last executing test programs:

9.919702535s ago: executing program 3 (id=5756):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x7fff}}, 0x1, 0x4, 0x0, 0x6, 0x28, 0x6, 0x81}, &(0x7f0000000200)=0x9c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYRESHEX=r2, @ANYRES32=r3, @ANYBLOB="00000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x4000)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close(0x3)
r5 = socket(0x2000000000000021, 0x2, 0x10000000000002)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_getanyicast={0x14, 0x3e, 0x4, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc004}, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, 0x0, &(0x7f0000000140))
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000002}, 0x90)
sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
recvmmsg(r9, &(0x7f0000006400)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000005000)=[{0xfffffffffffffffe}], 0x1}, 0x4}], 0x2, 0x3, 0x0)
sendmmsg(r9, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006480)=ANY=[], 0x30f8}}], 0x1, 0x4004044)

6.014721943s ago: executing program 3 (id=5781):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000300007d01ff020000000000000000000000000001"], 0xfdef)

5.784527012s ago: executing program 3 (id=5783):
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', <r2=>0x0})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES32=r2, @ANYRES8=r0], 0x54}, 0x1, 0x0, 0x0, 0x19ed9560c843872c}, 0x8044)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000200)='bridge0\x00') (async)
ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000200)='bridge0\x00')
close(0x3) (async)
close(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1e, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000005001b00f500000095e113653110008c6d00"/45], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
socket(0x10, 0x803, 0x0) (async)
socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x2, 'wg0\x00', {0x8}, 0x7})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48)
close(0x3) (async)
close(0x3)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xfffffffffffffe5a, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4841) (async)
sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4841)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x13c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0xf8, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x5c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x4}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x5}]}}}, {0x44, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x164}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000854)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00'], 0x64}}, 0x4800) (async)
sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00'], 0x64}}, 0x4800)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000000540)=[{&(0x7f0000000240)="c46aeec32a96fc4885882297bc9f21f6e209fa75d7fceac2", 0x18}, {&(0x7f00000002c0)="0398a22632286be996e5b4204377c0fe7bd6ed81e6fcf88e96a8567131", 0xfffffffffffffe1e}], 0x2)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x40004)
sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) (async)
sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0)

5.419639461s ago: executing program 3 (id=5786):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, 0x0, 0x0)
recvmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}, 0x2000)
recvfrom$unix(r0, &(0x7f00000002c0)=""/199, 0xc7, 0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xa, 0x1c, 0x0, 0x0, 0x5, 0xb3, &(0x7f000000cf3d)=""/179, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000980)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0xe9, &(0x7f0000000780)=""/233, 0x0, 0xc}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$XFS_IOC_FSGEOMETRY_V4(r2, 0x8070587c, &(0x7f0000000600))
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000003e0007010300000000000000027c00000400428011000100686d"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x2f, 0xa0005, 0x6f}, 0x2c)
sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

4.910423772s ago: executing program 1 (id=5790):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x800007, r1}, 0x38)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x58, &(0x7f0000000080)}, 0x10)
pipe(&(0x7f0000001b40)={<r2=>0xffffffffffffffff})
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18, r4}, 0x18)
ioctl$XFS_IOC_EXCHANGE_RANGE(r5, 0x40285881, &(0x7f0000000480)={r4, 0x0, 0x3, 0x9, 0xc2, 0x8})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r7, 0x29, 0x1a, 0x0, &(0x7f0000002840))
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$NILFS_IOCTL_GET_BDESCS(r2, 0xc0186e87, &(0x7f0000000800)={&(0x7f00000006c0)=[{0x7f, 0x34948825, 0x7, 0x6, 0xa452}, {0x72c, 0x100000001, 0x401, 0x7ff, 0x8}, {0x2, 0xaf40, 0xa, 0xfff, 0xffff}, {0x40005, 0x1, 0x1000, 0x3, 0x3}, {0x4228, 0xf, 0x8, 0x5, 0xfffffffd}, {0x8001, 0x1, 0x5, 0x21, 0x6}], 0x6, 0x28, 0x6, 0xc})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000faffffff22000000180000801400020064756d6d793000000000000200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x24040)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f00000001c0)='nfc\x00', 0x654302, 0x0, 0x4, 0x0, 0x0})
syz_emit_ethernet(0x46, 0x0, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, 0x0, 0x0)
setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4)
syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$nbd(0x0, r9)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0)
sendmsg$IPSET_CMD_ADD(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aaaaaaaaaaaa0000bc598c7e0606e92cfd739581b34505bed41f903d33ffe15e2bec68f02c725501ccf62df413640c8280462b9c32bcad4d7b337feffe60d1da87c7cd0ed1e8c666b2847bea0c3cc9b3d05df9cea2d18d2f7a71b89689aae9f7e921d259c8e916fc221a96537925fd6f4152b4678433d71f3c4817b6588ffc1b5c84e086a0214d9e27e1f45845c2"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x54, 0x30, 0xffff, 0x70bd25, 0x0, {}, [{0x40, 0x1, [@m_tunnel_key={0x3c, 0x5, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6}}}}]}]}, 0x54}}, 0x0)

4.238354217s ago: executing program 3 (id=5796):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665a10000004400058005000900000000000500200001000000050008"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800)

3.929098051s ago: executing program 2 (id=5798):
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0xfffe, 0x0, @mcast1={0xff, 0x4}}, 0x1c)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a0"], 0xffd8}, 0x1, 0x0, 0x0, 0xa8050000}, 0x0)

3.928174436s ago: executing program 3 (id=5799):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000c000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a31000000000800030000000006300004800800010000001234140002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800)

3.749731891s ago: executing program 2 (id=5801):
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084"], 0x30}], 0x1, 0x0)
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008810}, 0x8010)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x488c5}, 0x0)
sendmsg$nl_route(r1, 0x0, 0x8000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x884)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca0200000000000000adcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d070490893616810a121ff4feedd1d176b313b9fc7bf31ddff431a4a50760ce18a76c4b7aa73cec3eec984c76d16f798c436410f3f4a41715e736a132c3cb9421be0b3c2bd40b75896c007"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18080000000040000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020080ffffff18000000fffffffe00000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000280)='GPL\x00', 0x2, 0xda, &(0x7f00000005c0)=""/218}, 0x94)

3.233166922s ago: executing program 4 (id=5804):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0, 0x0, {0x0, 0x3f4}}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408)

3.155224689s ago: executing program 2 (id=5805):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010800000000084)
sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}, 0xff84}, {{0x0, 0x0, 0x0}}], 0x2, 0x4008040)

2.936557269s ago: executing program 4 (id=5807):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000300)=@framed={{0x18, 0x8, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}, @call={0x85, 0x0, 0x900, 0xa0}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)

2.703069527s ago: executing program 2 (id=5809):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="fee7dd3f6bb9dcea5c993ed53bc5cfdd0bc171fdf1", 0x15)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000004}], 0x492492492492561, 0x40080) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
r3 = socket(0x10, 0x3, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100fcfffffffcdbdf2507000000", @ANYRES32, @ANYBLOB="140004006e696376663000000000000000000000080005000600000014001780040007000400030004000400040006"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r6, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) (async)
recvfrom(r6, 0x0, 0x0, 0x32, 0x0, 0x0) (async)
pwritev(r2, &(0x7f0000001840)=[{&(0x7f0000000380)="e2a12ef5780351b047f5f760fe88ff027387b9ac0908f00819ac3a49629f3ec1f09876f0178d0d0ba74b1f2b28fd3b401116b5979665611e2418e77cfb41d4e8c8a42ad2c1a0660556e7dbbc9c3ba4c8ffa0aea769603e78ebc5e1a2682fa544bfbe554537e9db878c9f8eef04d0148e948db955f731ffbe0eb3f6b414a58f5c766a13b6bd1c99384e727535eaae3029a1be14cd", 0x94}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="017853e7aca173949d863700d018937839e2f28e4320605278d56966c706b8e3b3d9ea9b44b6985eceef5baf986ecdd706bfaa0adeb11da9cfae58ad69f26c4b4751f5141872e5969cdc7a2b3e3d4a51120c113d26bc5a56da9ce6458a7bab565721e208f3874c90f452f452b92b2f97501cd31f3097e413cefdb29647a58c7733803f3c99b8d064e1eabdb03a3d25ef72f2934f29f1d43ad9daf13b085a76cd05aa056792e36f2d8845bd9c5598b22a562185bbf9ff3b21743a20", 0xbb}, {&(0x7f0000001640)="f4407941572185c62eb34048830d21ad4168054ee1946f047a62d7fa6176b96f25d795576b22c370ba3e6d768aaf16bbe0c3b918aa1019ab8247", 0x3a}, {&(0x7f0000001680)="944a3ee3ef5d7a1b3243e8a9b7cf6e864c37e5a9b1519b92a4b7a46d115a720f8e2c3dc98de038077ab22cd846228c10f54e4e4948611aab580d86c3039758656c625dbc3246f11031ad86dbb1c91539", 0x50}, {&(0x7f0000001700)="c446bd521f31c8ad6c52ec22e693322f47f5753f02827d642cf6ef1e194ca1fb5846aba25a8c5cb51fbcf6a20849ea5cce24d78ab0c295ee1d8c082e6bce74250b7402ec0a56e547bd45be17519b3db05eb4a572f1ce72629d0fae57c2cf7516f2540d07dc4ea06cc4177ac344945607f1affbb0cfe4b7fe093f96f18041e6f7ff846c493b887638e09d70afc3119270e59f13a4243611ba5dec2564e8d14277b8efc8554309d8ebec5f60e07297", 0xae}, {&(0x7f00000017c0)="7794b661f8b8f2e27ddf561d234800eb234d7d7e2b76cd9bbe03129ac5523a373467893ad37bef7554d2b629028281d1968fd1dacabc27e30be99d9ce65e3e3888d801ccad1fba1a4cf3fac88953c2d9b7c49dfd28dbdc", 0x57}], 0x7, 0x496f, 0x1) (async)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) (async)
syz_emit_ethernet(0x4e, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbb8d0b9b2e256888a84e008100210008004b000038000000000011907800000000000000000f2d91d395f67c990000100000001007000000060000001b0000ce20000c907801400001d92422b7acc5a781d867cd46a3ddb6a5cc5884e15359df0b20963e9f42f413ee"], 0x0) (async)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f00000018c0)={0x0, 0x1c, &(0x7f0000001900)=[@in6={0xa, 0x4e21, 0x10, @dev={0xfe, 0x80, '\x00', 0x40}, 0x5d}]}, &(0x7f00000002c0)=0x10) (async)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r11=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000280)={r11}, &(0x7f0000000340)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000001c0)={r11, @in={{0x2, 0x4e24, @empty}}, 0x7, 0x23}, 0x90) (async)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x20}}, 0x801)

2.35327402s ago: executing program 4 (id=5811):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x4000, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000002f00090027bd7000000000000400000004000d"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff)
r3 = socket(0x200000000000011, 0x2, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in=@rand_addr=0x640100fe, {0x0, 0x0, 0x1, 0x0, 0x40000000000000, 0xfffffffffffffffc}, {0x1a000000, 0x1, 0x80000000, 0x2}, {0x10, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x73, 0x4c}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}, @algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e23, @in=@rand_addr=0x64010100}}]}, 0x1a0}}, 0x0)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x5}, 0x4)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c0, 0x0, 0x98, 0x130, 0x260, 0x328, 0x0, 0x98, 0x130, 0x1c8, 0x328, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x420)
r6 = socket$inet(0x2, 0x3, 0xff)
sendto(r6, &(0x7f0000000100)="4500001c00010000401174c00c0002010c0002010001000100080000", 0x1c, 0x0, &(0x7f0000000200)=@in={0x2, 0x0, @loopback}, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r7, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x45}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008801)

2.224874297s ago: executing program 2 (id=5812):
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000008000000911015000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x3e68, @loopback, 0x1}, 0x1c) (async)
setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async, rerun: 32)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) (rerun: 32)
write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[], 0x32600)
r5 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) (async, rerun: 64)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) (async, rerun: 64)
setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) (async)
sendmmsg$inet6(r5, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) (async)
recvmmsg(r5, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/19, 0xfffffffffffffefd}, 0xcf}], 0x1, 0x2023, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async)
sendmmsg(r3, &(0x7f0000003b80)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @loopback, 0xc21}, 0x80, 0x0}, 0x5b4}], 0x1, 0x20000850) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x17, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1b}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x35e}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0xffe, &(0x7f0000000580)=""/4094, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94)

1.971811309s ago: executing program 0 (id=5813):
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000018110004", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020786c2500000000002020"], 0x0, 0xf234, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@getchain={0x3c, 0x11, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb}, {0x7, 0xf}, {0x0, 0xe}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44060}, 0x98)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[], 0x20)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003940), r1)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000003a00)={0x0, 0x0, &(0x7f00000039c0)={&(0x7f0000003980)={0x20, r2, 0x701, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800c094}, 0x90)
write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6)

1.825709524s ago: executing program 2 (id=5814):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.387630136s ago: executing program 0 (id=5815):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000410001000000080004000000010000000400cb801400018010001080080001000500000004000e800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f00000001c0)={0x0, {{0xa, 0x4e24, 0x17, @mcast1, 0x4}}, {{0xa, 0x4e08, 0x4a2, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[], 0x610)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
unshare(0x42040b00)
close(0x3)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x288840, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r3, 0x0, 0x0}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x40002002)
sendto$inet(r2, &(0x7f0000000900)="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", 0x1a1, 0x12, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500)
r6 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @local, 0xfffffffe}}, {{0xa, 0x4e22, 0x4a3, @mcast1, 0x4f0}}}, 0x108)
pipe(&(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
vmsplice(r7, 0xfffffffffffffffe, 0x1, 0xb)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000000000000000000000000000a00030076657468300000003400128009000100766574680000000024000280200001"], 0x60}}, 0x0)
ioctl$XFS_IOC_COMMIT_RANGE(r8, 0x40585883, &(0x7f0000000300)={r5, 0x0, 0x0, 0xff, 0x3, 0x2, [0x3, 0x6, 0x100, 0x4, 0x80000001, 0x4]})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r8)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00112183944f9c9c47cd6e1bac3735c3b9042cbd7000fcdbdf25040000000500050002000000140001800500020046000000080003007f000001"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040011)

1.310115348s ago: executing program 1 (id=5816):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2002b08020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400031fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)

1.289062153s ago: executing program 4 (id=5817):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
recvmsg(r4, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff00c117000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.157398964s ago: executing program 1 (id=5818):
socket$nl_rdma(0x10, 0x3, 0x14)
writev(0xffffffffffffffff, &(0x7f0000003140)=[{0x0}, {&(0x7f00000002c0)="ca7bfc8312c9237bffa562dc1d03c723970f07a1078c261ec3fdfed5f81f4f5fe80bb3ebaa7484bfa3214d", 0x2b}, {0x0}, {&(0x7f0000001000)="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", 0x463}], 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000008c0)={0x18, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc8d1}, 0x8000)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000004d00)={0x18, 0x14, 0x211, 0x0, 0x0, {0x1e}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14, &(0x7f0000000140)={&(0x7f0000000080)="0c952bdd19b8d8f3723a0ae3f72dc3a71e3c866a4c5639f7d9a1ab045031fcd23e1e2d5e2a893fff1f852d41aac9b67ccb5b3ffaa0a242c967d0207f4fff06fb663fad53290e8feead5ec5d985ab85e04097d8904c736a2075f8200f8e5355ece76c3e148c57f53f735feaff3a637aa075fb3b6215d5531beeeeeaeb1e769a53264872799c853d6d8e527a2715d9dae7a985fdc56e967ccf5479c54e99", 0x9d}, 0x1, 0x0, 0x0, 0x404c014}, 0x15)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48)
r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0xfffe}}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e6576650000500002800500080000000000040038020500090001000000050003"], 0x88}}, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x7}, @map_fd={0x18, 0x2, 0x1, 0x0, r5}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe02a}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'])

1.028853567s ago: executing program 0 (id=5819):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='D', &(0x7f0000000240), 0x4b2, r1}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000001740), 0x2, r1}, 0x38)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x11, 0x4, 0x4, 0x2}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000f0ff00850000001100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000200000085000000330000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0c00018008000600"], 0x318}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)

806.288266ms ago: executing program 4 (id=5820):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0xa)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYBLOB="0600"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c000000480005800800010065756800070002"], 0x5c}}, 0x0)
unshare(0x2020600)
r5 = socket$kcm(0x29, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711029000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x2, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0xfff}}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_FLOW={0x8, 0xb, 0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a0679450e88370200c54c1960b89c40ebb373", 0x39}, {&(0x7f0000000840)="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", 0x10c8}, {&(0x7f0000002400)="eda757ad8bb120cc32a1f3850795a01dc8ab7e3791c6340e86a681802a9340bd18fa35eb990721d4c3fd8464363ce48b0db4bcb80c127f2a1e24bf94ef814b6bc68df0debce576b0470500ec4d32f12e14c6ad4e61bc5e9cbdbc47d7664613a03e91b10461bc2ca8518d6ce2da058a987aa7e5cc154644c7d09847b62e32dba771278b5b181ceb22a9c8b891d7914949d163050745360e5ddbf5259cd273795d23e89475a701752b7442eda5691cbbc0528c3259efe65c9ef017695338781c22c0bd22e70199985f8e938db992ea7ffdf75612e478976c3f58e7ac6c8adb8664c5292de4a8e6478d36", 0xe9}], 0x3}, 0x810)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x80000000, @mcast2, 0x4}, 0x1c)
close(r6)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00'})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000)
setsockopt$llc_int(r0, 0x10c, 0x1, 0x0, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000711081000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37306a)

627.653224ms ago: executing program 1 (id=5821):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000033000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000)

553.011052ms ago: executing program 0 (id=5822):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000020000000000000099aa00f818150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ffffff7f7b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000001d000000850000000500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

418.472339ms ago: executing program 1 (id=5823):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2478a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x44}}, 0x80c0)

345.655612ms ago: executing program 0 (id=5824):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
close(r1)
r2 = socket(0x11, 0x2, 0xffc)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', <r3=>0x0, 0x4, 0x8, 0x7, 0xfffff036, 0x32, @local, @empty, 0x7800, 0x7, 0x5, 0xf79}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', r3, 0x2f, 0x7, 0x2, 0x7, 0x5, @loopback, @loopback, 0x8, 0x7800, 0x6, 0x4}})
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840)

335.587029ms ago: executing program 4 (id=5825):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x35471edb37b0984d}, 0x24000005)
socket(0x2, 0x2, 0x1)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x19, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r1, @ANYBLOB="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"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x40001)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
writev(r2, &(0x7f0000000200), 0x20)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0xd, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x33f}}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x4001, 0x3, 0x228, 0x0, 0xb, 0x148, 0x0, 0x148, 0x208, 0x240, 0x240, 0x208, 0x215, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x21, 0x0, 0x10}, 0x2e8, 0x70, 0xb8, 0x0, {0xff0f000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0xab, 0x6, 'syz1\x00', {0x4}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'team0\x00', 'netpci0\x00', {}, {}, 0x0, 0x1}, 0xec010000, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x48050)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x24004004)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0)

45.545109ms ago: executing program 1 (id=5826):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde0800450000740000000000019078ac1e0001ac1414aa05009078e00000e0460000000000000000110000ac1414aa00000000830300070300443c000364010184000000000000000000000000ac1414aa00000000ac1414bb000000000000000000000000ac141400"/130], 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x400000000000081, 0x0, &(0x7f0000003700)={0x77359400})
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200087ad, &(0x7f0000e68000)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5)
ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f00000008c0)={<r2=>0xffffffffffffffff, &(0x7f0000000300)='@\x00', 0x1, 0x0, 0x200, 0x0, 0x0})
sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c840}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80)
r4 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x94)

0s ago: executing program 0 (id=5827):
unshare(0x20040600)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="183000000100000000000000030000f826c3e94427db0000"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003800010325bd7000fcffffff00000000"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20)
r2 = accept(r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x1, [{0xa, 0x3, 0x20000000}]}, @int={0x5, 0x0, 0x0, 0x1, 0x5, 0x20}, @enum={0x7}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x61, 0x61, 0x2e, 0x0, 0x5f]}}, 0x0, 0x58}, 0x28)
syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r2)
sendmmsg$inet(r2, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="5ef6cebffd9a3a04e0eec87c904342f254877032d67b1b8b318b2cddfc4b9a982b6391f2607da1e411dc20806dc603d0913a26f8de64eb1916c8c34db83a26a12864086fd1cc7f8d855804e66bb277955a96be07a52730e1b6660b9a75692abfb969a2f9889bfc7eda72199363d043eabf85b71559117968cc118feec9c380b5799c3a2cce88311840861930aa0bec21fa9d178fed8993aebed0b9c0bf394f5aee4788d025dc9521877f84129bfb319b433be3d3fa39bde73c3fd8908360d197a5a6a43cf0729296a93cc36a8f220b2d3f137476fd0c24064e5d94", 0xdb}, {&(0x7f0000000300)="dce90455db0e481f65c140f8086f2923606b418a4708735b4e6645da08e93c9764b2d9d619c076ee39b0dc69a34ee0be0325336fea39a7459bf204d38c34f6e2d5c402f1157a90acdd139ce2d4f4a85cb4468c8820365e5364cd2102380fc13a4bb4b0b5a56e2bdb1193941a67c1d87b0abca47e6b86eab15a4a916182d3447ff7b21713aeae3f48d7b4d5bf51ba04d8e47278e971f06239b5d6baafbf995a1a0b217716d3", 0xa5}], 0x2}}], 0x1, 0x8000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000480)={0xa, 0x8, 0x0, @mcast1, 0x2}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r5=>0x0})
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
close(r0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r9, 0x205, 0x100, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x10000}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}]}, 0x3c}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fbdbdf0e01240323a5000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004)
write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
socket(0x2b, 0x3, 0xa760)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703, 0x8000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x9}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

kernel console output (not intermixed with test programs):

][T20567] batman_adv: batadv0: Interface activated: batadv_slave_0
[  529.654464][T20567] batman_adv: batadv0: Interface activated: batadv_slave_1
[  529.682914][T20567] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  529.746736][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state
[  529.754507][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state
[  529.795374][T20578] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4520'.
[  529.804982][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state
[  529.812146][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state
[  530.013099][T20587] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4521'.
[  530.065801][T20587] siw: device registration error -23
[  530.198085][T20592] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4524'.
[  530.249119][T20592] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4524'.
[  531.509709][T20616] netlink: 'syz.3.4533': attribute type 1 has an invalid length.
[  531.571864][T20616] netlink: 200 bytes leftover after parsing attributes in process `syz.3.4533'.
[  531.673921][T20616] netlink: 'syz.3.4533': attribute type 1 has an invalid length.
[  531.711063][T20616] netlink: 29 bytes leftover after parsing attributes in process `syz.3.4533'.
[  532.241308][T20642] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4542'.
[  532.301595][T20642] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4542'.
[  532.323968][T20642] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4542'.
[  532.597889][T20646] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4544'.
[  532.664927][T20646] bridge0: port 2(bridge_slave_1) entered disabled state
[  532.849848][T20653] macsec1: entered promiscuous mode
[  532.950038][T20656] netlink: 'syz.3.4549': attribute type 1 has an invalid length.
[  532.997260][T20659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4547'.
[  533.024464][T20660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4549'.
[  533.102098][T20656] 8021q: adding VLAN 0 to HW filter on device bond8
[  533.337603][T20653] bridge0: port 2(bridge_slave_1) entered disabled state
[  533.345161][T20653] bridge0: port 1(bridge_slave_0) entered disabled state
[  533.348962][T20675] netlink: 'syz.3.4555': attribute type 1 has an invalid length.
[  533.518899][T20675] bond9: entered promiscuous mode
[  533.524437][T20675] bond9: entered allmulticast mode
[  533.530017][T20675] 8021q: adding VLAN 0 to HW filter on device bond9
[  533.818597][T20686] netlink: 'syz.3.4558': attribute type 5 has an invalid length.
[  534.590020][T20705] siw: device registration error -23
[  534.675475][T20708] netlink: 'syz.4.4565': attribute type 1 has an invalid length.
[  534.767661][T20708] 8021q: adding VLAN 0 to HW filter on device bond13
[  535.880313][T20730] netlink: 'syz.4.4570': attribute type 1 has an invalid length.
[  536.088414][T20730] 8021q: adding VLAN 0 to HW filter on device bond14
[  536.463384][T20749] netlink: 'syz.1.4575': attribute type 1 has an invalid length.
[  536.598109][T20750] bond16: (slave veth3): Enslaving as an active interface with a down link
[  536.724339][T20758] netlink: 'syz.3.4577': attribute type 1 has an invalid length.
[  536.756280][T20749] bond16: (slave veth5): Enslaving as an active interface with a down link
[  536.777632][T20762] __nla_validate_parse: 7 callbacks suppressed
[  536.777651][T20762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4577'.
[  536.787200][T20761] netlink: 'syz.2.4576': attribute type 1 has an invalid length.
[  536.969837][T20758] 8021q: adding VLAN 0 to HW filter on device bond10
[  537.004757][T20765] bridge: RTM_NEWNEIGH with invalid state 0x0
[  537.171892][T20761] bond8: entered promiscuous mode
[  537.197074][T20761] 8021q: adding VLAN 0 to HW filter on device bond8
[  537.354841][T20774] batman_adv: batadv0: Adding interface: macvtap1
[  537.371543][T20774] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  537.382821][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  537.441079][T20791] FAULT_INJECTION: forcing a failure.
[  537.441079][T20791] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  537.482248][T20780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4576'.
[  537.500702][T20791] CPU: 0 UID: 0 PID: 20791 Comm: syz.1.4585 Not tainted syzkaller #0 PREEMPT(full) 
[  537.500730][T20791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  537.500743][T20791] Call Trace:
[  537.500752][T20791]  <TASK>
[  537.500761][T20791]  dump_stack_lvl+0xe8/0x150
[  537.500796][T20791]  should_fail_ex+0x40c/0x560
[  537.500827][T20791]  _copy_from_user+0x2d/0xb0
[  537.500848][T20791]  bpf_test_init+0xd8/0x150
[  537.500879][T20791]  bpf_prog_test_run_xdp+0x4cc/0x11d0
[  537.500920][T20791]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  537.500952][T20791]  ? __fget_files+0x2a/0x420
[  537.500984][T20791]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  537.501013][T20791]  bpf_prog_test_run+0x2c5/0x340
[  537.501046][T20791]  __sys_bpf+0xa22/0xd90
[  537.501081][T20791]  ? __pfx___sys_bpf+0x10/0x10
[  537.501118][T20791]  ? __fget_files+0x2a/0x420
[  537.501161][T20791]  ? ksys_write+0x242/0x270
[  537.501183][T20791]  ? __pfx_ksys_write+0x10/0x10
[  537.501207][T20791]  __x64_sys_bpf+0xba/0xd0
[  537.501231][T20791]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  537.501253][T20791]  do_syscall_64+0x174/0x580
[  537.501280][T20791]  ? trace_irq_disable+0x3b/0x140
[  537.501305][T20791]  ? clear_bhb_loop+0x40/0x90
[  537.501328][T20791]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  537.501348][T20791] RIP: 0033:0x7f5317b9e019
[  537.501367][T20791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  537.501383][T20791] RSP: 002b:00007f5318ad5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  537.501404][T20791] RAX: ffffffffffffffda RBX: 00007f5317e25fa0 RCX: 00007f5317b9e019
[  537.501419][T20791] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  537.501432][T20791] RBP: 00007f5318ad5090 R08: 0000000000000000 R09: 0000000000000000
[  537.501445][T20791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  537.501456][T20791] R13: 00007f5317e26038 R14: 00007f5317e25fa0 R15: 00007ffe5086bf18
[  537.501488][T20791]  </TASK>
[  537.797348][T20761] bond8: (slave bridge2): making interface the new active one
[  537.805051][T20761] bridge2: entered promiscuous mode
[  537.811815][T20761] bond8: (slave bridge2): Enslaving as an active interface with an up link
[  538.174593][T20797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4586'.
[  538.294675][T20801] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  538.755105][T20812] bridge0: port 2(bridge_slave_1) entered blocking state
[  538.762448][T20812] bridge0: port 2(bridge_slave_1) entered listening state
[  538.769893][T20812] bridge0: port 1(bridge_slave_0) entered blocking state
[  538.777075][T20812] bridge0: port 1(bridge_slave_0) entered listening state
[  538.936174][T20812] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  539.028883][T20817] FAULT_INJECTION: forcing a failure.
[  539.028883][T20817] name failslab, interval 1, probability 0, space 0, times 0
[  539.097935][T20817] CPU: 0 UID: 0 PID: 20817 Comm: syz.4.4591 Not tainted syzkaller #0 PREEMPT(full) 
[  539.097963][T20817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  539.097976][T20817] Call Trace:
[  539.097985][T20817]  <TASK>
[  539.097994][T20817]  dump_stack_lvl+0xe8/0x150
[  539.098030][T20817]  should_fail_ex+0x40c/0x560
[  539.098061][T20817]  should_failslab+0xa8/0x100
[  539.098093][T20817]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  539.098120][T20817]  ? skb_clone+0x212/0x3a0
[  539.098144][T20817]  ? skb_clone+0x212/0x3a0
[  539.098176][T20817]  skb_clone+0x212/0x3a0
[  539.098205][T20817]  __netlink_deliver_tap+0x413/0x860
[  539.098244][T20817]  ? netlink_deliver_tap+0x2e/0x1b0
[  539.098271][T20817]  netlink_deliver_tap+0x19c/0x1b0
[  539.098298][T20817]  netlink_dump+0x95b/0xee0
[  539.098335][T20817]  ? __pfx_netlink_dump+0x10/0x10
[  539.098381][T20817]  ? netlink_recvmsg+0x5bf/0xa50
[  539.098405][T20817]  ? kmem_cache_free+0x182/0x650
[  539.098437][T20817]  netlink_recvmsg+0x683/0xa50
[  539.098473][T20817]  ? __pfx_netlink_recvmsg+0x10/0x10
[  539.098504][T20817]  ? __lock_acquire+0x683/0x2cf0
[  539.098539][T20817]  ? __pfx_netlink_recvmsg+0x10/0x10
[  539.098566][T20817]  sock_recvmsg_nosec+0x130/0x170
[  539.098684][T20817]  ____sys_recvmsg+0x3e3/0x4a0
[  539.098719][T20817]  ? __pfx_____sys_recvmsg+0x10/0x10
[  539.098760][T20817]  ? import_iovec+0x73/0xa0
[  539.098784][T20817]  ___sys_recvmsg+0x213/0x5a0
[  539.098816][T20817]  ? __pfx____sys_recvmsg+0x10/0x10
[  539.098847][T20817]  ? __fget_files+0x2a/0x420
[  539.098904][T20817]  do_recvmmsg+0x31a/0x7f0
[  539.098942][T20817]  ? __pfx_do_recvmmsg+0x10/0x10
[  539.098980][T20817]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  539.099011][T20817]  ? __fget_files+0x3a2/0x420
[  539.099048][T20817]  __x64_sys_recvmmsg+0x198/0x250
[  539.099077][T20817]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  539.099113][T20817]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  539.099135][T20817]  do_syscall_64+0x174/0x580
[  539.099161][T20817]  ? trace_irq_disable+0x3b/0x140
[  539.099186][T20817]  ? clear_bhb_loop+0x40/0x90
[  539.099216][T20817]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  539.099237][T20817] RIP: 0033:0x7ff1f759e019
[  539.099256][T20817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  539.099274][T20817] RSP: 002b:00007ff1f838d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  539.099295][T20817] RAX: ffffffffffffffda RBX: 00007ff1f7826090 RCX: 00007ff1f759e019
[  539.099310][T20817] RDX: 0000000000000003 RSI: 0000200000000b00 RDI: 0000000000000003
[  539.099323][T20817] RBP: 00007ff1f838d090 R08: 0000000000000000 R09: 0000000000000000
[  539.099335][T20817] R10: 0000000040000100 R11: 0000000000000246 R12: 0000000000000002
[  539.099347][T20817] R13: 00007ff1f7826128 R14: 00007ff1f7826090 R15: 00007ffc4e6d1788
[  539.099387][T20817]  </TASK>
[  539.401575][T20821] netlink: 'syz.1.4593': attribute type 1 has an invalid length.
[  539.478680][T20821] 8021q: adding VLAN 0 to HW filter on device bond17
[  539.608379][T20825] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4596'.
[  539.656077][T20833] netlink: 'syz.0.4599': attribute type 1 has an invalid length.
[  539.710062][T20833] bond7: entered promiscuous mode
[  539.715765][T20833] bond7: entered allmulticast mode
[  539.721378][T20833] 8021q: adding VLAN 0 to HW filter on device bond7
[  539.736265][T20825] veth1_to_team: entered promiscuous mode
[  539.746503][T20825] veth1_to_team: left promiscuous mode
[  539.790933][T20840] ip_tables: iptables: counters copy to user failed while replacing table
[  540.077423][T20848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  540.460885][T20857] lo speed is unknown, defaulting to 1000
[  540.800844][T20866] tipc: Resetting bearer <eth:batadv0>
[  540.883528][T20866] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  540.937917][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state
[  540.945184][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state
[  541.070939][T20879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4609'.
[  541.390002][T20890] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4614'.
[  541.916954][T20907] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4621'.
[  541.962907][T20908] ip_tables: iptables: counters copy to user failed while replacing table
[  542.051397][T20912] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4623'.
[  542.082951][T20912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4623'.
[  542.326916][T20929] IPv6: addrconf: prefix option has invalid lifetime
[  542.567179][T20896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  543.016179][T20944] FAULT_INJECTION: forcing a failure.
[  543.016179][T20944] name failslab, interval 1, probability 0, space 0, times 0
[  543.066281][T20944] CPU: 0 UID: 0 PID: 20944 Comm: syz.0.4633 Not tainted syzkaller #0 PREEMPT(full) 
[  543.066309][T20944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  543.066322][T20944] Call Trace:
[  543.066331][T20944]  <TASK>
[  543.066340][T20944]  dump_stack_lvl+0xe8/0x150
[  543.066375][T20944]  should_fail_ex+0x40c/0x560
[  543.066402][T20944]  ? bpf_test_run_xdp_live+0x1ef/0x1c20
[  543.066432][T20944]  should_failslab+0xa8/0x100
[  543.066463][T20944]  __kvmalloc_node_noprof+0x176/0x860
[  543.066496][T20944]  ? bpf_test_run_xdp_live+0x1ef/0x1c20
[  543.066526][T20944]  bpf_test_run_xdp_live+0x1ef/0x1c20
[  543.066556][T20944]  ? bpf_dispatcher_change_prog+0xc4c/0xf20
[  543.066589][T20944]  ? __mutex_unlock_slowpath+0x731/0x900
[  543.066622][T20944]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  543.066652][T20944]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  543.066679][T20944]  ? 0xffffffffa02051c0
[  543.066741][T20944]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  543.066776][T20944]  ? _copy_from_user+0x94/0xb0
[  543.066796][T20944]  ? bpf_test_init+0x113/0x150
[  543.066818][T20944]  ? xdp_convert_md_to_buff+0x5b/0x330
[  543.066846][T20944]  bpf_prog_test_run_xdp+0x7d8/0x11d0
[  543.066888][T20944]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  543.066918][T20944]  ? __fget_files+0x2a/0x420
[  543.066950][T20944]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  543.066977][T20944]  bpf_prog_test_run+0x2c5/0x340
[  543.067009][T20944]  __sys_bpf+0xa22/0xd90
[  543.067042][T20944]  ? __pfx___sys_bpf+0x10/0x10
[  543.067079][T20944]  ? __fget_files+0x2a/0x420
[  543.067122][T20944]  ? ksys_write+0x242/0x270
[  543.067151][T20944]  ? __pfx_ksys_write+0x10/0x10
[  543.067175][T20944]  __x64_sys_bpf+0xba/0xd0
[  543.067199][T20944]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  543.067224][T20944]  do_syscall_64+0x174/0x580
[  543.067250][T20944]  ? trace_irq_disable+0x3b/0x140
[  543.067275][T20944]  ? clear_bhb_loop+0x40/0x90
[  543.067298][T20944]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  543.067318][T20944] RIP: 0033:0x7f0ecf99e019
[  543.067336][T20944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  543.067353][T20944] RSP: 002b:00007f0ed077f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  543.067375][T20944] RAX: ffffffffffffffda RBX: 00007f0ecfc25fa0 RCX: 00007f0ecf99e019
[  543.067390][T20944] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  543.067403][T20944] RBP: 00007f0ed077f090 R08: 0000000000000000 R09: 0000000000000000
[  543.067415][T20944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  543.067427][T20944] R13: 00007f0ecfc26038 R14: 00007f0ecfc25fa0 R15: 00007fff6213fdf8
[  543.067458][T20944]  </TASK>
[  543.070822][T20947] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4634'.
[  543.081140][T20949] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4635'.
[  543.364907][T20949] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4635'.
[  543.479539][T20954] netlink: 340 bytes leftover after parsing attributes in process `syz.1.4637'.
[  543.663126][T20956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4638'.
[  543.712046][T20959] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4639'.
[  543.730621][T20956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4638'.
[  543.811721][T20964] tipc: Resetting bearer <eth:batadv0>
[  543.831428][T20964] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  544.487297][T20999] veth1_to_team: entered promiscuous mode
[  544.511836][T20999] veth1_to_team: left promiscuous mode
[  544.556940][T20995] ip_tables: iptables: counters copy to user failed while replacing table
[  544.847028][T21005] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes.
[  544.865581][T21008] tipc: Resetting bearer <eth:batadv0>
[  544.900027][T21008] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  545.280734][T21025] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20000
[  545.959690][T21051] tipc: Resetting bearer <eth:batadv0>
[  546.781289][T21078] FAULT_INJECTION: forcing a failure.
[  546.781289][T21078] name failslab, interval 1, probability 0, space 0, times 0
[  546.863883][T21078] CPU: 0 UID: 0 PID: 21078 Comm: syz.3.4681 Not tainted syzkaller #0 PREEMPT(full) 
[  546.863911][T21078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  546.863922][T21078] Call Trace:
[  546.863930][T21078]  <TASK>
[  546.863938][T21078]  dump_stack_lvl+0xe8/0x150
[  546.863971][T21078]  should_fail_ex+0x40c/0x560
[  546.864000][T21078]  should_failslab+0xa8/0x100
[  546.864031][T21078]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  546.864056][T21078]  ? local_lock_release+0x9c/0x160
[  546.864078][T21078]  ? __alloc_skb+0x1d7/0x7a0
[  546.864096][T21078]  ? __alloc_skb+0x1d7/0x7a0
[  546.864121][T21078]  __alloc_skb+0x1d7/0x7a0
[  546.864146][T21078]  __ipv6_ifa_notify+0x1d0/0xc60
[  546.864256][T21078]  ? __pfx___ipv6_ifa_notify+0x10/0x10
[  546.864280][T21078]  ? inet6_addr_modify+0x642/0x1120
[  546.864306][T21078]  ? __local_bh_enable_ip+0xd0/0x130
[  546.864345][T21078]  inet6_addr_modify+0x6c4/0x1120
[  546.864385][T21078]  inet6_rtm_newaddr+0x9b7/0xe00
[  546.864416][T21078]  ? __pfx_inet6_rtm_newaddr+0x10/0x10
[  546.864437][T21078]  ? __dev_queue_xmit+0x29b/0x3820
[  546.864472][T21078]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  546.864549][T21078]  ? __pfx_inet6_rtm_newaddr+0x10/0x10
[  546.864570][T21078]  rtnetlink_rcv_msg+0x802/0xc00
[  546.864594][T21078]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  546.864614][T21078]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  546.864634][T21078]  ? ref_tracker_free+0x689/0x830
[  546.864669][T21078]  ? __pfx_ref_tracker_free+0x10/0x10
[  546.864706][T21078]  netlink_rcv_skb+0x226/0x4a0
[  546.864733][T21078]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  546.864757][T21078]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  546.864795][T21078]  ? netlink_deliver_tap+0x2e/0x1b0
[  546.864820][T21078]  ? netlink_deliver_tap+0x2e/0x1b0
[  546.864849][T21078]  netlink_unicast+0x7bb/0x940
[  546.864883][T21078]  netlink_sendmsg+0x813/0xb40
[  546.864918][T21078]  ? __pfx_netlink_sendmsg+0x10/0x10
[  546.864948][T21078]  ? aa_sock_msg_perm+0xf1/0x1b0
[  546.864976][T21078]  ? __pfx_netlink_sendmsg+0x10/0x10
[  546.864999][T21078]  sock_sendmsg_nosec+0x13a/0x180
[  546.865033][T21078]  ____sys_sendmsg+0x54e/0x850
[  546.865063][T21078]  ? __pfx_____sys_sendmsg+0x10/0x10
[  546.865098][T21078]  ? import_iovec+0x73/0xa0
[  546.865120][T21078]  ___sys_sendmsg+0x2a5/0x360
[  546.865144][T21078]  ? __lock_acquire+0x683/0x2cf0
[  546.865175][T21078]  ? __pfx____sys_sendmsg+0x10/0x10
[  546.865235][T21078]  ? __fget_files+0x2a/0x420
[  546.865260][T21078]  ? __fget_files+0x3a2/0x420
[  546.865293][T21078]  __x64_sys_sendmsg+0x1b1/0x290
[  546.865315][T21078]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  546.865348][T21078]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  546.865365][T21078]  do_syscall_64+0x174/0x580
[  546.865387][T21078]  ? trace_irq_disable+0x3b/0x140
[  546.865407][T21078]  ? clear_bhb_loop+0x40/0x90
[  546.865425][T21078]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  546.865441][T21078] RIP: 0033:0x7f3c6df9e019
[  546.865456][T21078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  546.865470][T21078] RSP: 002b:00007f3c6eded028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  546.865487][T21078] RAX: ffffffffffffffda RBX: 00007f3c6e225fa0 RCX: 00007f3c6df9e019
[  546.865498][T21078] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006
[  546.865508][T21078] RBP: 00007f3c6eded090 R08: 0000000000000000 R09: 0000000000000000
[  546.865518][T21078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  546.865527][T21078] R13: 00007f3c6e226038 R14: 00007f3c6e225fa0 R15: 00007fff11ea6518
[  546.865552][T21078]  </TASK>
[  547.673036][T21086] __nla_validate_parse: 67 callbacks suppressed
[  547.673056][T21086] netlink: 332 bytes leftover after parsing attributes in process `syz.2.4686'.
[  547.733738][T21090] syzkaller1: entered promiscuous mode
[  547.754000][T21086] netlink: 'syz.2.4686': attribute type 9 has an invalid length.
[  547.773849][T21090] syzkaller1: entered allmulticast mode
[  547.858202][T21086] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4686'.
[  547.938458][T21086] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4686'.
[  547.953133][T21100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4688'.
[  548.520112][T21109] bond9 (unregistering): Released all slaves
[  548.834194][T21116] netlink: 292 bytes leftover after parsing attributes in process `syz.4.4693'.
[  548.894855][T21116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4693'.
[  548.948489][T21116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4693'.
[  548.992104][T21124] netlink: 340 bytes leftover after parsing attributes in process `syz.1.4696'.
[  549.013094][T21116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4693'.
[  549.033585][T21120] netlink: 'syz.3.4697': attribute type 2 has an invalid length.
[  549.052107][T21120] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4697'.
[  549.498605][T21155] netlink: 'syz.1.4704': attribute type 8 has an invalid length.
[  549.847616][T21163] IPv6: addrconf: prefix option has invalid lifetime
[  549.890873][T21166] ip_tables: iptables: counters copy to user failed while replacing table
[  550.126229][T21170] netlink: 'syz.4.4710': attribute type 1 has an invalid length.
[  550.230308][T21170] bond15: entered promiscuous mode
[  550.254301][T21170] bond15: entered allmulticast mode
[  550.270347][T21170] 8021q: adding VLAN 0 to HW filter on device bond15
[  550.512603][T21185] netlink: 'syz.3.4717': attribute type 11 has an invalid length.
[  550.652747][T21185] netlink: 'syz.3.4717': attribute type 11 has an invalid length.
[  550.729617][T21185] 8021q: adding VLAN 0 to HW filter on device batadv0
[  550.829012][T21185] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  550.967826][T21201] netlink: 'syz.2.4722': attribute type 8 has an invalid length.
[  551.196278][T21207] netlink: 'syz.3.4723': attribute type 5 has an invalid length.
[  551.881335][T21220] x_tables: ip_tables: TEE.1 target: invalid size 40 (kernel) != (user) 0
[  552.145129][T21227] ip_tables: iptables: counters copy to user failed while replacing table
[  552.523268][T21233] bridge3: entered promiscuous mode
[  552.544670][T21233] bridge3: entered allmulticast mode
[  552.579464][T21247] syzkaller0: left promiscuous mode
[  552.597431][T21247] syzkaller0: left allmulticast mode
[  552.637532][T21250] netlink: 'syz.1.4739': attribute type 2 has an invalid length.
[  552.777258][T21250] : entered promiscuous mode
[  552.811570][T21256] FAULT_INJECTION: forcing a failure.
[  552.811570][T21256] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  552.843974][T21256] CPU: 1 UID: 0 PID: 21256 Comm: syz.4.4741 Not tainted syzkaller #0 PREEMPT(full) 
[  552.844001][T21256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  552.844013][T21256] Call Trace:
[  552.844021][T21256]  <TASK>
[  552.844029][T21256]  dump_stack_lvl+0xe8/0x150
[  552.844063][T21256]  should_fail_ex+0x40c/0x560
[  552.844093][T21256]  _copy_from_user+0x2d/0xb0
[  552.844114][T21256]  ___sys_recvmsg+0x173/0x5a0
[  552.844145][T21256]  ? __pfx____sys_recvmsg+0x10/0x10
[  552.844174][T21256]  ? __fget_files+0x2a/0x420
[  552.844229][T21256]  do_recvmmsg+0x31a/0x7f0
[  552.844262][T21256]  ? __pfx_do_recvmmsg+0x10/0x10
[  552.844298][T21256]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  552.844328][T21256]  ? __fget_files+0x3a2/0x420
[  552.844363][T21256]  __x64_sys_recvmmsg+0x198/0x250
[  552.844391][T21256]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  552.844421][T21256]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  552.844442][T21256]  do_syscall_64+0x174/0x580
[  552.844468][T21256]  ? trace_irq_disable+0x3b/0x140
[  552.844493][T21256]  ? clear_bhb_loop+0x40/0x90
[  552.844516][T21256]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  552.844544][T21256] RIP: 0033:0x7ff1f759e019
[  552.844563][T21256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  552.844579][T21256] RSP: 002b:00007ff1f83ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  552.844599][T21256] RAX: ffffffffffffffda RBX: 00007ff1f7825fa0 RCX: 00007ff1f759e019
[  552.844613][T21256] RDX: 0000000000000003 RSI: 0000200000000b00 RDI: 0000000000000003
[  552.844631][T21256] RBP: 00007ff1f83ae090 R08: 0000000000000000 R09: 0000000000000000
[  552.844643][T21256] R10: 0000000040000100 R11: 0000000000000246 R12: 0000000000000002
[  552.844655][T21256] R13: 00007ff1f7826038 R14: 00007ff1f7825fa0 R15: 00007ffc4e6d1788
[  552.844686][T21256]  </TASK>
[  552.864954][T21253] __nla_validate_parse: 115 callbacks suppressed
[  552.864972][T21253] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4740'.
[  553.142292][T21261] Cannot find set identified by id 65534 to match
[  553.221300][T21264] netlink: 300 bytes leftover after parsing attributes in process `syz.1.4743'.
[  553.471321][T21272] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4748'.
[  553.601779][T21274] IPv6: addrconf: prefix option has invalid lifetime
[  554.088302][T21287] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4753'.
[  554.349089][T21300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4758'.
[  554.383450][T21300] nbd: must specify a device to reconfigure
[  554.802134][T21310] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4761'.
[  554.844922][T21310] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4761'.
[  554.881474][T21314] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4763'.
[  554.904138][T21310] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4761'.
[  555.158800][T21318] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4765'.
[  555.389979][T21324] tap0: tun_chr_ioctl cmd 1074025672
[  555.407749][T21324] tap0: ignored: set checksum disabled
[  555.429022][T21324] tap0: tun_chr_ioctl cmd 1074025672
[  555.447776][T21324] tap0: ignored: set checksum disabled
[  555.466508][T21324] tap0: tun_chr_ioctl cmd 1074025672
[  555.483006][T21324] tap0: ignored: set checksum disabled
[  555.501295][T21324] tap0: tun_chr_ioctl cmd 1074025672
[  555.527684][T21324] tap0: ignored: set checksum disabled
[  555.545096][T21324] tap0: tun_chr_ioctl cmd 1074025672
[  555.562542][T21324] tap0: ignored: set checksum disabled
[  555.581427][T21324] tap0: tun_chr_ioctl cmd 1074025672
[  555.599119][T21324] tap0: ignored: set checksum disabled
[  555.614158][T21324] tap0: tun_chr_ioctl cmd 1074025672
[  555.621128][T21324] tap0: ignored: set checksum disabled
[  555.722675][T21331] geneve4: entered promiscuous mode
[  555.757361][T21324] tap0: tun_chr_ioctl cmd 1074025672
[  555.762872][T21324] tap0: ignored: set checksum disabled
[  555.796576][T21324] tap0: tun_chr_ioctl cmd 1074025672
[  555.826552][T21324] tap0: ignored: set checksum disabled
[  555.861222][T21324] tap0: tun_chr_ioctl cmd 1074025672
[  555.899996][T21324] tap0: ignored: set checksum disabled
[  555.930061][T21333] syzkaller0: left promiscuous mode
[  555.956194][T21333] syzkaller0: left allmulticast mode
[  555.981033][T21333] tipc: Resetting bearer <eth:syzkaller0>
[  556.018548][T21324] tap0: tun_chr_ioctl cmd 1074025672
[  556.028119][T21324] tap0: ignored: set checksum disabled
[  556.052255][T21324] tap0: tun_chr_ioctl cmd 1074025672
[  556.081734][T21324] tap0: ignored: set checksum disabled
[  556.123564][T21324] tap0: tun_chr_ioctl cmd 1074025672
[  556.133210][T21324] tap0: ignored: set checksum disabled
[  556.140526][T21324] tap0: tun_chr_ioctl cmd 1074025672
[  556.152864][T21324] tap0: ignored: set checksum disabled
[  556.159913][T21324] tap0: tun_chr_ioctl cmd 1074025672
[  556.167893][T21324] tap0: ignored: set checksum disabled
[  556.181622][T21324] tap0: tun_chr_ioctl cmd 1074025672
[  556.189984][T21324] tap0: ignored: set checksum disabled
[  556.606066][T21360] netlink: 'syz.1.4779': attribute type 8 has an invalid length.
[  556.663766][T21363] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  557.855692][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  559.746790][T21408] Cannot find set identified by id 65534 to match
[  559.918827][T21410] __nla_validate_parse: 59 callbacks suppressed
[  559.918860][T21410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4796'.
[  559.956073][T21410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4796'.
[  560.081772][T21413] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4797'.
[  561.485262][T21450] tipc: New replicast peer: 255.255.255.255
[  561.500354][T21450] tipc: Enabled bearer <udp:syz2>, priority 10
[  561.981664][T21456] bridge0: port 2(bridge_slave_1) entered disabled state
[  563.129640][T21491] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4822'.
[  563.150305][T21490] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4823'.
[  563.190502][T21490] bond0: entered promiscuous mode
[  563.196932][T21491] siw: device registration error -23
[  563.205435][T21490] bond_slave_0: entered promiscuous mode
[  563.230281][T21490] bond_slave_1: entered promiscuous mode
[  563.317199][T21490] gretap0: entered promiscuous mode
[  563.345080][T21490] hsr1: entered promiscuous mode
[  563.896609][T21516] netlink: 'syz.3.4832': attribute type 1 has an invalid length.
[  563.983462][T21519] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4832'.
[  563.986285][T21516] 8021q: adding VLAN 0 to HW filter on device bond11
[  564.038170][T21522] netlink: 'syz.0.4834': attribute type 2 has an invalid length.
[  564.058142][T21522] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4834'.
[  564.130664][T21522] : entered promiscuous mode
[  565.518713][T21546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4843'.
[  565.736415][T21552] netlink: 'syz.4.4844': attribute type 10 has an invalid length.
[  565.758176][T21552] tipc: Resetting bearer <eth:batadv0>
[  565.763277][T21556] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4847'.
[  565.870400][T21552] tipc: Resetting bearer <eth:batadv0>
[  565.896328][T21552] 8021q: adding VLAN 0 to HW filter on device batadv0
[  565.930577][T21552] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  565.946285][T21561] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  565.953588][T21561] IPv6: NLM_F_CREATE should be set when creating new route
[  565.960891][T21561] IPv6: NLM_F_CREATE should be set when creating new route
[  566.208189][T21570] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4851'.
[  566.219700][T21564] openvswitch: netlink: Missing key (keys=40, expected=100)
[  566.296141][T21573] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4852'.
[  566.317326][T21574] siw: device registration error -23
[  567.058242][T21585] bridge4: the hash_elasticity option has been deprecated and is always 16
[  567.092258][T21585] bridge4: entered allmulticast mode
[  567.866256][T21595] macsec1: entered promiscuous mode
[  568.471546][T21602] syzkaller1: entered promiscuous mode
[  568.493286][T21602] syzkaller1: entered allmulticast mode
[  568.542576][T21613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4865'.
[  568.836242][T21616] ip_tables: iptables: counters copy to user failed while replacing table
[  569.049099][T21626] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4870'.
[  569.101553][T21626] : left promiscuous mode
[  569.118754][T21625] sock: sock_timestamping_bind_phc: sock not bind to device
[  569.375079][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  569.384806][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  569.640552][T21641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4874'.
[  569.850330][T21646] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  570.217192][T21655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4879'.
[  570.273433][T21656] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4880'.
[  570.308231][T21656] siw: device registration error -23
[  570.515571][T21655] erspan0: entered promiscuous mode
[  570.538999][T21655] macvtap1: entered promiscuous mode
[  570.564576][T21655] macvtap1: entered allmulticast mode
[  570.583852][T21655] erspan0: entered allmulticast mode
[  570.652205][T21657] erspan0: left allmulticast mode
[  570.679467][T21657] erspan0: left promiscuous mode
[  570.706436][T21657] macvtap1: left promiscuous mode
[  570.717523][T21657] macvtap1: left allmulticast mode
[  570.786792][T21665] syzkaller0: entered promiscuous mode
[  570.804314][T21665] syzkaller0: entered allmulticast mode
[  571.047697][T21660] lo speed is unknown, defaulting to 1000
[  571.452184][T21689] netlink: 292 bytes leftover after parsing attributes in process `syz.0.4887'.
[  571.603771][T21689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4887'.
[  571.651719][T21689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4887'.
[  571.662117][T21689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4887'.
[  571.671870][T21689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4887'.
[  571.682151][T21689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4887'.
[  571.698135][T21689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4887'.
[  571.707777][T21689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4887'.
[  571.719685][T21689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4887'.
[  571.729877][T21689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4887'.
[  571.837075][T21701] ip_tables: iptables: counters copy to user failed while replacing table
[  575.715845][T21783] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_1
[  576.813097][T21801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  577.481089][T21818] netlink: 'syz.2.4930': attribute type 10 has an invalid length.
[  577.525862][T21818] 8021q: adding VLAN 0 to HW filter on device batadv0
[  577.555632][T21818] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  577.881760][T21829] netdevsim netdevsim0: Direct firmware load for .® failed with error -2
[  577.976375][T21829] netdevsim netdevsim0: Falling back to sysfs fallback for: .®
[  578.108790][T21837] __nla_validate_parse: 48 callbacks suppressed
[  578.108813][T21837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4936'.
[  578.213541][T21842] netlink: 292 bytes leftover after parsing attributes in process `syz.4.4938'.
[  578.269486][T21840] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4937'.
[  578.282117][T21834] tipc: Resetting bearer <eth:batadv0>
[  578.397683][T21834] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  578.648938][T21843] bond9: Unable to set peer notification delay as MII monitoring is disabled
[  578.672882][T21843] bond9 (unregistering): Released all slaves
[  578.753566][T21845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4938'.
[  578.773275][T21845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4938'.
[  578.831187][T21845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4938'.
[  578.855593][T21845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4938'.
[  578.866901][T21845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4938'.
[  578.876812][T21845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4938'.
[  578.887228][T21845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4938'.
[  578.899193][T21840] : left promiscuous mode
[  578.917575][ T8780] bridge0: port 2(bridge_slave_1) entered blocking state
[  578.924808][ T8780] bridge0: port 2(bridge_slave_1) entered forwarding state
[  579.168347][T21856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  579.809106][T21873] openvswitch: netlink: Key type 29 is not supported
[  579.944284][T21877] ip_tables: iptables: counters copy to user failed while replacing table
[  580.122476][T21882] netlink: 'syz.4.4950': attribute type 1 has an invalid length.
[  580.178015][T21882] 8021q: adding VLAN 0 to HW filter on device bond16
[  580.492356][T21887] netlink: 'syz.4.4952': attribute type 1 has an invalid length.
[  580.561958][T21896] FAULT_INJECTION: forcing a failure.
[  580.561958][T21896] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  580.667543][T21899] ip_tables: iptables: counters copy to user failed while replacing table
[  580.699409][T21896] CPU: 0 UID: 0 PID: 21896 Comm: syz.4.4952 Not tainted syzkaller #0 PREEMPT(full) 
[  580.699437][T21896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  580.699450][T21896] Call Trace:
[  580.699459][T21896]  <TASK>
[  580.699467][T21896]  dump_stack_lvl+0xe8/0x150
[  580.699505][T21896]  should_fail_ex+0x40c/0x560
[  580.699539][T21896]  _copy_from_user+0x2d/0xb0
[  580.699559][T21896]  ___sys_sendmsg+0x1c6/0x360
[  580.699586][T21896]  ? __lock_acquire+0x683/0x2cf0
[  580.699620][T21896]  ? __pfx____sys_sendmsg+0x10/0x10
[  580.699680][T21896]  ? __fget_files+0x2a/0x420
[  580.699707][T21896]  ? __fget_files+0x3a2/0x420
[  580.699742][T21896]  __x64_sys_sendmsg+0x1b1/0x290
[  580.699770][T21896]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  580.699813][T21896]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.699837][T21896]  do_syscall_64+0x174/0x580
[  580.699871][T21896]  ? trace_irq_disable+0x3b/0x140
[  580.699898][T21896]  ? clear_bhb_loop+0x40/0x90
[  580.699922][T21896]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.699941][T21896] RIP: 0033:0x7ff1f759e019
[  580.699960][T21896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  580.699976][T21896] RSP: 002b:00007ff1f838d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  580.699998][T21896] RAX: ffffffffffffffda RBX: 00007ff1f7826090 RCX: 00007ff1f759e019
[  580.700013][T21896] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004
[  580.700025][T21896] RBP: 00007ff1f838d090 R08: 0000000000000000 R09: 0000000000000000
[  580.700038][T21896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  580.700049][T21896] R13: 00007ff1f7826128 R14: 00007ff1f7826090 R15: 00007ffc4e6d1788
[  580.700081][T21896]  </TASK>
[  580.939419][T21887] 8021q: adding VLAN 0 to HW filter on device bond17
[  581.181025][T21903] netlink: 'syz.0.4957': attribute type 1 has an invalid length.
[  581.298314][T21906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  581.538820][T21912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  581.571656][T21911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  581.671381][T21903] bond8: entered promiscuous mode
[  581.679770][T21903] bond8: entered allmulticast mode
[  581.686063][T21903] 8021q: adding VLAN 0 to HW filter on device bond8
[  581.732208][T21922] syzkaller1: entered promiscuous mode
[  581.756999][T21922] syzkaller1: entered allmulticast mode
[  581.905247][T21927] netlink: 'syz.0.4964': attribute type 1 has an invalid length.
[  582.433606][T21946] siw: device registration error -23
[  582.882526][T21956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  583.138086][T21963] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  583.419422][T21968] tipc: Resetting bearer <eth:batadv0>
[  583.712442][T21968] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  583.732468][T21976] netlink: 'syz.3.4979': attribute type 10 has an invalid length.
[  583.743521][T21968] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  583.857738][T21968] veth1_vlan: left allmulticast mode
[  583.985723][T21968] tipc: Resetting bearer <eth:syzkaller0>
[  584.156939][T21976] tipc: Resetting bearer <eth:batadv0>
[  584.215595][T21979] __nla_validate_parse: 89 callbacks suppressed
[  584.215617][T21979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4981'.
[  584.257245][T21979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4981'.
[  584.287937][T21979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4981'.
[  584.324086][T21979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4981'.
[  584.357423][T21979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4981'.
[  584.395984][T21979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4981'.
[  584.413217][T21984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4982'.
[  584.436346][T21979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4981'.
[  584.437907][T21988] netlink: 292 bytes leftover after parsing attributes in process `syz.1.4984'.
[  584.464224][T21979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4981'.
[  584.591467][T21984] 8021q: adding VLAN 0 to HW filter on device batadv1
[  584.625796][T21984] team0: Port device batadv1 added
[  584.663955][ T1171] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  584.693850][ T1171] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  584.719524][ T1171] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 55796 - 0
[  584.740028][  T153] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  584.779471][  T153] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  584.829026][  T153] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 55796 - 0
[  584.884819][ T8783] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  584.927670][ T8783] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  584.990498][T22013] nbd: must specify a device to reconfigure
[  585.004180][T22003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  585.027901][ T8783] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 55796 - 0
[  585.067268][ T8783] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  585.101484][ T8783] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  585.121400][ T8783] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 55796 - 0
[  585.133716][T22011] sch_tbf: burst 65538 is lower than device syzkaller0 mtu (65589) !
[  585.859256][T22042] netlink: 'syz.3.5002': attribute type 1 has an invalid length.
[  585.909962][T21830] udevd[21830]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  586.215359][T22054] FAULT_INJECTION: forcing a failure.
[  586.215359][T22054] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  586.263093][T22042] 8021q: adding VLAN 0 to HW filter on device bond12
[  586.265798][T22054] CPU: 1 UID: 0 PID: 22054 Comm: syz.1.5004 Not tainted syzkaller #0 PREEMPT(full) 
[  586.265826][T22054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  586.265837][T22054] Call Trace:
[  586.265846][T22054]  <TASK>
[  586.265855][T22054]  dump_stack_lvl+0xe8/0x150
[  586.265890][T22054]  should_fail_ex+0x40c/0x560
[  586.265920][T22054]  _copy_from_user+0x2d/0xb0
[  586.265939][T22054]  ___sys_recvmsg+0x173/0x5a0
[  586.265971][T22054]  ? __pfx____sys_recvmsg+0x10/0x10
[  586.266030][T22054]  do_recvmmsg+0x31a/0x7f0
[  586.266062][T22054]  ? __pfx_do_recvmmsg+0x10/0x10
[  586.266097][T22054]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  586.266125][T22054]  ? __fget_files+0x3a2/0x420
[  586.266160][T22054]  __x64_sys_recvmmsg+0x198/0x250
[  586.266188][T22054]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  586.266220][T22054]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.266240][T22054]  do_syscall_64+0x174/0x580
[  586.266265][T22054]  ? trace_irq_disable+0x3b/0x140
[  586.266289][T22054]  ? clear_bhb_loop+0x40/0x90
[  586.266312][T22054]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.266331][T22054] RIP: 0033:0x7f5317b9e019
[  586.266353][T22054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  586.266369][T22054] RSP: 002b:00007f5318ad5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  586.266389][T22054] RAX: ffffffffffffffda RBX: 00007f5317e25fa0 RCX: 00007f5317b9e019
[  586.266403][T22054] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000006
[  586.266416][T22054] RBP: 00007f5318ad5090 R08: 0000000000000000 R09: 0000000000000000
[  586.266427][T22054] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002
[  586.266438][T22054] R13: 00007f5317e26038 R14: 00007f5317e25fa0 R15: 00007ffe5086bf18
[  586.266468][T22054]  </TASK>
[  587.079658][T22072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  588.575563][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  590.099364][T22155] ip_tables: iptables: counters copy to user failed while replacing table
[  590.559803][T22171] __nla_validate_parse: 76 callbacks suppressed
[  590.559823][T22171] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5042'.
[  590.920442][T22185] netlink: 292 bytes leftover after parsing attributes in process `syz.4.5045'.
[  591.038631][T22193] netlink: 1032 bytes leftover after parsing attributes in process `syz.2.5048'.
[  591.870719][T22218] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5055'.
[  592.108635][T22232] netlink: 292 bytes leftover after parsing attributes in process `syz.0.5059'.
[  592.192475][T22236] netlink: 'syz.4.5061': attribute type 1 has an invalid length.
[  592.202425][T22232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5059'.
[  592.223932][T22232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5059'.
[  592.246109][T22232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5059'.
[  592.269516][T22232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5059'.
[  592.324103][T22232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5059'.
[  592.493352][T22236] 8021q: adding VLAN 0 to HW filter on device bond18
[  592.644901][T22243] ip_vti0: entered promiscuous mode
[  592.835672][T22252] netlink: 'syz.0.5067': attribute type 1 has an invalid length.
[  592.938918][T22252] bond9: entered promiscuous mode
[  592.944252][T22252] bond9: entered allmulticast mode
[  592.949994][T22252] 8021q: adding VLAN 0 to HW filter on device bond9
[  593.308548][T22264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  593.644798][T22278] netlink: 'syz.2.5076': attribute type 5 has an invalid length.
[  593.937780][T22290] IPv6: addrconf: prefix option has invalid lifetime
[  594.296856][T22298] netlink: 'syz.1.5082': attribute type 1 has an invalid length.
[  594.330084][T22303] ip_tables: iptables: counters copy to user failed while replacing table
[  594.489405][T22298] 8021q: adding VLAN 0 to HW filter on device bond18
[  594.567729][T22304] bond0: (slave batadv0): Releasing backup interface
[  594.627307][T22304] bridge_slave_0: left allmulticast mode
[  594.647582][T22304] bridge_slave_0: left promiscuous mode
[  594.672760][T22304] bridge0: port 1(bridge_slave_0) entered disabled state
[  594.705829][T22304] bond1: left promiscuous mode
[  594.728560][T22304] bridge_slave_1: left allmulticast mode
[  594.736096][T22304] bridge_slave_1: left promiscuous mode
[  594.742222][T22304] bridge0: port 2(bridge_slave_1) entered disabled state
[  594.769478][T22304] bond0: (slave bond_slave_0): Releasing backup interface
[  594.804114][T22304] bond0: (slave bond_slave_1): Releasing backup interface
[  594.840138][T22304] team0: Port device team_slave_0 removed
[  594.853629][T22304] team0: Port device team_slave_1 removed
[  594.862029][T22304] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  594.869987][T22304] batman_adv: batadv0: Removing interface: batadv_slave_0
[  594.880131][T22304] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  594.888850][T22304] batman_adv: batadv0: Removing interface: batadv_slave_1
[  594.911414][T22304] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  595.134404][T22325] netlink: 'syz.1.5091': attribute type 2 has an invalid length.
[  595.158670][T22329] netlink: 'syz.4.5093': attribute type 1 has an invalid length.
[  595.322348][T22329] 8021q: adding VLAN 0 to HW filter on device bond19
[  595.499568][T22333] veth3: entered allmulticast mode
[  595.524177][T22333] bond19: (slave veth3): Enslaving as an active interface with a down link
[  595.543216][T22336] bond19: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  595.572698][T22338] __nla_validate_parse: 97 callbacks suppressed
[  595.572717][T22338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5096'.
[  595.602483][T22329] macvlan2: entered promiscuous mode
[  595.611320][T22329] macvlan2: entered allmulticast mode
[  595.619072][T22329] bond19: entered promiscuous mode
[  595.625671][T22329] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  595.633411][T22329] bond19: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  595.653412][T22329] bond19: left promiscuous mode
[  595.765242][T22338] vlan3: entered promiscuous mode
[  595.783126][T22338] bridge0: entered promiscuous mode
[  595.945276][T22350] bridge0: port 2(bridge_slave_1) entered disabled state
[  595.952831][T22350] bridge0: port 1(bridge_slave_0) entered disabled state
[  595.979807][T22350] tipc: Resetting bearer <eth:batadv0>
[  596.059280][T22350] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  596.076837][T22350] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  596.136558][T22350] tipc: Resetting bearer <eth:syzkaller0>
[  596.142839][T22350] syzkaller0: left promiscuous mode
[  596.150106][T22350] syzkaller0: left allmulticast mode
[  596.160831][T22350] bond1: left promiscuous mode
[  596.168464][T22350] bond1: left allmulticast mode
[  596.175575][T22350] geneve2: left promiscuous mode
[  596.194016][T22350] geneve2: left allmulticast mode
[  596.203624][T22350] bond4: left promiscuous mode
[  596.223859][T22350] team0: left promiscuous mode
[  596.228771][T22350] team_slave_0: left promiscuous mode
[  596.244680][T22350] team_slave_1: left promiscuous mode
[  596.266815][T22350] bond4: left allmulticast mode
[  596.283904][T22350] team0: left allmulticast mode
[  596.296103][T22350] team_slave_0: left allmulticast mode
[  596.314230][T22350] team_slave_1: left allmulticast mode
[  596.360468][T22350] bond6: left promiscuous mode
[  596.379561][T22350] bond6: left allmulticast mode
[  596.524527][T22350] bond8: left promiscuous mode
[  596.530012][T22350] erspan1: left promiscuous mode
[  596.536441][T22350] bond8: left allmulticast mode
[  596.545075][T22350] erspan1: left allmulticast mode
[  596.552726][T22350] bond10: left promiscuous mode
[  596.559044][T22350] bond10: left allmulticast mode
[  596.570138][T22350] bond11: left promiscuous mode
[  596.579480][T22350] bond11: left allmulticast mode
[  596.589698][T22350] vlan2: left promiscuous mode
[  596.598623][T22350] bond13: left promiscuous mode
[  596.603765][T22350] batadv1: left promiscuous mode
[  596.611345][T22350] vlan2: left allmulticast mode
[  596.616744][T22350] bond13: left allmulticast mode
[  596.621908][T22350] batadv1: left allmulticast mode
[  596.631226][T22350] bond14: left promiscuous mode
[  596.636683][T22350] bond14: left allmulticast mode
[  596.650013][T22350] hsr1: left promiscuous mode
[  596.682270][T22350] vlan3: left promiscuous mode
[  596.688107][T22350] bridge0: left promiscuous mode
[  597.009861][T22376] FAULT_INJECTION: forcing a failure.
[  597.009861][T22376] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  597.044161][T22376] CPU: 1 UID: 0 PID: 22376 Comm: syz.0.5106 Not tainted syzkaller #0 PREEMPT(full) 
[  597.044187][T22376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  597.044206][T22376] Call Trace:
[  597.044214][T22376]  <TASK>
[  597.044223][T22376]  dump_stack_lvl+0xe8/0x150
[  597.044257][T22376]  should_fail_ex+0x40c/0x560
[  597.044287][T22376]  prepare_alloc_pages+0x230/0x650
[  597.044322][T22376]  __alloc_frozen_pages_noprof+0x12f/0x380
[  597.044354][T22376]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  597.044384][T22376]  ? __pfx_policy_nodemask+0x10/0x10
[  597.044422][T22376]  alloc_pages_mpol+0x212/0x380
[  597.044455][T22376]  alloc_pages_noprof+0xac/0x2a0
[  597.044475][T22376]  bpf_prog_test_run_xdp+0xc97/0x11d0
[  597.044518][T22376]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  597.044548][T22376]  ? __fget_files+0x2a/0x420
[  597.044578][T22376]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  597.044605][T22376]  bpf_prog_test_run+0x2c5/0x340
[  597.044636][T22376]  __sys_bpf+0xa22/0xd90
[  597.044670][T22376]  ? __pfx___sys_bpf+0x10/0x10
[  597.044704][T22376]  ? __fget_files+0x2a/0x420
[  597.044746][T22376]  ? ksys_write+0x242/0x270
[  597.044768][T22376]  ? __pfx_ksys_write+0x10/0x10
[  597.044791][T22376]  __x64_sys_bpf+0xba/0xd0
[  597.044814][T22376]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  597.044836][T22376]  do_syscall_64+0x174/0x580
[  597.044862][T22376]  ? trace_irq_disable+0x3b/0x140
[  597.044886][T22376]  ? clear_bhb_loop+0x40/0x90
[  597.044910][T22376]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  597.044928][T22376] RIP: 0033:0x7f0ecf99e019
[  597.044947][T22376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  597.044964][T22376] RSP: 002b:00007f0ed077f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  597.044985][T22376] RAX: ffffffffffffffda RBX: 00007f0ecfc25fa0 RCX: 00007f0ecf99e019
[  597.044999][T22376] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  597.045012][T22376] RBP: 00007f0ed077f090 R08: 0000000000000000 R09: 0000000000000000
[  597.045025][T22376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  597.045037][T22376] R13: 00007f0ecfc26038 R14: 00007f0ecfc25fa0 R15: 00007fff6213fdf8
[  597.045068][T22376]  </TASK>
[  597.330892][T22382] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5108'.
[  597.416108][T22384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5110'.
[  597.464741][T22382] block nbd3: server does not support multiple connections per device.
[  597.492014][T22387] netlink: 19 bytes leftover after parsing attributes in process `syz.3.5110'.
[  597.558045][T22382] block nbd3: shutting down sockets
[  597.642421][T22387] netlink: 19 bytes leftover after parsing attributes in process `syz.3.5110'.
[  597.719831][T22396] FAULT_INJECTION: forcing a failure.
[  597.719831][T22396] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  597.734970][T22396] CPU: 0 UID: 0 PID: 22396 Comm: syz.0.5114 Not tainted syzkaller #0 PREEMPT(full) 
[  597.734999][T22396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  597.735011][T22396] Call Trace:
[  597.735019][T22396]  <TASK>
[  597.735027][T22396]  dump_stack_lvl+0xe8/0x150
[  597.735062][T22396]  should_fail_ex+0x40c/0x560
[  597.735092][T22396]  _copy_from_user+0x2d/0xb0
[  597.735112][T22396]  ___sys_recvmsg+0x173/0x5a0
[  597.735144][T22396]  ? __pfx____sys_recvmsg+0x10/0x10
[  597.735173][T22396]  ? __fget_files+0x2a/0x420
[  597.735229][T22396]  do_recvmmsg+0x31a/0x7f0
[  597.735263][T22396]  ? __pfx_do_recvmmsg+0x10/0x10
[  597.735300][T22396]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  597.735329][T22396]  ? __fget_files+0x3a2/0x420
[  597.735364][T22396]  __x64_sys_recvmmsg+0x198/0x250
[  597.735393][T22396]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  597.735428][T22396]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  597.735599][T22396]  do_syscall_64+0x174/0x580
[  597.735625][T22396]  ? trace_irq_disable+0x3b/0x140
[  597.735650][T22396]  ? clear_bhb_loop+0x40/0x90
[  597.735673][T22396]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  597.735693][T22396] RIP: 0033:0x7f0ecf99e019
[  597.735711][T22396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  597.735727][T22396] RSP: 002b:00007f0ed077f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  597.735748][T22396] RAX: ffffffffffffffda RBX: 00007f0ecfc25fa0 RCX: 00007f0ecf99e019
[  597.735762][T22396] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000006
[  597.735775][T22396] RBP: 00007f0ed077f090 R08: 0000000000000000 R09: 0000000000000000
[  597.735787][T22396] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002
[  597.735799][T22396] R13: 00007f0ecfc26038 R14: 00007f0ecfc25fa0 R15: 00007fff6213fdf8
[  597.735831][T22396]  </TASK>
[  597.768915][T22393] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5112'.
[  597.959447][T22400] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  597.970146][T22400] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  597.996155][T22400] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  598.028651][T22403] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5115'.
[  598.046926][T22402] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5116'.
[  598.083030][T22394] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5113'.
[  598.886856][T22429] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  599.112755][T22438] lo speed is unknown, defaulting to 1000
[  599.349448][T22446] netlink: 'syz.0.5131': attribute type 1 has an invalid length.
[  599.405545][T22446] 8021q: adding VLAN 0 to HW filter on device bond10
[  599.406570][T22448] FAULT_INJECTION: forcing a failure.
[  599.406570][T22448] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  599.504032][T22448] CPU: 0 UID: 0 PID: 22448 Comm: syz.0.5131 Not tainted syzkaller #0 PREEMPT(full) 
[  599.504061][T22448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  599.504073][T22448] Call Trace:
[  599.504082][T22448]  <TASK>
[  599.504091][T22448]  dump_stack_lvl+0xe8/0x150
[  599.504131][T22448]  should_fail_ex+0x40c/0x560
[  599.504161][T22448]  _copy_from_iter+0x1d3/0x1660
[  599.504188][T22448]  ? kmem_cache_alloc_node_noprof+0x121/0x610
[  599.504215][T22448]  ? rcu_is_watching+0x15/0xb0
[  599.504235][T22448]  ? trace_kmem_cache_alloc+0x29/0xe0
[  599.504261][T22448]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[  599.504286][T22448]  ? __pfx__copy_from_iter+0x10/0x10
[  599.504320][T22448]  ? __alloc_skb+0x276/0x7a0
[  599.504341][T22448]  ? __alloc_skb+0x276/0x7a0
[  599.504368][T22448]  ? netlink_sendmsg+0x650/0xb40
[  599.504393][T22448]  ? skb_put+0x112/0x210
[  599.504418][T22448]  netlink_sendmsg+0x6c0/0xb40
[  599.504453][T22448]  ? __pfx_netlink_sendmsg+0x10/0x10
[  599.504483][T22448]  ? aa_sock_msg_perm+0xf1/0x1b0
[  599.504512][T22448]  ? __pfx_netlink_sendmsg+0x10/0x10
[  599.504536][T22448]  sock_sendmsg_nosec+0x13a/0x180
[  599.504569][T22448]  ____sys_sendmsg+0x54e/0x850
[  599.504599][T22448]  ? __pfx_____sys_sendmsg+0x10/0x10
[  599.504633][T22448]  ? import_iovec+0x73/0xa0
[  599.504655][T22448]  ___sys_sendmsg+0x2a5/0x360
[  599.504679][T22448]  ? __lock_acquire+0x683/0x2cf0
[  599.504710][T22448]  ? __pfx____sys_sendmsg+0x10/0x10
[  599.504768][T22448]  ? __fget_files+0x2a/0x420
[  599.504793][T22448]  ? __fget_files+0x3a2/0x420
[  599.504829][T22448]  __x64_sys_sendmsg+0x1b1/0x290
[  599.504857][T22448]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  599.504899][T22448]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  599.504921][T22448]  do_syscall_64+0x174/0x580
[  599.504948][T22448]  ? trace_irq_disable+0x3b/0x140
[  599.504973][T22448]  ? clear_bhb_loop+0x40/0x90
[  599.504997][T22448]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  599.505016][T22448] RIP: 0033:0x7f0ecf99e019
[  599.505036][T22448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  599.505053][T22448] RSP: 002b:00007f0ecdbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  599.505074][T22448] RAX: ffffffffffffffda RBX: 00007f0ecfc26090 RCX: 00007f0ecf99e019
[  599.505088][T22448] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004
[  599.505101][T22448] RBP: 00007f0ecdbf6090 R08: 0000000000000000 R09: 0000000000000000
[  599.505114][T22448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  599.505126][T22448] R13: 00007f0ecfc26128 R14: 00007f0ecfc26090 R15: 00007fff6213fdf8
[  599.505157][T22448]  </TASK>
[  599.863474][T22451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5132'.
[  599.873309][T22451] netlink: 'syz.4.5132': attribute type 14 has an invalid length.
[  599.881937][T22451] netlink: 'syz.4.5132': attribute type 13 has an invalid length.
[  600.320267][T22462] ip_tables: iptables: counters copy to user failed while replacing table
[  600.778493][T22468] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  600.849141][T22478] __nla_validate_parse: 1 callbacks suppressed
[  600.849163][T22478] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5141'.
[  601.063318][T22481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5142'.
[  601.121422][T22481] veth1_to_team: entered promiscuous mode
[  601.166684][T22481] veth1_to_team: left promiscuous mode
[  601.420916][T22484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  602.185755][T22501] FAULT_INJECTION: forcing a failure.
[  602.185755][T22501] name failslab, interval 1, probability 0, space 0, times 0
[  602.235998][T22501] CPU: 1 UID: 0 PID: 22501 Comm: syz.0.5151 Not tainted syzkaller #0 PREEMPT(full) 
[  602.236028][T22501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  602.236040][T22501] Call Trace:
[  602.236048][T22501]  <TASK>
[  602.236058][T22501]  dump_stack_lvl+0xe8/0x150
[  602.236093][T22501]  should_fail_ex+0x40c/0x560
[  602.236125][T22501]  should_failslab+0xa8/0x100
[  602.236156][T22501]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  602.236182][T22501]  ? skb_clone+0x212/0x3a0
[  602.236206][T22501]  ? skb_clone+0x212/0x3a0
[  602.236237][T22501]  skb_clone+0x212/0x3a0
[  602.236266][T22501]  __netlink_deliver_tap+0x413/0x860
[  602.236304][T22501]  ? netlink_deliver_tap+0x2e/0x1b0
[  602.236332][T22501]  netlink_deliver_tap+0x19c/0x1b0
[  602.236359][T22501]  netlink_unicast+0x77f/0x940
[  602.236389][T22501]  netlink_sendmsg+0x813/0xb40
[  602.236421][T22501]  ? __pfx_netlink_sendmsg+0x10/0x10
[  602.236450][T22501]  ? aa_sock_msg_perm+0xf1/0x1b0
[  602.236478][T22501]  ? __pfx_netlink_sendmsg+0x10/0x10
[  602.236515][T22501]  sock_sendmsg_nosec+0x13a/0x180
[  602.236547][T22501]  ____sys_sendmsg+0x54e/0x850
[  602.236577][T22501]  ? __pfx_____sys_sendmsg+0x10/0x10
[  602.236611][T22501]  ? import_iovec+0x73/0xa0
[  602.236635][T22501]  ___sys_sendmsg+0x2a5/0x360
[  602.236745][T22501]  ? __lock_acquire+0x683/0x2cf0
[  602.236778][T22501]  ? __pfx____sys_sendmsg+0x10/0x10
[  602.236839][T22501]  ? __fget_files+0x2a/0x420
[  602.236865][T22501]  ? __fget_files+0x3a2/0x420
[  602.236901][T22501]  __x64_sys_sendmsg+0x1b1/0x290
[  602.236929][T22501]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  602.236973][T22501]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  602.236995][T22501]  do_syscall_64+0x174/0x580
[  602.237026][T22501]  ? trace_irq_disable+0x3b/0x140
[  602.237051][T22501]  ? clear_bhb_loop+0x40/0x90
[  602.237075][T22501]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  602.237095][T22501] RIP: 0033:0x7f0ecf99e019
[  602.237115][T22501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  602.237132][T22501] RSP: 002b:00007f0ed077f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  602.237152][T22501] RAX: ffffffffffffffda RBX: 00007f0ecfc25fa0 RCX: 00007f0ecf99e019
[  602.237166][T22501] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003
[  602.237187][T22501] RBP: 00007f0ed077f090 R08: 0000000000000000 R09: 0000000000000000
[  602.237199][T22501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  602.237211][T22501] R13: 00007f0ecfc26038 R14: 00007f0ecfc25fa0 R15: 00007fff6213fdf8
[  602.237243][T22501]  </TASK>
[  602.241060][T22501] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5151'.
[  602.599780][T22510] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5156'.
[  603.203206][T22535] netlink: 'syz.4.5165': attribute type 2 has an invalid length.
[  603.261494][T22535] tipc: Enabled bearer <udp:s>, priority 10
[  603.574953][T22546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5170'.
[  603.585299][T22544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5169'.
[  603.616274][T22548] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5171'.
[  603.678563][T22546] 8021q: adding VLAN 0 to HW filter on device bond19
[  603.836000][T22553] netlink: 'syz.0.5172': attribute type 1 has an invalid length.
[  603.927377][T22558] netlink: 292 bytes leftover after parsing attributes in process `syz.4.5174'.
[  603.969730][T22550] 8021q: adding VLAN 0 to HW filter on device bond20
[  603.987260][T22563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5170'.
[  604.011524][T22550] bond19: (slave bond20): Enslaving as an active interface with an up link
[  604.031060][T22562] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5175'.
[  604.056142][T22559] syzkaller0: entered promiscuous mode
[  604.065456][T22559] tipc: Resetting bearer <eth:syzkaller0>
[  604.126837][T22553] 8021q: adding VLAN 0 to HW filter on device bond11
[  604.145597][T22563] bond19 (unregistering): (slave bond20): Releasing backup interface
[  604.208313][T22569] netlink: 'syz.2.5175': attribute type 13 has an invalid length.
[  604.231466][T22563] bond19 (unregistering): Released all slaves
[  604.244280][T22569] netlink: 'syz.2.5175': attribute type 17 has an invalid length.
[  604.361754][T22571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  604.474928][T22569] ip_vti0: left promiscuous mode
[  604.562966][T22569] 8021q: adding VLAN 0 to HW filter on device batadv0
[  604.657822][T22569] veth1_macvtap: left promiscuous mode
[  604.678169][T22569] veth0_macvtap: left promiscuous mode
[  604.699238][T22569] veth0_macvtap: entered promiscuous mode
[  604.737935][T22569] veth1_macvtap: entered promiscuous mode
[  604.752093][T22569] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  604.774739][T22569] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  604.796718][T22569] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  604.823330][T22569] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  604.850396][T22569] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  604.988666][   T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  605.013059][   T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  605.061704][   T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  605.098746][   T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  605.234911][T22595] ip_tables: iptables: counters copy to user failed while replacing table
[  605.617014][T22610] Cannot find del_set index 1 as target
[  605.879844][T22620] __nla_validate_parse: 3 callbacks suppressed
[  605.879864][T22620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5191'.
[  606.019830][T22622] ip_tables: iptables: counters copy to user failed while replacing table
[  606.059893][T22626] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5194'.
[  606.267399][T22631] ip_tables: iptables: counters copy to user failed while replacing table
[  606.458982][T22642] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5200'.
[  606.545129][T22642] veth1_to_team: entered promiscuous mode
[  606.552860][T22642] veth1_to_team: left promiscuous mode
[  607.034888][T22649] bridge0: port 2(bridge_slave_1) entered disabled state
[  607.056147][T22662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5205'.
[  607.477902][T22649] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  607.525677][T22649] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  608.165809][T22649] tipc: Resetting bearer <eth:syzkaller0>
[  608.294145][ T3297] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  608.303411][ T3297] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 38720 - 0
[  608.426376][   T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  608.502697][   T36] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 38720 - 0
[  608.564279][   T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  608.628814][   T36] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 38720 - 0
[  608.674378][T22675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  608.697208][   T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  608.761215][   T36] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 38720 - 0
[  608.801074][T22684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5209'.
[  609.520011][T22706] FAULT_INJECTION: forcing a failure.
[  609.520011][T22706] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  609.572244][T22706] CPU: 0 UID: 0 PID: 22706 Comm: syz.0.5213 Not tainted syzkaller #0 PREEMPT(full) 
[  609.572273][T22706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  609.572286][T22706] Call Trace:
[  609.572295][T22706]  <TASK>
[  609.572304][T22706]  dump_stack_lvl+0xe8/0x150
[  609.572340][T22706]  should_fail_ex+0x40c/0x560
[  609.572372][T22706]  prepare_alloc_pages+0x230/0x650
[  609.572408][T22706]  __alloc_frozen_pages_noprof+0x12f/0x380
[  609.572449][T22706]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  609.572482][T22706]  ? __pfx_policy_nodemask+0x10/0x10
[  609.572521][T22706]  alloc_pages_mpol+0x212/0x380
[  609.572556][T22706]  alloc_pages_noprof+0xac/0x2a0
[  609.572578][T22706]  bpf_prog_test_run_xdp+0xc97/0x11d0
[  609.572621][T22706]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  609.572653][T22706]  ? __fget_files+0x2a/0x420
[  609.572685][T22706]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  609.572712][T22706]  bpf_prog_test_run+0x2c5/0x340
[  609.572744][T22706]  __sys_bpf+0xa22/0xd90
[  609.572778][T22706]  ? __pfx___sys_bpf+0x10/0x10
[  609.572818][T22706]  ? __fget_files+0x2a/0x420
[  609.572861][T22706]  ? ksys_write+0x242/0x270
[  609.572883][T22706]  ? __pfx_ksys_write+0x10/0x10
[  609.572908][T22706]  __x64_sys_bpf+0xba/0xd0
[  609.572932][T22706]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.572954][T22706]  do_syscall_64+0x174/0x580
[  609.572981][T22706]  ? trace_irq_disable+0x3b/0x140
[  609.573006][T22706]  ? clear_bhb_loop+0x40/0x90
[  609.573030][T22706]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.573050][T22706] RIP: 0033:0x7f0ecf99e019
[  609.573069][T22706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  609.573087][T22706] RSP: 002b:00007f0ed077f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  609.573108][T22706] RAX: ffffffffffffffda RBX: 00007f0ecfc25fa0 RCX: 00007f0ecf99e019
[  609.573122][T22706] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  609.573135][T22706] RBP: 00007f0ed077f090 R08: 0000000000000000 R09: 0000000000000000
[  609.573147][T22706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  609.573159][T22706] R13: 00007f0ecfc26038 R14: 00007f0ecfc25fa0 R15: 00007fff6213fdf8
[  609.573190][T22706]  </TASK>
[  610.377417][T22723] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5218'.
[  610.499918][T22728] netlink: 'syz.0.5220': attribute type 9 has an invalid length.
[  610.510397][T22728] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5220'.
[  610.584398][T22732] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5219'.
[  611.408809][T22729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5219'.
[  611.514745][T22756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5224'.
[  611.739952][T22765] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5227'.
[  611.804390][T22765] : left promiscuous mode
[  611.929714][T22769] netlink: 292 bytes leftover after parsing attributes in process `syz.2.5230'.
[  612.007713][T22769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5230'.
[  612.055243][T22769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5230'.
[  612.091403][T22769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5230'.
[  612.134154][T22769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5230'.
[  612.173050][T22769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5230'.
[  612.211630][T22769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5230'.
[  613.510818][T22814] netlink: 'syz.1.5243': attribute type 16 has an invalid length.
[  613.585564][T22814] tipc: Resetting bearer <eth:syzkaller0>
[  613.592137][T22814] syzkaller0: left promiscuous mode
[  613.597953][T22814] syzkaller0: entered allmulticast mode
[  613.660585][T22829] FAULT_INJECTION: forcing a failure.
[  613.660585][T22829] name failslab, interval 1, probability 0, space 0, times 0
[  613.691826][T22829] CPU: 0 UID: 0 PID: 22829 Comm: syz.4.5247 Not tainted syzkaller #0 PREEMPT(full) 
[  613.691854][T22829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  613.691866][T22829] Call Trace:
[  613.691875][T22829]  <TASK>
[  613.691883][T22829]  dump_stack_lvl+0xe8/0x150
[  613.691919][T22829]  should_fail_ex+0x40c/0x560
[  613.691952][T22829]  should_failslab+0xa8/0x100
[  613.691984][T22829]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  613.692008][T22829]  ? local_lock_release+0x9c/0x160
[  613.692031][T22829]  ? __alloc_skb+0x1d7/0x7a0
[  613.692050][T22829]  ? __alloc_skb+0x1d7/0x7a0
[  613.692076][T22829]  __alloc_skb+0x1d7/0x7a0
[  613.692102][T22829]  alloc_skb_with_frags+0xc6/0x760
[  613.692130][T22829]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  613.692157][T22829]  sock_alloc_send_pskb+0x878/0x990
[  613.692202][T22829]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  613.692239][T22829]  ? aa_sk_perm+0x6d5/0x900
[  613.692261][T22829]  hci_sock_sendmsg+0x208/0xf50
[  613.692421][T22829]  ? __pfx_aa_sk_perm+0x10/0x10
[  613.692441][T22829]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  613.692466][T22829]  ? aa_sock_msg_perm+0xf1/0x1b0
[  613.692493][T22829]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  613.692523][T22829]  sock_sendmsg_nosec+0x13a/0x180
[  613.692555][T22829]  sock_write_iter+0x2de/0x3e0
[  613.692585][T22829]  ? __pfx_sock_write_iter+0x10/0x10
[  613.692620][T22829]  ? bpf_lsm_file_permission+0x9/0x20
[  613.692644][T22829]  ? security_file_permission+0x75/0x260
[  613.692714][T22829]  vfs_write+0x612/0xba0
[  613.692743][T22829]  ? __pfx_vfs_write+0x10/0x10
[  613.692772][T22829]  ? __fget_files+0x2a/0x420
[  613.692808][T22829]  ksys_write+0x150/0x270
[  613.692830][T22829]  ? __pfx_ksys_write+0x10/0x10
[  613.692858][T22829]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  613.692880][T22829]  do_syscall_64+0x174/0x580
[  613.692907][T22829]  ? trace_irq_disable+0x3b/0x140
[  613.692931][T22829]  ? clear_bhb_loop+0x40/0x90
[  613.692955][T22829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  613.692975][T22829] RIP: 0033:0x7ff1f759e019
[  613.692995][T22829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  613.693013][T22829] RSP: 002b:00007ff1f83ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  613.693034][T22829] RAX: ffffffffffffffda RBX: 00007ff1f7825fa0 RCX: 00007ff1f759e019
[  613.693048][T22829] RDX: 0000000000000006 RSI: 0000200000000040 RDI: 0000000000000004
[  613.693061][T22829] RBP: 00007ff1f83ae090 R08: 0000000000000000 R09: 0000000000000000
[  613.693074][T22829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  613.693086][T22829] R13: 00007ff1f7826038 R14: 00007ff1f7825fa0 R15: 00007ffc4e6d1788
[  613.693117][T22829]  </TASK>
[  613.710870][T22822] syzkaller0: left promiscuous mode
[  614.016467][T22822] syzkaller0: left allmulticast mode
[  614.134479][T22844] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  614.932268][T22873] veth1_to_team: entered promiscuous mode
[  615.017989][T22875] netlink: 'syz.2.5261': attribute type 12 has an invalid length.
[  615.041341][T22873] veth1_to_team: left promiscuous mode
[  615.274216][T22880] netlink: 'syz.4.5264': attribute type 1 has an invalid length.
[  615.412103][   T30] audit: type=1107 audit(1785789166.774:13): pid=22885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  615.453196][T22880] 8021q: adding VLAN 0 to HW filter on device bond20
[  615.487085][T22891] netlink: 'syz.3.5265': attribute type 10 has an invalid length.
[  615.536041][T22893] ip_tables: iptables: counters copy to user failed while replacing table
[  615.790359][T22901] IPVS: set_ctl: invalid protocol: 135 172.20.20.31:20003
[  615.841805][T22903] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  616.321694][T22921] : left promiscuous mode
[  616.585408][T22931] __nla_validate_parse: 51 callbacks suppressed
[  616.585426][T22931] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5282'.
[  616.662634][T22935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5284'.
[  616.716127][T22931] veth1_to_team: entered promiscuous mode
[  616.736469][T22931] veth1_to_team: left promiscuous mode
[  616.933473][T22944] netlink: 'syz.0.5285': attribute type 10 has an invalid length.
[  617.510042][T22964] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5295'.
[  617.620340][T22967] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5296'.
[  617.659869][T22968] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  618.283021][T22987] vlan3: entered allmulticast mode
[  618.288677][T22991] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5304'.
[  618.317675][T22987] bond0: entered allmulticast mode
[  618.387763][T22987] batadv0: entered allmulticast mode
[  618.512621][T22999] netlink: 'syz.0.5306': attribute type 1 has an invalid length.
[  618.638845][T22999] 8021q: adding VLAN 0 to HW filter on device bond12
[  620.067184][T23034] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5315'.
[  620.102809][T23034] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5315'.
[  620.230219][T23044] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5316'.
[  620.274221][T23044] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5316'.
[  620.303981][T23044] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5316'.
[  621.436181][T23063] ip_tables: iptables: counters copy to user failed while replacing table
[  621.594037][T23070] IPv6: addrconf: prefix option has invalid lifetime
[  621.756900][T23076] netlink: 'syz.0.5327': attribute type 33 has an invalid length.
[  621.849833][T23083] netlink: 'syz.3.5329': attribute type 1 has an invalid length.
[  621.900718][T23083] __nla_validate_parse: 3 callbacks suppressed
[  621.900736][T23083] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.5329'.
[  621.930743][T23083] netlink: 'syz.3.5329': attribute type 1 has an invalid length.
[  621.996588][T23083] netlink: 2016 bytes leftover after parsing attributes in process `syz.3.5329'.
[  622.079355][T23091] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5329'.
[  622.176509][T23083] x_tables: duplicate underflow at hook 1
[  622.628043][T23113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5336'.
[  622.673176][T23114] bond0: (slave batadv0): Releasing backup interface
[  622.721771][T23114] tipc: Resetting bearer <eth:batadv0>
[  622.756032][T23114] bridge_slave_0: left allmulticast mode
[  622.838400][T23114] bridge_slave_0: left promiscuous mode
[  622.862758][T23114] pimreg1: port 1(bridge_slave_0) entered disabled state
[  622.962177][T23126] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5338'.
[  623.207488][T23137] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5340'.
[  625.779793][T23114] bridge_slave_1: left allmulticast mode
[  625.812749][T23114] bridge_slave_1: left promiscuous mode
[  625.836645][T23114] pimreg1: port 2(bridge_slave_1) entered disabled state
[  625.866802][T23114] bond19: (slave veth0_to_bond): Releasing active interface
[  625.930086][T23154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5343'.
[  625.957419][T23114] bond0: (slave bond_slave_0): Releasing backup interface
[  625.979362][T23114] bond0: (slave bond_slave_1): Releasing backup interface
[  626.009231][T23114] team0: Port device team_slave_0 removed
[  626.031725][T23114] team0: Port device team_slave_1 removed
[  626.044904][T23114] batman_adv: batadv0: Removing interface: batadv_slave_0
[  626.053293][T23114] batman_adv: batadv0: Removing interface: batadv_slave_1
[  626.061908][T23114] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  626.090008][T23117] 8021q: adding VLAN 0 to HW filter on device batadv0
[  626.112673][T23117] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  629.529897][T23167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  629.781211][T23193] netlink: 'syz.0.5353': attribute type 1 has an invalid length.
[  629.882319][T23198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5356'.
[  629.936941][T23193] 8021q: adding VLAN 0 to HW filter on device bond13
[  629.944463][T23196] veth0_to_bond: left promiscuous mode
[  629.946154][T23197] netlink: 'syz.3.5355': attribute type 11 has an invalid length.
[  629.950542][T23198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5356'.
[  630.246549][T23186] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5353'.
[  630.322892][T23210] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5359'.
[  631.157853][T23231] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5364'.
[  631.195886][T23231] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5364'.
[  631.233847][T23231] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5364'.
[  631.288930][T23237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5370'.
[  631.713123][T23251] veth1_virt_wifi: left allmulticast mode
[  631.723182][T23255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5373'.
[  631.732468][T23251] geneve2: left allmulticast mode
[  631.756173][T23251] bond2: left allmulticast mode
[  631.766049][T23251] syzkaller0: left allmulticast mode
[  631.785552][T23253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5373'.
[  631.807751][T23251] bond4: left allmulticast mode
[  631.817417][T23251] erspan1: left allmulticast mode
[  631.832463][T23251] bond6: left allmulticast mode
[  631.848390][T23251] bond7: left allmulticast mode
[  631.861429][T23251] bond8: left allmulticast mode
[  631.875662][T23251] bond9: left allmulticast mode
[  631.946285][ T8780] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  631.977490][ T8780] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  632.036370][   T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  632.060025][   T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  632.258673][T23267] netlink: 'syz.3.5377': attribute type 1 has an invalid length.
[  632.279845][T23272] FAULT_INJECTION: forcing a failure.
[  632.279845][T23272] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  632.295545][T23272] CPU: 0 UID: 0 PID: 23272 Comm: syz.4.5380 Not tainted syzkaller #0 PREEMPT(full) 
[  632.295572][T23272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  632.295584][T23272] Call Trace:
[  632.295593][T23272]  <TASK>
[  632.295603][T23272]  dump_stack_lvl+0xe8/0x150
[  632.295638][T23272]  should_fail_ex+0x40c/0x560
[  632.295668][T23272]  _copy_from_user+0x2d/0xb0
[  632.295689][T23272]  ___sys_recvmsg+0x173/0x5a0
[  632.295722][T23272]  ? __pfx____sys_recvmsg+0x10/0x10
[  632.295753][T23272]  ? __fget_files+0x2a/0x420
[  632.295809][T23272]  do_recvmmsg+0x31a/0x7f0
[  632.295843][T23272]  ? __pfx_do_recvmmsg+0x10/0x10
[  632.295880][T23272]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  632.295910][T23272]  ? __fget_files+0x3a2/0x420
[  632.295947][T23272]  __x64_sys_recvmmsg+0x198/0x250
[  632.295976][T23272]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  632.296011][T23272]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  632.296033][T23272]  do_syscall_64+0x174/0x580
[  632.296059][T23272]  ? trace_irq_disable+0x3b/0x140
[  632.296085][T23272]  ? clear_bhb_loop+0x40/0x90
[  632.296109][T23272]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  632.296129][T23272] RIP: 0033:0x7ff1f759e019
[  632.296148][T23272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  632.296172][T23272] RSP: 002b:00007ff1f83ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  632.296194][T23272] RAX: ffffffffffffffda RBX: 00007ff1f7825fa0 RCX: 00007ff1f759e019
[  632.296208][T23272] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000006
[  632.296222][T23272] RBP: 00007ff1f83ae090 R08: 0000000000000000 R09: 0000000000000000
[  632.296235][T23272] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002
[  632.296248][T23272] R13: 00007ff1f7826038 R14: 00007ff1f7825fa0 R15: 00007ffc4e6d1788
[  632.296280][T23272]  </TASK>
[  632.419846][T23267] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR
[  632.597272][T23279] mac80211_hwsim hwsim76 wlan0: entered promiscuous mode
[  632.614592][T23280] netlink: 'syz.4.5381': attribute type 1 has an invalid length.
[  632.617393][T23279] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  632.679147][T23280] bond21: entered promiscuous mode
[  632.684989][T23280] bond21: entered allmulticast mode
[  632.690766][T23280] 8021q: adding VLAN 0 to HW filter on device bond21
[  634.508179][T23320] veth1_to_team: entered promiscuous mode
[  634.552701][T23320] veth1_to_team: left promiscuous mode
[  634.836004][T23330] ip_tables: iptables: counters copy to user failed while replacing table
[  635.337412][T23341] __nla_validate_parse: 3 callbacks suppressed
[  635.337433][T23341] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5402'.
[  635.398162][T23341] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5402'.
[  635.682584][T23355] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5406'.
[  636.214352][T23367] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5408'.
[  636.586881][T23371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  636.977243][T23381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5413'.
[  637.004421][T23381] openvswitch: ovs-system: Dropping previously announced user features
[  637.161669][T23392] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5414'.
[  637.184252][T23392] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5414'.
[  637.203924][T23392] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5414'.
[  637.238079][T23393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5413'.
[  637.334848][T23396] netlink: 'syz.2.5417': attribute type 1 has an invalid length.
[  637.441868][T23396] 8021q: adding VLAN 0 to HW filter on device bond9
[  637.547959][T23400] bond9: (slave geneve5): making interface the new active one
[  637.572225][T23400] bond9: (slave geneve5): Enslaving as an active interface with an up link
[  638.289216][T23417] netlink: 'syz.2.5422': attribute type 1 has an invalid length.
[  638.465658][T23417] bond10: entered promiscuous mode
[  638.554112][T23417] bond10: entered allmulticast mode
[  638.563653][T23417] 8021q: adding VLAN 0 to HW filter on device bond10
[  638.960994][T23432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  640.344931][T23472] openvswitch: netlink: Flow actions attr not present in new flow.
[  640.534705][T23470] bridge0: port 1(vlan1) entered blocking state
[  640.551484][T23470] bridge0: port 1(vlan1) entered disabled state
[  640.571616][T23470] vlan1: entered allmulticast mode
[  640.590317][T23470] batadv0: entered allmulticast mode
[  640.620019][T23470] vlan1: entered promiscuous mode
[  640.638573][T23470] batadv0: entered promiscuous mode
[  640.673573][T23470] bond1: entered promiscuous mode
[  640.705541][T23470] bridge0: port 1(vlan1) entered blocking state
[  640.711979][T23470] bridge0: port 1(vlan1) entered listening state
[  640.772135][ T8789] bridge0: port 1(vlan1) entered disabled state
[  641.033004][T23479] netlink: 'syz.4.5443': attribute type 1 has an invalid length.
[  641.143721][T23483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  641.234678][T23479] netlink: 'syz.4.5443': attribute type 10 has an invalid length.
[  641.263898][T23479] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5443'.
[  641.342531][T23479] dummy0: entered promiscuous mode
[  641.708103][T23496] netlink: 292 bytes leftover after parsing attributes in process `syz.4.5448'.
[  641.767605][T23496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5448'.
[  641.922710][T23501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5449'.
[  642.597662][T23521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5453'.
[  643.043657][T23534] SET target dimension over the limit!
[  643.156063][T23538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5456'.
[  643.191313][T23538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5456'.
[  643.238731][T23545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5459'.
[  643.299541][T23552] netlink: 292 bytes leftover after parsing attributes in process `syz.4.5460'.
[  643.339252][ T8780] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  643.350695][T23553] ip_tables: iptables: counters copy to user failed while replacing table
[  643.460705][T23552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5460'.
[  643.494123][ T8789] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  643.510626][ T8789] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  643.577129][  T153] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  643.651959][T23560] tipc: Resetting bearer <eth:batadv0>
[  643.743176][T23564] netlink: 'syz.2.5463': attribute type 1 has an invalid length.
[  643.895446][T23560] tipc: Resetting bearer <eth:syzkaller0>
[  644.028699][T23564] netlink: 'syz.2.5463': attribute type 2 has an invalid length.
[  644.080700][T23577] IPv6: addrconf: prefix option has invalid lifetime
[  644.113380][T23577] netlink: 'syz.3.5467': attribute type 1 has an invalid length.
[  644.597226][T23590] tipc: Disabling bearer <eth:syzkaller0>
[  644.614339][T23594] Cannot find set identified by id 65534 to match
[  644.951580][T23604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  646.295628][T23650] netlink: 'syz.4.5489': attribute type 5 has an invalid length.
[  646.326588][T23650] __nla_validate_parse: 7 callbacks suppressed
[  646.326605][T23650] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5489'.
[  646.592238][T23657] netlink: 'syz.0.5491': attribute type 4 has an invalid length.
[  646.617307][T23656] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5490'.
[  646.653053][T23657] netlink: 'syz.0.5491': attribute type 13 has an invalid length.
[  646.691028][T23656] : left promiscuous mode
[  647.108251][T23670] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5497'.
[  647.167899][T23673] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  647.392568][T23686] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5502'.
[  647.435850][T23686] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5502'.
[  647.481232][T23690] FAULT_INJECTION: forcing a failure.
[  647.481232][T23690] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  647.483868][T23686] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5502'.
[  647.519152][T23690] CPU: 0 UID: 0 PID: 23690 Comm: syz.2.5504 Not tainted syzkaller #0 PREEMPT(full) 
[  647.519181][T23690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  647.519193][T23690] Call Trace:
[  647.519202][T23690]  <TASK>
[  647.519211][T23690]  dump_stack_lvl+0xe8/0x150
[  647.519247][T23690]  should_fail_ex+0x40c/0x560
[  647.519279][T23690]  _copy_from_user+0x2d/0xb0
[  647.519300][T23690]  kstrtouint_from_user+0xd6/0x180
[  647.519330][T23690]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  647.519374][T23690]  proc_fail_nth_write+0x8e/0x210
[  647.519443][T23690]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  647.519478][T23690]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  647.519506][T23690]  vfs_write+0x296/0xba0
[  647.519536][T23690]  ? __pfx_vfs_write+0x10/0x10
[  647.519557][T23690]  ? __fget_files+0x2a/0x420
[  647.519587][T23690]  ? __fget_files+0x3a2/0x420
[  647.519612][T23690]  ? __fget_files+0x2a/0x420
[  647.519654][T23690]  ksys_write+0x150/0x270
[  647.519677][T23690]  ? __pfx_ksys_write+0x10/0x10
[  647.519705][T23690]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  647.519727][T23690]  do_syscall_64+0x174/0x580
[  647.519754][T23690]  ? trace_irq_disable+0x3b/0x140
[  647.519780][T23690]  ? clear_bhb_loop+0x40/0x90
[  647.519804][T23690]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  647.519824][T23690] RIP: 0033:0x7fb876d5e84e
[  647.519843][T23690] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  647.519861][T23690] RSP: 002b:00007fb877b9efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  647.519882][T23690] RAX: ffffffffffffffda RBX: 00007fb877b9f6c0 RCX: 00007fb876d5e84e
[  647.519896][T23690] RDX: 0000000000000001 RSI: 00007fb877b9f0a0 RDI: 0000000000000005
[  647.519909][T23690] RBP: 00007fb877b9f090 R08: 0000000000000000 R09: 0000000000000000
[  647.519921][T23690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  647.519933][T23690] R13: 00007fb877026038 R14: 00007fb877025fa0 R15: 00007ffca481ac28
[  647.519966][T23690]  </TASK>
[  647.933596][T23693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5506'.
[  647.966560][T23697] netlink: 'syz.3.5507': attribute type 1 has an invalid length.
[  647.990590][T23694] netlink: 'syz.1.5505': attribute type 1 has an invalid length.
[  648.134688][T23702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5505'.
[  648.266006][T23694] 8021q: adding VLAN 0 to HW filter on device bond21
[  648.282541][T23706] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  648.373718][T23715] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5509'.
[  648.375101][T23714] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5510'.
[  648.385761][T23694] netlink: 'syz.1.5505': attribute type 10 has an invalid length.
[  648.547801][T23700] bond21: (slave veth7): Enslaving as an active interface with a down link
[  648.599556][T23705] batadv_slave_1: entered promiscuous mode
[  648.619023][T23707] bond21: (slave dummy0): making interface the new active one
[  648.667456][T23707] bond21: (slave dummy0): Enslaving as an active interface with an up link
[  648.715642][T23694] dummy0: entered promiscuous mode
[  648.765953][T23694] bond21: (slave dummy0): Releasing active interface
[  648.810404][T23705] batadv_slave_1: left promiscuous mode
[  648.846262][T23717] smc: net device lo erased user defined pnetid SYZ0
[  649.157623][T23544] udevd[23544]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  649.752729][T23760] netlink: 'syz.4.5523': attribute type 10 has an invalid length.
[  649.790496][T23760] tipc: Resetting bearer <eth:batadv0>
[  649.810118][T23760] 8021q: adding VLAN 0 to HW filter on device batadv0
[  649.846219][T23760] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  650.276898][T23778] FAULT_INJECTION: forcing a failure.
[  650.276898][T23778] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  650.320542][T23778] CPU: 1 UID: 0 PID: 23778 Comm: syz.2.5532 Not tainted syzkaller #0 PREEMPT(full) 
[  650.320574][T23778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  650.320586][T23778] Call Trace:
[  650.320594][T23778]  <TASK>
[  650.320602][T23778]  dump_stack_lvl+0xe8/0x150
[  650.320638][T23778]  should_fail_ex+0x40c/0x560
[  650.320668][T23778]  _copy_from_user+0x2d/0xb0
[  650.320689][T23778]  __sys_bpf+0x2e7/0xd90
[  650.320723][T23778]  ? __pfx___sys_bpf+0x10/0x10
[  650.320758][T23778]  ? __fget_files+0x2a/0x420
[  650.320798][T23778]  ? ksys_write+0x242/0x270
[  650.320819][T23778]  ? __pfx_ksys_write+0x10/0x10
[  650.320844][T23778]  __x64_sys_bpf+0xba/0xd0
[  650.320867][T23778]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  650.320886][T23778]  do_syscall_64+0x174/0x580
[  650.320911][T23778]  ? trace_irq_disable+0x3b/0x140
[  650.320935][T23778]  ? clear_bhb_loop+0x40/0x90
[  650.320958][T23778]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  650.320976][T23778] RIP: 0033:0x7fb876d9e019
[  650.320995][T23778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  650.321010][T23778] RSP: 002b:00007fb877b9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  650.321030][T23778] RAX: ffffffffffffffda RBX: 00007fb877025fa0 RCX: 00007fb876d9e019
[  650.321044][T23778] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  650.321057][T23778] RBP: 00007fb877b9f090 R08: 0000000000000000 R09: 0000000000000000
[  650.321068][T23778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  650.321079][T23778] R13: 00007fb877026038 R14: 00007fb877025fa0 R15: 00007ffca481ac28
[  650.321108][T23778]  </TASK>
[  650.329079][T23784] FAULT_INJECTION: forcing a failure.
[  650.329079][T23784] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  650.568811][T23790] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  650.589899][T23784] CPU: 0 UID: 0 PID: 23784 Comm: syz.3.5535 Not tainted syzkaller #0 PREEMPT(full) 
[  650.589928][T23784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  650.589941][T23784] Call Trace:
[  650.589950][T23784]  <TASK>
[  650.589960][T23784]  dump_stack_lvl+0xe8/0x150
[  650.589996][T23784]  should_fail_ex+0x40c/0x560
[  650.590026][T23784]  _copy_from_user+0x2d/0xb0
[  650.590047][T23784]  ___sys_recvmsg+0x173/0x5a0
[  650.590074][T23784]  ? lockdep_hardirqs_on+0x7a/0x110
[  650.590105][T23784]  ? __pfx____sys_recvmsg+0x10/0x10
[  650.590167][T23784]  do_recvmmsg+0x31a/0x7f0
[  650.590221][T23784]  ? __pfx_do_recvmmsg+0x10/0x10
[  650.590259][T23784]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  650.590288][T23784]  ? __fget_files+0x3a2/0x420
[  650.590326][T23784]  __x64_sys_recvmmsg+0x198/0x250
[  650.590367][T23784]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  650.590402][T23784]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  650.590425][T23784]  do_syscall_64+0x174/0x580
[  650.590451][T23784]  ? trace_irq_disable+0x3b/0x140
[  650.590476][T23784]  ? clear_bhb_loop+0x40/0x90
[  650.590500][T23784]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  650.590523][T23784] RIP: 0033:0x7f3c6df9e019
[  650.590543][T23784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  650.590560][T23784] RSP: 002b:00007f3c6eded028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  650.590581][T23784] RAX: ffffffffffffffda RBX: 00007f3c6e225fa0 RCX: 00007f3c6df9e019
[  650.590596][T23784] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000006
[  650.590610][T23784] RBP: 00007f3c6eded090 R08: 0000000000000000 R09: 0000000000000000
[  650.590622][T23784] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002
[  650.590635][T23784] R13: 00007f3c6e226038 R14: 00007f3c6e225fa0 R15: 00007fff11ea6518
[  650.590666][T23784]  </TASK>
[  650.613877][T23790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  650.638437][T23792] netlink: 'syz.4.5537': attribute type 11 has an invalid length.
[  650.874020][T23796] netlink: 'syz.4.5537': attribute type 11 has an invalid length.
[  651.710995][T23827] __nla_validate_parse: 3 callbacks suppressed
[  651.711016][T23827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5546'.
[  652.127388][T23833] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5548'.
[  652.482794][T23850] Cannot find set identified by id 65534 to match
[  652.679919][T23862] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  652.762386][T23868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5558'.
[  653.389931][T23880] netlink: 'syz.2.5563': attribute type 1 has an invalid length.
[  653.630491][T23880] bond12: entered promiscuous mode
[  653.636032][T23880] bond12: entered allmulticast mode
[  653.641743][T23880] 8021q: adding VLAN 0 to HW filter on device bond12
[  653.865304][T23886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5565'.
[  654.345215][T23896] lo speed is unknown, defaulting to 1000
[  654.412537][T23902] netlink: 'syz.0.5568': attribute type 1 has an invalid length.
[  654.451557][T23902] netlink: 'syz.0.5568': attribute type 2 has an invalid length.
[  654.472708][T23906] FAULT_INJECTION: forcing a failure.
[  654.472708][T23906] name failslab, interval 1, probability 0, space 0, times 0
[  654.482348][T23902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5568'.
[  654.554045][T23906] CPU: 0 UID: 0 PID: 23906 Comm: syz.3.5570 Not tainted syzkaller #0 PREEMPT(full) 
[  654.554072][T23906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  654.554084][T23906] Call Trace:
[  654.554094][T23906]  <TASK>
[  654.554103][T23906]  dump_stack_lvl+0xe8/0x150
[  654.554138][T23906]  should_fail_ex+0x40c/0x560
[  654.554169][T23906]  should_failslab+0xa8/0x100
[  654.554201][T23906]  __kmalloc_noprof+0xfe/0x720
[  654.554227][T23906]  ? bpf_test_init+0x9f/0x150
[  654.554248][T23906]  ? bpf_test_init+0x9f/0x150
[  654.554275][T23906]  bpf_test_init+0x9f/0x150
[  654.554300][T23906]  bpf_prog_test_run_xdp+0x4cc/0x11d0
[  654.554335][T23906]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  654.554370][T23906]  ? __fget_files+0x2a/0x420
[  654.554397][T23906]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  654.554421][T23906]  bpf_prog_test_run+0x2c5/0x340
[  654.554449][T23906]  __sys_bpf+0xa22/0xd90
[  654.554482][T23906]  ? __pfx___sys_bpf+0x10/0x10
[  654.554518][T23906]  ? __fget_files+0x2a/0x420
[  654.554564][T23906]  ? ksys_write+0x242/0x270
[  654.554586][T23906]  ? __pfx_ksys_write+0x10/0x10
[  654.554611][T23906]  __x64_sys_bpf+0xba/0xd0
[  654.554631][T23906]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  654.554649][T23906]  do_syscall_64+0x174/0x580
[  654.554676][T23906]  ? trace_irq_disable+0x3b/0x140
[  654.554700][T23906]  ? clear_bhb_loop+0x40/0x90
[  654.554725][T23906]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  654.554744][T23906] RIP: 0033:0x7f3c6df9e019
[  654.554764][T23906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  654.554781][T23906] RSP: 002b:00007f3c6eded028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  654.554803][T23906] RAX: ffffffffffffffda RBX: 00007f3c6e225fa0 RCX: 00007f3c6df9e019
[  654.554815][T23906] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  654.554827][T23906] RBP: 00007f3c6eded090 R08: 0000000000000000 R09: 0000000000000000
[  654.554837][T23906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  654.554848][T23906] R13: 00007f3c6e226038 R14: 00007f3c6e225fa0 R15: 00007fff11ea6518
[  654.554876][T23906]  </TASK>
[  654.971132][T23913] netlink: 'syz.3.5574': attribute type 3 has an invalid length.
[  655.059258][T23917] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5575'.
[  655.069035][T23917] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5575'.
[  655.162861][T23921] netlink: 'syz.3.5576': attribute type 8 has an invalid length.
[  655.611410][T23896] dvmrp0: entered allmulticast mode
[  655.701690][  T153] dvmrp0: left allmulticast mode
[  656.984148][T23937] lo speed is unknown, defaulting to 1000
[  657.261854][T23955] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5584'.
[  657.310648][T23959] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5585'.
[  657.734458][T23974] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5588'.
[  657.879557][T23978] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5589'.
[  658.125002][T23980] syzkaller1: entered promiscuous mode
[  658.130887][T23980] syzkaller1: entered allmulticast mode
[  658.401783][T23989] syzkaller0: entered promiscuous mode
[  658.425370][T23989] syzkaller0: entered allmulticast mode
[  658.472143][T23994] macvlan0: entered promiscuous mode
[  658.496939][T23994] netlink: 'syz.0.5593': attribute type 1 has an invalid length.
[  658.514425][T23994] netlink: 'syz.0.5593': attribute type 2 has an invalid length.
[  658.730513][T24004] ip_tables: iptables: counters copy to user failed while replacing table
[  658.844744][T24007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  658.886819][T24016] FAULT_INJECTION: forcing a failure.
[  658.886819][T24016] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  658.933788][T24016] CPU: 0 UID: 0 PID: 24016 Comm: syz.3.5599 Not tainted syzkaller #0 PREEMPT(full) 
[  658.933814][T24016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  658.933825][T24016] Call Trace:
[  658.933834][T24016]  <TASK>
[  658.933843][T24016]  dump_stack_lvl+0xe8/0x150
[  658.933878][T24016]  should_fail_ex+0x40c/0x560
[  658.933909][T24016]  _copy_from_user+0x2d/0xb0
[  658.933930][T24016]  bpf_test_init+0xd8/0x150
[  658.933960][T24016]  bpf_prog_test_run_xdp+0x4cc/0x11d0
[  658.934002][T24016]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  658.934031][T24016]  ? __fget_files+0x2a/0x420
[  658.934063][T24016]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  658.934091][T24016]  bpf_prog_test_run+0x2c5/0x340
[  658.934123][T24016]  __sys_bpf+0xa22/0xd90
[  658.934157][T24016]  ? __pfx___sys_bpf+0x10/0x10
[  658.934194][T24016]  ? __fget_files+0x2a/0x420
[  658.934233][T24016]  ? ksys_write+0x242/0x270
[  658.934255][T24016]  ? __pfx_ksys_write+0x10/0x10
[  658.934280][T24016]  __x64_sys_bpf+0xba/0xd0
[  658.934304][T24016]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  658.934327][T24016]  do_syscall_64+0x174/0x580
[  658.934354][T24016]  ? trace_irq_disable+0x3b/0x140
[  658.934378][T24016]  ? clear_bhb_loop+0x40/0x90
[  658.934403][T24016]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  658.934422][T24016] RIP: 0033:0x7f3c6df9e019
[  658.934442][T24016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  658.934459][T24016] RSP: 002b:00007f3c6eded028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  658.934480][T24016] RAX: ffffffffffffffda RBX: 00007f3c6e225fa0 RCX: 00007f3c6df9e019
[  658.934495][T24016] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  658.934517][T24016] RBP: 00007f3c6eded090 R08: 0000000000000000 R09: 0000000000000000
[  658.934529][T24016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  658.934541][T24016] R13: 00007f3c6e226038 R14: 00007f3c6e225fa0 R15: 00007fff11ea6518
[  658.934572][T24016]  </TASK>
[  659.216592][T24021] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5600'.
[  659.454342][T24023] ip_tables: iptables: counters copy to user failed while replacing table
[  659.599969][T24033] ip_tables: iptables: counters copy to user failed while replacing table
[  659.678821][T24037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5605'.
[  659.741506][T24037] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5605'.
[  660.043117][T24046] netlink: 'syz.1.5606': attribute type 6 has an invalid length.
[  660.117933][T24052] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5608'.
[  660.555758][T24057] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5611'.
[  661.026748][T24074] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5613'.
[  661.414491][T24080] syzkaller0: entered promiscuous mode
[  661.422426][T24080] syzkaller0: entered allmulticast mode
[  661.445605][T24080] tipc: Resetting bearer <eth:syzkaller0>
[  661.565200][T24080] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  661.624309][T24086] netlink: 'syz.3.5618': attribute type 1 has an invalid length.
[  661.704114][T24087] syzkaller0: mtu less than device minimum
[  662.100223][T24093] netlink: 'syz.2.5620': attribute type 5 has an invalid length.
[  662.601963][T24104] __nla_validate_parse: 4 callbacks suppressed
[  662.601983][T24104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5626'.
[  662.639167][T24104] netlink: 'syz.2.5626': attribute type 5 has an invalid length.
[  662.674050][T24104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5626'.
[  662.983983][T24116] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5627'.
[  663.047873][T24116] veth1_to_team: entered promiscuous mode
[  663.072951][T24116] veth1_to_team: left promiscuous mode
[  663.152719][T24120] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5628'.
[  663.186050][T24120] siw: device registration error -23
[  663.451626][T24126] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5629'.
[  663.567987][T24132] netlink: 'syz.2.5632': attribute type 1 has an invalid length.
[  664.282759][T24145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5636'.
[  664.367760][T24152] FAULT_INJECTION: forcing a failure.
[  664.367760][T24152] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  664.433631][T24152] CPU: 0 UID: 0 PID: 24152 Comm: syz.0.5637 Not tainted syzkaller #0 PREEMPT(full) 
[  664.433660][T24152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  664.433673][T24152] Call Trace:
[  664.433681][T24152]  <TASK>
[  664.433690][T24152]  dump_stack_lvl+0xe8/0x150
[  664.433725][T24152]  should_fail_ex+0x40c/0x560
[  664.433756][T24152]  _copy_from_user+0x2d/0xb0
[  664.433778][T24152]  ___sys_recvmsg+0x173/0x5a0
[  664.433809][T24152]  ? __pfx____sys_recvmsg+0x10/0x10
[  664.433838][T24152]  ? __fget_files+0x2a/0x420
[  664.433889][T24152]  do_recvmmsg+0x31a/0x7f0
[  664.433920][T24152]  ? __pfx_do_recvmmsg+0x10/0x10
[  664.433957][T24152]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  664.433985][T24152]  ? __fget_files+0x3a2/0x420
[  664.434021][T24152]  __x64_sys_recvmmsg+0x198/0x250
[  664.434050][T24152]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  664.434084][T24152]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  664.434105][T24152]  do_syscall_64+0x174/0x580
[  664.434130][T24152]  ? trace_irq_disable+0x3b/0x140
[  664.434155][T24152]  ? clear_bhb_loop+0x40/0x90
[  664.434179][T24152]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  664.434198][T24152] RIP: 0033:0x7f0ecf99e019
[  664.434217][T24152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  664.434234][T24152] RSP: 002b:00007f0ed077f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  664.434254][T24152] RAX: ffffffffffffffda RBX: 00007f0ecfc25fa0 RCX: 00007f0ecf99e019
[  664.434269][T24152] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000006
[  664.434282][T24152] RBP: 00007f0ed077f090 R08: 0000000000000000 R09: 0000000000000000
[  664.434295][T24152] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002
[  664.434307][T24152] R13: 00007f0ecfc26038 R14: 00007f0ecfc25fa0 R15: 00007fff6213fdf8
[  664.434339][T24152]  </TASK>
[  665.178259][T24164] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  665.221746][T24163] syzkaller0: entered promiscuous mode
[  665.227823][T24169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5642'.
[  665.250359][T24163] syzkaller0: entered allmulticast mode
[  665.278669][T24169] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5642'.
[  665.306010][T24170] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  665.341772][T24161] tipc: Resetting bearer <eth:syzkaller0>
[  665.443355][T24161] tipc: Disabling bearer <eth:syzkaller0>
[  665.726947][T24180] netlink: 204 bytes leftover after parsing attributes in process `syz.0.5645'.
[  666.547587][T24202] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5650'.
[  666.566966][T24203] netlink: 'syz.1.5651': attribute type 1 has an invalid length.
[  666.593628][T24203] netlink: 'syz.1.5651': attribute type 2 has an invalid length.
[  666.605869][T24206] siw: device registration error -23
[  667.896233][T24228] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  667.903609][T24228] IPv6: NLM_F_CREATE should be set when creating new route
[  667.910982][T24228] IPv6: NLM_F_CREATE should be set when creating new route
[  668.275324][T24240] netlink: 'syz.2.5662': attribute type 1 has an invalid length.
[  668.446413][T24240] 8021q: adding VLAN 0 to HW filter on device bond13
[  668.611453][T24244] bond13: (slave veth5): Enslaving as an active interface with a down link
[  668.704539][T24252] netlink: 'syz.0.5665': attribute type 1 has an invalid length.
[  668.741622][T24245] bond13: (slave veth7): Enslaving as an active interface with a down link
[  668.772692][T24248] bond13: entered allmulticast mode
[  668.788744][T24252] netlink: 'syz.0.5665': attribute type 2 has an invalid length.
[  668.820256][T24252] __nla_validate_parse: 2 callbacks suppressed
[  668.820274][T24252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5665'.
[  669.117825][T24263] IPv6: addrconf: prefix option has invalid lifetime
[  669.151287][T24261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  669.614332][T24277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5674'.
[  669.708244][T24279] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5675'.
[  669.735315][T24280] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5676'.
[  669.749732][T24279] siw: device registration error -23
[  669.897199][T24287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5677'.
[  669.922928][T24286] xt_l2tp: missing protocol rule (udp|l2tpip)
[  669.966594][T24289] netlink: 'syz.0.5679': attribute type 1 has an invalid length.
[  670.094966][T24291] netlink: 'syz.0.5679': attribute type 2 has an invalid length.
[  670.142062][T24289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5679'.
[  670.636153][T24307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5684'.
[  670.825202][T24317] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5688'.
[  670.837701][T24309] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5686'.
[  670.878751][T24309] gretap0: entered promiscuous mode
[  671.658686][T24339] netlink: 'syz.2.5696': attribute type 1 has an invalid length.
[  671.679992][T24339] netlink: 'syz.2.5696': attribute type 2 has an invalid length.
[  671.733246][T24339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5696'.
[  672.050899][T24311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  672.429210][T24352] veth1_to_team: entered promiscuous mode
[  672.457877][T24352] veth1_to_team: left promiscuous mode
[  673.075048][T24374] siw: device registration error -23
[  673.093131][T24375] netlink: 'syz.4.5707': attribute type 2 has an invalid length.
[  673.142304][T24377] veth1_to_team: entered promiscuous mode
[  673.187618][T24377] veth1_to_team: left promiscuous mode
[  673.762645][T24392] netlink: 'syz.4.5713': attribute type 1 has an invalid length.
[  673.885568][T24398] __nla_validate_parse: 5 callbacks suppressed
[  673.885586][T24398] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5713'.
[  673.891332][T24392] 8021q: adding VLAN 0 to HW filter on device bond23
[  673.926289][T24394] vlan4: entered promiscuous mode
[  673.931489][T24394] bond23: entered promiscuous mode
[  673.939216][T24394] vlan4: entered allmulticast mode
[  673.944615][T24394] bond23: entered allmulticast mode
[  673.960558][T24398] 8021q: adding VLAN 0 to HW filter on device batadv2
[  674.000367][T24398] bond23: (slave batadv2): making interface the new active one
[  674.038970][T24398] batadv2: entered promiscuous mode
[  674.065014][T24398] batadv2: entered allmulticast mode
[  674.083936][T24398] bond23: (slave batadv2): Enslaving as an active interface with an up link
[  675.975597][T24421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5722'.
[  676.189816][T24424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5722'.
[  676.248431][T24421] 8021q: adding VLAN 0 to HW filter on device bond14
[  676.530067][T24427] syzkaller0: entered promiscuous mode
[  676.539896][T24427] syzkaller0: entered allmulticast mode
[  676.570811][T24427] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  677.029948][T24438] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5726'.
[  677.189478][T24443] netlink: 'syz.2.5729': attribute type 1 has an invalid length.
[  677.289227][T24443] 8021q: adding VLAN 0 to HW filter on device bond16
[  677.589199][   T30] audit: type=1800 audit(1785789228.974:14): pid=24453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5733" name="memory.events" dev="tmpfs" ino=2775 res=0 errno=0
[  677.670918][T24459] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5735'.
[  677.817636][T24467] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5732'.
[  677.881154][T24468] siw: device registration error -23
[  677.968774][T24471] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5738'.
[  678.421554][T24480] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  679.157640][T24499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5747'.
[  679.288616][T24501] netlink: 19 bytes leftover after parsing attributes in process `syz.4.5747'.
[  679.338909][T24486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  679.547013][T24507] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5750'.
[  679.830019][T24516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5754'.
[  680.318675][T24535] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5757'.
[  680.364321][T24535] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5757'.
[  680.404690][T24535] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5757'.
[  680.525355][T24541] ip_tables: iptables: counters copy to user failed while replacing table
[  680.860401][T24550] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5764'.
[  681.084164][T24556] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5766'.
[  681.179598][T24561] siw: device registration error -23
[  681.873669][T24571] lo speed is unknown, defaulting to 1000
[  682.464765][T24575] IPv6: Can't replace route, no match found
[  683.046060][T24584] netlink: 'syz.1.5775': attribute type 1 has an invalid length.
[  683.152779][T24584] 8021q: adding VLAN 0 to HW filter on device bond22
[  683.510356][T24590] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512
[  684.158702][T24619] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5783'.
[  684.604990][T24637] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  684.795942][T24642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5788'.
[  685.077977][T24652] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5790'.
[  685.091064][T24649] bond17: entered promiscuous mode
[  685.100032][T24649] bond17: entered allmulticast mode
[  685.191492][T24652] siw: device registration error -23
[  685.241167][T24657] sctp: [Deprecated]: syz.2.5793 (pid 24657) Use of int in max_burst socket option deprecated.
[  685.241167][T24657] Use struct sctp_assoc_value instead
[  685.688584][T24665] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5795'.
[  686.050636][T24674] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5799'.
[  686.085556][T24674] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5799'.
[  686.688111][T24688] ip_tables: iptables: counters copy to user failed while replacing table
[  686.735763][ T4940] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  686.756112][ T4940] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  686.773561][ T4940] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  686.787408][ T4940] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  686.799399][ T4940] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  686.953417][   T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  686.971225][   T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  686.981502][   T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  687.014908][T24698] netlink: 292 bytes leftover after parsing attributes in process `syz.0.5808'.
[  687.025380][   T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  687.036419][T24698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5808'.
[  687.045663][T24698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5808'.
[  687.055235][T24698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5808'.
[  687.064996][T24698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5808'.
[  687.074458][   T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  687.615933][T14800] bond5: (slave syz_tun): Removing an active aggregator
[  687.666571][ T1171] bond5: Warning: Found an uninitialized port
[  687.685409][T14800] bond5: (slave syz_tun): Releasing backup interface
[  687.848877][T24720] ip_tables: iptables: counters copy to user failed while replacing table
[  688.507809][T24734] openvswitch: netlink: IPv4 tunnel dst address is zero
[  688.667585][T24741] netlink: 'syz.4.5817': attribute type 1 has an invalid length.
[  688.837505][T24744] netlink: 'syz.1.5818': attribute type 5 has an invalid length.
[  688.850784][T24741] 8021q: adding VLAN 0 to HW filter on device bond25
[  689.098972][T24689] lo speed is unknown, defaulting to 1000
[  689.134677][ T4940] Bluetooth: hci0: command tx timeout
[  689.959040][T24769] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  689.971107][T24769] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  689.979613][T24769] CPU: 0 UID: 0 PID: 24769 Comm: syz.4.5825 Not tainted syzkaller #0 PREEMPT(full) 
[  689.989005][T24769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  689.999126][T24769] RIP: 0010:klist_remove+0x156/0x340
[  690.004567][T24769] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 ad 12 6c f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 8e 12 6c f6 49 8b 44 24 58 48 89 44 24 08
[  690.024188][T24769] RSP: 0018:ffffc900001e7960 EFLAGS: 00010202
[  690.030274][T24769] RAX: 000000000000000b RBX: ffff88807a19be00 RCX: 0000000000000000
[  690.038248][T24769] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  690.046310][T24769] RBP: ffffc900001e7a60 R08: ffffffff903d71a3 R09: 1ffffffff207ae34
[  690.054299][T24769] R10: dffffc0000000000 R11: fffffbfff207ae35 R12: 0000000000000000
[  690.062282][T24769] R13: 1ffff1100b06018c R14: ffff888058300c60 R15: dffffc0000000000
[  690.070276][T24769] FS:  00007ff1f83ae6c0(0000) GS:ffff888124f4f000(0000) knlGS:0000000000000000
[  690.079223][T24769] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  690.085815][T24769] CR2: 000000110c33a1c7 CR3: 0000000046c6a000 CR4: 00000000003526f0
[  690.093801][T24769] Call Trace:
[  690.097083][T24769]  <TASK>
[  690.100020][T24769]  ? __pfx_klist_remove+0x10/0x10
[  690.105063][T24769]  ? kobject_move+0x5e2/0x720
[  690.109748][T24769]  ? __pfx_kobject_move+0x10/0x10
[  690.114773][T24769]  ? do_raw_spin_unlock+0xf5/0x210
[  690.119896][T24769]  ? get_device_parent+0x366/0x3a0
[  690.125131][T24769]  device_move+0x18e/0x720
[  690.129607][T24769]  hci_conn_del_sysfs+0xb8/0x1a0
[  690.134565][T24769]  hci_conn_del+0xc3d/0x1200
[  690.139255][T24769]  hci_conn_hash_flush+0x189/0x260
[  690.145065][T24769]  hci_dev_close_sync+0x7fc/0x10a0
[  690.150414][T24769]  ? __pfx___mutex_lock+0x10/0x10
[  690.155509][T24769]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  690.161068][T24769]  ? lockdep_hardirqs_on+0x7a/0x110
[  690.166287][T24769]  ? enable_work+0x1fd/0x230
[  690.170898][T24769]  hci_dev_close+0x108/0x260
[  690.175572][T24769]  sock_do_ioctl+0x101/0x320
[  690.180185][T24769]  ? __pfx_sock_do_ioctl+0x10/0x10
[  690.185310][T24769]  ? hook_file_ioctl+0x1f0/0x5f0
[  690.190348][T24769]  sock_ioctl+0x57a/0x7e0
[  690.194681][T24769]  ? __pfx_sock_ioctl+0x10/0x10
[  690.199530][T24769]  ? __fget_files+0x2a/0x420
[  690.204118][T24769]  ? __fget_files+0x3a2/0x420
[  690.208789][T24769]  ? __fget_files+0x2a/0x420
[  690.213466][T24769]  ? bpf_lsm_file_ioctl+0x9/0x20
[  690.218408][T24769]  ? __pfx_sock_ioctl+0x10/0x10
[  690.223255][T24769]  __se_sys_ioctl+0xfc/0x170
[  690.227841][T24769]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.233905][T24769]  do_syscall_64+0x174/0x580
[  690.238490][T24769]  ? trace_irq_disable+0x3b/0x140
[  690.243506][T24769]  ? clear_bhb_loop+0x40/0x90
[  690.248202][T24769]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.254086][T24769] RIP: 0033:0x7ff1f759e019
[  690.258493][T24769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  690.278090][T24769] RSP: 002b:00007ff1f83ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  690.286504][T24769] RAX: ffffffffffffffda RBX: 00007ff1f7825fa0 RCX: 00007ff1f759e019
[  690.294470][T24769] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000014
[  690.302441][T24769] RBP: 00007ff1f763500c R08: 0000000000000000 R09: 0000000000000000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  690.310832][T24769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  690.318791][T24769] R13: 00007ff1f7826038 R14: 00007ff1f7825fa0 R15: 00007ffc4e6d1788
[  690.326766][T24769]  </TASK>
[  690.329782][T24769] Modules linked in:
[  690.337696][T24769] ---[ end trace 0000000000000000 ]---
[  690.449175][T24769] RIP: 0010:klist_remove+0x156/0x340
[  690.523696][T24769] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 ad 12 6c f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 8e 12 6c f6 49 8b 44 24 58 48 89 44 24 08
[  690.558077][T24769] RSP: 0018:ffffc900001e7960 EFLAGS: 00010202
[  690.589205][T24769] RAX: 000000000000000b RBX: ffff88807a19be00 RCX: 0000000000000000
[  690.614176][T24769] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  690.642438][T24769] RBP: ffffc900001e7a60 R08: ffffffff903d71a3 R09: 1ffffffff207ae34
[  690.666743][T24769] R10: dffffc0000000000 R11: fffffbfff207ae35 R12: 0000000000000000
[  690.685631][T24769] R13: 1ffff1100b06018c R14: ffff888058300c60 R15: dffffc0000000000
[  690.705742][T24769] FS:  00007ff1f83ae6c0(0000) GS:ffff888124f4f000(0000) knlGS:0000000000000000
[  690.725092][T24769] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  690.739718][T24769] CR2: 00007f9392e59e9c CR3: 0000000046c6a000 CR4: 00000000003526f0
[  690.764211][T24769] Kernel panic - not syncing: Fatal exception
[  690.770591][T24769] Kernel Offset: disabled
[  690.774990][T24769] Rebooting in 86400 seconds..