last executing test programs: 7.47547657s ago: executing program 3 (id=26): socket$inet(0x2, 0x4000000000000001, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) shutdown(r0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 6.472667168s ago: executing program 3 (id=36): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001b00)="646971767296ceca0c87dd9d5d2c97a8f491f4235c8b3517c6ed57073df054bb205af43adc80296e3abefabfcd64146317f57825dda78b9a6213c032431946755272c758f0ed68", 0x47}, {&(0x7f0000000540)="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", 0x4ee}, {&(0x7f0000000400)="7221f3fc3f3d7fa5772811c50dd4a8ac1ed92b00763485fb1f621336f59bb20a271c070977666bf10c71ad4c774fa03b6e8f458e6c71cf70c6926e58c62275734c6ea2c5f966be8a99b6450c6b9ed48242f17a22c2d28d2973179da86b4569a5", 0x60}], 0x3}}], 0x1, 0x44010) 6.14435354s ago: executing program 3 (id=40): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0x0, 0x2}, 0x1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r2 = epoll_create(0x87) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x40000000}) 5.557799826s ago: executing program 3 (id=43): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000d"], 0x10b8}, 0x0) 5.401068261s ago: executing program 3 (id=45): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r1, @ANYBLOB="0432b89369d33f179c0ce7bb29f4a09094007da676"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) 5.247846454s ago: executing program 4 (id=46): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x2}, 0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x8002}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) 5.186697082s ago: executing program 4 (id=47): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 5.179070213s ago: executing program 3 (id=48): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r0, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r1, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f0000001080)=[{0x0}], 0x1}}, {{&(0x7f0000002a40)=@xdp, 0x80, 0x0}, 0x80000001}], 0x2, 0x2, 0x0) 4.901020748s ago: executing program 4 (id=49): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 3.335361921s ago: executing program 4 (id=50): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007"], 0x34}}, 0x0) 3.135128346s ago: executing program 4 (id=54): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 2.920634038s ago: executing program 4 (id=57): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752) 1.840167211s ago: executing program 0 (id=69): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.635899384s ago: executing program 0 (id=72): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x4}, 0xfe}, 0x18) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1fee0fd3252ed65c", 0x8}], 0x1}}], 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r2, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 1.579612814s ago: executing program 2 (id=73): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10102, 0x0) 1.411108778s ago: executing program 2 (id=75): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002240)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x4, 0x21}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x800) 1.191954729s ago: executing program 1 (id=76): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @local}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)='I', 0x1, 0x0, 0x0, 0x0) recvfrom(r0, &(0x7f0000001a80)=""/4096, 0x1000, 0x0, 0x0, 0x0) 1.138301374s ago: executing program 2 (id=77): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002340)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x814) 1.034987027s ago: executing program 1 (id=78): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x7, 0x30}, 0xc) sendmsg$netlink(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)={0x10, 0x39, 0x0, 0x70bd2d, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0xc080}, 0x4bf1ee75127f9ce6) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000040)="bb", 0x1}], 0x1) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 852.029079ms ago: executing program 2 (id=79): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 806.165234ms ago: executing program 1 (id=80): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000005f00)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_MASK={0x56}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "3423d5d2"}]}]}, 0x44}}, 0x4004) 675.05782ms ago: executing program 0 (id=81): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 507.912002ms ago: executing program 1 (id=82): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x42, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 474.304363ms ago: executing program 0 (id=83): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r2, @ANYBLOB="0432b89369d33f179c0ce7bb29f4a09094007da676"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) 359.43231ms ago: executing program 2 (id=84): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, r0, 0x801, 0x200000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac06}]}]}, 0x44}}, 0x0) 307.569989ms ago: executing program 1 (id=85): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 254.0548ms ago: executing program 0 (id=86): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000700)="1e", 0x1, 0x40011, 0x0, 0x0) recvmmsg(r0, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}, 0xbd}], 0x1, 0x20, 0x0) 89.167677ms ago: executing program 1 (id=87): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) 80.336891ms ago: executing program 0 (id=88): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @local}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)='I', 0x1, 0x0, 0x0, 0x0) recvfrom(r0, &(0x7f0000001a80)=""/4096, 0x1000, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=89): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20014041}, 0x4000800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts. [ 84.757135][ T5819] cgroup: Unknown subsys name 'net' [ 84.916461][ T5819] cgroup: Unknown subsys name 'cpuset' [ 84.926291][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.732587][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.494141][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.502332][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.510215][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.519869][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.531493][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.548502][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.580505][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.588879][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.601638][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.608366][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.616863][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.617669][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.632358][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.644972][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.645148][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.655067][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.662317][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.673608][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.677169][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.691025][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.692134][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.706778][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.719442][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.738714][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.746606][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.475162][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 90.543003][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 90.621931][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 90.636233][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 90.686627][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 90.888712][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.899224][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.907444][ T5839] bridge_slave_0: entered allmulticast mode [ 90.918041][ T5839] bridge_slave_0: entered promiscuous mode [ 90.948617][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.956379][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.964283][ T5841] bridge_slave_0: entered allmulticast mode [ 90.971812][ T5841] bridge_slave_0: entered promiscuous mode [ 90.988142][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.995390][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.003226][ T5839] bridge_slave_1: entered allmulticast mode [ 91.010532][ T5839] bridge_slave_1: entered promiscuous mode [ 91.037653][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.045158][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.052550][ T5841] bridge_slave_1: entered allmulticast mode [ 91.060141][ T5841] bridge_slave_1: entered promiscuous mode [ 91.164979][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.173073][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.180304][ T5835] bridge_slave_0: entered allmulticast mode [ 91.187959][ T5835] bridge_slave_0: entered promiscuous mode [ 91.222440][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.229624][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.237037][ T5830] bridge_slave_0: entered allmulticast mode [ 91.245002][ T5830] bridge_slave_0: entered promiscuous mode [ 91.257053][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.267101][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.275093][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.282466][ T5835] bridge_slave_1: entered allmulticast mode [ 91.290046][ T5835] bridge_slave_1: entered promiscuous mode [ 91.297310][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.304633][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.312062][ T5840] bridge_slave_0: entered allmulticast mode [ 91.319470][ T5840] bridge_slave_0: entered promiscuous mode [ 91.330532][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.341090][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.348402][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.356288][ T5830] bridge_slave_1: entered allmulticast mode [ 91.364987][ T5830] bridge_slave_1: entered promiscuous mode [ 91.374573][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.413728][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.421090][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.428350][ T5840] bridge_slave_1: entered allmulticast mode [ 91.436749][ T5840] bridge_slave_1: entered promiscuous mode [ 91.446251][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.560486][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.574575][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.587186][ T5839] team0: Port device team_slave_0 added [ 91.596997][ T5839] team0: Port device team_slave_1 added [ 91.606330][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.632024][ T5849] Bluetooth: hci0: command tx timeout [ 91.633165][ T5841] team0: Port device team_slave_0 added [ 91.647409][ T5841] team0: Port device team_slave_1 added [ 91.682066][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.707021][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.711825][ T5849] Bluetooth: hci1: command tx timeout [ 91.726149][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.791849][ T5148] Bluetooth: hci3: command tx timeout [ 91.791857][ T5842] Bluetooth: hci2: command tx timeout [ 91.792070][ T5849] Bluetooth: hci4: command tx timeout [ 91.849623][ T5830] team0: Port device team_slave_0 added [ 91.858890][ T5830] team0: Port device team_slave_1 added [ 91.865987][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.873332][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.899739][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.915230][ T5835] team0: Port device team_slave_0 added [ 91.924492][ T5840] team0: Port device team_slave_0 added [ 91.931483][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.938493][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.964746][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.978314][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.985832][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.012474][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.038084][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.045244][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.071293][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.084392][ T5835] team0: Port device team_slave_1 added [ 92.100276][ T5840] team0: Port device team_slave_1 added [ 92.128138][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.135566][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.162075][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.234379][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.242670][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.268997][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.285016][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.292558][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.318718][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.395348][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.402532][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.429216][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.442795][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.449798][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.475849][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.488767][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.495925][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.521997][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.538881][ T5841] hsr_slave_0: entered promiscuous mode [ 92.545724][ T5841] hsr_slave_1: entered promiscuous mode [ 92.560605][ T5839] hsr_slave_0: entered promiscuous mode [ 92.567812][ T5839] hsr_slave_1: entered promiscuous mode [ 92.574458][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.582313][ T5839] Cannot create hsr debugfs directory [ 92.734630][ T5830] hsr_slave_0: entered promiscuous mode [ 92.741424][ T5830] hsr_slave_1: entered promiscuous mode [ 92.747628][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.756213][ T5830] Cannot create hsr debugfs directory [ 92.849647][ T5840] hsr_slave_0: entered promiscuous mode [ 92.856621][ T5840] hsr_slave_1: entered promiscuous mode [ 92.863706][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.871457][ T5840] Cannot create hsr debugfs directory [ 92.941847][ T5835] hsr_slave_0: entered promiscuous mode [ 92.948307][ T5835] hsr_slave_1: entered promiscuous mode [ 92.955467][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.963648][ T5835] Cannot create hsr debugfs directory [ 93.474408][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.495758][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.506945][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.527641][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.611501][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.625965][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.653533][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.666140][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.717186][ T5849] Bluetooth: hci0: command tx timeout [ 93.726438][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.739756][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.751449][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.765174][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.801200][ T5849] Bluetooth: hci1: command tx timeout [ 93.871502][ T5849] Bluetooth: hci3: command tx timeout [ 93.872127][ T5148] Bluetooth: hci4: command tx timeout [ 93.876971][ T5842] Bluetooth: hci2: command tx timeout [ 93.921920][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.937365][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.948782][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.971244][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.108363][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.142196][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.161819][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.178580][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.211774][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.237075][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.274780][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.306203][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.330577][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.338449][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.368089][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.375401][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.386187][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.393384][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.413914][ T2983] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.421122][ T2983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.432629][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.543114][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.562845][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.610135][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.627808][ T2983] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.635185][ T2983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.665116][ T2983] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.672620][ T2983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.684071][ T2983] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.691438][ T2983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.755545][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.762906][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.045807][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.195870][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.265864][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.273414][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.292436][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.299668][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.430072][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.577041][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.636819][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.696693][ T5841] veth0_vlan: entered promiscuous mode [ 95.767706][ T5841] veth1_vlan: entered promiscuous mode [ 95.796034][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.804777][ T5842] Bluetooth: hci0: command tx timeout [ 95.810768][ T5839] veth0_vlan: entered promiscuous mode [ 95.874730][ T5842] Bluetooth: hci1: command tx timeout [ 95.896352][ T5839] veth1_vlan: entered promiscuous mode [ 95.923915][ T5830] veth0_vlan: entered promiscuous mode [ 95.956128][ T5842] Bluetooth: hci2: command tx timeout [ 95.962304][ T5849] Bluetooth: hci3: command tx timeout [ 95.962316][ T5148] Bluetooth: hci4: command tx timeout [ 95.977613][ T5830] veth1_vlan: entered promiscuous mode [ 96.005581][ T5841] veth0_macvtap: entered promiscuous mode [ 96.019443][ T5841] veth1_macvtap: entered promiscuous mode [ 96.083715][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.136301][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.165208][ T5839] veth0_macvtap: entered promiscuous mode [ 96.199036][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.237196][ T5830] veth0_macvtap: entered promiscuous mode [ 96.249901][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.262656][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.272761][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.282728][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.304654][ T5840] veth0_vlan: entered promiscuous mode [ 96.313166][ T5839] veth1_macvtap: entered promiscuous mode [ 96.324215][ T5830] veth1_macvtap: entered promiscuous mode [ 96.348884][ T5840] veth1_vlan: entered promiscuous mode [ 96.433477][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.465548][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.526758][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.542039][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.559569][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.569189][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.579543][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.589209][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.606688][ T5840] veth0_macvtap: entered promiscuous mode [ 96.618489][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.628437][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.638041][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.648127][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.682138][ T5840] veth1_macvtap: entered promiscuous mode [ 96.799612][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.815399][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.837971][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.883405][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.914908][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.925082][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.936055][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.945308][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.989528][ T5835] veth0_vlan: entered promiscuous mode [ 97.017404][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.028252][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.098239][ T5835] veth1_vlan: entered promiscuous mode [ 97.107247][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.128531][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.136848][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.149709][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.239004][ T923] cfg80211: failed to load regulatory.db [ 97.299982][ T5932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.322408][ T5932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.324034][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.347649][ T5835] veth0_macvtap: entered promiscuous mode [ 97.393236][ T4318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.403508][ T5835] veth1_macvtap: entered promiscuous mode [ 97.418293][ T4318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.479137][ T4318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.531505][ T4318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.544687][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.600217][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.666802][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.701045][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.709945][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.733366][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.869289][ T4318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.876178][ T5849] Bluetooth: hci0: command tx timeout [ 97.927513][ T4318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.952074][ T5849] Bluetooth: hci1: command tx timeout [ 98.032690][ T5849] Bluetooth: hci3: command tx timeout [ 98.038210][ T5842] Bluetooth: hci2: command tx timeout [ 98.038221][ T5148] Bluetooth: hci4: command tx timeout [ 98.169562][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.185922][ T5969] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8'. [ 98.221048][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.414865][ T4318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.462867][ T4318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.699948][ T5980] veth3: entered promiscuous mode [ 98.787028][ T5983] netlink: 'syz.2.14': attribute type 1 has an invalid length. [ 98.921699][ T5985] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 99.112446][ T5986] veth3: entered promiscuous mode [ 99.131126][ T5986] bridge0: port 3(veth3) entered blocking state [ 99.155282][ T5986] bridge0: port 3(veth3) entered disabled state [ 99.175605][ T5986] veth3: entered allmulticast mode [ 99.230662][ T5991] ip6gretap1: entered allmulticast mode [ 99.259558][ T5991] bridge0: port 4(ip6gretap1) entered blocking state [ 99.271215][ T5991] bridge0: port 4(ip6gretap1) entered disabled state [ 99.305873][ T5991] ip6gretap1: entered promiscuous mode [ 101.164357][ T6042] syzkaller0: entered allmulticast mode [ 104.114524][ T6079] netlink: 20 bytes leftover after parsing attributes in process `syz.0.53'. [ 106.425626][ T6136] netlink: 60 bytes leftover after parsing attributes in process `syz.2.79'. [ 106.475958][ T6138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.80'. [ 107.178562][ T6153] [ 107.181205][ T6153] ============================= [ 107.186150][ T6153] WARNING: suspicious RCU usage [ 107.191237][ T6153] 6.16.0-rc3-syzkaller-00136-g561aa0e22b70 #0 Not tainted [ 107.198399][ T6153] ----------------------------- [ 107.203350][ T6153] net/core/netclassid_cgroup.c:24 suspicious rcu_dereference_check() usage! [ 107.213958][ T6153] [ 107.213958][ T6153] other info that might help us debug this: [ 107.213958][ T6153] [ 107.226460][ T6153] [ 107.226460][ T6153] rcu_scheduler_active = 2, debug_locks = 1 [ 107.234840][ T6153] 1 lock held by syz.1.87/6153: [ 107.239762][ T6153] #0: ffffffff8e13f040 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80 [ 107.250219][ T6153] [ 107.250219][ T6153] stack backtrace: [ 107.256342][ T6153] CPU: 1 UID: 0 PID: 6153 Comm: syz.1.87 Not tainted 6.16.0-rc3-syzkaller-00136-g561aa0e22b70 #0 PREEMPT(full) [ 107.256371][ T6153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.256391][ T6153] Call Trace: [ 107.256401][ T6153] [ 107.256409][ T6153] dump_stack_lvl+0x189/0x250 [ 107.256449][ T6153] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.256483][ T6153] ? __pfx__printk+0x10/0x10 [ 107.256511][ T6153] ? print_lock_name+0xde/0x100 [ 107.256540][ T6153] lockdep_rcu_suspicious+0x140/0x1d0 [ 107.256580][ T6153] task_cls_state+0x1a5/0x1d0 [ 107.256612][ T6153] bpf_get_cgroup_classid_curr+0x18/0x60 [ 107.256633][ T6153] bpf_prog_841aec7193f618b3+0x1b/0x21 [ 107.256659][ T6153] bpf_prog_run_pin_on_cpu+0x6a/0x150 [ 107.256690][ T6153] bpf_prog_test_run_syscall+0x312/0x4b0 [ 107.256718][ T6153] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 107.256742][ T6153] ? __fget_files+0x2a/0x420 [ 107.256771][ T6153] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 107.256798][ T6153] bpf_prog_test_run+0x2c7/0x340 [ 107.256832][ T6153] __sys_bpf+0x4a4/0x860 [ 107.256863][ T6153] ? __pfx___sys_bpf+0x10/0x10 [ 107.256911][ T6153] ? rcu_is_watching+0x15/0xb0 [ 107.256951][ T6153] __x64_sys_bpf+0x7c/0x90 [ 107.256977][ T6153] do_syscall_64+0xfa/0x3b0 [ 107.256994][ T6153] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.257025][ T6153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.257046][ T6153] ? clear_bhb_loop+0x60/0xb0 [ 107.257073][ T6153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.257092][ T6153] RIP: 0033:0x7fccf078e929 [ 107.257109][ T6153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.257124][ T6153] RSP: 002b:00007fccf16a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 107.257143][ T6153] RAX: ffffffffffffffda RBX: 00007fccf09b5fa0 RCX: 00007fccf078e929 [ 107.257156][ T6153] RDX: 0000000000000039 RSI: 0000200000000500 RDI: 000000000000000a [ 107.257167][ T6153] RBP: 00007fccf0810b39 R08: 0000000000000000 R09: 0000000000000000 [ 107.257177][ T6153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.257187][ T6153] R13: 0000000000000000 R14: 00007fccf09b5fa0 R15: 00007ffd013da168 [ 107.257226][ T6153]