last executing test programs: 7.874319126s ago: executing program 1 (id=65): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "8b0f00", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x1, 0x0, 0xffd}}}}}}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @empty, 0x9}, 0x1c, 0x0}}], 0x1, 0x44040044) 7.102705338s ago: executing program 1 (id=79): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 6.902041652s ago: executing program 1 (id=83): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x80, 0x1, 0x7, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 6.345303009s ago: executing program 1 (id=92): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000108fdfff9ff000000080000", @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0) sendmsg$can_bcm(r1, 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 3.871956097s ago: executing program 4 (id=107): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000000340)=""/177, 0xb1}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000000400)=""/112, 0x70}, {&(0x7f0000000000)=""/260, 0x104}, {&(0x7f0000000140)=""/74, 0x4a}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x100, 0x0) 3.597750916s ago: executing program 4 (id=111): sendmmsg(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @local, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x4000000) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)={0x160, 0x0, 0x2, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x5}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_MASK={0xac, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3f}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x160}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 3.419066263s ago: executing program 4 (id=116): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) 3.169383932s ago: executing program 4 (id=119): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0xfffffffe, @loopback, 0x74ec}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x8, @empty, 0xfffffffe}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x240c089d) 2.946039573s ago: executing program 4 (id=123): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003400)={0x10, 0x2, 0x0, &(0x7f0000003240)='GPL\x00'}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x2, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r0, &(0x7f0000001940), 0x0}, 0x20) 2.69971535s ago: executing program 4 (id=127): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}, @const]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 1.40239584s ago: executing program 2 (id=149): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x800006, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f00000000c0)="826bb66f", 0x4, 0x0, 0x0, 0x0) 1.2703438s ago: executing program 3 (id=151): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) close(r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)=""/63, 0x3f}], 0x1}, 0x10000) 1.175615314s ago: executing program 2 (id=153): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004680)={&(0x7f0000003600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0x4}]}, {0x0, [0x0, 0x0, 0x61, 0x5f]}}, &(0x7f0000003680)=""/4096, 0x2a, 0x1000, 0x1}, 0x28) 1.068620668s ago: executing program 3 (id=155): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x10) 1.014094766s ago: executing program 2 (id=156): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000080000000000000009000000731105000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 877.531262ms ago: executing program 0 (id=157): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 869.155553ms ago: executing program 3 (id=158): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 841.769363ms ago: executing program 0 (id=159): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="050000000000000063117a00000000008510000002000000850000000500000095000000000000019500a505000000002e910a8a32356e3cd3f039451d4c88dc24e704be54e870e033456d7152e7ea60fbab095a720863dcf238da4a3e81f38835e7159c381d740d4fbd814f21a04cc6ae20dcaf9c3336d0a1bf5a9f33284b9dc090154cf083c27828d430a1ff376e21d97f8dcfffa399dd5b241461caec33a00a215818fcfba266a6a6b2e823d06008ea7425f4bcc8fbd5fca74d8152e9947ad7d05eda8390ee0e8f8a2c2035af6083ea389d80ce391ce7419133e04a5ae1bf4d8d79b3244f46ad204d2886394e7a69f2220129ca7df226b307390ae3e8081cba1cfddd62020696761c6e220c56ca36243caaed01fb0d542f084ca4aad5e02ba758703e07987721139b70324c6ecba47b441b9a76b130f4ee234e024c884c5e9efc4b8a78d1ec4ecd7640d992785f94ca245b54af39"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 771.127263ms ago: executing program 2 (id=160): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='1-2:5/', @ANYRESOCT], 0x31) 645.387842ms ago: executing program 2 (id=161): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000fc9400000006000000b7020000000000007b9af8ff00000000d509000013ffffff7baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 620.541562ms ago: executing program 0 (id=162): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250101f2800c00180008ac0f00000000001400010000"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 510.798516ms ago: executing program 3 (id=163): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x4, 0x8, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r2, 0x0, 0x0}, 0x10) 373.241962ms ago: executing program 0 (id=164): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073117e00000000008510000002000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 270.65171ms ago: executing program 1 (id=165): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x40047438, 0x4) 229.663855ms ago: executing program 0 (id=166): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 177.675789ms ago: executing program 3 (id=167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 86.969245ms ago: executing program 0 (id=168): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x98) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000080)="0000001ff54e0000100000000000", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 59.454779ms ago: executing program 1 (id=169): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x6}]}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'syz_tun\x00'}) 1.343298ms ago: executing program 2 (id=170): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x43, &(0x7f0000000040), 0x2a) 0s ago: executing program 3 (id=171): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.143' (ED25519) to the list of known hosts. [ 83.698872][ T5612] cgroup: Unknown subsys name 'net' [ 83.806591][ T5612] cgroup: Unknown subsys name 'cpuset' [ 83.815990][ T5612] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.332526][ T5612] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.066252][ T10] cfg80211: failed to load regulatory.db [ 87.427442][ T5632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.439033][ T5632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.449475][ T5632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.457605][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.467113][ T5632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.509004][ T4943] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.518773][ T4943] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.527674][ T4943] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.538493][ T4943] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.551423][ T4943] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.630194][ T5632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.642886][ T5632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.657631][ T5632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.672317][ T5644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.685880][ T5644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.698391][ T5646] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.707344][ T5646] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.726843][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.736409][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.746712][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.755845][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.768307][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.769786][ T5648] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.783345][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.791261][ T5648] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.545264][ T5632] Bluetooth: hci0: command tx timeout [ 89.588748][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.596198][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.603772][ T5631] bridge_slave_0: entered allmulticast mode [ 89.610893][ T5631] bridge_slave_0: entered promiscuous mode [ 89.616970][ T5632] Bluetooth: hci1: command tx timeout [ 89.658157][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.665426][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.672614][ T5631] bridge_slave_1: entered allmulticast mode [ 89.680040][ T5631] bridge_slave_1: entered promiscuous mode [ 89.758289][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.765684][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.772860][ T5637] bridge_slave_0: entered allmulticast mode [ 89.778969][ T5632] Bluetooth: hci2: command tx timeout [ 89.780965][ T5637] bridge_slave_0: entered promiscuous mode [ 89.793106][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.800424][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.808382][ T5637] bridge_slave_1: entered allmulticast mode [ 89.816094][ T5637] bridge_slave_1: entered promiscuous mode [ 89.853421][ T5648] Bluetooth: hci4: command tx timeout [ 89.858037][ T5647] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.859739][ T5632] Bluetooth: hci3: command tx timeout [ 89.866221][ T5647] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.879123][ T5647] bridge_slave_0: entered allmulticast mode [ 89.886300][ T5647] bridge_slave_0: entered promiscuous mode [ 89.920930][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.928172][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.936197][ T5634] bridge_slave_0: entered allmulticast mode [ 89.943671][ T5634] bridge_slave_0: entered promiscuous mode [ 89.955004][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.964484][ T5647] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.971639][ T5647] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.979278][ T5647] bridge_slave_1: entered allmulticast mode [ 89.986617][ T5647] bridge_slave_1: entered promiscuous mode [ 90.016606][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.024059][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.031435][ T5634] bridge_slave_1: entered allmulticast mode [ 90.038896][ T5634] bridge_slave_1: entered promiscuous mode [ 90.049437][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.067937][ T5642] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.075144][ T5642] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.082368][ T5642] bridge_slave_0: entered allmulticast mode [ 90.089945][ T5642] bridge_slave_0: entered promiscuous mode [ 90.099504][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.141828][ T5642] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.149114][ T5642] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.156757][ T5642] bridge_slave_1: entered allmulticast mode [ 90.164641][ T5642] bridge_slave_1: entered promiscuous mode [ 90.174188][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.222490][ T5647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.252819][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.266505][ T5631] team0: Port device team_slave_0 added [ 90.275107][ T5647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.298315][ T5637] team0: Port device team_slave_0 added [ 90.306299][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.331010][ T5631] team0: Port device team_slave_1 added [ 90.348905][ T5642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.360260][ T5637] team0: Port device team_slave_1 added [ 90.413000][ T5642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.449830][ T5634] team0: Port device team_slave_0 added [ 90.468666][ T5647] team0: Port device team_slave_0 added [ 90.487245][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.494667][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.520668][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.534723][ T5634] team0: Port device team_slave_1 added [ 90.541178][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.548277][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.574377][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.587317][ T5647] team0: Port device team_slave_1 added [ 90.595725][ T5642] team0: Port device team_slave_0 added [ 90.602104][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.609263][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.635342][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.655695][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.662777][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.689075][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.712702][ T5642] team0: Port device team_slave_1 added [ 90.779259][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.786554][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.813109][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.825714][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.832689][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.858903][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.871002][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.878226][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.904291][ T5647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.930452][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.937472][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.963501][ T5642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.976346][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.983531][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.009635][ T5642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.028918][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.036162][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.062273][ T5647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.119522][ T5637] hsr_slave_0: entered promiscuous mode [ 91.126246][ T5637] hsr_slave_1: entered promiscuous mode [ 91.149908][ T5631] hsr_slave_0: entered promiscuous mode [ 91.157026][ T5631] hsr_slave_1: entered promiscuous mode [ 91.163421][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 91.169326][ T5631] Cannot create hsr debugfs directory [ 91.239806][ T5634] hsr_slave_0: entered promiscuous mode [ 91.246902][ T5634] hsr_slave_1: entered promiscuous mode [ 91.253038][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 91.259012][ T5634] Cannot create hsr debugfs directory [ 91.361477][ T5642] hsr_slave_0: entered promiscuous mode [ 91.367974][ T5642] hsr_slave_1: entered promiscuous mode [ 91.374862][ T5642] debugfs: 'hsr0' already exists in 'hsr' [ 91.380648][ T5642] Cannot create hsr debugfs directory [ 91.390971][ T5647] hsr_slave_0: entered promiscuous mode [ 91.397830][ T5647] hsr_slave_1: entered promiscuous mode [ 91.404130][ T5647] debugfs: 'hsr0' already exists in 'hsr' [ 91.409879][ T5647] Cannot create hsr debugfs directory [ 91.613535][ T5632] Bluetooth: hci0: command tx timeout [ 91.693911][ T5632] Bluetooth: hci1: command tx timeout [ 91.853491][ T5632] Bluetooth: hci2: command tx timeout [ 91.934223][ T5648] Bluetooth: hci4: command tx timeout [ 91.940415][ T5632] Bluetooth: hci3: command tx timeout [ 91.951111][ T5631] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.969085][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.977978][ T5631] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.990127][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.998227][ T5631] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.008431][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.016876][ T5631] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.026784][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.116053][ T5637] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.128255][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.136866][ T5637] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.148391][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.156652][ T5637] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.166962][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.175801][ T5637] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.187156][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.301169][ T5634] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.314708][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.328606][ T5634] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.340388][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.348338][ T5634] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.357986][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.366583][ T5634] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.376940][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.504394][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.517028][ T5647] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.528723][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.537080][ T5647] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.546656][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.574507][ T5647] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.584369][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.592718][ T5647] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.605375][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.677807][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.726439][ T5642] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.738069][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.748262][ T5642] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.758722][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.770077][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.777942][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.800703][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.808213][ T5642] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.821720][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.837616][ T5642] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.847335][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.870537][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.877833][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.942642][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.992878][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.000135][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.026402][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.033671][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.061996][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.187701][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.232634][ T5647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.268465][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.275715][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.332342][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.339631][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.405478][ T5647] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.429673][ T5642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.469403][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.476646][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.508897][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.516136][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.579281][ T5642] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.640231][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.647516][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.697630][ T5632] Bluetooth: hci0: command tx timeout [ 93.703035][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.703153][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.774284][ T5632] Bluetooth: hci1: command tx timeout [ 93.935239][ T5632] Bluetooth: hci2: command tx timeout [ 94.013559][ T5632] Bluetooth: hci3: command tx timeout [ 94.019204][ T5648] Bluetooth: hci4: command tx timeout [ 94.249289][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.327394][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.550409][ T5631] veth0_vlan: entered promiscuous mode [ 94.567282][ T5637] veth0_vlan: entered promiscuous mode [ 94.624748][ T5637] veth1_vlan: entered promiscuous mode [ 94.670726][ T5631] veth1_vlan: entered promiscuous mode [ 94.877737][ T5637] veth0_macvtap: entered promiscuous mode [ 94.900062][ T5631] veth0_macvtap: entered promiscuous mode [ 94.920253][ T5637] veth1_macvtap: entered promiscuous mode [ 94.949428][ T5631] veth1_macvtap: entered promiscuous mode [ 94.965514][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.006419][ T5647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.022703][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.066937][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.087461][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.112429][ T5642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.145278][ T141] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.157186][ T141] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.174502][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.202689][ T141] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.212047][ T141] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.237974][ T141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.260604][ T141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.291308][ T141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.318616][ T141] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.429875][ T5647] veth0_vlan: entered promiscuous mode [ 95.486130][ T5647] veth1_vlan: entered promiscuous mode [ 95.492257][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.508190][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.536244][ T5642] veth0_vlan: entered promiscuous mode [ 95.609322][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.621822][ T5642] veth1_vlan: entered promiscuous mode [ 95.631353][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.661247][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.671412][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.675727][ T5634] veth0_vlan: entered promiscuous mode [ 95.718628][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.728682][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.742190][ T5647] veth0_macvtap: entered promiscuous mode [ 95.773069][ T5647] veth1_macvtap: entered promiscuous mode [ 95.773638][ T5648] Bluetooth: hci0: command tx timeout [ 95.799591][ T5634] veth1_vlan: entered promiscuous mode [ 95.839250][ T5642] veth0_macvtap: entered promiscuous mode [ 95.854425][ T5648] Bluetooth: hci1: command tx timeout [ 95.864636][ T5631] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.883488][ T5642] veth1_macvtap: entered promiscuous mode [ 95.898605][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.933566][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.953450][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.002778][ T141] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.013303][ T5648] Bluetooth: hci2: command tx timeout [ 96.044483][ T141] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.067081][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.088690][ T141] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.098692][ T5648] Bluetooth: hci4: command tx timeout [ 96.105229][ T5632] Bluetooth: hci3: command tx timeout [ 96.111184][ T141] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.146950][ T5634] veth0_macvtap: entered promiscuous mode [ 96.161121][ T66] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.238081][ T66] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.248632][ T66] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.259591][ T141] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.277935][ T5634] veth1_macvtap: entered promiscuous mode [ 96.470098][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.595801][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.609740][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.629776][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.698268][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.722720][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.767319][ T5833] bridge0: port 3(vlan2) entered blocking state [ 96.774893][ T5833] bridge0: port 3(vlan2) entered disabled state [ 96.781592][ T5833] vlan2: entered allmulticast mode [ 96.791904][ T5833] ip6gretap0: entered allmulticast mode [ 96.834841][ T5833] vlan2: entered promiscuous mode [ 96.840177][ T5833] ip6gretap0: entered promiscuous mode [ 96.849111][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.858443][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.918372][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.957893][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.038448][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.047969][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.134519][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.156355][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.384953][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.417657][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.517343][ T5851] bridge: RTM_NEWNEIGH with invalid ether address [ 97.906869][ T5866] syz.2.25 uses obsolete (PF_INET,SOCK_PACKET) [ 97.978935][ T5855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.281120][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.292625][ T5877] xt_hashlimit: size too large, truncated to 1048576 [ 98.302845][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.487627][ T5910] tipc: Can't bind to reserved service type 3 [ 100.342398][ T5937] netlink: 220 bytes leftover after parsing attributes in process `syz.1.55'. [ 100.366384][ T5937] netlink: 24 bytes leftover after parsing attributes in process `syz.1.55'. [ 100.395956][ T5937] tipc: Started in network mode [ 100.426291][ T5937] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 100.450886][ T5937] tipc: Enabling of bearer rejected, failed to enable media [ 100.467491][ T5942] xt_hashlimit: size too large, truncated to 1048576 [ 100.704002][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.62'. [ 100.727268][ T5952] netlink: 120 bytes leftover after parsing attributes in process `syz.2.62'. [ 100.755141][ T5952] netlink: 40 bytes leftover after parsing attributes in process `syz.2.62'. [ 100.919922][ T5960] xt_hashlimit: size too large, truncated to 1048576 [ 101.029263][ T5963] netlink: 'syz.2.67': attribute type 4 has an invalid length. [ 101.080883][ T5967] netlink: 'syz.2.67': attribute type 4 has an invalid length. [ 101.148013][ T5970] syzkaller0: entered promiscuous mode [ 101.153950][ T5970] syzkaller0: entered allmulticast mode [ 101.574558][ T5983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.75'. [ 101.628919][ T5989] netlink: 'syz.0.77': attribute type 1 has an invalid length. [ 102.031959][ T6002] syzkaller0: entered promiscuous mode [ 102.062626][ T6002] syzkaller0: entered allmulticast mode [ 102.090084][ T6002] 0: reclassify loop, rule prio 0, protocol 800 [ 102.422670][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.92'. [ 102.432389][ T24] IPVS: starting estimator thread 0... [ 102.467851][ T6020] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.477742][ T6020] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.484707][ T6027] netlink: 'syz.1.92': attribute type 13 has an invalid length. [ 102.535701][ T6027] netlink: 'syz.1.92': attribute type 17 has an invalid length. [ 102.544130][ T6026] IPVS: using max 37 ests per chain, 88800 per kthread [ 102.818537][ T6020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.852019][ T6020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.939040][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.956791][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.042626][ T6062] vlan2: entered promiscuous mode [ 104.048405][ T6062] syz_tun: entered promiscuous mode [ 104.125858][ T1101] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.148310][ T1101] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.536696][ T6085] Zero length message leads to an empty skb [ 104.707638][ T6091] tipc: Started in network mode [ 104.715708][ T6091] tipc: Node identity f256fb1fdb99, cluster identity 4711 [ 104.735730][ T6091] tipc: Enabled bearer , priority 0 [ 104.885866][ T6088] tipc: Disabling bearer [ 105.344266][ T6112] netlink: 'syz.0.115': attribute type 12 has an invalid length. [ 105.371625][ T6112] netlink: 'syz.0.115': attribute type 29 has an invalid length. [ 105.389999][ T6112] netlink: 148 bytes leftover after parsing attributes in process `syz.0.115'. [ 105.405622][ T6112] netlink: 'syz.0.115': attribute type 3 has an invalid length. [ 105.421885][ T6112] netlink: 'syz.0.115': attribute type 2 has an invalid length. [ 105.443522][ T6112] netlink: 35 bytes leftover after parsing attributes in process `syz.0.115'. [ 105.553856][ T6118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.118'. [ 106.075707][ T6048] hid-generic 0005:10CF:0003.0001: item fetching failed at offset 1/2 [ 106.113195][ T6048] hid-generic 0005:10CF:0003.0001: probe with driver hid-generic failed with error -22 [ 108.329391][ T6032] Set syz1 is full, maxelem 65536 reached [ 108.725192][ T6223] Driver unsupported XDP return value 0 on prog (id 30) dev N/A, expect packet loss! [ 108.769152][ T6228] [ 108.772513][ T6228] ============================= [ 108.778397][ T6228] WARNING: suspicious RCU usage [ 108.783418][ T6228] syzkaller #0 Not tainted [ 108.787892][ T6228] ----------------------------- [ 108.792794][ T6228] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 108.801997][ T6228] [ 108.801997][ T6228] other info that might help us debug this: [ 108.801997][ T6228] [ 108.812754][ T6228] [ 108.812754][ T6228] rcu_scheduler_active = 2, debug_locks = 1 [ 108.827013][ T6228] 1 lock held by syz.3.171/6228: [ 108.834519][ T6228] #0: ffffffff8e95cf58 (rcu_tasks_trace_srcu_struct){....}-{0:0}, at: rcu_read_lock_trace+0x25/0x110 [ 108.845653][ T6228] [ 108.845653][ T6228] stack backtrace: [ 108.851607][ T6228] CPU: 0 UID: 0 PID: 6228 Comm: syz.3.171 Not tainted syzkaller #0 PREEMPT(full) [ 108.851642][ T6228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 108.851665][ T6228] Call Trace: [ 108.851677][ T6228] [ 108.851688][ T6228] dump_stack_lvl+0xe8/0x150 [ 108.851725][ T6228] lockdep_rcu_suspicious+0x13f/0x1d0 [ 108.851759][ T6228] get_callchain_entry+0x2b6/0x3c0 [ 108.851790][ T6228] get_perf_callchain+0xd5/0x880 [ 108.851822][ T6228] ? __pfx_get_perf_callchain+0x10/0x10 [ 108.851850][ T6228] ? futex_unqueue+0x22/0x240 [ 108.851871][ T6228] ? futex_unqueue+0x22/0x240 [ 108.851891][ T6228] ? futex_unqueue+0x22/0x240 [ 108.851917][ T6228] __bpf_get_stack+0x445/0xab0 [ 108.851950][ T6228] ? __pfx___bpf_get_stack+0x10/0x10 [ 108.851976][ T6228] ? __lock_acquire+0x6b5/0x2cf0 [ 108.852003][ T6228] bpf_get_stack+0x33/0x50 [ 108.852023][ T6228] ? bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 108.852046][ T6228] bpf_get_stack_raw_tp+0x1a9/0x220 [ 108.852080][ T6228] bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 108.852118][ T6228] bpf_prog_run_pin_on_cpu+0x142/0x470 [ 108.852153][ T6228] bpf_prog_test_run_syscall+0x318/0x4c0 [ 108.852183][ T6228] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 108.852210][ T6228] ? __fget_files+0x2a/0x420 [ 108.852247][ T6228] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 108.852277][ T6228] bpf_prog_test_run+0x2c7/0x340 [ 108.852303][ T6228] __sys_bpf+0x643/0x950 [ 108.852335][ T6228] ? __pfx___sys_bpf+0x10/0x10 [ 108.852378][ T6228] ? rcu_is_watching+0x15/0xb0 [ 108.852407][ T6228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.852430][ T6228] __x64_sys_bpf+0x7c/0x90 [ 108.852458][ T6228] do_syscall_64+0x15f/0xf80 [ 108.852484][ T6228] ? trace_irq_disable+0x3b/0x140 [ 108.852513][ T6228] ? clear_bhb_loop+0x40/0x90 [ 108.852540][ T6228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.852561][ T6228] RIP: 0033:0x7f7aec79cdd9 [ 108.852581][ T6228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.852599][ T6228] RSP: 002b:00007f7aea9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 108.852621][ T6228] RAX: ffffffffffffffda RBX: 00007f7aeca15fa0 RCX: 00007f7aec79cdd9 [ 108.852635][ T6228] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 108.852648][ T6228] RBP: 00007f7aec832d69 R08: 0000000000000000 R09: 0000000000000000 [ 108.852659][ T6228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.852671][ T6228] R13: 00007f7aeca16038 R14: 00007f7aeca15fa0 R15: 00007ffc3f8ac148 [ 108.852704][ T6228]