last executing test programs:

32.785967113s ago: executing program 3 (id=95):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000400000009"], 0x48)
socketpair(0x22, 0x2, 0x11, &(0x7f0000000000))
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0)='@', 0x0, 0x2}, 0x20)
r1 = socket$kcm(0xa, 0x6, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x8c)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_subtree(r3, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f00000008c0)=ANY=[@ANYBLOB='+cpu'], 0x5)
r5 = openat$cgroup_int(r2, &(0x7f0000000140)='cpu.max.burst\x00', 0x2, 0x0)
r6 = openat$cgroup_subtree(r3, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5)
write$cgroup_int(r5, 0x0, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x10d, 0xa, &(0x7f0000000000)=r7, 0x11)
setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000040)=r7, 0x4)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000300)='@', 0x20000000}, 0x20)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f00000000c0), 0x0}, 0x20)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd97, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000000)="00000900000015100000512288fa", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r9)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r10, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@dev}, {@dev}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0xffff, {[@mptcp=@mp_fclose={0x1e, 0xc, 0x2}]}}}}}}}, 0x0)
r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
ioctl$SIOCPNDELRESOURCE(r11, 0x89ef, &(0x7f0000000200)=0x400)

32.228229994s ago: executing program 3 (id=102):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
writev(r1, &(0x7f0000000380)=[{&(0x7f00000000c0)="580000001400adfd8a987e33da2e6a262b", 0x11}, {&(0x7f00000002c0)="6a12b5b2fce198d1083e14f29c735d7d48f74d87a2042f993fdac90aed8de96467552997f79a6919f190497ffd7fa2b56263878af4766b57797ba8e0141ffbd1df5f70684a6aba", 0x47}], 0x2)
r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x2a012, r2, 0x0) (async)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000140)={'gre0\x00', <r4=>0x0, 0x80, 0x700, 0x6, 0x80, {{0x6, 0x4, 0x0, 0x8, 0x18, 0x64, 0x0, 0x75, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @end]}}}}})
sendto$packet(r2, &(0x7f0000000100)="3246b419b023fd552214e7253f71cafc84484f8c7f21be6739ddd762bfa43527", 0x20, 0x4004000, &(0x7f00000001c0)={0x11, 0xf7, r4, 0x1, 0x1, 0x6, @multicast}, 0x14) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) (async)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) (async)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)="d744784ca67c0398246d848e6df22054de2bd8ca3da64dfdea7d8eb74ffe057d7469066c6ca034a2677ce0c1c25e2b2a825d677e0fbac312a7da165cd5db94fa38cdf3a3f3f93b912a7515e0b1e441a3be644a296bcc765e7adc9ddb4d14376a69cbfcd2ddd156ba432349e96debeda26ee8914c28f4", 0x7ffff000}, {&(0x7f00000009c0)="d86e5c29ab2c0dce2b79f95d543a0d6b45dec9dab7afbc0d6d678feb7a652e67638c3ee007937917fad76308e99818f8f112b73a3c3e3c5ed80c49fab6e0593e95008b4a47aebdde3e28cea1cec26385f3d03b872970dfb69a63a6384a9be5b9419ff8ea6d9c2a730307894adb589d11a1ec59255d10acb1fbef", 0x7a}], 0x2}, 0x0) (async)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x6f}, 0xc)

32.106010177s ago: executing program 3 (id=106):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000c3e43cb4646975259f5895ad780c46cf11937eec0f2eebdaecd11a5b13ef9a257e7a2df5cd00cff5c166d32c9211b15264b383fc8f263035f92a6fdaa0a27f1f75adcbc15fe7ff4b6c32e3ffc2200802d2b533438bbf45840277997bdad9cebc4572fbc8659b8f466543c7add647e3bcccde7afd03eb1e81b1cfc55282", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000003b0007010000000000000000047c0000040000000c0001"], 0x24}}, 0xc000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
sendto$rose(r3, &(0x7f0000000300)="9f412c3c111f6d51e0acb2bd178f651b0a00000000", 0x15, 0x0, &(0x7f0000000340)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f0000000a40)=""/4096, 0x1000, <r4=>0x0, &(0x7f0000000740)=""/251, 0xfb}}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8}, @IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x7fff}]}}}]}, 0x44}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f00000004c0)={'syztnl0\x00', <r6=>0x0, 0x80, 0x1, 0x8, 0x1, {{0x13, 0x4, 0x0, 0x38, 0x4c, 0x65, 0x0, 0x5, 0x29, 0x0, @multicast1, @loopback, {[@timestamp_prespec={0x44, 0xc, 0x30, 0x3, 0x1, [{@loopback, 0x7}]}, @timestamp_prespec={0x44, 0x2c, 0xe, 0x3, 0x6, [{@rand_addr=0x64010102, 0x1}, {@multicast1, 0x80000001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@rand_addr=0x64010102, 0x9}, {@broadcast, 0x2}]}]}}}}})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r7}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r11, r10, 0x2, 0x0, 0x4000, @void, @value}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r12, r9, 0x2, 0x6, 0x4000, @void, @value}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
r13 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r13, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4)
sendmsg$nl_route_sched(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=@newtaction={0xc0, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0xac, 0x1, [@m_bpf={0x70, 0x1, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r13}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x88, 0x8, 0x1, 0x1, 0x1}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x5, 0x5, 0x3, 0xffff, 0x4}}]}, {0x5, 0x6, "d5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0x38, 0xf, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x20000850)

31.871447412s ago: executing program 3 (id=111):
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0xae, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c20000000180c200000086dd60081f2000783afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefab65229379269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af180200010000000004000001260004001801fe906d17efe3"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='ext4_discard_preallocations\x00', r1, 0x0, 0x7ff}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000010001fff0300"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a0071a41704db3c8d9caa2aeedbb72f3bce22a397193d28694770603aea7250f1ad6708882981ba5745e8683868df7ba1bc9c726cd4943c7aa0db1a2626d318c6ab44daa02b131459baa55d4c75e42dbcb55585dcae9afb9dd91e783537f881b2693d31d6f76b3d5d334576394af95a524686ff97df3a03b3bfd063c22bd82e150c7afd5d7af201de2835f09b5d5c3c1bcf06e5f7186d67755c43dc50a8a5e6515c2fa85974d6f34ee0caf96abe4cb8337777f8e5649478ae3c129b4ea83f0fd9988d0d6b99143175", @ANYRES32=r4, @ANYBLOB], 0x40}}, 0x4000)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000280)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd690b", 0x48, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x0, [0x0, 0x0]}}}}}}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xb4}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r9, 0x1, 0x70bd2b, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
connect$packet(r0, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x6, 0x6, @broadcast}, 0x14)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x12003, 0x0)
ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x20001439)
r11 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFINDEX(r7, 0x400454da, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)=0x4)
ioctl$TUNSETOFFLOAD(r11, 0x4004743d, 0x2000000b)
ppoll(&(0x7f0000000180)=[{r11}], 0x1, 0x0, 0x0, 0x0)
close(r10)
socket$nl_netfilter(0x10, 0x3, 0xc)

31.508068323s ago: executing program 3 (id=114):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000400000009"], 0x48)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000600)={@empty, @dev}, &(0x7f0000000640)=0xc)
socketpair(0x28, 0x3, 0x11, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0)='@', 0x0, 0x2}, 0x20)
r2 = socket$kcm(0xa, 0x6, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000006640)={0x0, 0x0, &(0x7f0000006600)={&(0x7f00000064c0)=ANY=[@ANYBLOB="024805000700000029bd7000fbdbdf250500eb003ca000000a004e2000000e6200000000000000000000ffffffffffff0400000000000000"], 0x38}}, 0x4048000)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x8c)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f00000008c0)=ANY=[@ANYBLOB='+cpu'], 0x5)
r7 = openat$cgroup_int(r3, &(0x7f0000000140)='cpu.max.burst\x00', 0x2, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x800, <r8=>0x0}, 0x8)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000c1ffffff000020000001000005a21800f0ff00000000001afcf423639cd1a53c2c80ac2598258e3129865d86e4f04d0dd19dd64202df0fd8331eae729684cca348a2891ec921afa3c426a717199be19e01c30085040000003ced2c16"], &(0x7f0000000280)='syzkaller\x00', 0xa4e, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x0, 0x7, 0x0, 0x3fb3}, 0x10, r8, r9, 0x1, &(0x7f00000004c0)=[r9, r0, r0], &(0x7f0000000500)=[{0x3, 0x3, 0x1}], 0x10, 0x6, @void, @value}, 0x94)
openat$cgroup_subtree(r5, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000680)=ANY=[@ANYRES32=r9], 0xfffffe64)
write$cgroup_int(r7, 0x0, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x10d, 0xa, &(0x7f0000000000)=r10, 0x11)
setsockopt$sock_attach_bpf(r4, 0x10d, 0xb, &(0x7f0000000040)=r10, 0x4)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000300)='@', 0x20000000}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f00000000c0), 0x0}, 0x20)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd97, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r11, 0x0, 0xe, 0x0, &(0x7f0000000000)="00000900000015100000512288fa", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfff}, 0x50)
bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)

20.647389811s ago: executing program 1 (id=211):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast})
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$inet_buf(r2, 0x0, 0x23, &(0x7f00000001c0)="2f540730314e1450ff6a871ada0c0e5e37bc05fb861487d8872f798a3516e59e020ab64eba9e09d9e1fe917fccdf13505fe2c89027bced98e9ef043ee667f313a9747229879f081cf36c7feb777279767d64aeebf91250a820d449280cf95d17cc938283a4c1450d414dafcf80d50ede7825fce155eaab60c446f14e1d87c201da817d0c8a56503d9071118342803a6c686d633c5323162a5d8a3d326add25ed5ed51ae1fc3ac8be6f93ca3d30968c4c0f2913", 0xb3)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="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", 0x609}, {&(0x7f0000000040)="6c208464ca", 0x5}], 0x2)

20.312083313s ago: executing program 1 (id=214):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="03"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3)
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r3)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="34800000bf05fca96270361c0e5fba4caede811829ef2d2d9b8b40a789dbd3c4a9d7760935a280c7fea1d4400be4695f953cb8e3f581d9960d6e05e8f9167e244b933aa5fc206f05f4bef7c500e6378ea809b13fa3231e89efbd3db9d0f2de7b28ff4487f49ff49ae3e8d939c796313ae3ebc9c60a73866aaa75570af5601c18ff5577175f02083e5a8908a7f3e6012f2a798613738d2d1836d1a50af272d27c60617b1193f3df55a5f7f1a1e15ef439e2bb7b74c44e88681ebadf1efb028db0722ef8dc1a6e0be94afc11db164f98ff4e978aa6cebc51aad952fbebdc79ce846fb82c9e18a666b4271d00"/245, @ANYRES16=r4, @ANYBLOB="0103000000000000000005"], 0x34}}, 0x8000)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x8000000004)
r11 = socket(0x15, 0x5, 0x0)
connect$netrom(r11, &(0x7f0000000000)={{0xa, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
getsockname$ax25(r11, 0x0, &(0x7f0000000100))
setsockopt$inet6_tcp_buf(r11, 0x6, 0x1c, &(0x7f0000000080)="5d311e1b468a1d1f3c3ede2dc49ea6a4fb89a72b7f0b512fb79954ab0f5bf82c2bd2001f9a1cd95b56b1bf5cf5b6632f888aa85b61fc7bfb14a80be33202f4e8bc1e9c9a903479ed5b8696c37046af4e03216f6f5f83f9d0d9", 0x59)
writev(r10, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x16}}, {{@in6=@empty, 0x0, 0x2b}, 0x0, @in=@remote}}, 0xe8)
r12 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
listen(r12, 0x0)

19.276248261s ago: executing program 1 (id=226):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)

19.086823117s ago: executing program 1 (id=228):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r4, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, r1, 0x100, '\x00', 0x0, r6, 0x3, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
socket$packet(0x11, 0x2, 0x300) (async)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) (async)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r4, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, r1, 0x100, '\x00', 0x0, r6, 0x3, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async)

18.304897001s ago: executing program 3 (id=114):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000400000009"], 0x48)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000600)={@empty, @dev}, &(0x7f0000000640)=0xc)
socketpair(0x28, 0x3, 0x11, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0)='@', 0x0, 0x2}, 0x20)
r2 = socket$kcm(0xa, 0x6, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000006640)={0x0, 0x0, &(0x7f0000006600)={&(0x7f00000064c0)=ANY=[@ANYBLOB="024805000700000029bd7000fbdbdf250500eb003ca000000a004e2000000e6200000000000000000000ffffffffffff0400000000000000"], 0x38}}, 0x4048000)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x8c)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f00000008c0)=ANY=[@ANYBLOB='+cpu'], 0x5)
r7 = openat$cgroup_int(r3, &(0x7f0000000140)='cpu.max.burst\x00', 0x2, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x800, <r8=>0x0}, 0x8)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000c1ffffff000020000001000005a21800f0ff00000000001afcf423639cd1a53c2c80ac2598258e3129865d86e4f04d0dd19dd64202df0fd8331eae729684cca348a2891ec921afa3c426a717199be19e01c30085040000003ced2c16"], &(0x7f0000000280)='syzkaller\x00', 0xa4e, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x0, 0x7, 0x0, 0x3fb3}, 0x10, r8, r9, 0x1, &(0x7f00000004c0)=[r9, r0, r0], &(0x7f0000000500)=[{0x3, 0x3, 0x1}], 0x10, 0x6, @void, @value}, 0x94)
openat$cgroup_subtree(r5, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000680)=ANY=[@ANYRES32=r9], 0xfffffe64)
write$cgroup_int(r7, 0x0, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x10d, 0xa, &(0x7f0000000000)=r10, 0x11)
setsockopt$sock_attach_bpf(r4, 0x10d, 0xb, &(0x7f0000000040)=r10, 0x4)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000300)='@', 0x20000000}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f00000000c0), 0x0}, 0x20)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd97, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r11, 0x0, 0xe, 0x0, &(0x7f0000000000)="00000900000015100000512288fa", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfff}, 0x50)
bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)

17.774007562s ago: executing program 1 (id=245):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff00f100007110b4000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

17.112125257s ago: executing program 1 (id=254):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pipe(&(0x7f00000045c0)={<r0=>0xffffffffffffffff}) (async, rerun: 64)
r1 = socket$inet(0x2, 0x3, 0x7f) (rerun: 64)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) (async)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r1, 0x0, 0x8000, 0x0) (async, rerun: 32)
getsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, &(0x7f0000000180)=0x2d) (async, rerun: 32)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 64)
openat$tun(0xffffffffffffff9c, 0x0, 0x40, 0x0) (rerun: 64)
listen(0xffffffffffffffff, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32)
bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000005200010000000000000000000a000000040004"], 0x18}}, 0x0) (async)
socket$inet_dccp(0x2, 0x6, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0) (async, rerun: 32)
r5 = socket$packet(0x11, 0x2, 0x300) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5}]}}]}, 0x48}}, 0x0) (async, rerun: 64)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'hsr0\x00', <r8=>0x0}) (async)
r9 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r9, &(0x7f0000000dc0)="d0b4163e96457321d877d01ac22c", 0xe, 0x48001, &(0x7f00000001c0)={0x11, 0x9, r8, 0x1, 0x70, 0x6, @broadcast}, 0x14) (async, rerun: 64)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r8], 0x20}}, 0x0) (rerun: 64)

2.936066119s ago: executing program 4 (id=398):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r2 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x198, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@loopback}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x5d, 0x14, {{'cmac(aes)\x00'}, 0x88, 0x0, "e363215f3da533f861c33b10bf7d0ec8a2"}}]}, 0x198}}, 0x0)
pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="6ff15062dd8a31076e30df0da9907cc51bd35fd16064777537ac93f3b3c53013876df3fc5858e3d427dafa", 0x2b}], 0x1, 0x101, 0xff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r6=>0x0})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x1, 0x2, 0x5}, 0x14}}, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r6], 0x1c}}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_pktinfo(r8, 0x0, 0x8, 0x0, &(0x7f0000000240))
setsockopt$inet_mtu(r8, 0x0, 0xa, &(0x7f0000000180), 0x4)
sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0)

2.425011578s ago: executing program 4 (id=402):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0100000000000000000000000000007f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000ffffff880000000000100002"], 0xec}}, 0x0)

2.365532527s ago: executing program 4 (id=403):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), r1)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r2, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005001600000000000000080001000300000005000200000000000500020008"], 0x12c}, 0x1, 0x0, 0x0, 0x20000020}, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0x1d, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x6}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x6}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @cb_func={0x18, 0xf, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func]}, &(0x7f0000000240)='GPL\x00', 0xbca, 0x57, &(0x7f00000003c0)=""/87, 0x41100, 0xa, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x1, 0x7, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000500)=[{0x5, 0x3, 0x8, 0x8}, {0x1, 0x2, 0x10, 0xb}, {0x1, 0x5, 0x3, 0x1}], 0x10, 0x3, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r3}, &(0x7f0000000100), &(0x7f0000000640)=r4}, 0x20)
socket(0x10, 0x4, 0x100)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00'})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x10013}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x1}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x2c}}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@float={0x2, 0x0, 0x0, 0x10, 0x2}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x5f, 0x5f, 0x2e, 0x0, 0x5f]}}, &(0x7f0000000700)=""/25, 0x37, 0x19, 0x1, 0x5, 0x10000, @value}, 0x28)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000004, 0x30, r6, 0xa57e000)
ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff})
setsockopt$WPAN_WANTLQI(r6, 0x0, 0x3, &(0x7f0000000040)=0xfffffffe, 0x4)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="1200000002000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000fd97367f60cbb824532ea5aeb29725dde19a6b3032fca2e55ea5e780e00ccf21a791e0bde7b99d6c3fc18b4fe025baec149cdfa6928f108c7ac2b57089d8188e7d9ca25776013625ab3f9046ba69209f9caeeee2800885fd469c493b41555b82ccd9f3057ecee2f8df4b246be64b6d7b38d3900a3ba94ac5cdd1dbff4bb3a70668f0909540090449da0d34bb9fd02d73e29bb671df98a2f546fd67825fd00bf44f3738604049985bfec1d459c40b52903b7fca172c1da5268537ae56446f48507a3f33e99d12339e31cdb00d8157786699db977651b0340000000000"], 0x48)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r7, &(0x7f0000000340), &(0x7f0000000040)=@tcp6=r8}, 0x20)
setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000100), 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
close(r8)
socket(0xf, 0x3, 0x8001)
unshare(0x64060600)
unshare(0x68060200)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108)
socket$netlink(0x10, 0x3, 0x10)

1.325012384s ago: executing program 2 (id=412):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0xffffe395, 0x4)
getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@loopback}, &(0x7f0000000140)=0x14)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
accept4$unix(r1, 0x0, 0x0, 0x0)
r2 = socket(0xa, 0x801, 0x0)
getsockopt(r2, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f00000000c0)={0x3, 0x9, 0xfffffffffffffffd})
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)

1.066744504s ago: executing program 2 (id=414):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000100020075"], 0x8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000018000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000088000000060a010400000000000000000100000008000b4000000000600004802c0001800c000100636f756e746572001c0002800c00014000000000000000000c0002400000000000000076240001800b0001007470726f7879000014000280080002400000000008000140000000b30c00018007000100727400000900010073797a30"], 0xfc}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000000), &(0x7f00000002c0)=r4}, 0x20)

1.00820755s ago: executing program 0 (id=415):
r0 = socket$caif_stream(0x25, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001700)='team_slave_1\x00', 0x10)
socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getroute={0x60, 0x1a, 0x400, 0x70bd26, 0x25dfdbfc, {0xa, 0x14, 0x14, 0x3, 0xfe, 0x0, 0xc8, 0x2, 0x3700}, [@RTA_METRICS={0x23, 0x8, 0x0, 0x1, "15185e7d5ebb96724052052f748a469df6af1526ed9163a09103d6ae1d8570"}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_LOCAL_NH6={0x14, 0x5, @mcast1}}, @RTA_EXPIRES={0x8, 0x17, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004080}, 0x48882) (async)
sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getroute={0x60, 0x1a, 0x400, 0x70bd26, 0x25dfdbfc, {0xa, 0x14, 0x14, 0x3, 0xfe, 0x0, 0xc8, 0x2, 0x3700}, [@RTA_METRICS={0x23, 0x8, 0x0, 0x1, "15185e7d5ebb96724052052f748a469df6af1526ed9163a09103d6ae1d8570"}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_LOCAL_NH6={0x14, 0x5, @mcast1}}, @RTA_EXPIRES={0x8, 0x17, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004080}, 0x48882)
connect$caif(r0, &(0x7f0000001780)=@rfm={0x25, 0x0, "97043cb15933228220123530318b377a"}, 0x18)

882.787663ms ago: executing program 0 (id=416):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000e000000100000000000000000000000000000081000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000feffffff0000000001"], 0xb8}}, 0x0)

817.620045ms ago: executing program 2 (id=417):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000000)=0x1800, &(0x7f00000002c0)=r1}, 0x20)

684.206048ms ago: executing program 0 (id=418):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

621.41746ms ago: executing program 4 (id=419):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet(0xa, 0x801, 0x84)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r3, 0xfffffffd)
listen(r2, 0x8)
r4 = socket$inet(0xa, 0x801, 0x84)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
listen(r5, 0x100)
listen(r4, 0x8)
r6 = socket$inet(0xa, 0x801, 0x84)
listen(r6, 0x1)
r7 = socket$netlink(0x10, 0x3, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7)
writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r1)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[@ANYBLOB="1000007f00161c67b92dab915305430fbf490eb21dbb3f66b169eeb22f6136965239cf7ebc26ed80548c7052ae92dc6fdd8b17a2ecab993bf956af81c86b6914552c4e160cd38e954109bff3f6776d88", @ANYRES16=r8, @ANYBLOB="010025bd7000fedbdf252500000005002e00050000000a0001007770616e3000000005002b0003000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
recvmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1}, 0x10001}], 0x1, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff})
sendmmsg$sock(r9, &(0x7f00000044c0), 0x4000000000001c0, 0x0)
bind$ax25(0xffffffffffffffff, 0x0, 0x0)

592.715282ms ago: executing program 0 (id=420):
r0 = socket(0x3, 0x800000003, 0x200000)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}}, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r1, 0x1, 0x2d, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r1, 0x80}], 0x1, 0x800)
shutdown(r1, 0x1)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x4000)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600))
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$inet(r3, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000340)='Ybr', 0x3}, {0x0}], 0x2}}], 0x2, 0x4800)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

520.217641ms ago: executing program 2 (id=421):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r2 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r3, &(0x7f0000000240)="94", 0x1)
tee(r4, r3, 0x80000001, 0x0)
vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0)

365.652628ms ago: executing program 0 (id=422):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x9, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}, @printk={@ld}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

224.931052ms ago: executing program 2 (id=423):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0100000000000000000000000000007f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000fffffffd0000000000100002"], 0xec}}, 0x0)

111.381154ms ago: executing program 4 (id=424):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
syz_emit_ethernet(0x4e, &(0x7f0000000900)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\b\x00', 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0xc0, '\x00', @remote}}}}}}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0x25, &(0x7f0000000040), 0x4)

110.219139ms ago: executing program 0 (id=425):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) (fail_nth: 6)

266.375µs ago: executing program 4 (id=426):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000ff7110b4000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

0s ago: executing program 2 (id=427):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4) (async, rerun: 64)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a200000000b0a0103003e000000000000002abc621a8ce200020000090900010073797a300000000020000000050a05000000000000000000010000020900010073797a30000000002c000000050a01010000000000000000020000060900010073797a20000000000900030073797a3200000000140000001100010000000000dcc416ef563c3a11"], 0x94}}, 0x4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.80' (ED25519) to the list of known hosts.
[   52.842993][ T5828] cgroup: Unknown subsys name 'net'
[   53.015756][ T5828] cgroup: Unknown subsys name 'cpuset'
[   53.024216][ T5828] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   54.266044][ T5828] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.357746][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.362713][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.382699][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.390119][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.393327][ T5856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   56.398134][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.405806][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   56.413026][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.420058][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.426265][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   56.440836][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.448034][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   56.454125][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.472696][ T5856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   56.481024][ T5858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   56.488619][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.488643][ T5856] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   56.496375][ T5860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.503443][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.512914][ T5860] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   56.519638][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   56.530663][   T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   56.539111][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.542464][ T5860] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   56.546759][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.554703][ T5860] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   56.570628][ T5860] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   56.582699][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   56.594325][   T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   56.604424][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.997103][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   57.006853][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   57.071220][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   57.175062][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   57.185893][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   57.233903][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.241775][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.249330][ T5850] bridge_slave_0: entered allmulticast mode
[   57.256524][ T5850] bridge_slave_0: entered promiscuous mode
[   57.287982][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.295312][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.302610][ T5854] bridge_slave_0: entered allmulticast mode
[   57.309596][ T5854] bridge_slave_0: entered promiscuous mode
[   57.317442][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.324789][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.331939][ T5850] bridge_slave_1: entered allmulticast mode
[   57.339335][ T5850] bridge_slave_1: entered promiscuous mode
[   57.366426][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.373590][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.380746][ T5838] bridge_slave_0: entered allmulticast mode
[   57.388377][ T5838] bridge_slave_0: entered promiscuous mode
[   57.395676][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.403258][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.410409][ T5838] bridge_slave_1: entered allmulticast mode
[   57.417192][ T5838] bridge_slave_1: entered promiscuous mode
[   57.424089][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.431160][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.438791][ T5854] bridge_slave_1: entered allmulticast mode
[   57.445400][ T5854] bridge_slave_1: entered promiscuous mode
[   57.469296][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.514775][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.555493][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.595903][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.609895][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.622139][ T5850] team0: Port device team_slave_0 added
[   57.630493][ T5850] team0: Port device team_slave_1 added
[   57.643458][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.650580][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.657896][ T5839] bridge_slave_0: entered allmulticast mode
[   57.665259][ T5839] bridge_slave_0: entered promiscuous mode
[   57.681697][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.720817][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.731505][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.738947][ T5839] bridge_slave_1: entered allmulticast mode
[   57.746314][ T5839] bridge_slave_1: entered promiscuous mode
[   57.769831][ T5854] team0: Port device team_slave_0 added
[   57.776574][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.786667][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.813246][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.825221][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.832627][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.839775][ T5846] bridge_slave_0: entered allmulticast mode
[   57.846750][ T5846] bridge_slave_0: entered promiscuous mode
[   57.854516][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.861588][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.868813][ T5846] bridge_slave_1: entered allmulticast mode
[   57.875388][ T5846] bridge_slave_1: entered promiscuous mode
[   57.896505][ T5854] team0: Port device team_slave_1 added
[   57.911172][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.918150][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.944629][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.986785][ T5838] team0: Port device team_slave_0 added
[   58.011005][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.022784][ T5838] team0: Port device team_slave_1 added
[   58.046174][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.053239][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.082395][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.095528][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.109852][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.132533][ T5850] hsr_slave_0: entered promiscuous mode
[   58.138777][ T5850] hsr_slave_1: entered promiscuous mode
[   58.146188][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.161175][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.187593][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.200451][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.231073][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.238362][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.264804][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.302119][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.309289][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.335392][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.355890][ T5846] team0: Port device team_slave_0 added
[   58.368280][ T5839] team0: Port device team_slave_0 added
[   58.403427][ T5846] team0: Port device team_slave_1 added
[   58.410671][ T5839] team0: Port device team_slave_1 added
[   58.447561][ T5838] hsr_slave_0: entered promiscuous mode
[   58.454418][ T5838] hsr_slave_1: entered promiscuous mode
[   58.460443][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.468690][ T5838] Cannot create hsr debugfs directory
[   58.495632][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.502697][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.528854][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.543491][ T5856] Bluetooth: hci0: command tx timeout
[   58.551365][ T5854] hsr_slave_0: entered promiscuous mode
[   58.558243][ T5854] hsr_slave_1: entered promiscuous mode
[   58.565818][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.573576][ T5854] Cannot create hsr debugfs directory
[   58.579795][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.587088][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.613283][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.624971][ T5851] Bluetooth: hci4: command tx timeout
[   58.625006][   T54] Bluetooth: hci1: command tx timeout
[   58.630636][ T5856] Bluetooth: hci3: command tx timeout
[   58.638199][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.648651][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.674864][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.686582][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.693877][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.702382][ T5856] Bluetooth: hci2: command tx timeout
[   58.720409][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.839085][ T5846] hsr_slave_0: entered promiscuous mode
[   58.845413][ T5846] hsr_slave_1: entered promiscuous mode
[   58.851381][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.862122][ T5846] Cannot create hsr debugfs directory
[   58.933374][ T5839] hsr_slave_0: entered promiscuous mode
[   58.939707][ T5839] hsr_slave_1: entered promiscuous mode
[   58.946025][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.953859][ T5839] Cannot create hsr debugfs directory
[   59.088234][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   59.115666][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   59.127731][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   59.155038][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   59.238471][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   59.262171][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   59.286121][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   59.306140][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   59.325315][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   59.343091][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   59.353611][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   59.371174][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   59.417384][ T5846] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   59.433816][ T5846] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   59.474150][ T5846] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   59.492869][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   59.504679][ T5846] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   59.531383][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   59.541242][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   59.559338][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   59.650827][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.696651][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.738043][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   59.765566][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.788714][ T3541] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.795940][ T3541] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.812066][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   59.827410][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.841009][  T999] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.848131][  T999] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.861739][  T999] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.868853][  T999] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.920598][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   59.940336][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.954682][ T3541] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.961744][ T3541] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.974082][ T3541] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.981168][ T3541] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.996013][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   60.017071][ T3541] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.024533][ T3541] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.051567][  T999] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.058729][  T999] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.084792][  T999] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.091909][  T999] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.124843][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   60.158150][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.165330][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.199685][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.206845][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.257742][ T5854] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   60.268345][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   60.318843][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   60.426934][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.545424][ T5850] veth0_vlan: entered promiscuous mode
[   60.579672][ T5850] veth1_vlan: entered promiscuous mode
[   60.624433][ T5856] Bluetooth: hci0: command tx timeout
[   60.662054][ T5850] veth0_macvtap: entered promiscuous mode
[   60.703126][ T5856] Bluetooth: hci3: command tx timeout
[   60.703304][   T54] Bluetooth: hci4: command tx timeout
[   60.708552][ T5851] Bluetooth: hci1: command tx timeout
[   60.746257][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.759417][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.769957][ T5850] veth1_macvtap: entered promiscuous mode
[   60.783196][ T5851] Bluetooth: hci2: command tx timeout
[   60.791040][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.847902][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.859316][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.906374][ T5839] veth0_vlan: entered promiscuous mode
[   60.931865][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.957425][ T5850] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.966691][ T5850] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.976220][ T5850] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.986033][ T5850] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.000056][ T5838] veth0_vlan: entered promiscuous mode
[   61.031965][ T5839] veth1_vlan: entered promiscuous mode
[   61.055566][ T5838] veth1_vlan: entered promiscuous mode
[   61.119715][ T5854] veth0_vlan: entered promiscuous mode
[   61.157718][ T5854] veth1_vlan: entered promiscuous mode
[   61.180522][ T5838] veth0_macvtap: entered promiscuous mode
[   61.201978][ T5839] veth0_macvtap: entered promiscuous mode
[   61.226870][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.230281][ T5839] veth1_macvtap: entered promiscuous mode
[   61.236580][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.293854][ T5838] veth1_macvtap: entered promiscuous mode
[   61.301620][ T5854] veth0_macvtap: entered promiscuous mode
[   61.330960][ T5854] veth1_macvtap: entered promiscuous mode
[   61.370846][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.380825][ T5846] veth0_vlan: entered promiscuous mode
[   61.382517][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.397054][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.408631][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.421269][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.437939][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.448621][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.458576][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.469104][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.479977][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.496280][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.510456][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.521279][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.537200][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.547126][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.557780][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.569592][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.580168][ T5846] veth1_vlan: entered promiscuous mode
[   61.589838][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.601106][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.613013][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.625491][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.625967][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   61.642057][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.667462][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.679080][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.690434][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.700419][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.711249][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.722062][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.732848][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.743662][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.754152][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.765175][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.788461][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.811900][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.834894][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.844578][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.858694][ T5854] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.869402][ T5854] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.878285][ T5854] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.887100][ T5854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.901286][ T5839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.912718][ T5839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.921976][ T5839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.934469][ T5839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.040050][ T5846] veth0_macvtap: entered promiscuous mode
[   62.083710][ T5846] veth1_macvtap: entered promiscuous mode
[   62.100982][  T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.111882][  T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.149209][  T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.156147][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.166365][  T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.176650][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.186987][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.199376][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.209602][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.220197][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.232440][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.243104][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.254816][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.292058][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.312508][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.325441][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.336355][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.349338][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.360777][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.370947][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.384283][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.395466][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.407327][ T5846] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.416614][ T5846] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.425525][ T5846] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.434386][ T5846] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.470191][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.480245][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.487951][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.500400][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.563484][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.591705][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.666342][  T999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.677933][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.693775][  T999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.702955][ T5851] Bluetooth: hci0: command tx timeout
[   62.719099][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.784666][ T5851] Bluetooth: hci1: command tx timeout
[   62.790130][ T5851] Bluetooth: hci3: command tx timeout
[   62.795667][ T5856] Bluetooth: hci4: command tx timeout
[   62.829473][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.870976][ T5933] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7'.
[   62.872995][ T5851] Bluetooth: hci2: command tx timeout
[   62.891281][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.020478][ T5940] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.077189][ T5933] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   63.094915][ T5944] delete_channel: no stack
[   63.099856][ T5944] delete_channel: no stack
[   63.102421][ T5939] delete_channel: no stack
[   63.127549][ T5939] delete_channel: no stack
[   63.135573][ T5933] macvlan2: entered allmulticast mode
[   63.180222][ T5933] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   63.217833][ T5948] sctp: [Deprecated]: syz.2.9 (pid 5948) Use of int in maxseg socket option.
[   63.217833][ T5948] Use struct sctp_assoc_value instead
[   63.242047][ T5933] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[   63.300799][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11'.
[   63.330354][ T5930] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1'.
[   63.628611][ T5964] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14'.
[   64.782509][ T5851] Bluetooth: hci0: command tx timeout
[   64.823501][ T5994] netlink: 72 bytes leftover after parsing attributes in process `syz.0.23'.
[   64.862327][ T5851] Bluetooth: hci1: command tx timeout
[   64.873006][ T5856] Bluetooth: hci4: command tx timeout
[   64.878926][ T5851] Bluetooth: hci3: command tx timeout
[   64.955697][ T5851] Bluetooth: hci2: command tx timeout
[   65.814155][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'.
[   65.846256][ T5999] netlink: 24 bytes leftover after parsing attributes in process `syz.0.24'.
[   65.985427][ T6004] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.034499][ T6005] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   66.149808][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'.
[   66.183357][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'.
[   66.780866][ T6048] netlink: 'syz.3.39': attribute type 21 has an invalid length.
[   66.803842][ T6049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.39'.
[   66.809970][ T6046] warning: `syz.2.35' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   66.835649][ T6031] syz.2.35 uses obsolete (PF_INET,SOCK_PACKET)
[   67.026521][ T6058] Bluetooth: MGMT ver 1.23
[   67.033786][ T6056] netlink: 'syz.4.44': attribute type 2 has an invalid length.
[   67.266972][ T6070] netlink: 'syz.0.48': attribute type 32 has an invalid length.
[   67.431154][ T6086] netlink: 'syz.3.50': attribute type 3 has an invalid length.
[   67.461097][ T6108] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.473651][ T6111] delete_channel: no stack
[   67.478209][ T6111] delete_channel: no stack
[   67.486252][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.514381][ T6108] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.528387][ T6111] FAULT_INJECTION: forcing a failure.
[   67.528387][ T6111] name failslab, interval 1, probability 0, space 0, times 1
[   67.529654][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.544901][ T6111] CPU: 1 UID: 0 PID: 6111 Comm: syz.4.53 Not tainted 6.12.0-rc5-syzkaller-01187-ga84e8c05f583 #0
[   67.559043][ T6111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   67.569156][ T6111] Call Trace:
[   67.572456][ T6111]  <TASK>
[   67.575409][ T6111]  dump_stack_lvl+0x241/0x360
[   67.580143][ T6111]  ? __pfx_dump_stack_lvl+0x10/0x10
[   67.585377][ T6111]  ? __pfx__printk+0x10/0x10
[   67.590004][ T6111]  ? __kmalloc_noprof+0xb0/0x400
[   67.594973][ T6111]  ? __pfx___might_resched+0x10/0x10
[   67.600294][ T6111]  should_fail_ex+0x3b0/0x4e0
[   67.604997][ T6111]  ? kernfs_fop_write_iter+0x15a/0x500
[   67.610482][ T6111]  should_failslab+0xac/0x100
[   67.615188][ T6111]  ? kernfs_fop_write_iter+0x15a/0x500
[   67.620670][ T6111]  __kmalloc_noprof+0xd8/0x400
[   67.625460][ T6111]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[   67.631376][ T6111]  kernfs_fop_write_iter+0x15a/0x500
[   67.636673][ T6111]  vfs_write+0xaeb/0xd30
[   67.640922][ T6111]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[   67.646734][ T6111]  ? __pfx_vfs_write+0x10/0x10
[   67.651529][ T6111]  ? fdget_pos+0x24e/0x320
[   67.655950][ T6111]  ksys_write+0x183/0x2b0
[   67.660279][ T6111]  ? __pfx_ksys_write+0x10/0x10
[   67.665144][ T6111]  ? do_syscall_64+0x100/0x230
[   67.669938][ T6111]  ? do_syscall_64+0xb6/0x230
[   67.674627][ T6111]  do_syscall_64+0xf3/0x230
[   67.679136][ T6111]  ? clear_bhb_loop+0x35/0x90
[   67.683821][ T6111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.689737][ T6111] RIP: 0033:0x7fbe5817e719
[   67.694160][ T6111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   67.713769][ T6111] RSP: 002b:00007fbe58fab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   67.722186][ T6111] RAX: ffffffffffffffda RBX: 00007fbe58335f80 RCX: 00007fbe5817e719
[   67.730161][ T6111] RDX: 0000000000000005 RSI: 0000000020000400 RDI: 0000000000000004
[   67.738136][ T6111] RBP: 00007fbe58fab090 R08: 0000000000000000 R09: 0000000000000000
[   67.746115][ T6111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   67.754087][ T6111] R13: 0000000000000000 R14: 00007fbe58335f80 R15: 00007ffc32dc1678
[   67.762068][ T6111]  </TASK>
[   67.961185][ T6155] __nla_validate_parse: 4 callbacks suppressed
[   67.961203][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'.
[   68.000035][ T6155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.56'.
[   68.041266][ T6153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.56'.
[   68.361745][ T6177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.62'.
[   68.393635][ T6177] netlink: 'syz.2.62': attribute type 1 has an invalid length.
[   68.561296][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.71'.
[   68.562849][ T6192] netlink: 'syz.1.69': attribute type 32 has an invalid length.
[   68.570417][ T6193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.71'.
[   68.599783][ T6193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.71'.
[   68.725534][ T6197] delete_channel: no stack
[   68.730108][ T6197] delete_channel: no stack
[   68.895607][ T6203] FAULT_INJECTION: forcing a failure.
[   68.895607][ T6203] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   68.936414][ T6203] CPU: 0 UID: 0 PID: 6203 Comm: syz.0.76 Not tainted 6.12.0-rc5-syzkaller-01187-ga84e8c05f583 #0
[   68.946963][ T6203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   68.957026][ T6203] Call Trace:
[   68.960313][ T6203]  <TASK>
[   68.963267][ T6203]  dump_stack_lvl+0x241/0x360
[   68.967946][ T6203]  ? __pfx_dump_stack_lvl+0x10/0x10
[   68.973162][ T6203]  ? __pfx__printk+0x10/0x10
[   68.977763][ T6203]  ? __pfx_lock_release+0x10/0x10
[   68.982828][ T6203]  should_fail_ex+0x3b0/0x4e0
[   68.987505][ T6203]  _copy_from_user+0x2f/0xc0
[   68.992093][ T6203]  copy_msghdr_from_user+0xae/0x680
[   68.997290][ T6203]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[   69.003095][ T6203]  __sys_sendmsg+0x22d/0x380
[   69.007685][ T6203]  ? __pfx___sys_sendmsg+0x10/0x10
[   69.012826][ T6203]  ? __pfx_vfs_write+0x10/0x10
[   69.017638][ T6203]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   69.023975][ T6203]  ? do_syscall_64+0x100/0x230
[   69.028749][ T6203]  ? do_syscall_64+0xb6/0x230
[   69.033430][ T6203]  do_syscall_64+0xf3/0x230
[   69.037952][ T6203]  ? clear_bhb_loop+0x35/0x90
[   69.042649][ T6203]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.048568][ T6203] RIP: 0033:0x7f5ce2f7e719
[   69.053002][ T6203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   69.072629][ T6203] RSP: 002b:00007f5ce3de5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   69.081071][ T6203] RAX: ffffffffffffffda RBX: 00007f5ce3135f80 RCX: 00007f5ce2f7e719
[   69.089053][ T6203] RDX: 0000000000000000 RSI: 0000000020002080 RDI: 0000000000000003
[   69.097055][ T6203] RBP: 00007f5ce3de5090 R08: 0000000000000000 R09: 0000000000000000
[   69.105050][ T6203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   69.113047][ T6203] R13: 0000000000000000 R14: 00007f5ce3135f80 R15: 00007fffa1db9628
[   69.121058][ T6203]  </TASK>
[   69.141282][ T6212] delete_channel: no stack
[   69.146378][ T6212] delete_channel: no stack
[   69.315557][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.83'.
[   69.327704][ T6220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.83'.
[   69.341222][ T6220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.83'.
[   69.515224][ T6229] Zero length message leads to an empty skb
[   69.549669][ T6232] netlink: 'syz.0.87': attribute type 32 has an invalid length.
[   69.627650][ T6234] delete_channel: no stack
[   69.645288][ T6234] delete_channel: no stack
[   69.692379][ T6237] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[   69.866643][ T6246] FAULT_INJECTION: forcing a failure.
[   69.866643][ T6246] name failslab, interval 1, probability 0, space 0, times 0
[   69.912264][ T6246] CPU: 1 UID: 0 PID: 6246 Comm: syz.0.93 Not tainted 6.12.0-rc5-syzkaller-01187-ga84e8c05f583 #0
[   69.922834][ T6246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   69.932918][ T6246] Call Trace:
[   69.936217][ T6246]  <TASK>
[   69.939162][ T6246]  dump_stack_lvl+0x241/0x360
[   69.943962][ T6246]  ? __pfx_dump_stack_lvl+0x10/0x10
[   69.949187][ T6246]  ? __pfx__printk+0x10/0x10
[   69.949448][ T6251] delete_channel: no stack
[   69.953791][ T6246]  ? kmem_cache_alloc_node_noprof+0x49/0x320
[   69.953842][ T6246]  ? __pfx___might_resched+0x10/0x10
[   69.953871][ T6246]  should_fail_ex+0x3b0/0x4e0
[   69.953894][ T6246]  should_failslab+0xac/0x100
[   69.953914][ T6246]  ? __alloc_skb+0x1c3/0x440
[   69.953935][ T6246]  kmem_cache_alloc_node_noprof+0x71/0x320
[   69.953963][ T6246]  __alloc_skb+0x1c3/0x440
[   69.953984][ T6246]  ? __local_bh_enable_ip+0x168/0x200
[   69.954008][ T6246]  ? __pfx___alloc_skb+0x10/0x10
[   69.954040][ T6246]  kcm_sendmsg+0x2592/0x2a50
[   69.954099][ T6246]  ? __pfx_kcm_sendmsg+0x10/0x10
[   69.954122][ T6246]  ? __import_iovec+0x590/0x870
[   69.954147][ T6246]  ? aa_sock_msg_perm+0x91/0x160
[   69.954174][ T6246]  ? __pfx_kcm_sendmsg+0x10/0x10
[   69.954195][ T6246]  __sock_sendmsg+0x221/0x270
[   69.983138][ T6251] delete_channel: no stack
[   69.983758][ T6246]  ____sys_sendmsg+0x52a/0x7e0
[   70.042448][ T6246]  ? __pfx_____sys_sendmsg+0x10/0x10
[   70.047794][ T6246]  __sys_sendmsg+0x292/0x380
[   70.052429][ T6246]  ? __pfx___sys_sendmsg+0x10/0x10
[   70.057581][ T6246]  ? __pfx_vfs_write+0x10/0x10
[   70.062487][ T6246]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   70.068851][ T6246]  ? do_syscall_64+0x100/0x230
[   70.073674][ T6246]  ? do_syscall_64+0xb6/0x230
[   70.078388][ T6246]  do_syscall_64+0xf3/0x230
[   70.083021][ T6246]  ? clear_bhb_loop+0x35/0x90
[   70.087725][ T6246]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.093656][ T6246] RIP: 0033:0x7f5ce2f7e719
[   70.098100][ T6246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   70.117742][ T6246] RSP: 002b:00007f5ce3de5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   70.126191][ T6246] RAX: ffffffffffffffda RBX: 00007f5ce3135f80 RCX: 00007f5ce2f7e719
[   70.134192][ T6246] RDX: 0000000000000000 RSI: 0000000020002080 RDI: 0000000000000003
[   70.135783][ T6251] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[   70.142169][ T6246] RBP: 00007f5ce3de5090 R08: 0000000000000000 R09: 0000000000000000
[   70.142189][ T6246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   70.142201][ T6246] R13: 0000000000000000 R14: 00007f5ce3135f80 R15: 00007fffa1db9628
[   70.142231][ T6246]  </TASK>
[   70.454436][ T6272] netlink: 'syz.0.103': attribute type 32 has an invalid length.
[   70.580700][ T6280] delete_channel: no stack
[   70.592744][ T6278] netlink: 'syz.3.106': attribute type 1 has an invalid length.
[   70.607799][ T6280] delete_channel: no stack
[   70.818990][ T6289] netlink: 'syz.2.109': attribute type 27 has an invalid length.
[   71.168395][ T6119] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.269165][ T6119] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.360989][ T6119] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.543113][ T6119] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.568892][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.640313][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.656565][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.683116][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[   71.705039][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.724493][ T5856] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   71.740766][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   72.047852][ T6119] bridge_slave_1: left allmulticast mode
[   72.054043][ T6119] bridge_slave_1: left promiscuous mode
[   72.060905][ T6119] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.113881][ T6119] bridge_slave_0: left allmulticast mode
[   72.119592][ T6119] bridge_slave_0: left promiscuous mode
[   72.172566][ T6341] validate_nla: 1 callbacks suppressed
[   72.172585][ T6341] netlink: 'syz.0.125': attribute type 1 has an invalid length.
[   72.173048][ T6119] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.197260][ T6341] nbd: error processing sock list
[   72.828310][ T6119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   72.839670][ T6119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   72.851244][ T6119] bond0 (unregistering): Released all slaves
[   72.864171][ T6119] bond1 (unregistering): Released all slaves
[   72.884159][ T6351] netlink: 'syz.2.127': attribute type 25 has an invalid length.
[   73.320549][ T6383] __nla_validate_parse: 11 callbacks suppressed
[   73.320568][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'.
[   73.492441][ T6378] netlink: 28 bytes leftover after parsing attributes in process `syz.2.131'.
[   73.643276][ T6388] syzkaller0: entered promiscuous mode
[   73.651034][ T6388] syzkaller0: entered allmulticast mode
[   73.718395][ T6403] netlink: 28 bytes leftover after parsing attributes in process `syz.2.138'.
[   73.765623][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.138'.
[   73.822872][ T5856] Bluetooth: hci0: command tx timeout
[   75.256216][ T6412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.140'.
[   75.272587][ T6418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.140'.
[   75.404760][ T6119] hsr_slave_0: left promiscuous mode
[   75.444229][ T6119] hsr_slave_1: left promiscuous mode
[   75.464184][ T6119] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.492800][ T6119] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.501645][ T6119] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.515636][ T6119] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.551978][ T6119] veth1_macvtap: left promiscuous mode
[   75.575169][ T6119] veth0_macvtap: left promiscuous mode
[   75.581382][ T6119] veth1_vlan: left promiscuous mode
[   75.592907][ T6440] netlink: 20 bytes leftover after parsing attributes in process `syz.4.144'.
[   75.602140][ T6119] veth0_vlan: left promiscuous mode
[   75.912431][ T5856] Bluetooth: hci0: command tx timeout
[   75.961079][ T6119] team0 (unregistering): Port device team_slave_1 removed
[   75.996420][ T6119] team0 (unregistering): Port device team_slave_0 removed
[   76.347008][ T6440] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   76.379810][ T6307] chnl_net:caif_netlink_parms(): no params data found
[   76.791663][    T8] cfg80211: failed to load regulatory.db
[   76.817719][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.151'.
[   76.832123][ T6464] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.845413][ T6464] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.874653][ T6464] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.913826][ T6464] batman_adv: batadv0: Removing interface: batadv_slave_1
[   77.086805][ T6472] SET target dimension over the limit!
[   77.357181][ T6307] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.375539][ T6307] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.391473][ T6307] bridge_slave_0: entered allmulticast mode
[   77.411934][ T6307] bridge_slave_0: entered promiscuous mode
[   77.449655][ T6307] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.472308][ T6307] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.479549][ T6307] bridge_slave_1: entered allmulticast mode
[   77.502375][ T6307] bridge_slave_1: entered promiscuous mode
[   77.739586][ T6307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.804042][ T6307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.060429][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.158'.
[   78.064279][ T6504] dccp_close: ABORT with 32 bytes unread
[   78.099860][ T6307] team0: Port device team_slave_0 added
[   78.122781][ T6509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.158'.
[   78.148372][ T6497] delete_channel: no stack
[   78.161548][ T6307] team0: Port device team_slave_1 added
[   78.290991][ T6307] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.319087][ T6307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.387583][ T6525] netlink: 'syz.1.163': attribute type 32 has an invalid length.
[   78.420753][ T6307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.482951][ T6307] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.489944][ T6307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.585263][ T6307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.740917][ T6307] hsr_slave_0: entered promiscuous mode
[   78.800562][ T6307] hsr_slave_1: entered promiscuous mode
[   78.816637][ T6307] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.837810][ T6307] Cannot create hsr debugfs directory
[   78.884038][ T6553] Driver unsupported XDP return value 0 on prog  (id 74) dev N/A, expect packet loss!
[   79.105735][ T6563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.172'.
[   79.121516][ T6568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.172'.
[   79.610748][ T6590] netlink: 'syz.4.180': attribute type 10 has an invalid length.
[   79.633158][ T6590] hsr0: entered promiscuous mode
[   79.658095][ T6590] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   79.729468][ T6590] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[   79.746750][ T6590] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   79.802531][ T6590] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[   79.855607][ T6593] veth0_macvtap: left promiscuous mode
[   80.215445][ T6621] netlink: 'syz.4.185': attribute type 32 has an invalid length.
[   80.493957][ T6637] 
: renamed from bond0 (while UP)
[   80.611287][ T6639] netlink: 20 bytes leftover after parsing attributes in process `syz.1.191'.
[   80.655875][ T6639] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   80.665157][ T6639] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   80.674087][ T6639] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   80.683278][ T6639] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   80.730380][ T6307] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   80.779038][ T6647] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   80.806459][ T6647] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.827323][ T6307] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   80.841272][ T6307] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   80.858861][ T6654] netlink: 72 bytes leftover after parsing attributes in process `syz.0.197'.
[   80.869444][ T6654] netlink: 72 bytes leftover after parsing attributes in process `syz.0.197'.
[   80.887853][ T6653] netlink: 72 bytes leftover after parsing attributes in process `syz.0.197'.
[   80.904066][ T6653] netlink: 72 bytes leftover after parsing attributes in process `syz.0.197'.
[   80.914255][ T6307] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   80.922087][ T6656] netlink: 240 bytes leftover after parsing attributes in process `syz.1.191'.
[   81.101326][ T6307] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.135430][ T6307] 8021q: adding VLAN 0 to HW filter on device team0
[   81.189425][ T6105] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.196629][ T6105] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.281190][ T6105] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.288473][ T6105] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.465471][ T6671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.202'.
[   81.542516][ T6671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.202'.
[   81.933430][ T6307] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.980108][ T6702] syzkaller1: entered promiscuous mode
[   81.985810][ T6702] syzkaller1: entered allmulticast mode
[   82.038734][ T6307] veth0_vlan: entered promiscuous mode
[   82.050710][ T6307] veth1_vlan: entered promiscuous mode
[   82.332507][ T6307] veth0_macvtap: entered promiscuous mode
[   82.342037][ T6307] veth1_macvtap: entered promiscuous mode
[   82.415145][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.442326][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.467406][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.502348][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.567603][ T6307] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.601117][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.642272][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.652146][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.698057][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.734345][ T6307] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.766073][ T6307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.807274][ T6307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.837066][ T6307] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.849283][ T6307] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.041400][ T6146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.082786][ T6146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.154171][ T6074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.183685][ T6074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.497983][ T6144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.633445][ T6836] netlink: 'syz.4.242': attribute type 32 has an invalid length.
[   84.801338][ T6846] netlink: 900 bytes leftover after parsing attributes in process `syz.4.244'.
[   84.955612][ T6144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.120011][ T6846] syzkaller0: entered promiscuous mode
[   85.144849][ T6846] syzkaller0: entered allmulticast mode
[   85.165234][ T6099] syzkaller0: tun_net_xmit 48
[   85.196998][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   85.217876][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   85.226306][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   85.240598][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   85.251439][ T5851] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   85.259009][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   85.333598][ T6144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.562069][ T6144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.273935][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   86.296924][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   86.307456][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   86.326863][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   86.334507][ T5856] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   86.341969][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   87.342412][ T5851] Bluetooth: hci0: command tx timeout
[   88.208348][ T6144] bridge_slave_1: left allmulticast mode
[   88.232485][ T6144] bridge_slave_1: left promiscuous mode
[   88.251709][ T6144] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.327458][ T6144] bridge_slave_0: left allmulticast mode
[   88.345088][ T6144] bridge_slave_0: left promiscuous mode
[   88.351550][ T6144] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.385707][ T6968] netlink: 20 bytes leftover after parsing attributes in process `syz.2.267'.
[   88.464934][ T5851] Bluetooth: hci3: command tx timeout
[   88.970242][ T6144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   88.982027][ T6144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   88.993106][ T6144] bond0 (unregistering): Released all slaves
[   89.017621][ T6989] macsec0: entered promiscuous mode
[   89.057936][ T6988] macsec0: left promiscuous mode
[   89.147975][ T6999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.279'.
[   89.239191][ T6999] netlink: 'syz.2.279': attribute type 11 has an invalid length.
[   89.423431][ T5851] Bluetooth: hci0: command tx timeout
[   89.438802][ T6912] chnl_net:caif_netlink_parms(): no params data found
[   89.508816][ T6144] hsr_slave_0: left promiscuous mode
[   89.525367][ T6144] hsr_slave_1: left promiscuous mode
[   89.604361][ T6144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.647725][ T6144] batman_adv: batadv0: Removing interface: batadv_slave_0
[   89.673883][ T6144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.695495][ T6144] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.807101][ T6144] veth1_macvtap: left promiscuous mode
[   89.814386][ T6144] veth0_macvtap: left promiscuous mode
[   89.820026][ T6144] veth1_vlan: left promiscuous mode
[   89.825638][ T6144] veth0_vlan: left promiscuous mode
[   90.542346][ T5851] Bluetooth: hci3: command tx timeout
[   90.631839][ T6144] team0 (unregistering): Port device team_slave_1 removed
[   90.683873][ T6144] team0 (unregistering): Port device team_slave_0 removed
[   91.115612][ T6862] chnl_net:caif_netlink_parms(): no params data found
[   91.263233][ T6912] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.277483][ T6912] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.288342][ T6912] bridge_slave_0: entered allmulticast mode
[   91.301138][ T6912] bridge_slave_0: entered promiscuous mode
[   91.375063][ T6912] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.397200][ T6912] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.410949][ T6912] bridge_slave_1: entered allmulticast mode
[   91.456808][ T6912] bridge_slave_1: entered promiscuous mode
[   91.503094][ T5851] Bluetooth: hci0: command tx timeout
[   91.756836][ T6912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.768879][ T6912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.825013][ T6862] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.832153][ T6862] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.867465][ T6862] bridge_slave_0: entered allmulticast mode
[   91.883864][ T6862] bridge_slave_0: entered promiscuous mode
[   91.897658][ T6862] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.911106][ T6862] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.918422][ T6862] bridge_slave_1: entered allmulticast mode
[   91.925539][ T6862] bridge_slave_1: entered promiscuous mode
[   92.025045][ T6912] team0: Port device team_slave_0 added
[   92.038509][ T7096] pim6reg1: entered promiscuous mode
[   92.044766][ T7096] pim6reg1: entered allmulticast mode
[   92.180295][ T6862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.235991][ T6912] team0: Port device team_slave_1 added
[   92.600509][ T6862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.652468][ T5851] Bluetooth: hci3: command tx timeout
[   92.758030][ T6912] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.788398][ T6912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.830558][ T6912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.886856][ T6862] team0: Port device team_slave_0 added
[   92.910557][ T6862] team0: Port device team_slave_1 added
[   92.927462][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.321'.
[   92.980228][ T7150] wireguard0: entered promiscuous mode
[   92.990537][ T7150] wireguard0: entered allmulticast mode
[   93.034596][ T6912] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.042853][ T6912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.069185][ T6912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.174741][ T6144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   93.186191][ T6144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.276655][ T6912] hsr_slave_0: entered promiscuous mode
[   93.286412][ T6912] hsr_slave_1: entered promiscuous mode
[   93.293335][ T6912] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   93.301879][ T7168] FAULT_INJECTION: forcing a failure.
[   93.301879][ T7168] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   93.305828][ T6912] Cannot create hsr debugfs directory
[   93.325889][ T7168] CPU: 1 UID: 0 PID: 7168 Comm: syz.0.329 Not tainted 6.12.0-rc5-syzkaller-01187-ga84e8c05f583 #0
[   93.336534][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   93.346622][ T7168] Call Trace:
[   93.349920][ T7168]  <TASK>
[   93.352872][ T7168]  dump_stack_lvl+0x241/0x360
[   93.357579][ T7168]  ? __pfx_dump_stack_lvl+0x10/0x10
[   93.362816][ T7168]  ? __pfx__printk+0x10/0x10
[   93.367434][ T7168]  ? __pfx_lock_release+0x10/0x10
[   93.372491][ T7168]  should_fail_ex+0x3b0/0x4e0
[   93.377203][ T7168]  _copy_from_user+0x2f/0xc0
[   93.381829][ T7168]  __sys_bpf+0x1a4/0x810
[   93.386088][ T7168]  ? __pfx___sys_bpf+0x10/0x10
[   93.390977][ T7168]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   93.396998][ T7168]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   93.403355][ T7168]  ? do_syscall_64+0x100/0x230
[   93.408146][ T7168]  __x64_sys_bpf+0x7c/0x90
[   93.412592][ T7168]  do_syscall_64+0xf3/0x230
[   93.417637][ T7168]  ? clear_bhb_loop+0x35/0x90
[   93.422321][ T7168]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.428235][ T7168] RIP: 0033:0x7f5ce2f7e719
[   93.432647][ T7168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   93.452262][ T7168] RSP: 002b:00007f5ce3de5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   93.460689][ T7168] RAX: ffffffffffffffda RBX: 00007f5ce3135f80 RCX: 00007f5ce2f7e719
[   93.468660][ T7168] RDX: 0000000000000020 RSI: 0000000020000300 RDI: 0000000000000002
[   93.476629][ T7168] RBP: 00007f5ce3de5090 R08: 0000000000000000 R09: 0000000000000000
[   93.484605][ T7168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   93.492579][ T7168] R13: 0000000000000000 R14: 00007f5ce3135f80 R15: 00007fffa1db9628
[   93.500595][ T7168]  </TASK>
[   93.525660][ T6144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   93.569489][ T6144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.590410][ T5851] Bluetooth: hci0: command tx timeout
[   93.610963][ T6862] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.618222][ T6862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.644606][ T6862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.659540][ T6862] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.666635][ T6862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.693265][ T6862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.824633][ T6144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   93.856297][ T6144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.916644][ T7183] netlink: 284 bytes leftover after parsing attributes in process `syz.0.334'.
[   93.956885][ T7190] IPv6: addrconf: prefix option has invalid lifetime
[   94.096649][ T6862] hsr_slave_0: entered promiscuous mode
[   94.124780][ T6862] hsr_slave_1: entered promiscuous mode
[   94.134591][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.340'.
[   94.154330][ T6862] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   94.161959][ T6862] Cannot create hsr debugfs directory
[   94.236363][ T7207] veth0_virt_wifi: mtu less than device minimum
[   94.671848][ T7222] netlink: 'syz.2.347': attribute type 9 has an invalid length.
[   94.704331][ T5851] Bluetooth: hci3: command tx timeout
[   94.722029][ T7222] netlink: 244 bytes leftover after parsing attributes in process `syz.2.347'.
[   94.808835][ T6144] bridge_slave_1: left allmulticast mode
[   94.816234][ T6144] bridge_slave_1: left promiscuous mode
[   94.823028][ T6144] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.853059][ T6144] bridge_slave_0: left allmulticast mode
[   94.858903][ T6144] bridge_slave_0: left promiscuous mode
[   94.883114][ T6144] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.891071][ T7237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.350'.
[   95.204641][ T6144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   95.215615][ T6144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   95.229072][ T6144] bond0 (unregistering): Released all slaves
[   95.364096][ T7242] netlink: 'syz.0.351': attribute type 29 has an invalid length.
[   95.376285][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.351'.
[   95.992427][ T6144] hsr_slave_0: left promiscuous mode
[   96.011073][ T6144] hsr_slave_1: left promiscuous mode
[   96.036652][ T6144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   96.065355][ T6144] batman_adv: batadv0: Removing interface: batadv_slave_0
[   96.084682][ T6144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   96.096437][ T6144] batman_adv: batadv0: Removing interface: batadv_slave_1
[   96.151377][ T6144] veth1_macvtap: left promiscuous mode
[   96.175874][ T6144] veth0_macvtap: left promiscuous mode
[   96.182435][ T6144] veth1_vlan: left promiscuous mode
[   96.187720][ T6144] veth0_vlan: left promiscuous mode
[   96.195346][ T7253] x_tables: unsorted underflow at hook 1
[   96.621800][ T6144] team0 (unregistering): Port device team_slave_1 removed
[   96.660107][ T6144] team0 (unregistering): Port device team_slave_0 removed
[   96.782521][ T5851] Bluetooth: hci3: command tx timeout
[   97.040607][ T7278] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   97.048355][ T7278] macsec1: entered promiscuous mode
[   97.239657][ T7287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.362'.
[   97.429450][ T7291] netlink: 24 bytes leftover after parsing attributes in process `syz.4.364'.
[   97.441158][ T7293] FAULT_INJECTION: forcing a failure.
[   97.441158][ T7293] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   97.460891][ T7293] CPU: 0 UID: 0 PID: 7293 Comm: syz.2.365 Not tainted 6.12.0-rc5-syzkaller-01187-ga84e8c05f583 #0
[   97.471532][ T7293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   97.481677][ T7293] Call Trace:
[   97.484954][ T7293]  <TASK>
[   97.487880][ T7293]  dump_stack_lvl+0x241/0x360
[   97.492568][ T7293]  ? __pfx_dump_stack_lvl+0x10/0x10
[   97.497771][ T7293]  ? __pfx__printk+0x10/0x10
[   97.502362][ T7293]  ? __pfx_lock_release+0x10/0x10
[   97.507401][ T7293]  should_fail_ex+0x3b0/0x4e0
[   97.512073][ T7293]  _copy_from_user+0x2f/0xc0
[   97.516665][ T7293]  kvmemdup_bpfptr_noprof+0x7d/0xf0
[   97.521864][ T7293]  map_update_elem+0x251/0x6f0
[   97.526629][ T7293]  __sys_bpf+0x76f/0x810
[   97.530874][ T7293]  ? __pfx___sys_bpf+0x10/0x10
[   97.535643][ T7293]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   97.541624][ T7293]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   97.547946][ T7293]  ? do_syscall_64+0x100/0x230
[   97.552705][ T7293]  __x64_sys_bpf+0x7c/0x90
[   97.557116][ T7293]  do_syscall_64+0xf3/0x230
[   97.561611][ T7293]  ? clear_bhb_loop+0x35/0x90
[   97.566288][ T7293]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.572183][ T7293] RIP: 0033:0x7f95d457e719
[   97.576607][ T7293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   97.596298][ T7293] RSP: 002b:00007f95d52b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   97.604718][ T7293] RAX: ffffffffffffffda RBX: 00007f95d4735f80 RCX: 00007f95d457e719
[   97.612689][ T7293] RDX: 0000000000000020 RSI: 0000000020000300 RDI: 0000000000000002
[   97.620679][ T7293] RBP: 00007f95d52b8090 R08: 0000000000000000 R09: 0000000000000000
[   97.628655][ T7293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   97.636635][ T7293] R13: 0000000000000000 R14: 00007f95d4735f80 R15: 00007ffd39bda498
[   97.644626][ T7293]  </TASK>
[   97.804090][ T7299] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[   97.935982][ T6912] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   98.017497][ T6912] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   98.043849][ T6912] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   98.301584][ T6912] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   98.454503][ T6862] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   98.498649][ T6862] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   98.523842][ T6862] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   98.565033][ T6862] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   98.679663][ T6912] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.781475][ T6912] 8021q: adding VLAN 0 to HW filter on device team0
[   98.849083][ T6076] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.856480][ T6076] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.928320][ T6076] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.935520][ T6076] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.973452][ T7353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.382'.
[   99.046012][ T6862] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.059402][ T7360] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   99.067135][ T7360] IPv6: NLM_F_CREATE should be set when creating new route
[   99.166511][ T6862] 8021q: adding VLAN 0 to HW filter on device team0
[   99.231033][ T6912] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   99.270942][ T6912] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   99.343787][ T6142] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.350483][ T7380] netlink: 'syz.2.393': attribute type 2 has an invalid length.
[   99.351178][ T6142] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.394937][ T7378] netlink: 'syz.0.391': attribute type 1 has an invalid length.
[   99.421648][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.429269][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.790492][ T6912] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.880120][ T6912] veth0_vlan: entered promiscuous mode
[   99.928061][ T6912] veth1_vlan: entered promiscuous mode
[  100.044084][ T6862] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.065207][ T6912] veth0_macvtap: entered promiscuous mode
[  100.099244][ T6912] veth1_macvtap: entered promiscuous mode
[  100.248674][ T7424] FAULT_INJECTION: forcing a failure.
[  100.248674][ T7424] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  100.263150][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.280075][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.290240][ T7424] CPU: 0 UID: 0 PID: 7424 Comm: syz.0.401 Not tainted 6.12.0-rc5-syzkaller-01187-ga84e8c05f583 #0
[  100.290271][ T7424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  100.290284][ T7424] Call Trace:
[  100.290292][ T7424]  <TASK>
[  100.290301][ T7424]  dump_stack_lvl+0x241/0x360
[  100.290336][ T7424]  ? __pfx_dump_stack_lvl+0x10/0x10
[  100.290361][ T7424]  ? __pfx__printk+0x10/0x10
[  100.290388][ T7424]  ? __pfx_lock_release+0x10/0x10
[  100.290420][ T7424]  should_fail_ex+0x3b0/0x4e0
[  100.290444][ T7424]  _copy_from_user+0x2f/0xc0
[  100.290471][ T7424]  kvmemdup_bpfptr_noprof+0x7d/0xf0
[  100.290497][ T7424]  map_update_elem+0x4d0/0x6f0
[  100.290527][ T7424]  __sys_bpf+0x76f/0x810
[  100.290550][ T7424]  ? __pfx___sys_bpf+0x10/0x10
[  100.290584][ T7424]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  100.290611][ T7424]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  100.290638][ T7424]  ? do_syscall_64+0x100/0x230
[  100.290660][ T7424]  __x64_sys_bpf+0x7c/0x90
[  100.290681][ T7424]  do_syscall_64+0xf3/0x230
[  100.290699][ T7424]  ? clear_bhb_loop+0x35/0x90
[  100.290719][ T7424]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.290743][ T7424] RIP: 0033:0x7f5ce2f7e719
[  100.290761][ T7424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  100.290776][ T7424] RSP: 002b:00007f5ce3de5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  100.290799][ T7424] RAX: ffffffffffffffda RBX: 00007f5ce3135f80 RCX: 00007f5ce2f7e719
[  100.290814][ T7424] RDX: 0000000000000020 RSI: 0000000020000300 RDI: 0000000000000002
[  100.290827][ T7424] RBP: 00007f5ce3de5090 R08: 0000000000000000 R09: 0000000000000000
[  100.290839][ T7424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  100.290852][ T7424] R13: 0000000000000000 R14: 00007f5ce3135f80 R15: 00007fffa1db9628
[  100.290880][ T7424]  </TASK>
[  100.483772][ T6912] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.500822][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.565706][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.605930][ T6912] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.638284][ T6862] veth0_vlan: entered promiscuous mode
[  100.660391][ T6862] veth1_vlan: entered promiscuous mode
[  100.677139][ T7426] netlink: 204 bytes leftover after parsing attributes in process `syz.4.403'.
[  100.840725][ T7448] FAULT_INJECTION: forcing a failure.
[  100.840725][ T7448] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  100.854477][ T7448] CPU: 0 UID: 0 PID: 7448 Comm: syz.2.408 Not tainted 6.12.0-rc5-syzkaller-01187-ga84e8c05f583 #0
[  100.865109][ T7448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  100.875194][ T7448] Call Trace:
[  100.878496][ T7448]  <TASK>
[  100.881459][ T7448]  dump_stack_lvl+0x241/0x360
[  100.886177][ T7448]  ? __pfx_dump_stack_lvl+0x10/0x10
[  100.891412][ T7448]  ? __pfx__printk+0x10/0x10
[  100.896058][ T7448]  should_fail_ex+0x3b0/0x4e0
[  100.897748][ T6912] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.900747][ T7448]  _copy_from_user+0x2f/0xc0
[  100.900778][ T7448]  move_addr_to_kernel+0x82/0x150
[  100.909645][ T6912] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.914003][ T7448]  __sys_connect+0xc1/0x300
[  100.914030][ T7448]  ? __pfx___sys_connect+0x10/0x10
[  100.914062][ T7448]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  100.914087][ T7448]  ? do_syscall_64+0x100/0x230
[  100.914107][ T7448]  __x64_sys_connect+0x7a/0x90
[  100.914128][ T7448]  do_syscall_64+0xf3/0x230
[  100.914143][ T7448]  ? clear_bhb_loop+0x35/0x90
[  100.914162][ T7448]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.914186][ T7448] RIP: 0033:0x7f95d457e719
[  100.914203][ T7448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  100.914218][ T7448] RSP: 002b:00007f95d52b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  100.914239][ T7448] RAX: ffffffffffffffda RBX: 00007f95d4735f80 RCX: 00007f95d457e719
[  100.914253][ T7448] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000004
[  100.914265][ T7448] RBP: 00007f95d52b8090 R08: 0000000000000000 R09: 0000000000000000
[  100.914278][ T7448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  100.914290][ T7448] R13: 0000000000000000 R14: 00007f95d4735f80 R15: 00007ffd39bda498
[  100.914318][ T7448]  </TASK>
[  101.047935][ T6912] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.058808][ T6912] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.105872][ T6862] veth0_macvtap: entered promiscuous mode
[  101.117270][ T7451] 
@ÿª: renamed from veth0_vlan (while UP)
[  101.326240][ T6862] veth1_macvtap: entered promiscuous mode
[  101.450072][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.464416][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.478102][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.500347][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.519971][ T6862] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.626321][ T7477] Bluetooth: MGMT ver 1.23
[  101.655609][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.679292][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.689963][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.700929][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.715189][ T6862] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.760576][ T6862] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.793386][ T6862] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.817004][ T6862] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.839401][ T6862] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.888283][ T6144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.922347][ T6144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.060942][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.081186][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.216120][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.262083][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.479150][ T7517] TCP: TCP_TX_DELAY enabled
[  102.523967][ T6135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.534025][ T6135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.622142][ T7520] 
[  102.624530][ T7520] ============================================
[  102.630678][ T7520] WARNING: possible recursive locking detected
[  102.636807][ T7520] 6.12.0-rc5-syzkaller-01187-ga84e8c05f583 #0 Not tainted
[  102.643891][ T7520] --------------------------------------------
[  102.650014][ T7520] syz.0.425/7520 is trying to acquire lock:
[  102.655880][ T7520] ffff88805be99a00 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x96/0x6a0
[  102.664735][ T7520] 
[  102.664735][ T7520] but task is already holding lock:
[  102.672080][ T7520] ffff88805be99a00 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xc8/0xc00
[  102.680929][ T7520] 
[  102.680929][ T7520] other info that might help us debug this:
[  102.688982][ T7520]  Possible unsafe locking scenario:
[  102.688982][ T7520] 
[  102.696407][ T7520]        CPU0
[  102.699665][ T7520]        ----
[  102.702937][ T7520]   lock(&trie->lock);
[  102.706988][ T7520]   lock(&trie->lock);
[  102.711044][ T7520] 
[  102.711044][ T7520]  *** DEADLOCK ***
[  102.711044][ T7520] 
[  102.719160][ T7520]  May be due to missing lock nesting notation
[  102.719160][ T7520] 
[  102.727452][ T7520] 3 locks held by syz.0.425/7520:
[  102.732450][ T7520]  #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x3c4/0x540
[  102.742358][ T7520]  #1: ffff88805be99a00 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xc8/0xc00
[  102.751643][ T7520]  #2: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1fc/0x540
[  102.761014][ T7520] 
[  102.761014][ T7520] stack backtrace:
[  102.766898][ T7520] CPU: 1 UID: 0 PID: 7520 Comm: syz.0.425 Not tainted 6.12.0-rc5-syzkaller-01187-ga84e8c05f583 #0
[  102.777460][ T7520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  102.787511][ T7520] Call Trace:
[  102.790776][ T7520]  <TASK>
[  102.793708][ T7520]  dump_stack_lvl+0x241/0x360
[  102.798380][ T7520]  ? __pfx_dump_stack_lvl+0x10/0x10
[  102.803564][ T7520]  ? __pfx__printk+0x10/0x10
[  102.808136][ T7520]  ? lockdep_unlock+0x16a/0x300
[  102.812970][ T7520]  print_deadlock_bug+0x483/0x620
[  102.817981][ T7520]  validate_chain+0x15e2/0x5920
[  102.822817][ T7520]  ? page_ext_put+0x97/0xc0
[  102.827304][ T7520]  ? __pfx_validate_chain+0x10/0x10
[  102.832480][ T7520]  ? handle_pte_fault+0x4c2d/0x6800
[  102.837657][ T7520]  ? handle_pte_fault+0x4cb8/0x6800
[  102.842847][ T7520]  ? __pfx_lock_release+0x10/0x10
[  102.847858][ T7520]  ? __page_table_check_ptes_set+0x30f/0x410
[  102.853818][ T7520]  ? validate_chain+0x11e/0x5920
[  102.858767][ T7520]  ? __pfx_validate_chain+0x10/0x10
[  102.863963][ T7520]  ? mark_lock+0x9a/0x360
[  102.868356][ T7520]  __lock_acquire+0x1384/0x2050
[  102.873194][ T7520]  lock_acquire+0x1ed/0x550
[  102.877680][ T7520]  ? trie_delete_elem+0x96/0x6a0
[  102.882606][ T7520]  ? __pfx_lock_acquire+0x10/0x10
[  102.887614][ T7520]  ? __lock_acquire+0x1384/0x2050
[  102.892623][ T7520]  _raw_spin_lock_irqsave+0xd5/0x120
[  102.897905][ T7520]  ? trie_delete_elem+0x96/0x6a0
[  102.902826][ T7520]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  102.908698][ T7520]  ? __pfx_lock_acquire+0x10/0x10
[  102.913706][ T7520]  trie_delete_elem+0x96/0x6a0
[  102.918454][ T7520]  ? __pfx___cant_migrate+0x10/0x10
[  102.923634][ T7520]  ? bpf_trace_run2+0x1fc/0x540
[  102.928467][ T7520]  bpf_prog_6aea58caec58c56e+0x43/0x4c
[  102.933922][ T7520]  bpf_trace_run2+0x2ec/0x540
[  102.938580][ T7520]  ? __pfx_bpf_trace_run2+0x10/0x10
[  102.943758][ T7520]  ? rcu_is_watching+0x15/0xb0
[  102.948525][ T7520]  ? trie_update_elem+0x26c/0xc00
[  102.953546][ T7520]  ? percpu_ref_put+0x1f/0x250
[  102.958289][ T7520]  ? trie_update_elem+0x26c/0xc00
[  102.963294][ T7520]  ? trie_update_elem+0x26c/0xc00
[  102.968297][ T7520]  kfree+0x35e/0x440
[  102.972194][ T7520]  ? bpf_map_kmalloc_node+0x147/0x1c0
[  102.977550][ T7520]  trie_update_elem+0x26c/0xc00
[  102.982403][ T7520]  bpf_map_update_value+0x4d3/0x540
[  102.987582][ T7520]  map_update_elem+0x51a/0x6f0
[  102.992345][ T7520]  __sys_bpf+0x76f/0x810
[  102.996567][ T7520]  ? __pfx___sys_bpf+0x10/0x10
[  103.001312][ T7520]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  103.007281][ T7520]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  103.013683][ T7520]  ? do_syscall_64+0x100/0x230
[  103.018423][ T7520]  __x64_sys_bpf+0x7c/0x90
[  103.022816][ T7520]  do_syscall_64+0xf3/0x230
[  103.027293][ T7520]  ? clear_bhb_loop+0x35/0x90
[  103.031950][ T7520]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.037825][ T7520] RIP: 0033:0x7f5ce2f7e719
[  103.042221][ T7520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  103.061893][ T7520] RSP: 002b:00007f5ce3de5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  103.070289][ T7520] RAX: ffffffffffffffda RBX: 00007f5ce3135f80 RCX: 00007f5ce2f7e719
[  103.078237][ T7520] RDX: 0000000000000020 RSI: 0000000020000300 RDI: 0000000000000002
[  103.086188][ T7520] RBP: 00007f5ce3de5090 R08: 0000000000000000 R09: 0000000000000000
[  103.094154][ T7520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  103.102104][ T7520] R13: 0000000000000000 R14: 00007f5ce3135f80 R15: 00007fffa1db9628
[  103.110057][ T7520]  </TASK>