last executing test programs:

7.953021611s ago: executing program 1 (id=151):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b30300000000a9"], 0x0, 0xf, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f00000006c0)="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", &(0x7f0000000000)=""/9, 0x2}, 0x20)

7.844423249s ago: executing program 1 (id=153):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000840)=[{0x30, 0x93, 0x3, 0xfffff030}, {0x87, 0x0, 0x0, 0x1}]})

7.484019108s ago: executing program 1 (id=155):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={<r3=>r0, 0x4, 0x401, 0x5})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x94)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0xf, &(0x7f0000000380)=0x1, 0x2a)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r4}, 0x10)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
close(r7)
socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000c40)={0x2, 0x10008, 0x8, 0x9, r9}, &(0x7f0000000c80)=0x10)
accept4$rose(r2, 0x0, 0x0, 0x800)
close(r0)

6.492356236s ago: executing program 1 (id=168):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$sock(r1, 0x0, 0x0, 0x80)

6.459132309s ago: executing program 1 (id=169):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000140)={0x0, 0x6, 0x4, 0x0, 0x0, 0x2, 0x0, 0xfe, 0x0, 0x0, 0xfa, 0x0, 0x1}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000240))
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x2, 0xfff}, 0x8)

5.288131583s ago: executing program 1 (id=175):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0x26, &(0x7f0000000680)=ANY=[@ANYBLOB="180000012c1c70240000000080590000c08c18060000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000005dc70600fcffffff1801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001787f4ff10000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @tracing=0x17, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0xb, 0xaf46, 0x10001}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000500)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000540)=[{0x0, 0x2, 0x8, 0x4}, {0x3, 0x2, 0xf, 0x5}, {0x1, 0x2, 0xc}, {0x3, 0x1, 0x5, 0x3}, {0x0, 0x5, 0xd, 0x5}], 0x10, 0x8, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000760000000000000027000000000000009500696b00000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37)
close(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xa8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@private=0xa010100, @in=@multicast2, 0x0, 0x1, 0x4e21, 0x0, 0xa}, {0x0, 0x5, 0x6, 0x80, 0x0, 0x0, 0xffffdffffffffffd}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@broadcast, 0x0, 0x2b}, 0x0, @in6=@private1, 0x0, 0x0, 0x1}}, 0xe8)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @loopback, 0xfcb}, 0x1c)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20)

5.014118642s ago: executing program 32 (id=175):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0x26, &(0x7f0000000680)=ANY=[@ANYBLOB="180000012c1c70240000000080590000c08c18060000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000005dc70600fcffffff1801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001787f4ff10000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @tracing=0x17, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0xb, 0xaf46, 0x10001}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000500)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000540)=[{0x0, 0x2, 0x8, 0x4}, {0x3, 0x2, 0xf, 0x5}, {0x1, 0x2, 0xc}, {0x3, 0x1, 0x5, 0x3}, {0x0, 0x5, 0xd, 0x5}], 0x10, 0x8, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000760000000000000027000000000000009500696b00000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37)
close(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xa8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@private=0xa010100, @in=@multicast2, 0x0, 0x1, 0x4e21, 0x0, 0xa}, {0x0, 0x5, 0x6, 0x80, 0x0, 0x0, 0xffffdffffffffffd}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@broadcast, 0x0, 0x2b}, 0x0, @in6=@private1, 0x0, 0x0, 0x1}}, 0xe8)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @loopback, 0xfcb}, 0x1c)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20)

4.558231961s ago: executing program 4 (id=182):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000009000000000000000900000000000000000003000300000000140007000000000000000000000000000000000108ff010008000000"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000254027800000000000000000000000a70000000060a0b0400006405abad36fdbd10000344000480240001800b000100736f636b6574000014000280080002400000000308000140000000011c0001800a00010071756575650000000c00028006000140000300000900010073797a30000000000900020073797a3200000000140000001138955f3900000000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESOCT, @ANYRESDEC=r0, @ANYRESOCT=r1], 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x2000088c)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000400))
r2 = socket$key(0xf, 0x3, 0x2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000100)=0x5, 0x4)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10)
unshare(0xdf5396b58a9384c3)
r4 = epoll_create1(0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x10001, 0x1, 0x1, 0x5, 0xc}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r5, 0x8b32, &(0x7f0000000040))
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$SO_TIMESTAMP(r6, 0x1, 0x4c, 0x0, &(0x7f0000000000)=0x58)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000500)={0x14})
sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000007cfa776d131793200001032abd7000ffdbdf2700000008000000008897d2d697"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
write$cgroup_pressure(r3, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3e1bfc13d3b0fc03c3755217443080c1dd90b32f32dff0e6a9947dc2f39bfd401abb2828048adf91bf69faa839f56b62db75e99ce6531ffe8f238ab14c6f53446df00f9f1aaf4c0d923e4241398c7ce78491a6368fe9c3b3efce2f84cb1b3221048a11ca2da5eeddd3c095634ea078525e4be128fa6d54aa276d0f362b5fef476f1ac280117570059e8aeb8e6df39dbe52275332541fe705393806fc868c30c507f5c2f54fd2d735eaf1c09e4405f34d802dd8dbcb5f794792"], 0xc6}}, 0x50)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRES64=r7, @ANYRES32=0x0, @ANYRES16=r2], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0)

4.312980347s ago: executing program 3 (id=184):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x1a0, 0x0, 0x3d0, 0xd0, 0xd0, 0xd0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3d0}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000940), 0x10)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)
accept4$vsock_stream(r1, &(0x7f00000006c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r5 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x6a, 0x3, 0x0, &(0x7f0000000000)=0xfffffffffffffd68)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@deltaction={0x80, 0x31, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x80}}, 0x0)

4.219186554s ago: executing program 4 (id=187):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x1000000, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x2, 0x0, 0x1c, 0x67, 0x0, 0x2, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x25}, {[@cipso={0x86, 0x8, 0x3, [{0x5, 0x2}]}]}}}}}}, 0x0)
r2 = socket$caif_stream(0x25, 0x1, 0x0)
recvmsg(r2, &(0x7f00000006c0)={&(0x7f0000000300)=@pptp, 0x80, &(0x7f0000000640)=[{&(0x7f0000000380)=""/72, 0x48}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000440)=""/204, 0xcc}, {&(0x7f0000000540)=""/151, 0x97}, {&(0x7f0000000600)=""/8, 0x8}], 0x5, &(0x7f0000001240)=""/4096, 0x1000}, 0x40020200)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000880}, 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1)
sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010f060000000000000010"], 0x14}, 0x1, 0x0, 0x0, 0x1021}, 0x4000000)

4.153724141s ago: executing program 3 (id=188):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x36}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, &(0x7f0000000080))
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000001bc0)={r0, r4}, 0xc)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
r7 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg$unix(r7, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="91e5b8fec8115a", 0x7}, {&(0x7f0000000340)='\f', 0x1}], 0x2}}], 0x1, 0x4050)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="80420000000000001400030076657468305f746f5f626f6e6400000008003a"], 0x44}}, 0x4000080)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@local, <r9=>0x0}, &(0x7f0000000200)=0x14)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x15b, 0x15b, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xf, 0x1}, {0x5, 0x1}, {0x8}]}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x1, 0x4}, @var={0x7, 0x0, 0x0, 0xe, 0x2}, @float={0x10, 0x0, 0x0, 0x10, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x4fc2}}, @enum64={0xd, 0x5, 0x0, 0x13, 0x0, 0x8, [{0x7, 0x7f, 0x5}, {0x6, 0x1, 0x1234}, {0xa, 0x3, 0x7}, {0x4, 0x0, 0x4}, {0x1, 0x6, 0x6}]}, @restrict={0x8, 0x0, 0x0, 0xb, 0x1}, @struct={0x1, 0x1, 0x0, 0x4, 0x1, 0x2, [{0x0, 0x2}]}, @datasec={0x9, 0x1, 0x0, 0xf, 0x3, [{0x4, 0x7, 0x4}], "1c564d"}, @enum64={0x8, 0x8, 0x0, 0x13, 0x1, 0x4, [{0xd, 0x2, 0x6}, {0x5, 0x9, 0x401}, {0xd, 0xb, 0x1}, {0x8, 0x200, 0xffffc24e}, {0x9, 0x6, 0x4}, {0xd, 0x7, 0x1}, {0xc, 0x0, 0x4}, {0x3, 0x4169, 0x2}]}]}, {0x0, [0x0, 0x30, 0x2e]}}, &(0x7f00000003c0)=""/4096, 0x179, 0x1000, 0x0, 0x7f, 0x10000, @value}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001e40)={r5, 0x0, 0x0, 0x7e, &(0x7f0000001bc0), &(0x7f0000001c00)=""/126, 0x7, 0x0, 0x86, 0xf9, &(0x7f0000001c80)="930a10bfff8c305cf895628ee05d634fd2aa1c798ef2b2adbc14681f479d5bcf076977a0beb695b26ac8892dd438a3cf562eae627756c0d78104a7c5da06d07ead84a37d61ebc5299c2df978840c8840e8dbe26f6afac3df38e913fed510f0ce8e4a9dd27da176a53f0240dbaa0a7b42c6338734885f26f7df0663f2d27876e4c4034992698b", &(0x7f0000001d40)="5fcf69e9581ced48a7449741cf0e2f0b8e4022a88e505f1bad7982cd6849b48bd1ab60b969f2c20c02e9d3d3c94783c797e29ed88ab99aeb60d02e9ce9b5f399a7742615d29abb86e16a01e82faeacdbbde045645afa321e412d5e3c5f26acc4b21f9dc50e445c170ae80c63b4f7a45e28d9478fbd90de9bd014c0963c3647ca1a3182d4b665aa00b2b8f564c877c494993d20018924ce5da4f67e11798d7d6089036b13ab9fa31967ff6c7eaa77fb5e5aacdf5ac10d034986bc765a2d33cc9154de0eca4b4be92cac8fb73f2e2eee0654b93001da9461db8b1e35b1d3d97da55f02d124e6d8a37c0ca7dd065985d3f06301013fac48575cb4", 0x7, 0x0, 0xffffff7f}, 0x50)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001400)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x4, '\x00', r9, r10, 0x0, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000001480)={<r12=>r11, 0xe5, 0x1, 0x2})
setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000001540)=@mangle={'mangle\x00', 0x1f, 0x6, 0x610, 0x210, 0x328, 0x420, 0x210, 0x210, 0x540, 0x540, 0x540, 0x540, 0x540, 0x6, &(0x7f00000014c0), {[{{@ipv6={@loopback, @private2, [0x0, 0xffffff00, 0xffffff00, 0xff000000], [0xff000000, 0xffffff00, 0xffffffff, 0xff000000], 'ip_vti0\x00', 'lo\x00', {}, {0xff}, 0x0, 0xfe, 0x5}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xc}}}, {{@ipv6={@loopback, @empty, [0x0, 0x0, 0xff000000, 0xff], [0x0, 0xff0000ff, 0xffffff00, 0xffffffff], 'geneve0\x00', 'vcan0\x00', {0xff}, {}, 0x2c, 0x40, 0x1, 0x27}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@hl={{0x28}, {0x2, 0x3}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x23, 0x37, 0x8001}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0x0, 0xff000000, 0xff], [0xff000000], 'bond0\x00', 'syzkaller0\x00', {}, {}, 0x2, 0x0, 0x5}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x34, 0x40, 0x3}}}, {{@ipv6={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xffffffff, 0xffffffff, 0xc93571b362d49903], [0x0, 0xff, 0xff, 0xff], 'veth0_to_bond\x00', 'pimreg1\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x15}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x3b}, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'syzkaller0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x0, 0x1, 0x1}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x670)

3.883908801s ago: executing program 3 (id=190):
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x6, 0x0, 0x2)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x4}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e00), 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r8 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f0308000000000000e2ffca1b1f0000001104c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f20900f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

3.67522518s ago: executing program 4 (id=193):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000000100)={0x9c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x90c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2000000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan1\x00'}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000001500)=""/68, 0x44}, {&(0x7f0000001580)=""/152, 0x98}], 0x2}, 0x2000) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (rerun: 64)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (async)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) (async)
sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0)

3.674151148s ago: executing program 3 (id=195):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000200)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x818}, 0x4000)

3.547372395s ago: executing program 3 (id=196):
socket$xdp(0x2c, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0)

3.333198699s ago: executing program 4 (id=200):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x10, 0x9, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x1, 0xf28c, 0x3, 0x1, 0xfffffffd, 0x0, 0x10]}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c)
write$tun(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (fail_nth: 6)

3.33042242s ago: executing program 3 (id=201):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x10000c00)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r4 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r9], 0x40}}, 0x4000)
sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001300000829bd7000fcdbdf252903e0024e224e23fdffffffff0000000010000000280000f0ab0000060000000e000000b9070000", @ANYRES32=r9, @ANYBLOB="0400000008000000090080000800000004000100"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0xc855)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
unshare(0xc000000)
r10 = socket$inet6(0xa, 0x3, 0x8000000003c)
sendmmsg(r10, &(0x7f000000e340)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}, 0x80, 0x0, 0x0, &(0x7f00000079c0)=ANY=[@ANYBLOB="10000000002b00002900000039000000"], 0x10}}], 0x1, 0x40084)
getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0xf1, 0x200, 0xd, 0x619347a8, 0x5, 0x1]}, &(0x7f00000002c0)=0x78)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000300000005000006040000000a000000080000ee0c00000068360000100000000900000008000000690d000002000040000000000d00000000000007"], 0x0, 0x5a, 0x0, 0x1, 0x1, 0x10000, @value}, 0x28)

2.823766144s ago: executing program 4 (id=203):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$netlink(r0, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000001100)=ANY=[@ANYBLOB="dbff25"], 0x10}, {&(0x7f0000002f80)={0x10, 0x3ec, 0x0, 0x70bd28, 0x200}, 0x10}], 0x2}, 0x84)

2.732397766s ago: executing program 4 (id=204):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'lo\x00', {0x2, 0x4e23, @broadcast}})
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', <r3=>0x0})
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r6 = socket(0x10, 0x3, 0x0)
getsockopt$sock_int(r6, 0x1, 0x5, 0x0, &(0x7f0000000040))
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000f80)="d8000000", 0x4}], 0x1}, 0x4000044)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f00000001c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r8, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000000000000000009dc9000000", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r9, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$inet6_int(r9, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4)
getsockopt$inet6_buf(r9, 0x29, 0x6, 0x0, &(0x7f0000000240))
readv(r0, &(0x7f0000000040)=[{&(0x7f0000001600)=""/4112, 0x1010}], 0x1)

1.870298147s ago: executing program 2 (id=208):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000010f8000000200002000a00000000000000ff010000000800000000000000000001000000000d0001007564703a73"], 0x6c}}, 0x0)

1.7440075s ago: executing program 0 (id=209):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async)
socket(0x10, 0x3, 0x4)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async, rerun: 64)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r1}, 0x18) (async)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) (async, rerun: 32)
socketpair$unix(0x1, 0x3, 0x0, 0x0) (rerun: 32)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x7048, 0x77218}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x400c110) (async)
syz_extract_tcp_res$synack(&(0x7f0000000000)={<r5=>0x41424344}, 0x1, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)="851d8a90d516f218f839a7c48edfe734b2490c90a2fbf5be3383f1c9f5be8e55148723ac0258ef4f8af1f5e0b0a86885f018523d60072c7d9c1568700b3abe208fbd5dad2daf18b5150a530d816bf4cc6e43da4f2793611b38009e8c0970268cf5836926fd1223f4f8bec6a4a68b2aaff7af151a661793a04cd9b936da8f53eae22356781c580df817f3168269eaeeae014fa9b1878bd89e2acb4853ffd7b9a06d7f5ff090c605f5d343e6d93c80d747365d21acea325c44fb", 0xb9}], 0x1}}], 0x1, 0x81) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) (rerun: 32)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'geneve1\x00', @link_local})
write$tun(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec970000e03c00e18000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) (async, rerun: 32)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, r5, 0x0, 0x6, 0x5, 0xc2, 0x401, 0x0, 0x2}}}}}}, 0x0) (rerun: 32)

1.673393174s ago: executing program 2 (id=210):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000001640253b4ccf245bdc213bc8261dae193102cdb3168eb68c1b9825e8"], 0x18}, 0x41)
r1 = socket(0x1d, 0x2, 0x6)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa4}}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
syz_emit_ethernet(0x7a, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}}}}}}}, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c0, 0x0, 0xe8, 0xe8, 0x2d8, 0x2d8, 0x2d8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x20, '\x00', 0x0, 0x2d8}}, {{@uncond, 0xc0, 0x100, 0x0, {0x0, 0x1e03}}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "2c3bb27d9d5b379b853c7744b526e29755ec721db80fdb00f95f8a608b8d"}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB="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"/4281], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r6=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
r7 = socket$packet(0x11, 0x2, 0x300)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$NFT_MSG_GETRULE(r8, 0x0, 0x8000)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'syztnl0\x00', <r9=>r6, 0x29, 0x1, 0xff, 0xb, 0x30, @dev={0xfe, 0x80, '\x00', 0x18}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x40, 0xa, 0x40}})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0xe8, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x351}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8005}, 0x2400c850)
r10 = openat$cgroup_ro(r8, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x10}]}}}]}, 0x44}}, 0x0)
r12 = socket(0x23, 0x5, 0x0)
bind$802154_dgram(r10, &(0x7f0000000440)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14)
write(r12, &(0x7f0000000000)="d1", 0x1)
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6, @multicast}, 0x10)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r6, @ANYBLOB='\n\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x4c}}, 0x0)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)=ANY=[@ANYRES32=r13, @ANYRES32=r13, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="c18e8b0309e54ae92573cdcc73c94f5996807a12", @ANYRES64=0x0], 0x20)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r4, r13, 0x2f, 0x8, 0x4, @void, @value}, 0x20)

740.589193ms ago: executing program 0 (id=211):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r0, 0x2000000, 0x8, 0x0, &(0x7f0000000440)="13435cd378b76a90", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 2)

400.113147ms ago: executing program 0 (id=212):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000140)={0x0, 0x6, 0x4, 0x0, 0x0, 0x2, 0x0, 0xfe, 0x0, 0x0, 0xfa, 0x0, 0x1}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r1, 0x2, 0xfff}, 0x8)

398.809363ms ago: executing program 2 (id=213):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x0, 0x3d0, 0xd0, 0xd0, 0xd0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3d0}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f00000000c0)={0x18, 0x0, {0x2, @random="f41c0cedfafd", 'ip6_vti0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'veth1_to_team\x00'}})
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x2, 0x8}, 0xc)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={0xffffffffffffffff, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f00000013c0)=[0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc5, &(0x7f0000001440)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x30, 0x8, 0x8, &(0x7f0000001500)}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001680)=0xffffffffffffffff, 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1100"/12, @ANYRES32=r3, @ANYBLOB="a8f1d9ee1b24f4bba46a7e85ab16c9bdef95820ce99ac321796ccb944e68ed99cccaad1514efc2a0cbb10aaf0b91b367584ed6c777ce9b6f2b1e971d3830aa2a63a7a597300bbb9837aeb759fe81f96d9f9bbc19297e90b082754e179d9b967a8978a6f5a20dac9e292b7668078db620a75d8d1e1704eabbb42b7e08816d1eff2f496ecbfb5e24f2173e73f1258acb591ff36972db7dcba7ef1c941ba908a250647aea96b8f54600"/177, @ANYRES64=0x0], 0x20)

391.244046ms ago: executing program 0 (id=214):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000dd897b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001", @ANYBLOB], 0x50) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
close(0x3) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) (async)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0xc, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x5f]}}, &(0x7f0000000080)=""/51, 0x27, 0x33, 0x0, 0x7, 0x10000, @value}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000004832020000f8ffffffb703000000000000b7040001bfb61cc9c82e710057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000000000000100000008000100", @ANYRES32, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c656400000000000000000000000000050003000600000004000300"], 0x5c}, 0x1, 0xf000, 0x0, 0x3000000}, 0x10) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x8441, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

314.52572ms ago: executing program 0 (id=215):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newsa={0xf0, 0x10, 0x5, 0x0, 0x0, {{@in6=@loopback, @in6=@local}, {@in=@remote, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xe0000000, 0x0, 0x1, 0xfffffffc}}}}, 0x30}}, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x9)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r1)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r7, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffff4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1060009001e0006990300000015000500fe800000000000000300014002000c0901ac040098007f6f78007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4098000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5a73b61c84f80", 0xd8}, {&(0x7f0000000400)="120e0f6ec8bf82edd0747ceb17972138118e08750d8c122580cc9a3182691fd2e99581e699c74665a5fa2787a14c3a391c6cffbba2dac2347d8e7dfca912ef4750704ae4b134093721d9d338e0805782066386180f66822a3da7088b4cecbbecd756067aada4f2f40971dd09b68315e7119b442d4a5b40eb6ab70f900a20b69edce09de137a5a639f4c951622584800cceb9a6314004d82d1c5482bb178361708074bbac58ec34ffca1a4976f99b6c9d32291c9d976200d277db1b522a176d14a6d79916c820ba7ae3efea4f09774a663c23132e3fff850ae4bc25096cf5788258c6a5cc80bdb8e3aafb8292287fc748c2ee598ee730a423e914", 0xfa}], 0x2, 0x0, 0x0, 0x2663}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_buf(r9, 0x6, 0x21, &(0x7f0000000340)=""/168, &(0x7f0000000240)=0xa8)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(r11, 0x891b, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000500))
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000885}, 0x24008800)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r12)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r8, 0x100, 0x70bd28, 0x25dfdc00, {{}, {@void, @void}}}, 0x14}}, 0x40090)

250.022522ms ago: executing program 2 (id=216):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0), 0x0, 0x4001c00)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000000)="b9ff03030018698cb89e40f086dd6000000e00002f00630677", 0x0, 0xfa, 0x2000000, 0x3f, 0xc0, &(0x7f0000000440), &(0x7f0000000080), 0x4}, 0x50)

88.042895ms ago: executing program 0 (id=217):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000200)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x818}, 0x4000)

53.090997ms ago: executing program 2 (id=218):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, &(0x7f00000002c0)={0x80})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0xfffe, 0x0, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmmsg$sock(r4, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@timestamping={{0x14, 0x1, 0x51, 0x2}}], 0x18}}], 0x1, 0x20000000)
setsockopt$inet6_tcp_int(r2, 0x11a, 0x3, &(0x7f00000001c0)=0xf3, 0x4)
r5 = accept4$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x1800)
bind$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)='K', 0x1}, {&(0x7f0000000180)="e3", 0x1}, {&(0x7f0000000600)="d8fa34bdc826d6af9aa41cac16e1f9612c62d1f123f03d45e8a36cc182e90cf09cc0a4c4c5f7782fdaa6cfa48d009279a91997fce49c6bcd3b718cf290ab1a0af72eac5fb91deb4e383eb4885668cb31dec03c8757f48c2a9e0ee78f9886861055b92a55137f5f8d0f112d156da242115cf538d5467efb894d8e38", 0x7b}, {&(0x7f00000001c0)="b6db", 0x2}, {&(0x7f0000000680)="576e284ccce6a44a9d3907d5bd90fdbf6cb0e46de085e8baf03db67513e9d8", 0x1f}, {&(0x7f0000000440)="36bd26", 0x3}], 0x6}}], 0x1, 0x8000)
recvmmsg(r1, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{}, "bc4737d8dfede5c5", "7951097ed4dc0bd5eed5b89797019d13", "c45c21ee", "d44d6e810f08d4af"}, 0x28)

0s ago: executing program 2 (id=219):
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x7, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="3e05"], 0xdd12}], 0x1, 0x0, 0xdd08, 0x8000844}, 0x20040051)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.150' (ED25519) to the list of known hosts.
[   73.509999][ T5827] cgroup: Unknown subsys name 'net'
[   73.646363][ T5827] cgroup: Unknown subsys name 'cpuset'
[   73.655267][ T5827] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   75.176342][ T5827] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   79.211583][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   79.222281][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   79.229906][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   79.237648][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   79.245990][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   79.253985][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   79.261519][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   79.268972][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   79.279034][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   79.287404][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   79.294785][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   79.308351][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   79.319153][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   79.326827][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   79.335065][ T5855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   79.342603][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   79.350616][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   79.358084][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   79.366220][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   79.374123][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   79.381480][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   79.389350][ T5855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   79.396680][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   79.404418][ T5855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   79.411802][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   79.941067][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   80.093961][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   80.106390][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   80.169055][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   80.296028][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.303500][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.310847][ T5841] bridge_slave_0: entered allmulticast mode
[   80.318537][ T5841] bridge_slave_0: entered promiscuous mode
[   80.355297][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   80.371722][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.379087][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.386472][ T5841] bridge_slave_1: entered allmulticast mode
[   80.393891][ T5841] bridge_slave_1: entered promiscuous mode
[   80.425051][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.432289][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.439422][ T5837] bridge_slave_0: entered allmulticast mode
[   80.446763][ T5837] bridge_slave_0: entered promiscuous mode
[   80.461231][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.468557][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.476080][ T5837] bridge_slave_1: entered allmulticast mode
[   80.483694][ T5837] bridge_slave_1: entered promiscuous mode
[   80.614188][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.627306][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.638459][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.648297][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.655568][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.663001][ T5843] bridge_slave_0: entered allmulticast mode
[   80.670035][ T5843] bridge_slave_0: entered promiscuous mode
[   80.677402][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.684619][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.691737][ T5849] bridge_slave_0: entered allmulticast mode
[   80.699209][ T5849] bridge_slave_0: entered promiscuous mode
[   80.727467][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.749353][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.756557][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.763890][ T5843] bridge_slave_1: entered allmulticast mode
[   80.771125][ T5843] bridge_slave_1: entered promiscuous mode
[   80.791571][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.798789][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.809077][ T5849] bridge_slave_1: entered allmulticast mode
[   80.816341][ T5849] bridge_slave_1: entered promiscuous mode
[   80.935661][ T5837] team0: Port device team_slave_0 added
[   80.944270][ T5841] team0: Port device team_slave_0 added
[   80.951698][ T5837] team0: Port device team_slave_1 added
[   80.962425][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.976103][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.986082][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.993665][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.000788][ T5848] bridge_slave_0: entered allmulticast mode
[   81.008268][ T5848] bridge_slave_0: entered promiscuous mode
[   81.017684][ T5841] team0: Port device team_slave_1 added
[   81.048976][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.062820][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.072157][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.080010][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.087472][ T5848] bridge_slave_1: entered allmulticast mode
[   81.095165][ T5848] bridge_slave_1: entered promiscuous mode
[   81.126874][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.134139][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.164005][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.236981][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.244720][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.270727][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.285663][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.292625][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.318896][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.346355][ T5843] team0: Port device team_slave_0 added
[   81.354902][ T5849] team0: Port device team_slave_0 added
[   81.364244][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.374148][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.381113][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.407625][ T5855] Bluetooth: hci3: command tx timeout
[   81.407821][ T5855] Bluetooth: hci2: command tx timeout
[   81.419100][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.440698][ T5843] team0: Port device team_slave_1 added
[   81.448207][ T5849] team0: Port device team_slave_1 added
[   81.462567][   T55] Bluetooth: hci4: command tx timeout
[   81.468160][   T55] Bluetooth: hci0: command tx timeout
[   81.468402][ T5855] Bluetooth: hci1: command tx timeout
[   81.483455][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.604921][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.611896][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.638319][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.650682][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.657976][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.684530][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.713250][ T5841] hsr_slave_0: entered promiscuous mode
[   81.719763][ T5841] hsr_slave_1: entered promiscuous mode
[   81.733465][ T5837] hsr_slave_0: entered promiscuous mode
[   81.739736][ T5837] hsr_slave_1: entered promiscuous mode
[   81.746905][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.754735][ T5837] Cannot create hsr debugfs directory
[   81.760923][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.767998][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.794074][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.811739][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.818753][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.844685][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.866243][ T5848] team0: Port device team_slave_0 added
[   81.875189][ T5848] team0: Port device team_slave_1 added
[   81.944809][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.951769][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.978777][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.036668][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.044665][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.071492][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.137628][ T5843] hsr_slave_0: entered promiscuous mode
[   82.144248][ T5843] hsr_slave_1: entered promiscuous mode
[   82.150380][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   82.158425][ T5843] Cannot create hsr debugfs directory
[   82.210079][ T5849] hsr_slave_0: entered promiscuous mode
[   82.216571][ T5849] hsr_slave_1: entered promiscuous mode
[   82.223814][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   82.231377][ T5849] Cannot create hsr debugfs directory
[   82.320119][ T5848] hsr_slave_0: entered promiscuous mode
[   82.328696][ T5848] hsr_slave_1: entered promiscuous mode
[   82.335517][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   82.343721][ T5848] Cannot create hsr debugfs directory
[   82.714957][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   82.754587][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   82.767120][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   82.786213][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   82.829186][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   82.854606][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   82.881537][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   82.904778][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   82.966576][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   82.985561][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   82.997579][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   83.024637][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   83.136205][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   83.148616][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   83.159949][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   83.171940][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   83.230541][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.306174][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   83.323536][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   83.339672][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   83.350770][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   83.368469][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   83.405158][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.412591][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.426814][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.433944][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.458279][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.463527][ T5855] Bluetooth: hci2: command tx timeout
[   83.472459][   T55] Bluetooth: hci3: command tx timeout
[   83.496833][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.525049][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   83.543381][   T55] Bluetooth: hci0: command tx timeout
[   83.544056][ T5855] Bluetooth: hci4: command tx timeout
[   83.548783][ T5152] Bluetooth: hci1: command tx timeout
[   83.595129][ T1316] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.602333][ T1316] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.647915][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   83.670701][ T1316] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.677839][ T1316] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.695165][ T1316] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.702331][ T1316] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.726602][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.799013][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.806203][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.904991][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   83.948198][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.955348][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.967969][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.975072][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.994563][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.011269][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   84.106561][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   84.126873][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.168868][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.176061][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.230592][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.237776][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.389868][ T5841] veth0_vlan: entered promiscuous mode
[   84.419321][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.441131][ T5841] veth1_vlan: entered promiscuous mode
[   84.528013][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.598311][ T5841] veth0_macvtap: entered promiscuous mode
[   84.646500][ T5841] veth1_macvtap: entered promiscuous mode
[   84.668358][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.696030][ T5843] veth0_vlan: entered promiscuous mode
[   84.720088][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.757797][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.795533][ T5843] veth1_vlan: entered promiscuous mode
[   84.848830][ T5841] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.859536][ T5841] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.869395][ T5841] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.878480][ T5841] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.910070][ T5848] veth0_vlan: entered promiscuous mode
[   84.943610][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.964847][ T5848] veth1_vlan: entered promiscuous mode
[   84.985483][ T5843] veth0_macvtap: entered promiscuous mode
[   85.010274][ T5843] veth1_macvtap: entered promiscuous mode
[   85.025787][ T5837] veth0_vlan: entered promiscuous mode
[   85.080063][ T5837] veth1_vlan: entered promiscuous mode
[   85.089634][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.101973][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.114395][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.148962][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.159609][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.171738][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.207779][ T5843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.217006][ T5843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.228364][ T5843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.237658][ T5843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.266755][ T5848] veth0_macvtap: entered promiscuous mode
[   85.279587][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.289369][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.331312][ T5848] veth1_macvtap: entered promiscuous mode
[   85.347157][ T5849] veth0_vlan: entered promiscuous mode
[   85.354660][ T3020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.361713][ T5837] veth0_macvtap: entered promiscuous mode
[   85.377630][ T3020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.405179][ T5837] veth1_macvtap: entered promiscuous mode
[   85.421233][ T5849] veth1_vlan: entered promiscuous mode
[   85.457351][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.487360][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.498292][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.509000][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.520801][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.544432][   T55] Bluetooth: hci3: command tx timeout
[   85.554409][   T55] Bluetooth: hci2: command tx timeout
[   85.559381][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   85.591452][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.622891][ T5152] Bluetooth: hci0: command tx timeout
[   85.626020][ T5855] Bluetooth: hci1: command tx timeout
[   85.628355][   T55] Bluetooth: hci4: command tx timeout
[   85.633832][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.659775][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.670351][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.681945][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.706651][ T5848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.716758][ T5848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.726078][ T5848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.735095][ T5848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.764247][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.766068][ T1316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.774788][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.774804][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.774819][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.774830][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.774844][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.776328][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.802283][ T1316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.885010][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.886588][ T5925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.897526][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.916527][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.921127][ T5925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.926974][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.926988][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.927003][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.928349][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.978737][ T5849] veth0_macvtap: entered promiscuous mode
[   85.995477][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.999733][ T5925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.004845][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.021176][ T5925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'.
[   86.035614][ T5837] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.050666][ T5837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.059487][ T5837] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.071087][ T5837] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.123949][ T5849] veth1_macvtap: entered promiscuous mode
[   86.177951][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.193137][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.203472][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.224527][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.236029][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.247470][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.267404][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.278777][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.291957][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.307753][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.324624][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.351854][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.364467][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.375360][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.387075][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.397203][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.418711][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.441088][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.451793][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.463920][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.505783][ T5849] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.515162][ T5849] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.524395][ T5849] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.533519][ T5849] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.569210][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.578053][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.855193][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.912318][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.008219][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.048166][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.058505][ T5944] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1'.
[   87.101144][  T973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.124869][  T973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.222003][ T3020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.262139][ T3020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.629390][   T55] Bluetooth: hci2: command tx timeout
[   87.629403][ T5855] Bluetooth: hci3: command tx timeout
[   87.703975][   T55] Bluetooth: hci1: command tx timeout
[   87.704852][ T5855] Bluetooth: hci4: command tx timeout
[   87.710607][   T55] Bluetooth: hci0: command tx timeout
[   87.787819][ T5958] Zero length message leads to an empty skb
[   87.795766][ T5961] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   87.861038][ T5964] IPv6: NLM_F_REPLACE set, but no existing node found!
[   88.105389][ T5977] netlink: 'syz.1.18': attribute type 10 has an invalid length.
[   88.277519][ T5977] team0: Port device dummy0 added
[   88.376498][ T5985] team0: Port device dummy0 removed
[   88.417112][ T5985] bridge_slave_0: left allmulticast mode
[   88.449962][ T5989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17'.
[   88.478525][ T5985] bridge_slave_0: left promiscuous mode
[   88.489861][ T5985] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.545020][ T5985] bridge_slave_1: left allmulticast mode
[   88.577504][ T5985] bridge_slave_1: left promiscuous mode
[   88.613824][ T5985] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.646008][ T5985] bond0: (slave bond_slave_0): Releasing backup interface
[   88.675472][ T5985] bond0: (slave bond_slave_1): Releasing backup interface
[   88.725471][ T5985] team0: Port device team_slave_0 removed
[   88.760629][ T5985] team0: Port device team_slave_1 removed
[   88.779260][ T5985] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.798191][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.826122][ T5985] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.835235][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_1
[   88.901066][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'.
[   89.599332][ T6012] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280
[   89.658323][ T6012] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   89.680091][ T6010] can: request_module (can-proto-4) failed.
[   89.726695][ T6016] netlink: 11 bytes leftover after parsing attributes in process `syz.1.28'.
[   90.188334][ T6025] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[   90.258004][ T6025] netlink: 132 bytes leftover after parsing attributes in process `syz.4.31'.
[   90.449744][ T6043] netlink: 'syz.4.31': attribute type 10 has an invalid length.
[   90.468701][ T6043] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   90.545676][ T6048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.38'.
[   90.611926][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40'.
[   90.734707][ T6053] Illegal XDP return value 4294967294 on prog  (id 16) dev N/A, expect packet loss!
[   91.126391][ T6068] veth1_macvtap: left promiscuous mode
[   91.171759][ T6072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.51'.
[   91.206963][ T6074] macvlan2: entered promiscuous mode
[   91.232663][ T6074] macvlan2: entered allmulticast mode
[   91.249028][ T6074] bond_slave_0: entered promiscuous mode
[   91.254890][ T6074] bond_slave_1: entered promiscuous mode
[   91.291412][ T6074] bond0: entered allmulticast mode
[   91.312505][ T6074] bond_slave_0: entered allmulticast mode
[   91.320154][ T6074] bond_slave_1: entered allmulticast mode
[   91.346848][ T6074] bond0: entered promiscuous mode
[   91.368439][ T6074] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   91.390029][ T6074] team0: Port device macvlan2 added
[   91.526023][ T6078] netlink: 'syz.0.53': attribute type 9 has an invalid length.
[   91.551847][ T6100] netlink: 'syz.2.58': attribute type 6 has an invalid length.
[   91.705377][   T47] cfg80211: failed to load regulatory.db
[   91.772896][ T6106] netlink: zone id is out of range
[   91.796970][ T6112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.63'.
[   91.819957][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.63'.
[   92.008603][ T6122] Bluetooth: MGMT ver 1.23
[   92.017261][ T6125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.65'.
[   92.039209][ T6124] netlink: 'syz.0.68': attribute type 1 has an invalid length.
[   92.053417][ T6124] netlink: 224 bytes leftover after parsing attributes in process `syz.0.68'.
[   92.102036][ T6124] macvlan3: entered promiscuous mode
[   92.130167][ T6124] macvlan3: entered allmulticast mode
[   92.144167][ T6124] bond_slave_0: entered promiscuous mode
[   92.150099][ T6124] bond_slave_1: entered promiscuous mode
[   92.166645][ T6124] bond0: entered allmulticast mode
[   92.171997][ T6124] bond_slave_0: entered allmulticast mode
[   92.177981][ T6124] bond_slave_1: entered allmulticast mode
[   92.184203][ T6124] bond0: entered promiscuous mode
[   92.215726][ T6124] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   92.242067][ T6124] team0: Port device macvlan3 added
[   92.492974][ T6135] netlink: 'syz.4.71': attribute type 9 has an invalid length.
[   92.646356][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.76'.
[   93.061200][ T6172] sctp: [Deprecated]: syz.2.84 (pid 6172) Use of int in max_burst socket option deprecated.
[   93.061200][ T6172] Use struct sctp_assoc_value instead
[   93.084885][ T6173] dvmrp3: entered allmulticast mode
[   93.146833][ T6173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.86'.
[   93.159184][ T6172] netlink: 356 bytes leftover after parsing attributes in process `syz.2.84'.
[   93.172727][ T6173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.86'.
[   93.191280][ T6172] netlink: 356 bytes leftover after parsing attributes in process `syz.2.84'.
[   93.319554][ T5850] IPVS: starting estimator thread 0...
[   93.344967][ T6180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.374793][ T6185] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   93.422507][ T6183] IPVS: using max 30 ests per chain, 72000 per kthread
[   93.479660][ T6182] syzkaller0: entered promiscuous mode
[   93.533567][ T6182] syzkaller0: entered allmulticast mode
[   93.597914][ T6192] pimreg: entered allmulticast mode
[   93.646823][ T6198] netlink: 'syz.4.92': attribute type 8 has an invalid length.
[   96.154939][ T6294] FAULT_INJECTION: forcing a failure.
[   96.154939][ T6294] name failslab, interval 1, probability 0, space 0, times 1
[   96.226718][ T6294] CPU: 0 UID: 0 PID: 6294 Comm: syz.4.126 Not tainted 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 PREEMPT(full) 
[   96.226745][ T6294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   96.226760][ T6294] Call Trace:
[   96.226768][ T6294]  <TASK>
[   96.226775][ T6294]  dump_stack_lvl+0x241/0x360
[   96.226819][ T6294]  ? __pfx_dump_stack_lvl+0x10/0x10
[   96.226845][ T6294]  ? __pfx__printk+0x10/0x10
[   96.226874][ T6294]  ? __pfx___might_resched+0x10/0x10
[   96.226905][ T6294]  should_fail_ex+0x424/0x570
[   96.226929][ T6294]  should_failslab+0xac/0x100
[   96.226956][ T6294]  __kmalloc_noprof+0xdf/0x4d0
[   96.226980][ T6294]  ? tomoyo_realpath_from_path+0xc2/0x5e0
[   96.227007][ T6294]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[   96.227039][ T6294]  tomoyo_realpath_from_path+0xcf/0x5e0
[   96.227078][ T6294]  tomoyo_path_number_perm+0x245/0x790
[   96.227106][ T6294]  ? tomoyo_path_number_perm+0x215/0x790
[   96.227131][ T6294]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   96.227161][ T6294]  ? ksys_write+0x24e/0x2d0
[   96.227189][ T6294]  ? __lock_acquire+0xad5/0xd80
[   96.227225][ T6294]  ? __fget_files+0x2a/0x420
[   96.227241][ T6294]  ? __fget_files+0x2a/0x420
[   96.227260][ T6294]  ? __fget_files+0x2a/0x420
[   96.227281][ T6294]  security_file_ioctl+0xc6/0x2a0
[   96.227304][ T6294]  __se_sys_ioctl+0x46/0x160
[   96.227328][ T6294]  do_syscall_64+0xf3/0x230
[   96.227352][ T6294]  ? clear_bhb_loop+0x45/0xa0
[   96.227373][ T6294]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.227394][ T6294] RIP: 0033:0x7f5db858d169
[   96.227414][ T6294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   96.227428][ T6294] RSP: 002b:00007f5db9499038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   96.227447][ T6294] RAX: ffffffffffffffda RBX: 00007f5db87a5fa0 RCX: 00007f5db858d169
[   96.227459][ T6294] RDX: 0000200000000100 RSI: 00000000800452d2 RDI: 0000000000000004
[   96.227470][ T6294] RBP: 00007f5db9499090 R08: 0000000000000000 R09: 0000000000000000
[   96.227481][ T6294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   96.227491][ T6294] R13: 0000000000000000 R14: 00007f5db87a5fa0 R15: 00007ffc155f3e88
[   96.227523][ T6294]  </TASK>
[   96.227531][ T6294] ERROR: Out of memory at tomoyo_realpath_from_path.
[   96.535039][ T6309] __nla_validate_parse: 6 callbacks suppressed
[   96.535059][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.133'.
[   96.653860][ T6316] FAULT_INJECTION: forcing a failure.
[   96.653860][ T6316] name failslab, interval 1, probability 0, space 0, times 0
[   96.673944][ T6316] CPU: 0 UID: 0 PID: 6316 Comm: syz.2.134 Not tainted 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 PREEMPT(full) 
[   96.673970][ T6316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   96.673981][ T6316] Call Trace:
[   96.673988][ T6316]  <TASK>
[   96.673995][ T6316]  dump_stack_lvl+0x241/0x360
[   96.674029][ T6316]  ? __pfx_dump_stack_lvl+0x10/0x10
[   96.674055][ T6316]  ? __pfx__printk+0x10/0x10
[   96.674085][ T6316]  ? __pfx___might_resched+0x10/0x10
[   96.674113][ T6316]  should_fail_ex+0x424/0x570
[   96.674136][ T6316]  should_failslab+0xac/0x100
[   96.674162][ T6316]  __kmalloc_noprof+0xdf/0x4d0
[   96.674186][ T6316]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x290
[   96.674213][ T6316]  genl_family_rcv_msg_attrs_parse+0xa3/0x290
[   96.674241][ T6316]  genl_rcv_msg+0x819/0xf00
[   96.674269][ T6316]  ? __pfx_genl_rcv_msg+0x10/0x10
[   96.674286][ T6316]  ? __dev_queue_xmit+0x1780/0x3f60
[   96.674305][ T6316]  ? kasan_save_track+0x3f/0x80
[   96.674323][ T6316]  ? __kasan_slab_alloc+0x66/0x80
[   96.674350][ T6316]  ? do_syscall_64+0xf3/0x230
[   96.674389][ T6316]  ? __lock_acquire+0xad5/0xd80
[   96.674410][ T6316]  ? __pfx_tipc_nl_bearer_disable+0x10/0x10
[   96.674448][ T6316]  netlink_rcv_skb+0x208/0x480
[   96.674482][ T6316]  ? __pfx_genl_rcv_msg+0x10/0x10
[   96.674503][ T6316]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   96.674550][ T6316]  ? netlink_deliver_tap+0x2e/0x1b0
[   96.674582][ T6316]  genl_rcv+0x28/0x40
[   96.674599][ T6316]  netlink_unicast+0x7f8/0x9a0
[   96.674631][ T6316]  ? __pfx_netlink_unicast+0x10/0x10
[   96.674656][ T6316]  ? skb_put+0x114/0x1f0
[   96.674678][ T6316]  netlink_sendmsg+0x8c3/0xcd0
[   96.674716][ T6316]  ? __pfx_netlink_sendmsg+0x10/0x10
[   96.674747][ T6316]  ? aa_sock_msg_perm+0x91/0x160
[   96.674777][ T6316]  ? __pfx_netlink_sendmsg+0x10/0x10
[   96.674801][ T6316]  __sock_sendmsg+0x221/0x270
[   96.674828][ T6316]  ____sys_sendmsg+0x523/0x860
[   96.674856][ T6316]  ? __pfx_____sys_sendmsg+0x10/0x10
[   96.674873][ T6316]  ? __fget_files+0x2a/0x420
[   96.674892][ T6316]  ? __fget_files+0x2a/0x420
[   96.674917][ T6316]  __sys_sendmsg+0x271/0x360
[   96.674941][ T6316]  ? __pfx___sys_sendmsg+0x10/0x10
[   96.675013][ T6316]  ? do_syscall_64+0xb6/0x230
[   96.675039][ T6316]  do_syscall_64+0xf3/0x230
[   96.675061][ T6316]  ? clear_bhb_loop+0x45/0xa0
[   96.675082][ T6316]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.675099][ T6316] RIP: 0033:0x7ff76838d169
[   96.675115][ T6316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   96.675129][ T6316] RSP: 002b:00007ff76917c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   96.675147][ T6316] RAX: ffffffffffffffda RBX: 00007ff7685a5fa0 RCX: 00007ff76838d169
[   96.675160][ T6316] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[   96.675170][ T6316] RBP: 00007ff76917c090 R08: 0000000000000000 R09: 0000000000000000
[   96.675180][ T6316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   96.675190][ T6316] R13: 0000000000000000 R14: 00007ff7685a5fa0 R15: 00007ffe8c83aaf8
[   96.675218][ T6316]  </TASK>
[   97.057030][ T6323] netlink: 'syz.3.140': attribute type 10 has an invalid length.
[   97.078161][ T6323] macvlan0: entered promiscuous mode
[   97.100643][ T6323] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[   98.459914][ T6388] FAULT_INJECTION: forcing a failure.
[   98.459914][ T6388] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   98.479245][ T6388] CPU: 1 UID: 0 PID: 6388 Comm: syz.2.160 Not tainted 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 PREEMPT(full) 
[   98.479274][ T6388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   98.479286][ T6388] Call Trace:
[   98.479294][ T6388]  <TASK>
[   98.479303][ T6388]  dump_stack_lvl+0x241/0x360
[   98.479340][ T6388]  ? __pfx_dump_stack_lvl+0x10/0x10
[   98.479370][ T6388]  ? __pfx__printk+0x10/0x10
[   98.479410][ T6388]  should_fail_ex+0x424/0x570
[   98.479437][ T6388]  prepare_alloc_pages+0x220/0x610
[   98.479468][ T6388]  __alloc_frozen_pages_noprof+0x162/0x5b0
[   98.479496][ T6388]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   98.479517][ T6388]  ? __up_read+0x2c4/0x6b0
[   98.479570][ T6388]  alloc_pages_mpol+0x339/0x690
[   98.479605][ T6388]  ? __pfx_alloc_pages_mpol+0x10/0x10
[   98.479645][ T6388]  alloc_pages_noprof+0x121/0x190
[   98.479676][ T6388]  bpf_prog_test_run_xdp+0xcc4/0x1200
[   98.479727][ T6388]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   98.479758][ T6388]  ? __fget_files+0x2a/0x420
[   98.479780][ T6388]  ? __fget_files+0x2a/0x420
[   98.479803][ T6388]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   98.479834][ T6388]  bpf_prog_test_run+0x2e4/0x360
[   98.479861][ T6388]  __sys_bpf+0x4ee/0x8b0
[   98.479884][ T6388]  ? __pfx___sys_bpf+0x10/0x10
[   98.479918][ T6388]  ? ksys_write+0x275/0x2d0
[   98.479956][ T6388]  __x64_sys_bpf+0x7c/0x90
[   98.479987][ T6388]  do_syscall_64+0xf3/0x230
[   98.480014][ T6388]  ? clear_bhb_loop+0x45/0xa0
[   98.480039][ T6388]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.480058][ T6388] RIP: 0033:0x7ff76838d169
[   98.480075][ T6388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   98.480091][ T6388] RSP: 002b:00007ff76917c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   98.480112][ T6388] RAX: ffffffffffffffda RBX: 00007ff7685a5fa0 RCX: 00007ff76838d169
[   98.480126][ T6388] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[   98.480139][ T6388] RBP: 00007ff76917c090 R08: 0000000000000000 R09: 0000000000000000
[   98.480151][ T6388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   98.480162][ T6388] R13: 0000000000000000 R14: 00007ff7685a5fa0 R15: 00007ffe8c83aaf8
[   98.480193][ T6388]  </TASK>
[   98.912492][ T6392] syzkaller0: entered promiscuous mode
[   98.918168][ T6392] syzkaller0: entered allmulticast mode
[   98.959415][ T6396] netlink: 32 bytes leftover after parsing attributes in process `syz.0.164'.
[   99.037131][ T6405] netlink: 48 bytes leftover after parsing attributes in process `syz.0.164'.
[   99.251001][ T6415] netlink: 84 bytes leftover after parsing attributes in process `syz.3.167'.
[  100.087061][ T6407] syzkaller1: entered promiscuous mode
[  100.093117][ T6407] syzkaller1: entered allmulticast mode
[  100.338955][ T6427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.174'.
[  101.188812][ T6446] netlink: 28 bytes leftover after parsing attributes in process `syz.3.181'.
[  101.203521][ T6446] netlink: 28 bytes leftover after parsing attributes in process `syz.3.181'.
[  101.227473][ T6454] warning: `syz.4.182' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  101.255467][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  101.263856][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  101.271957][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  101.285601][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  101.293340][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  101.401572][   T82] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.540972][   T82] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.573835][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'.
[  101.605648][ T6467] netlink: 'syz.4.187': attribute type 15 has an invalid length.
[  101.643725][ T6469] veth0_to_bond: entered allmulticast mode
[  101.699222][   T82] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.851524][ T6482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.191'.
[  101.924811][   T82] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.950345][ T6485] netlink: 28 bytes leftover after parsing attributes in process `syz.0.191'.
[  101.988396][ T6481] netlink: 28 bytes leftover after parsing attributes in process `syz.0.191'.
[  102.019698][ T6481] netlink: 40 bytes leftover after parsing attributes in process `syz.0.191'.
[  102.299581][ T6502] netlink: 20 bytes leftover after parsing attributes in process `syz.0.198'.
[  102.437918][ T6508] FAULT_INJECTION: forcing a failure.
[  102.437918][ T6508] name failslab, interval 1, probability 0, space 0, times 0
[  102.458431][ T6508] CPU: 0 UID: 0 PID: 6508 Comm: syz.4.200 Not tainted 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 PREEMPT(full) 
[  102.458456][ T6508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  102.458467][ T6508] Call Trace:
[  102.458474][ T6508]  <TASK>
[  102.458481][ T6508]  dump_stack_lvl+0x241/0x360
[  102.458514][ T6508]  ? __pfx_dump_stack_lvl+0x10/0x10
[  102.458539][ T6508]  ? __pfx__printk+0x10/0x10
[  102.458568][ T6508]  ? __pfx___might_resched+0x10/0x10
[  102.458596][ T6508]  should_fail_ex+0x424/0x570
[  102.458619][ T6508]  should_failslab+0xac/0x100
[  102.458645][ T6508]  ? page_pool_create_percpu+0x77/0xbd0
[  102.458663][ T6508]  __kmalloc_cache_node_noprof+0x74/0x3c0
[  102.458690][ T6508]  ? bpf_test_run_xdp_live+0x292/0x2220
[  102.458719][ T6508]  page_pool_create_percpu+0x77/0xbd0
[  102.458737][ T6508]  ? __kvmalloc_node_noprof+0x34a/0x5a0
[  102.458762][ T6508]  ? bpf_test_run_xdp_live+0x292/0x2220
[  102.458793][ T6508]  bpf_test_run_xdp_live+0x2e8/0x2220
[  102.458819][ T6508]  ? arch_stack_walk+0xff/0x150
[  102.458860][ T6508]  ? __pfx_stack_trace_save+0x10/0x10
[  102.458888][ T6508]  ? stack_depot_save_flags+0x44/0x940
[  102.458907][ T6508]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  102.458984][ T6508]  ? __lock_acquire+0xad5/0xd80
[  102.459014][ T6508]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  102.459056][ T6508]  ? _copy_from_user+0x95/0xb0
[  102.459082][ T6508]  ? bpf_test_init+0x130/0x170
[  102.459104][ T6508]  ? xdp_convert_md_to_buff+0x5b/0x330
[  102.459132][ T6508]  bpf_prog_test_run_xdp+0x809/0x1200
[  102.459175][ T6508]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  102.459202][ T6508]  ? __fget_files+0x2a/0x420
[  102.459221][ T6508]  ? __fget_files+0x2a/0x420
[  102.459241][ T6508]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  102.459268][ T6508]  bpf_prog_test_run+0x2e4/0x360
[  102.459292][ T6508]  __sys_bpf+0x4ee/0x8b0
[  102.459313][ T6508]  ? __pfx___sys_bpf+0x10/0x10
[  102.459343][ T6508]  ? ksys_write+0x275/0x2d0
[  102.459376][ T6508]  __x64_sys_bpf+0x7c/0x90
[  102.459403][ T6508]  do_syscall_64+0xf3/0x230
[  102.459426][ T6508]  ? clear_bhb_loop+0x45/0xa0
[  102.459447][ T6508]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.459464][ T6508] RIP: 0033:0x7f5db858d169
[  102.459479][ T6508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  102.459493][ T6508] RSP: 002b:00007f5db9499038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  102.459511][ T6508] RAX: ffffffffffffffda RBX: 00007f5db87a5fa0 RCX: 00007f5db858d169
[  102.459524][ T6508] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a
[  102.459535][ T6508] RBP: 00007f5db9499090 R08: 0000000000000000 R09: 0000000000000000
[  102.459545][ T6508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  102.459555][ T6508] R13: 0000000000000000 R14: 00007f5db87a5fa0 R15: 00007ffc155f3e88
[  102.459582][ T6508]  </TASK>
[  103.157027][ T6523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.201'.
[  103.184260][   T82] dvmrp3 (unregistering): left allmulticast mode
[  103.321215][   T82] bond0 (unregistering): Released all slaves
[  103.393965][ T5855] Bluetooth: hci2: command tx timeout
[  103.444096][ T6523] 8021q: adding VLAN 0 to HW filter on device bond1
[  103.480801][ T6524] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  103.510833][ T6453] chnl_net:caif_netlink_parms(): no params data found
[  103.623008][ T6535] netlink: 36 bytes leftover after parsing attributes in process `syz.2.205'.
[  103.623140][ T6528] team0 (unregistering): Port device team_slave_0 removed
[  103.649911][ T6528] team0 (unregistering): Port device team_slave_1 removed
[  103.879288][ T6539] tipc: Started in network mode
[  103.888848][ T6539] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  103.900486][ T6539] tipc: Enabled bearer <udp:s>, priority 10
[  103.910354][ T6543] xt_hashlimit: size too large, truncated to 1048576
[  103.926915][ T6543] syz.0.209: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  103.946687][ T6543] CPU: 0 UID: 0 PID: 6543 Comm: syz.0.209 Not tainted 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 PREEMPT(full) 
[  103.946714][ T6543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  103.946726][ T6543] Call Trace:
[  103.946733][ T6543]  <TASK>
[  103.946752][ T6543]  dump_stack_lvl+0x241/0x360
[  103.946787][ T6543]  ? __pfx_dump_stack_lvl+0x10/0x10
[  103.946821][ T6543]  ? __pfx__printk+0x10/0x10
[  103.946846][ T6543]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  103.946877][ T6543]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  103.946903][ T6543]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  103.946933][ T6543]  warn_alloc+0x27c/0x410
[  103.946957][ T6543]  ? __pfx_warn_alloc+0x10/0x10
[  103.946982][ T6543]  ? htable_create+0x10c/0x890
[  103.947000][ T6543]  ? __get_vm_area_node+0x1c8/0x2d0
[  103.947026][ T6543]  ? __get_vm_area_node+0x25c/0x2d0
[  103.947060][ T6543]  __vmalloc_node_range_noprof+0x634/0x1390
[  103.947109][ T6543]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  103.947128][ T6543]  ? __kasan_kmalloc_large+0x1a/0xa0
[  103.947157][ T6543]  ? htable_create+0x10c/0x890
[  103.947175][ T6543]  __kvmalloc_node_noprof+0x3b2/0x5a0
[  103.947203][ T6543]  ? htable_create+0x10c/0x890
[  103.947219][ T6543]  ? htable_create+0x10c/0x890
[  103.947235][ T6543]  ? hashlimit_pernet+0x23/0x240
[  103.947256][ T6543]  htable_create+0x10c/0x890
[  103.947281][ T6543]  hashlimit_mt_check_common+0x763/0xa50
[  103.947310][ T6543]  hashlimit_mt_check_v1+0x2ec/0x550
[  103.947331][ T6543]  ? __pfx_hashlimit_mt_check_v1+0x10/0x10
[  103.947353][ T6543]  ? xt_find_match+0x1e5/0x240
[  103.947384][ T6543]  ? __mutex_unlock_slowpath+0x229/0x800
[  103.947413][ T6543]  xt_check_match+0x36a/0xa40
[  103.947442][ T6543]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  103.947469][ T6543]  ? __pfx_xt_check_match+0x10/0x10
[  103.947509][ T6543]  ? xt_find_match+0x1e5/0x240
[  103.947543][ T6543]  translate_table+0x1721/0x24b0
[  103.947569][ T6543]  ? __x64_sys_setsockopt+0x1ee/0x280
[  103.947585][ T6543]  ? do_syscall_64+0xf3/0x230
[  103.947607][ T6543]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.947653][ T6543]  ? __pfx_translate_table+0x10/0x10
[  103.947716][ T6543]  ? copy_from_sockptr_offset+0x60/0xb0
[  103.947745][ T6543]  do_ip6t_set_ctl+0xe53/0x1270
[  103.947775][ T6543]  ? __pfx___mutex_trylock_common+0x10/0x10
[  103.947809][ T6543]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  103.947849][ T6543]  ? __mutex_unlock_slowpath+0x229/0x800
[  103.947879][ T6543]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  103.947924][ T6543]  ? futex_wait+0x287/0x370
[  103.947949][ T6543]  nf_setsockopt+0x295/0x2c0
[  103.947982][ T6543]  rawv6_setsockopt+0x2b3/0x6d0
[  103.948002][ T6543]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  103.948020][ T6543]  ? aa_sock_opt_perm+0x79/0x120
[  103.948046][ T6543]  ? sock_common_setsockopt+0x37/0xc0
[  103.948076][ T6543]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  103.948100][ T6543]  do_sock_setsockopt+0x3b1/0x710
[  103.948134][ T6543]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  103.948148][ T6543]  ? __fget_files+0x2a/0x420
[  103.948167][ T6543]  ? __fget_files+0x39d/0x420
[  103.948181][ T6543]  ? __fget_files+0x2a/0x420
[  103.948205][ T6543]  __x64_sys_setsockopt+0x1ee/0x280
[  103.948229][ T6543]  do_syscall_64+0xf3/0x230
[  103.948249][ T6543]  ? clear_bhb_loop+0x45/0xa0
[  103.948269][ T6543]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.948286][ T6543] RIP: 0033:0x7f3e1578d169
[  103.948300][ T6543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  103.948313][ T6543] RSP: 002b:00007f3e16587038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  103.948330][ T6543] RAX: ffffffffffffffda RBX: 00007f3e159a6080 RCX: 00007f3e1578d169
[  103.948342][ T6543] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007
[  103.948351][ T6543] RBP: 00007f3e1580e990 R08: 00000000000004c0 R09: 0000000000000000
[  103.948361][ T6543] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000
[  103.948371][ T6543] R13: 0000000000000000 R14: 00007f3e159a6080 R15: 00007ffea6d4dbd8
[  103.948398][ T6543]  </TASK>
[  103.956351][ T6543] Mem-Info:
[  104.110789][ T6550] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  104.113295][ T6543] active_anon:9676 inactive_anon:0 isolated_anon:0
[  104.113295][ T6543]  active_file:1553 inactive_file:38306 isolated_file:0
[  104.113295][ T6543]  unevictable:768 dirty:697 writeback:0
[  104.113295][ T6543]  slab_reclaimable:9940 slab_unreclaimable:97149
[  104.113295][ T6543]  mapped:34559 shmem:7165 pagetables:804
[  104.113295][ T6543]  sec_pagetables:0 bounce:0
[  104.113295][ T6543]  kernel_misc_reclaimable:0
[  104.113295][ T6543]  free:1339534 free_pcp:250 free_cma:0
[  104.259123][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.210'.
[  104.261909][ T6543] Node 0 active_anon:38704kB inactive_anon:0kB active_file:6212kB inactive_file:153152kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:142336kB dirty:2784kB writeback:0kB shmem:27124kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10804kB pagetables:3216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  104.453373][ T6543] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  104.488236][ T6543] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  104.516268][ T6543] lowmem_reserve[]: 0 2487 2487 2487 2487
[  104.522107][ T6543] Node 0 DMA32 free:1436696kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:38696kB inactive_anon:0kB active_file:6212kB inactive_file:153060kB unevictable:1536kB writepending:2776kB present:3129332kB managed:2547224kB mlocked:0kB bounce:0kB free_pcp:1108kB local_pcp:436kB free_cma:0kB
[  104.552922][ T6543] lowmem_reserve[]: 0 0 0 0 0
[  104.557682][ T6543] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:8kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  104.584309][ T6543] lowmem_reserve[]: 0 0 0 0 0
[  104.589060][ T6543] Node 1 Normal free:3904972kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:340kB local_pcp:244kB free_cma:0kB
[  104.619130][ T6543] lowmem_reserve[]: 0 0 0 0 0
[  104.624518][ T6543] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  104.637317][ T6543] Node 0 DMA32: 1*4kB (U) 15*8kB (UME) 6*16kB (ME) 27*32kB (UME) 13*64kB (UME) 19*128kB (UME) 13*256kB (UME) 15*512kB (UM) 7*1024kB (UME) 5*2048kB (UME) 343*4096kB (UM) = 1437692kB
[  104.657972][ T6543] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  104.669658][ T6543] Node 1 Normal: 131*4kB (UM) 42*8kB (UME) 33*16kB (UME) 221*32kB (UME) 103*64kB (UME) 30*128kB (UME) 14*256kB (UME) 9*512kB (UME) 5*1024kB (UM) 3*2048kB (UE) 944*4096kB (M) = 3904972kB
[  104.688614][ T6543] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  104.698257][ T6543] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  104.708543][ T6543] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  104.723216][ T6543] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  104.732704][ T6543] 47024 total pagecache pages
[  104.737456][ T6543] 0 pages in swap cache
[  104.742499][ T6543] Free swap  = 124996kB
[  104.746787][ T6543] Total swap = 124996kB
[  104.750993][ T6543] 2097051 pages RAM
[  104.755364][ T6551] batadv_slave_0: entered promiscuous mode
[  104.761391][ T6543] 0 pages HighMem/MovableOnly
[  104.770147][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.780726][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.790571][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.801066][ T6543] 428587 pages reserved
[  104.805261][ T6543] 0 pages cma reserved
[  104.836721][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.862701][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.891156][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.903890][   T10] tipc: Node number set to 4269801488
[  104.925477][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.940530][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.951006][ T6555] FAULT_INJECTION: forcing a failure.
[  104.951006][ T6555] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  104.964187][ T6555] CPU: 0 UID: 0 PID: 6555 Comm: syz.0.211 Not tainted 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 PREEMPT(full) 
[  104.964212][ T6555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  104.964224][ T6555] Call Trace:
[  104.964232][ T6555]  <TASK>
[  104.964240][ T6555]  dump_stack_lvl+0x241/0x360
[  104.964277][ T6555]  ? __pfx_dump_stack_lvl+0x10/0x10
[  104.964306][ T6555]  ? __pfx__printk+0x10/0x10
[  104.964347][ T6555]  should_fail_ex+0x424/0x570
[  104.964374][ T6555]  _copy_to_user+0x31/0xb0
[  104.964405][ T6555]  simple_read_from_buffer+0xc4/0x170
[  104.964440][ T6555]  proc_fail_nth_read+0x1ef/0x260
[  104.964464][ T6555]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  104.964489][ T6555]  ? rw_verify_area+0x246/0x630
[  104.964510][ T6555]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  104.964533][ T6555]  vfs_read+0x21f/0xb90
[  104.964561][ T6555]  ? __pfx___mutex_lock+0x10/0x10
[  104.964589][ T6555]  ? __pfx_vfs_read+0x10/0x10
[  104.964615][ T6555]  ? __fget_files+0x2a/0x420
[  104.964635][ T6555]  ? __fget_files+0x39d/0x420
[  104.964651][ T6555]  ? __fget_files+0x2a/0x420
[  104.964680][ T6555]  ksys_read+0x19d/0x2d0
[  104.964705][ T6555]  ? __pfx_ksys_read+0x10/0x10
[  104.964735][ T6555]  ? do_syscall_64+0xb6/0x230
[  104.964764][ T6555]  do_syscall_64+0xf3/0x230
[  104.964790][ T6555]  ? clear_bhb_loop+0x45/0xa0
[  104.964814][ T6555]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.964833][ T6555] RIP: 0033:0x7f3e1578bb7c
[  104.964850][ T6555] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  104.964866][ T6555] RSP: 002b:00007f3e165a8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  104.964886][ T6555] RAX: ffffffffffffffda RBX: 00007f3e159a5fa0 RCX: 00007f3e1578bb7c
[  104.964900][ T6555] RDX: 000000000000000f RSI: 00007f3e165a80a0 RDI: 0000000000000004
[  104.964912][ T6555] RBP: 00007f3e165a8090 R08: 0000000000000000 R09: 0000000000000000
[  104.964924][ T6555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  104.964935][ T6555] R13: 0000000000000000 R14: 00007f3e159a5fa0 R15: 00007ffea6d4dbd8
[  104.964974][ T6555]  </TASK>
[  105.327967][ T6453] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.357058][ T6453] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.365575][ T6453] bridge_slave_0: entered allmulticast mode
[  105.377923][ T6453] bridge_slave_0: entered promiscuous mode
[  105.413052][ T6453] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.427789][ T6453] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.439541][ T6453] bridge_slave_1: entered allmulticast mode
[  105.451108][ T6453] bridge_slave_1: entered promiscuous mode
[  105.467243][ T5855] Bluetooth: hci2: command tx timeout
[  105.499488][   T82] hsr_slave_0: left promiscuous mode
[  105.536079][   T82] hsr_slave_1: left promiscuous mode
[  105.564103][   T82] veth0_macvtap: left promiscuous mode
[  105.569986][   T82] veth1_vlan: left promiscuous mode
[  105.578518][   T82] veth0_vlan: left promiscuous mode
[  105.707821][   T82] 
[  105.710184][   T82] ======================================================
[  105.717226][   T82] WARNING: possible circular locking dependency detected
[  105.724255][   T82] 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 Not tainted
[  105.731363][   T82] ------------------------------------------------------
[  105.738398][   T82] kworker/u8:4/82 is trying to acquire lock:
[  105.744378][   T82] ffff8880627f8e00 (team->team_lock_key#3){+.+.}-{4:4}, at: team_vlan_rx_kill_vid+0x36/0xe0
[  105.754473][   T82] 
[  105.754473][   T82] but task is already holding lock:
[  105.761824][   T82] ffff88806208ed30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510
[  105.773406][   T82] 
[  105.773406][   T82] which lock already depends on the new lock.
[  105.773406][   T82] 
[  105.783796][   T82] 
[  105.783796][   T82] the existing dependency chain (in reverse order) is:
[  105.792803][   T82] 
[  105.792803][   T82] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}:
[  105.801359][   T82]        lock_acquire+0x116/0x2f0
[  105.806388][   T82]        __mutex_lock+0x1a5/0x10c0
[  105.811498][   T82]        dev_set_mtu+0x11c/0x270
[  105.816427][   T82]        team_add_slave+0x83b/0x28b0
[  105.821704][   T82]        do_set_master+0x579/0x730
[  105.826809][   T82]        do_setlink+0xf76/0x4390
[  105.831741][   T82]        rtnl_newlink+0x17e2/0x1fe0
[  105.836944][   T82]        rtnetlink_rcv_msg+0x80f/0xd70
[  105.842408][   T82]        netlink_rcv_skb+0x208/0x480
[  105.847692][   T82]        netlink_unicast+0x7f8/0x9a0
[  105.852984][   T82]        netlink_sendmsg+0x8c3/0xcd0
[  105.858274][   T82]        __sock_sendmsg+0x221/0x270
[  105.863470][   T82]        ____sys_sendmsg+0x523/0x860
[  105.868752][   T82]        __sys_sendmsg+0x271/0x360
[  105.873862][   T82]        do_syscall_64+0xf3/0x230
[  105.878895][   T82]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.885304][   T82] 
[  105.885304][   T82] -> #0 (team->team_lock_key#3){+.+.}-{4:4}:
[  105.893478][   T82]        validate_chain+0xa69/0x24e0
[  105.898760][   T82]        __lock_acquire+0xad5/0xd80
[  105.903967][   T82]        lock_acquire+0x116/0x2f0
[  105.908998][   T82]        __mutex_lock+0x1a5/0x10c0
[  105.914120][   T82]        team_vlan_rx_kill_vid+0x36/0xe0
[  105.919752][   T82]        vlan_vid_del+0x483/0x770
[  105.924770][   T82]        vlan_device_event+0x23c/0x1e00
[  105.930310][   T82]        notifier_call_chain+0x1a5/0x3f0
[  105.935945][   T82]        dev_close_many+0x33e/0x4c0
[  105.941147][   T82]        unregister_netdevice_many_notify+0x628/0x2510
[  105.947997][   T82]        default_device_exit_batch+0x7ff/0x880
[  105.954153][   T82]        cleanup_net+0x8af/0xd60
[  105.959089][   T82]        process_scheduled_works+0xac3/0x18e0
[  105.965152][   T82]        worker_thread+0x870/0xd50
[  105.970259][   T82]        kthread+0x7b7/0x940
[  105.974847][   T82]        ret_from_fork+0x4b/0x80
[  105.979781][   T82]        ret_from_fork_asm+0x1a/0x30
[  105.985055][   T82] 
[  105.985055][   T82] other info that might help us debug this:
[  105.985055][   T82] 
[  105.995278][   T82]  Possible unsafe locking scenario:
[  105.995278][   T82] 
[  106.002718][   T82]        CPU0                    CPU1
[  106.008082][   T82]        ----                    ----
[  106.013438][   T82]   lock(&dev_instance_lock_key#3);
[  106.018642][   T82]                                lock(team->team_lock_key#3);
[  106.026100][   T82]                                lock(&dev_instance_lock_key#3);
[  106.033823][   T82]   lock(team->team_lock_key#3);
[  106.038765][   T82] 
[  106.038765][   T82]  *** DEADLOCK ***
[  106.038765][   T82] 
[  106.046902][   T82] 5 locks held by kworker/u8:4/82:
[  106.052001][   T82]  #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0
[  106.062893][   T82]  #1: ffffc90001557c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0
[  106.073413][   T82]  #2: ffffffff900f0910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60
[  106.082807][   T82]  #3: ffffffff900fd448 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xde/0x880
[  106.092829][   T82]  #4: ffff88806208ed30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510
[  106.104839][   T82] 
[  106.104839][   T82] stack backtrace:
[  106.110722][   T82] CPU: 0 UID: 0 PID: 82 Comm: kworker/u8:4 Not tainted 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 PREEMPT(full) 
[  106.110742][   T82] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  106.110753][   T82] Workqueue: netns cleanup_net
[  106.110775][   T82] Call Trace:
[  106.110781][   T82]  <TASK>
[  106.110788][   T82]  dump_stack_lvl+0x241/0x360
[  106.110812][   T82]  ? __pfx_dump_stack_lvl+0x10/0x10
[  106.110833][   T82]  ? __pfx__printk+0x10/0x10
[  106.110854][   T82]  ? print_lock+0x171/0x1a0
[  106.110878][   T82]  print_circular_bug+0x2e1/0x300
[  106.110898][   T82]  check_noncircular+0x142/0x160
[  106.110920][   T82]  validate_chain+0xa69/0x24e0
[  106.110948][   T82]  __lock_acquire+0xad5/0xd80
[  106.110967][   T82]  lock_acquire+0x116/0x2f0
[  106.110981][   T82]  ? team_vlan_rx_kill_vid+0x36/0xe0
[  106.111000][   T82]  __mutex_lock+0x1a5/0x10c0
[  106.111020][   T82]  ? team_vlan_rx_kill_vid+0x36/0xe0
[  106.111036][   T82]  ? __cancel_work+0x24c/0x390
[  106.111056][   T82]  ? team_vlan_rx_kill_vid+0x36/0xe0
[  106.111069][   T82]  ? __cancel_work+0x2f0/0x390
[  106.111088][   T82]  ? __pfx___mutex_lock+0x10/0x10
[  106.111106][   T82]  ? __pfx___cancel_work+0x10/0x10
[  106.111126][   T82]  ? do_raw_spin_unlock+0x13c/0x8b0
[  106.111151][   T82]  team_vlan_rx_kill_vid+0x36/0xe0
[  106.111166][   T82]  vlan_vid_del+0x483/0x770
[  106.111184][   T82]  vlan_device_event+0x23c/0x1e00
[  106.111201][   T82]  ? br_device_event+0x28f/0xae0
[  106.111221][   T82]  ? __pfx_phonet_device_notify+0x10/0x10
[  106.111237][   T82]  ? __pfx_vlan_device_event+0x10/0x10
[  106.111251][   T82]  ? __pfx_br_device_event+0x10/0x10
[  106.111270][   T82]  ? raw_notifier+0x9d/0x740
[  106.111290][   T82]  ? isotp_notifier+0xa4/0x6b0
[  106.111323][   T82]  ? cgw_notifier+0xd8/0x3b0
[  106.111337][   T82]  ? packet_notifier+0x76/0xa30
[  106.111378][   T82]  notifier_call_chain+0x1a5/0x3f0
[  106.111402][   T82]  dev_close_many+0x33e/0x4c0
[  106.111427][   T82]  ? __pfx_dev_close_many+0x10/0x10
[  106.111453][   T82]  unregister_netdevice_many_notify+0x628/0x2510
[  106.111477][   T82]  ? lockdep_hardirqs_on+0x9d/0x150
[  106.111497][   T82]  ? __local_bh_enable_ip+0x168/0x200
[  106.111513][   T82]  ? batadv_tt_local_remove+0x119/0x230
[  106.111530][   T82]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  106.111546][   T82]  ? batadv_tt_local_remove+0x119/0x230
[  106.111562][   T82]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  106.111588][   T82]  ? unregister_netdevice_queue+0x2c4/0x400
[  106.111621][   T82]  ? batadv_meshif_destroy_netlink+0x1e6/0x270
[  106.111648][   T82]  default_device_exit_batch+0x7ff/0x880
[  106.111677][   T82]  ? __pfx_default_device_exit_batch+0x10/0x10
[  106.111702][   T82]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  106.111725][   T82]  ? cfg802154_pernet_exit+0xc3/0xe0
[  106.111741][   T82]  ? __pfx_default_device_exit_batch+0x10/0x10
[  106.111766][   T82]  cleanup_net+0x8af/0xd60
[  106.111793][   T82]  ? __pfx_cleanup_net+0x10/0x10
[  106.111821][   T82]  ? process_scheduled_works+0x9cb/0x18e0
[  106.111839][   T82]  process_scheduled_works+0xac3/0x18e0
[  106.111874][   T82]  ? __pfx_process_scheduled_works+0x10/0x10
[  106.111896][   T82]  ? assign_work+0x367/0x3d0
[  106.111915][   T82]  worker_thread+0x870/0xd50
[  106.111940][   T82]  ? __kthread_parkme+0x1a8/0x200
[  106.111961][   T82]  ? __pfx_worker_thread+0x10/0x10
[  106.111980][   T82]  kthread+0x7b7/0x940
[  106.112003][   T82]  ? __pfx_worker_thread+0x10/0x10
[  106.112022][   T82]  ? __pfx_kthread+0x10/0x10
[  106.112044][   T82]  ? __pfx_kthread+0x10/0x10
[  106.112065][   T82]  ? __pfx_kthread+0x10/0x10
[  106.112087][   T82]  ? __pfx_kthread+0x10/0x10
[  106.112109][   T82]  ? _raw_spin_unlock_irq+0x23/0x50
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  106.112125][   T82]  ? lockdep_hardirqs_on+0x9d/0x150
[  106.112144][   T82]  ? __pfx_kthread+0x10/0x10
[  106.112166][   T82]  ret_from_fork+0x4b/0x80
[  106.112186][   T82]  ? __pfx_kthread+0x10/0x10
[  106.112211][   T82]  ret_from_fork_asm+0x1a/0x30
[  106.112233][   T82]  </TASK>
[  106.561519][   T82] pimreg (unregistering): left allmulticast mode
[  107.838215][ T5841] syz-executor (5841) used greatest stack depth: 19256 bytes left