last executing test programs:

3.851199465s ago: executing program 1 (id=3855):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r1, 0xc8036ab6d6cbef07, 0x70bd2c, 0x25dfdbfb}, 0xffffffffffffffb2}}, 0x4045080)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) (async)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="170928bd7000ffdbdf25010000000500070000000000080009000100000008000a0000000000060002000100000008001700", @ANYRES32=r5, @ANYBLOB="2fc161a35053a300a80ef8e7aa7ca3654ec7d30bdc0a2b92276f6ab9a431d21583e0709d031ce4abfd6eeeb8fc7a356823e64ec3350acb1f3e840fd76dc39b9e6642bcfa7d0c72da15c731d6caa742d806da2fe033be1ec80a556dba22be541d685533aa057b16d4e771c4f283c6359c7bf9e96af6fc755b20b0ec1ad8d55a28899478b4f39c46401b281184ccfe4b9edbbfa90e2210967bfbd2a8651cb6d0073fec18f9ef06269fef6e08fe31adccb79c125a79259233eb2312c04867be03351a0e26dd8d3f"], 0x3c}, 0x1, 0x620b}, 0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r6, &(0x7f0000000180)="a40141ad", 0x4, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x20000, @mcast2, 0x4}, 0x1c) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x440c1}, 0x0) (async)
ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f00000000c0))
recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)}, 0x40002000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r1, 0x400, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x20040090)

2.940537251s ago: executing program 1 (id=3879):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x3}, @NL80211_ATTR_AKM_SUITES={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}]]}, 0x48}}, 0x0)

2.784524093s ago: executing program 1 (id=3884):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=@can_delroute={0x40, 0x19, 0x20, 0x70bd26, 0x25dfdbfb, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x64}, @CGW_MOD_SET={0x15, 0x4, {{{0x2}, 0x0, 0x2, 0x0, 0x0, "db046e582dbc7453"}, 0x3}}, @CGW_FILTER={0xc, 0xb, {{0x3}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000040)=0x1)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r8, @ANYBLOB="b9b462bdbe649b14fdeef30e67f9044c905aa20f5420e12c2a0e23150e02201738064bc5694079f33b86bbbcd2c5934a0c0a207fd7c08f8e1669d4507103e46cfa813fa503ff0329237c9aceaf0c58e06b94d95e7410ecce70ee8751deefcfaf24f567ab872fc902dac248bf43bcaf261dbdeb73"], 0x38}}, 0x0) (fail_nth: 7)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='devices.list\x00', 0x0, 0x0)

2.630983673s ago: executing program 3 (id=3887):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0)
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="20020000", @ANYRES16=r1, @ANYBLOB="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"], 0x220}, 0x1, 0x0, 0x0, 0x40}, 0x4044085)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0))
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)
socket$inet(0x2, 0x2, 0xd)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030300400000fedbdf250c00000008000300", @ANYRES32=r2, @ANYBLOB="d2346fc13929de17d818b5883c811d021f1e52771311e4d250e492856a07da0c8ffbdb4687b050cb10e10c9541e028bba77d2ff0302ea490b5cd20bd04cf79d10e49209344ddf29c608926d010367b6d2b1d1c55acd7d469d16fafb74bf99671da5e6e7c58e18554b2e5fc49bd85c08746dab16cff40ea6e9d709d0567aee0bfb3b1bb22b9ac0e03f861cd7930ffe0f61db253e0e495c32acef3a7c13d17293462cbbe25812180c2ff1494132917b0c7effcf27a71f6449d15daab17c9d4b377afe98b69a785bf523d7d2def34c22dbd49b761abcfb45df28ec81cf88422"], 0x1c}, 0x1, 0x0, 0x0, 0x8050}, 0x4000)
r3 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, r2, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7ab}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x60}}, 0x40800)

1.917312123s ago: executing program 2 (id=3891):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32)
r2 = socket(0x400000000010, 0x3, 0x0) (rerun: 32)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r5)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x30, r6, 0x201, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x2841}, 0x4000) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x60, 0x2c, 0x300, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2c, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0xf}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0xd}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x26044028}, 0x0) (async)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_opts(r7, 0x0, 0x9, 0x0, &(0x7f00000000c0))
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x44}}, 0x0)

1.859562766s ago: executing program 1 (id=3892):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6=@empty, @in6=@dev, 0x0, 0x0, 0xfffd}, {@in6=@mcast2}, @in6=@local, {}, {}, {0x10001, 0x0, 0x7}}}, [@mark={0xc}]}, 0x104}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', <r2=>0x0})
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r2, 0x1000000}, 0x10)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
listen(r3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r6 = socket$alg(0x26, 0x5, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x27}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r9, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x84)
r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$sock_linger(r10, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x8000}, 0x8)
shutdown(r10, 0x1)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r11 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

1.76304266s ago: executing program 3 (id=3895):
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async)
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) (async)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x197, 0x7, 0x9}}}}]}, 0x44}}, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'})
sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2e800, 0x0)
close(r10)
socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r12 = accept4(r11, 0x0, 0x0, 0x800)
sendmmsg$alg(r12, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

1.737317119s ago: executing program 4 (id=3896):
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="180000001114000300000000fcdbdf2508004b0028000000530a1a85d47f8d30e36be0abb39ea6737aae28b49fbbfd0022cc03f4d855236be37db3552bb5364500ca8d6dbcfc8a50b04b14b7764b472644c7748c3fb21c994e2d5d3a45302020dc9789a0e1d01579279a9300eb7c5d381a972537ecf8860a49b1f0242d29484336b6ea1be459a2a646bb78d478d9cd32eb2462577fd1c59fe24c2b29bb72c04b520cd1e9e4973bc594de4bb95d8fc194eca46affc2bb730d1da67d18a3afaa20d45e"], 0x18}}, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000680)={0x3, 0x8}, 0x2)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001600010000000000000000000a0400000000000014000100ff010000000000000000000000000001150002", @ANYRESHEX=r3, @ANYBLOB="7556b5ccebd2607e22aa0d292d0068cd0b49dfc958bb384ac69637b46a15498cc2cf662ccba3401b111261033c7aabcc71fc9e03381f90a3f737758250a243b86f961ddaa8adb53b2007ca1403f9c9e125d06ac77346f492d415481d917809d7dce920b79606d57e4bd7864f483594e3be5eea6af94628a5a2ab76a294d94070cdc372837ceb87df9de3239f73e6b289360955f2c8028216895d5f7ea4c143a950d5fb152e8d8f88601346c6f127dec33a2498662f928675b792f8a97561e32d0bed565d"], 0x44}}, 0x0)
connect$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10)

1.527380085s ago: executing program 4 (id=3897):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000100)={'macvlan1\x00', 0x3ff})
write(0xffffffffffffffff, &(0x7f0000000040)="1c0000005e001f3814584707f9f4ffffff000000250000001ff80020", 0x1c)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r2 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r2, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x9, 0x0, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000180)="67014f00000000", 0x7}, {&(0x7f0000000280)="9e115a3e15e19fbe1365ffb332c99223a7dfe52c1f51218206f5abfd2a2ba30000", 0x21}], 0x2}, 0x20008b0d)

1.459821014s ago: executing program 3 (id=3898):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=@can_delroute={0x40, 0x19, 0x20, 0x70bd26, 0x25dfdbfb, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x64}, @CGW_MOD_SET={0x15, 0x4, {{{0x2}, 0x0, 0x2, 0x0, 0x0, "db046e582dbc7453"}, 0x3}}, @CGW_FILTER={0xc, 0xb, {{0x3}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000040)=0x1)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r8, @ANYBLOB="b9b462bdbe649b14fdeef30e67f9044c905aa20f5420e12c2a0e23150e02201738064bc5694079f33b86bbbcd2c5934a0c0a207fd7c08f8e1669d4507103e46cfa813fa503ff0329237c9aceaf0c58e06b94d95e7410ecce70ee8751deefcfaf24f567ab872fc902dac248bf43bcaf261dbdeb73"], 0x38}}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='devices.list\x00', 0x0, 0x0)

1.384001265s ago: executing program 0 (id=3899):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x0, 0x0, 0x168, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x108, 0x168, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x12}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x4, 0x0, 0x1, 0x1, 0x4], 0x1, 0x5}, {0x4, [0x5, 0x4, 0x2, 0x2, 0x1, 0x3], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x0, 0x2, 0x4, 0x5, 0x1], 0x1, 0x2}, {0x2, [0x0, 0x7, 0x0, 0x0, 0x2, 0x1]}}}}, {{@uncond, 0x0, 0x20, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x23}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xd, 0xf, [0x33, 0x3e, 0x25, 0x23, 0x25, 0x2b, 0xb, 0x21, 0x12, 0x15, 0x1c, 0x8, 0x16, 0x37, 0x3b, 0x3a], 0x1, 0x9044, 0xff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xfff7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x4c}}, 0x0)
setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f00000004c0)=0x4c0, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x24, 0x18, 0x1, 0x70bd2c, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x9}]}, 0x24}}, 0x20000080)
getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000540)=0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x2, 0x0)
write(r6, &(0x7f00000002c0)="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", 0xfc)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_BROADCAST={0xa}]}, 0x38}}, 0xc080)

1.360063231s ago: executing program 2 (id=3900):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYRESOCT=r1], 0xb)

1.263376329s ago: executing program 4 (id=3901):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcff000009"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000105000000030000000000000001000085000080000000000001"], 0x0, 0x42}, 0x20)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0}) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @parameter_prob={0xc, 0x0, 0x0, 0xf2, 0xb, 0x0, {0x5, 0x4, 0x0, 0x6, 0x100, 0x1065, 0xf30, 0x4, 0x62, 0x4, @multicast2, @multicast2}}}}}}, 0x0) (async)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0)
r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14, 0x80800)
sendto$packet(r2, &(0x7f00000003c0)="95b8bb8212c40d2e3863794f6c04a6a5e446c8b55ae5900190b1b866393422326af183942c2acf0448995893bf164b475ceeda42ab7b37a4ccd46a7e13798d720feb8acd65d31eba4dd0411a5509143e466c027b80e4cb9f02689966040000001ad98a5acf115ddae8421e874dc1b567e19c9074e24f419bba7fb4049a74a0c80eb1d1b6b547117e83e5f7f27f0000d52d8d7f0e504239f501b1d62ccf3080a7645cdfddc32ffb33155b59d75fd219731dcf12765f23ca3e07bb17d9a351f54ee6adc867f33464b26ad5d1f0dfd9ccdd517a3699e01c721f6d2e50ce5b24ca2caadfab907f899538e01058842ec70c2f244c6b5fe9", 0xffffffffffffffcd, 0x0, &(0x7f0000000280)={0x11, 0xf7, r3, 0x1, 0xfb, 0x6, @multicast}, 0x14) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
r6 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r6, &(0x7f0000000240)={0x11, 0x2, 0x0, 0x1, 0x10, 0x6, @local}, 0x14) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000240)=ANY=[], 0xfdef) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffdd7, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

1.263175931s ago: executing program 2 (id=3902):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000640)={0x5}, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000002c0)={0x3}, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000400)={0x4}, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711063000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000640)={0x5}, 0x1) (async)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000002c0)={0x3}, 0x1) (async)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000400)={0x4}, 0x1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711063000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async)

1.262606012s ago: executing program 3 (id=3903):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=@can_delroute={0x40, 0x19, 0x20, 0x70bd26, 0x25dfdbfb, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x64}, @CGW_MOD_SET={0x15, 0x4, {{{0x2}, 0x0, 0x2, 0x0, 0x0, "db046e582dbc7453"}, 0x3}}, @CGW_FILTER={0xc, 0xb, {{0x3}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000040)=0x1)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r8, @ANYBLOB="b9b462bdbe649b14fdeef30e67f9044c905aa20f5420e12c2a0e23150e02201738064bc5694079f33b86bbbcd2c5934a0c0a207fd7c08f8e1669d4507103e46cfa813fa503ff0329237c9aceaf0c58e06b94d95e7410ecce70ee8751deefcfaf24f567ab872fc902dac248bf43bcaf261dbdeb73"], 0x38}}, 0x0) (fail_nth: 8)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='devices.list\x00', 0x0, 0x0)

1.214398569s ago: executing program 2 (id=3904):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x6, 0xa, 0x4, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0xe) (async)
shutdown(r0, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r1, 0x8}, 0x8) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket(0x1d, 0xa, 0x80400000)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) (async)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000600)={'team0\x00', <r11=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0)

1.154567611s ago: executing program 0 (id=3905):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0x7ffffffe, 0x0, 0x1}, 0x48)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x4001, 0x3, 0x220, 0xb8, 0x700001b, 0x148, 0x0, 0x148, 0x188, 0x206, 0x240, 0x188, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x1, 0x0, 0x74}, 0x1ea, 0x70, 0xb8, 0x0, {0x390, 0x8f00}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x8, 0x9, 'snmp\x00', {0xc000}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x6, 0x4, 0xa, 0x0, 0x2], 0x2, 0x2}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x1], 0x5, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

1.064047284s ago: executing program 4 (id=3906):
r0 = socket$kcm(0x10, 0x7, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b55400040000ea0756a85d86dd", 0x12, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec6e0413a1f8480f0000005e14060200"/46, 0x2e}], 0x1}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r9 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x1, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x1}, @CTA_LABELS_MASK={0x14, 0x17, [0x7, 0x9, 0x1, 0x2]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xed85}, @CTA_TUPLE_MASTER={0x20, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x33}}, {0x8, 0x2, @broadcast}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r9, 0x4004f50d, &(0x7f0000000040)=0x1)

1.025616121s ago: executing program 0 (id=3907):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, 0x0, 0xb, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_NAME={0x6, 0x1, '[\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_NAME={0x7, 0x1, '(}\x00'}, @NFTA_COMPAT_NAME={0x8, 0x1, '\xf8-!\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004010}, 0x5041)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001600010000000000000000000a0400000000000014000100ff010000000000000000000000000001150002"], 0x44}}, 0x0)

978.988596ms ago: executing program 0 (id=3908):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005d000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @dev, @default, 0x0, [@bcast, @default, @bcast, @null, @default, @default]}, &(0x7f0000000080)=0x40, 0x800)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0))
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1c05}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x12)

855.657339ms ago: executing program 2 (id=3909):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}]]}, 0x40}}, 0x0)

397.416509ms ago: executing program 0 (id=3910):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001e000100d14a0000fcdbdf250700", @ANYRES32], 0x40}}, 0x0)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00', <r4=>0x0})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xf, 0x0, &(0x7f0000000080))
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x61efccca}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x7522c73692e294e8)
ioctl$SIOCRSSL2CALL(r1, 0x89e2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r7, 0x1, 0x70bd26, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x4005)

351.983769ms ago: executing program 3 (id=3911):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async)
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) (async)

336.679261ms ago: executing program 2 (id=3912):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8090)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
accept4(r5, 0x0, 0x0, 0x80000)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001000090400000000fbdbdf2500000000", @ANYRES32=r9, @ANYBLOB="000e03000000000024001280110001006272696467655f736c617665000000000c000580080022"], 0x44}}, 0x40c4)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'veth1\x00', <r11=>0x0})
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADDDEF(r12, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x94, r13, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x20044014)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

254.968711ms ago: executing program 1 (id=3913):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async, rerun: 64)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010000000000000000001c0000000c00070000"], 0x20}}, 0x0) (async, rerun: 64)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x5c83}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x3}}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}}, 0x48010) (async, rerun: 64)
r3 = socket(0x10, 0x3, 0x0) (rerun: 64)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, <r4=>0x0}, &(0x7f0000000bc0)=0xc)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r4}]}, 0x1c}}, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={<r5=>0x0}, &(0x7f00000001c0)=0xc) (async)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=<r6=>0x0)
sendmsg$netlink(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)={0x31c, 0x25, 0x10, 0x70bd2d, 0x25dfdbfc, "", [@typed={0xc, 0x15, 0x0, 0x0, @u64=0x9}, @generic="1c88b5763a0074ac9012522588dfcd57d73b2cec3e5a5a6f3e4bd2d483c13cfea0aa309c9f1d10ab576f8f2e8a5629c1f25a8c423ff9ee217be5c0f8a10b906e6fa6d8851841b79ac4b2a29b1a38337d", @generic="ea50f9339f55d443747e0cbf025a1bb762bee2cbd4c51714f5ec7fec7da38ea0b515c4c7eee7ebfc797c7cea02f5b3a7b7c500ddb2b903839693c7f195a5303c5dd926f341c9d6e2b5e7f113a4fbc273f17ba3c2d45fc18f09f301fc33fd28435005a825b88aae9609e5dd711dc88f1f12cb462f547082ca4cc3e7aff5ab29c8e6887311c76efbb4e01e6152e5ebac380d7fdf5e7b0bd82ff74e51503b0b6131fedc0bd29d51607593a869e2603ba5ac6f74be863809289463a2f38096a5848dec896a5615735744985dc17788255c43edd1804538e523af5aa9ef1ac70480d8c60e1c82b2", @typed={0x4, 0xfd}, @nested={0x6c, 0xf2, 0x0, 0x1, [@generic="39b8195ff2ea891173fac429d8224a148c15275325cbf2f54ffe40214d4b2c17917c562df84efe2d5a67d270714f9122b716d6666bd7b3af99aaebb01f996f4ddf800df6426d682cbbfc2ea33d84db22d184935b718131d66d970428f67a32221befb44413a6a910"]}, @nested={0xc9, 0x4b, 0x0, 0x1, [@typed={0x14, 0x12f, 0x0, 0x0, @ipv6=@local}, @generic="8226ce0b7537f7503bf9ba87ff08501472c5df27ddf2b5261ed2b80ce4a4888a5765001128558295811df84a99a3452a9228e1c6aad8192440f7ad9252cdda05f57cc762b2e2432959ee8cf439efd27272c49b8ad6f905de9fb5db4a171933f7e46978ec8acbd66dfa3e27aa70b84eab7c8a561c6b2d4fb2fd76d2d065deaffb3ec6b2c0d3ad54ab0e9df18fee1eb0f21ad49e7b9c649882a3", @nested={0x4, 0x10f}, @typed={0xa, 0x7b, 0x0, 0x0, @str='team0\x00'}, @typed={0x8, 0x2e, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @generic="08152564984faedc311ace561767d7baea6607bcd58c8f11d70619e11511e7f8d44dda7eae960fe86cc024cedee8f82273e7dcc22b116eff2f0fa8acfe11fa6f68f83a49b69960d8880ff8cd8b172c8f5fb73b65293a6507a8fdbfa79c173176b4ce5896032e1a3a60d3b75e76977e50f672ddf44bd3b7e16b7541e1ff01b215752171e0a64c24d037e47c2e06"]}, 0x31c}, {&(0x7f00000000c0)={0x9c, 0x37, 0x200, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x8c, 0x93, 0x0, 0x1, [@generic="e1c0f71cdfd70e75114d24b9c5febce96811f79f8f3497137b0a395d70e912d2e1fdf6441b7f5456ca2e4ad5c8e67a2ded22cd711c25506bae0e3b38f5f18e25bb35e04546ec7a3c0619c3c0ce2b8f3e484a33ed68a5f642ce3fc48a3938eea5149380ef8922cf777c2f10fb58810626045902625c141065ca30aba6", @nested={0x4, 0xa3}, @nested={0x4, 0x128}, @nested={0x4, 0x16}]}]}, 0x9c}, {&(0x7f0000000600)={0x2d4, 0x1c, 0x400, 0x70bd2d, 0x25dfdbfc, "", [@generic="68d88d02882a9a5c1bdb8e9ef6d6f16c74f7a808120b62cd1b30", @nested={0x8, 0xb2, 0x0, 0x1, [@nested={0x4, 0xca}]}, @nested={0x97, 0x54, 0x0, 0x1, [@typed={0x8, 0x12c, 0x0, 0x0, @u32=0x9}, @nested={0x4, 0x7f}, @nested={0x4, 0x83}, @generic="6e86e5ed7cfdf8fac00bd7bf9cac1f65966d89c213b44eb47145045a1d0b98c69608ba598bc68f125cbc746e325717175259ec01588a738fff3c93f459d1def79414f2c1599829b4d4523d9736761f83a910f0d1b2be9063bece4a865b60ae47ea5892e6a3ea498a7cd24e1a21d9837a76f32454837e243cba1e5c068a9cabb37fe2ad"]}, @nested={0xf1, 0xc3, 0x0, 0x1, [@generic="125c50ac949df6f7aad5b78b65b2724e6ca2ea0041856f08a309633cdcbf6ac5b33b085c4beb364af4e7ebdbddf0e352c9a5c2a6a43f3e3c68e4978f2c481da59752ae276da828a4d6c8296cadcdd802830898523728c438bde7c392ae08f1c99ca00134038b13629607b3033f939cbdf7636871b80d2ccd33a373c864a1705c41d3008802804be4fb008f47e65ce5943c9a5798d2792b08291a6885cad139c0e410dbee368f3e7d6b8a122f268d63a611bb1e882f79674d8a94e806760b0f1f2b1eca823b87b54f34db52f673d9733f3ba67aa40a91abf117f77786feb39867cd1f99dbd8af38072e5f67c6fe"]}, @nested={0x114, 0x12b, 0x0, 0x1, [@nested={0x4, 0x92}, @typed={0x7, 0xc8, 0x0, 0x0, @str='{#\x00'}, @typed={0xfd, 0x9b, 0x0, 0x0, @binary="1608ad6748f342ee8107bd1dee4a24290b15a6caa61293559825692b92c2ac8baae84c65ac31809f415d85ed67330e4504833ded73695a8d057d8ce4dd9ade5d9d71ede4a3d74f9b1fb1901b64f8bcddc2a181e954027baaac47a6a720c47e99b728e9f938336f04aaa40f87a46198abf1ffbafddcf1f98ec852dbbf125471aca5abc07b4d6bd3fe99a022060937a8f1c0b725447e5a53845903dd7aeab13c4639cea5f9b86fc06b74fdf1fd9c2917c543465e75ece0fab88ce1633653eff42f155095060e23903d1c076ef2f293aeab389424a63a86767f1857a47e657287e0a8f00ef8c262d2ead6b7e80f7c0ac485fb161b8f9d92319b12"}, @nested={0x4, 0x9e}]}]}, 0x2d4}, {&(0x7f0000001900)={0x12f4, 0x27, 0x8, 0x70bd2c, 0x25dfdbfd, "", [@typed={0x14, 0x136, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}}, @generic="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", @generic="c942ef615573bae895807c33f2941721f71151ef46b790c6af86fb7a44eee83dd2e59d55b870bab051cc48a18f1c7ac828f0797fc677a74e29c41cb38d92ba33ae0b5fcd1d7d1acd61e8c4d116ca9e2746eadec146ecccdbd6f53119c787aa512456b129db492b4bb72a6bf429dfed219b0703d38316ae4bfc2b3be6d0f983f2e92cfa4a122757a65e0b5980a7eab7120578cbd271cbfcf0118f8d", @nested={0x1ee, 0xa1, 0x0, 0x1, [@typed={0x8, 0xd9, 0x0, 0x0, @u32=0x8}, @generic="603791741ee5b79f5627eb85aec13550ac3f2799b6073e985901a79bbf00814f56b2bfdbd4bf2f680da00cb04eefd6bf66f3471a217af2fbc47e9364658d117f0e9a13cbd62b2ef433c25939e577b4d63b4143e70003ba979c03cdb61e0bcd2685f3f3e69a5d542a915a46864752aa4b996814ed408b6f33f6970dbda15bfd3a694853eefc8c4b57418d0f49f47ca3c4cf4eb8cca02bdc5e4f363aa5e0ca8b6260fc37a87ba9176c0b2da219a3d73110b07cc902908e5ebff8787a633988643d03145e45d9762799446ea0b69415f2266cd90874b1fbe1bd71b6da3a01e3cabee1a3aab2c5b185", @typed={0x8, 0x121, 0x0, 0x0, @uid=r4}, @typed={0x8, 0x24, 0x0, 0x0, @u32=0xffff8fa4}, @nested={0x4, 0xe5}, @nested={0x4, 0xe1}, @typed={0xc, 0x73, 0x0, 0x0, @u64=0xffffffffffff3dc5}, @generic="62220e92a348ac98724e034d82bd1fd2b9a1d24a74a72052bbed7afa46c2d9959357daeabfa5faa9d3d6853e8d0db1686a4c85b1323e0143592c45648e1e2cd712bb579e2cea55dbbe4ed174525cb0e03e7f5f7a9cafe5fb87b8690e0e9f62f9db247ce4c410cc30c9fc875c87f6992cf7209286a7c3ff13f08381a83a134b351c6a540adbd7e2c7aaa401c2e1c275b1f656d43e27ad7f86cb162050ff1aa971e85c420c7eb05498635a165d0633b0011b63e3186139a635289aa6aaef27850fc3cc51ffe3dd5388ead895", @typed={0xa, 0x92, 0x0, 0x0, @str='team0\x00'}]}, @typed={0x8, 0x1b, 0x0, 0x0, @pid=r5}, @nested={0x3c, 0x145, 0x0, 0x1, [@nested={0x4, 0x1d}, @generic="e7895131dc72aa6895ef6f5ac12e380c57f8bc2b78d748414b36f50772d785a9082ec94b4e4ba1a37bd66ab9e1a61f1a2d61cf30"]}]}, 0x12f4}, {&(0x7f0000002c00)={0x1200, 0x25, 0x300, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x1d4, 0xf4, 0x0, 0x1, [@typed={0x14, 0x5, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0xed}, @generic="8d9584801e3bc08f8e3bb22bdd69688e39fed186fa06a37821e6fb7b41a80587ec796bd4697d6cecad8623c9c4d88dabc8b235e60ed127a7fcf06ba9fb6028f01353d0c295b0d78085972b0472b4340c4967547fa9126eed47de0f1be109a14baefaf232be9fc0fd8475ea636c1c38761ff248445b2b84ed8bd483fb32aac148606f024544066e93229a376aa7b35bd0b55462abc673bd1522a64debbd0523e3dfe090bd55c2f306137864e9f8e555e769da69d1f38270f3d538bc82671c5e421781195cc34e56748fe49ecd37de05cf569bad842655a60e", @typed={0x8, 0x32, 0x0, 0x0, @u32=0x8}, @typed={0x4, 0xe5}, @typed={0xc4, 0x51, 0x0, 0x0, @binary="597fa686fa766a411408f41e2d6b000478eb603e6d0c35e2ebec936a5cc8e22ae9e3cd0eb36fb186c148f4576624ea4cfd469c9d6505c874a3204fc0e56a14538bb148d79153cfe2103ca1c666b432cceb35986d3ab29a61470dddfbc9897334f7e6da4bbf33bfed628781033e4cadca5f4f8a9519b51d04b826eb7ed00050d859987d6df5d22fdcb35a93befefcc12c3ec28b301c9bd102fdc1350750ff2de5a2061462dd1c0190f55d7dc12b223e9b63550c8b2323379a92d44dda6e537266"}, @nested={0x4, 0x39}, @typed={0xc, 0x52, 0x0, 0x0, @u64=0x4}]}, @nested={0x1014, 0xed, 0x0, 0x1, [@generic="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", @typed={0x8, 0xd1, 0x0, 0x0, @u32}, @typed={0x8, 0x1, 0x0, 0x0, @pid=r6}]}, @typed={0x8, 0xe9, 0x0, 0x0, @fd=r1}]}, 0x1200}, {&(0x7f0000000240)={0x14, 0x21, 0x800, 0x70bd28, 0x25dfdbfe, "", [@typed={0x4, 0x1f}]}, 0x14}], 0x6, 0x0, 0x0, 0x2004c001}, 0x48080)

254.553873ms ago: executing program 0 (id=3914):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)={0x24, 0x12, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) (async)
mmap(&(0x7f0000897000/0x2000)=nil, 0x2000, 0x200000e, 0x4000010, r0, 0x0)

209.931732ms ago: executing program 4 (id=3915):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = accept4$rose(r0, &(0x7f0000000000)=@full={0xb, @remote, @default, 0x0, [@rose, @bcast, @netrom, @netrom, @rose, @netrom]}, &(0x7f0000000040)=0x40, 0x80000)
bind$rose(r1, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x3, [@bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40)
ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000000c0)={'bond_slave_1\x00', {0x2, 0x4e21, @loopback}})
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x10)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000140)=0xd08, 0x4) (async)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000180)={0x10000, 0x42, 0x9e4, 0x7}, 0x10) (async)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x110, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0xde83, 0x7ff}) (async)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00'}, 0x18) (async)
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000002c0)={{r2}, 0xb4, 0x8, 0x8066})
ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xa9d, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x7, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000380)={0x8, 0x8000, 0xba3, 0x9, <r4=>0x0}, &(0x7f00000003c0)=0x10)
setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000400)={r4, 0x3, 0x7, 0xfffffffb, 0x1000, 0x7}, 0x14) (async)
r5 = socket(0x29, 0x1, 0x2)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000440)) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e22, 0x2, @remote, 0x4}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}, @in6={0xa, 0x4e21, 0xc80, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfb}, @in6={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x2}, 0xb3f3}], 0x74) (async)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000500)=0x7, 0x4) (async)
r6 = socket$unix(0x1, 0x5, 0x0)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r5)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000000580)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e22, 0x400, @local, 0x4}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e22, @loopback}], 0x4c) (async)
r8 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r8, 0x8002f515, &(0x7f0000000600)) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, &(0x7f0000000640)=0x58a)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000780)={'ip_vti0\x00', &(0x7f00000006c0)={'ip_vti0\x00', <r10=>0x0, 0x8000, 0x40, 0x8, 0x0, {{0x26, 0x4, 0x1, 0x18, 0x98, 0x66, 0x0, 0x1, 0x2f, 0x0, @multicast1, @remote, {[@timestamp={0x44, 0xc, 0xf4, 0x0, 0x1, [0x16, 0x401]}, @cipso={0x86, 0x57, 0x3, [{0x5, 0x10, "deab8117809ed703dbef2bd12bd8"}, {0x1, 0x11, "059667208053ac00fb9d2923cbf9e1"}, {0x6, 0x11, "b52e2622f109ee94ce52f03983672f"}, {0x7, 0x9, "a2d82fabf5278e"}, {0x7, 0x8, "df08191373b4"}, {0x7, 0xe, "711cd5bf958e5fb2ab22b9d7"}]}, @generic={0x94, 0x2}, @timestamp_prespec={0x44, 0x1c, 0x4c, 0x3, 0x8, [{@broadcast, 0x2}, {@loopback, 0xfffffffe}, {@broadcast, 0x1ff}]}]}}}}})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000001980)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001940)={&(0x7f00000007c0)={0x1168, r7, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x5}, @ETHTOOL_A_LINKMODES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5}, @ETHTOOL_A_LINKMODES_OURS={0x1034, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-]-[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe00}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_OURS={0xc4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x70, 0x5, "700efbc181d0cc8769b066ac5ff2cf6dc5ecf85fed7ea5d4e3097a71b66316655a8dfc186a7316ba841f060d3ee912a67369f4f2548c2509625d56f0c0734b7e578061424e16d8de4def4a7774a414e871d2ed12077297b82b43b48f8f5fab9448a040764261a0e5fde75c82"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4c, 0x5, "4cbfa4de658aec0e72f3a2bb793d900a5680fc6878d73e720c442b2d4fc40c483fde868dbf541241b7cbb33385252a78ac3e23fe151a15c09b171416e2ddf304c3863fde04f72bf0"}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x8}]}, 0x1168}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) (async)
sendmsg$nl_route(r5, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)=@ipmr_getroute={0x1c, 0x1a, 0x800, 0x70bd25, 0x25dfdbfd, {0x80, 0x10, 0x20, 0x5e, 0xfd, 0x0, 0xfd, 0x2, 0x3900}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004801}, 0x20000855) (async)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r9, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x34, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40001)

102.576086ms ago: executing program 3 (id=3916):
r0 = socket$inet(0xa, 0x802, 0x1)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='p', 0x1}], 0x1}, 0x0)
listen(r0, 0x8)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={<r2=>0x0}, &(0x7f0000000180)=0xc)
syz_open_procfs$namespace(r2, &(0x7f00000001c0)='ns/pid_for_children\x00')
r3 = accept4(r0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x2e, &(0x7f00000004c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x7, 0x0, @void}}}}}}}, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, 0x0, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000540)={&(0x7f0000000280)=@qipcrtr, 0x80, &(0x7f0000000500)=[{&(0x7f0000000300)=""/166, 0xa6}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f00000006c0)=""/147, 0x93}, {&(0x7f0000000200)=""/44, 0x2c}], 0x4}, 0x40000041)
r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r6, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={'rose', 0x0}, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]})
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000))
syz_genetlink_get_family_id$nl80211(&(0x7f0000003340), r6)

1.667553ms ago: executing program 4 (id=3917):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r2, &(0x7f0000000740)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x11, @loopback, 0x8000002}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000001200)="01", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001400)="cf", 0x1}], 0x1}}], 0x2, 0x24000005)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x523, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0)

0s ago: executing program 1 (id=3918):
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={<r0=>0x0, 0x5d, "15b42ba220dec0b01f6616f8fd0c8713bc420c531c4ea36778425233cdc171dc3877da7ae592c25971551edd69601549f234e6345448351813e07677aa7401e5fb0c0b4e614fa20354d36cdcbb0076fed190c1f7410afdb1fb7665953e"}, &(0x7f0000000080)=0x65)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={r0, 0x5}, 0x8) (async)
r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000100)='io.pressure\x00', 0x2, 0x0)
ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000140))
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, 0x2, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf9}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x80840}, 0xd5) (async)
r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x0, 0x2711, @local}, 0x10, 0x800)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000340)=0x8, 0x8)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'veth0_to_bridge\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0x3, 0x4) (async)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_udp(0x2, 0x2, 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
r6 = accept(r5, &(0x7f0000000500)=@sco={0x1f, @none}, &(0x7f0000000580)=0x80)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r6, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x81) (async)
r7 = socket(0x2, 0x1, 0x5)
pipe(&(0x7f00000006c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r9, r3, 0x25, 0x4, @void}, 0x10)
ioctl$int_in(r8, 0x5421, &(0x7f0000000740)=0x10) (async)
ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000780)={'vlan1\x00', 0x600})
socket$vsock_stream(0x28, 0x1, 0x0) (async)
setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f00000007c0)=@bpq0, 0x10) (async)
ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000800)={'veth0_vlan\x00', 0x400}) (async)
r10 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000840)=0x20000, 0x4)
socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000880), &(0x7f00000008c0)=0x4)
getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000940)={{{@in6=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000a40)=0xe8)
sendmsg$nl_xfrm(r7, &(0x7f0000000d80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000a80)=@migrate={0x290, 0x21, 0x2, 0x70bd2c, 0x25dfdbfc, {{@in=@multicast1, @in=@empty, 0x4e21, 0x121, 0x4e24, 0x800, 0x2, 0x20, 0x0, 0x2e, r3}, 0x6e6bb9, 0x1}, [@replay_thresh={0x8, 0xb, 0x3}, @extra_flags={0x8, 0x18, 0x138}, @offload={0xc, 0x1c, {0x0, 0x3}}, @sa={0xe4, 0x6, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x4e22, 0x6, 0x4e21, 0x5, 0xa, 0x10, 0x80, 0x1, r3, r11}, {@in=@loopback, 0x4d2, 0xff}, @in6=@ipv4={'\x00', '\xff\xff', @local}, {0x7, 0x4, 0x2b, 0x9, 0x200, 0x9, 0x1000, 0x5}, {0x3ff, 0x80, 0x6, 0x282a}, {0x5, 0x3, 0x3879}, 0x70bd26, 0x3503, 0xa, 0x1, 0x5, 0x8}}, @algo_auth_trunc={0x13e, 0x14, {{'sha256-asm\x00'}, 0x790, 0xa0, "b5b76600e1eb84de8d1b40f7fa4611481a72aab0cd8b3e9d0e7cc70851b14c6dcf0e08f39708b2ada79d0a54645c16700be6f6dc12b196cfab99be4a483b2749fa86d18fbf3a11ac32018b2c2502092e5f2a8aa79de2d99ed9886b6d39fdb959bbbbab17cf8de738b5fa4c051db159f5bbef1fceb11ab0f67669c89fc99af4311342fa9f5627e868322aab2751cb80b35f12968ea920b0e07933a35c837e648ea98eba4272aa3a829377f84ae1b54dce52ec41c2c6a5e9cc438e2b1f663833c22653003b3f64dc1fb46f180f8a5feb3ec55fb18c5731585f6af0deaa82f1c4ded3cef5d8ca54d7ba47d50082cef3f84738a8"}}]}, 0x290}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)

kernel console output (not intermixed with test programs):

an invalid length.
[  341.326977][T15620] bond9: entered promiscuous mode
[  341.332424][T15620] 8021q: adding VLAN 0 to HW filter on device bond9
[  341.349491][T15620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2693'.
[  341.359117][T15620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2693'.
[  341.390867][T15626] veth15: entered promiscuous mode
[  341.431738][T15624] bond9: (slave bridge4): making interface the new active one
[  341.440347][T15624] bridge4: entered promiscuous mode
[  341.517932][T15624] bond9: (slave bridge4): Enslaving as an active interface with an up link
[  341.539737][T15631] syzkaller1: entered promiscuous mode
[  341.545240][T15631] syzkaller1: entered allmulticast mode
[  341.579705][T15634] FAULT_INJECTION: forcing a failure.
[  341.579705][T15634] name failslab, interval 1, probability 0, space 0, times 1
[  341.635847][T15634] CPU: 0 UID: 0 PID: 15634 Comm: syz.0.2697 Not tainted syzkaller #0 PREEMPT(full) 
[  341.635871][T15634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  341.635880][T15634] Call Trace:
[  341.635887][T15634]  <TASK>
[  341.635894][T15634]  dump_stack_lvl+0xe8/0x150
[  341.635917][T15634]  should_fail_ex+0x412/0x560
[  341.635953][T15634]  should_failslab+0xa8/0x100
[  341.635972][T15634]  kmem_cache_alloc_node_noprof+0x8b/0x6f0
[  341.635993][T15634]  ? __alloc_skb+0x193/0x390
[  341.636009][T15634]  ? __alloc_skb+0x1d7/0x390
[  341.636023][T15634]  ? __local_bh_enable_ip+0xd0/0x130
[  341.636037][T15634]  ? __alloc_skb+0x193/0x390
[  341.636053][T15634]  __alloc_skb+0x1d7/0x390
[  341.636073][T15634]  netlink_sendmsg+0x5d4/0xb40
[  341.636098][T15634]  ? __pfx_netlink_sendmsg+0x10/0x10
[  341.636116][T15634]  ? aa_sock_msg_perm+0xf1/0x1b0
[  341.636135][T15634]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  341.636152][T15634]  ? __pfx_netlink_sendmsg+0x10/0x10
[  341.636167][T15634]  ____sys_sendmsg+0xa68/0xad0
[  341.636185][T15634]  ? __might_fault+0xaf/0x130
[  341.636211][T15634]  ? __pfx_____sys_sendmsg+0x10/0x10
[  341.636237][T15634]  ? import_iovec+0x73/0xa0
[  341.636261][T15634]  ___sys_sendmsg+0x2a5/0x360
[  341.636277][T15634]  ? __lock_acquire+0x6b5/0x2cf0
[  341.636300][T15634]  ? __pfx____sys_sendmsg+0x10/0x10
[  341.636349][T15634]  ? __fget_files+0x2a/0x420
[  341.636363][T15634]  ? __fget_files+0x3a0/0x420
[  341.636387][T15634]  __x64_sys_sendmsg+0x1bd/0x2a0
[  341.636407][T15634]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  341.636434][T15634]  ? __pfx_ksys_write+0x10/0x10
[  341.636465][T15634]  do_syscall_64+0xe2/0xf80
[  341.636480][T15634]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  341.636494][T15634]  ? trace_irq_disable+0x37/0x100
[  341.636508][T15634]  ? clear_bhb_loop+0x60/0xb0
[  341.636526][T15634]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  341.636539][T15634] RIP: 0033:0x7fd9e979aeb9
[  341.636554][T15634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  341.636567][T15634] RSP: 002b:00007fd9ea674028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  341.636584][T15634] RAX: ffffffffffffffda RBX: 00007fd9e9a15fa0 RCX: 00007fd9e979aeb9
[  341.636595][T15634] RDX: 0000000004000084 RSI: 0000200000000940 RDI: 0000000000000003
[  341.636604][T15634] RBP: 00007fd9ea674090 R08: 0000000000000000 R09: 0000000000000000
[  341.636613][T15634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  341.636622][T15634] R13: 00007fd9e9a16038 R14: 00007fd9e9a15fa0 R15: 00007ffed6142bd8
[  341.636648][T15634]  </TASK>
[  342.016274][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  342.024402][    C0] lec:lec_tx_timeout: lec0
[  342.034148][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  342.409806][T15677] : entered promiscuous mode
[  342.494049][T15682] lo: Caught tx_queue_len zero misconfig
[  342.550595][T15680] ieee802154 phy0 wpan0: encryption failed: -22
[  342.597633][T15690] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  342.660910][T15691] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  342.668226][T15691] IPv6: NLM_F_CREATE should be set when creating new route
[  342.949382][T15712] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  343.030045][T15721] netlink: 'syz.3.2721': attribute type 1 has an invalid length.
[  343.039162][T15722] netlink: 'syz.3.2721': attribute type 1 has an invalid length.
[  343.511160][T15752] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  343.660677][T15756] syzkaller0: entered promiscuous mode
[  343.665380][T15765] netlink: 'syz.1.2736': attribute type 1 has an invalid length.
[  343.677845][T15756] syzkaller0: entered allmulticast mode
[  344.015031][T15786] syzkaller0: entered promiscuous mode
[  344.037405][T15786] syzkaller0: entered allmulticast mode
[  344.103453][T15791] veth17: entered promiscuous mode
[  344.158836][T15797] veth0_vlan: left promiscuous mode
[  344.164121][T15797] veth0_vlan: entered promiscuous mode
[  344.185289][T15797] veth0_vlan: entered allmulticast mode
[  344.206541][T15790] __nla_validate_parse: 6 callbacks suppressed
[  344.206561][T15790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2746'.
[  344.259552][T15793] syzkaller0: entered promiscuous mode
[  344.265389][T15793] syzkaller0: entered allmulticast mode
[  344.499873][T15818] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2751'.
[  344.619765][T15828] netlink: 'syz.4.2753': attribute type 10 has an invalid length.
[  344.659456][T15828] veth0_macvtap: left promiscuous mode
[  344.722628][T15828] veth0: entered promiscuous mode
[  344.735599][T15828] netlink: 'syz.4.2753': attribute type 10 has an invalid length.
[  344.761195][T15828] veth0: left promiscuous mode
[  344.887030][T15849] Cannot find add_set index 65532 as target
[  345.093563][T15846] veth17: entered promiscuous mode
[  345.228333][T15864] unsupported nla_type 33542
[  345.338085][T15877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2762'.
[  345.361919][T15871] syzkaller0: entered promiscuous mode
[  345.372866][T15871] syzkaller0: entered allmulticast mode
[  345.489486][T15884] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2768'.
[  345.640450][T15887] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2769'.
[  345.644419][T15890] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2770'.
[  345.842638][T15902] tunl0: entered promiscuous mode
[  345.872172][T15902] netlink: 'syz.4.2774': attribute type 3 has an invalid length.
[  345.901353][T15902] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2774'.
[  346.136536][T15920] netlink: 'syz.1.2777': attribute type 7 has an invalid length.
[  346.167850][T15920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2777'.
[  346.339134][T15932] netlink: 'syz.0.2780': attribute type 1 has an invalid length.
[  346.346987][T15932] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2780'.
[  346.356380][T15932] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2780'.
[  346.365317][T15932] netlink: 'syz.0.2780': attribute type 1 has an invalid length.
[  346.374741][T15932] netlink: 'syz.0.2780': attribute type 8 has an invalid length.
[  347.016880][T15973] netlink: 'syz.4.2794': attribute type 23 has an invalid length.
[  347.046239][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  347.054336][    C0] lec:lec_tx_timeout: lec0
[  347.059524][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  347.384765][T15993] netlink: 'syz.4.2801': attribute type 9 has an invalid length.
[  347.482667][T15999] netlink: 'syz.4.2801': attribute type 3 has an invalid length.
[  348.089148][T16034] tipc: Started in network mode
[  348.114700][T16034] tipc: Node identity ac14140f, cluster identity 4711
[  348.137419][T16034] tipc: New replicast peer: 255.255.255.255
[  348.144125][T16034] tipc: Enabled bearer <udp:syz2>, priority 10
[  348.144611][T16039] netlink: 'syz.2.2810': attribute type 10 has an invalid length.
[  348.292883][T16041] can: request_module (can-proto-3) failed.
[  348.552288][T16058] bond10 (unregistering): Released all slaves
[  349.050771][T16095] 8021q: VLANs not supported on pim6reg
[  349.255845][  T936] tipc: Node number set to 2886997007
[  349.594128][T16146] batadv1: entered allmulticast mode
[  349.676725][T16152] __nla_validate_parse: 11 callbacks suppressed
[  349.676744][T16152] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2842'.
[  349.812354][T16155] vcan1: entered promiscuous mode
[  349.825471][T16155] vcan1: entered allmulticast mode
[  349.991166][T16167] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  349.998876][T16167] syzkaller0: entered promiscuous mode
[  350.004619][T16167] syzkaller0: entered allmulticast mode
[  350.029931][T16170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2849'.
[  350.040091][T16170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2849'.
[  350.079960][T16167] tipc: Resetting bearer <eth:syzkaller0>
[  350.118396][T16166] tipc: Resetting bearer <eth:syzkaller0>
[  350.166985][T16166] tipc: Disabling bearer <eth:syzkaller0>
[  350.179703][T16175] validate_nla: 3 callbacks suppressed
[  350.179720][T16175] netlink: 'syz.0.2851': attribute type 2 has an invalid length.
[  350.198247][T16175] netlink: 'syz.0.2851': attribute type 4 has an invalid length.
[  350.560266][T16198] netlink: 'syz.0.2859': attribute type 2 has an invalid length.
[  350.591993][T16198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2859'.
[  350.635863][T16198] netlink: 'syz.0.2859': attribute type 2 has an invalid length.
[  350.645808][T16198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2859'.
[  350.673189][T16203] veth0: entered promiscuous mode
[  350.683852][T16203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2862'.
[  350.978619][T16221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2867'.
[  351.010963][T16223] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2866'.
[  351.042302][T16223] netlink: ct family unspecified
[  351.193066][T16237] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2870'.
[  351.204417][T16237] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.2870'.
[  351.432859][T16251] netlink: 'syz.3.2877': attribute type 1 has an invalid length.
[  351.557003][ T5824] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  351.568013][ T5824] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  351.588075][ T5824] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  351.602950][ T5824] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  351.611324][ T5824] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  351.617665][T16256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  351.797331][T16256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  351.829838][T16262] syzkaller0: entered promiscuous mode
[  351.835362][T16262] syzkaller0: entered allmulticast mode
[  351.933243][T16256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  352.066677][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  352.074758][    C0] lec:lec_tx_timeout: lec0
[  352.080525][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  352.600372][T16253] chnl_net:caif_netlink_parms(): no params data found
[  352.676066][T16310] lec:lec_atm_send: lec0: Unknown message type 1029
[  352.711519][T16285] lec:lec_atm_close: lec0: Shut down!
[  352.719770][T16314] bridge0: entered allmulticast mode
[  352.748105][T16316] vcan0: entered promiscuous mode
[  352.773539][T16316] vcan0: entered allmulticast mode
[  352.891654][T16253] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.899017][T16253] bridge0: port 1(bridge_slave_0) entered disabled state
[  352.906388][T16253] bridge_slave_0: entered allmulticast mode
[  352.914201][T16253] bridge_slave_0: entered promiscuous mode
[  352.925260][T16253] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.933192][T16253] bridge0: port 2(bridge_slave_1) entered disabled state
[  352.940669][T16253] bridge_slave_1: entered allmulticast mode
[  352.948774][T16253] bridge_slave_1: entered promiscuous mode
[  352.986127][T16253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  352.999185][T16253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  353.070972][T16325] openvswitch: netlink: Missing valid actions attribute.
[  353.079031][T16325] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  353.086798][T16253] team0: Port device team_slave_0 added
[  353.096593][T16253] team0: Port device team_slave_1 added
[  353.106731][ T5834] Bluetooth: hci4: command 0x0405 tx timeout
[  353.194853][T16253] batman_adv: batadv0: Adding interface: batadv_slave_0
[  353.209119][T16253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  353.235497][T16253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  353.251710][T16253] batman_adv: batadv0: Adding interface: batadv_slave_1
[  353.267692][T16253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  353.324192][T16253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  353.471344][T16253] hsr_slave_0: entered promiscuous mode
[  353.487376][T16253] hsr_slave_1: entered promiscuous mode
[  353.493885][T16253] debugfs: 'hsr0' already exists in 'hsr'
[  353.502616][T16253] Cannot create hsr debugfs directory
[  353.746135][ T5831] Bluetooth: hci5: command tx timeout
[  353.874242][T16366] netlink: 'syz.4.2906': attribute type 1 has an invalid length.
[  353.882774][T16366] netlink: 'syz.4.2906': attribute type 1 has an invalid length.
[  353.951893][T16253] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  353.976883][T16370] netlink: 'syz.2.2909': attribute type 1 has an invalid length.
[  354.002211][T16370] 8021q: adding VLAN 0 to HW filter on device bond13
[  354.015080][T16370] openvswitch: netlink: IP tunnel TTL not specified.
[  354.046676][T16253] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  354.173657][T16253] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  354.270288][T16388] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[  354.442932][T16253] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  354.461353][T16253] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  354.487124][T16253] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  354.503650][T16253] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  354.678081][T16253] 8021q: adding VLAN 0 to HW filter on device bond0
[  354.754962][T16416] __nla_validate_parse: 16 callbacks suppressed
[  354.754981][T16416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2920'.
[  354.774449][T16253] 8021q: adding VLAN 0 to HW filter on device team0
[  354.811188][T16421] ip6t_srh: unknown srh match flags  4000
[  354.821585][T15270] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.828727][T15270] bridge0: port 1(bridge_slave_0) entered forwarding state
[  354.852652][T15270] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.859947][T15270] bridge0: port 2(bridge_slave_1) entered forwarding state
[  354.995421][T16431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2925'.
[  355.004875][T16434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2923'.
[  355.107944][T16431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2925'.
[  355.142188][T16436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2925'.
[  355.162629][T16431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2925'.
[  355.174479][T16443] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2926'.
[  355.351245][T16454] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  355.500127][T16468] netlink: 'syz.3.2931': attribute type 1 has an invalid length.
[  355.522126][T16253] 8021q: adding VLAN 0 to HW filter on device batadv0
[  355.531980][T16466] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2932'.
[  355.619352][T16253] veth0_vlan: entered promiscuous mode
[  355.632947][T16464] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2932'.
[  355.668302][T16253] veth1_vlan: entered promiscuous mode
[  355.713588][T16253] veth0_macvtap: entered promiscuous mode
[  355.726687][T16253] veth1_macvtap: entered promiscuous mode
[  355.751265][T16464] nbd: device at index 64 is going down
[  355.782887][T16253] batman_adv: batadv0: Interface activated: batadv_slave_0
[  355.787101][T16471] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2932'.
[  355.819306][T16471] nbd: device at index 64 is going down
[  355.824538][T16253] batman_adv: batadv0: Interface activated: batadv_slave_1
[  355.837606][ T5831] Bluetooth: hci5: command tx timeout
[  355.899122][T15525] udevd[15525]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  355.930840][T15525] udevd[15525]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  355.945631][T15270] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  355.969371][T15270] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  356.019248][T15270] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  356.048148][T15270] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  356.082730][T16486] xt_l2tp: v2 doesn't support IP mode
[  356.322438][T15272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  356.343550][T15272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  356.429592][ T7209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  356.438652][ T7209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  356.666984][T16513] sctp: [Deprecated]: syz.3.2943 (pid 16513) Use of int in max_burst socket option deprecated.
[  356.666984][T16513] Use struct sctp_assoc_value instead
[  356.947594][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  356.959436][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  356.970518][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  356.979300][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  356.989123][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  357.381692][T16544] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  357.434988][T16544] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  357.488380][T15272] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  357.518448][T15272] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.547310][T15272] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  357.560186][T16554] xt_addrtype: ipv6 does not support BROADCAST matching
[  357.673116][T16558] netlink: 'syz.0.2957': attribute type 1 has an invalid length.
[  357.767343][T16559] bond10: (slave vxcan2): The slave device specified does not support setting the MAC address
[  357.782121][T16559] bond10: (slave vxcan2): Error -95 calling set_mac_address
[  357.840831][T16561] bond10: (slave vxcan2): The slave device specified does not support setting the MAC address
[  357.860013][T16561] bond10: (slave vxcan2): Error -95 calling set_mac_address
[  357.878579][T16573] netlink: 'syz.3.2960': attribute type 2 has an invalid length.
[  357.902347][T15272] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  357.912241][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5200 ms
[  357.912283][    C0] lec:lec_tx_timeout: lec0
[  357.917987][ T5831] Bluetooth: hci5: command tx timeout
[  357.921636][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  357.941583][T15272] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.960880][T15272] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  358.062795][T15272] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  358.077656][T15272] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.088573][T15272] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  358.260630][T15272] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  358.271309][T15272] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.282612][T15272] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  358.311198][T16594] SET target dimension over the limit!
[  358.510548][T16607] netlink: 'syz.3.2970': attribute type 1 has an invalid length.
[  358.512778][T16528] chnl_net:caif_netlink_parms(): no params data found
[  358.577903][T16607] 8021q: adding VLAN 0 to HW filter on device bond13
[  358.672430][T16613] atomic_op ffff88803297e998 conn xmit_atomic 0000000000000000
[  358.837640][T15272] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  358.855576][T15272] bridge0: port 5(wlan0) entered disabled state
[  358.896980][T15272] dummy0: left allmulticast mode
[  358.912925][T15272] bridge0: port 4(dummy0) entered disabled state
[  358.923529][T15272] batadv1: left allmulticast mode
[  358.929403][T15272] batadv1: left promiscuous mode
[  358.934610][T15272] bridge0: port 3(batadv1) entered disabled state
[  358.943415][T15272] bridge_slave_1: left promiscuous mode
[  358.950216][T15272] bridge0: port 2(bridge_slave_1) entered disabled state
[  358.961186][T15272] bridge_slave_0: left allmulticast mode
[  358.967179][T15272] bridge_slave_0: left promiscuous mode
[  358.972857][T15272] bridge0: port 1(bridge_slave_0) entered disabled state
[  359.025888][ T5831] Bluetooth: hci2: command tx timeout
[  359.444634][T15272] bond6 (unregistering): (slave geneve2): Releasing active interface
[  359.783809][T16667] __nla_validate_parse: 6 callbacks suppressed
[  359.783826][T16667] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2987'.
[  359.894383][T15272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  359.913236][T15272] bond0 (unregistering): (slave ������): Releasing backup interface
[  359.925636][T15272] bond0 (unregistering): Released all slaves
[  359.997663][ T5831] Bluetooth: hci5: command tx timeout
[  360.054731][T15272] bond1 (unregistering): (slave veth3): Releasing active interface
[  360.064380][T15272] bond1 (unregistering): Released all slaves
[  360.077305][T15272] bond2 (unregistering): Released all slaves
[  360.187563][T15272] bond3 (unregistering): (slave veth5): Releasing active interface
[  360.197813][T15272] bond3 (unregistering): Released all slaves
[  360.210198][T15272] bond4 (unregistering): Released all slaves
[  360.224178][T15272] bond5 (unregistering): Released all slaves
[  360.328812][T15272] bond6 (unregistering): Released all slaves
[  360.341973][T15272] bond7 (unregistering): (slave veth7): Releasing active interface
[  360.351607][T15272] bond7 (unregistering): Released all slaves
[  360.456530][T15272] bond8 (unregistering): Released all slaves
[  360.471596][T15272] bond9 (unregistering): (slave bond10): Releasing backup interface
[  360.480300][T15272] bond9 (unregistering): Released all slaves
[  360.584635][T15272] bond10 (unregistering): Released all slaves
[  360.597246][T15272] bond11 (unregistering): Released all slaves
[  360.611797][T15272] bond12 (unregistering): Released all slaves
[  360.720474][T15272] bond13 (unregistering): Released all slaves
[  360.732319][T16528] bridge0: port 1(bridge_slave_0) entered blocking state
[  360.739650][T16528] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.746961][T16528] bridge_slave_0: entered allmulticast mode
[  360.753952][T16528] bridge_slave_0: entered promiscuous mode
[  360.818612][T16528] bridge0: port 2(bridge_slave_1) entered blocking state
[  360.839500][T16528] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.851307][T16528] bridge_slave_1: entered allmulticast mode
[  360.890279][T16528] bridge_slave_1: entered promiscuous mode
[  360.952932][T15272] �9: left promiscuous mode
[  360.994297][T16674] nbd1: detected capacity change from 0 to 127
[  361.019781][ T5831] block nbd1: Receive control failed (result -104)
[  361.080836][T16528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  361.107332][ T5831] Bluetooth: hci2: command tx timeout
[  361.180224][T15272] tipc: Disabling bearer <udp:syz2>
[  361.196051][T15272] tipc: Left network mode
[  361.209142][T16528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  361.313214][T16528] team0: Port device team_slave_0 added
[  361.339574][T16691] openvswitch: netlink: Key 32 has unexpected len 0 expected 2
[  361.353819][T16528] team0: Port device team_slave_1 added
[  361.453259][T16528] batman_adv: batadv0: Adding interface: batadv_slave_0
[  361.497347][T16528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  361.558125][T16528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  361.571886][T16705] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2997'.
[  361.592793][T16709] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2997'.
[  361.685401][T16702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2995'.
[  361.751064][T16528] batman_adv: batadv0: Adding interface: batadv_slave_1
[  361.772326][T16528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  361.803676][T16528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  361.840960][T16719] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3000'.
[  362.023978][T16732] netlink: 'syz.3.3002': attribute type 21 has an invalid length.
[  362.044267][T16732] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3002'.
[  362.168182][T16528] hsr_slave_0: entered promiscuous mode
[  362.183427][T16528] hsr_slave_1: entered promiscuous mode
[  362.190418][T16528] debugfs: 'hsr0' already exists in 'hsr'
[  362.196369][T16528] Cannot create hsr debugfs directory
[  362.309180][T16748] x_tables: duplicate underflow at hook 1
[  362.317867][T16750] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3006'.
[  362.328763][T16750] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3006'.
[  362.372493][T16754] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  362.452707][T16750] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3006'.
[  362.517527][T16750] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3006'.
[  362.679780][T15272] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  362.698238][T15272] batman_adv: batadv0: Removing interface: batadv_slave_0
[  362.734489][T15272] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  362.763295][T15272] batman_adv: batadv0: Removing interface: batadv_slave_1
[  362.771631][T16768] FAULT_INJECTION: forcing a failure.
[  362.771631][T16768] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  362.855783][T16768] CPU: 1 UID: 0 PID: 16768 Comm: syz.4.3011 Not tainted syzkaller #0 PREEMPT(full) 
[  362.855834][T16768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  362.855856][T16768] Call Trace:
[  362.855864][T16768]  <TASK>
[  362.855872][T16768]  dump_stack_lvl+0xe8/0x150
[  362.855898][T16768]  should_fail_ex+0x412/0x560
[  362.855925][T16768]  _copy_from_user+0x2d/0xb0
[  362.855950][T16768]  __copy_msghdr+0x3c5/0x5b0
[  362.855981][T16768]  ___sys_sendmsg+0x213/0x360
[  362.856001][T16768]  ? __lock_acquire+0x6b5/0x2cf0
[  362.856027][T16768]  ? __pfx____sys_sendmsg+0x10/0x10
[  362.856053][T16768]  ? kstrtouint+0x6e/0xe0
[  362.856105][T16768]  ? __fget_files+0x2a/0x420
[  362.856123][T16768]  ? __fget_files+0x3a0/0x420
[  362.856151][T16768]  __sys_sendmmsg+0x27c/0x4e0
[  362.856178][T16768]  ? __pfx___sys_sendmmsg+0x10/0x10
[  362.856197][T16768]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  362.856239][T16768]  ? ksys_write+0x242/0x270
[  362.856263][T16768]  ? __pfx_ksys_write+0x10/0x10
[  362.856290][T16768]  __x64_sys_sendmmsg+0xa0/0xc0
[  362.856310][T16768]  do_syscall_64+0xe2/0xf80
[  362.856328][T16768]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.856343][T16768]  ? trace_irq_disable+0x37/0x100
[  362.856356][T16768]  ? clear_bhb_loop+0x60/0xb0
[  362.856371][T16768]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.856386][T16768] RIP: 0033:0x7fb746d9aeb9
[  362.856401][T16768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  362.856412][T16768] RSP: 002b:00007fb747ca1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  362.856426][T16768] RAX: ffffffffffffffda RBX: 00007fb747015fa0 RCX: 00007fb746d9aeb9
[  362.856436][T16768] RDX: 0000000000000001 RSI: 0000200000004dc0 RDI: 0000000000000003
[  362.856443][T16768] RBP: 00007fb747ca1090 R08: 0000000000000000 R09: 0000000000000000
[  362.856451][T16768] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001
[  362.856459][T16768] R13: 00007fb747016038 R14: 00007fb747015fa0 R15: 00007ffe566bee78
[  362.856480][T16768]  </TASK>
[  362.945750][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  363.078022][    C0] lec:lec_tx_timeout: lec0
[  363.085523][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  363.186331][ T5831] Bluetooth: hci2: command tx timeout
[  363.589726][T15272] pim6reg (unregistering): left allmulticast mode
[  364.248656][T16780] veth1: entered promiscuous mode
[  364.814377][T16827] FAULT_INJECTION: forcing a failure.
[  364.814377][T16827] name failslab, interval 1, probability 0, space 0, times 0
[  364.871282][T16827] CPU: 0 UID: 0 PID: 16827 Comm: syz.3.3023 Not tainted syzkaller #0 PREEMPT(full) 
[  364.871307][T16827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  364.871323][T16827] Call Trace:
[  364.871330][T16827]  <TASK>
[  364.871337][T16827]  dump_stack_lvl+0xe8/0x150
[  364.871365][T16827]  should_fail_ex+0x412/0x560
[  364.871390][T16827]  should_failslab+0xa8/0x100
[  364.871412][T16827]  __kmalloc_noprof+0xde/0x7e0
[  364.871428][T16827]  ? sock_kmalloc+0xd6/0x160
[  364.871454][T16827]  sock_kmalloc+0xd6/0x160
[  364.871478][T16827]  ____sys_sendmsg+0x1e2/0xad0
[  364.871508][T16827]  ? __pfx_____sys_sendmsg+0x10/0x10
[  364.871546][T16827]  ? import_iovec+0x73/0xa0
[  364.871573][T16827]  ___sys_sendmsg+0x2a5/0x360
[  364.871593][T16827]  ? __lock_acquire+0x6b5/0x2cf0
[  364.871619][T16827]  ? __pfx____sys_sendmsg+0x10/0x10
[  364.871646][T16827]  ? kstrtouint+0x6e/0xe0
[  364.871690][T16827]  ? __fget_files+0x2a/0x420
[  364.871707][T16827]  ? __fget_files+0x3a0/0x420
[  364.871735][T16827]  __sys_sendmmsg+0x27c/0x4e0
[  364.871760][T16827]  ? __pfx___sys_sendmmsg+0x10/0x10
[  364.871779][T16827]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  364.871821][T16827]  ? ksys_write+0x242/0x270
[  364.871844][T16827]  ? __pfx_ksys_write+0x10/0x10
[  364.871872][T16827]  __x64_sys_sendmmsg+0xa0/0xc0
[  364.871895][T16827]  do_syscall_64+0xe2/0xf80
[  364.871912][T16827]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.871927][T16827]  ? trace_irq_disable+0x37/0x100
[  364.871942][T16827]  ? clear_bhb_loop+0x60/0xb0
[  364.871958][T16827]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.871977][T16827] RIP: 0033:0x7f3189d9aeb9
[  364.871994][T16827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  364.872007][T16827] RSP: 002b:00007f318ab8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  364.872024][T16827] RAX: ffffffffffffffda RBX: 00007f318a015fa0 RCX: 00007f3189d9aeb9
[  364.872034][T16827] RDX: 0000000000000001 RSI: 0000200000004dc0 RDI: 0000000000000003
[  364.872045][T16827] RBP: 00007f318ab8c090 R08: 0000000000000000 R09: 0000000000000000
[  364.872054][T16827] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001
[  364.872064][T16827] R13: 00007f318a016038 R14: 00007f318a015fa0 R15: 00007fff91a93db8
[  364.872093][T16827]  </TASK>
[  365.267226][ T5831] Bluetooth: hci2: command tx timeout
[  365.267378][T16836] __nla_validate_parse: 4 callbacks suppressed
[  365.267393][T16836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3025'.
[  365.292137][T16838] veth21: entered promiscuous mode
[  365.322654][T15272] IPVS: stop unused estimator thread 0...
[  365.949568][T16868] netlink: 'syz.1.3033': attribute type 4 has an invalid length.
[  365.986430][T16868] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3033'.
[  366.011872][T16528] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  366.052811][T16877] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3035'.
[  366.065229][T16528] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  366.160269][T16868] `: renamed from bond0 (while UP)
[  366.191089][T16528] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  366.234196][T16873] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048)
[  366.261955][T16528] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  366.348000][T16887] syzkaller1: tun_chr_ioctl cmd 1074025677
[  366.372109][T16887] syzkaller1: linktype set to 823
[  366.446085][ T5935] syzkaller1: tun_net_xmit 90
[  366.862047][T16528] 8021q: adding VLAN 0 to HW filter on device bond0
[  366.880094][T16926] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  366.913742][T16528] 8021q: adding VLAN 0 to HW filter on device team0
[  366.993449][ T7209] bridge0: port 1(bridge_slave_0) entered blocking state
[  367.000660][ T7209] bridge0: port 1(bridge_slave_0) entered forwarding state
[  367.041038][T16942] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  367.097797][T15270] bridge0: port 2(bridge_slave_1) entered blocking state
[  367.105011][T15270] bridge0: port 2(bridge_slave_1) entered forwarding state
[  367.107470][T16947] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3050'.
[  367.140300][T16943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3049'.
[  367.315208][T16962] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3053'.
[  367.316577][T16960] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3052'.
[  367.901113][T16985] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  367.945224][T16985] syzkaller0: entered promiscuous mode
[  367.968870][T16985] syzkaller0: entered allmulticast mode
[  368.005053][T16528] 8021q: adding VLAN 0 to HW filter on device batadv0
[  368.032424][T17000] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  368.074875][T16991] tipc: Resetting bearer <eth:syzkaller0>
[  368.096664][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  368.104761][    C0] lec:lec_tx_timeout: lec0
[  368.111295][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  368.304418][T16528] veth0_vlan: entered promiscuous mode
[  368.350012][T16528] veth1_vlan: entered promiscuous mode
[  368.447486][T16528] veth0_macvtap: entered promiscuous mode
[  368.462165][T16528] veth1_macvtap: entered promiscuous mode
[  368.514619][T16528] batman_adv: batadv0: Interface activated: batadv_slave_0
[  368.594509][T16528] batman_adv: batadv0: Interface activated: batadv_slave_1
[  368.656467][T16984] tipc: Resetting bearer <eth:syzkaller0>
[  368.717026][T16984] tipc: Disabling bearer <eth:syzkaller0>
[  368.755100][ T7218] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  368.786180][ T7218] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  368.794938][ T7218] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  368.879494][T17036] netlink: 'syz.3.3068': attribute type 1 has an invalid length.
[  368.901277][ T7218] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  369.110792][T17049] dvmrp0: entered allmulticast mode
[  369.152656][T17055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3072'.
[  369.200938][T17058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3072'.
[  369.211905][T17059] FAULT_INJECTION: forcing a failure.
[  369.211905][T17059] name failslab, interval 1, probability 0, space 0, times 0
[  369.224916][T17059] CPU: 0 UID: 0 PID: 17059 Comm: syz.0.3073 Not tainted syzkaller #0 PREEMPT(full) 
[  369.224939][T17059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  369.224950][T17059] Call Trace:
[  369.224957][T17059]  <TASK>
[  369.224965][T17059]  dump_stack_lvl+0xe8/0x150
[  369.225009][T17059]  should_fail_ex+0x412/0x560
[  369.225035][T17059]  should_failslab+0xa8/0x100
[  369.225064][T17059]  ? __pfx_ip6_dst_gc+0x10/0x10
[  369.225087][T17059]  kmem_cache_alloc_noprof+0x87/0x6e0
[  369.225110][T17059]  ? ip6_pol_route+0x160/0x13d0
[  369.225126][T17059]  ? dst_alloc+0x105/0x170
[  369.225149][T17059]  ? __pfx_ip6_dst_gc+0x10/0x10
[  369.225173][T17059]  dst_alloc+0x105/0x170
[  369.225200][T17059]  ip6_pol_route+0xafb/0x13d0
[  369.225217][T17059]  ? ip6_pol_route+0x160/0x13d0
[  369.225239][T17059]  ? __pfx_ip6_pol_route+0x10/0x10
[  369.225262][T17059]  ? __lock_acquire+0x6b5/0x2cf0
[  369.225293][T17059]  fib6_rule_action+0x265/0xc00
[  369.225314][T17059]  ? fib_rules_lookup+0x9b/0xea0
[  369.225335][T17059]  ? __pfx_fib6_rule_action+0x10/0x10
[  369.225361][T17059]  ? fib6_rule_match+0x79a/0xa80
[  369.225377][T17059]  ? __pfx_fib6_rule_action+0x10/0x10
[  369.225397][T17059]  fib_rules_lookup+0x768/0xea0
[  369.225421][T17059]  ? fib_rules_lookup+0x9b/0xea0
[  369.225448][T17059]  ? __pfx_fib_rules_lookup+0x10/0x10
[  369.225466][T17059]  ? l3mdev_update_flow+0x29/0x640
[  369.225488][T17059]  ? l3mdev_update_flow+0x4d1/0x640
[  369.225507][T17059]  ? l3mdev_update_flow+0x29/0x640
[  369.225528][T17059]  fib6_rule_lookup+0x1a0/0x730
[  369.225547][T17059]  ? __pfx_ip6_pol_route_output+0x10/0x10
[  369.225563][T17059]  ? __pfx_fib6_rule_lookup+0x10/0x10
[  369.225581][T17059]  ? ip6_route_output_flags+0x2e/0x5d0
[  369.225598][T17059]  ? __pfx_ip6_pol_route_output+0x10/0x10
[  369.225619][T17059]  ? dev_get_by_index_rcu+0xf4/0x110
[  369.225642][T17059]  ip6_route_output_flags+0x364/0x5d0
[  369.225665][T17059]  ? ip6_route_output_flags+0x2e/0x5d0
[  369.225684][T17059]  ip6_dst_lookup_tail+0x1c3/0x15a0
[  369.225715][T17059]  ? __pfx_ip6_dst_lookup_tail+0x10/0x10
[  369.225732][T17059]  ? sk_dst_check+0x25/0x480
[  369.225753][T17059]  ? sk_dst_check+0x25/0x480
[  369.225772][T17059]  ? sk_dst_check+0x25/0x480
[  369.225786][T17059]  ? sk_dst_check+0x30e/0x480
[  369.225803][T17059]  ip6_sk_dst_lookup_flow+0x72b/0x9c0
[  369.225824][T17059]  ? udpv6_sendmsg+0x17dd/0x25a0
[  369.225847][T17059]  udpv6_sendmsg+0x19c8/0x25a0
[  369.225872][T17059]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  369.225891][T17059]  ? __lock_acquire+0x6b5/0x2cf0
[  369.225914][T17059]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  369.225939][T17059]  ? ip6_datagram_release_cb+0x7c/0x550
[  369.225980][T17059]  ? lockdep_hardirqs_on+0x7a/0x110
[  369.225997][T17059]  ? inet_send_prepare+0x1b9/0x270
[  369.226016][T17059]  ? __local_bh_enable_ip+0xd0/0x130
[  369.226032][T17059]  ? inet_send_prepare+0x1b9/0x270
[  369.226061][T17059]  ? inet6_sendmsg+0xe4/0x120
[  369.226080][T17059]  ____sys_sendmsg+0x62c/0xad0
[  369.226110][T17059]  ? __pfx_____sys_sendmsg+0x10/0x10
[  369.226139][T17059]  ? import_iovec+0x73/0xa0
[  369.226164][T17059]  ___sys_sendmsg+0x2a5/0x360
[  369.226182][T17059]  ? __lock_acquire+0x6b5/0x2cf0
[  369.226205][T17059]  ? __pfx____sys_sendmsg+0x10/0x10
[  369.226230][T17059]  ? kstrtouint+0x6e/0xe0
[  369.226273][T17059]  ? __fget_files+0x2a/0x420
[  369.226290][T17059]  ? __fget_files+0x3a0/0x420
[  369.226317][T17059]  __sys_sendmmsg+0x27c/0x4e0
[  369.226343][T17059]  ? __pfx___sys_sendmmsg+0x10/0x10
[  369.226360][T17059]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  369.226401][T17059]  ? ksys_write+0x242/0x270
[  369.226426][T17059]  ? __pfx_ksys_write+0x10/0x10
[  369.226454][T17059]  __x64_sys_sendmmsg+0xa0/0xc0
[  369.226478][T17059]  do_syscall_64+0xe2/0xf80
[  369.226496][T17059]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.226511][T17059]  ? trace_irq_disable+0x37/0x100
[  369.226526][T17059]  ? clear_bhb_loop+0x60/0xb0
[  369.226545][T17059]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.226561][T17059] RIP: 0033:0x7fd9e979aeb9
[  369.226577][T17059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  369.226591][T17059] RSP: 002b:00007fd9ea674028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  369.226610][T17059] RAX: ffffffffffffffda RBX: 00007fd9e9a15fa0 RCX: 00007fd9e979aeb9
[  369.226622][T17059] RDX: 0000000000000001 RSI: 0000200000004dc0 RDI: 0000000000000003
[  369.226632][T17059] RBP: 00007fd9ea674090 R08: 0000000000000000 R09: 0000000000000000
[  369.226642][T17059] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001
[  369.226651][T17059] R13: 00007fd9e9a16038 R14: 00007fd9e9a15fa0 R15: 00007ffed6142bd8
[  369.226680][T17059]  </TASK>
[  369.789432][T15272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  369.803284][T15272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  369.956691][ T7209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  369.958267][T17071] Unsupported ieee802154 address type: 0
[  369.964547][ T7209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  369.998392][T17072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  370.247022][T17084] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2944'.
[  370.289619][T17083] 8021q: adding VLAN 0 to HW filter on device `
[  370.312135][T17083] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  370.329036][T17086] netlink: 'syz.3.3082': attribute type 1 has an invalid length.
[  370.367841][T17083] __nla_validate_parse: 1 callbacks suppressed
[  370.367864][T17083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3081'.
[  370.384001][T17089] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3082'.
[  370.400525][T17083] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3081'.
[  370.412908][T17083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3081'.
[  370.422519][T17083] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3081'.
[  370.432087][T17083] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3081'.
[  370.442584][T17086] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR
[  370.601815][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  370.624532][T17097] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  370.637214][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  370.650086][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  370.661372][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  370.670589][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  370.723734][T17097] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  370.739482][T17105] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3086'.
[  370.818735][T17102] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3087'.
[  370.829185][T17106] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3087'.
[  371.035023][T17126] netlink: 'syz.1.3091': attribute type 1 has an invalid length.
[  371.068204][T17128] netlink: 'syz.2.3090': attribute type 1 has an invalid length.
[  371.095008][T17128] netlink: 'syz.2.3090': attribute type 2 has an invalid length.
[  371.149271][T17126] 8021q: adding VLAN 0 to HW filter on device bond0
[  371.160507][T17137] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3094'.
[  371.211908][T17133] 8021q: adding VLAN 0 to HW filter on device bond0
[  371.238402][T17133] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[  371.292629][T17133] bond0: (slave vxcan3): Error -95 calling set_mac_address
[  371.406741][T17135] veth3: entered promiscuous mode
[  371.419891][T17135] bond0: (slave veth3): Enslaving as an active interface with a down link
[  371.436286][T17146] openvswitch: netlink: Flow key attr not present in new flow.
[  371.452979][T17126] vlan2: entered allmulticast mode
[  371.458964][T17126] bond0: entered allmulticast mode
[  371.734213][T17095] chnl_net:caif_netlink_parms(): no params data found
[  371.845629][T17095] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.853078][T17095] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.860536][T17095] bridge_slave_0: entered allmulticast mode
[  371.867621][T17095] bridge_slave_0: entered promiscuous mode
[  371.875448][T17095] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.882930][T17095] bridge0: port 2(bridge_slave_1) entered disabled state
[  371.891351][T17095] bridge_slave_1: entered allmulticast mode
[  371.899019][T17095] bridge_slave_1: entered promiscuous mode
[  371.950059][T17095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  371.963717][T17095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  372.021475][T17095] team0: Port device team_slave_0 added
[  372.030291][T17095] team0: Port device team_slave_1 added
[  372.080735][T17095] batman_adv: batadv0: Adding interface: batadv_slave_0
[  372.087966][T17095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  372.115230][T17095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  372.129083][T17095] batman_adv: batadv0: Adding interface: batadv_slave_1
[  372.136313][T17095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  372.162898][T17095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  372.203940][T17095] hsr_slave_0: entered promiscuous mode
[  372.210606][T17095] hsr_slave_1: entered promiscuous mode
[  372.217102][T17095] debugfs: 'hsr0' already exists in 'hsr'
[  372.223024][T17095] Cannot create hsr debugfs directory
[  372.350071][T17095] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  372.361713][T17095] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  372.373237][T17095] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.453460][T17095] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  372.464858][T17095] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  372.477381][T17095] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.548993][T17095] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  372.560160][T17095] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  372.570780][T17095] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.637440][T17095] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  372.647841][T17095] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  372.658795][T17095] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.706728][ T5831] Bluetooth: hci4: command tx timeout
[  373.905748][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms
[  373.913827][    C0] lec:lec_tx_timeout: lec0
[  373.919650][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  374.476882][T17148] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  374.517638][T17095] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  374.551114][T17095] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  374.622802][T17095] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  374.683049][T17095] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  374.792960][ T5831] Bluetooth: hci4: command tx timeout
[  374.889262][T17202] netlink: 'syz.1.3109': attribute type 12 has an invalid length.
[  374.924001][T17202] netlink: 'syz.1.3109': attribute type 11 has an invalid length.
[  374.940929][T17207] syzkaller1: entered allmulticast mode
[  374.958455][T17195] netlink: 'syz.2.3107': attribute type 1 has an invalid length.
[  374.979967][T17095] 8021q: adding VLAN 0 to HW filter on device bond0
[  375.010563][T17095] 8021q: adding VLAN 0 to HW filter on device team0
[  375.032073][T15270] bridge0: port 1(bridge_slave_0) entered blocking state
[  375.039446][T15270] bridge0: port 1(bridge_slave_0) entered forwarding state
[  375.104922][ T1018] bridge0: port 2(bridge_slave_1) entered blocking state
[  375.112169][ T1018] bridge0: port 2(bridge_slave_1) entered forwarding state
[  375.143829][T17214] geneve2: entered promiscuous mode
[  375.150418][T17214] geneve2: entered allmulticast mode
[  375.215662][T17216] netlink: 'syz.3.3112': attribute type 1 has an invalid length.
[  375.300671][T17216] bridge: RTM_NEWNEIGH with invalid ether address
[  375.543643][T17241] __nla_validate_parse: 9 callbacks suppressed
[  375.543662][T17241] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3119'.
[  375.584162][T17095] 8021q: adding VLAN 0 to HW filter on device batadv0
[  375.959549][T17262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3124'.
[  375.978393][T17262] netlink: 'syz.1.3124': attribute type 1 has an invalid length.
[  376.013837][T17262] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3124'.
[  376.126177][T17268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3125'.
[  376.260075][T17095] veth0_vlan: entered promiscuous mode
[  376.332373][T17095] veth1_vlan: entered promiscuous mode
[  376.426659][T17095] veth0_macvtap: entered promiscuous mode
[  376.444925][T17095] veth1_macvtap: entered promiscuous mode
[  376.473557][T17288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3131'.
[  376.494732][T17289] sctp: [Deprecated]: syz.2.3130 (pid 17289) Use of int in max_burst socket option deprecated.
[  376.494732][T17289] Use struct sctp_assoc_value instead
[  376.535412][T17095] batman_adv: batadv0: Interface activated: batadv_slave_0
[  376.653211][T17288] team0 (unregistering): Port device team_slave_0 removed
[  376.679988][T17288] team0 (unregistering): Port device team_slave_1 removed
[  376.710450][T17095] batman_adv: batadv0: Interface activated: batadv_slave_1
[  376.739363][ T7217] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  376.759820][ T7217] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  376.778407][T17294] netlink: 'syz.3.3133': attribute type 2 has an invalid length.
[  376.796077][T17294] netlink: 'syz.3.3133': attribute type 4 has an invalid length.
[  376.820608][ T7217] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  376.858737][ T7217] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  376.876412][ T5831] Bluetooth: hci4: command tx timeout
[  377.109276][T15270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  377.146101][T15270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  377.312562][ T7218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  377.322521][ T7218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  377.492083][T17340] netlink: 'syz.0.3143': attribute type 11 has an invalid length.
[  377.553428][T17346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3145'.
[  377.765005][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3080'.
[  377.775149][T17351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3080'.
[  377.793747][T17352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3147'.
[  377.803449][T17351] netlink: 'syz.4.3080': attribute type 15 has an invalid length.
[  377.836319][T17352] openvswitch: netlink: Flow actions attr not present in new flow.
[  377.853220][ T7217] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0
[  377.853243][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3080'.
[  377.853276][T17351] netlink: 'syz.4.3080': attribute type 15 has an invalid length.
[  377.940766][ T7217] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0
[  377.977600][ T7217] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0
[  378.005146][ T7217] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0
[  378.236094][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  378.247331][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  378.258045][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  378.272850][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  378.283007][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  378.520415][T17390] dvmrp1: entered allmulticast mode
[  378.528185][T17389] dvmrp1: left allmulticast mode
[  378.632653][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  378.652206][ T6235] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  378.828354][ T6235] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  378.950576][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms
[  378.958648][    C0] lec:lec_tx_timeout: lec0
[  378.963874][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  378.968309][ T5831] Bluetooth: hci4: command tx timeout
[  379.010004][ T6235] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  379.205335][ T6235] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  379.237864][T17424] netlink: 'syz.4.3169': attribute type 2 has an invalid length.
[  379.351614][T17431] bond1: entered promiscuous mode
[  379.358416][T17431] 8021q: adding VLAN 0 to HW filter on device bond1
[  379.725272][T17449] NCSI netlink: No device for ifindex 131092
[  379.802593][T17376] chnl_net:caif_netlink_parms(): no params data found
[  379.901768][ T6235] bridge_slave_1: left promiscuous mode
[  379.913862][ T6235] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.934623][ T6235] bridge_slave_0: left allmulticast mode
[  379.951121][ T6235] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.318223][ T5831] Bluetooth: hci3: command tx timeout
[  380.430974][ T6235] dvmrp0 (unregistering): left allmulticast mode
[  380.659154][ T6235] bond2 (unregistering): (slave bridge3): Releasing backup interface
[  380.667920][ T6235] bridge3 (unregistering): left promiscuous mode
[  381.133679][ T6235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  381.143706][ T6235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  381.153484][ T6235] bond0 (unregistering): Released all slaves
[  381.162967][ T6235] bond1 (unregistering): Released all slaves
[  381.270921][ T6235] bond2 (unregistering): Released all slaves
[  381.390529][ T6235] bond3 (unregistering): Released all slaves
[  381.512067][ T6235] bond4 (unregistering): Released all slaves
[  381.637893][ T6235] bond5 (unregistering): Released all slaves
[  381.650432][ T6235] bond6 (unregistering): Released all slaves
[  381.662734][ T6235] bond7 (unregistering): Released all slaves
[  381.676762][ T6235] bond8 (unregistering): Released all slaves
[  381.690957][ T6235] bond9 (unregistering): Released all slaves
[  381.705428][ T6235] bond10 (unregistering): Released all slaves
[  381.721400][ T6235] bond11 (unregistering): Released all slaves
[  381.735523][ T6235] bond12 (unregistering): Released all slaves
[  381.861574][ T6235] bond13 (unregistering): Released all slaves
[  381.890483][T17478] validate_nla: 6 callbacks suppressed
[  381.890504][T17478] netlink: 'syz.2.3182': attribute type 3 has an invalid length.
[  382.072040][ T6235] : left promiscuous mode
[  382.079023][T17494] __nla_validate_parse: 8 callbacks suppressed
[  382.079041][T17494] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3185'.
[  382.131246][T17491] veth3: entered promiscuous mode
[  382.204914][T17496] ip6gre2: entered promiscuous mode
[  382.215087][T17496] ip6gre2: entered allmulticast mode
[  382.251266][ T6235] tipc: Left network mode
[  382.392635][ T5831] Bluetooth: hci3: command tx timeout
[  382.436654][T17376] bridge0: port 1(bridge_slave_0) entered blocking state
[  382.454330][T17376] bridge0: port 1(bridge_slave_0) entered disabled state
[  382.462684][T17376] bridge_slave_0: entered allmulticast mode
[  382.497953][T17376] bridge_slave_0: entered promiscuous mode
[  382.518522][T17376] bridge0: port 2(bridge_slave_1) entered blocking state
[  382.533215][T17376] bridge0: port 2(bridge_slave_1) entered disabled state
[  382.543105][T17376] bridge_slave_1: entered allmulticast mode
[  382.552412][T17376] bridge_slave_1: entered promiscuous mode
[  382.661948][T17376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  382.698101][T17376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  382.911355][T17376] team0: Port device team_slave_0 added
[  382.923214][T17527] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3193'.
[  382.927103][T17376] team0: Port device team_slave_1 added
[  382.964646][T17533] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3195'.
[  383.000002][T17376] batman_adv: batadv0: Adding interface: batadv_slave_0
[  383.007431][T17376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  383.037011][T17376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  383.149439][T17544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3197'.
[  383.165466][T17376] batman_adv: batadv0: Adding interface: batadv_slave_1
[  383.207714][T17376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  383.296249][T17376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  383.371441][T17553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3199'.
[  383.404602][T17553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3199'.
[  383.502472][  T936] IPVS: starting estimator thread 0...
[  383.560483][T17555] veth25: entered promiscuous mode
[  383.592457][T17376] hsr_slave_0: entered promiscuous mode
[  383.601475][T17376] hsr_slave_1: entered promiscuous mode
[  383.608298][T17376] debugfs: 'hsr0' already exists in 'hsr'
[  383.615857][T17376] Cannot create hsr debugfs directory
[  383.635835][T17570] IPVS: using max 32 ests per chain, 76800 per kthread
[  383.883063][T17588] netlink: 'syz.4.3204': attribute type 1 has an invalid length.
[  383.910663][T17588] vlan2: entered promiscuous mode
[  383.917088][T17588] macvlan1: entered promiscuous mode
[  383.923182][T17588] vlan2: entered allmulticast mode
[  383.942000][T17588] macvlan1: entered allmulticast mode
[  383.950015][T17588] veth1_vlan: entered allmulticast mode
[  383.976205][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  383.984311][    C0] lec:lec_tx_timeout: lec0
[  383.989949][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  384.112969][T17599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3209'.
[  384.404168][T17609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3211'.
[  384.465869][ T5831] Bluetooth: hci3: command tx timeout
[  384.603661][T17620] veth27: entered promiscuous mode
[  385.934120][T17376] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  386.050297][T17376] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  386.111695][T17376] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  386.194867][T17376] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  386.354995][ T6235] hsr_slave_0: left promiscuous mode
[  386.376644][ T6235] hsr_slave_1: left promiscuous mode
[  386.382940][ T6235] batman_adv: batadv0: Removing interface: batadv_slave_1
[  386.498282][T17705] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3227'.
[  386.547410][ T5831] Bluetooth: hci3: command tx timeout
[  386.739076][T17723] netlink: 'syz.4.3231': attribute type 1 has an invalid length.
[  388.045096][T17709] veth29: entered promiscuous mode
[  388.085371][T17723] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  388.385007][T17376] 8021q: adding VLAN 0 to HW filter on device bond0
[  388.588667][T17376] 8021q: adding VLAN 0 to HW filter on device team0
[  388.633130][ T7221] bridge0: port 1(bridge_slave_0) entered blocking state
[  388.640348][ T7221] bridge0: port 1(bridge_slave_0) entered forwarding state
[  388.693742][ T7221] bridge0: port 2(bridge_slave_1) entered blocking state
[  388.701072][ T7221] bridge0: port 2(bridge_slave_1) entered forwarding state
[  388.782483][T17802] netlink: 'syz.1.3241': attribute type 1 has an invalid length.
[  388.787603][T17804] dvmrp6: entered allmulticast mode
[  388.850991][T17802] bond1: entered promiscuous mode
[  388.857947][T17802] 8021q: adding VLAN 0 to HW filter on device bond1
[  389.006242][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  389.014342][    C0] lec:lec_tx_timeout: lec0
[  389.019898][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  389.204041][T17825] veth5: entered promiscuous mode
[  389.299734][T17831] netlink: 'syz.0.3246': attribute type 10 has an invalid length.
[  389.483579][T17836] syzkaller1: entered promiscuous mode
[  389.526308][T17836] syzkaller1: entered allmulticast mode
[  389.563182][T17836] netlink: 'syz.4.3247': attribute type 29 has an invalid length.
[  389.597308][T17836] netlink: 'syz.4.3247': attribute type 29 has an invalid length.
[  389.613617][T17842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3248'.
[  389.626321][T17836] netlink: 500 bytes leftover after parsing attributes in process `syz.4.3247'.
[  389.643322][T17376] 8021q: adding VLAN 0 to HW filter on device batadv0
[  389.775538][T17376] veth0_vlan: entered promiscuous mode
[  389.811414][T17376] veth1_vlan: entered promiscuous mode
[  389.862375][T17376] veth0_macvtap: entered promiscuous mode
[  389.873503][T17376] veth1_macvtap: entered promiscuous mode
[  389.897079][T17376] batman_adv: batadv0: Interface activated: batadv_slave_0
[  389.924305][T17376] batman_adv: batadv0: Interface activated: batadv_slave_1
[  389.950224][T15272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  389.964853][T15272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  389.990671][T15272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  390.002391][T15272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  391.429354][   T11] block nbd1: Possible stuck request ffff888025b50000: control (read@0,1024B). Runtime 30 seconds
[  391.441509][   T11] block nbd1: Possible stuck request ffff888025b50200: control (read@1024,1024B). Runtime 30 seconds
[  391.452720][   T11] block nbd1: Possible stuck request ffff888025b50400: control (read@2048,1024B). Runtime 30 seconds
[  391.463778][   T11] block nbd1: Possible stuck request ffff888025b50600: control (read@3072,1024B). Runtime 30 seconds
[  391.734138][T17802] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  391.881103][ T7221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  391.908975][ T7221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  391.924416][T17904] netlink: 'syz.2.3254': attribute type 2 has an invalid length.
[  391.980634][T17906] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3255'.
[  392.003680][T17909] veth31: entered promiscuous mode
[  392.008714][T17906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3255'.
[  392.036340][ T6235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  392.049895][ T6235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  392.609088][T17943] erspan0: entered promiscuous mode
[  392.620876][T17943] erspan0: entered allmulticast mode
[  392.704276][T17945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3268'.
[  392.726289][T17945] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3268'.
[  392.767777][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  392.779424][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  392.788682][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  392.807692][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  392.816999][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  393.203671][T17971] : entered promiscuous mode
[  393.210482][T17972] openvswitch: netlink: IP tunnel dst address not specified
[  393.385464][T17982] syz_tun: entered allmulticast mode
[  393.406822][T17983] dvmrp8: entered allmulticast mode
[  393.412714][T17984] dvmrp8: left allmulticast mode
[  393.570101][T17984] syz_tun: left allmulticast mode
[  393.598034][T17995] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3281'.
[  393.637813][T18000] veth3: entered promiscuous mode
[  393.661929][T18005] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0
[  393.672585][T18003] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3283'.
[  393.715994][T17948] chnl_net:caif_netlink_parms(): no params data found
[  393.839367][T18017] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3286'.
[  393.875347][T17948] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.882876][T17948] bridge0: port 1(bridge_slave_0) entered disabled state
[  393.890969][T17948] bridge_slave_0: entered allmulticast mode
[  393.899092][T17948] bridge_slave_0: entered promiscuous mode
[  393.909787][T17948] bridge0: port 2(bridge_slave_1) entered blocking state
[  393.917210][T17948] bridge0: port 2(bridge_slave_1) entered disabled state
[  393.924789][T17948] bridge_slave_1: entered allmulticast mode
[  393.932626][T17948] bridge_slave_1: entered promiscuous mode
[  393.994646][T18025] netlink: 'syz.4.3289': attribute type 21 has an invalid length.
[  394.025041][T18025] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3289'.
[  394.036116][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  394.038878][T17948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  394.044127][    C0] lec:lec_tx_timeout: lec0
[  394.056568][T17948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  394.058403][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  394.098447][T18025] netlink: 'syz.4.3289': attribute type 3 has an invalid length.
[  394.163647][T17948] team0: Port device team_slave_0 added
[  394.187414][T17948] team0: Port device team_slave_1 added
[  394.199842][T18033] netlink: 'syz.2.3291': attribute type 1 has an invalid length.
[  394.229496][T18033] netlink: 'syz.2.3291': attribute type 2 has an invalid length.
[  394.328931][T17948] batman_adv: batadv0: Adding interface: batadv_slave_0
[  394.337827][T17948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  394.364773][T17948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  394.380757][T17948] batman_adv: batadv0: Adding interface: batadv_slave_1
[  394.405337][T17948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  394.509317][T17948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  394.867416][ T5834] Bluetooth: hci0: command tx timeout
[  394.945510][T17948] hsr_slave_0: entered promiscuous mode
[  394.980112][T17948] hsr_slave_1: entered promiscuous mode
[  394.996766][T17948] debugfs: 'hsr0' already exists in 'hsr'
[  395.002531][T17948] Cannot create hsr debugfs directory
[  395.257452][T18097] netlink: 'syz.1.3314': attribute type 32 has an invalid length.
[  395.273049][T18097] __nla_validate_parse: 4 callbacks suppressed
[  395.273066][T18097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3314'.
[  395.302463][T18097] bond2: Setting coupled_control to off (0)
[  395.366867][T18101] netlink: 'syz.2.3313': attribute type 1 has an invalid length.
[  395.462013][T18105] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3316'.
[  395.611289][T18115] netlink: 'syz.1.3319': attribute type 23 has an invalid length.
[  395.694833][T17948] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  395.721380][T18121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3320'.
[  395.737488][T17948] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.749475][T18121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3320'.
[  395.828143][T18129] netlink: 'syz.4.3322': attribute type 39 has an invalid length.
[  395.829011][T18123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3319'.
[  395.977480][T17948] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  395.990713][T17948] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.141398][T18140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3326'.
[  396.160255][T17948] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  396.166746][T18140] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3326'.
[  396.173591][T17948] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.241155][T18148] netlink: 'syz.1.3325': attribute type 1 has an invalid length.
[  396.283376][T18148] 8021q: adding VLAN 0 to HW filter on device bond3
[  396.367759][T17948] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  396.382223][T17948] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.650979][T17948] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  396.657736][T18171] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3333'.
[  396.693598][T17948] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  396.704844][T17948] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  396.730799][T17948] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  396.889802][T17948] 8021q: adding VLAN 0 to HW filter on device bond0
[  396.912203][T17948] 8021q: adding VLAN 0 to HW filter on device team0
[  396.937073][ T7209] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.944194][ T7209] bridge0: port 1(bridge_slave_0) entered forwarding state
[  396.946465][ T5831] Bluetooth: hci0: command tx timeout
[  397.016792][ T6235] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.023893][ T6235] bridge0: port 2(bridge_slave_1) entered forwarding state
[  397.167560][T18195] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3339'.
[  397.473983][T17948] 8021q: adding VLAN 0 to HW filter on device batadv0
[  397.648132][T17948] veth0_vlan: entered promiscuous mode
[  397.728861][T17948] veth1_vlan: entered promiscuous mode
[  397.822243][T18226] scsi_nl_rcv_msg: discarding partial skb
[  397.859603][T17948] veth0_macvtap: entered promiscuous mode
[  397.871073][T17948] veth1_macvtap: entered promiscuous mode
[  397.921236][T17948] batman_adv: batadv0: Interface activated: batadv_slave_0
[  397.949168][T17948] batman_adv: batadv0: Interface activated: batadv_slave_1
[  397.986561][ T7217] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  398.000598][ T7217] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  398.011382][ T7221] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  398.043175][ T7221] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  398.080984][T18237] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3349'.
[  398.229022][ T7217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  398.241492][ T7217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  398.294835][ T7217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  398.306443][ T7217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  398.441740][T18247] Unknown options in mask b7f2
[  398.450273][T18249] netlink: 'syz.0.3263': attribute type 1 has an invalid length.
[  398.680045][T18261] IPVS: set_ctl: invalid protocol: 4 255.255.255.255:20001
[  398.731841][T18270] bond2: entered promiscuous mode
[  398.748554][T18270] 8021q: adding VLAN 0 to HW filter on device bond2
[  398.802593][T18270] bond2: (slave bridge1): making interface the new active one
[  398.835915][T18270] bridge1: entered promiscuous mode
[  398.843728][T18270] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  398.867365][T18277] .: renamed from bridge_slave_1 (while UP)
[  399.025829][ T5831] Bluetooth: hci0: command 0x040f tx timeout
[  399.075983][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  399.084036][    C0] lec:lec_tx_timeout: lec0
[  399.088898][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  401.106916][ T5831] Bluetooth: hci0: command 0x040f tx timeout
[  401.429630][T18249] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  401.810190][T18325] __nla_validate_parse: 2 callbacks suppressed
[  401.810208][T18325] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3376'.
[  401.831589][T18329] Bluetooth: MGMT ver 1.23
[  401.868993][T18327] syzkaller1: entered promiscuous mode
[  401.886800][T18327] syzkaller1: entered allmulticast mode
[  402.026236][T18342] validate_nla: 1 callbacks suppressed
[  402.026256][T18342] netlink: 'syz.0.3382': attribute type 1 has an invalid length.
[  402.204373][T18362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3388'.
[  402.214152][T18362] chnl_net:caif_netlink_parms(): no params data found
[  402.440007][T18379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3392'.
[  403.186808][ T5834] Bluetooth: hci0: command 0x040f tx timeout
[  403.906242][ T5834] Bluetooth: hci2: command 0x0401 tx timeout
[  403.906376][ T5831] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  404.096278][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  404.104340][    C0] lec:lec_tx_timeout: lec0
[  404.109366][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  405.001409][T18342] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  405.012268][T18358] netlink: 'syz.3.3387': attribute type 1 has an invalid length.
[  405.021097][T18358] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3387'.
[  405.036809][T18358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3387'.
[  405.047819][T18361] netlink: 512 bytes leftover after parsing attributes in process `syz.2.3384'.
[  405.197411][T18381] team0: Cannot enslave team device to itself
[  405.210096][T18387] openvswitch: netlink: Flow key attr not present in new flow.
[  405.378765][T18401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3398'.
[  405.535008][T18415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3404'.
[  405.547381][T18415] netlink: 'syz.3.3404': attribute type 29 has an invalid length.
[  405.557474][T18415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3404'.
[  405.588668][T18415] netlink: 'syz.3.3404': attribute type 29 has an invalid length.
[  405.597895][T18415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3404'.
[  405.610588][T18416] C: renamed from lo (while UP)
[  405.635415][T18416] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  405.651916][T18415] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  408.464407][T18408] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  408.597456][T18450] __nla_validate_parse: 1 callbacks suppressed
[  408.597474][T18450] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3412'.
[  408.773683][T18457] syzkaller1: entered promiscuous mode
[  408.780622][T18457] syzkaller1: entered allmulticast mode
[  408.818955][T18470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3417'.
[  408.960395][T18477] syzkaller0: entered promiscuous mode
[  408.967839][T18477] syzkaller0: entered allmulticast mode
[  408.979402][T18480] openvswitch: netlink: IP tunnel dst address not specified
[  408.988364][T18480] netlink: 59 bytes leftover after parsing attributes in process `syz.1.3420'.
[  409.049316][T18470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3417'.
[  409.116217][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  409.124255][    C0] lec:lec_tx_timeout: lec0
[  409.129566][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  409.284895][T18503] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3426'.
[  409.297427][T18503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3426'.
[  409.729107][T18512] netlink: 'syz.3.3428': attribute type 1 has an invalid length.
[  409.791727][T18512] bond1: entered promiscuous mode
[  409.797278][T18512] 8021q: adding VLAN 0 to HW filter on device bond1
[  410.001041][T18522] Bluetooth: MGMT ver 1.23
[  410.123569][T18533] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3434'.
[  412.094605][T18489] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  412.277708][T18556] netlink: 'syz.3.3442': attribute type 7 has an invalid length.
[  412.329172][T18556] netlink: 'syz.3.3442': attribute type 7 has an invalid length.
[  412.454904][T18556] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.541061][T18572] pim6reg: entered allmulticast mode
[  412.656322][T18595] openvswitch: netlink: IP tunnel dst address not specified
[  412.684512][T18595] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3450'.
[  412.809677][T18556] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.934977][T18556] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.071814][T18613] netlink: 'syz.2.3456': attribute type 1 has an invalid length.
[  413.090174][T18556] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.214222][T18621] openvswitch: netlink: ct_state flags 010000e0 unsupported
[  413.310018][ T7209] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  413.344074][ T7209] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  413.378778][ T7209] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  413.400074][T18629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3461'.
[  413.417834][ T6235] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  413.488028][T18632] syzkaller1: entered promiscuous mode
[  413.493684][T18632] syzkaller1: entered allmulticast mode
[  415.105811][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5980 ms
[  415.113857][    C0] lec:lec_tx_timeout: lec0
[  415.119665][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  415.958419][T18608] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  415.977886][T18634] netlink: 'syz.1.3463': attribute type 23 has an invalid length.
[  416.047157][T18637] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3463'.
[  416.179938][T18649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3468'.
[  416.194038][T18649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3468'.
[  416.443557][T18674] netlink: 'syz.2.3475': attribute type 1 has an invalid length.
[  416.495493][T18676] netlink: 'syz.1.3476': attribute type 1 has an invalid length.
[  416.689669][T18689] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3479'.
[  416.740938][T18692] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3481'.
[  416.765211][T18692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3481'.
[  417.203933][T18700] syzkaller0: entered promiscuous mode
[  417.212077][T18700] syzkaller0: entered allmulticast mode
[  419.472442][T18676] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  419.500801][T18722] netlink: 'syz.0.3489': attribute type 11 has an invalid length.
[  419.517780][T18722] netlink: 199816 bytes leftover after parsing attributes in process `syz.0.3489'.
[  419.640546][T18735] netlink: 'syz.4.3492': attribute type 1 has an invalid length.
[  419.648784][T18735] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3492'.
[  420.070582][T18760] vlan2: entered promiscuous mode
[  420.076463][T18760] vlan2: entered allmulticast mode
[  420.081600][T18760] hsr_slave_1: entered allmulticast mode
[  420.112080][T18760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3501'.
[  420.127184][T18764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3499'.
[  420.281522][T18776] workqueue: name exceeds WQ_NAME_LEN. Truncating to: K��u�cr��K:����̥�B����|���
[  420.442911][T18785] netlink: 'syz.1.3508': attribute type 1 has an invalid length.
[  420.469817][T18791] openvswitch: netlink: IP tunnel dst address not specified
[  420.499219][T18790] ieee802154 phy0 wpan0: encryption failed: -22
[  420.521172][T18785] bond4: (slave geneve3): making interface the new active one
[  420.530917][T18785] bond4: (slave geneve3): Enslaving as an active interface with an up link
[  420.540223][ T7218] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  420.559679][ T7218] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  420.579072][T18790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  420.652366][ T7218] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  420.689753][ T7218] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  420.812434][T18811] syzkaller0: entered promiscuous mode
[  420.813144][T18816] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[  420.821463][T18811] syzkaller0: entered allmulticast mode
[  420.913785][T18818] syzkaller0: entered promiscuous mode
[  420.919584][T18818] syzkaller0: entered allmulticast mode
[  420.929995][T18818] tipc: Started in network mode
[  420.943855][T18818] tipc: Node identity 1ad9c9eed77c, cluster identity 4711
[  420.945796][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms
[  420.959000][    C0] lec:lec_tx_timeout: lec0
[  420.964388][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  420.972883][T18818] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  421.006822][T18817] tipc: Resetting bearer <eth:syzkaller0>
[  421.048511][T18817] tipc: Disabling bearer <eth:syzkaller0>
[  421.160706][T18831] __nla_validate_parse: 2 callbacks suppressed
[  421.160718][T18831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3524'.
[  421.193812][T18831] bond1: Invalid ad_actor_system MAC address.
[  421.205878][T18831] bond1: option ad_actor_system: invalid value (1)
[  421.219786][T18831] bond1 (unregistering): Released all slaves
[  421.416846][T18844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3529'.
[  421.426955][T18844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3529'.
[  421.509846][   T11] block nbd1: Possible stuck request ffff888025b50000: control (read@0,1024B). Runtime 60 seconds
[  421.521213][   T11] block nbd1: Possible stuck request ffff888025b50200: control (read@1024,1024B). Runtime 60 seconds
[  421.532567][   T11] block nbd1: Possible stuck request ffff888025b50400: control (read@2048,1024B). Runtime 60 seconds
[  421.543898][   T11] block nbd1: Possible stuck request ffff888025b50600: control (read@3072,1024B). Runtime 60 seconds
[  424.504233][ T5193] udevd[5193]: worker [15525] /devices/virtual/block/nbd1 is taking a long time
[  425.976058][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  425.984186][    C0] lec:lec_tx_timeout: lec0
[  425.990032][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  431.005723][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  431.013780][    C0] lec:lec_tx_timeout: lec0
[  440.069437][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  440.078737][ T1301] lec:lec_start_xmit: lec0:No lecd attached
[  445.085740][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  445.093784][    C0] lec:lec_tx_timeout: lec0
[  448.826221][T18858] netlink: 5448 bytes leftover after parsing attributes in process `syz.2.3533'.
[  448.841957][T18858] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  448.962764][T18874] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3536'.
[  449.063180][T18879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3537'.
[  449.084337][T18879] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3537'.
[  449.121463][T18881] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3539'.
[  449.183927][T18881] bond5: (slave gretap0): Device is not bonding slave
[  449.191650][T18881] bond5: option active_slave: invalid value (gretap0)
[  449.207179][T18881] bond5 (unregistering): Released all slaves
[  449.361230][T18898] netlink: 'syz.3.3544': attribute type 10 has an invalid length.
[  449.372227][T18898] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3544'.
[  449.388049][T18900] netlink: 'syz.3.3544': attribute type 10 has an invalid length.
[  449.428032][   T10] IPVS: starting estimator thread 0...
[  449.435020][T18903] netlink: 'syz.3.3545': attribute type 10 has an invalid length.
[  449.470938][T18903] team0 (unregistering): Port device team_slave_0 removed
[  449.482427][T18903] team0 (unregistering): Port device team_slave_1 removed
[  449.535907][T18904] IPVS: using max 33 ests per chain, 79200 per kthread
[  449.697705][T18908] syzkaller0: entered promiscuous mode
[  449.703221][T18908] syzkaller0: entered allmulticast mode
[  449.722056][T18910] netlink: 'syz.0.3548': attribute type 1 has an invalid length.
[  449.763601][T18910] 8021q: adding VLAN 0 to HW filter on device bond1
[  449.868576][T18914] mac80211_hwsim hwsim44 �
: renamed from wlan1 (while UP)
[  450.135051][T18927] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3553'.
[  450.148720][T18936] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3554'.
[  450.182343][T18936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3554'.
[  450.205101][T18935] macvtap1: entered promiscuous mode
[  450.254252][T18935] macvtap1: entered allmulticast mode
[  450.263744][T18935] veth1_vlan: entered allmulticast mode
[  450.297760][T18932] veth7: entered promiscuous mode
[  450.366145][T18932] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3555'.
[  450.652808][T18955] netlink: 'syz.3.3559': attribute type 23 has an invalid length.
[  450.707575][T18957] tipc: Started in network mode
[  450.712574][T18957] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[  450.733710][T18957] tipc: Enabled bearer <eth:vlan0>, priority 10
[  450.878323][T18969] veth0: entered promiscuous mode
[  450.907129][T18968] veth0: left promiscuous mode
[  451.053636][T18979] netlink: Unknown conntrack attr (0)
[  451.201696][T18984] bond3: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  451.215433][T18984] bond3 (unregistering): Released all slaves
[  451.247627][T18987] netem: incorrect ge model size
[  451.253034][T18987] netem: change failed
[  451.485017][T19001] veth5: entered promiscuous mode
[  451.590030][   T11] block nbd1: Possible stuck request ffff888025b50000: control (read@0,1024B). Runtime 90 seconds
[  451.606538][   T11] block nbd1: Possible stuck request ffff888025b50200: control (read@1024,1024B). Runtime 90 seconds
[  451.618219][   T11] block nbd1: Possible stuck request ffff888025b50400: control (read@2048,1024B). Runtime 90 seconds
[  451.629655][   T11] block nbd1: Possible stuck request ffff888025b50600: control (read@3072,1024B). Runtime 90 seconds
[  451.718588][T19012] bridge0: port 2(bridge_slave_1) entered disabled state
[  451.726305][T19012] bridge0: port 1(bridge_slave_0) entered disabled state
[  451.847156][   T10] tipc: Node number set to 10005162
[  451.907161][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.219946][T19038] netlink: zone id is out of range
[  452.228250][T19038] netlink: zone id is out of range
[  452.234344][T19035] veth9: entered promiscuous mode
[  452.239837][T19038] netlink: zone id is out of range
[  452.256476][T19038] netlink: zone id is out of range
[  452.263701][T19038] netlink: zone id is out of range
[  452.291829][T19038] netlink: zone id is out of range
[  452.301686][T19038] netlink: zone id is out of range
[  452.810849][T19067] syzkaller0: entered promiscuous mode
[  452.816636][T19067] syzkaller0: entered allmulticast mode
[  452.889033][T19076] netlink: 'syz.1.3595': attribute type 1 has an invalid length.
[  453.142462][T19050] Cannot find del_set index 0 as target
[  453.217050][T19087] veth11: entered promiscuous mode
[  453.836609][T11177] lec:lec_start_xmit: lec0:No lecd attached
[  453.844403][T19125] __nla_validate_parse: 10 callbacks suppressed
[  453.844422][T19125] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3609'.
[  453.883887][T19127] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3611'.
[  453.990387][ T5879] net_ratelimit: 282 callbacks suppressed
[  453.990404][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.217155][T19150] netlink: 'syz.4.3617': attribute type 11 has an invalid length.
[  454.298489][T19155] sctp: [Deprecated]: syz.1.3616 (pid 19155) Use of int in max_burst socket option.
[  454.298489][T19155] Use struct sctp_assoc_value instead
[  454.344835][T19158] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  454.359386][T19157] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3620'.
[  454.411583][T19161] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3616'.
[  454.698332][T19180] xt_socket: unknown flags 0x50
[  454.944858][T19194] raw_sendmsg: syz.2.3627 forgot to set AF_INET. Fix it!
[  455.035161][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.192452][T19213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3630'.
[  455.243414][T19215] netlink: 'syz.3.3631': attribute type 1 has an invalid length.
[  455.346586][T19218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  455.410411][T19228] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048)
[  455.562842][T19234] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.3637'.
[  455.592475][T19234] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3637'.
[  455.767299][T19252] dvmrp0: entered allmulticast mode
[  455.866933][T19255] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  456.028885][T19269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3650'.
[  456.052888][T19269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3650'.
[  456.070029][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.078543][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.125307][T19275] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.138666][T19275] bridge_slave_1: left allmulticast mode
[  456.144819][T19275] bridge_slave_1: left promiscuous mode
[  456.156568][T19275] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.220855][T19286] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3655'.
[  456.231678][T19286] IPVS: stopping master sync thread 18005 ...
[  456.524020][T19307] netlink: 'syz.4.3663': attribute type 28 has an invalid length.
[  456.533077][T19307] netlink: 'syz.4.3663': attribute type 3 has an invalid length.
[  456.764025][T19333] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  456.793274][T19335] dvmrp6: entered allmulticast mode
[  456.870432][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.084093][T19353] Bluetooth: MGMT ver 1.23
[  457.108177][T19353] netlink: 'syz.4.3676': attribute type 39 has an invalid length.
[  457.116816][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.359560][T19334] netlink: 'syz.3.3670': attribute type 29 has an invalid length.
[  457.463687][T19368] netlink: 'syz.2.3681': attribute type 3 has an invalid length.
[  457.947163][T19393] wireguard: wg1: Could not create IPv4 socket
[  458.136000][T19404] IPv6: sit2: Disabled Multicast RS
[  458.329820][T19423] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  458.566561][T19443] syz_tun: entered allmulticast mode
[  458.681693][T19443] dvmrp8: entered allmulticast mode
[  458.737205][T19443] syz_tun: left allmulticast mode
[  458.945739][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5110 ms
[  458.953796][    C0] lec:lec_tx_timeout: lec0
[  459.142596][T19470] __nla_validate_parse: 16 callbacks suppressed
[  459.142617][T19470] netlink: 252 bytes leftover after parsing attributes in process `syz.1.3707'.
[  459.246397][T19424] netlink: 'syz.4.3697': attribute type 29 has an invalid length.
[  459.297211][T19428] netlink: 'syz.4.3697': attribute type 29 has an invalid length.
[  459.442400][T19492] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  459.461289][T19493] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  459.759897][T19508] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3715'.
[  459.792018][T19501] bond3 (unregistering): Released all slaves
[  459.832818][T19507] openvswitch: netlink: Flow actions attr not present in new flow.
[  459.855969][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.888149][T19510] openvswitch: netlink: Flow actions attr not present in new flow.
[  459.946476][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.446402][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.630516][T19550] netlink: 'syz.2.3725': attribute type 1 has an invalid length.
[  460.638388][T19550] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3725'.
[  460.666671][T19550] netlink: 658 bytes leftover after parsing attributes in process `syz.2.3725'.
[  460.706602][T19550] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3725'.
[  460.818776][T19562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3728'.
[  460.877816][T19563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.887588][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.899435][T19568] netlink: 'syz.0.3728': attribute type 1 has an invalid length.
[  460.959629][T19574] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3733'.
[  461.015827][T19574] netlink: 'syz.2.3733': attribute type 7 has an invalid length.
[  461.029522][T19574] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3733'.
[  461.164289][T19574] gretap0: entered promiscuous mode
[  461.292430][T15524] udevd[15524]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  461.325048][T14875] udevd[14875]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  461.391332][T19607] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3740'.
[  461.424287][T19607] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3740'.
[  461.429416][T19574] gretap0: left promiscuous mode
[  461.579646][T19609] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  461.707774][T19620] netlink: 'syz.1.3745': attribute type 25 has an invalid length.
[  461.744897][ T7218] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  461.745042][T19620] netlink: 'syz.1.3745': attribute type 25 has an invalid length.
[  461.764339][ T7218] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  461.776721][T19626] netlink: 'syz.2.3747': attribute type 13 has an invalid length.
[  461.823225][ T7218] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  461.869138][ T7218] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  461.948207][T19634] xt_CT: No such helper "pptp"
[  462.115250][T19654] netlink: 'syz.0.3755': attribute type 1 has an invalid length.
[  462.272950][T19660] wireguard0: entered promiscuous mode
[  462.287033][T19660] wireguard0: entered allmulticast mode
[  462.512648][T19678] veth5: entered promiscuous mode
[  462.769447][T19707] netlink: 'syz.1.3771': attribute type 1 has an invalid length.
[  462.782713][T19708] netdevsim netdevsim4: Direct firmware load for . failed with error -2
[  462.807338][T19708] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  462.911485][T19711] x_tables: unsorted underflow at hook 2
[  462.947410][T19715] sctp: [Deprecated]: syz.3.3774 (pid 19715) Use of int in max_burst socket option deprecated.
[  462.947410][T19715] Use struct sctp_assoc_value instead
[  463.089923][T19720] syzkaller0: entered promiscuous mode
[  463.100799][T19720] syzkaller0: entered allmulticast mode
[  463.273510][T19729] netlink: 'syz.1.3779': attribute type 1 has an invalid length.
[  463.429099][T19734] netlink: 'syz.0.3780': attribute type 13 has an invalid length.
[  464.588354][T19764] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  464.680276][T19776] tipc: Failed to remove unknown binding: 66,0,0/0:3241477891/3241477892
[  464.690413][T19776] tipc: Failed to remove unknown binding: 66,0,0/0:3241477891/3241477892
[  465.016150][T19785] Cannot find add_set index 0 as target
[  465.568419][T19773] __nla_validate_parse: 15 callbacks suppressed
[  465.568438][T19773] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3791'.
[  465.668852][ T5935] net_ratelimit: 3 callbacks suppressed
[  465.668872][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.698436][T19787] veth7: entered promiscuous mode
[  465.732333][T19787] FAULT_INJECTION: forcing a failure.
[  465.732333][T19787] name failslab, interval 1, probability 0, space 0, times 0
[  465.746212][T19792] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  465.761214][T19789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3796'.
[  465.767537][T19792] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  465.776285][T19787] CPU: 0 UID: 0 PID: 19787 Comm: syz.1.3795 Not tainted syzkaller #0 PREEMPT(full) 
[  465.776310][T19787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  465.776320][T19787] Call Trace:
[  465.776328][T19787]  <TASK>
[  465.776336][T19787]  dump_stack_lvl+0xe8/0x150
[  465.776363][T19787]  should_fail_ex+0x412/0x560
[  465.776388][T19787]  should_failslab+0xa8/0x100
[  465.776408][T19787]  kmem_cache_alloc_node_noprof+0x8b/0x6f0
[  465.776431][T19787]  ? __alloc_skb+0x193/0x390
[  465.776449][T19787]  ? __alloc_skb+0x1d7/0x390
[  465.776465][T19787]  ? __local_bh_enable_ip+0xd0/0x130
[  465.776482][T19787]  ? __alloc_skb+0x193/0x390
[  465.776500][T19787]  __alloc_skb+0x1d7/0x390
[  465.776522][T19787]  netlink_sendmsg+0x5d4/0xb40
[  465.776549][T19787]  ? __pfx_netlink_sendmsg+0x10/0x10
[  465.776569][T19787]  ? aa_sock_msg_perm+0xf1/0x1b0
[  465.776591][T19787]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  465.776610][T19787]  ? __pfx_netlink_sendmsg+0x10/0x10
[  465.776626][T19787]  ____sys_sendmsg+0xa68/0xad0
[  465.776647][T19787]  ? __might_fault+0xaf/0x130
[  465.776674][T19787]  ? __pfx_____sys_sendmsg+0x10/0x10
[  465.776703][T19787]  ? import_iovec+0x73/0xa0
[  465.776728][T19787]  ___sys_sendmsg+0x2a5/0x360
[  465.776747][T19787]  ? __lock_acquire+0x6b5/0x2cf0
[  465.776773][T19787]  ? __pfx____sys_sendmsg+0x10/0x10
[  465.776824][T19787]  ? __fget_files+0x2a/0x420
[  465.776841][T19787]  ? __fget_files+0x3a0/0x420
[  465.776873][T19787]  __x64_sys_sendmsg+0x1bd/0x2a0
[  465.776896][T19787]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  465.776924][T19787]  ? __pfx_ksys_write+0x10/0x10
[  465.776956][T19787]  do_syscall_64+0xe2/0xf80
[  465.776974][T19787]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.776989][T19787]  ? trace_irq_disable+0x37/0x100
[  465.777005][T19787]  ? clear_bhb_loop+0x60/0xb0
[  465.777024][T19787]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.777040][T19787] RIP: 0033:0x7f115159aeb9
[  465.777057][T19787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  465.777071][T19787] RSP: 002b:00007f11524ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  465.777089][T19787] RAX: ffffffffffffffda RBX: 00007f1151815fa0 RCX: 00007f115159aeb9
[  465.777101][T19787] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000008
[  465.777111][T19787] RBP: 00007f11524ee090 R08: 0000000000000000 R09: 0000000000000000
[  465.777121][T19787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  465.777131][T19787] R13: 00007f1151816038 R14: 00007f1151815fa0 R15: 00007ffde1123418
[  465.777160][T19787]  </TASK>
[  465.815230][T19797] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3796'.
[  465.826787][T19794] netlink: 284 bytes leftover after parsing attributes in process `syz.3.3799'.
[  465.829357][ T5831] Bluetooth: hci0: command 0x040f tx timeout
[  466.147869][T19800] bridge1: port 1(veth0_to_bond) entered blocking state
[  466.174668][T19800] bridge1: port 1(veth0_to_bond) entered disabled state
[  466.213606][T19800] veth0_to_bond: entered allmulticast mode
[  466.221766][T19800] veth0_to_bond: entered promiscuous mode
[  466.791161][T19850] openvswitch: netlink: IP tunnel dst address not specified
[  466.804677][T19850] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  466.906006][T19852] gtp0: entered promiscuous mode
[  466.915148][T19852] gtp0: entered allmulticast mode
[  467.410913][T19889] `: entered promiscuous mode
[  467.433055][T19889] bond_slave_0: entered promiscuous mode
[  467.441690][T19889] bond_slave_1: entered promiscuous mode
[  467.470272][T19889] validate_nla: 3 callbacks suppressed
[  467.470288][T19889] netlink: 'syz.1.3825': attribute type 3 has an invalid length.
[  467.558494][T19896] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  467.625160][T19903] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3828'.
[  467.865870][T19917] netlink: 9896 bytes leftover after parsing attributes in process `syz.1.3835'.
[  467.981439][T19928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3838'.
[  468.000071][T19928] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3838'.
[  468.037014][T19928] netlink: 'syz.1.3838': attribute type 5 has an invalid length.
[  468.142206][T19937] syzkaller1: entered promiscuous mode
[  468.148772][T19937] syzkaller1: entered allmulticast mode
[  468.205143][T19943] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  468.458643][T19953] veth3: entered promiscuous mode
[  468.480607][T19953] FAULT_INJECTION: forcing a failure.
[  468.480607][T19953] name failslab, interval 1, probability 0, space 0, times 0
[  468.504022][T19955] xt_l2tp: v2 doesn't support IP mode
[  468.509680][T19953] CPU: 0 UID: 0 PID: 19953 Comm: syz.0.3847 Not tainted syzkaller #0 PREEMPT(full) 
[  468.509706][T19953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  468.509716][T19953] Call Trace:
[  468.509724][T19953]  <TASK>
[  468.509731][T19953]  dump_stack_lvl+0xe8/0x150
[  468.509758][T19953]  should_fail_ex+0x412/0x560
[  468.509783][T19953]  should_failslab+0xa8/0x100
[  468.509804][T19953]  __kmalloc_cache_noprof+0x83/0x6e0
[  468.509820][T19953]  ? __pfx_stack_trace_save+0x10/0x10
[  468.509848][T19953]  ? rtnl_newlink+0x136/0x1be0
[  468.509872][T19953]  rtnl_newlink+0x136/0x1be0
[  468.509892][T19953]  ? kasan_save_track+0x4f/0x80
[  468.509907][T19953]  ? kasan_save_track+0x3e/0x80
[  468.509921][T19953]  ? kasan_save_free_info+0x46/0x50
[  468.509940][T19953]  ? __kasan_slab_free+0x5c/0x80
[  468.509955][T19953]  ? kmem_cache_free+0x195/0x610
[  468.509972][T19953]  ? __dev_queue_xmit+0x168f/0x3850
[  468.509993][T19953]  ? __netlink_deliver_tap+0x5ad/0x850
[  468.510009][T19953]  ? netlink_deliver_tap+0x19c/0x1b0
[  468.510023][T19953]  ? netlink_unicast+0x7e3/0x9b0
[  468.510041][T19953]  ? netlink_sendmsg+0x813/0xb40
[  468.510058][T19953]  ? __pfx_rtnl_newlink+0x10/0x10
[  468.510073][T19953]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.510122][T19953]  ? kasan_quarantine_put+0xbb/0x1f0
[  468.510145][T19953]  ? lockdep_hardirqs_on+0x7a/0x110
[  468.510163][T19953]  ? kmem_cache_free+0x195/0x610
[  468.510177][T19953]  ? nlmon_xmit+0xb0/0x100
[  468.510204][T19953]  ? __lock_acquire+0x6b5/0x2cf0
[  468.510234][T19953]  ? __local_bh_enable_ip+0xd0/0x130
[  468.510250][T19953]  ? lockdep_hardirqs_on+0x7a/0x110
[  468.510265][T19953]  ? __dev_queue_xmit+0x274/0x3850
[  468.510285][T19953]  ? __local_bh_enable_ip+0xd0/0x130
[  468.510299][T19953]  ? __dev_queue_xmit+0x274/0x3850
[  468.510326][T19953]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  468.510357][T19953]  ? __pfx_rtnl_newlink+0x10/0x10
[  468.510374][T19953]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  468.510395][T19953]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  468.510413][T19953]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  468.510430][T19953]  ? ref_tracker_free+0x693/0x840
[  468.510447][T19953]  ? __copy_skb_header+0xa3/0x4a0
[  468.510470][T19953]  ? __pfx_ref_tracker_free+0x10/0x10
[  468.510498][T19953]  netlink_rcv_skb+0x232/0x4b0
[  468.510517][T19953]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  468.510536][T19953]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  468.510563][T19953]  ? netlink_deliver_tap+0x2e/0x1b0
[  468.510586][T19953]  netlink_unicast+0x80f/0x9b0
[  468.510616][T19953]  ? __pfx_netlink_unicast+0x10/0x10
[  468.510637][T19953]  ? __alloc_skb+0x193/0x390
[  468.510656][T19953]  ? netlink_sendmsg+0x650/0xb40
[  468.510674][T19953]  ? skb_put+0x11b/0x210
[  468.510696][T19953]  netlink_sendmsg+0x813/0xb40
[  468.510721][T19953]  ? __pfx_netlink_sendmsg+0x10/0x10
[  468.510741][T19953]  ? aa_sock_msg_perm+0xf1/0x1b0
[  468.510763][T19953]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  468.510782][T19953]  ? __pfx_netlink_sendmsg+0x10/0x10
[  468.510797][T19953]  ____sys_sendmsg+0xa68/0xad0
[  468.510817][T19953]  ? __might_fault+0xaf/0x130
[  468.510851][T19953]  ? __pfx_____sys_sendmsg+0x10/0x10
[  468.510879][T19953]  ? import_iovec+0x73/0xa0
[  468.510904][T19953]  ___sys_sendmsg+0x2a5/0x360
[  468.510923][T19953]  ? __lock_acquire+0x6b5/0x2cf0
[  468.510947][T19953]  ? __pfx____sys_sendmsg+0x10/0x10
[  468.510998][T19953]  ? __fget_files+0x2a/0x420
[  468.511015][T19953]  ? __fget_files+0x3a0/0x420
[  468.511042][T19953]  __x64_sys_sendmsg+0x1bd/0x2a0
[  468.511064][T19953]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  468.511094][T19953]  ? __pfx_ksys_write+0x10/0x10
[  468.511126][T19953]  do_syscall_64+0xe2/0xf80
[  468.511143][T19953]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.511159][T19953]  ? clear_bhb_loop+0x60/0xb0
[  468.511179][T19953]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.511195][T19953] RIP: 0033:0x7f22e459aeb9
[  468.511211][T19953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  468.511225][T19953] RSP: 002b:00007f22e54f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  468.511243][T19953] RAX: ffffffffffffffda RBX: 00007f22e4815fa0 RCX: 00007f22e459aeb9
[  468.511255][T19953] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000008
[  468.511266][T19953] RBP: 00007f22e54f2090 R08: 0000000000000000 R09: 0000000000000000
[  468.511276][T19953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  468.511286][T19953] R13: 00007f22e4816038 R14: 00007f22e4815fa0 R15: 00007fffff9559c8
[  468.511313][T19953]  </TASK>
[  469.283774][T19986] veth3: entered promiscuous mode
[  469.495490][T20001] ip6gre1: entered allmulticast mode
[  469.629441][T20003] veth5: entered promiscuous mode
[  469.652830][T20011] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3871'.
[  469.767104][T20013] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  469.860301][T20021] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  470.031752][T20031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3877'.
[  470.125384][T20031] veth17: entered promiscuous mode
[  470.176656][T20049] netlink: 'syz.0.3885': attribute type 10 has an invalid length.
[  470.208584][T20051] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  470.244475][T20049] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  470.319721][T20052] veth9: entered promiscuous mode
[  470.371934][T20052] FAULT_INJECTION: forcing a failure.
[  470.371934][T20052] name failslab, interval 1, probability 0, space 0, times 0
[  470.387202][T20052] CPU: 1 UID: 0 PID: 20052 Comm: syz.1.3884 Not tainted syzkaller #0 PREEMPT(full) 
[  470.387228][T20052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  470.387239][T20052] Call Trace:
[  470.387245][T20052]  <TASK>
[  470.387253][T20052]  dump_stack_lvl+0xe8/0x150
[  470.387281][T20052]  should_fail_ex+0x412/0x560
[  470.387306][T20052]  should_failslab+0xa8/0x100
[  470.387327][T20052]  kmem_cache_alloc_lru_noprof+0x8c/0x6c0
[  470.387357][T20052]  ? __d_alloc+0x37/0x6f0
[  470.387381][T20052]  __d_alloc+0x37/0x6f0
[  470.387407][T20052]  d_alloc+0x4b/0x190
[  470.387423][T20052]  ? lookup_one_qstr_excl+0xc8/0x360
[  470.387446][T20052]  lookup_one_qstr_excl+0xdc/0x360
[  470.387465][T20052]  ? lookup_noperm_common+0x245/0x430
[  470.387486][T20052]  start_dirop+0x5c/0x90
[  470.387507][T20052]  simple_start_creating+0xcc/0x110
[  470.387527][T20052]  ? __pfx_simple_start_creating+0x10/0x10
[  470.387547][T20052]  ? do_raw_spin_unlock+0xf5/0x210
[  470.387566][T20052]  ? mntput+0x65/0xc0
[  470.387592][T20052]  debugfs_start_creating+0xdb/0x1a0
[  470.387612][T20052]  __debugfs_create_file+0x6f/0x400
[  470.387635][T20052]  debugfs_create_file_full+0x3f/0x60
[  470.387655][T20052]  ref_tracker_dir_debugfs+0x197/0x360
[  470.387675][T20052]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  470.387718][T20052]  ? trace_kmalloc+0x1f/0xb0
[  470.387738][T20052]  ? __kvmalloc_node_noprof+0x5ba/0x8d0
[  470.387760][T20052]  ? __raw_spin_lock_init+0x45/0x100
[  470.387782][T20052]  alloc_netdev_mqs+0x272/0x11b0
[  470.387804][T20052]  ? __pfx_ppp_setup+0x10/0x10
[  470.387827][T20052]  rtnl_create_link+0x31f/0xd70
[  470.387849][T20052]  rtnl_newlink_create+0x277/0xb70
[  470.387872][T20052]  ? __mutex_lock+0x5ac/0x1300
[  470.387895][T20052]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  470.387918][T20052]  ? __pfx___mutex_lock+0x10/0x10
[  470.387946][T20052]  ? ns_capable+0x89/0xe0
[  470.387964][T20052]  rtnl_newlink+0x1666/0x1be0
[  470.387994][T20052]  ? __pfx_rtnl_newlink+0x10/0x10
[  470.388008][T20052]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.388055][T20052]  ? kasan_quarantine_put+0xbb/0x1f0
[  470.388077][T20052]  ? lockdep_hardirqs_on+0x7a/0x110
[  470.388095][T20052]  ? kmem_cache_free+0x195/0x610
[  470.388109][T20052]  ? nlmon_xmit+0xb0/0x100
[  470.388136][T20052]  ? __lock_acquire+0x6b5/0x2cf0
[  470.388167][T20052]  ? __local_bh_enable_ip+0xd0/0x130
[  470.388183][T20052]  ? lockdep_hardirqs_on+0x7a/0x110
[  470.388199][T20052]  ? __dev_queue_xmit+0x274/0x3850
[  470.388219][T20052]  ? __local_bh_enable_ip+0xd0/0x130
[  470.388233][T20052]  ? __dev_queue_xmit+0x274/0x3850
[  470.388260][T20052]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  470.388294][T20052]  ? __pfx_rtnl_newlink+0x10/0x10
[  470.388312][T20052]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  470.388335][T20052]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  470.388353][T20052]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  470.388370][T20052]  ? ref_tracker_free+0x693/0x840
[  470.388389][T20052]  ? __copy_skb_header+0xa3/0x4a0
[  470.388412][T20052]  ? __pfx_ref_tracker_free+0x10/0x10
[  470.388443][T20052]  netlink_rcv_skb+0x232/0x4b0
[  470.388463][T20052]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  470.388483][T20052]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  470.388514][T20052]  ? netlink_deliver_tap+0x2e/0x1b0
[  470.388540][T20052]  netlink_unicast+0x80f/0x9b0
[  470.388573][T20052]  ? __pfx_netlink_unicast+0x10/0x10
[  470.388599][T20052]  ? __alloc_skb+0x193/0x390
[  470.388618][T20052]  ? netlink_sendmsg+0x650/0xb40
[  470.388634][T20052]  ? skb_put+0x11b/0x210
[  470.388658][T20052]  netlink_sendmsg+0x813/0xb40
[  470.388686][T20052]  ? __pfx_netlink_sendmsg+0x10/0x10
[  470.388708][T20052]  ? aa_sock_msg_perm+0xf1/0x1b0
[  470.388735][T20052]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  470.388759][T20052]  ? __pfx_netlink_sendmsg+0x10/0x10
[  470.388776][T20052]  ____sys_sendmsg+0xa68/0xad0
[  470.388797][T20052]  ? __might_fault+0xaf/0x130
[  470.388824][T20052]  ? __pfx_____sys_sendmsg+0x10/0x10
[  470.388851][T20052]  ? import_iovec+0x73/0xa0
[  470.388879][T20052]  ___sys_sendmsg+0x2a5/0x360
[  470.388898][T20052]  ? __lock_acquire+0x6b5/0x2cf0
[  470.388924][T20052]  ? __pfx____sys_sendmsg+0x10/0x10
[  470.388980][T20052]  ? __fget_files+0x2a/0x420
[  470.388996][T20052]  ? __fget_files+0x3a0/0x420
[  470.389025][T20052]  __x64_sys_sendmsg+0x1bd/0x2a0
[  470.389047][T20052]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  470.389078][T20052]  ? __pfx_ksys_write+0x10/0x10
[  470.389114][T20052]  do_syscall_64+0xe2/0xf80
[  470.389132][T20052]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.389150][T20052]  ? trace_irq_disable+0x37/0x100
[  470.389165][T20052]  ? clear_bhb_loop+0x60/0xb0
[  470.389184][T20052]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.389201][T20052] RIP: 0033:0x7f115159aeb9
[  470.389219][T20052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  470.389232][T20052] RSP: 002b:00007f11524ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  470.389251][T20052] RAX: ffffffffffffffda RBX: 00007f1151815fa0 RCX: 00007f115159aeb9
[  470.389264][T20052] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000008
[  470.389275][T20052] RBP: 00007f11524ee090 R08: 0000000000000000 R09: 0000000000000000
[  470.389285][T20052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  470.389295][T20052] R13: 00007f1151816038 R14: 00007f1151815fa0 R15: 00007ffde1123418
[  470.389326][T20052]  </TASK>
[  470.941229][T20069] __nla_validate_parse: 4 callbacks suppressed
[  470.941248][T20069] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3890'.
[  471.229937][T20077] bond3: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[  471.245481][T20077] bond3: entered promiscuous mode
[  471.251229][T20077] bond3: entered allmulticast mode
[  471.257475][T20077] 8021q: adding VLAN 0 to HW filter on device bond3
[  471.428881][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.437762][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.447195][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.456756][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.497986][T20105] veth7: entered promiscuous mode
[  471.574793][T20110] lo: Caught tx_queue_len zero misconfig
[  471.794493][T20124] veth9: entered promiscuous mode
[  471.803927][T20130] xt_CT: You must specify a L4 protocol and not use inversions on it
[  471.813513][T20127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3904'.
[  471.841037][T20127] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  471.849157][T20124] FAULT_INJECTION: forcing a failure.
[  471.849157][T20124] name failslab, interval 1, probability 0, space 0, times 0
[  471.886884][T20124] CPU: 1 UID: 0 PID: 20124 Comm: syz.3.3903 Not tainted syzkaller #0 PREEMPT(full) 
[  471.886912][T20124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  471.886923][T20124] Call Trace:
[  471.886930][T20124]  <TASK>
[  471.886938][T20124]  dump_stack_lvl+0xe8/0x150
[  471.886965][T20124]  should_fail_ex+0x412/0x560
[  471.886992][T20124]  should_failslab+0xa8/0x100
[  471.887014][T20124]  kmem_cache_alloc_lru_noprof+0x8c/0x6c0
[  471.887039][T20124]  ? __d_alloc+0x37/0x6f0
[  471.887064][T20124]  __d_alloc+0x37/0x6f0
[  471.887090][T20124]  d_alloc+0x4b/0x190
[  471.887107][T20124]  ? lookup_one_qstr_excl+0xc8/0x360
[  471.887130][T20124]  lookup_one_qstr_excl+0xdc/0x360
[  471.887150][T20124]  ? lookup_noperm_common+0x245/0x430
[  471.887172][T20124]  start_dirop+0x5c/0x90
[  471.887192][T20124]  simple_start_creating+0xcc/0x110
[  471.887212][T20124]  ? __pfx_simple_start_creating+0x10/0x10
[  471.887233][T20124]  ? do_raw_spin_unlock+0xf5/0x210
[  471.887252][T20124]  ? mntput+0x65/0xc0
[  471.887280][T20124]  debugfs_start_creating+0xdb/0x1a0
[  471.887313][T20124]  __debugfs_create_file+0x6f/0x400
[  471.887338][T20124]  debugfs_create_file_full+0x3f/0x60
[  471.887361][T20124]  ref_tracker_dir_debugfs+0x197/0x360
[  471.887382][T20124]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  471.887431][T20124]  ? trace_kmalloc+0x1f/0xb0
[  471.887445][T20124]  ? __kvmalloc_node_noprof+0x5ba/0x8d0
[  471.887468][T20124]  ? __raw_spin_lock_init+0x45/0x100
[  471.887489][T20124]  alloc_netdev_mqs+0x272/0x11b0
[  471.887512][T20124]  ? __pfx_ppp_setup+0x10/0x10
[  471.887534][T20124]  rtnl_create_link+0x31f/0xd70
[  471.887557][T20124]  rtnl_newlink_create+0x277/0xb70
[  471.887584][T20124]  ? __mutex_lock+0x5ac/0x1300
[  471.887608][T20124]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  471.887633][T20124]  ? __pfx___mutex_lock+0x10/0x10
[  471.887662][T20124]  ? ns_capable+0x89/0xe0
[  471.887681][T20124]  rtnl_newlink+0x1666/0x1be0
[  471.887716][T20124]  ? __pfx_rtnl_newlink+0x10/0x10
[  471.887733][T20124]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.887789][T20124]  ? kasan_quarantine_put+0xbb/0x1f0
[  471.887811][T20124]  ? lockdep_hardirqs_on+0x7a/0x110
[  471.887834][T20124]  ? kmem_cache_free+0x195/0x610
[  471.887850][T20124]  ? nlmon_xmit+0xb0/0x100
[  471.887879][T20124]  ? __lock_acquire+0x6b5/0x2cf0
[  471.887910][T20124]  ? __local_bh_enable_ip+0xd0/0x130
[  471.887926][T20124]  ? lockdep_hardirqs_on+0x7a/0x110
[  471.887943][T20124]  ? __dev_queue_xmit+0x274/0x3850
[  471.887963][T20124]  ? __local_bh_enable_ip+0xd0/0x130
[  471.887977][T20124]  ? __dev_queue_xmit+0x274/0x3850
[  471.888006][T20124]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  471.888040][T20124]  ? __pfx_rtnl_newlink+0x10/0x10
[  471.888058][T20124]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  471.888080][T20124]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  471.888097][T20124]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  471.888114][T20124]  ? ref_tracker_free+0x693/0x840
[  471.888131][T20124]  ? __copy_skb_header+0xa3/0x4a0
[  471.888153][T20124]  ? __pfx_ref_tracker_free+0x10/0x10
[  471.888181][T20124]  netlink_rcv_skb+0x232/0x4b0
[  471.888200][T20124]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  471.888220][T20124]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  471.888247][T20124]  ? netlink_deliver_tap+0x2e/0x1b0
[  471.888273][T20124]  netlink_unicast+0x80f/0x9b0
[  471.888312][T20124]  ? __pfx_netlink_unicast+0x10/0x10
[  471.888333][T20124]  ? __alloc_skb+0x193/0x390
[  471.888350][T20124]  ? netlink_sendmsg+0x650/0xb40
[  471.888364][T20124]  ? skb_put+0x11b/0x210
[  471.888385][T20124]  netlink_sendmsg+0x813/0xb40
[  471.888410][T20124]  ? __pfx_netlink_sendmsg+0x10/0x10
[  471.888430][T20124]  ? aa_sock_msg_perm+0xf1/0x1b0
[  471.888451][T20124]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  471.888471][T20124]  ? __pfx_netlink_sendmsg+0x10/0x10
[  471.888488][T20124]  ____sys_sendmsg+0xa68/0xad0
[  471.888508][T20124]  ? __might_fault+0xaf/0x130
[  471.888536][T20124]  ? __pfx_____sys_sendmsg+0x10/0x10
[  471.888565][T20124]  ? import_iovec+0x73/0xa0
[  471.888591][T20124]  ___sys_sendmsg+0x2a5/0x360
[  471.888611][T20124]  ? __lock_acquire+0x6b5/0x2cf0
[  471.888636][T20124]  ? __pfx____sys_sendmsg+0x10/0x10
[  471.888693][T20124]  ? __fget_files+0x2a/0x420
[  471.888709][T20124]  ? __fget_files+0x3a0/0x420
[  471.888738][T20124]  __x64_sys_sendmsg+0x1bd/0x2a0
[  471.888759][T20124]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  471.888787][T20124]  ? __pfx_ksys_write+0x10/0x10
[  471.888821][T20124]  do_syscall_64+0xe2/0xf80
[  471.888839][T20124]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.888855][T20124]  ? clear_bhb_loop+0x60/0xb0
[  471.888876][T20124]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.888892][T20124] RIP: 0033:0x7fb12179aeb9
[  471.888909][T20124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  471.888922][T20124] RSP: 002b:00007fb12262c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  471.888942][T20124] RAX: ffffffffffffffda RBX: 00007fb121a15fa0 RCX: 00007fb12179aeb9
[  471.888954][T20124] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000008
[  471.888965][T20124] RBP: 00007fb12262c090 R08: 0000000000000000 R09: 0000000000000000
[  471.888975][T20124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  471.888985][T20124] R13: 00007fb121a16038 R14: 00007fb121a15fa0 R15: 00007ffce3a6ee28
[  471.889016][T20124]  </TASK>
[  471.890810][T20133] syzkaller0: entered promiscuous mode
[  472.445427][T20133] syzkaller0: entered allmulticast mode
[  472.583462][T20150] netlink: 'syz.2.3912': attribute type 1 has an invalid length.
[  472.682353][T20150] 8021q: adding VLAN 0 to HW filter on device bond4
[  472.890897][T20158] bond4: (slave veth7): Enslaving as an active interface with a down link
[  472.919411][T20163] vlan2: entered allmulticast mode
[  472.939572][T20163] veth1: entered allmulticast mode
[  472.946659][T20163] veth1: entered promiscuous mode
[  472.955695][T20163] veth1: left promiscuous mode
[  472.977242][T20175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.978159][T20163] bond4: (slave vlan2): making interface the new active one
[  472.993814][T20163] veth1: entered promiscuous mode
[  473.003465][T20175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  473.023005][T20163] vlan2: entered promiscuous mode
[  473.049885][T20163] bond4: (slave vlan2): Enslaving as an active interface with an up link
[  473.060561][T20175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  473.105465][T20175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  473.123779][T20178] 
[  473.126147][T20178] ======================================================
[  473.133170][T20178] WARNING: possible circular locking dependency detected
[  473.140209][T20178] syzkaller #0 Not tainted
[  473.143289][T20175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  473.144621][T20178] ------------------------------------------------------
[  473.144631][T20178] syz.3.3916/20178 is trying to acquire lock:
[  473.144643][T20178] ffffffff8fb28538 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xbe/0x860
[  473.175252][T20178] 
[  473.175252][T20178] but task is already holding lock:
[  473.176684][T20175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  473.182612][T20178] ffffffff8fb284d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860
[  473.200404][T20178] 
[  473.200404][T20178] which lock already depends on the new lock.
[  473.200404][T20178] 
[  473.210813][T20178] 
[  473.210813][T20178] the existing dependency chain (in reverse order) is:
[  473.219839][T20178] 
[  473.219839][T20178] -> #2 (nr_neigh_list_lock){+...}-{3:3}:
[  473.227783][T20178]        _raw_spin_lock_bh+0x36/0x50
[  473.233088][T20178]        nr_rt_ioctl+0x40c/0xf90
[  473.238041][T20178]        sock_do_ioctl+0x101/0x320
[  473.243145][T20178]        sock_ioctl+0x5c6/0x7f0
[  473.247989][T20178]        __se_sys_ioctl+0xfc/0x170
[  473.253096][T20178]        do_syscall_64+0xe2/0xf80
[  473.258106][T20178]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.264511][T20178] 
[  473.264511][T20178] -> #1 (&nr_node->node_lock){+...}-{3:3}:
[  473.272507][T20178]        _raw_spin_lock_bh+0x36/0x50
[  473.277794][T20178]        nr_rt_ioctl+0x215/0xf90
[  473.282898][T20178]        sock_do_ioctl+0x101/0x320
[  473.288002][T20178]        sock_ioctl+0x5c6/0x7f0
[  473.292849][T20178]        __se_sys_ioctl+0xfc/0x170
[  473.297979][T20178]        do_syscall_64+0xe2/0xf80
[  473.302993][T20178]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.309394][T20178] 
[  473.309394][T20178] -> #0 (nr_node_list_lock){+...}-{3:3}:
[  473.317209][T20178]        __lock_acquire+0x15a5/0x2cf0
[  473.322578][T20178]        lock_acquire+0x106/0x330
[  473.327594][T20178]        _raw_spin_lock_bh+0x36/0x50
[  473.332878][T20178]        nr_rt_device_down+0xbe/0x860
[  473.338242][T20178]        nr_device_event+0x137/0x150
[  473.343517][T20178]        notifier_call_chain+0x19d/0x3a0
[  473.349136][T20178]        __dev_notify_flags+0x16d/0x310
[  473.354682][T20178]        netif_change_flags+0xe8/0x1a0
[  473.360151][T20178]        dev_change_flags+0x130/0x260
[  473.365514][T20178]        dev_ioctl+0x7b4/0x1150
[  473.370356][T20178]        sock_do_ioctl+0x23e/0x320
[  473.375463][T20178]        sock_ioctl+0x5c6/0x7f0
[  473.380304][T20178]        __se_sys_ioctl+0xfc/0x170
[  473.385416][T20178]        do_syscall_64+0xe2/0xf80
[  473.390430][T20178]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.396835][T20178] 
[  473.396835][T20178] other info that might help us debug this:
[  473.396835][T20178] 
[  473.407051][T20178] Chain exists of:
[  473.407051][T20178]   nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock
[  473.407051][T20178] 
[  473.420874][T20178]  Possible unsafe locking scenario:
[  473.420874][T20178] 
[  473.428320][T20178]        CPU0                    CPU1
[  473.433782][T20178]        ----                    ----
[  473.439171][T20178]   lock(nr_neigh_list_lock);
[  473.443838][T20178]                                lock(&nr_node->node_lock);
[  473.451109][T20178]                                lock(nr_neigh_list_lock);
[  473.458297][T20178]   lock(nr_node_list_lock);
[  473.462888][T20178] 
[  473.462888][T20178]  *** DEADLOCK ***
[  473.462888][T20178] 
[  473.471017][T20178] 2 locks held by syz.3.3916/20178:
[  473.476200][T20178]  #0: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  473.484983][T20178]  #1: ffffffff8fb284d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860
[  473.494981][T20178] 
[  473.494981][T20178] stack backtrace:
[  473.500857][T20178] CPU: 1 UID: 0 PID: 20178 Comm: syz.3.3916 Not tainted syzkaller #0 PREEMPT(full) 
[  473.500876][T20178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  473.500886][T20178] Call Trace:
[  473.500894][T20178]  <TASK>
[  473.500902][T20178]  dump_stack_lvl+0xe8/0x150
[  473.500924][T20178]  print_circular_bug+0x2e1/0x300
[  473.500942][T20178]  check_noncircular+0x12e/0x150
[  473.500960][T20178]  __lock_acquire+0x15a5/0x2cf0
[  473.500983][T20178]  ? __lock_acquire+0x6b5/0x2cf0
[  473.501003][T20178]  ? dsa_user_netdevice_event+0x495/0x2850
[  473.501020][T20178]  ? nr_rt_device_down+0xbe/0x860
[  473.501040][T20178]  lock_acquire+0x106/0x330
[  473.501058][T20178]  ? nr_rt_device_down+0xbe/0x860
[  473.501078][T20178]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  473.501096][T20178]  ? nr_rt_device_down+0xbe/0x860
[  473.501115][T20178]  _raw_spin_lock_bh+0x36/0x50
[  473.501136][T20178]  ? nr_rt_device_down+0xbe/0x860
[  473.501155][T20178]  nr_rt_device_down+0xbe/0x860
[  473.501178][T20178]  nr_device_event+0x137/0x150
[  473.501196][T20178]  notifier_call_chain+0x19d/0x3a0
[  473.501214][T20178]  __dev_notify_flags+0x16d/0x310
[  473.501235][T20178]  ? __pfx___dev_notify_flags+0x10/0x10
[  473.501252][T20178]  ? __dev_change_flags+0x4c6/0x690
[  473.501271][T20178]  ? __pfx___dev_change_flags+0x10/0x10
[  473.501290][T20178]  ? full_name_hash+0x92/0xe0
[  473.501308][T20178]  netif_change_flags+0xe8/0x1a0
[  473.501328][T20178]  dev_change_flags+0x130/0x260
[  473.501352][T20178]  dev_ioctl+0x7b4/0x1150
[  473.501370][T20178]  sock_do_ioctl+0x23e/0x320
[  473.501385][T20178]  ? __pfx_sock_do_ioctl+0x10/0x10
[  473.501398][T20178]  ? do_futex+0x395/0x420
[  473.501423][T20178]  sock_ioctl+0x5c6/0x7f0
[  473.501444][T20178]  ? __pfx_sock_ioctl+0x10/0x10
[  473.501464][T20178]  ? __fget_files+0x2a/0x420
[  473.501480][T20178]  ? __fget_files+0x3a0/0x420
[  473.501495][T20178]  ? __fget_files+0x2a/0x420
[  473.501512][T20178]  ? bpf_lsm_file_ioctl+0x9/0x20
[  473.501529][T20178]  ? __pfx_sock_ioctl+0x10/0x10
[  473.501549][T20178]  __se_sys_ioctl+0xfc/0x170
[  473.501570][T20178]  do_syscall_64+0xe2/0xf80
[  473.501586][T20178]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.501600][T20178]  ? trace_irq_disable+0x37/0x100
[  473.501615][T20178]  ? clear_bhb_loop+0x60/0xb0
[  473.501632][T20178]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.501647][T20178] RIP: 0033:0x7fb12179aeb9
[  473.501661][T20178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  473.501675][T20178] RSP: 002b:00007fb12260b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  473.501692][T20178] RAX: ffffffffffffffda RBX: 00007fb121a16090 RCX: 00007fb12179aeb9
[  473.501703][T20178] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000006
[  473.501714][T20178] RBP: 00007fb121808c1f R08: 0000000000000000 R09: 0000000000000000
[  473.501723][T20178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  473.501733][T20178] R13: 00007fb121a16128 R14: 00007fb121a16090 R15: 00007ffce3a6ee28
[  473.501750][T20178]  </TASK>
[  473.829169][ T5831] Bluetooth: hci0: command 0x040f tx timeout
[  473.855261][T20186] vcan0: entered promiscuous mode
[  473.866200][T20186] vcan0: entered allmulticast mode
[  475.906237][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  477.987341][ T5834] Bluetooth: hci5: command 0x0406 tx timeout
[  478.466449][ T5869] net_ratelimit: 3 callbacks suppressed
[  478.466467][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  478.480736][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  481.676370][   T11] block nbd1: Possible stuck request ffff888025b50000: control (read@0,1024B). Runtime 120 seconds
[  481.687464][   T11] block nbd1: Possible stuck request ffff888025b50200: control (read@1024,1024B). Runtime 120 seconds
[  481.698934][   T11] block nbd1: Possible stuck request ffff888025b50400: control (read@2048,1024B). Runtime 120 seconds
[  481.710238][   T11] block nbd1: Possible stuck request ffff888025b50600: control (read@3072,1024B). Runtime 120 seconds