last executing test programs:

44.674309852s ago: executing program 2 (id=144):
socket$kcm(0x2, 0x2, 0x73)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r1, r0, 0x2, 0x0, 0x4000, @void, @value}, 0x10)
socket$kcm(0x2, 0x2, 0x73)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r2, 0x0, 0xc, 0x0, 0x0)

44.517289995s ago: executing program 2 (id=145):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
syz_emit_ethernet(0x46, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r2, &(0x7f0000000140)={0x2, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14)
recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffc4c, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0)

43.807833946s ago: executing program 2 (id=150):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
r3 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'dvmrp0\x00'})
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x44, 0x8, [{{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@mcast2}]}]}, 0xfc}}, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)}, 0x20002003)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x1, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
r8 = socket$kcm(0x2d, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000040)={r9})
ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000080)={r10})
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8)
writev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x100, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmmsg$unix(r12, &(0x7f00000bd000), 0x318, 0x0)

39.53724391s ago: executing program 3 (id=167):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r2)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000240)={0x30, r3, 0x700, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x5}]}, 0x30}}, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x120, 0x120, 0x7, [@type_tag={0x3, 0x0, 0x0, 0x12, 0x3}, @volatile, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x2}, {0x9, 0x2}, {0x9, 0x1}, {0x1}, {0x9, 0x4}]}, @float={0x10, 0x0, 0x0, 0x10, 0x1f}, @union={0x7, 0x6, 0x0, 0x5, 0x1, 0xfe, [{0x6, 0x2, 0x6}, {0xb, 0x5, 0x1}, {0x6, 0x4, 0x8001}, {0x3, 0x4, 0x80}, {0xa, 0x5, 0x7}, {0x4, 0x2, 0x4}]}, @enum={0x6, 0x3, 0x0, 0x6, 0x4, [{0x7, 0x19d}, {0x3, 0x9}, {0xf, 0x4}]}, @var={0xf, 0x0, 0x0, 0xe, 0x3, 0x1}, @enum64={0xe, 0x1, 0x0, 0x13, 0x1, 0xd, [{0xe, 0x10001, 0xffffffff}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x9}}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x5}]}, {0x0, [0x0, 0x5f, 0x30, 0x61, 0x1e]}}, &(0x7f0000000600)=""/250, 0x13f, 0xfa, 0x1, 0x0, 0x10000, @value=r7}, 0x28)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r5, r6, 0x2, 0x2, 0x0, @void, @value}, 0x10)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$kcm(0x2, 0xa, 0x2)
r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0xffe}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
recvmsg(r10, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000240)=""/201, 0xc9}], 0x1}, 0x0)
write$tun(r8, &(0x7f0000000400)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0xc, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @local, {[@ssrr={0x89, 0x7, 0x97, [@remote]}, @cipso={0x86, 0x14, 0x1, [{0x0, 0x8, "bcc65485b754"}, {0x2, 0x6, "bf1ef478"}]}]}}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x2, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @loopback}}}}, 0x5a)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0xfffffffffffffcfa, 0x2, "547d9ed0effe82c024750032ea49f09c72384049bcc87e42ca7e2c78d6a85178e447e32b5f4e4fabff6fb16a40901dc4221e42eb745b6332c476d0c3aefed8dc95af179570cf8cc43bc29eb93c6e78f5e1153d3d7c1542f77dc4b29877e2002685e850f2969cf2164fbf8db7e1713786899d2a8ab03ca5accb2e9b50e1fb7a4e3681b35f0f68461daa4f4e1583b9a02195dee35ae7c8bca085399157d5f30c2ec691c39267b2655c782b363a11645a0c78a39fab8c0ce69f11f2db45ee16e2975a80664f687d01bd7444244a25bdb9ec5b0fa8b1afc0254ddbca2e22ca1b189502b74d7ec4665c23804df713183d428f50a0d64e31e110c707eb3fe69f437992"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xffffffff, 0x401, 0xffff, 0x2, 0xc, 0xe, 0x24}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8040}, 0x0)

37.320445748s ago: executing program 3 (id=175):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @dev={0xfe, 0x80, '\x00', 0x19}, 0x1}}, 0x24)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x95}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x7ad8, 0xfffffffd}, {0xfffffffc, 0x80003}]}})
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$rxrpc(0x21, 0x2, 0xa) (async)
connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @dev={0xfe, 0x80, '\x00', 0x19}, 0x1}}, 0x24) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x95}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x7ad8, 0xfffffffd}, {0xfffffffc, 0x80003}]}}) (async)

36.908999997s ago: executing program 3 (id=180):
socket$alg(0x26, 0x5, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000013c0))
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket$inet6(0xa, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x300, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840)
r1 = socket$inet6(0xa, 0x1, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0)

26.158663752s ago: executing program 2 (id=150):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
r3 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'dvmrp0\x00'})
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x44, 0x8, [{{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@mcast2}]}]}, 0xfc}}, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)}, 0x20002003)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x1, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
r8 = socket$kcm(0x2d, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000040)={r9})
ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000080)={r10})
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8)
writev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x100, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmmsg$unix(r12, &(0x7f00000bd000), 0x318, 0x0)

24.592351696s ago: executing program 3 (id=180):
socket$alg(0x26, 0x5, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000013c0))
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket$inet6(0xa, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x300, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840)
r1 = socket$inet6(0xa, 0x1, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0)

16.198132625s ago: executing program 2 (id=150):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
r3 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'dvmrp0\x00'})
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x44, 0x8, [{{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@mcast2}]}]}, 0xfc}}, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)}, 0x20002003)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x1, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
r8 = socket$kcm(0x2d, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000040)={r9})
ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000080)={r10})
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8)
writev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x100, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmmsg$unix(r12, &(0x7f00000bd000), 0x318, 0x0)

14.298151902s ago: executing program 3 (id=180):
socket$alg(0x26, 0x5, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000013c0))
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket$inet6(0xa, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x300, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840)
r1 = socket$inet6(0xa, 0x1, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0)

6.711468805s ago: executing program 2 (id=150):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
r3 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'dvmrp0\x00'})
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x44, 0x8, [{{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@mcast2}]}]}, 0xfc}}, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)}, 0x20002003)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x1, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
r8 = socket$kcm(0x2d, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000040)={r9})
ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000080)={r10})
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8)
writev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x100, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmmsg$unix(r12, &(0x7f00000bd000), 0x318, 0x0)

5.405362445s ago: executing program 4 (id=394):
unshare(0x68040200)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x74, 0x0, 0x8, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xc212}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xece482b2}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa100}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
openat$tun(0xffffffffffffff9c, 0x0, 0x40201, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, 0x0, 0x0)
listen(r2, 0x1ff)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a00)={@cgroup, 0xffffffffffffffff, 0x1f, 0x200c, 0x0, @value}, 0x20)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r3, 0x0, 0x0, 0xc1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0)
writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
close(r5)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
write$tun(r6, &(0x7f0000000a40)={@val={0x0, 0x8884}, @val={0x1, 0x4, 0xffff, 0xf3c2, 0x80, 0x5}, @ipv6=@generic={0xf, 0x6, "61bcf6", 0x1030, 0x11, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@dstopts={0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xd}}]}], "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"}}}, 0x1066)

4.997516065s ago: executing program 3 (id=180):
socket$alg(0x26, 0x5, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000013c0))
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket$inet6(0xa, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x300, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840)
r1 = socket$inet6(0xa, 0x1, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0)

4.061265656s ago: executing program 4 (id=399):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}, {0x95, 0x0, 0x6000}}, &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={<r3=>0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x1, @loopback, 0x2}]}, &(0x7f00000002c0)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000000c0)={r3, @in6={{0xa, 0x4e20, 0x7, @loopback, 0x3}}, 0x3, 0x8003}, 0x90)

2.968404125s ago: executing program 4 (id=403):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000d1100100140014006e65a61fa59573696d30000000000000140003006772657461703000000000000000000014001680100001800c0009"], 0x5c}, 0x1, 0x0, 0x0, 0x8041}, 0x48008800)

2.862548741s ago: executing program 4 (id=405):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x2a, 0x2, 0x0)
bind$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x0, @empty}}, 0x1e)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_smc(0x2b, 0x1, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x20, r2, 0x431, 0x70bd28, 0xffffffff, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$rds(0x15, 0x5, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x22}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6a}, 0x2c)
bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x80}}], {0x14, 0x11, 0x1, 0xffffffff}}, 0x3c}, 0x1, 0x1200}, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x2f, @remote, 0x4e20, 0x3, 'lc\x00', 0xa, 0x803239, 0x55}, {@multicast1, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r7)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x5c, r8, 0x1, 0x0, 0x0, {0x6, 0x74, 0x600}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:udev_helper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0x5c}, 0x1, 0xffffffff00000003}, 0x40)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)

2.008312438s ago: executing program 1 (id=407):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x31)
r4 = socket(0x28, 0x5, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000002600), 0xffffffffffffffff)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000006c0)={0x6, 0xfffffffffffffff7, 0x4, 0x8, 0x5, 0x0, [{0x3, 0x80000001, 0x1000, '\x00', 0x400}, {0x9, 0x9, 0x1, '\x00', 0x2105}, {0x6, 0x2, 0x7, '\x00', 0x1}, {0x4, 0x98, 0x24e, '\x00', 0x2}, {0x7, 0x5a, 0x5, '\x00', 0x200}]})
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000300)={0x3c, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d6}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) (async)
getsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000000240), &(0x7f0000000340)=0x4) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r7}, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fcffffff37000100040000009500000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000003c0)={r8, 0x2, 0x10000, 0x1}) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'macvtap0\x00'})

1.950837332s ago: executing program 0 (id=408):
unshare(0x2c060000)
unshare(0x24020400)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000100)=0x200000, 0x4)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
listen(r1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = epoll_create1(0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0x7a, &(0x7f0000000340)={0x8, 0x8, 0x6, 0x10, 0x39c1, 0x4, 0x5}, &(0x7f0000000840)=0x20)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="150000001000010000000000000000000000000a20000000000a0300000000000000e4f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000080000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000140)={0x1})
vmsplice(r4, 0x0, 0x0, 0x1)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x35, &(0x7f00000004c0)={0x0, 0xfd7a}, 0x1, 0x0, 0x0, 0x20000000}, 0x24040044)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x0, 0x4b, 0x0, 0x0, 0x1000000, 0x0, @void, @value}, 0x28)
r8 = socket$kcm(0x10, 0x5, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124", 0xffffffffffffff09}, {&(0x7f0000000380)="290c7c83c8f8e2f1a19f93c8438ccd0adecca8dd73520883ba591d5f2bad798c6168c3cc9d7513addcf7f9c9130e4fd5cd8d8d331963995613917f694ad992e9433de63a0869479111212fbe52f0dfaf3e09cccef730aeb880552c51c66e82166bb7307f630e0f1148c34dffd7a1c774acfc0c13573745905cce73a6b6aff3da7f3a1455486ade21894784a26f01f5a3f3b88a5f3ff66720013ab8f5129c6b21e10feb3d8439b0671bd93f8270622adb167a4cb5f486642f133ae436b8b942fdd57a5e2e2690a0772481ece2ca9a8139caaff0dcca77292c934d32c48722e68689800a"}, {&(0x7f0000000500)="509301173291d2cc4add595d0c529fef809a79c1b32ca4c6ecfc455bdf0e52e6c88d4df06e26cbf14c59a56d6b3dd9dfed045b7edce841c42dca1a2f50ea608d0f92c4deba8fbe34258c278dd9eab136e1ac83056c204ead38d06570f037bb427bbac9aa626b671c8c14f2e5de8373fdd961db5103f9a1e967fc37cfb6c65fd79614296bbba0791738960544d0e6aa850f9882cc480028dcbbc76ca5129419ad1f68163bac14b50a4a48dcf6eadb86c0ffe74faa4e447455a3c2c5fb67f133fbf408c63bf1e763160d"}], 0x1}, 0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000780)={0x0, @in={{0x2, 0x4e1d, @multicast1}}, 0x7}, 0x90)
connect$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={<r9=>0x0, 0x8, 0x7}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x3, 0x6, 0x9, r9}, &(0x7f0000000180)=0xffffffffffffffe5)

1.769028345s ago: executing program 0 (id=409):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
syz_emit_ethernet(0x46, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5)
recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffc4c, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) (fail_nth: 22)

1.766495406s ago: executing program 1 (id=410):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x3, 0xf}, {0xffff, 0x8}, {0xf, 0x3}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x4000)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x46, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r3, 0x80000000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, r6, 0x301, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x3, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0xfffff801, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)=0x3)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r7}, &(0x7f00000002c0), &(0x7f0000000440)=r4}, 0x20)
r8 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000b00)={'veth0\x00', &(0x7f0000000100)=@ethtool_link_settings={0x21, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfe, 0x8, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0, 0x2, 0x1]}})
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000406000000fedbdf250000000008000700", @ANYRES32=r3, @ANYRESHEX=r0, @ANYRES32=r1, @ANYBLOB="08000200000000000800080002000000"], 0x34}, 0x1, 0x0, 0x0, 0x2000091}, 0x40080)

1.485147812s ago: executing program 0 (id=411):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
recvmmsg(r2, &(0x7f0000001ac0)=[{{&(0x7f0000000340)=@tipc=@id, 0x80, &(0x7f0000000740)=[{&(0x7f00000005c0)=""/76, 0x4c}, {&(0x7f0000000640)=""/238, 0xee}], 0x2, &(0x7f0000000780)=""/178, 0xb2}, 0xfffffff1}, {{&(0x7f0000000880)=@pppol2tpv3={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001b40), 0x0, &(0x7f0000001a00)=""/165, 0xa5}, 0x7b7}], 0x2, 0x0, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x9, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000840), &(0x7f0000000a80)=0x8)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000140)={'gre0\x00', <r5=>0x0, 0x40, 0x8, 0xff, 0x40, {{0x2c, 0x4, 0x3, 0x15, 0xb0, 0x68, 0x0, 0x9, 0x4, 0x0, @remote, @remote, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x4c, 0x8c, 0x3, 0x8, [{@broadcast, 0x7}, {@empty, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x8}, {@local, 0x6}, {@broadcast, 0x7ff}, {@remote, 0x314}, {@broadcast, 0x7f}, {@broadcast, 0xb}]}, @lsrr={0x83, 0x1f, 0xb, [@private=0xa010102, @empty, @broadcast, @broadcast, @local, @broadcast, @remote]}, @timestamp_prespec={0x44, 0x2c, 0x9, 0x3, 0x5, [{@local, 0x5502}, {@remote, 0x200}, {@remote, 0x1}, {@multicast2, 0x8}, {@local, 0x8}]}]}}}}})
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r6, &(0x7f0000000580)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x10001}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}], 0x1, 0x880)
shutdown(r6, 0x1)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x1, 0x10, 0x9, 0x6}, &(0x7f0000000100)=0x18)
r7 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000003c0)={0x0, <r8=>0x0}, &(0x7f0000000440)=0xc)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r9, &(0x7f0000001f00)=[{{&(0x7f00000003c0)={0xa, 0x4e23, 0x0, @loopback, 0x200}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000080)='\b', 0x1}], 0x1}}], 0x1, 0x14018891)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r9, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="c5bc4c3472"], 0x1000f)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r8}}]}, 0x28}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
getpeername$packet(r3, &(0x7f0000000280)={0x11, 0x0, <r10=>0x0}, &(0x7f00000002c0)=0x14)
r11 = syz_init_net_socket$ax25(0x3, 0x2, 0xce)
r12 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000240)={0x0, <r13=>0x0}, &(0x7f0000000400)=0xc)
ioctl$SIOCAX25ADDUID(r11, 0x89e1, &(0x7f0000000140)={0x3, @bcast, r13})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f00000004c0)={'erspan0\x00', <r14=>0x0, 0x1, 0x10, 0xd, 0x1, {{0xd, 0x4, 0x0, 0x3, 0x34, 0x67, 0x0, 0x8, 0x4, 0x0, @multicast2, @multicast2, {[@timestamp={0x44, 0xc, 0xb0, 0x0, 0x4, [0xfff, 0x8]}, @timestamp_addr={0x44, 0x14, 0x60, 0x1, 0x8, [{@remote, 0x7fffffff}, {@broadcast, 0x401}]}]}}}}})
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000d00)=@updpolicy={0x284, 0x19, 0x2, 0x70bd25, 0x25dfdbfb, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e24, 0x8, 0xa, 0x60, 0x80, 0x16, r5, r8}, {0xf2e, 0x7, 0x8, 0x8000, 0x80000001, 0x5, 0xa, 0xffffffffffffffff}, {0x9, 0xfffffffffffffff9, 0x7, 0x7}, 0x6, 0x0, 0x1, 0x1, 0x0, 0x3}, [@policy={0xac, 0x7, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e20, 0xff, 0x4e21, 0x4, 0x2, 0x8fbb0fab78086b1b, 0x100, 0x32, r10, r13}, {0x9, 0x4, 0x3, 0x3, 0x3, 0x80000001, 0x1, 0x4}, {0x100000000, 0x4, 0xea, 0x9}, 0x7fff, 0x6e6bba, 0x1, 0x1, 0x2}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x9}, @offload={0xc, 0x1c, {r14, 0x1}}, @sec_ctx={0x10a, 0x8, {0x106, 0x8, 0x1, 0x3, 0xfe, "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"}}]}, 0x284}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000800)
connect$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x1, 0x1}}, 0x10)
accept$unix(r3, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e)

1.361740114s ago: executing program 0 (id=412):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)={0x114, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@generic="24d4e3455c7216da3484447f8a081f930884b55764ca84de3d0e7bc8d6f29cd84ba9408cf2351604f1724e10a8fcc3988de886d82375980e92a1ba2f8410b06773cbbf6293af17222761aa1289e6a8f1d888f4809cdccfe1c8695630dcb6bad9b53d1d97f2f820a715ce709fcaa40a70dc4c98ebbe761c0eec46d4f50508215e72fc781a471b1a7c769a074f2d6388253cfdd4b0e37a788fbb7296ae39bb35439c66437fa3347adfaca46f74fbc95f1b070287096cc9bdc953ea637c118a68a8ddc03aa44e8aa8ca5dac063a05", @typed={0x2d, 0x0, 0x0, 0x0, @binary="8bb982eb4ec7e08b552a2807c00bbfbbb5369dd1e04690a1267e29e89d27673db50050419e278e6130"}]}]}, 0x114}], 0x1}, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
syz_emit_ethernet(0xffffffb1, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x1638, 0x1408, 0x1408, 0x12d0, 0x12d0, 0x12d0, 0x1568, 0x1568, 0x1568, 0x1568, 0x1568, 0x6, 0x0, {[{{@ipv6={@loopback, @local, [0x100fffe00, 0xffffff00, 0x0, 0xffffffff], [0xff, 0xff, 0xff, 0xffffff00], 'netpci0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x4, 0x8, 0x3, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x6f}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0x1108, 0x1130, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0x7, {0x5}}}, @common=@inet=@l2tp={{0x30}, {0x2, 0x3, 0x3, 0x1, 0x4}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x10, @ipv4=@remote, 0x4e20}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@loopback, 0x9, 0xb, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1698)

1.276898945s ago: executing program 0 (id=413):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="18070000000000000000000000000000851000000200000026000000ffffff859500007bc562896dc3d95600ad000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x2, 0x92, &(0x7f0000000240)=""/146, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000023000000180001801400020073797a5f74756e000000000000000000"], 0x2c}}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448)
unshare(0x2c060000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r4}, 0x10)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x33)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000611800000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
setsockopt$sock_attach_bpf(r5, 0x6, 0xd, &(0x7f0000000000), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)={<r7=>0xffffffffffffffff})
r8 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000c"], 0x68}, 0x0)
setsockopt$sock_attach_bpf(r7, 0x10f, 0x82, 0x0, 0x0)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x3, 0x0, 0x6, 0x12, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x6, 0xb8, 0x0, 0x0, @in={0x2, 0x3, @private}}, @sadb_sa={0x2, 0x1, 0x800, 0x0, 0x0, 0x3, 0x4}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @broadcast}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e22, 0x6e6, @remote, 0x100}, @in6={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}}}]}, 0x90}, 0x1, 0x7}, 0x0)
sendmsg$netlink(r6, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002700010000000000000000000c0000800800"], 0x1c}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r10 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r10, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r10, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)

1.27364245s ago: executing program 1 (id=414):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r1=>0x0})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000100))
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
unshare(0x24070400)
socket$inet6(0xa, 0x1, 0x35)
r3 = socket$igmp6(0xa, 0x3, 0x2)
socket$packet(0x11, 0x3, 0x300)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r4 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
sendmmsg$inet(r4, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001c40)="2cae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecaff0f0002ff91deb3efa91762cdeefbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10d5df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dbfaf8eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a", 0x257}, {&(0x7f00000001c0)="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"/814, 0x32e}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x4000000)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$rds(0x15, 0x5, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x7, 0x0, 0xa0)

984.86052ms ago: executing program 1 (id=415):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000001d80)=[{{&(0x7f0000000100)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x4040010)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r1=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r1}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
close(r4)
bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0x1}}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10)
bind$tipc(r3, 0x0, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
sendmmsg(r6, &(0x7f0000002940)=[{{0x0, 0x4a, &(0x7f0000000100)=[{&(0x7f00000001c0)}], 0x1}}], 0x1, 0x0)
ioctl$FS_IOC_GETFSLABEL(r6, 0x800452d2, &(0x7f0000000100))
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002380)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0xfffffffe, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x205, 0x0, 0x2, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x6, 0x40000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xc0000000, 0x0, 0xffffffff, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x9, 0x0, 0x400, 0x0, 0x80, 0x0, 0x0, 0x7ed, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa39f, 0x5f9ffbe5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x20001, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf3e, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xdbcc, 0xfffffffe, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6cf, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x800, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x12000004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x9d69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7, 0x3ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x18, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4, 0xffffff01, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xe0, 0x2, 0xfffc, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r8}, 0x18)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x5)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r10, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000002c40)={0x1804, r11, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x2d}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_HE_OBSS_PD={0x10, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x10}]}, @NL80211_ATTR_P2P_OPPPS={0x5}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_HEAD={0x363, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3}, @device_b, @broadcast, @random="7e1fc904faba", {0x9}}, 0x6cfe, @random=0x6, 0x310, @void, @void, @void, @void, @val={0x6, 0x2, 0x8}, @val={0x5, 0x6d, {0x9, 0x31, 0xd8, "b194eda8ee58f62bf10b1404f129092d5025997dd3df212a4a81df5df1cba819e4e146b61ba45b391ee755472ff1f61ec0c8b435ec4ca20e00e4fa7d4b211ddd85dbaed6872ce76232718d715e343eca26bd336dd4ee4505c43d29765068468dd61f0f05cd8eef0c8c41"}}, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x1, 0x6, 0x64, 0x8}}, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x8}}, @void, [{0xdd, 0x61, "6fa405bad318b1656b4d1ff6e1369ef506f286fa4f61daf8d9ebb704128bd5ac1b2cc259d3954be745ea64af8d604724c1953329d5764528f229e436ba9430418babfdd434f818268d09dde03b29c6b15573b3d9264a59b8af3aa861f2ead1dad9"}, {0xdd, 0x40, "5fe1a34cc7d9edfd8ea10f202e3b6f3970f71462a6751905db5a06d540cb8668912259762037f346823314de44a4e4a5a334580c324ec884ba4430e1b5ac4527"}, {0xdd, 0x56, "13c53ae9b30c96befa342c5f13378d61e3519a3da98f16d10472a2718cd83d791edb2988556d7d50ea49165a9ffca7d4bbe3a062869490b660c9ccd89f22bffec252523af2be6cf2380476006b198a99500f8501e024"}, {0xdd, 0x4e, "1fa1ba615c279f58bea7f77df69ab125d687e11fa74b2fb7fd3636e3075dad18027dfaa6d9e80f172a288036c73ee80e2b3bf6c6538eea01e912af6c825a51d0f8e2c90ffd999db72a6318653441"}, {0xdd, 0x8, "18dd350247dd54b6"}, {0xdd, 0x68, "074731f187672917935797f2873699a54b62266fd3cde63b36ba91ea4df9032aa5f1aab6a8947e81fd8681cf454007adc53690b76a2e7374c0884e4b82343ce56f8c616403dd21b785c45fa38d12abb94f625e15c2fb6360cc22fd9dfb1b8219a503b57fc3e9624c"}, {0xdd, 0xf3, "62c84c1889caadf456e02078f9b9bf9fac8f689ae689ac4777a77c832f8e42ad98f90d17b3efdb1e8c7fd9d2a62e12cb8b04828f48aac9e9a4395ced17e12dbcc0a436e1dc4b4ea3eb44ce0e7edbbd2c2ea734208a9d4c5fcbaab12afba50ec2d5ffed5e7df5a5999b84098eda9989c5aaf491d87e1a9747b5fe6b4dc97b810ee845b7a94398cdfa58278e6020b985302903693203d29fe6c07aa1d3b14eb4ac49a1d6fe363da63c38e40d6278796e5071de3f3bab30210f419b9626bad182a1d6d5b1a8908aed166c4cdcbd54f743af73f82a76c241f6771c636702a76dd9aedb546015780e363db6d7b7b64801df7d0edd35"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x1a, 0x7f, [@mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x1, 0x0, 0x81, 0x1}}, @ssid={0x0, 0x8, @random="f81fbdd339c40198"}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_FTM_RESPONDER={0x1298, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xea, 0x2, "bb55db085830898e08ee37a9e1045127a37ac9a5756174f20eac0563685da9b09a984c18fd2e8397eb0dd04c2bfed6665415d21d6d4698ce696e691afae2f0bc4758ddeed0fae6289e84c4bd485cc17afd7d6ba980d7b90594eabe3fb6dfb33b6188867b995f7503ea192f3a7c915d7a48bb848be9841e2aebdcbe0f4e16ebbbed95fad9d7108fab0493cc1435409d05ee4b2d65e3a9661cbf4028c41e00cf4aa099d2044576dbbf00ca8f1005fdee567dd259bbbe7a13bd02656bcc7739b41f58c5438182df8f172a7488ee6395db49926a5eb8f421681fa97b038e693e44a7ecc389dbf292"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x84, 0x3, "cf9c24cdba674a21ac4707dba093e8860832e5cfff40a5d95a736bab1ee773333606b014a65b016b71f316133a4f65df256434e0695113c3b38d1563cd2c38843d3a03d7c36523509a8d772d60d4b10aa81915b89410d577544f23e41c0d59aee80860cb7974878522f1858375fd4f6f6f72576789bf526a97de55afaa2d8643"}, @NL80211_FTM_RESP_ATTR_LCI={0x2b, 0x2, "337a0c72dd909a32ce2da6c95ad9fc56a3c94293c8b6f8e634e59dae36a4411dbefd420914624a"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xe5, 0x2, "dfa3c2fc780dd1817948b8f10ab04381220be0100b2ba62bb7bfd81fa92f6c660b9dab19d2b7a9358dab6207393babf9a2d10ea190eb55663d48224146b3190a997756e632da452086468769d1671166311f02718d4c32ef5f663c282cc00ac458c290c577a3b92a0429433b837cbbab674f7ca21d959abf11cc27dc1be6ee201030b1c5db816b488b98c6b731fa84455e0d838a0072483ed26d84e9f7e93ed02a559723f381a3183fbafba51e305935c116017023e76543ef1b20557cdfb5ac7f8d72aca63173c09afbe15365c8cc0bd0635baf91eea0f1f553e6114030a99009"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}]}], @NL80211_ATTR_TX_RATES={0x178, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x3, 0x1ff, 0x6, 0x9, 0x9, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7a2a, 0x0, 0x11, 0x0, 0x5, 0xe, 0x40]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xffff, 0x1, 0x5d, 0x1, 0x0, 0x1, 0x2]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x32, 0xffff, 0x3, 0x6, 0x8, 0x5, 0x7, 0xfffd]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x2, 0x24, 0x6, 0x4, 0x9, 0x30, 0x66, 0x24, 0x5, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x1, 0xa, 0x2, 0x8, 0x5, 0x8, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0xb, 0x6c, 0x6c, 0x16, 0x88f110108936ce7e, 0x18, 0x1b, 0x1, 0x2, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0x1, 0x6, 0x1, 0x5, 0x7, 0x3ff]}}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0x0, 0x2, 0x5, 0xfffd, 0x4, 0x2]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x9, 0x9, 0x5, 0x3, 0x920a602f684e5747, 0x30, 0x48, 0x3, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x36, 0x6c, 0x4, 0x36, 0x18, 0x18, 0x2, 0x60, 0x16, 0x2, 0x24, 0xb, 0x36, 0x12, 0x16, 0x60, 0xb, 0x3, 0x12, 0x16, 0xb, 0x9, 0x6c, 0x43, 0x18, 0x820feb4831096bc2, 0xc, 0x3, 0x60, 0x24, 0x12, 0x0]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc9, 0xfff7, 0x2, 0x9, 0x6, 0x9, 0x6]}}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x4, 0x6, 0x4, 0x0, 0x2, 0x7, 0xb]}}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x1, 0x3}, {0x1, 0x7}, {0x1, 0x5}, {0x2, 0x5}, {0x5, 0xa}, {0x0, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0xfff3, 0x7, 0xaf, 0x4, 0x1, 0x5]}}]}]}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xb}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0x1804}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010)
r12 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r12, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000900feffffff7600000000000000000000000000000000000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108)

759.462911ms ago: executing program 4 (id=416):
r0 = socket$tipc(0x1e, 0x2, 0x0)
connect$tipc(r0, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}, 0x18}], 0x300, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x360, 0xa, 0x148, 0x360, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xd8, 0x0, {0x200003ae, 0x7f00}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz0\x00', {0x30f6a663}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x268)

758.407116ms ago: executing program 1 (id=417):
socket$tipc(0x1e, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xf1, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x8032, 0xffffffffffffffff, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10)
setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000040)={'mangle\x00', 0x0, [0x81, 0x4000105, 0x9, 0x8001, 0x9]}, &(0x7f0000000400)=0x54)

72.99037ms ago: executing program 4 (id=418):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030700000000000000000b00000008000300", @ANYRES32=r2], 0x1c}}, 0x0) (fail_nth: 7)

9.09676ms ago: executing program 1 (id=419):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)=@gettaction={0x14, 0x32, 0x300, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x20004000)
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES16=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="08001bc0d4c9abda092e0f7e64f52b02c04d150018362baaa9200fa29b87d820ee3949c9816a64cefd5de39bc0e32da70c7ab02dadd1ed95708f0648cd9bd685ce338eb8e86293deb8b5aa77d82678f70f3bebba3f6ee1608db7d2761a31c326c745c20799510431e414ce4201fd2dba88373765506c96c0501f3920a87aa1b61819"], 0x30}, 0x1, 0x0, 0x0, 0x4040400}, 0x20008001)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f00200e000a000f00008001f300001294", 0x2e}], 0x1, 0x0, 0xfffffffffffffdd6}, 0x4000)
close(0xffffffffffffffff)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'ip6gre0\x00', @link_local})
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x5411, &(0x7f00000007c0))
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="100100000b060108000000000000000002000001840008800c00078008001c40000000080c000780050015000f0000000c000780080009400000001a18000780140017007465616d"], 0x110}, 0x1, 0x0, 0x0, 0x4008000}, 0x44)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r6, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000040)=0x5a3a, 0x4)
sendto$inet(r6, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0xffffffffffffff52, &(0x7f00000026c0)=""/141, 0x96}, 0x2}], 0x1, 0x2101, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000911071000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)

0s ago: executing program 0 (id=420):
r0 = socket$inet6(0xa, 0x1, 0x100)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async)
sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e1c, 0x0, @loopback}, 0x1c) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={<r2=>0x0, @empty, @multicast2}, &(0x7f00000000c0)=0xc)
setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000180)={@rand_addr=' \x01\x00', r2}, 0x14)
sendmmsg$inet6(r1, &(0x7f000000ff00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="ff798e9fe2c9daa20f2df35c63e33d67161d", 0x12}], 0x1}}], 0x1, 0x4000800)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2b, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)

kernel console output (not intermixed with test programs):

man_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.969623][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.058748][ T5843] team0: Port device team_slave_0 added
[   79.084268][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.091215][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.117448][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.129906][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.137495][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.163601][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.176539][ T5843] team0: Port device team_slave_1 added
[   79.189600][ T5833] team0: Port device team_slave_0 added
[   79.228739][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.235791][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.262032][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.275666][ T5833] team0: Port device team_slave_1 added
[   79.282035][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.289362][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.315609][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.334080][ T5852] Bluetooth: hci2: command tx timeout
[   79.339932][ T5849] Bluetooth: hci0: command tx timeout
[   79.343333][ T5852] Bluetooth: hci1: command tx timeout
[   79.403389][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.410552][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.416525][ T5849] Bluetooth: hci3: command tx timeout
[   79.418991][ T5851] bridge_slave_0: entered allmulticast mode
[   79.423215][ T5852] Bluetooth: hci4: command tx timeout
[   79.432481][ T5851] bridge_slave_0: entered promiscuous mode
[   79.463067][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.470008][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.496164][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.508743][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.516467][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.542755][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.555399][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.562501][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.569701][ T5851] bridge_slave_1: entered allmulticast mode
[   79.577331][ T5851] bridge_slave_1: entered promiscuous mode
[   79.602471][ T5834] hsr_slave_0: entered promiscuous mode
[   79.609151][ T5834] hsr_slave_1: entered promiscuous mode
[   79.651360][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.665794][ T5845] hsr_slave_0: entered promiscuous mode
[   79.672021][ T5845] hsr_slave_1: entered promiscuous mode
[   79.678651][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.686395][ T5845] Cannot create hsr debugfs directory
[   79.720841][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.774414][ T5843] hsr_slave_0: entered promiscuous mode
[   79.780631][ T5843] hsr_slave_1: entered promiscuous mode
[   79.786966][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.794572][ T5843] Cannot create hsr debugfs directory
[   79.829888][ T5851] team0: Port device team_slave_0 added
[   79.839169][ T5851] team0: Port device team_slave_1 added
[   79.860516][ T5833] hsr_slave_0: entered promiscuous mode
[   79.868010][ T5833] hsr_slave_1: entered promiscuous mode
[   79.874608][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.882162][ T5833] Cannot create hsr debugfs directory
[   79.987137][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.994296][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.021092][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.039582][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.047073][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.074213][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.308669][ T5851] hsr_slave_0: entered promiscuous mode
[   80.317427][ T5851] hsr_slave_1: entered promiscuous mode
[   80.323813][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.331368][ T5851] Cannot create hsr debugfs directory
[   80.547175][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   80.558799][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   80.580931][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   80.605903][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   80.677969][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   80.704599][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   80.723612][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   80.745091][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   80.757462][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   80.775611][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   80.786782][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   80.799197][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   80.914963][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   80.926490][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   80.955033][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   80.981824][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   81.076180][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   81.110244][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   81.121804][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   81.145272][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   81.176971][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.198290][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.221850][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.265945][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   81.276755][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   81.300610][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.307846][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.318119][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.325255][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.338913][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   81.362684][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.369800][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.379608][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.386726][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.401411][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.408566][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.416027][ T5852] Bluetooth: hci0: command tx timeout
[   81.421438][ T5852] Bluetooth: hci2: command tx timeout
[   81.427260][ T5849] Bluetooth: hci1: command tx timeout
[   81.441645][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.476058][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.483190][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.494147][ T5849] Bluetooth: hci3: command tx timeout
[   81.499583][ T5852] Bluetooth: hci4: command tx timeout
[   81.538555][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   81.572521][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   81.599031][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.606144][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.665745][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.672891][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.747081][ T5834] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   81.776854][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   81.818491][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.911544][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   81.939865][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.982029][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.989210][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.017331][  T740] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.024488][  T740] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.204520][ T5833] veth0_vlan: entered promiscuous mode
[   82.261526][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.280649][ T5833] veth1_vlan: entered promiscuous mode
[   82.329438][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.359434][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.398378][ T5833] veth0_macvtap: entered promiscuous mode
[   82.443867][ T5833] veth1_macvtap: entered promiscuous mode
[   82.540066][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.574652][ T5845] veth0_vlan: entered promiscuous mode
[   82.589241][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.610805][ T5843] veth0_vlan: entered promiscuous mode
[   82.637331][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.649139][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.660814][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.671816][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.690837][ T5845] veth1_vlan: entered promiscuous mode
[   82.725894][ T5843] veth1_vlan: entered promiscuous mode
[   82.737714][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.859684][ T5845] veth0_macvtap: entered promiscuous mode
[   82.886650][ T5834] veth0_vlan: entered promiscuous mode
[   82.916046][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.925641][ T5843] veth0_macvtap: entered promiscuous mode
[   82.935668][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.944074][ T5845] veth1_macvtap: entered promiscuous mode
[   82.955481][ T5851] veth0_vlan: entered promiscuous mode
[   82.970593][ T5843] veth1_macvtap: entered promiscuous mode
[   82.986325][ T5834] veth1_vlan: entered promiscuous mode
[   82.995720][ T5851] veth1_vlan: entered promiscuous mode
[   83.019480][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.028527][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.039406][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.039446][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.057720][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.107296][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.122299][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.135820][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.149601][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.161400][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.171718][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.188043][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.199792][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.220214][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   83.241261][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.259624][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.269892][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.280876][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.291837][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.310100][ T5843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.318967][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.327821][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.336772][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.349770][ T5845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.363778][ T5845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.372499][ T5845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.384109][ T5845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.398418][ T5834] veth0_macvtap: entered promiscuous mode
[   83.419562][ T5851] veth0_macvtap: entered promiscuous mode
[   83.445999][ T5851] veth1_macvtap: entered promiscuous mode
[   83.456381][ T5834] veth1_macvtap: entered promiscuous mode
[   83.497471][ T5852] Bluetooth: hci0: command tx timeout
[   83.503115][ T5852] Bluetooth: hci2: command tx timeout
[   83.503638][ T5849] Bluetooth: hci1: command tx timeout
[   83.544955][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.555882][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.566018][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.576454][ T5849] Bluetooth: hci4: command tx timeout
[   83.576491][ T5849] Bluetooth: hci3: command tx timeout
[   83.588330][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.598756][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.609542][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.620843][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.657227][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.670089][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.680041][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.691011][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.700896][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.711596][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.721945][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.735987][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.748288][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.798091][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.808907][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.819502][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.830287][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.840393][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.850894][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.862067][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.901000][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.911704][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.921816][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.932631][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.942494][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.953122][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.962937][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.973816][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.984997][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.009010][ T5851] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.017914][ T5851] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.027327][ T5851] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.036421][ T5851] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.069870][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.090721][ T5834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.113209][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.113300][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.140605][ T5834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.154395][ T5834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.302237][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.312688][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.326824][ T5925] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   84.345411][ T5925] xt_TPROXY: Can be used only with -p tcp or -p udp
[   84.418056][ T3522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.430098][ T3522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.536940][ T3522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.556222][ T3522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.579723][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.600386][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.680816][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.698745][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.755631][ T1313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.791131][ T1313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.809026][ T5929] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4'.
[   84.877811][ T1313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.915942][ T1313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.368745][ T5943] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9'.
[   85.515985][ T5948] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   85.585619][ T5852] Bluetooth: hci1: command tx timeout
[   85.585636][ T5849] Bluetooth: hci2: command tx timeout
[   85.591026][ T5852] Bluetooth: hci0: command tx timeout
[   85.658815][ T5849] Bluetooth: hci3: command tx timeout
[   85.658862][ T5840] Bluetooth: hci4: command tx timeout
[   85.671122][ T5948] netlink: 'syz.0.10': attribute type 12 has an invalid length.
[   85.681131][ T5948] netlink: 'syz.0.10': attribute type 29 has an invalid length.
[   85.696870][ T5948] netlink: 148 bytes leftover after parsing attributes in process `syz.0.10'.
[   85.707080][ T5948] netlink: 'syz.0.10': attribute type 2 has an invalid length.
[   85.718430][ T5948] netlink: 43 bytes leftover after parsing attributes in process `syz.0.10'.
[   86.411563][ T5965] syzkaller0: tun_chr_ioctl cmd 1074025677
[   86.431054][ T5965] syzkaller0: linktype set to 774
[   86.448210][ T5965] syz.4.15 uses obsolete (PF_INET,SOCK_PACKET)
[   86.484620][ T5965] hsr0: entered promiscuous mode
[   86.491716][ T5946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'.
[   86.497567][ T5965] hsr0: entered allmulticast mode
[   86.518199][ T5965] hsr_slave_0: entered allmulticast mode
[   86.540319][ T5946] netlink: 'syz.2.3': attribute type 1 has an invalid length.
[   86.558659][ T5965] hsr_slave_1: entered allmulticast mode
[   86.573306][ T5946] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3'.
[   88.356975][ T5977] syzkaller0: entered promiscuous mode
[   88.362484][ T5977] syzkaller0: entered allmulticast mode
[   88.650196][ T5988] tipc: Failed to remove unknown binding: 66,3,3/0:2402489260/2402489261
[   91.145408][ T5999] netlink: 32 bytes leftover after parsing attributes in process `syz.3.24'.
[   91.184727][ T5999] netlink: 48 bytes leftover after parsing attributes in process `syz.3.24'.
[   91.324240][ T5999] netlink: 56 bytes leftover after parsing attributes in process `syz.3.24'.
[   91.546601][ T6010] xt_TPROXY: Can be used only with -p tcp or -p udp
[   91.659724][    T9] cfg80211: failed to load regulatory.db
[   91.790188][ T6017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29'.
[   92.201244][ T6021] Zero length message leads to an empty skb
[   92.209749][ T6021] warning: `syz.4.31' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   92.450828][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'.
[   92.460426][ T6040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'.
[   92.479688][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33'.
[   92.522468][ T6040] netlink: 'syz.2.33': attribute type 14 has an invalid length.
[   92.556401][ T6036] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   92.565722][ T6040] netlink: 'syz.2.33': attribute type 13 has an invalid length.
[   92.675370][ T6051] xt_TPROXY: Can be used only with -p tcp or -p udp
[   92.741272][ T6054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.36'.
[   92.999699][ T6063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.37'.
[   93.120936][ T6063] netlink: 'syz.0.37': attribute type 39 has an invalid length.
[   93.870111][ T6100] netlink: 256 bytes leftover after parsing attributes in process `syz.4.47'.
[   93.921134][ T6100] netlink: 'syz.4.47': attribute type 9 has an invalid length.
[   93.967129][ T6096] netlink: 'syz.0.46': attribute type 10 has an invalid length.
[   93.977352][ T6096] batman_adv: batadv0: Adding interface: virt_wifi0
[   93.987767][ T6096] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.022831][ T6096] batman_adv: batadv0: Interface activated: virt_wifi0
[   94.330193][ T6117] xt_hashlimit: size too large, truncated to 1048576
[   95.148332][ T6153] netlink: 'syz.2.59': attribute type 6 has an invalid length.
[   95.559203][ T6162] netlink: 'syz.2.64': attribute type 1 has an invalid length.
[   96.399004][ T6202] netlink: 'syz.1.75': attribute type 21 has an invalid length.
[   97.151650][ T6237] tipc: Started in network mode
[   97.164072][ T6237] tipc: Node identity 5f2eae3eba01d6f4002e, cluster identity 4711
[   97.211747][ T6240] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[   97.233345][ T6240] batman_adv: batadv0: Adding interface: ip6gretap1
[   97.250884][ T6240] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.323420][ T6240] batman_adv: batadv0: Interface activated: ip6gretap1
[   97.463460][ T6253] __nla_validate_parse: 11 callbacks suppressed
[   97.463478][ T6253] netlink: 256 bytes leftover after parsing attributes in process `syz.0.86'.
[   97.572915][ T6258] netlink: 112 bytes leftover after parsing attributes in process `syz.4.89'.
[   97.811241][ T6268] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[   98.019174][ T6282] netlink: 24 bytes leftover after parsing attributes in process `syz.2.97'.
[   98.070438][ T6286] netlink: 'syz.4.98': attribute type 1 has an invalid length.
[   98.081970][ T6286] netlink: 224 bytes leftover after parsing attributes in process `syz.4.98'.
[   99.048512][ T6299] FAULT_INJECTION: forcing a failure.
[   99.048512][ T6299] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   99.117991][ T6299] CPU: 1 UID: 0 PID: 6299 Comm: syz.4.102 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) 
[   99.118020][ T6299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   99.118037][ T6299] Call Trace:
[   99.118045][ T6299]  <TASK>
[   99.118054][ T6299]  dump_stack_lvl+0x241/0x360
[   99.118099][ T6299]  ? __pfx_dump_stack_lvl+0x10/0x10
[   99.118132][ T6299]  ? __pfx__printk+0x10/0x10
[   99.118174][ T6299]  should_fail_ex+0x424/0x570
[   99.118221][ T6299]  _copy_from_user+0x2d/0xb0
[   99.118250][ T6299]  sk_setsockopt+0x2af/0x3340
[   99.118292][ T6299]  ? __pfx_sk_setsockopt+0x10/0x10
[   99.118330][ T6299]  ? aa_sk_perm+0x96f/0xac0
[   99.118361][ T6299]  ? ksys_write+0x24e/0x2d0
[   99.118383][ T6299]  ? __pfx_aa_sk_perm+0x10/0x10
[   99.118411][ T6299]  ? aa_sock_opt_perm+0x79/0x120
[   99.118447][ T6299]  do_sock_setsockopt+0x2fe/0x710
[   99.118486][ T6299]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   99.118515][ T6299]  ? __fget_files+0x2a/0x420
[   99.118550][ T6299]  ? __fget_files+0x39d/0x420
[   99.118578][ T6299]  ? __fget_files+0x2a/0x420
[   99.118617][ T6299]  __x64_sys_setsockopt+0x1ee/0x280
[   99.118670][ T6299]  do_syscall_64+0xf3/0x230
[   99.118694][ T6299]  ? clear_bhb_loop+0x45/0xa0
[   99.118717][ T6299]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.118750][ T6299] RIP: 0033:0x7f8e6c18d169
[   99.118769][ T6299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   99.118783][ T6299] RSP: 002b:00007f8e6cf70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   99.118803][ T6299] RAX: ffffffffffffffda RBX: 00007f8e6c3a6080 RCX: 00007f8e6c18d169
[   99.118815][ T6299] RDX: 000000000000001e RSI: 0000000000000001 RDI: 0000000000000003
[   99.118825][ T6299] RBP: 00007f8e6cf70090 R08: 0000000000000004 R09: 0000000000000000
[   99.118835][ T6299] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[   99.118846][ T6299] R13: 0000000000000001 R14: 00007f8e6c3a6080 R15: 00007fff8a60a278
[   99.118873][ T6299]  </TASK>
[   99.450270][ T6301] Driver unsupported XDP return value 0 on prog  (id 46) dev N/A, expect packet loss!
[  100.016314][ T6332] tipc: Failed to remove unknown binding: 66,3,3/0:1042964620/1042964621
[  100.134361][ T6337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.113'.
[  100.276578][ T6348] netlink: 44 bytes leftover after parsing attributes in process `syz.3.118'.
[  100.583677][ T6358] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5)
[  100.644852][ T6359] xt_CT: No such helper "netbios-ns"
[  100.913603][ T6364] FAULT_INJECTION: forcing a failure.
[  100.913603][ T6364] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  100.949101][ T6364] CPU: 0 UID: 0 PID: 6364 Comm: syz.3.123 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) 
[  100.949126][ T6364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  100.949137][ T6364] Call Trace:
[  100.949143][ T6364]  <TASK>
[  100.949151][ T6364]  dump_stack_lvl+0x241/0x360
[  100.949183][ T6364]  ? __pfx_dump_stack_lvl+0x10/0x10
[  100.949208][ T6364]  ? __pfx__printk+0x10/0x10
[  100.949242][ T6364]  should_fail_ex+0x424/0x570
[  100.949275][ T6364]  _copy_to_user+0x31/0xb0
[  100.949301][ T6364]  simple_read_from_buffer+0xc4/0x170
[  100.949338][ T6364]  proc_fail_nth_read+0x1ef/0x260
[  100.949369][ T6364]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  100.949399][ T6364]  ? rw_verify_area+0x246/0x630
[  100.949416][ T6364]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  100.949445][ T6364]  vfs_read+0x21f/0xb90
[  100.949468][ T6364]  ? __pfx___mutex_lock+0x10/0x10
[  100.949492][ T6364]  ? __pfx_vfs_read+0x10/0x10
[  100.949513][ T6364]  ? __fget_files+0x2a/0x420
[  100.949540][ T6364]  ? __fget_files+0x39d/0x420
[  100.949563][ T6364]  ? __fget_files+0x2a/0x420
[  100.949598][ T6364]  ksys_read+0x19d/0x2d0
[  100.949618][ T6364]  ? __pfx_ksys_read+0x10/0x10
[  100.949643][ T6364]  ? do_syscall_64+0xb6/0x230
[  100.949669][ T6364]  do_syscall_64+0xf3/0x230
[  100.949691][ T6364]  ? clear_bhb_loop+0x45/0xa0
[  100.949713][ T6364]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.949729][ T6364] RIP: 0033:0x7f259d98bb7c
[  100.949744][ T6364] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  100.949758][ T6364] RSP: 002b:00007f259e737030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  100.949777][ T6364] RAX: ffffffffffffffda RBX: 00007f259dba6080 RCX: 00007f259d98bb7c
[  100.949789][ T6364] RDX: 000000000000000f RSI: 00007f259e7370a0 RDI: 0000000000000004
[  100.949800][ T6364] RBP: 00007f259e737090 R08: 0000000000000000 R09: 0000000000000000
[  100.949810][ T6364] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[  100.949821][ T6364] R13: 0000000000000001 R14: 00007f259dba6080 R15: 00007fff19e50e18
[  100.949849][ T6364]  </TASK>
[  101.876328][ T6393] netlink: 'syz.4.131': attribute type 10 has an invalid length.
[  101.905625][ T6393] netlink: 40 bytes leftover after parsing attributes in process `syz.4.131'.
[  101.996177][ T6393] team0: Port device geneve0 added
[  102.009905][ T6403] xt_TCPMSS: Only works on TCP SYN packets
[  102.078660][ T6403] netlink: 'syz.2.136': attribute type 1 has an invalid length.
[  102.250191][ T6410] FAULT_INJECTION: forcing a failure.
[  102.250191][ T6410] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  102.283108][ T6410] CPU: 0 UID: 0 PID: 6410 Comm: syz.4.140 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) 
[  102.283132][ T6410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  102.283143][ T6410] Call Trace:
[  102.283150][ T6410]  <TASK>
[  102.283158][ T6410]  dump_stack_lvl+0x241/0x360
[  102.283188][ T6410]  ? __pfx_dump_stack_lvl+0x10/0x10
[  102.283212][ T6410]  ? __pfx__printk+0x10/0x10
[  102.283251][ T6410]  should_fail_ex+0x424/0x570
[  102.283283][ T6410]  _copy_from_user+0x2d/0xb0
[  102.283309][ T6410]  bpf_test_init+0xf5/0x170
[  102.283335][ T6410]  bpf_prog_test_run_xdp+0x492/0x1200
[  102.283380][ T6410]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  102.283405][ T6410]  ? __fget_files+0x2a/0x420
[  102.283433][ T6410]  ? __fget_files+0x2a/0x420
[  102.283462][ T6410]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  102.283487][ T6410]  bpf_prog_test_run+0x2e4/0x360
[  102.283509][ T6410]  __sys_bpf+0x4ee/0x8b0
[  102.283527][ T6410]  ? __pfx___sys_bpf+0x10/0x10
[  102.283556][ T6410]  ? ksys_write+0x275/0x2d0
[  102.283587][ T6410]  __x64_sys_bpf+0x7c/0x90
[  102.283612][ T6410]  do_syscall_64+0xf3/0x230
[  102.283635][ T6410]  ? clear_bhb_loop+0x45/0xa0
[  102.283656][ T6410]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.283673][ T6410] RIP: 0033:0x7f8e6c18d169
[  102.283689][ T6410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  102.283702][ T6410] RSP: 002b:00007f8e6cf91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  102.283721][ T6410] RAX: ffffffffffffffda RBX: 00007f8e6c3a5fa0 RCX: 00007f8e6c18d169
[  102.283734][ T6410] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  102.283744][ T6410] RBP: 00007f8e6cf91090 R08: 0000000000000000 R09: 0000000000000000
[  102.283755][ T6410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  102.283765][ T6410] R13: 0000000000000000 R14: 00007f8e6c3a5fa0 R15: 00007fff8a60a278
[  102.283792][ T6410]  </TASK>
[  102.842523][ T6426] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  102.846072][ T6422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'.
[  102.911523][ T6422] netlink: 80 bytes leftover after parsing attributes in process `syz.0.141'.
[  103.516115][ T6438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.147'.
[  103.575320][ T6439] netlink: 'syz.4.147': attribute type 1 has an invalid length.
[  103.739647][ T6444] netlink: 24 bytes leftover after parsing attributes in process `syz.3.149'.
[  103.775310][ T6444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.149'.
[  103.790639][ T6447] netlink: 16 bytes leftover after parsing attributes in process `syz.1.151'.
[  103.805988][ T6444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.149'.
[  103.817107][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.151'.
[  103.832257][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.946009][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.040503][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.107312][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.204920][ T6452] netlink: 100 bytes leftover after parsing attributes in process `syz.3.153'.
[  104.220348][ T6452] netlink: 100 bytes leftover after parsing attributes in process `syz.3.153'.
[  104.291565][ T6452] netlink: 'syz.3.153': attribute type 39 has an invalid length.
[  104.543544][ T6457] raw_sendmsg: syz.4.154 forgot to set AF_INET. Fix it!
[  104.652877][   T13] bridge_slave_1: left allmulticast mode
[  104.691259][   T13] bridge_slave_1: left promiscuous mode
[  104.719646][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.749488][ T6461] netlink: 'syz.1.155': attribute type 2 has an invalid length.
[  104.778817][   T13] bridge_slave_0: left allmulticast mode
[  104.811370][   T13] bridge_slave_0: left promiscuous mode
[  104.825494][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.858382][   T13] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  104.942209][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  104.952714][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  104.960584][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  104.969596][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  104.978683][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  105.084173][   T13] batman_adv: batadv0: Removing interface: ip6gretap1
[  105.543578][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  105.565249][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  105.579938][   T13] bond0 (unregistering): Released all slaves
[  105.940110][   T13] tipc: Left network mode
[  106.663822][ T6495] Cannot find add_set index 1 as target
[  107.026288][ T5849] Bluetooth: hci4: command tx timeout
[  107.363460][ T6511] tipc: Can't bind to reserved service type 0
[  107.491016][ T6516] FAULT_INJECTION: forcing a failure.
[  107.491016][ T6516] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  107.553129][ T6516] CPU: 1 UID: 0 PID: 6516 Comm: syz.4.163 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) 
[  107.553159][ T6516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  107.553172][ T6516] Call Trace:
[  107.553180][ T6516]  <TASK>
[  107.553189][ T6516]  dump_stack_lvl+0x241/0x360
[  107.553226][ T6516]  ? __pfx_dump_stack_lvl+0x10/0x10
[  107.553254][ T6516]  ? __pfx__printk+0x10/0x10
[  107.553296][ T6516]  should_fail_ex+0x424/0x570
[  107.553334][ T6516]  _copy_from_user+0x2d/0xb0
[  107.553364][ T6516]  copy_msghdr_from_user+0xb3/0x580
[  107.553398][ T6516]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  107.553442][ T6516]  do_recvmmsg+0x3bf/0xab0
[  107.553476][ T6516]  ? __pfx_do_recvmmsg+0x10/0x10
[  107.553515][ T6516]  ? rcu_read_lock_any_held+0xbb/0x160
[  107.553541][ T6516]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  107.553571][ T6516]  ? vfs_write+0xb29/0xd10
[  107.553603][ T6516]  ? ksys_write+0x24e/0x2d0
[  107.553628][ T6516]  ? __mutex_unlock_slowpath+0x229/0x800
[  107.553666][ T6516]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  107.553691][ T6516]  ? __fget_files+0x2a/0x420
[  107.553738][ T6516]  __x64_sys_recvmmsg+0x1ab/0x260
[  107.553762][ T6516]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  107.553791][ T6516]  ? do_syscall_64+0xb6/0x230
[  107.553821][ T6516]  do_syscall_64+0xf3/0x230
[  107.553855][ T6516]  ? clear_bhb_loop+0x45/0xa0
[  107.553880][ T6516]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.553899][ T6516] RIP: 0033:0x7f8e6c18d169
[  107.553917][ T6516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  107.553933][ T6516] RSP: 002b:00007f8e6cf91038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  107.553955][ T6516] RAX: ffffffffffffffda RBX: 00007f8e6c3a5fa0 RCX: 00007f8e6c18d169
[  107.553970][ T6516] RDX: 03ffffffffffff62 RSI: 00002000000005c0 RDI: 0000000000000004
[  107.553983][ T6516] RBP: 00007f8e6cf91090 R08: 0000000000000000 R09: 0000000000000000
[  107.553996][ T6516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  107.554007][ T6516] R13: 0000000000000000 R14: 00007f8e6c3a5fa0 R15: 00007fff8a60a278
[  107.554039][ T6516]  </TASK>
[  107.830918][   T13] hsr_slave_0: left promiscuous mode
[  107.857471][   T13] hsr_slave_1: left promiscuous mode
[  107.882659][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.895930][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.978813][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  108.042832][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  108.072757][   T13] veth1_macvtap: left promiscuous mode
[  108.079383][   T13] veth0_macvtap: left promiscuous mode
[  108.087151][   T13] veth1_vlan: left promiscuous mode
[  108.092737][   T13] veth0_vlan: left promiscuous mode
[  108.646343][   T13] team0 (unregistering): Port device team_slave_1 removed
[  108.696297][   T13] team0 (unregistering): Port device team_slave_0 removed
[  109.093124][ T5849] Bluetooth: hci4: command tx timeout
[  109.121563][ T6522] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  109.141244][ T6527] __nla_validate_parse: 2 callbacks suppressed
[  109.141259][ T6527] netlink: 16 bytes leftover after parsing attributes in process `syz.4.166'.
[  109.253697][ T6522] infiniband s9z1: RDMA CMA: cma_listen_on_dev, error -98
[  109.338421][ T6533] syzkaller1: entered promiscuous mode
[  109.359500][ T6533] syzkaller1: entered allmulticast mode
[  109.447941][ T6537] netlink: 280 bytes leftover after parsing attributes in process `syz.3.167'.
[  109.715572][ T6545] xt_TCPMSS: Only works on TCP SYN packets
[  109.723670][ T6548] vlan2: entered allmulticast mode
[  109.728892][ T6548] veth0_to_batadv: entered allmulticast mode
[  109.736200][ T6548] bridge0: port 3(vlan2) entered blocking state
[  109.742564][ T6548] bridge0: port 3(vlan2) entered disabled state
[  109.752174][ T6548] vlan2: entered promiscuous mode
[  109.757520][ T6548] veth0_to_batadv: entered promiscuous mode
[  109.764551][ T6548] bridge0: port 3(vlan2) entered blocking state
[  109.770934][ T6548] bridge0: port 3(vlan2) entered forwarding state
[  109.797942][ T6536] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -1
[  109.918307][ T6469] chnl_net:caif_netlink_parms(): no params data found
[  110.231311][ T6560] batadv0: entered promiscuous mode
[  110.250604][ T6560] batadv_slave_0: entered promiscuous mode
[  110.265650][ T6560] batadv_slave_0: left promiscuous mode
[  110.298987][ T6560] batadv0: left promiscuous mode
[  110.426884][ T6578] team0: Device gtp0 is of different type
[  110.736638][ T6469] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.752210][ T6469] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.780707][ T6469] bridge_slave_0: entered allmulticast mode
[  110.797016][ T6469] bridge_slave_0: entered promiscuous mode
[  110.808613][ T6469] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.833161][ T6469] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.840356][ T6469] bridge_slave_1: entered allmulticast mode
[  110.860437][ T6469] bridge_slave_1: entered promiscuous mode
[  110.991352][ T6469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  111.011624][ T6469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  111.139466][ T6469] team0: Port device team_slave_0 added
[  111.156102][ T6469] team0: Port device team_slave_1 added
[  111.173949][ T5849] Bluetooth: hci4: command tx timeout
[  111.412049][ T6602] syzkaller0: entered promiscuous mode
[  111.417790][ T6602] syzkaller0: entered allmulticast mode
[  111.431253][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  111.439709][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  111.450704][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  111.460582][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  111.469123][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  112.519564][ T6469] batman_adv: batadv0: Adding interface: batadv_slave_0
[  112.527071][ T6469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.553340][ T6469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  112.585190][ T6614] netlink: 'syz.0.187': attribute type 12 has an invalid length.
[  112.592955][ T6614] netlink: 'syz.0.187': attribute type 29 has an invalid length.
[  112.623543][ T6614] netlink: 148 bytes leftover after parsing attributes in process `syz.0.187'.
[  112.674459][ T6469] batman_adv: batadv0: Adding interface: batadv_slave_1
[  112.703042][ T6469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.760425][ T6469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  112.850450][ T6626] xt_TPROXY: Can be used only with -p tcp or -p udp
[  112.932879][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.190'.
[  112.967258][ T6623] netlink: 'syz.1.189': attribute type 7 has an invalid length.
[  113.020074][ T6469] hsr_slave_0: entered promiscuous mode
[  113.040406][ T6469] hsr_slave_1: entered promiscuous mode
[  113.068970][ T6469] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  113.097603][ T6469] Cannot create hsr debugfs directory
[  113.125807][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.190'.
[  113.186874][ T6643] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  113.253401][ T5840] Bluetooth: hci4: command tx timeout
[  113.495660][ T5840] Bluetooth: hci2: command tx timeout
[  113.946513][ T6670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.196'.
[  114.064701][ T6674] FAULT_INJECTION: forcing a failure.
[  114.064701][ T6674] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  114.086237][ T6674] CPU: 0 UID: 0 PID: 6674 Comm: syz.1.197 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) 
[  114.086262][ T6674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  114.086272][ T6674] Call Trace:
[  114.086279][ T6674]  <TASK>
[  114.086287][ T6674]  dump_stack_lvl+0x241/0x360
[  114.086319][ T6674]  ? __pfx_dump_stack_lvl+0x10/0x10
[  114.086344][ T6674]  ? __pfx__printk+0x10/0x10
[  114.086381][ T6674]  should_fail_ex+0x424/0x570
[  114.086418][ T6674]  _copy_from_user+0x2d/0xb0
[  114.086446][ T6674]  copy_msghdr_from_user+0xb3/0x580
[  114.086477][ T6674]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  114.086520][ T6674]  do_recvmmsg+0x3bf/0xab0
[  114.086553][ T6674]  ? __pfx_do_recvmmsg+0x10/0x10
[  114.086586][ T6674]  ? rcu_read_lock_any_held+0xbb/0x160
[  114.086608][ T6674]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  114.086632][ T6674]  ? vfs_write+0xb29/0xd10
[  114.086658][ T6674]  ? ksys_write+0x24e/0x2d0
[  114.086678][ T6674]  ? __mutex_unlock_slowpath+0x229/0x800
[  114.086708][ T6674]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  114.086728][ T6674]  ? __fget_files+0x2a/0x420
[  114.086766][ T6674]  __x64_sys_recvmmsg+0x1ab/0x260
[  114.086786][ T6674]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  114.086810][ T6674]  ? do_syscall_64+0xb6/0x230
[  114.086834][ T6674]  do_syscall_64+0xf3/0x230
[  114.086855][ T6674]  ? clear_bhb_loop+0x45/0xa0
[  114.086875][ T6674]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.086891][ T6674] RIP: 0033:0x7fec3b58d169
[  114.086906][ T6674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  114.086919][ T6674] RSP: 002b:00007fec3c47e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  114.086937][ T6674] RAX: ffffffffffffffda RBX: 00007fec3b7a5fa0 RCX: 00007fec3b58d169
[  114.086949][ T6674] RDX: 03ffffffffffff62 RSI: 00002000000005c0 RDI: 0000000000000004
[  114.086960][ T6674] RBP: 00007fec3c47e090 R08: 0000000000000000 R09: 0000000000000000
[  114.086970][ T6674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  114.086979][ T6674] R13: 0000000000000000 R14: 00007fec3b7a5fa0 R15: 00007fff545c8ed8
[  114.087004][ T6674]  </TASK>
[  114.336462][ T6672] sctp: [Deprecated]: syz.0.196 (pid 6672) Use of int in max_burst socket option.
[  114.336462][ T6672] Use struct sctp_assoc_value instead
[  114.354632][ T6672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.196'.
[  114.481626][ T6680] tipc: Failed to remove unknown binding: 66,3,3/0:1913705213/1913705214
[  114.809027][ T6697] xt_TPROXY: Can be used only with -p tcp or -p udp
[  115.005983][ T6608] chnl_net:caif_netlink_parms(): no params data found
[  115.406168][ T6608] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.423977][ T6608] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.431192][ T6608] bridge_slave_0: entered allmulticast mode
[  115.444062][ T6608] bridge_slave_0: entered promiscuous mode
[  115.577073][ T5840] Bluetooth: hci2: command tx timeout
[  115.579603][ T6608] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.604125][ T6608] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.611333][ T6608] bridge_slave_1: entered allmulticast mode
[  115.636609][ T6608] bridge_slave_1: entered promiscuous mode
[  115.672647][ T6014] udevd[6014]: failed to send result of seq 12183 to main daemon: Connection refused
[  115.705961][ T6712] netlink: 16 bytes leftover after parsing attributes in process `syz.4.206'.
[  115.706637][ T6716] Cannot find add_set index 0 as target
[  115.806759][ T6469] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  115.850822][ T6608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  115.861487][ T6469] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  115.875933][ T6469] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  115.895583][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.208'.
[  115.917351][ T6722] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  115.970975][ T6608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  116.012198][ T6469] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  116.116276][ T6608] team0: Port device team_slave_0 added
[  116.140369][ T6608] team0: Port device team_slave_1 added
[  116.214946][ T6608] batman_adv: batadv0: Adding interface: batadv_slave_0
[  116.221995][ T6608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.249756][ T6608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  116.297320][ T6608] batman_adv: batadv0: Adding interface: batadv_slave_1
[  116.310677][ T6608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.349543][ T6608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  116.571786][ T6608] hsr_slave_0: entered promiscuous mode
[  116.594769][ T6608] hsr_slave_1: entered promiscuous mode
[  116.601015][ T6608] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  116.623040][ T6608] Cannot create hsr debugfs directory
[  116.940437][ T6744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.214'.
[  116.996976][ T6744] 8021q: adding VLAN 0 to HW filter on device bond1
[  117.031084][ T6469] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.065869][ T6746] tipc: Started in network mode
[  117.070951][ T6746] tipc: Node identity 4, cluster identity 4711
[  117.091895][ T6746] tipc: Node number set to 4
[  117.197293][ T6747] 8021q: adding VLAN 0 to HW filter on device bond1
[  117.210449][ T6747] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  117.227966][ T6747] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  117.298037][ T6744] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[  117.309800][ T6744] bond1: (slave wireguard0): Error -95 calling set_mac_address
[  117.479458][ T6763] xt_TPROXY: Can be used only with -p tcp or -p udp
[  117.572511][ T6751] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  117.594747][ T6751] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  117.612070][ T6751] bond0 (unregistering): Released all slaves
[  117.664333][ T5840] Bluetooth: hci2: command tx timeout
[  117.724914][ T6608] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.765404][ T6469] 8021q: adding VLAN 0 to HW filter on device team0
[  117.825895][ T6608] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.867048][ T3522] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.874286][ T3522] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.884175][ T6768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.220'.
[  117.899352][ T6768] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  117.933895][ T6608] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.944528][ T6766] netlink: 'syz.4.219': attribute type 2 has an invalid length.
[  117.952387][ T6766] netlink: 'syz.4.219': attribute type 1 has an invalid length.
[  117.966991][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.974363][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.054975][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.221'.
[  118.078826][ T6608] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.285265][ T6778] netlink: 176 bytes leftover after parsing attributes in process `syz.4.224'.
[  118.317670][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.224'.
[  118.357278][ T6608] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  118.442079][ T6608] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  118.492579][ T6787] x_tables: duplicate underflow at hook 1
[  118.507714][ T6608] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  118.547228][ T6608] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  118.592432][ T6469] 8021q: adding VLAN 0 to HW filter on device batadv0
[  118.653402][ T6797] FAULT_INJECTION: forcing a failure.
[  118.653402][ T6797] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  118.702636][ T6797] CPU: 0 UID: 0 PID: 6797 Comm: syz.0.230 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) 
[  118.702663][ T6797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  118.702674][ T6797] Call Trace:
[  118.702681][ T6797]  <TASK>
[  118.702688][ T6797]  dump_stack_lvl+0x241/0x360
[  118.702719][ T6797]  ? __pfx_dump_stack_lvl+0x10/0x10
[  118.702744][ T6797]  ? __pfx__printk+0x10/0x10
[  118.702780][ T6797]  should_fail_ex+0x424/0x570
[  118.702813][ T6797]  _copy_from_user+0x2d/0xb0
[  118.702839][ T6797]  copy_msghdr_from_user+0xb3/0x580
[  118.702867][ T6797]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  118.702905][ T6797]  do_recvmmsg+0x3bf/0xab0
[  118.702935][ T6797]  ? __pfx_do_recvmmsg+0x10/0x10
[  118.702968][ T6797]  ? rcu_read_lock_any_held+0xbb/0x160
[  118.702991][ T6797]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  118.703016][ T6797]  ? vfs_write+0xb29/0xd10
[  118.703051][ T6797]  ? ksys_write+0x24e/0x2d0
[  118.703073][ T6797]  ? __mutex_unlock_slowpath+0x229/0x800
[  118.703106][ T6797]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  118.703128][ T6797]  ? __fget_files+0x2a/0x420
[  118.703168][ T6797]  __x64_sys_recvmmsg+0x1ab/0x260
[  118.703190][ T6797]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  118.703214][ T6797]  ? do_syscall_64+0xb6/0x230
[  118.703239][ T6797]  do_syscall_64+0xf3/0x230
[  118.703262][ T6797]  ? clear_bhb_loop+0x45/0xa0
[  118.703283][ T6797]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.703300][ T6797] RIP: 0033:0x7f684318d169
[  118.703315][ T6797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  118.703329][ T6797] RSP: 002b:00007f6843fbe038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  118.703348][ T6797] RAX: ffffffffffffffda RBX: 00007f68433a5fa0 RCX: 00007f684318d169
[  118.703361][ T6797] RDX: 03ffffffffffff62 RSI: 00002000000005c0 RDI: 0000000000000004
[  118.703373][ T6797] RBP: 00007f6843fbe090 R08: 0000000000000000 R09: 0000000000000000
[  118.703383][ T6797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  118.703393][ T6797] R13: 0000000000000000 R14: 00007f68433a5fa0 R15: 00007ffdc9d252a8
[  118.703421][ T6797]  </TASK>
[  118.751869][ T6469] veth0_vlan: entered promiscuous mode
[  118.956132][ T6800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.231'.
[  118.966473][ T6800] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  119.061478][ T6469] veth1_vlan: entered promiscuous mode
[  119.129039][ T6608] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.217436][ T6608] 8021q: adding VLAN 0 to HW filter on device team0
[  119.278027][  T740] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.285206][  T740] bridge0: port 1(bridge_slave_0) entered forwarding state
[  119.302100][ T6469] veth0_macvtap: entered promiscuous mode
[  119.320551][  T740] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.327743][  T740] bridge0: port 2(bridge_slave_1) entered forwarding state
[  119.335233][ T6817] xt_TPROXY: Can be used only with -p tcp or -p udp
[  119.416662][ T6469] veth1_macvtap: entered promiscuous mode
[  119.505099][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  119.518159][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.528586][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  119.544388][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.563517][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  119.585847][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.603025][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  119.618055][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.631504][ T6469] batman_adv: batadv0: Interface activated: batadv_slave_0
[  119.671068][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  119.691455][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.706188][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  119.722135][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.732211][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  119.750489][ T5840] Bluetooth: hci2: command tx timeout
[  119.762320][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.778531][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  119.789349][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.807246][ T6469] batman_adv: batadv0: Interface activated: batadv_slave_1
[  119.856986][ T6469] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.867869][ T6469] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.877245][ T6469] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.887181][ T6469] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.929060][ T6828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.241'.
[  119.957548][ T6831] FAULT_INJECTION: forcing a failure.
[  119.957548][ T6831] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  119.985560][ T6828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.241'.
[  120.007643][ T6831] CPU: 0 UID: 0 PID: 6831 Comm: syz.4.242 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) 
[  120.007673][ T6831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  120.007686][ T6831] Call Trace:
[  120.007695][ T6831]  <TASK>
[  120.007705][ T6831]  dump_stack_lvl+0x241/0x360
[  120.007746][ T6831]  ? __pfx_dump_stack_lvl+0x10/0x10
[  120.007775][ T6831]  ? __pfx__printk+0x10/0x10
[  120.007818][ T6831]  should_fail_ex+0x424/0x570
[  120.007857][ T6831]  _copy_from_user+0x2d/0xb0
[  120.007887][ T6831]  copy_msghdr_from_user+0xb3/0x580
[  120.007922][ T6831]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  120.007974][ T6831]  do_recvmmsg+0x3bf/0xab0
[  120.008010][ T6831]  ? __pfx_do_recvmmsg+0x10/0x10
[  120.008050][ T6831]  ? rcu_read_lock_any_held+0xbb/0x160
[  120.008077][ T6831]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  120.008107][ T6831]  ? vfs_write+0xb29/0xd10
[  120.008140][ T6831]  ? ksys_write+0x24e/0x2d0
[  120.008166][ T6831]  ? __mutex_unlock_slowpath+0x229/0x800
[  120.008204][ T6831]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  120.008230][ T6831]  ? __fget_files+0x2a/0x420
[  120.008272][ T6831]  __x64_sys_recvmmsg+0x1ab/0x260
[  120.008295][ T6831]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  120.008321][ T6831]  ? do_syscall_64+0xb6/0x230
[  120.008349][ T6831]  do_syscall_64+0xf3/0x230
[  120.008370][ T6831]  ? clear_bhb_loop+0x45/0xa0
[  120.008393][ T6831]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.008411][ T6831] RIP: 0033:0x7f8e6c18d169
[  120.008427][ T6831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  120.008443][ T6831] RSP: 002b:00007f8e6cf91038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  120.008464][ T6831] RAX: ffffffffffffffda RBX: 00007f8e6c3a5fa0 RCX: 00007f8e6c18d169
[  120.008478][ T6831] RDX: 03ffffffffffff62 RSI: 00002000000005c0 RDI: 0000000000000004
[  120.008491][ T6831] RBP: 00007f8e6cf91090 R08: 0000000000000000 R09: 0000000000000000
[  120.008501][ T6831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  120.008510][ T6831] R13: 0000000000000000 R14: 00007f8e6c3a5fa0 R15: 00007fff8a60a278
[  120.008539][ T6831]  </TASK>
[  120.234100][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.241930][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.308567][ T6828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.241'.
[  120.354082][ T6828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.241'.
[  120.380157][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.404888][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.439763][ T6608] 8021q: adding VLAN 0 to HW filter on device batadv0
[  120.450446][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'.
[  120.608956][ T6608] veth0_vlan: entered promiscuous mode
[  120.622012][ T6608] veth1_vlan: entered promiscuous mode
[  120.646633][ T6828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.241'.
[  120.655768][ T6828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.241'.
[  120.715630][ T6854] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  120.736445][ T6608] veth0_macvtap: entered promiscuous mode
[  120.850736][ T6608] veth1_macvtap: entered promiscuous mode
[  120.899491][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.923338][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.937339][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.948545][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.959080][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.979020][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.989822][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.007537][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.043173][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.053975][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.070336][ T6608] batman_adv: batadv0: Interface activated: batadv_slave_0
[  121.110848][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.132183][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.152824][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.170831][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.181274][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.197953][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.208937][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.224789][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.236391][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.247316][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.259812][ T6608] batman_adv: batadv0: Interface activated: batadv_slave_1
[  121.272522][ T6608] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.281355][ T6608] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.291130][ T6608] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.302643][ T6608] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.554636][   T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.562481][   T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.632200][ T1313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.645599][ T1313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.867716][ T6889] FAULT_INJECTION: forcing a failure.
[  121.867716][ T6889] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  121.943892][ T6889] CPU: 1 UID: 0 PID: 6889 Comm: syz.0.255 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) 
[  121.943919][ T6889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  121.943930][ T6889] Call Trace:
[  121.943937][ T6889]  <TASK>
[  121.943944][ T6889]  dump_stack_lvl+0x241/0x360
[  121.943976][ T6889]  ? __pfx_dump_stack_lvl+0x10/0x10
[  121.944001][ T6889]  ? __pfx__printk+0x10/0x10
[  121.944036][ T6889]  should_fail_ex+0x424/0x570
[  121.944069][ T6889]  _copy_from_user+0x2d/0xb0
[  121.944094][ T6889]  copy_msghdr_from_user+0xb3/0x580
[  121.944123][ T6889]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  121.944160][ T6889]  do_recvmmsg+0x3bf/0xab0
[  121.944190][ T6889]  ? __pfx_do_recvmmsg+0x10/0x10
[  121.944231][ T6889]  ? rcu_read_lock_any_held+0xbb/0x160
[  121.944254][ T6889]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  121.944298][ T6889]  ? vfs_write+0xb29/0xd10
[  121.944328][ T6889]  ? ksys_write+0x24e/0x2d0
[  121.944351][ T6889]  ? __mutex_unlock_slowpath+0x229/0x800
[  121.944385][ T6889]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  121.944408][ T6889]  ? __fget_files+0x2a/0x420
[  121.944450][ T6889]  __x64_sys_recvmmsg+0x1ab/0x260
[  121.944473][ T6889]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  121.944499][ T6889]  ? do_syscall_64+0xb6/0x230
[  121.944526][ T6889]  do_syscall_64+0xf3/0x230
[  121.944557][ T6889]  ? clear_bhb_loop+0x45/0xa0
[  121.944590][ T6889]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.944607][ T6889] RIP: 0033:0x7f684318d169
[  121.944623][ T6889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  121.944636][ T6889] RSP: 002b:00007f6843fbe038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  121.944656][ T6889] RAX: ffffffffffffffda RBX: 00007f68433a5fa0 RCX: 00007f684318d169
[  121.944676][ T6889] RDX: 03ffffffffffff62 RSI: 00002000000005c0 RDI: 0000000000000004
[  121.944687][ T6889] RBP: 00007f6843fbe090 R08: 0000000000000000 R09: 0000000000000000
[  121.944698][ T6889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  121.944708][ T6889] R13: 0000000000000000 R14: 00007f68433a5fa0 R15: 00007ffdc9d252a8
[  121.944735][ T6889]  </TASK>
[  122.347903][ T6903] netlink: 32 bytes leftover after parsing attributes in process `syz.0.259'.
[  122.410003][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'.
[  122.410363][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  122.427284][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  122.435660][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  122.444620][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  122.452569][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  122.994870][ T6938] netlink: 'syz.0.263': attribute type 7 has an invalid length.
[  123.002558][ T6938] netlink: 20 bytes leftover after parsing attributes in process `syz.0.263'.
[  123.070295][ T6938] netlink: 'syz.0.263': attribute type 7 has an invalid length.
[  123.109113][ T6938] netlink: 'syz.0.263': attribute type 7 has an invalid length.
[  123.127752][ T6938] netlink: 'syz.0.263': attribute type 7 has an invalid length.
[  123.139554][ T6938] netlink: 'syz.0.263': attribute type 7 has an invalid length.
[  123.147628][ T6938] netlink: 'syz.0.263': attribute type 7 has an invalid length.
[  123.156260][ T6938] netlink: 'syz.0.263': attribute type 7 has an invalid length.
[  123.164525][ T6938] netlink: 'syz.0.263': attribute type 7 has an invalid length.
[  123.172360][ T6938] netlink: 'syz.0.263': attribute type 7 has an invalid length.
[  123.180692][ T6938] netlink: 'syz.0.263': attribute type 7 has an invalid length.
[  123.488972][ T6905] chnl_net:caif_netlink_parms(): no params data found
[  123.692481][ T6905] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.700315][ T6905] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.762060][ T6905] bridge_slave_0: entered allmulticast mode
[  123.784925][ T6905] bridge_slave_0: entered promiscuous mode
[  123.801847][ T6905] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.822751][ T6905] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.838531][ T6905] bridge_slave_1: entered allmulticast mode
[  123.847176][ T6905] bridge_slave_1: entered promiscuous mode
[  124.183230][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  124.197064][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  124.206059][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  124.214961][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  124.222639][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  124.535005][ T5849] Bluetooth: hci2: command tx timeout
[  124.692025][ T6905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  124.754328][ T6967] team0: Device veth1_macvtap failed to register rx_handler
[  124.781210][ T6966] netlink: 'syz.4.268': attribute type 11 has an invalid length.
[  124.804053][ T6905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  124.900777][ T6905] team0: Port device team_slave_0 added
[  124.917425][ T6905] team0: Port device team_slave_1 added
[  124.950479][ T6967] netlink: 'syz.4.268': attribute type 11 has an invalid length.
[  124.975189][ T6967] __nla_validate_parse: 34 callbacks suppressed
[  124.975202][ T6967] netlink: 224 bytes leftover after parsing attributes in process `syz.4.268'.
[  125.069755][ T6905] batman_adv: batadv0: Adding interface: batadv_slave_0
[  125.087369][ T6905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.131508][ T6905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  125.147187][ T6905] batman_adv: batadv0: Adding interface: batadv_slave_1
[  125.154419][ T6905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.183209][ T6905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  125.389790][ T6905] hsr_slave_0: entered promiscuous mode
[  125.404240][ T6905] hsr_slave_1: entered promiscuous mode
[  125.416917][ T6905] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  125.453043][ T6905] Cannot create hsr debugfs directory
[  125.570054][ T7001] veth0_to_bridge: entered promiscuous mode
[  125.611947][ T7003] veth0_to_bridge: left promiscuous mode
[  125.829525][ T6961] chnl_net:caif_netlink_parms(): no params data found
[  125.994288][ T7020] xt_TPROXY: Can be used only with -p tcp or -p udp
[  126.079792][ T6905] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.293289][ T5849] Bluetooth: hci4: command tx timeout
[  126.396995][ T6905] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.412219][ T6961] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.420047][ T6961] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.429102][ T6961] bridge_slave_0: entered allmulticast mode
[  126.441036][ T6961] bridge_slave_0: entered promiscuous mode
[  126.449485][ T6961] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.473179][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.480364][ T6961] bridge_slave_1: entered allmulticast mode
[  126.491181][ T6961] bridge_slave_1: entered promiscuous mode
[  126.587243][ T6905] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.591222][ T7027] Cannot find add_set index 3 as target
[  126.613449][ T5849] Bluetooth: hci2: command tx timeout
[  126.686498][ T6961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  126.716412][ T6961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  126.782286][ T6905] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.862670][ T6961] team0: Port device team_slave_0 added
[  126.894360][ T7040] netlink: 28 bytes leftover after parsing attributes in process `syz.4.288'.
[  126.929903][ T7040] netlink: 28 bytes leftover after parsing attributes in process `syz.4.288'.
[  126.942923][ T6961] team0: Port device team_slave_1 added
[  126.949559][ T7041] netlink: 28 bytes leftover after parsing attributes in process `syz.4.288'.
[  126.961566][ T7041] netlink: 28 bytes leftover after parsing attributes in process `syz.4.288'.
[  126.989141][ T7044] tipc: Failed to remove unknown binding: 66,3,3/0:880923762/880923763
[  126.989181][ T7047] No such timeout policy "syz0"
[  127.011698][ T7040] netlink: 428 bytes leftover after parsing attributes in process `syz.4.288'.
[  127.040180][ T7040] netlink: 104 bytes leftover after parsing attributes in process `syz.4.288'.
[  127.112794][ T6961] batman_adv: batadv0: Adding interface: batadv_slave_0
[  127.121609][ T6961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.154790][ T6961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  127.191779][ T6961] batman_adv: batadv0: Adding interface: batadv_slave_1
[  127.202342][ T6961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.231852][ T6961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  127.361501][ T6905] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  127.379211][ T6961] hsr_slave_0: entered promiscuous mode
[  127.387158][ T6961] hsr_slave_1: entered promiscuous mode
[  127.393611][ T6961] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  127.401261][ T6961] Cannot create hsr debugfs directory
[  127.411445][ T7064] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  127.429707][ T6905] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  127.452705][ T7065] vlan3: entered promiscuous mode
[  127.460987][ T7065] bridge0: entered promiscuous mode
[  127.473996][ T7065] vlan3: entered allmulticast mode
[  127.479177][ T7065] bridge0: entered allmulticast mode
[  127.488502][ T6905] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  127.535295][ T6905] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  127.562894][ T7065] bridge_slave_0: left allmulticast mode
[  127.571234][ T7065] bridge_slave_0: left promiscuous mode
[  127.579820][ T7065] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.612019][ T7065] bridge_slave_1: left allmulticast mode
[  127.618433][ T7065] bridge_slave_1: left promiscuous mode
[  127.627968][ T7065] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.649325][ T7065] bond0: (slave bond_slave_0): Releasing backup interface
[  127.660606][ T7065] bond0: (slave bond_slave_1): Releasing backup interface
[  127.685580][ T7065] team0: Port device team_slave_0 removed
[  127.699881][ T7075] xt_TPROXY: Can be used only with -p tcp or -p udp
[  127.704722][ T7065] team0: Port device team_slave_1 removed
[  127.713430][ T7065] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.720844][ T7065] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.735903][ T7065] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  127.743711][ T7065] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.799113][ T5887] s9z1: Port: 1 Link DOWN
[  127.830948][ T7065] syz.1.296 (7065) used greatest stack depth: 19160 bytes left
[  128.018898][ T7079] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  128.028105][ T7079] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  128.040383][ T7079] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  128.056587][ T6961] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.119673][ T6905] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.166276][ T6961] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.190360][ T7084] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.206065][ T7086] validate_nla: 25 callbacks suppressed
[  128.206080][ T7086] netlink: 'syz.4.302': attribute type 2 has an invalid length.
[  128.220640][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.302'.
[  128.254972][ T6961] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.279432][ T6905] 8021q: adding VLAN 0 to HW filter on device team0
[  128.292306][ T7086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.302'.
[  128.315427][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.322609][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.352696][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.359978][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.374843][ T7091] tipc: Failed to remove unknown binding: 66,3,3/0:3755666878/3755666879
[  128.383393][ T5849] Bluetooth: hci4: command tx timeout
[  128.417738][ T6961] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.496324][ T6905] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  128.606272][ T7094] netlink: 132 bytes leftover after parsing attributes in process `syz.0.305'.
[  128.695053][ T5849] Bluetooth: hci2: command tx timeout
[  128.811091][ T6961] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  128.876539][ T6961] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  128.914113][ T6961] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  128.944276][ T6961] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  129.038245][ T7113] netlink: 'syz.1.309': attribute type 11 has an invalid length.
[  129.052381][ T6905] 8021q: adding VLAN 0 to HW filter on device batadv0
[  129.231454][ T6905] veth0_vlan: entered promiscuous mode
[  129.305083][ T6961] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.390908][ T6905] veth1_vlan: entered promiscuous mode
[  129.428271][ T6961] 8021q: adding VLAN 0 to HW filter on device team0
[  129.491932][ T3522] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.499147][ T3522] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.545023][  T740] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.552192][  T740] bridge0: port 2(bridge_slave_1) entered forwarding state
[  129.588971][ T6905] veth0_macvtap: entered promiscuous mode
[  129.662640][ T6905] veth1_macvtap: entered promiscuous mode
[  129.686870][ T7134] tipc: Failed to remove unknown binding: 66,3,3/4:2550095296/2550095297
[  129.742231][ T6905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.762940][ T6905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.781811][ T6905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.792935][ T6905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.811516][ T6905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.822628][ T6905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.839103][ T6905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.853631][ T6905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.865318][ T6905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.877737][ T6905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.889161][ T6905] batman_adv: batadv0: Interface activated: batadv_slave_0
[  129.917345][ T6905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.929872][ T7137] sctp: [Deprecated]: syz.0.316 (pid 7137) Use of int in maxseg socket option.
[  129.929872][ T7137] Use struct sctp_assoc_value instead
[  129.936091][ T6905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.960195][ T6905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.971927][ T6905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.987529][ T6905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.998450][ T6905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.008664][ T6905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.024660][ T6905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.034569][ T6905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.045177][ T6905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.058826][ T6905] batman_adv: batadv0: Interface activated: batadv_slave_1
[  130.128947][ T6905] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.138761][ T6905] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.164394][ T6905] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.193094][ T6905] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  130.399788][ T7151] __nla_validate_parse: 5 callbacks suppressed
[  130.399807][ T7151] netlink: 60 bytes leftover after parsing attributes in process `syz.1.319'.
[  130.424582][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.432416][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.453822][ T5849] Bluetooth: hci4: command tx timeout
[  130.494469][ T6961] 8021q: adding VLAN 0 to HW filter on device batadv0
[  130.550100][ T7154] x_tables: duplicate underflow at hook 1
[  130.568311][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.586265][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.725190][ T7163] Bluetooth: MGMT ver 1.23
[  130.782372][ T5849] Bluetooth: hci2: command tx timeout
[  130.789184][ T6961] veth0_vlan: entered promiscuous mode
[  130.879776][ T6961] veth1_vlan: entered promiscuous mode
[  131.011358][ T6961] veth0_macvtap: entered promiscuous mode
[  131.019071][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.327'.
[  131.060171][ T7179] netlink: 20 bytes leftover after parsing attributes in process `syz.4.327'.
[  131.070357][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.327'.
[  131.091862][ T7185] netlink: 5 bytes leftover after parsing attributes in process `syz.4.327'.
[  131.118485][ T6961] veth1_macvtap: entered promiscuous mode
[  131.211414][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.263325][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.284053][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.303253][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.321769][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.343399][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.363076][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.379337][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.396997][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.417647][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.435855][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.455304][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.475645][ T6961] batman_adv: batadv0: Interface activated: batadv_slave_0
[  131.515142][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.541847][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.569925][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.597366][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.622406][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.660184][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.671746][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.703560][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.734151][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.744699][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.763388][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.793388][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.814743][ T6961] batman_adv: batadv0: Interface activated: batadv_slave_1
[  131.881530][ T6961] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.898076][ T6961] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.907075][ T6961] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.916216][ T6961] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.049336][ T6944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.099398][ T6944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.210981][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.229532][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.287328][ T7201] netlink: 60 bytes leftover after parsing attributes in process `syz.0.332'.
[  132.363704][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  132.376704][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  132.388128][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  132.443607][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  132.451302][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  132.533962][ T5840] Bluetooth: hci4: command tx timeout
[  132.579234][ T7217] netlink: 268 bytes leftover after parsing attributes in process `syz.1.335'.
[  132.612299][ T7218] xt_TPROXY: Can be used only with -p tcp or -p udp
[  132.624160][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  132.630616][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  132.911074][ T7205] chnl_net:caif_netlink_parms(): no params data found
[  133.092426][ T7205] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.114027][ T7205] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.121165][ T7205] bridge_slave_0: entered allmulticast mode
[  133.134776][ T7205] bridge_slave_0: entered promiscuous mode
[  133.160309][ T6961] syz-executor (6961) used greatest stack depth: 18424 bytes left
[  133.171079][ T7205] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.204566][ T7205] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.212486][ T7205] bridge_slave_1: entered allmulticast mode
[  133.232908][ T7205] bridge_slave_1: entered promiscuous mode
[  133.325101][ T7205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  133.339398][ T7205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  133.360146][ T7240] netlink: 'syz.1.339': attribute type 10 has an invalid length.
[  133.382809][ T7240] netlink: 40 bytes leftover after parsing attributes in process `syz.1.339'.
[  133.440654][ T7240] team0: Port device geneve0 added
[  133.519933][ T7205] team0: Port device team_slave_0 added
[  133.595526][ T7205] team0: Port device team_slave_1 added
[  133.719978][ T7205] batman_adv: batadv0: Adding interface: batadv_slave_0
[  133.743441][ T7205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.830588][ T7205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  133.885844][ T7205] batman_adv: batadv0: Adding interface: batadv_slave_1
[  133.892811][ T7205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.984282][ T7248] xt_CT: No such helper "pptp"
[  133.987883][ T7205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  134.109602][ T7251] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.122874][ T7251] team0: Port device bond0 added
[  134.181632][ T7248] netlink: 'syz.0.340': attribute type 2 has an invalid length.
[  134.198255][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  134.206842][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  134.215972][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  134.226072][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  134.233822][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  134.387068][ T7205] hsr_slave_0: entered promiscuous mode
[  134.401054][ T7205] hsr_slave_1: entered promiscuous mode
[  134.411327][ T7205] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  134.425673][ T7205] Cannot create hsr debugfs directory
[  134.534012][ T5840] Bluetooth: hci2: command tx timeout
[  134.963849][ T7257] atomic_op ffff88807bd18198 conn xmit_atomic 0000000000000000
[  134.978225][ T7274] xt_TPROXY: Can be used only with -p tcp or -p udp
[  135.320047][ T7205] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.349546][ T7283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.350'.
[  135.367455][ T7254] chnl_net:caif_netlink_parms(): no params data found
[  135.400099][ T7286] xt_TPROXY: Can be used only with -p tcp or -p udp
[  135.400754][ T7283] team0: Port device geneve0 removed
[  135.488954][ T7205] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.585989][ T7205] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.604017][ T7254] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.614648][ T7254] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.621827][ T7254] bridge_slave_0: entered allmulticast mode
[  135.630597][ T7254] bridge_slave_0: entered promiscuous mode
[  135.640218][ T7254] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.648089][ T7254] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.659358][ T7254] bridge_slave_1: entered allmulticast mode
[  135.667261][ T7254] bridge_slave_1: entered promiscuous mode
[  135.686765][ T7205] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.756386][ T7254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.777111][ T7254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.864228][ T7254] team0: Port device team_slave_0 added
[  135.874600][ T7254] team0: Port device team_slave_1 added
[  135.966867][ T7254] batman_adv: batadv0: Adding interface: batadv_slave_0
[  135.979600][ T7254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.007120][ T7254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.032798][ T7254] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.040079][ T7254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.070336][ T7254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  136.236566][ T7254] hsr_slave_0: entered promiscuous mode
[  136.253795][ T7254] hsr_slave_1: entered promiscuous mode
[  136.260046][ T7254] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  136.275932][ T7254] Cannot create hsr debugfs directory
[  136.281962][ T7205] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  136.293277][ T5840] Bluetooth: hci4: command tx timeout
[  136.330000][ T7205] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  136.351157][ T7205] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  136.396833][ T7205] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  136.613269][ T5840] Bluetooth: hci2: command tx timeout
[  136.705245][ T7254] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.769942][ T7205] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.797368][ T7254] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.830974][ T7205] 8021q: adding VLAN 0 to HW filter on device team0
[  136.865958][   T54] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.873144][   T54] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.916861][ T7254] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.975610][  T740] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.982796][  T740] bridge0: port 2(bridge_slave_1) entered forwarding state
[  137.058600][ T7254] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.095618][ T7301] Bluetooth: MGMT ver 1.23
[  137.101941][ T7301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.355'.
[  137.251727][ T7306] FAULT_INJECTION: forcing a failure.
[  137.251727][ T7306] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  137.313304][ T7306] CPU: 1 UID: 0 PID: 7306 Comm: syz.1.358 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) 
[  137.313326][ T7306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  137.313335][ T7306] Call Trace:
[  137.313341][ T7306]  <TASK>
[  137.313347][ T7306]  dump_stack_lvl+0x241/0x360
[  137.313373][ T7306]  ? __pfx_dump_stack_lvl+0x10/0x10
[  137.313393][ T7306]  ? __pfx__printk+0x10/0x10
[  137.313422][ T7306]  should_fail_ex+0x424/0x570
[  137.313450][ T7306]  _copy_from_user+0x2d/0xb0
[  137.313471][ T7306]  copy_msghdr_from_user+0xb3/0x580
[  137.313494][ T7306]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  137.313524][ T7306]  do_recvmmsg+0x3bf/0xab0
[  137.313548][ T7306]  ? __pfx_do_recvmmsg+0x10/0x10
[  137.313574][ T7306]  ? rcu_read_lock_any_held+0xbb/0x160
[  137.313593][ T7306]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  137.313613][ T7306]  ? vfs_write+0xb29/0xd10
[  137.313636][ T7306]  ? ksys_write+0x24e/0x2d0
[  137.313653][ T7306]  ? __mutex_unlock_slowpath+0x229/0x800
[  137.313680][ T7306]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  137.313702][ T7306]  ? __fget_files+0x2a/0x420
[  137.313735][ T7306]  __x64_sys_recvmmsg+0x1ab/0x260
[  137.313752][ T7306]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  137.313771][ T7306]  ? do_syscall_64+0xb6/0x230
[  137.313792][ T7306]  do_syscall_64+0xf3/0x230
[  137.313810][ T7306]  ? clear_bhb_loop+0x45/0xa0
[  137.313828][ T7306]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.313841][ T7306] RIP: 0033:0x7fec3b58d169
[  137.313853][ T7306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  137.313865][ T7306] RSP: 002b:00007fec3c47e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  137.313880][ T7306] RAX: ffffffffffffffda RBX: 00007fec3b7a5fa0 RCX: 00007fec3b58d169
[  137.313890][ T7306] RDX: 03ffffffffffff62 RSI: 00002000000005c0 RDI: 0000000000000004
[  137.313900][ T7306] RBP: 00007fec3c47e090 R08: 0000000000000000 R09: 0000000000000000
[  137.313909][ T7306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  137.313917][ T7306] R13: 0000000000000000 R14: 00007fec3b7a5fa0 R15: 00007fff545c8ed8
[  137.313939][ T7306]  </TASK>
[  137.775742][ T7254] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  137.818410][ T7254] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  137.853781][ T7254] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  137.948921][ T7205] 8021q: adding VLAN 0 to HW filter on device batadv0
[  138.015571][ T7254] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  138.046109][ T7327] tipc: Failed to remove unknown binding: 66,3,3/4:3467657139/3467657140
[  138.157716][ T7205] veth0_vlan: entered promiscuous mode
[  138.209064][ T7205] veth1_vlan: entered promiscuous mode
[  138.349903][ T7348] FAULT_INJECTION: forcing a failure.
[  138.349903][ T7348] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  138.364655][ T7348] CPU: 0 UID: 0 PID: 7348 Comm: syz.4.370 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) 
[  138.364680][ T7348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  138.364690][ T7348] Call Trace:
[  138.364697][ T7348]  <TASK>
[  138.364705][ T7348]  dump_stack_lvl+0x241/0x360
[  138.364736][ T7348]  ? __pfx_dump_stack_lvl+0x10/0x10
[  138.364760][ T7348]  ? __pfx__printk+0x10/0x10
[  138.364795][ T7348]  should_fail_ex+0x424/0x570
[  138.364828][ T7348]  _copy_from_user+0x2d/0xb0
[  138.364853][ T7348]  copy_msghdr_from_user+0xb3/0x580
[  138.364881][ T7348]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  138.364901][ T7348]  ? __fget_files+0x2a/0x420
[  138.364930][ T7348]  ? __fget_files+0x2a/0x420
[  138.364964][ T7348]  __sys_sendmsg+0x20a/0x360
[  138.364986][ T7348]  ? __pfx___sys_sendmsg+0x10/0x10
[  138.365060][ T7348]  ? do_syscall_64+0xb6/0x230
[  138.365086][ T7348]  do_syscall_64+0xf3/0x230
[  138.365109][ T7348]  ? clear_bhb_loop+0x45/0xa0
[  138.365130][ T7348]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.365147][ T7348] RIP: 0033:0x7f8e6c18d169
[  138.365163][ T7348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  138.365177][ T7348] RSP: 002b:00007f8e6cf91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  138.365195][ T7348] RAX: ffffffffffffffda RBX: 00007f8e6c3a5fa0 RCX: 00007f8e6c18d169
[  138.365208][ T7348] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000003
[  138.365219][ T7348] RBP: 00007f8e6cf91090 R08: 0000000000000000 R09: 0000000000000000
[  138.365229][ T7348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  138.365239][ T7348] R13: 0000000000000000 R14: 00007f8e6c3a5fa0 R15: 00007fff8a60a278
[  138.365266][ T7348]  </TASK>
[  138.376763][ T5840] Bluetooth: hci4: command tx timeout
[  138.545885][ T7205] veth0_macvtap: entered promiscuous mode
[  138.604944][ T7205] veth1_macvtap: entered promiscuous mode
[  138.662401][ T7350] xt_hashlimit: size too large, truncated to 1048576
[  138.666832][ T7355] FAULT_INJECTION: forcing a failure.
[  138.666832][ T7355] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  138.693232][ T5840] Bluetooth: hci2: command tx timeout
[  138.701531][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  138.712720][ T7355] CPU: 1 UID: 0 PID: 7355 Comm: syz.0.372 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) 
[  138.712743][ T7355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  138.712754][ T7355] Call Trace:
[  138.712761][ T7355]  <TASK>
[  138.712768][ T7355]  dump_stack_lvl+0x241/0x360
[  138.712799][ T7355]  ? __pfx_dump_stack_lvl+0x10/0x10
[  138.712824][ T7355]  ? __pfx__printk+0x10/0x10
[  138.712860][ T7355]  should_fail_ex+0x424/0x570
[  138.712893][ T7355]  _copy_from_user+0x2d/0xb0
[  138.712918][ T7355]  copy_msghdr_from_user+0xb3/0x580
[  138.712947][ T7355]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  138.712989][ T7355]  do_recvmmsg+0x3bf/0xab0
[  138.713019][ T7355]  ? __pfx_do_recvmmsg+0x10/0x10
[  138.713053][ T7355]  ? rcu_read_lock_any_held+0xbb/0x160
[  138.713076][ T7355]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  138.713101][ T7355]  ? vfs_write+0xb29/0xd10
[  138.713129][ T7355]  ? ksys_write+0x24e/0x2d0
[  138.713151][ T7355]  ? __mutex_unlock_slowpath+0x229/0x800
[  138.713183][ T7355]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  138.713204][ T7355]  ? __fget_files+0x2a/0x420
[  138.713244][ T7355]  __x64_sys_recvmmsg+0x1ab/0x260
[  138.713265][ T7355]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  138.713290][ T7355]  ? do_syscall_64+0xb6/0x230
[  138.713315][ T7355]  do_syscall_64+0xf3/0x230
[  138.713337][ T7355]  ? clear_bhb_loop+0x45/0xa0
[  138.713358][ T7355]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.713375][ T7355] RIP: 0033:0x7f684318d169
[  138.713391][ T7355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  138.713405][ T7355] RSP: 002b:00007f6843fbe038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  138.713423][ T7355] RAX: ffffffffffffffda RBX: 00007f68433a5fa0 RCX: 00007f684318d169
[  138.713435][ T7355] RDX: 03ffffffffffff62 RSI: 00002000000005c0 RDI: 0000000000000004
[  138.713447][ T7355] RBP: 00007f6843fbe090 R08: 0000000000000000 R09: 0000000000000000
[  138.713457][ T7355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  138.713467][ T7355] R13: 0000000000000000 R14: 00007f68433a5fa0 R15: 00007ffdc9d252a8
[  138.713494][ T7355]  </TASK>
[  138.927203][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.939900][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  138.950416][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.960526][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  138.977260][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.989758][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.008080][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.021800][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.046586][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.100254][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.110910][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.120746][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.131375][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.144107][ T7205] batman_adv: batadv0: Interface activated: batadv_slave_0
[  139.156991][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.168292][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.181766][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.202765][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.213271][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.224474][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.236985][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.247591][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.258550][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.278554][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.288714][ T7361] netlink: 'syz.1.374': attribute type 2 has an invalid length.
[  139.289411][ T7362] netlink: 16 bytes leftover after parsing attributes in process `syz.1.374'.
[  139.301498][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.319638][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.343985][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.354573][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.388201][ T7205] batman_adv: batadv0: Interface activated: batadv_slave_1
[  139.456632][ T7205] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  139.465476][ T7205] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  139.474327][ T7205] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  139.483718][ T7205] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  139.502755][ T7254] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.572401][ T7254] 8021q: adding VLAN 0 to HW filter on device team0
[  139.653035][ T1313] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.660156][ T1313] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.688178][ T1313] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.695423][ T1313] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.825690][  T740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.849735][  T740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.258158][ T6914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.295215][ T6914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.615614][ T5840] Bluetooth: hci4: command tx timeout
[  140.819056][ T7254] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.843966][ T7413] tipc: Failed to remove unknown binding: 66,3,3/0:2913627003/2913627004
[  140.974641][ T7254] veth0_vlan: entered promiscuous mode
[  141.010716][ T7254] veth1_vlan: entered promiscuous mode
[  141.075508][ T7254] veth0_macvtap: entered promiscuous mode
[  141.100390][ T7254] veth1_macvtap: entered promiscuous mode
[  141.133355][ T7254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.156693][ T7254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.171712][ T7254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.186422][ T7254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.199925][ T7254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.215942][ T7254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.225819][ T7254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.236546][ T7254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.248949][ T7254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.259430][ T7254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.269312][ T7254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.279782][ T7254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.289599][ T7254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.300046][ T7254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.309904][ T7254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.320476][ T7254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.331951][ T7254] batman_adv: batadv0: Interface activated: batadv_slave_0
[  141.356153][ T7254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.366646][ T7254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.377139][ T7254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.388979][ T7254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.398891][ T7254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.409334][ T7254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.420391][ T7254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.431428][ T7254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.441383][ T7254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.455713][ T7254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.465653][ T7254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.476436][ T7254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.486393][ T7254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.497966][ T7254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.508716][ T7254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.519320][ T7254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.530309][ T7254] batman_adv: batadv0: Interface activated: batadv_slave_1
[  141.545335][ T7254] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.556995][ T7254] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.566027][ T7254] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.579201][ T7254] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.729457][ T6944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.737392][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.391'.
[  141.777397][ T6944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.921101][ T6944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.960257][ T6944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.079698][ T7439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.393'.
[  142.095723][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.393'.
[  142.115116][ T7439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.393'.
[  142.256327][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  142.280772][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  142.288859][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  142.298293][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  142.305973][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  142.425651][ T7449] netlink: 276 bytes leftover after parsing attributes in process `syz.0.396'.
[  142.592440][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.397'.
[  142.622743][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.397'.
[  142.633372][ T7454] netlink: 'syz.0.397': attribute type 18 has an invalid length.
[  142.901279][ T7441] netlink: 'syz.4.394': attribute type 6 has an invalid length.
[  143.045834][ T7444] chnl_net:caif_netlink_parms(): no params data found
[  143.482287][ T7444] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.523560][ T7444] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.553478][ T7444] bridge_slave_0: entered allmulticast mode
[  143.576682][ T7444] bridge_slave_0: entered promiscuous mode
[  143.606491][ T7444] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.639989][ T7444] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.667552][ T7444] bridge_slave_1: entered allmulticast mode
[  143.703235][ T7444] bridge_slave_1: entered promiscuous mode
[  144.016753][ T7444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  144.035999][ T7444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  144.190508][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  144.206516][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  144.223396][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  144.231670][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  144.248231][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  144.279313][ T7444] team0: Port device team_slave_0 added
[  144.288864][ T7444] team0: Port device team_slave_1 added
[  144.378893][ T5849] Bluetooth: hci2: command tx timeout
[  144.405104][ T7444] batman_adv: batadv0: Adding interface: batadv_slave_0
[  144.420122][ T7488] tipc: Failed to remove unknown binding: 66,3,3/0:2718534990/2718534991
[  144.429342][ T7444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.490490][ T7444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  144.574716][ T7444] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.581940][ T7444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.648997][ T7444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.697406][ T7493] netlink: 404 bytes leftover after parsing attributes in process `syz.1.402'.
[  144.706696][ T7493] netlink: 28 bytes leftover after parsing attributes in process `syz.1.402'.
[  144.729352][ T7493] netlink: 28 bytes leftover after parsing attributes in process `syz.1.402'.
[  144.747149][ T7493] netlink: 20 bytes leftover after parsing attributes in process `syz.1.402'.
[  144.895944][ T7444] hsr_slave_0: entered promiscuous mode
[  144.910061][ T7444] hsr_slave_1: entered promiscuous mode
[  144.921977][ T7444] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  144.941551][ T7444] Cannot create hsr debugfs directory
[  144.965429][ T7501] veth0_to_bridge: entered promiscuous mode
[  145.034878][ T7505] xt_CT: No such helper "pptp"
[  145.221970][ T2021] IPVS: starting estimator thread 0...
[  145.299015][ T7508] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20000
[  145.313385][ T7509] IPVS: using max 28 ests per chain, 67200 per kthread
[  145.458934][ T7497] veth0_to_bridge: left promiscuous mode
[  145.597602][ T7516] netlink: 1 bytes leftover after parsing attributes in process `syz.0.408'.
[  145.611511][ T7511] block nbd0: server does not support multiple connections per device.
[  145.621342][ T7511] block nbd0: shutting down sockets
[  145.725960][ T7520] FAULT_INJECTION: forcing a failure.
[  145.725960][ T7520] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  145.740866][ T7520] CPU: 0 UID: 0 PID: 7520 Comm: syz.0.409 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) 
[  145.740892][ T7520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  145.740903][ T7520] Call Trace:
[  145.740910][ T7520]  <TASK>
[  145.740917][ T7520]  dump_stack_lvl+0x241/0x360
[  145.740950][ T7520]  ? __pfx_dump_stack_lvl+0x10/0x10
[  145.740973][ T7520]  ? __pfx__printk+0x10/0x10
[  145.741009][ T7520]  should_fail_ex+0x424/0x570
[  145.741042][ T7520]  _copy_from_user+0x2d/0xb0
[  145.741066][ T7520]  copy_msghdr_from_user+0xb3/0x580
[  145.741095][ T7520]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  145.741134][ T7520]  do_recvmmsg+0x3bf/0xab0
[  145.741163][ T7520]  ? __pfx_do_recvmmsg+0x10/0x10
[  145.741197][ T7520]  ? rcu_read_lock_any_held+0xbb/0x160
[  145.741219][ T7520]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  145.741244][ T7520]  ? vfs_write+0xb29/0xd10
[  145.741272][ T7520]  ? ksys_write+0x24e/0x2d0
[  145.741294][ T7520]  ? __mutex_unlock_slowpath+0x229/0x800
[  145.741325][ T7520]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  145.741347][ T7520]  ? __fget_files+0x2a/0x420
[  145.741386][ T7520]  __x64_sys_recvmmsg+0x1ab/0x260
[  145.741408][ T7520]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  145.741433][ T7520]  ? do_syscall_64+0xb6/0x230
[  145.741457][ T7520]  do_syscall_64+0xf3/0x230
[  145.741479][ T7520]  ? clear_bhb_loop+0x45/0xa0
[  145.741501][ T7520]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.741518][ T7520] RIP: 0033:0x7f684318d169
[  145.741534][ T7520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  145.741549][ T7520] RSP: 002b:00007f6843fbe038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  145.741568][ T7520] RAX: ffffffffffffffda RBX: 00007f68433a5fa0 RCX: 00007f684318d169
[  145.741580][ T7520] RDX: 03ffffffffffff62 RSI: 00002000000005c0 RDI: 0000000000000004
[  145.741592][ T7520] RBP: 00007f6843fbe090 R08: 0000000000000000 R09: 0000000000000000
[  145.741603][ T7520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  145.741613][ T7520] R13: 0000000000000000 R14: 00007f68433a5fa0 R15: 00007ffdc9d252a8
[  145.741641][ T7520]  </TASK>
[  146.004752][ T7519] netlink: 16 bytes leftover after parsing attributes in process `syz.1.410'.
[  146.142773][ T7526] unsupported nlmsg_type 40
[  146.148984][ T7526] xt_l2tp: invalid flags combination: 4
[  146.299960][ T5849] Bluetooth: hci4: command tx timeout
[  146.433723][ T7483] chnl_net:caif_netlink_parms(): no params data found
[  146.458784][ T5849] Bluetooth: hci2: command tx timeout
[  146.557621][ T7541] tipc: Failed to remove unknown binding: 66,3,3/0:221828090/221828091
[  146.889194][ T7444] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.934935][ T7483] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.942280][ T7483] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.953357][ T7483] bridge_slave_0: entered allmulticast mode
[  146.962929][ T7483] bridge_slave_0: entered promiscuous mode
[  146.986809][ T7483] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.000774][ T7483] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.017186][ T7483] bridge_slave_1: entered allmulticast mode
[  147.044806][ T7483] bridge_slave_1: entered promiscuous mode
[  147.119869][ T7444] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.445828][ T7444] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.481578][ T7483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  147.517265][ T7483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  147.569016][ T7562] 
[  147.569271][ T7444] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.571350][ T7562] ======================================================
[  147.588611][ T7562] WARNING: possible circular locking dependency detected
[  147.595643][ T7562] 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 Not tainted
[  147.602760][ T7562] ------------------------------------------------------
[  147.609785][ T7562] syz.0.420/7562 is trying to acquire lock:
[  147.615669][ T7562] ffffffff900fd448 (rtnl_mutex){+.+.}-{4:4}, at: do_ipv6_setsockopt+0xa9a/0x3680
[  147.624821][ T7562] 
[  147.624821][ T7562] but task is already holding lock:
[  147.632182][ T7562] ffff88805c498aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50
[  147.642282][ T7562] 
[  147.642282][ T7562] which lock already depends on the new lock.
[  147.642282][ T7562] 
[  147.652676][ T7562] 
[  147.652676][ T7562] the existing dependency chain (in reverse order) is:
[  147.661678][ T7562] 
[  147.661678][ T7562] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}:
[  147.670275][ T7562]        lock_acquire+0x116/0x2f0
[  147.675290][ T7562]        __mutex_lock+0x1a5/0x10c0
[  147.680399][ T7562]        smc_switch_to_fallback+0x35/0xda0
[  147.686207][ T7562]        smc_sendmsg+0x11f/0x530
[  147.691141][ T7562]        __sock_sendmsg+0x221/0x270
[  147.696341][ T7562]        __sys_sendto+0x365/0x4c0
[  147.701370][ T7562]        __x64_sys_sendto+0xde/0x100
[  147.706664][ T7562]        do_syscall_64+0xf3/0x230
[  147.711694][ T7562]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.718120][ T7562] 
[  147.718120][ T7562] -> #1 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  147.725863][ T7562]        lock_acquire+0x116/0x2f0
[  147.730882][ T7562]        lock_sock_nested+0x48/0x100
[  147.736165][ T7562]        do_ipv6_setsockopt+0xccd/0x3680
[  147.741798][ T7562]        ipv6_setsockopt+0x5d/0x170
[  147.747008][ T7562]        do_sock_setsockopt+0x3b1/0x710
[  147.752563][ T7562]        __x64_sys_setsockopt+0x1ee/0x280
[  147.758298][ T7562]        do_syscall_64+0xf3/0x230
[  147.763332][ T7562]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.769741][ T7562] 
[  147.769741][ T7562] -> #0 (rtnl_mutex){+.+.}-{4:4}:
[  147.776958][ T7562]        validate_chain+0xa69/0x24e0
[  147.782238][ T7562]        __lock_acquire+0xad5/0xd80
[  147.787426][ T7562]        lock_acquire+0x116/0x2f0
[  147.792440][ T7562]        __mutex_lock+0x1a5/0x10c0
[  147.797582][ T7562]        do_ipv6_setsockopt+0xa9a/0x3680
[  147.803223][ T7562]        ipv6_setsockopt+0x5d/0x170
[  147.808435][ T7562]        smc_setsockopt+0x25c/0xd50
[  147.813638][ T7562]        do_sock_setsockopt+0x3b1/0x710
[  147.819183][ T7562]        __x64_sys_setsockopt+0x1ee/0x280
[  147.824899][ T7562]        do_syscall_64+0xf3/0x230
[  147.829916][ T7562]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.836344][ T7562] 
[  147.836344][ T7562] other info that might help us debug this:
[  147.836344][ T7562] 
[  147.846569][ T7562] Chain exists of:
[  147.846569][ T7562]   rtnl_mutex --> sk_lock-AF_INET6 --> &smc->clcsock_release_lock
[  147.846569][ T7562] 
[  147.860223][ T7562]  Possible unsafe locking scenario:
[  147.860223][ T7562] 
[  147.867666][ T7562]        CPU0                    CPU1
[  147.873038][ T7562]        ----                    ----
[  147.878410][ T7562]   lock(&smc->clcsock_release_lock);
[  147.883792][ T7562]                                lock(sk_lock-AF_INET6);
[  147.890816][ T7562]                                lock(&smc->clcsock_release_lock);
[  147.898722][ T7562]   lock(rtnl_mutex);
[  147.902726][ T7562] 
[  147.902726][ T7562]  *** DEADLOCK ***
[  147.902726][ T7562] 
[  147.910860][ T7562] 1 lock held by syz.0.420/7562:
[  147.915783][ T7562]  #0: ffff88805c498aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50
[  147.926315][ T7562] 
[  147.926315][ T7562] stack backtrace:
[  147.932191][ T7562] CPU: 1 UID: 0 PID: 7562 Comm: syz.0.420 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) 
[  147.932211][ T7562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  147.932221][ T7562] Call Trace:
[  147.932226][ T7562]  <TASK>
[  147.932232][ T7562]  dump_stack_lvl+0x241/0x360
[  147.932254][ T7562]  ? __pfx_dump_stack_lvl+0x10/0x10
[  147.932273][ T7562]  ? __pfx__printk+0x10/0x10
[  147.932292][ T7562]  ? print_lock+0x171/0x1a0
[  147.932309][ T7562]  print_circular_bug+0x2e1/0x300
[  147.932329][ T7562]  check_noncircular+0x142/0x160
[  147.932350][ T7562]  validate_chain+0xa69/0x24e0
[  147.932376][ T7562]  __lock_acquire+0xad5/0xd80
[  147.932392][ T7562]  lock_acquire+0x116/0x2f0
[  147.932404][ T7562]  ? do_ipv6_setsockopt+0xa9a/0x3680
[  147.932429][ T7562]  __mutex_lock+0x1a5/0x10c0
[  147.932447][ T7562]  ? do_ipv6_setsockopt+0xa9a/0x3680
[  147.932467][ T7562]  ? __lock_acquire+0xad5/0xd80
[  147.932482][ T7562]  ? do_ipv6_setsockopt+0xa9a/0x3680
[  147.932502][ T7562]  ? __pfx___mutex_lock+0x10/0x10
[  147.932526][ T7562]  do_ipv6_setsockopt+0xa9a/0x3680
[  147.932550][ T7562]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[  147.932572][ T7562]  ? _raw_spin_unlock_irqrestore+0x90/0x140
[  147.932588][ T7562]  ? lockdep_hardirqs_on+0x9d/0x150
[  147.932605][ T7562]  ? _raw_spin_unlock_irqrestore+0xde/0x140
[  147.932620][ T7562]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  147.932637][ T7562]  ? rcu_is_watching+0x15/0xb0
[  147.932655][ T7562]  ? __mutex_lock+0xbe3/0x10c0
[  147.932674][ T7562]  ? __mutex_lock+0x5f3/0x10c0
[  147.932694][ T7562]  ? smc_setsockopt+0x1b2/0xd50
[  147.932710][ T7562]  ? __pfx___mutex_lock+0x10/0x10
[  147.932733][ T7562]  ipv6_setsockopt+0x5d/0x170
[  147.932753][ T7562]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  147.932773][ T7562]  smc_setsockopt+0x25c/0xd50
[  147.932790][ T7562]  ? __pfx_aa_sk_perm+0x10/0x10
[  147.932808][ T7562]  ? __pfx_smc_setsockopt+0x10/0x10
[  147.932824][ T7562]  ? aa_sock_opt_perm+0x79/0x120
[  147.932844][ T7562]  ? __pfx_smc_setsockopt+0x10/0x10
[  147.932860][ T7562]  do_sock_setsockopt+0x3b1/0x710
[  147.932884][ T7562]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  147.932905][ T7562]  ? __fget_files+0x2a/0x420
[  147.932931][ T7562]  ? __fget_files+0x39d/0x420
[  147.932951][ T7562]  ? __fget_files+0x2a/0x420
[  147.932978][ T7562]  __x64_sys_setsockopt+0x1ee/0x280
[  147.933008][ T7562]  do_syscall_64+0xf3/0x230
[  147.933030][ T7562]  ? clear_bhb_loop+0x45/0xa0
[  147.933049][ T7562]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.933066][ T7562] RIP: 0033:0x7f684318d169
[  147.933083][ T7562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  147.933098][ T7562] RSP: 002b:00007f6843f9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  147.933116][ T7562] RAX: ffffffffffffffda RBX: 00007f68433a6080 RCX: 00007f684318d169
[  147.933128][ T7562] RDX: 0000000000000015 RSI: 0000000000000029 RDI: 0000000000000003
[  147.933139][ T7562] RBP: 00007f684320e990 R08: 0000000000000014 R09: 0000000000000000
[  147.933150][ T7562] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000
[  147.933162][ T7562] R13: 0000000000000000 R14: 00007f68433a6080 R15: 00007ffdc9d252a8
[  147.933181][ T7562]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer)
[  148.370532][ T7560] netlink: 'syz.0.420': attribute type 1 has an invalid length.
[  148.391115][ T5849] Bluetooth: hci4: command tx timeout
[  148.409473][ T7560] __nla_validate_parse: 1 callbacks suppressed
[  148.409487][ T7560] netlink: 228 bytes leftover after parsing attributes in process `syz.0.420'.
[  148.533446][ T5849] Bluetooth: hci2: command tx timeout