+0x7bb/0x940
[  913.445371][  T833]  netlink_sendmsg+0x813/0xb40
[  913.445401][  T833]  ? __pfx_netlink_sendmsg+0x10/0x10
[  913.445425][  T833]  ? aa_sock_msg_perm+0xf1/0x1b0
[  913.445451][  T833]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  913.445482][  T833]  ? __pfx_netlink_sendmsg+0x10/0x10
[  913.445504][  T833]  ____sys_sendmsg+0x9b9/0xa20
[  913.445523][  T833]  ? __might_fault+0xaf/0x130
[  913.445550][  T833]  ? __pfx_____sys_sendmsg+0x10/0x10
[  913.445575][  T833]  ? import_iovec+0x73/0xa0
[  913.445598][  T833]  ___sys_sendmsg+0x2a5/0x360
[  913.445615][  T833]  ? __lock_acquire+0x683/0x2cd0
[  913.445637][  T833]  ? __pfx____sys_sendmsg+0x10/0x10
[  913.445688][  T833]  ? __fget_files+0x2a/0x420
[  913.445708][  T833]  ? __fget_files+0x3a2/0x420
[  913.445736][  T833]  __x64_sys_sendmsg+0x1bd/0x2a0
[  913.445757][  T833]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  913.445786][  T833]  ? __pfx_ksys_write+0x10/0x10
[  913.445818][  T833]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  913.445838][  T833]  do_syscall_64+0x174/0x580
[  913.445859][  T833]  ? trace_irq_disable+0x3b/0x140
[  913.445883][  T833]  ? clear_bhb_loop+0x40/0x90
[  913.445904][  T833]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  913.445921][  T833] RIP: 0033:0x7f3a2259ce59
[  913.445938][  T833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  913.445954][  T833] RSP: 002b:00007f3a233cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  913.445972][  T833] RAX: ffffffffffffffda RBX: 00007f3a22815fa0 RCX: 00007f3a2259ce59
[  913.445986][  T833] RDX: 0000000000000800 RSI: 0000200000002280 RDI: 0000000000000003
[  913.445997][  T833] RBP: 00007f3a233cb090 R08: 0000000000000000 R09: 0000000000000000
[  913.446007][  T833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  913.446017][  T833] R13: 00007f3a22816038 R14: 00007f3a22815fa0 R15: 00007ffe01710388
[  913.446046][  T833]  </TASK>
[  913.942706][  T813] infiniband syz0: set down
[  913.948781][T20848] lo speed is unknown, defaulting to 1000
[  913.954823][  T813] infiniband syz0: added lo
[  913.976987][  T813] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  913.992301][  T813] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  914.009543][  T813] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  914.013020][  T844] FAULT_INJECTION: forcing a failure.
[  914.013020][  T844] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  914.056025][  T813] RDS/IB: syz0: added
[  914.061484][  T813] smc: adding ib device syz0 with port count 1
[  914.068478][  T813] smc:    ib device syz0 port 1 has no pnetid
[  914.079970][T20840] lo speed is unknown, defaulting to 1000
[  914.088569][  T813] lo speed is unknown, defaulting to 1000
[  914.096131][  T844] CPU: 1 UID: 0 PID: 844 Comm: syz.2.7894 Not tainted syzkaller #0 PREEMPT(full) 
[  914.096155][  T844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  914.096166][  T844] Call Trace:
[  914.096174][  T844]  <TASK>
[  914.096182][  T844]  dump_stack_lvl+0xe8/0x150
[  914.096208][  T844]  should_fail_ex+0x40c/0x560
[  914.096241][  T844]  _copy_from_user+0x2d/0xb0
[  914.096263][  T844]  ___sys_sendmsg+0x1c6/0x360
[  914.096281][  T844]  ? __lock_acquire+0x683/0x2cd0
[  914.096305][  T844]  ? __pfx____sys_sendmsg+0x10/0x10
[  914.096358][  T844]  ? __fget_files+0x2a/0x420
[  914.096380][  T844]  ? __fget_files+0x3a2/0x420
[  914.096421][  T844]  __x64_sys_sendmsg+0x1bd/0x2a0
[  914.096443][  T844]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  914.096472][  T844]  ? __pfx_ksys_write+0x10/0x10
[  914.096506][  T844]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  914.096525][  T844]  do_syscall_64+0x174/0x580
[  914.096545][  T844]  ? trace_irq_disable+0x3b/0x140
[  914.096571][  T844]  ? clear_bhb_loop+0x40/0x90
[  914.096593][  T844]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  914.096617][  T844] RIP: 0033:0x7f3a2259ce59
[  914.096634][  T844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  914.096649][  T844] RSP: 002b:00007f3a233cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  914.096669][  T844] RAX: ffffffffffffffda RBX: 00007f3a22815fa0 RCX: 00007f3a2259ce59
[  914.096683][  T844] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000005
[  914.096695][  T844] RBP: 00007f3a233cb090 R08: 0000000000000000 R09: 0000000000000000
[  914.096706][  T844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  914.096717][  T844] R13: 00007f3a22816038 R14: 00007f3a22815fa0 R15: 00007ffe01710388
[  914.096748][  T844]  </TASK>
[  914.338191][  T847] netlink: 'syz.1.7895': attribute type 1 has an invalid length.
[  914.355250][  T813] lo speed is unknown, defaulting to 1000
[  914.516878][  T856] bond3: entered promiscuous mode
[  914.522134][  T856] bond3: entered allmulticast mode
[  914.530651][  T856] 8021q: adding VLAN 0 to HW filter on device bond3
[  914.565927][  T859] virt_wifi0 speed is unknown, defaulting to 1000
[  914.590307][  T863] __nla_validate_parse: 1 callbacks suppressed
[  914.590327][  T863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7900'.
[  914.633670][  T859] virt_wifi0 speed is unknown, defaulting to 1000
[  914.647661][  T862] syzkaller0: entered allmulticast mode
[  915.099232][  T859] lo speed is unknown, defaulting to 1000
[  915.140771][  T870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7903'.
[  915.168539][  T870] x_tables: duplicate underflow at hook 1
[  915.611761][  T813] lo speed is unknown, defaulting to 1000
[  915.810028][  T884] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7908'.
[  915.861405][  T887] sctp: [Deprecated]: syz.0.7910 (pid 887) Use of struct sctp_assoc_value in delayed_ack socket option.
[  915.861405][  T887] Use struct sctp_sack_info instead
[  915.880822][  T888] netlink: 'syz.3.7909': attribute type 4 has an invalid length.
[  915.917587][  T882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7909'.
[  915.918466][  T887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7910'.
[  915.994651][  T891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7910'.
[  916.016789][  T891] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7910'.
[  916.262797][  T813] lo speed is unknown, defaulting to 1000
[  916.431197][  T915] syzkaller0: entered promiscuous mode
[  916.437109][  T915] syzkaller0: entered allmulticast mode
[  916.444929][  T915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7917'.
[  916.456784][  T915] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20003
[  916.468554][  T914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7917'.
[  916.526048][  T813] lo speed is unknown, defaulting to 1000
[  916.732884][  T813] lo speed is unknown, defaulting to 1000
[  916.753760][  T924] openvswitch: netlink: IP tunnel dst address not specified
[  916.934009][  T930] FAULT_INJECTION: forcing a failure.
[  916.934009][  T930] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  916.947682][  T930] CPU: 1 UID: 0 PID: 930 Comm: syz.1.7920 Not tainted syzkaller #0 PREEMPT(full) 
[  916.947707][  T930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  916.947718][  T930] Call Trace:
[  916.947726][  T930]  <TASK>
[  916.947734][  T930]  dump_stack_lvl+0xe8/0x150
[  916.947761][  T930]  should_fail_ex+0x40c/0x560
[  916.947794][  T930]  _copy_from_iter+0x1d3/0x1660
[  916.947817][  T930]  ? rcu_is_watching+0x15/0xb0
[  916.947844][  T930]  ? __pfx__copy_from_iter+0x10/0x10
[  916.947860][  T930]  ? kmem_cache_alloc_node_noprof+0x3ca/0x680
[  916.947892][  T930]  ? netlink_sendmsg+0x650/0xb40
[  916.947912][  T930]  ? skb_put+0x112/0x210
[  916.947931][  T930]  netlink_sendmsg+0x6c0/0xb40
[  916.947959][  T930]  ? __pfx_netlink_sendmsg+0x10/0x10
[  916.947981][  T930]  ? aa_sock_msg_perm+0xf1/0x1b0
[  916.948009][  T930]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  916.948031][  T930]  ? __pfx_netlink_sendmsg+0x10/0x10
[  916.948052][  T930]  ____sys_sendmsg+0x9b9/0xa20
[  916.948071][  T930]  ? __might_fault+0xaf/0x130
[  916.948100][  T930]  ? __pfx_____sys_sendmsg+0x10/0x10
[  916.948127][  T930]  ? import_iovec+0x73/0xa0
[  916.948151][  T930]  ___sys_sendmsg+0x2a5/0x360
[  916.948168][  T930]  ? __lock_acquire+0x683/0x2cd0
[  916.948192][  T930]  ? __pfx____sys_sendmsg+0x10/0x10
[  916.948246][  T930]  ? __fget_files+0x2a/0x420
[  916.948267][  T930]  ? __fget_files+0x3a2/0x420
[  916.948299][  T930]  __x64_sys_sendmsg+0x1bd/0x2a0
[  916.948321][  T930]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  916.948351][  T930]  ? __pfx_ksys_write+0x10/0x10
[  916.948384][  T930]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  916.948404][  T930]  do_syscall_64+0x174/0x580
[  916.948424][  T930]  ? trace_irq_disable+0x3b/0x140
[  916.948449][  T930]  ? clear_bhb_loop+0x40/0x90
[  916.948471][  T930]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  916.948489][  T930] RIP: 0033:0x7f8c3739ce59
[  916.948506][  T930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  916.948522][  T930] RSP: 002b:00007f8c38220028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  916.948542][  T930] RAX: ffffffffffffffda RBX: 00007f8c37615fa0 RCX: 00007f8c3739ce59
[  916.948559][  T930] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000005
[  916.948571][  T930] RBP: 00007f8c38220090 R08: 0000000000000000 R09: 0000000000000000
[  916.948583][  T930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  916.948594][  T930] R13: 00007f8c37616038 R14: 00007f8c37615fa0 R15: 00007ffc2635b5a8
[  916.948632][  T930]  </TASK>
[  916.963722][  T813] lo speed is unknown, defaulting to 1000
[  917.147920][  T933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7921'.
[  917.764918][  T957] bridge0: entered promiscuous mode
[  917.770444][  T957] bridge0: entered allmulticast mode
[  917.780973][  T957] team0: Port device bridge0 added
[  917.789865][  T957] bridge0: port 1(team0) entered blocking state
[  917.796825][  T957] bridge0: port 1(team0) entered disabled state
[  917.804831][  T957] team0: entered allmulticast mode
[  917.811452][  T957] team_slave_0: entered allmulticast mode
[  917.817589][  T957] team_slave_1: entered allmulticast mode
[  917.826134][  T957] team0: left allmulticast mode
[  917.831013][  T957] team_slave_0: left allmulticast mode
[  917.836560][  T957] team_slave_1: left allmulticast mode
[  917.914630][  T965] netlink: 'syz.2.7927': attribute type 1 has an invalid length.
[  917.923045][  T965] sctp: [Deprecated]: syz.2.7927 (pid 965) Use of int in max_burst socket option.
[  917.923045][  T965] Use struct sctp_assoc_value instead
[  917.945483][  T965] veth1_to_batadv: entered promiscuous mode
[  917.952918][  T965] veth1_to_batadv: entered allmulticast mode
[  917.965874][  T966] syzkaller0: entered promiscuous mode
[  917.971468][  T966] syzkaller0: entered allmulticast mode
[  919.259047][  T905] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  919.580449][  T982] nbd: nbd2 already in use
[  919.873832][  T993] syzkaller0: entered promiscuous mode
[  919.887057][  T993] syzkaller0: entered allmulticast mode
[  920.121278][ T1007] __nla_validate_parse: 5 callbacks suppressed
[  920.121301][ T1007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7940'.
[  920.216398][ T1009] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7941'.
[  920.308804][ T1017] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7942'.
[  920.348159][ T1018] netlink: 'syz.1.7943': attribute type 32 has an invalid length.
[  920.359656][ T1018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7943'.
[  923.280472][ T1018] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  923.526565][ T1040] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7950'.
[  924.072665][ T1076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7959'.
[  924.092378][ T1076] netlink: 184 bytes leftover after parsing attributes in process `syz.2.7959'.
[  924.328295][ T1089] netlink: 'syz.0.7960': attribute type 14 has an invalid length.
[  924.337619][ T1089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7960'.
[  924.357201][ T1089] netlink: 'syz.0.7960': attribute type 14 has an invalid length.
[  924.365310][ T1089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7960'.
[  924.763760][ T1107] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7965'.
[  927.414512][ T1109] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  927.553885][ T1120] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7968'.
[  927.593658][ T1119] xt_TPROXY: Can be used only with -p tcp or -p udp
[  927.675073][ T1134] SET target dimension over the limit!
[  927.729490][ T1138] x_tables: duplicate underflow at hook 3
[  927.869115][ T1145] netlink: del zone limit has 8 unknown bytes
[  927.939185][ T1148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  927.959853][T19926] lo speed is unknown, defaulting to 1000
[  927.987509][T19926] syz0: Port: 1 Link ACTIVE
[  928.002641][T19926] lo speed is unknown, defaulting to 1000
[  928.094125][ T1156] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  928.141407][ T1160] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7978'.
[  928.186309][ T1164] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048)
[  928.305524][ T1170] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7982'.
[  928.355164][ T1172] xt_TPROXY: Can be used only with -p tcp or -p udp
[  928.765947][ T1196] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7991'.
[  928.818018][ T1190] bridge0: port 3(vlan2) entered blocking state
[  928.824523][ T1190] bridge0: port 3(vlan2) entered forwarding state
[  928.841358][ T1190] vlan3: left promiscuous mode
[  928.855292][ T1190] 8021q: adding VLAN 0 to HW filter on device bond2
[  928.863556][ T1190] bond3: left promiscuous mode
[  928.886261][  T219] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  929.071898][ T1207] xt_TPROXY: Can be used only with -p tcp or -p udp
[  929.126559][ T1214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7994'.
[  929.144328][ T1204] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7994'.
[  929.218037][ T1217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8000'.
[  929.253909][ T1217] x_tables: duplicate underflow at hook 1
[  929.765783][ T1244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8006'.
[  929.834428][ T1251] vlan4: entered allmulticast mode
[  929.858257][ T1251] bridge7: entered allmulticast mode
[  929.878702][ T1245] virt_wifi0 speed is unknown, defaulting to 1000
[  929.888225][ T1245] virt_wifi0 speed is unknown, defaulting to 1000
[  929.930367][ T1245] lo speed is unknown, defaulting to 1000
[  929.941740][ T1254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8010'.
[  929.972910][ T1250] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8010'.
[  929.980687][ T1240] bridge7: port 1(erspan0) entered blocking state
[  929.988898][ T1240] bridge7: port 1(erspan0) entered disabled state
[  929.995717][ T1240] erspan0: entered allmulticast mode
[  930.003796][ T1240] erspan0: entered promiscuous mode
[  930.010732][ T1240] bridge7: port 1(erspan0) entered blocking state
[  930.017372][ T1240] bridge7: port 1(erspan0) entered forwarding state
[  930.310948][ T1267] x_tables: duplicate underflow at hook 1
[  931.536676][ T1315] vlan5: entered promiscuous mode
[  931.769230][ T1326] x_tables: duplicate underflow at hook 1
[  931.922407][ T1331] x_tables: duplicate underflow at hook 1
[  932.234019][ T1350] IPv6: NLM_F_CREATE should be specified when creating new route
[  932.295444][ T1350] netlink: 'syz.4.8035': attribute type 3 has an invalid length.
[  932.615751][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  933.213037][ T1397] syzkaller0: entered promiscuous mode
[  933.223201][ T1400] netlink: 'syz.0.8049': attribute type 10 has an invalid length.
[  933.232819][ T1397] syzkaller0: entered allmulticast mode
[  933.249459][ T1400] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  933.478777][ T1416] 5nè‹Ò: entered promiscuous mode
[  933.709431][ T1431] __nla_validate_parse: 16 callbacks suppressed
[  933.709454][ T1431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8058'.
[  933.774945][ T1433] bond4: entered promiscuous mode
[  933.780156][ T1433] bond4: entered allmulticast mode
[  933.789174][ T1432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8057'.
[  933.803140][ T1431] x_tables: duplicate underflow at hook 1
[  933.943423][ T1437] ip6tnl4: entered allmulticast mode
[  934.038999][ T1443] virt_wifi0 speed is unknown, defaulting to 1000
[  934.068690][ T1443] virt_wifi0 speed is unknown, defaulting to 1000
[  934.102419][ T1443] lo speed is unknown, defaulting to 1000
[  934.133254][ T1456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8065'.
[  934.155999][ T1456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8065'.
[  934.322370][ T1464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8067'.
[  934.531076][ T1477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8072'.
[  934.685329][ T1488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8075'.
[  934.765139][ T1488] x_tables: duplicate underflow at hook 1
[  935.251601][ T1511] FAULT_INJECTION: forcing a failure.
[  935.251601][ T1511] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  935.292267][ T1511] CPU: 0 UID: 0 PID: 1511 Comm: syz.3.8082 Not tainted syzkaller #0 PREEMPT(full) 
[  935.292301][ T1511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  935.292313][ T1511] Call Trace:
[  935.292321][ T1511]  <TASK>
[  935.292329][ T1511]  dump_stack_lvl+0xe8/0x150
[  935.292354][ T1511]  should_fail_ex+0x40c/0x560
[  935.292385][ T1511]  _copy_from_user+0x2d/0xb0
[  935.292406][ T1511]  ___sys_sendmsg+0x1c6/0x360
[  935.292423][ T1511]  ? __lock_acquire+0x683/0x2cd0
[  935.292445][ T1511]  ? __pfx____sys_sendmsg+0x10/0x10
[  935.292507][ T1511]  ? __fget_files+0x2a/0x420
[  935.292529][ T1511]  ? __fget_files+0x3a2/0x420
[  935.292557][ T1511]  __x64_sys_sendmsg+0x1bd/0x2a0
[  935.292580][ T1511]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  935.292607][ T1511]  ? __pfx_ksys_write+0x10/0x10
[  935.292639][ T1511]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  935.292660][ T1511]  do_syscall_64+0x174/0x580
[  935.292681][ T1511]  ? clear_bhb_loop+0x40/0x90
[  935.292704][ T1511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  935.292721][ T1511] RIP: 0033:0x7f0b29f9ce59
[  935.292739][ T1511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  935.292755][ T1511] RSP: 002b:00007f0b2ae50028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  935.292773][ T1511] RAX: ffffffffffffffda RBX: 00007f0b2a215fa0 RCX: 00007f0b29f9ce59
[  935.292787][ T1511] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003
[  935.292799][ T1511] RBP: 00007f0b2ae50090 R08: 0000000000000000 R09: 0000000000000000
[  935.292810][ T1511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  935.292821][ T1511] R13: 00007f0b2a216038 R14: 00007f0b2a215fa0 R15: 00007fffd94ec8e8
[  935.292851][ T1511]  </TASK>
[  935.895414][ T1527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8088'.
[  935.917137][ T1527] x_tables: duplicate underflow at hook 1
[  935.984969][ T1535] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8089'.
[  936.005908][ T1535] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8089'.
[  936.199741][ T1544] netlink: 'syz.2.8095': attribute type 58 has an invalid length.
[  936.645396][ T1571] x_tables: duplicate underflow at hook 1
[  936.805413][ T1577] syzkaller0: entered promiscuous mode
[  936.820949][ T1577] syzkaller0: entered allmulticast mode
[  936.833586][ T1577] tipc: Bearer <eth:syzkaller0>: already 2 bearers with priority 0
[  936.847328][ T1577] tipc: Enabling of bearer <eth:syzkaller0> rejected, cannot adjust to lower
[  937.110777][ T1589] syzkaller0: entered promiscuous mode
[  937.131931][ T1589] syzkaller0: entered allmulticast mode
[  937.344794][ T1598] x_tables: duplicate underflow at hook 1
[  937.468070][ T1612] FAULT_INJECTION: forcing a failure.
[  937.468070][ T1612] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  937.504358][ T1612] CPU: 0 UID: 0 PID: 1612 Comm: syz.4.8118 Not tainted syzkaller #0 PREEMPT(full) 
[  937.504381][ T1612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  937.504391][ T1612] Call Trace:
[  937.504397][ T1612]  <TASK>
[  937.504404][ T1612]  dump_stack_lvl+0xe8/0x150
[  937.504427][ T1612]  should_fail_ex+0x40c/0x560
[  937.504455][ T1612]  _copy_to_user+0x31/0xb0
[  937.504475][ T1612]  simple_read_from_buffer+0xe1/0x170
[  937.504498][ T1612]  proc_fail_nth_read+0x1bb/0x230
[  937.504520][ T1612]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  937.504541][ T1612]  ? rw_verify_area+0x24a/0x4c0
[  937.504560][ T1612]  ? tun_chr_write_iter+0x18a/0x200
[  937.504582][ T1612]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  937.504599][ T1612]  vfs_read+0x213/0xa80
[  937.504621][ T1612]  ? __pfx___mutex_lock+0x10/0x10
[  937.504640][ T1612]  ? __pfx_vfs_read+0x10/0x10
[  937.504660][ T1612]  ? __fget_files+0x2a/0x420
[  937.504681][ T1612]  ? __fget_files+0x3a2/0x420
[  937.504697][ T1612]  ? __fget_files+0x2a/0x420
[  937.504721][ T1612]  ksys_read+0x150/0x270
[  937.504744][ T1612]  ? __pfx_ksys_read+0x10/0x10
[  937.504769][ T1612]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  937.504785][ T1612]  do_syscall_64+0x174/0x580
[  937.504805][ T1612]  ? clear_bhb_loop+0x40/0x90
[  937.504824][ T1612]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  937.504838][ T1612] RIP: 0033:0x7efef8f5d68e
[  937.504854][ T1612] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  937.504869][ T1612] RSP: 002b:00007efef9dd0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  937.504887][ T1612] RAX: ffffffffffffffda RBX: 00007efef9dd16c0 RCX: 00007efef8f5d68e
[  937.504899][ T1612] RDX: 000000000000000f RSI: 00007efef9dd10a0 RDI: 0000000000000004
[  937.504910][ T1612] RBP: 00007efef9dd1090 R08: 0000000000000000 R09: 0000000000000000
[  937.504921][ T1612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  937.504932][ T1612] R13: 00007efef9216038 R14: 00007efef9215fa0 R15: 00007ffcc2d311b8
[  937.504964][ T1612]  </TASK>
[  938.839889][ T1640] __nla_validate_parse: 7 callbacks suppressed
[  938.839911][ T1640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8128'.
[  939.034514][ T1643] x_tables: duplicate underflow at hook 1
[  939.825900][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  941.142476][ T1632] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  941.380553][ T1659] veth1_to_batadv: entered promiscuous mode
[  941.559714][ T1673] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  941.680019][ T1681] netlink: 'syz.0.8139': attribute type 21 has an invalid length.
[  941.700911][ T1681] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8139'.
[  941.726713][ T1681] netlink: 'syz.0.8139': attribute type 5 has an invalid length.
[  941.751015][ T1681] netlink: 'syz.0.8139': attribute type 6 has an invalid length.
[  941.759117][ T1681] netlink: 3 bytes leftover after parsing attributes in process `syz.0.8139'.
[  942.022279][ T1696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8142'.
[  942.053341][ T1696] x_tables: duplicate underflow at hook 1
[  942.568283][ T1718] syzkaller0: entered promiscuous mode
[  942.585924][ T1718] syzkaller0: entered allmulticast mode
[  942.645372][ T1722] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8145'.
[  942.840709][ T1741] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8147'.
[  942.865221][ T1741] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8147'.
[  943.126950][ T1755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8151'.
[  943.308693][ T1755] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8151'.
[  944.096564][ T1798] ip6tnl5: entered allmulticast mode
[  944.105357][ T1798] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.8165'.
[  944.116368][ T1798] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.8165'.
[  944.230216][ T1807] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8167'.
[  944.659773][ T1828] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8173'.
[  944.852731][ T1838] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8179'.
[  944.900628][ T1838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8179'.
[  944.915743][ T1841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8178'.
[  944.954688][ T1841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8178'.
[  945.061469][ T1852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8183'.
[  945.093137][ T1854] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8185'.
[  945.114585][ T1856] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8
[  945.410215][ T1875] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma?
[  945.592609][ T1890] netlink: 'syz.0.8190': attribute type 4 has an invalid length.
[  947.885877][ T2018] netlink: 'syz.0.8234': attribute type 1 has an invalid length.
[  947.902473][ T2018] netlink: 'syz.0.8234': attribute type 4 has an invalid length.
[  947.928695][ T2016] syzkaller0: entered promiscuous mode
[  947.934412][ T2016] syzkaller0: entered allmulticast mode
[  951.474333][ T2023] syzkaller1: entered promiscuous mode
[  951.479907][ T2023] syzkaller1: entered allmulticast mode
[  951.506558][ T2030] __nla_validate_parse: 9 callbacks suppressed
[  951.506586][ T2030] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8236'.
[  951.522083][ T2033] dummy0: entered allmulticast mode
[  951.664588][ T2043] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8240'.
[  951.722802][ T2047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8242'.
[  951.739647][ T2039] netlink: 'syz.1.8238': attribute type 3 has an invalid length.
[  951.769635][ T2048] netlink: 'syz.2.8241': attribute type 1 has an invalid length.
[  951.803045][ T2053] netlink: 'syz.2.8241': attribute type 1 has an invalid length.
[  952.180999][ T2071] netlink: 'syz.4.8249': attribute type 10 has an invalid length.
[  952.219486][ T2049] udevd[2049]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  952.225766][ T2071] 8021q: adding VLAN 0 to HW filter on device team0
[  952.248473][ T2071] bond0: (slave team0): Enslaving as an active interface with an up link
[  952.277429][ T2075] netlink: zone id is out of range
[  952.286086][ T2075] netlink: zone id is out of range
[  952.295325][ T2075] netlink: zone id is out of range
[  952.314501][ T2075] netlink: zone id is out of range
[  952.348976][ T2073] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8250'.
[  952.359053][ T2075] netlink: zone id is out of range
[  952.378165][ T2075] netlink: zone id is out of range
[  952.395725][ T2075] netlink: zone id is out of range
[  952.401229][ T2075] netlink: zone id is out of range
[  952.418152][ T2075] netlink: zone id is out of range
[  952.432202][ T2075] netlink: zone id is out of range
[  952.569372][ T2091] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8254'.
[  952.714458][ T2093] netlink: 'syz.2.8255': attribute type 1 has an invalid length.
[  952.777931][ T2097] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8258'.
[  952.813912][ T2097] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8258'.
[  953.218858][ T2113] gretap3: entered allmulticast mode
[  953.248842][ T2115] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8263'.
[  953.431249][ T2123] netlink: 6060 bytes leftover after parsing attributes in process `syz.0.8266'.
[  953.570168][ T2129] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8267'.
[  953.895925][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  954.259080][ T2149] netlink: 'syz.2.8272': attribute type 13 has an invalid length.
[  955.116149][ T5644] block nbd6: Receive control failed (result -32)
[  955.116534][   T50] block nbd6: Receive control failed (result -32)
[  955.323524][ T2195] syzkaller0: entered promiscuous mode
[  955.346121][ T2195] syzkaller0: entered allmulticast mode
[  956.177573][ T2204] xt_TPROXY: Can be used only with -p tcp or -p udp
[  958.938343][ T2201] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  959.030057][ T2233] __nla_validate_parse: 10 callbacks suppressed
[  959.030080][ T2233] netlink: 248 bytes leftover after parsing attributes in process `syz.3.8292'.
[  959.081948][ T2209] syzkaller0: entered promiscuous mode
[  959.105128][ T2209] syzkaller0: entered allmulticast mode
[  962.675099][ T2243] veth1_to_bridge: Caught tx_queue_len zero misconfig
[  962.682653][ T2247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8295'.
[  962.886185][ T2274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8299'.
[  962.959886][ T2274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8299'.
[  963.111812][ T2277] syzkaller0: entered promiscuous mode
[  963.127803][ T2277] syzkaller0: entered allmulticast mode
[  966.414483][ T2314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8312'.
[  966.590276][ T2329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8316'.
[  966.733762][ T2334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8317'.
[  966.763026][ T2334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8317'.
[  966.840242][ T2338] net_ratelimit: 44 callbacks suppressed
[  966.840262][ T2338] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check.
[  967.201069][ T2359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8325'.
[  967.237350][ T2358] virt_wifi0 speed is unknown, defaulting to 1000
[  967.259728][ T2358] virt_wifi0 speed is unknown, defaulting to 1000
[  967.318361][ T2358] lo speed is unknown, defaulting to 1000
[  967.576765][ T2371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8327'.
[  967.611545][ T2371] x_tables: duplicate underflow at hook 1
[  967.628661][ T2373] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8328'.
[  967.831326][ T2382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8331'.
[  967.935177][ T2387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8332'.
[  968.016391][ T2395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8332'.
[  968.260961][ T2404] x_tables: duplicate underflow at hook 1
[  968.440748][ T2411] nbd: must specify a size in bytes for the device
[  968.873640][ T2424] veth0_to_team: entered promiscuous mode
[  968.913215][ T2424] veth0_to_team: left promiscuous mode
[  968.990295][ T2426] syzkaller0: entered promiscuous mode
[  969.007287][ T2426] syzkaller0: entered allmulticast mode
[  969.777087][ T2454] syzkaller0: entered promiscuous mode
[  969.797282][ T2454] syzkaller0: entered allmulticast mode
[  970.907658][ T2521] x_tables: duplicate underflow at hook 1
[  971.143445][ T2523] FAULT_INJECTION: forcing a failure.
[  971.143445][ T2523] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  971.163170][ T2528] tipc: Bearer <eth:syzkaller0>: already 2 bearers with priority 0
[  971.185836][ T2528] tipc: Enabling of bearer <eth:syzkaller0> rejected, cannot adjust to lower
[  971.208841][ T2523] CPU: 1 UID: 0 PID: 2523 Comm: syz.0.8368 Not tainted syzkaller #0 PREEMPT(full) 
[  971.208866][ T2523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  971.208877][ T2523] Call Trace:
[  971.208885][ T2523]  <TASK>
[  971.208892][ T2523]  dump_stack_lvl+0xe8/0x150
[  971.208920][ T2523]  should_fail_ex+0x40c/0x560
[  971.208951][ T2523]  _copy_from_user+0x2d/0xb0
[  971.208972][ T2523]  kstrtouint_from_user+0xd6/0x180
[  971.209000][ T2523]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  971.209042][ T2523]  proc_fail_nth_write+0x8e/0x210
[  971.209066][ T2523]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  971.209097][ T2523]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  971.209120][ T2523]  vfs_write+0x296/0xba0
[  971.209154][ T2523]  ? __pfx_vfs_write+0x10/0x10
[  971.209188][ T2523]  ? __x64_sys_sendmsg+0x1da/0x2a0
[  971.209219][ T2523]  ksys_write+0x150/0x270
[  971.209245][ T2523]  ? __pfx_ksys_write+0x10/0x10
[  971.209276][ T2523]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  971.209295][ T2523]  do_syscall_64+0x174/0x580
[  971.209314][ T2523]  ? trace_irq_disable+0x3b/0x140
[  971.209340][ T2523]  ? clear_bhb_loop+0x40/0x90
[  971.209362][ T2523]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  971.209380][ T2523] RIP: 0033:0x7feed7f5d68e
[  971.209397][ T2523] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  971.209412][ T2523] RSP: 002b:00007feed8ea4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  971.209431][ T2523] RAX: ffffffffffffffda RBX: 00007feed8ea56c0 RCX: 00007feed7f5d68e
[  971.209444][ T2523] RDX: 0000000000000001 RSI: 00007feed8ea50a0 RDI: 000000000000000d
[  971.209456][ T2523] RBP: 00007feed8ea5090 R08: 0000000000000000 R09: 0000000000000000
[  971.209467][ T2523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  971.209478][ T2523] R13: 00007feed8216038 R14: 00007feed8215fa0 R15: 00007ffff8cfaa38
[  971.209510][ T2523]  </TASK>
[  971.432260][ T2534] syzkaller0: entered promiscuous mode
[  971.463709][ T2534] syzkaller0: entered allmulticast mode
[  971.945915][ T2553] syzkaller0: entered promiscuous mode
[  971.962313][ T2553] syzkaller0: entered allmulticast mode
[  971.975261][ T2557] __nla_validate_parse: 9 callbacks suppressed
[  971.975280][ T2557] netlink: 88 bytes leftover after parsing attributes in process `syz.2.8377'.
[  972.001012][ T2555] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8377'.
[  972.363049][ T2577] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8381'.
[  975.598875][ T2574] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check.
[  975.618333][ T2599] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8385'.
[  975.631759][ T2599] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  975.740221][ T2610] xt_TPROXY: Can be used only with -p tcp or -p udp
[  975.828301][ T2622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8389'.
[  975.928549][ T2630] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  976.171910][ T2647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8396'.
[  976.239695][ T2649] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8398'.
[  976.255986][ T2650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8396'.
[  976.347363][ T2656] netlink: 'syz.4.8399': attribute type 1 has an invalid length.
[  976.375435][ T2656] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8399'.
[  976.424083][ T2653] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  976.505408][ T2663] syzkaller0: entered promiscuous mode
[  976.515430][ T2663] syzkaller0: entered allmulticast mode
[  976.623488][ T2669] syzkaller0: entered promiscuous mode
[  976.629761][ T2669] syzkaller0: entered allmulticast mode
[  976.660225][ T2674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8403'.
[  976.699983][ T2682] xt_TPROXY: Can be used only with -p tcp or -p udp
[  980.022213][ T2731] netlink: 'syz.2.8414': attribute type 1 has an invalid length.
[  980.030276][ T2731] netlink: 'syz.2.8414': attribute type 2 has an invalid length.
[  980.252746][ T2736] xt_CT: You must specify a L4 protocol and not use inversions on it
[  980.785769][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  982.439108][ T2720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8412'.
[  982.510954][ T2746] xt_TPROXY: Can be used only with -p tcp or -p udp
[  982.736567][ T2759] bond4: entered promiscuous mode
[  982.744729][ T2759] netlink: 'syz.0.8421': attribute type 1 has an invalid length.
[  982.753104][ T2759] netlink: 'syz.0.8421': attribute type 2 has an invalid length.
[  982.924777][ T2780] bond5: (slave tunl0): Device is not bonding slave
[  982.933114][ T2780] bond5: option active_slave: invalid value (tunl0)
[  982.942534][ T2780] bond5 (unregistering): Released all slaves
[  982.994819][ T2785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8426'.
[  983.054860][ T2786] x_tables: duplicate underflow at hook 1
[  985.702214][ T2761] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  985.747917][ T2791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8427'.
[  985.797275][ T2791] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8427'.
[  985.814701][ T2791] netlink: 'syz.3.8427': attribute type 7 has an invalid length.
[  985.837230][ T2791] netlink: 'syz.3.8427': attribute type 8 has an invalid length.
[  985.879970][ T2791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8427'.
[  985.925625][ T2804] xt_TPROXY: Can be used only with -p tcp or -p udp
[  986.126520][ T2818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8436'.
[  986.552348][ T2852] bond10: Removing last arp target with arp_interval on
[  986.577696][ T2852] netlink: 'syz.3.8441': attribute type 1 has an invalid length.
[  986.613726][ T2866] xt_TPROXY: Can be used only with -p tcp or -p udp
[  987.071827][ T2893] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8448'.
[  987.608442][ T2910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8454'.
[  987.621400][ T2911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8453'.
[  987.632871][ T2911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8453'.
[  987.694499][ T2914] xt_TPROXY: Can be used only with -p tcp or -p udp
[  987.924415][ T2921] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8456'.
[  988.054860][ T2932] netlink: 'syz.2.8458': attribute type 5 has an invalid length.
[  988.173997][ T2940] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8460'.
[  988.512209][ T2958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8465'.
[  988.536730][ T2958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8465'.
[  988.585143][ T2960] xt_TPROXY: Can be used only with -p tcp or -p udp
[  988.662492][ T2964] netlink: 240 bytes leftover after parsing attributes in process `syz.3.8469'.
[  988.800694][ T2973] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8473'.
[  988.813241][ T2972] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8470'.
[  988.952596][ T2982] netlink: 'syz.4.8476': attribute type 2 has an invalid length.
[  988.980641][ T2982] netlink: 'syz.4.8476': attribute type 9 has an invalid length.
[  988.991931][ T2982] netlink: 'syz.4.8476': attribute type 1 has an invalid length.
[  989.366047][ T2991] bond1: (slave gretap1): making interface the new active one
[  989.378873][ T2991] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  989.389075][ T2983] tc_dump_action: action bad kind
[  989.426666][ T2993] macvlan3: entered promiscuous mode
[  989.432232][ T2993] macvlan3: entered allmulticast mode
[  989.439556][ T2993] bond1: entered promiscuous mode
[  989.445229][ T2993] gretap1: entered promiscuous mode
[  989.453034][ T2993] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  989.461280][ T2993] bond1: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  989.478012][ T2993] bond1: left promiscuous mode
[  989.482963][ T2993] gretap1: left promiscuous mode
[  989.743615][ T3012] netlink: 'syz.2.8484': attribute type 1 has an invalid length.
[  989.802533][ T3012] 8021q: adding VLAN 0 to HW filter on device bond9
[  989.869974][ T3012] 8021q: adding VLAN 0 to HW filter on device bond9
[  989.878534][ T3012] bond9: (slave gre1): The slave device specified does not support setting the MAC address
[  989.890233][ T3012] bond9: (slave gre1): Error -95 calling set_mac_address
[  990.000127][ T3019] gretap2: entered promiscuous mode
[  990.071653][ T3023] x_tables: duplicate underflow at hook 1
[  990.252854][ T3030] xt_TPROXY: Can be used only with -p tcp or -p udp
[  990.591482][ T3040] netlink: 'syz.4.8491': attribute type 1 has an invalid length.
[  990.628570][ T3036] ip6gre2: entered promiscuous mode
[  990.634879][ T3036] ip6gre2: entered allmulticast mode
[  990.884043][ T3057] x_tables: duplicate underflow at hook 1
[  991.704679][ T3101] x_tables: duplicate underflow at hook 1
[  991.787498][ T3106] openvswitch: netlink: nsh attr 14384 is out of range max 3
[  991.812117][ T3108] openvswitch: netlink: nsh attr 14384 is out of range max 3
[  991.830194][ T3106] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  991.853731][ T3110] openvswitch: netlink: VXLAN extension 51 out of range max 1
[  991.861769][ T3108] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  992.631820][ T3151] x_tables: duplicate underflow at hook 1
[  992.783169][ T3159] __nla_validate_parse: 15 callbacks suppressed
[  992.783189][ T3159] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8526'.
[  992.882411][ T3165] 5nè: entered promiscuous mode
[  992.919825][ T3167] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8527'.
[  993.500182][ T3190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8534'.
[  993.527931][ T3190] 8021q: adding VLAN 0 to HW filter on device bond10
[  993.596299][ T3167] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  993.761407][ T3201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8535'.
[  993.830373][ T3209] x_tables: duplicate underflow at hook 1
[  994.175290][ T3240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8541'.
[  994.189516][ T3241] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8542'.
[  994.235981][ T3240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8541'.
[  994.254672][ T3244] xt_connbytes: Forcing CT accounting to be enabled
[  994.356408][ T3246] netlink: 732 bytes leftover after parsing attributes in process `syz.2.8542'.
[  994.405805][ T3246] netlink: 732 bytes leftover after parsing attributes in process `syz.2.8542'.
[  994.512516][ T3245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8542'.
[  994.536263][ T3245] nbd: device at index 64 is going down
[  994.584530][ T3241] netlink: 'syz.2.8542': attribute type 10 has an invalid length.
[  994.654077][ T3241] dummy0: entered allmulticast mode
[  994.674200][ T2747] udevd[2747]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  994.688502][ T3241] team0: Port device dummy0 added
[  995.112514][ T3261] sch_fq: defrate 8 ignored.
[  995.171738][   T13] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  995.231787][   T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  995.306227][   T13] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  995.343741][   T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  995.343820][ T3286] netlink: 'syz.1.8551': attribute type 21 has an invalid length.
[  995.368108][   T13] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  995.377194][ T3286] IPv6: NLM_F_CREATE should be specified when creating new route
[  995.397992][   T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  995.416671][ T3289] netlink: 'syz.1.8551': attribute type 13 has an invalid length.
[  995.434619][   T13] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  995.474237][   T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  995.514520][ T3288] x_tables: duplicate underflow at hook 1
[  995.604081][ T3299] xt_TPROXY: Can be used only with -p tcp or -p udp
[  995.694201][ T3315] FAULT_INJECTION: forcing a failure.
[  995.694201][ T3315] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  995.738212][ T3315] CPU: 0 UID: 0 PID: 3315 Comm: syz.2.8557 Not tainted syzkaller #0 PREEMPT(full) 
[  995.738237][ T3315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  995.738248][ T3315] Call Trace:
[  995.738256][ T3315]  <TASK>
[  995.738264][ T3315]  dump_stack_lvl+0xe8/0x150
[  995.738290][ T3315]  should_fail_ex+0x40c/0x560
[  995.738322][ T3315]  _copy_from_user+0x2d/0xb0
[  995.738344][ T3315]  __sys_bind+0x1c6/0x410
[  995.738370][ T3315]  ? __pfx___sys_bind+0x10/0x10
[  995.738407][ T3315]  ? __pfx_ksys_write+0x10/0x10
[  995.738435][ T3315]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  995.738454][ T3315]  __x64_sys_bind+0x7a/0x90
[  995.738479][ T3315]  do_syscall_64+0x174/0x580
[  995.738498][ T3315]  ? trace_irq_disable+0x3b/0x140
[  995.738524][ T3315]  ? clear_bhb_loop+0x40/0x90
[  995.738546][ T3315]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  995.738564][ T3315] RIP: 0033:0x7f3a2259ce59
[  995.738581][ T3315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  995.738596][ T3315] RSP: 002b:00007f3a233aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  995.738613][ T3315] RAX: ffffffffffffffda RBX: 00007f3a22816090 RCX: 00007f3a2259ce59
[  995.738627][ T3315] RDX: 0000000000000010 RSI: 00002000000003c0 RDI: 0000000000000005
[  995.738638][ T3315] RBP: 00007f3a233aa090 R08: 0000000000000000 R09: 0000000000000000
[  995.738649][ T3315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  995.738660][ T3315] R13: 00007f3a22816128 R14: 00007f3a22816090 R15: 00007ffe01710388
[  995.738688][ T3315]  </TASK>
[  995.814381][ T3314] virt_wifi0 speed is unknown, defaulting to 1000
[  995.953014][ T3314] virt_wifi0 speed is unknown, defaulting to 1000
[  996.024390][ T3314] lo speed is unknown, defaulting to 1000
[  996.529410][ T3351] xt_CT: You must specify a L4 protocol and not use inversions on it
[  996.666216][ T3361] xt_TPROXY: Can be used only with -p tcp or -p udp
[  996.756219][ T3366] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  997.002393][ T3375] FAULT_INJECTION: forcing a failure.
[  997.002393][ T3375] name failslab, interval 1, probability 0, space 0, times 0
[  997.018970][ T3375] CPU: 1 UID: 0 PID: 3375 Comm: syz.0.8575 Not tainted syzkaller #0 PREEMPT(full) 
[  997.018994][ T3375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  997.019005][ T3375] Call Trace:
[  997.019011][ T3375]  <TASK>
[  997.019019][ T3375]  dump_stack_lvl+0xe8/0x150
[  997.019046][ T3375]  should_fail_ex+0x40c/0x560
[  997.019078][ T3375]  should_failslab+0xa8/0x100
[  997.019103][ T3375]  ? can_rx_register+0x16d/0x7a0
[  997.019124][ T3375]  kmem_cache_alloc_noprof+0x87/0x650
[  997.019153][ T3375]  can_rx_register+0x16d/0x7a0
[  997.019174][ T3375]  ? __pfx_raw_rcv+0x10/0x10
[  997.019199][ T3375]  raw_enable_filters+0x98/0x200
[  997.019226][ T3375]  raw_enable_allfilters+0x82/0x2e0
[  997.019253][ T3375]  raw_bind+0x265/0x730
[  997.019273][ T3375]  ? bpf_lsm_socket_bind+0x9/0x20
[  997.019297][ T3375]  __sys_bind+0x2e3/0x410
[  997.019324][ T3375]  ? __pfx___sys_bind+0x10/0x10
[  997.019360][ T3375]  ? __pfx_ksys_write+0x10/0x10
[  997.019389][ T3375]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  997.019408][ T3375]  __x64_sys_bind+0x7a/0x90
[  997.019433][ T3375]  do_syscall_64+0x174/0x580
[  997.019460][ T3375]  ? trace_irq_disable+0x3b/0x140
[  997.019485][ T3375]  ? clear_bhb_loop+0x40/0x90
[  997.019506][ T3375]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  997.019524][ T3375] RIP: 0033:0x7feed7f9ce59
[  997.019542][ T3375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  997.019558][ T3375] RSP: 002b:00007feed8ea5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  997.019577][ T3375] RAX: ffffffffffffffda RBX: 00007feed8215fa0 RCX: 00007feed7f9ce59
[  997.019591][ T3375] RDX: 0000000000000010 RSI: 00002000000003c0 RDI: 0000000000000005
[  997.019603][ T3375] RBP: 00007feed8ea5090 R08: 0000000000000000 R09: 0000000000000000
[  997.019614][ T3375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  997.019625][ T3375] R13: 00007feed8216038 R14: 00007feed8215fa0 R15: 00007ffff8cfaa38
[  997.019658][ T3375]  </TASK>
[  997.509257][ T3392] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  997.775790][ T3408] xt_TPROXY: Can be used only with -p tcp or -p udp
[  997.817100][ T3409] __nla_validate_parse: 19 callbacks suppressed
[  997.817119][ T3409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8584'.
[  997.821588][ T5893] wlan1: Trigger new scan to find an IBSS to join
[  997.880112][ T3409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8584'.
[  998.008937][ T3425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8589'.
[  998.020190][ T3424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8590'.
[  998.055019][ T3425] FAULT_INJECTION: forcing a failure.
[  998.055019][ T3425] name failslab, interval 1, probability 0, space 0, times 0
[  998.109715][ T3425] CPU: 1 UID: 0 PID: 3425 Comm: syz.3.8589 Not tainted syzkaller #0 PREEMPT(full) 
[  998.109742][ T3425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  998.109752][ T3425] Call Trace:
[  998.109760][ T3425]  <TASK>
[  998.109768][ T3425]  dump_stack_lvl+0xe8/0x150
[  998.109795][ T3425]  should_fail_ex+0x40c/0x560
[  998.109829][ T3425]  should_failslab+0xa8/0x100
[  998.109868][ T3425]  ? can_rx_register+0x16d/0x7a0
[  998.109891][ T3425]  kmem_cache_alloc_noprof+0x87/0x650
[  998.109913][ T3425]  ? can_rx_register+0x6c1/0x7a0
[  998.109930][ T3425]  ? __local_bh_enable_ip+0xd0/0x130
[  998.109952][ T3425]  can_rx_register+0x16d/0x7a0
[  998.109970][ T3425]  ? raw_enable_filters+0x98/0x200
[  998.109990][ T3425]  ? __pfx_raw_rcv+0x10/0x10
[  998.110014][ T3425]  raw_enable_allfilters+0x119/0x2e0
[  998.110042][ T3425]  raw_bind+0x265/0x730
[  998.110061][ T3425]  ? bpf_lsm_socket_bind+0x9/0x20
[  998.110084][ T3425]  __sys_bind+0x2e3/0x410
[  998.110109][ T3425]  ? __pfx___sys_bind+0x10/0x10
[  998.110141][ T3425]  ? __pfx_ksys_write+0x10/0x10
[  998.110169][ T3425]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  998.110188][ T3425]  __x64_sys_bind+0x7a/0x90
[  998.110211][ T3425]  do_syscall_64+0x174/0x580
[  998.110229][ T3425]  ? trace_irq_disable+0x3b/0x140
[  998.110253][ T3425]  ? clear_bhb_loop+0x40/0x90
[  998.110273][ T3425]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  998.110288][ T3425] RIP: 0033:0x7f0b29f9ce59
[  998.110304][ T3425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  998.110318][ T3425] RSP: 002b:00007f0b2ae2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  998.110336][ T3425] RAX: ffffffffffffffda RBX: 00007f0b2a216090 RCX: 00007f0b29f9ce59
[  998.110349][ T3425] RDX: 0000000000000010 RSI: 00002000000003c0 RDI: 0000000000000005
[  998.110360][ T3425] RBP: 00007f0b2ae2f090 R08: 0000000000000000 R09: 0000000000000000
[  998.110370][ T3425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  998.110381][ T3425] R13: 00007f0b2a216128 R14: 00007f0b2a216090 R15: 00007fffd94ec8e8
[  998.110412][ T3425]  </TASK>
[  998.119613][ T3430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8590'.
[  998.161925][ T3428] netlink: 296 bytes leftover after parsing attributes in process `syz.4.8591'.
[  998.386378][ T3428] netlink: 'syz.4.8591': attribute type 1 has an invalid length.
[  998.420274][ T3428] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8591'.
[  998.462819][ T3432] netlink: 296 bytes leftover after parsing attributes in process `syz.4.8591'.
[  998.638563][ T3448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8592'.
[  998.641406][ T3449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8592'.
[  999.033831][ T3469] xt_TPROXY: Can be used only with -p tcp or -p udp
[  999.432844][ T3483] vlan5: entered promiscuous mode
[  999.593769][ T5899] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  999.616433][ T5899] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  999.634973][ T5899] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  999.654246][ T5899] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  999.923397][ T3511] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1000.452741][ T3550] netlink: 'syz.0.8626': attribute type 2 has an invalid length.
[ 1000.631186][ T3558] IPVS: set_ctl: invalid protocol: 60 10.1.1.1:20002
[ 1000.853477][ T3568] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[ 1000.869296][  T219] wlan1: Trigger new scan to find an IBSS to join
[ 1001.090771][ T3582] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1001.528802][ T3600] bond11 (unregistering): Released all slaves
[ 1001.807292][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1001.830441][ T3620] netlink: 'syz.2.8645': attribute type 2 has an invalid length.
[ 1003.488189][ T3630] __nla_validate_parse: 17 callbacks suppressed
[ 1003.488209][ T3630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8647'.
[ 1004.468588][ T3609] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1004.543293][ T3636] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8649'.
[ 1004.899080][ T3651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8656'.
[ 1005.151785][ T3674] ip6_vti0: Caught tx_queue_len zero misconfig
[ 1005.187424][ T3674] gtp4: entered promiscuous mode
[ 1005.198739][ T3674] gtp4: entered allmulticast mode
[ 1005.612489][ T3689] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8667'.
[ 1005.625698][ T3691] netlink: 'syz.4.8668': attribute type 2 has an invalid length.
[ 1005.647684][ T3691] netlink: 232 bytes leftover after parsing attributes in process `syz.4.8668'.
[ 1005.977759][ T3701] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1006.038976][ T3701] tipc: Disabling bearer <eth:syzkaller0>
[ 1006.070822][ T3706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8671'.
[ 1006.360721][ T3716] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[ 1006.623175][ T3725] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1006.968775][ T3739] netlink: 'syz.0.8683': attribute type 2 has an invalid length.
[ 1007.005112][ T3739] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8683'.
[ 1007.145745][ T3749] netlink: 'syz.1.8685': attribute type 1 has an invalid length.
[ 1007.243570][ T3751] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1007.298406][ T3752] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[ 1007.336930][ T3752] bond5 (unregistering): Released all slaves
[ 1007.426865][ T3751] syzkaller0: entered promiscuous mode
[ 1007.475685][ T3751] syzkaller0: entered allmulticast mode
[ 1007.611768][ T3766] netlink: 'syz.2.8690': attribute type 3 has an invalid length.
[ 1007.634887][ T3766] xt_hashlimit: max too large, truncated to 1048576
[ 1007.643704][ T3766] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1007.714645][ T3768] FAULT_INJECTION: forcing a failure.
[ 1007.714645][ T3768] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1007.735160][ T3770] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1007.763320][ T3768] CPU: 0 UID: 0 PID: 3768 Comm: syz.1.8691 Not tainted syzkaller #0 PREEMPT(full) 
[ 1007.763345][ T3768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1007.763357][ T3768] Call Trace:
[ 1007.763365][ T3768]  <TASK>
[ 1007.763373][ T3768]  dump_stack_lvl+0xe8/0x150
[ 1007.763401][ T3768]  should_fail_ex+0x40c/0x560
[ 1007.763433][ T3768]  _copy_from_user+0x2d/0xb0
[ 1007.763462][ T3768]  ___sys_sendmsg+0x1c6/0x360
[ 1007.763481][ T3768]  ? __lock_acquire+0x683/0x2cd0
[ 1007.763505][ T3768]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1007.763560][ T3768]  ? __fget_files+0x2a/0x420
[ 1007.763580][ T3768]  ? __fget_files+0x3a2/0x420
[ 1007.763612][ T3768]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1007.763634][ T3768]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1007.763670][ T3768]  ? __pfx_ksys_write+0x10/0x10
[ 1007.763700][ T3768]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1007.763719][ T3768]  do_syscall_64+0x174/0x580
[ 1007.763738][ T3768]  ? trace_irq_disable+0x3b/0x140
[ 1007.763762][ T3768]  ? clear_bhb_loop+0x40/0x90
[ 1007.763785][ T3768]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1007.763803][ T3768] RIP: 0033:0x7f8c3739ce59
[ 1007.763821][ T3768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1007.763836][ T3768] RSP: 002b:00007f8c38220028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1007.763855][ T3768] RAX: ffffffffffffffda RBX: 00007f8c37615fa0 RCX: 00007f8c3739ce59
[ 1007.763869][ T3768] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004
[ 1007.763881][ T3768] RBP: 00007f8c38220090 R08: 0000000000000000 R09: 0000000000000000
[ 1007.763892][ T3768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1007.763904][ T3768] R13: 00007f8c37616038 R14: 00007f8c37615fa0 R15: 00007ffc2635b5a8
[ 1007.763934][ T3768]  </TASK>
[ 1007.986590][ T3774] netlink: 'syz.2.8694': attribute type 10 has an invalid length.
[ 1007.997618][ T3772] netlink: 'syz.4.8692': attribute type 7 has an invalid length.
[ 1008.227443][ T3779] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[ 1008.260372][ T3779] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[ 1008.302718][ T3779] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[ 1008.324556][ T5893] smbdirect: ib_dev[syz1] removed
[ 1008.341528][ T3750] tipc: Resetting bearer <eth:syzkaller0>
[ 1008.411338][ T3750] tipc: Disabling bearer <eth:syzkaller0>
[ 1008.426106][T19926] tipc: Node number set to 3610936291
[ 1008.823658][ T3786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8698'.
[ 1008.842793][ T3789] dummy0: left allmulticast mode
[ 1008.863436][ T3789] team0: Port device dummy0 removed
[ 1008.879426][ T3789] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1009.117329][ T3795] netlink: 'syz.0.8700': attribute type 4 has an invalid length.
[ 1009.373426][ T3807] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8704'.
[ 1009.398681][ T3808] netlink: 'syz.1.8705': attribute type 61 has an invalid length.
[ 1009.436115][ T3808] netlink: 'syz.1.8705': attribute type 62 has an invalid length.
[ 1009.452886][ T3810] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[ 1009.532795][ T3815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8707'.
[ 1010.107153][ T3832] can: request_module (can-proto-0) failed.
[ 1010.123544][ T3836] netlink: 'syz.2.8713': attribute type 1 has an invalid length.
[ 1010.316987][ T3838] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8716'.
[ 1010.360363][ T3841] veth1_to_bond: entered promiscuous mode
[ 1010.376023][ T3841] veth1_to_bond: entered allmulticast mode
[ 1010.394520][ T3845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8714'.
[ 1010.500072][ T3843] bond11 (unregistering): Released all slaves
[ 1010.589467][ T3845] veth1_to_bond (unregistering): left promiscuous mode
[ 1010.597351][ T3845] veth1_to_bond (unregistering): left allmulticast mode
[ 1010.613369][ T3845] bond0: (slave bond_slave_1): Releasing backup interface
[ 1010.673068][ T3842] validate_nla: 2 callbacks suppressed
[ 1010.673086][ T3842] netlink: 'syz.3.8715': attribute type 1 has an invalid length.
[ 1010.837846][ T3843] bond11 (unregistering): Released all slaves
[ 1010.946747][ T3842] netlink: 'syz.3.8715': attribute type 1 has an invalid length.
[ 1010.969387][ T3842] netlink: 'syz.3.8715': attribute type 1 has an invalid length.
[ 1011.089054][ T3843] bond11 (unregistering): Released all slaves
[ 1011.175454][ T3842] netlink: 'syz.3.8715': attribute type 1 has an invalid length.
[ 1011.588591][ T3889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8728'.
[ 1011.675788][ T3894] pim6reg: entered allmulticast mode
[ 1011.736347][ T3894] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1011.784487][ T3893] pim6reg: left allmulticast mode
[ 1011.835441][ T3898] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1011.876949][ T3898] syzkaller0: entered promiscuous mode
[ 1011.896498][ T3898] syzkaller0: entered allmulticast mode
[ 1011.955121][ T3897] tipc: Resetting bearer <eth:syzkaller0>
[ 1011.960057][ T3906] netlink: 'syz.2.8735': attribute type 4 has an invalid length.
[ 1012.008814][ T3897] tipc: Disabling bearer <eth:syzkaller0>
[ 1012.104813][ T3909] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1012.472269][ T3932] FAULT_INJECTION: forcing a failure.
[ 1012.472269][ T3932] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1012.513075][ T3932] CPU: 0 UID: 0 PID: 3932 Comm: syz.0.8743 Not tainted syzkaller #0 PREEMPT(full) 
[ 1012.513101][ T3932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1012.513112][ T3932] Call Trace:
[ 1012.513120][ T3932]  <TASK>
[ 1012.513128][ T3932]  dump_stack_lvl+0xe8/0x150
[ 1012.513154][ T3932]  should_fail_ex+0x40c/0x560
[ 1012.513188][ T3932]  _copy_from_user+0x2d/0xb0
[ 1012.513209][ T3932]  ___sys_sendmsg+0x1c6/0x360
[ 1012.513229][ T3932]  ? __lock_acquire+0x683/0x2cd0
[ 1012.513252][ T3932]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1012.513305][ T3932]  ? __fget_files+0x2a/0x420
[ 1012.513327][ T3932]  ? __fget_files+0x3a2/0x420
[ 1012.513357][ T3932]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1012.513379][ T3932]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1012.513408][ T3932]  ? __pfx_ksys_write+0x10/0x10
[ 1012.513441][ T3932]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1012.513461][ T3932]  do_syscall_64+0x174/0x580
[ 1012.513480][ T3932]  ? trace_irq_disable+0x3b/0x140
[ 1012.513505][ T3932]  ? clear_bhb_loop+0x40/0x90
[ 1012.513527][ T3932]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1012.513543][ T3932] RIP: 0033:0x7feed7f9ce59
[ 1012.513560][ T3932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1012.513575][ T3932] RSP: 002b:00007feed8ea5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1012.513595][ T3932] RAX: ffffffffffffffda RBX: 00007feed8215fa0 RCX: 00007feed7f9ce59
[ 1012.513608][ T3932] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003
[ 1012.513620][ T3932] RBP: 00007feed8ea5090 R08: 0000000000000000 R09: 0000000000000000
[ 1012.513632][ T3932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1012.513643][ T3932] R13: 00007feed8216038 R14: 00007feed8215fa0 R15: 00007ffff8cfaa38
[ 1012.513673][ T3932]  </TASK>
[ 1012.956256][ T3942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8746'.
[ 1012.989755][ T3942] x_tables: duplicate underflow at hook 1
[ 1013.121900][ T3948] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1013.150294][ T3952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8751'.
[ 1013.384268][ T3961] bond5 (unregistering): Released all slaves
[ 1013.407862][ T3971] netlink: 'syz.3.8758': attribute type 15 has an invalid length.
[ 1013.425833][ T3974] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8755'.
[ 1013.432925][ T3971] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8758'.
[ 1013.491749][ T3971] : renamed from veth0_to_bond
[ 1013.518362][ T3974] Bluetooth: MGMT ver 1.23
[ 1013.532186][ T3974] netlink: 'syz.4.8755': attribute type 10 has an invalid length.
[ 1013.562080][ T3974] 
[ 1013.564463][ T3974] ============================================
[ 1013.570616][ T3974] WARNING: possible recursive locking detected
[ 1013.576787][ T3974] syzkaller #0 Not tainted
[ 1013.581208][ T3974] --------------------------------------------
[ 1013.587365][ T3974] syz.4.8755/3974 is trying to acquire lock:
[ 1013.593357][ T3974] ffff88807bdc6e18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: __ethtool_get_link_ksettings+0x109/0x250
[ 1013.604537][ T3974] 
[ 1013.604537][ T3974] but task is already holding lock:
[ 1013.611913][ T3974] ffff88807bdc6e18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x3d4/0x4670
[ 1013.621612][ T3974] and the lock comparison function returns 0:
[ 1013.627669][ T3974] 
[ 1013.627669][ T3974] other info that might help us debug this:
[ 1013.635711][ T3974]  Possible unsafe locking scenario:
[ 1013.635711][ T3974] 
[ 1013.643145][ T3974]        CPU0
[ 1013.646409][ T3974]        ----
[ 1013.649671][ T3974]   lock(&dev_instance_lock_key#3);
[ 1013.654872][ T3974]   lock(&dev_instance_lock_key#3);
[ 1013.660063][ T3974] 
[ 1013.660063][ T3974]  *** DEADLOCK ***
[ 1013.660063][ T3974] 
[ 1013.668189][ T3974]  May be due to missing lock nesting notation
[ 1013.668189][ T3974] 
[ 1013.676491][ T3974] 2 locks held by syz.4.8755/3974:
[ 1013.681581][ T3974]  #0: ffffffff8fdc1540 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_setlink+0x6a7/0xb20
[ 1013.690540][ T3974]  #1: ffff88807bdc6e18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x3d4/0x4670
[ 1013.700630][ T3974] 
[ 1013.700630][ T3974] stack backtrace:
[ 1013.706508][ T3974] CPU: 1 UID: 0 PID: 3974 Comm: syz.4.8755 Not tainted syzkaller #0 PREEMPT(full) 
[ 1013.706528][ T3974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1013.706538][ T3974] Call Trace:
[ 1013.706546][ T3974]  <TASK>
[ 1013.706555][ T3974]  dump_stack_lvl+0xe8/0x150
[ 1013.706576][ T3974]  print_deadlock_bug+0x279/0x290
[ 1013.706597][ T3974]  __lock_acquire+0x24bf/0x2cd0
[ 1013.706615][ T3974]  ? rcu_is_watching+0x15/0xb0
[ 1013.706634][ T3974]  ? trace_sched_exit_tp+0x3a/0x130
[ 1013.706658][ T3974]  ? __schedule+0x1856/0x57a0
[ 1013.706673][ T3974]  ? ___sys_sendmsg+0x2a5/0x360
[ 1013.706687][ T3974]  ? __x64_sys_sendmsg+0x1bd/0x2a0
[ 1013.706702][ T3974]  ? do_syscall_64+0x174/0x580
[ 1013.706722][ T3974]  ? __ethtool_get_link_ksettings+0x109/0x250
[ 1013.706742][ T3974]  lock_acquire+0x106/0x350
[ 1013.706756][ T3974]  ? __ethtool_get_link_ksettings+0x109/0x250
[ 1013.706781][ T3974]  __mutex_lock+0x19d/0x1590
[ 1013.706798][ T3974]  ? __ethtool_get_link_ksettings+0x109/0x250
[ 1013.706818][ T3974]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1013.706835][ T3974]  ? __ethtool_get_link_ksettings+0x109/0x250
[ 1013.706855][ T3974]  ? __pfx___mutex_lock+0x10/0x10
[ 1013.706872][ T3974]  ? trace_irq_disable+0x3b/0x140
[ 1013.706899][ T3974]  __ethtool_get_link_ksettings+0x109/0x250
[ 1013.706920][ T3974]  bond_netdev_event+0x643/0xf80
[ 1013.706943][ T3974]  ? __pfx_bond_netdev_event+0x10/0x10
[ 1013.706967][ T3974]  ? ipmr_device_event+0x1f6/0x220
[ 1013.706991][ T3974]  notifier_call_chain+0x1a5/0x3d0
[ 1013.707013][ T3974]  __dev_notify_flags+0x1aa/0x310
[ 1013.707037][ T3974]  ? __pfx___dev_notify_flags+0x10/0x10
[ 1013.707051][ T3974]  ? __dev_change_flags+0x5f1/0x820
[ 1013.707067][ T3974]  ? __pfx___dev_change_flags+0x10/0x10
[ 1013.707085][ T3974]  netif_change_flags+0xde/0x1b0
[ 1013.707101][ T3974]  dev_change_flags+0x128/0x260
[ 1013.707125][ T3974]  vlan_device_event+0x1b4e/0x1f00
[ 1013.707143][ T3974]  ? packet_notifier+0xf1b/0xf70
[ 1013.707159][ T3974]  ? br_device_event+0x282/0x9c0
[ 1013.707173][ T3974]  ? __pfx_phonet_device_notify+0x10/0x10
[ 1013.707190][ T3974]  ? __pfx_vlan_device_event+0x10/0x10
[ 1013.707206][ T3974]  ? bcm_notifier+0xa9/0x890
[ 1013.707219][ T3974]  ? raw_notifier+0x9d/0x7d0
[ 1013.707240][ T3974]  ? cgw_notifier+0x314/0x380
[ 1013.707256][ T3974]  notifier_call_chain+0x1a5/0x3d0
[ 1013.707278][ T3974]  __dev_notify_flags+0x1aa/0x310
[ 1013.707293][ T3974]  ? __pfx___dev_notify_flags+0x10/0x10
[ 1013.707306][ T3974]  ? __dev_change_flags+0x5f1/0x820
[ 1013.707327][ T3974]  ? __pfx___dev_change_flags+0x10/0x10
[ 1013.707344][ T3974]  netif_change_flags+0xde/0x1b0
[ 1013.707360][ T3974]  do_setlink+0xdd6/0x4670
[ 1013.707375][ T3974]  ? __wake_up_klogd+0xe6/0x120
[ 1013.707397][ T3974]  ? __pfx_vprintk_emit+0x10/0x10
[ 1013.707417][ T3974]  ? __pfx_do_setlink+0x10/0x10
[ 1013.707432][ T3974]  ? __lock_acquire+0x683/0x2cd0
[ 1013.707450][ T3974]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1013.707466][ T3974]  ? rcu_is_watching+0x15/0xb0
[ 1013.707483][ T3974]  ? do_trace_netlink_extack+0x80/0x1d0
[ 1013.707505][ T3974]  ? __mutex_trylock_common+0x15f/0x270
[ 1013.707526][ T3974]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1013.707547][ T3974]  ? rcu_is_watching+0x15/0xb0
[ 1013.707563][ T3974]  ? trace_contention_end+0x3d/0x140
[ 1013.707582][ T3974]  ? __mutex_lock+0x30f/0x1590
[ 1013.707603][ T3974]  ? rtnl_setlink+0x6a7/0xb20
[ 1013.707616][ T3974]  ? __pfx___mutex_lock+0x10/0x10
[ 1013.707637][ T3974]  ? ns_capable+0x89/0xe0
[ 1013.707653][ T3974]  rtnl_setlink+0x77d/0xb20
[ 1013.707667][ T3974]  ? __pfx_rtnl_setlink+0x10/0x10
[ 1013.707683][ T3974]  ? __lock_acquire+0x683/0x2cd0
[ 1013.707721][ T3974]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[ 1013.707748][ T3974]  ? __pfx_rtnl_setlink+0x10/0x10
[ 1013.707761][ T3974]  rtnetlink_rcv_msg+0x802/0xc00
[ 1013.707782][ T3974]  ? kasan_save_track+0x3e/0x80
[ 1013.707803][ T3974]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[ 1013.707825][ T3974]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1013.707847][ T3974]  ? __lock_acquire+0x683/0x2cd0
[ 1013.707866][ T3974]  netlink_rcv_skb+0x226/0x4a0
[ 1013.707882][ T3974]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1013.707905][ T3974]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1013.707924][ T3974]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1013.707939][ T3974]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1013.707956][ T3974]  netlink_unicast+0x7bb/0x940
[ 1013.707982][ T3974]  netlink_sendmsg+0x813/0xb40
[ 1013.708001][ T3974]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1013.708018][ T3974]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1013.708047][ T3974]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1013.708067][ T3974]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1013.708085][ T3974]  ____sys_sendmsg+0x9b9/0xa20
[ 1013.708100][ T3974]  ? __might_fault+0xaf/0x130
[ 1013.708121][ T3974]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1013.708140][ T3974]  ? import_iovec+0x73/0xa0
[ 1013.708158][ T3974]  ___sys_sendmsg+0x2a5/0x360
[ 1013.708173][ T3974]  ? __lock_acquire+0x683/0x2cd0
[ 1013.708189][ T3974]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1013.708206][ T3974]  ? futex_wake+0x4d7/0x5b0
[ 1013.708235][ T3974]  ? __fget_files+0x2a/0x420
[ 1013.708252][ T3974]  ? __fget_files+0x3a2/0x420
[ 1013.708273][ T3974]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1013.708290][ T3974]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1013.708309][ T3974]  ? rcu_is_watching+0x15/0xb0
[ 1013.708328][ T3974]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1013.708344][ T3974]  do_syscall_64+0x174/0x580
[ 1013.708360][ T3974]  ? trace_irq_disable+0x3b/0x140
[ 1013.708382][ T3974]  ? clear_bhb_loop+0x40/0x90
[ 1013.708398][ T3974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1013.708413][ T3974] RIP: 0033:0x7efef8f9ce59
[ 1013.708429][ T3974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1013.708442][ T3974] RSP: 002b:00007efef9db0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1013.708460][ T3974] RAX: ffffffffffffffda RBX: 00007efef9216090 RCX: 00007efef8f9ce59
[ 1013.708472][ T3974] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a
[ 1013.708483][ T3974] RBP: 00007efef9032d6f R08: 0000000000000000 R09: 0000000000000000
[ 1013.708493][ T3974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1013.708502][ T3974] R13: 00007efef9216128 R14: 00007efef9216090 R15: 00007ffcc2d311b8
[ 1013.708520][ T3974]  </TASK>
[ 1014.324590][ T3988] netlink: 'syz.3.8762': attribute type 4 has an invalid length.
[ 1014.337084][ T3990] __nla_validate_parse: 4 callbacks suppressed
[ 1014.337102][ T3990] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8761'.