last executing test programs:

229.137026ms ago: executing program 2 (id=192):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000340)="cf", 0x1, 0x20008010, &(0x7f0000000200)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)

229.03007ms ago: executing program 1 (id=193):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r0, &(0x7f0000000c80)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}, 0x1c)

228.941305ms ago: executing program 0 (id=194):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000700000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0)

170.04358ms ago: executing program 1 (id=195):
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r0, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4)
r1 = socket(0x25, 0x5, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x85e)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt(r2, 0xff, 0x1, &(0x7f0000000000)="4feb", 0x2)
syz_emit_ethernet(0x36, &(0x7f0000000140)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @remote}, @timestamp_reply}}}}, 0x0)

169.797247ms ago: executing program 2 (id=196):
r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x60)

169.546516ms ago: executing program 1 (id=197):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'})
ioctl(r0, 0x8b23, &(0x7f0000000040))

169.378393ms ago: executing program 0 (id=198):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff000}, {0x6}]}, 0x10)

111.165555ms ago: executing program 2 (id=199):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4, "bec76e1d"}, &(0x7f00000000c0)=0x28)

111.03735ms ago: executing program 0 (id=200):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

110.835559ms ago: executing program 1 (id=201):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x24, 0x10, 0xb, 0x70bd26, 0x4000, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x7}, @nested={0x6, 0x1, 0x0, 0x1, [@generic="f479"]}]}, 0x24}}, 0x4040080)

110.772799ms ago: executing program 2 (id=202):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0xb, &(0x7f00000000c0)={0xfffffff6}, 0x10)
sendmsg$nl_netfilter(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)={0x18, 0x4, 0x1, 0x5, 0x0, 0x0, {}, [@generic='}']}, 0x18}}, 0x0)

49.87094ms ago: executing program 0 (id=203):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x891a, 0x0)

49.694906ms ago: executing program 1 (id=204):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000003c0)=0x5, 0x4)

49.562352ms ago: executing program 2 (id=205):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff850000007100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="0426063d032bbb006965499a03b9", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

420.374µs ago: executing program 0 (id=206):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x64, 0x6, 0x598, 0xd0, 0x3d0, 0xd0, 0x300, 0x3d0, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x300}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @remote}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8)

342.437µs ago: executing program 1 (id=207):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003700)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028004000300040000000800020000b6"], 0x44}}, 0x0)

219.954µs ago: executing program 0 (id=208):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39)

0s ago: executing program 2 (id=209):
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @private=0xa010100}]}, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r0, 0x84, 0x1b, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:58482' (ED25519) to the list of known hosts.
syzkaller login: [   40.423765][ T5753] cgroup: Unknown subsys name 'net'
[   40.529954][ T5753] cgroup: Unknown subsys name 'cpuset'
[   40.534408][ T5753] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   41.860773][ T5753] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   51.841707][ T5218] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   51.844410][ T5218] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   51.847037][ T5218] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   51.850225][ T5218] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   51.853630][ T5218] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   51.892598][ T5218] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   51.895402][ T5218] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   51.901522][ T5218] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   51.904503][ T5218] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   51.907324][ T5218] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   51.916112][   T56] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   51.919140][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   51.921849][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   51.924484][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   51.926875][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   52.145644][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   52.181185][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   52.229620][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   52.234559][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.237301][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.239534][ T5848] bridge_slave_0: entered allmulticast mode
[   52.242249][ T5848] bridge_slave_0: entered promiscuous mode
[   52.255430][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.257721][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.259932][ T5848] bridge_slave_1: entered allmulticast mode
[   52.262583][ T5848] bridge_slave_1: entered promiscuous mode
[   52.329784][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.334280][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.354747][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.357035][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.359261][ T5851] bridge_slave_0: entered allmulticast mode
[   52.362558][ T5851] bridge_slave_0: entered promiscuous mode
[   52.374213][ T5848] team0: Port device team_slave_0 added
[   52.391218][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.393758][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.396029][ T5851] bridge_slave_1: entered allmulticast mode
[   52.398894][ T5851] bridge_slave_1: entered promiscuous mode
[   52.403764][ T5848] team0: Port device team_slave_1 added
[   52.413108][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.415382][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.417967][ T5853] bridge_slave_0: entered allmulticast mode
[   52.420607][ T5853] bridge_slave_0: entered promiscuous mode
[   52.444786][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.446931][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.455393][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.459220][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.461873][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.464100][ T5853] bridge_slave_1: entered allmulticast mode
[   52.466698][ T5853] bridge_slave_1: entered promiscuous mode
[   52.471551][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.476076][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.487845][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.489999][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.497833][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.537781][ T5851] team0: Port device team_slave_0 added
[   52.548413][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.552277][ T5851] team0: Port device team_slave_1 added
[   52.556839][ T5848] hsr_slave_0: entered promiscuous mode
[   52.559102][ T5848] hsr_slave_1: entered promiscuous mode
[   52.564130][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.600509][ T5853] team0: Port device team_slave_0 added
[   52.604728][ T5853] team0: Port device team_slave_1 added
[   52.638639][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.640892][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.649232][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.658200][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.660337][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.668245][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.672833][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.675197][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.683293][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.690172][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.692980][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.700729][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.743034][ T5851] hsr_slave_0: entered promiscuous mode
[   52.745248][ T5851] hsr_slave_1: entered promiscuous mode
[   52.747591][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   52.750720][ T5851] Cannot create hsr debugfs directory
[   52.793276][ T5853] hsr_slave_0: entered promiscuous mode
[   52.795499][ T5853] hsr_slave_1: entered promiscuous mode
[   52.797597][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   52.800006][ T5853] Cannot create hsr debugfs directory
[   52.935870][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   52.953127][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   52.966869][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   52.975603][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   53.005429][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   53.009363][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   53.029927][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   53.035872][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   53.043369][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.045849][ T5848] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.049006][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.051812][ T5848] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.074505][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.077777][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.100266][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   53.107792][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   53.119229][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   53.129815][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   53.163071][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.193109][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   53.200990][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.203553][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.210578][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.222200][  T734] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.224489][  T734] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.243981][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   53.254675][  T734] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.256936][  T734] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.273747][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.275980][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.317118][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.335445][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   53.340968][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.343267][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.360027][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.363068][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.466075][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.474084][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.518001][ T5853] veth0_vlan: entered promiscuous mode
[   53.522775][ T5848] veth0_vlan: entered promiscuous mode
[   53.533586][ T5848] veth1_vlan: entered promiscuous mode
[   53.536344][ T5853] veth1_vlan: entered promiscuous mode
[   53.543658][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.571071][ T5848] veth0_macvtap: entered promiscuous mode
[   53.585466][ T5848] veth1_macvtap: entered promiscuous mode
[   53.589589][ T5853] veth0_macvtap: entered promiscuous mode
[   53.598157][ T5853] veth1_macvtap: entered promiscuous mode
[   53.606097][ T5851] veth0_vlan: entered promiscuous mode
[   53.617621][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   53.626616][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   53.629907][ T5851] veth1_vlan: entered promiscuous mode
[   53.636181][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   53.640840][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   53.649094][ T5848] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.652759][ T5848] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.655567][ T5848] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.658415][ T5848] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.667270][ T5853] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.670035][ T5853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.673500][ T5853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.676495][ T5853] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.718482][ T5851] veth0_macvtap: entered promiscuous mode
[   53.738065][ T5851] veth1_macvtap: entered promiscuous mode
[   53.763173][  T734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.767607][  T734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.776463][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   53.789679][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   53.793737][  T734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.796344][ T5851] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.799106][ T5851] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.801986][  T734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.806064][ T5851] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.809011][ T5851] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.840686][  T734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.845071][  T734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.847447][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.849950][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.872267][ T5854] Bluetooth: hci0: command tx timeout
[   53.899986][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   53.909717][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.920564][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.952707][ T5218] Bluetooth: hci2: command tx timeout
[   53.954792][ T5854] Bluetooth: hci1: command tx timeout
[   53.956443][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.959007][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.256010][ T5938] pim6reg: entered allmulticast mode
[   54.366160][ T5953] Bluetooth: MGMT ver 1.23
[   54.509853][ T5967] sctp: [Deprecated]: syz.0.40 (pid 5967) Use of int in max_burst socket option.
[   54.509853][ T5967] Use struct sctp_assoc_value instead
[   54.657428][ T5295] IPVS: starting estimator thread 0...
[   54.772958][ T5988] IPVS: using max 80 ests per chain, 192000 per kthread
[   55.354368][ T6058] netlink: 16 bytes leftover after parsing attributes in process `syz.1.72'.
[   55.420166][ T6066] syz.2.76 uses obsolete (PF_INET,SOCK_PACKET)
[   55.510963][ T6079] netlink: 'syz.0.80': attribute type 1 has an invalid length.
[   55.514804][ T6077] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   55.518561][ T6079] netlink: 'syz.0.80': attribute type 1 has an invalid length.
[   55.568661][ T6077] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.582846][ T6077] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.744196][ T6100] netlink: 'syz.2.85': attribute type 12 has an invalid length.
[   55.746888][ T6100] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.85'.
[   55.817039][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   55.824541][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   55.876560][ T6085] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.879428][ T6085] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.890344][ T6085] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.893770][ T6085] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.952053][ T5854] Bluetooth: hci0: command tx timeout
[   56.031541][ T5854] Bluetooth: hci1: command tx timeout
[   56.033394][ T5854] Bluetooth: hci2: command tx timeout
[   56.049279][ T6120] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   56.612434][ T6172] netlink: 132 bytes leftover after parsing attributes in process `syz.1.107'.
[   57.142084][ T6196] netlink: del zone limit has 4 unknown bytes
[   57.415670][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.126'.
[   57.746308][ T6248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.139'.
[   57.792938][ T6254] macsec0: entered promiscuous mode
[   57.796094][ T6254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.141'.
[   57.804876][ T6254] veth1_macvtap: left promiscuous mode
[   57.830701][ T6254] macsec0 (unregistering): left promiscuous mode
[   57.951097][ T6271] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.149'.
[   58.031629][ T5218] Bluetooth: hci0: command tx timeout
[   58.124155][ T5218] Bluetooth: hci2: command tx timeout
[   58.125970][ T5218] Bluetooth: hci1: command tx timeout
[   58.207142][ T6290] netlink: 100 bytes leftover after parsing attributes in process `syz.0.158'.
[   58.884542][ T6317] netlink: 'syz.2.171': attribute type 5 has an invalid length.
[   59.209937][ T6332] netlink: 60 bytes leftover after parsing attributes in process `syz.2.178'.
[   59.507285][ T6352] netlink: 'syz.1.188': attribute type 21 has an invalid length.
[   59.509855][ T6352] IPv6: NLM_F_CREATE should be specified when creating new route
[   59.516529][ T6352] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   59.519052][ T6352] IPv6: NLM_F_CREATE should be set when creating new route
[   59.521537][ T6352] IPv6: NLM_F_CREATE should be set when creating new route
[   59.523815][ T6352] IPv6: NLM_F_CREATE should be set when creating new route
[   59.718162][ T6372] warning: `syz.1.197' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.775196][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.202'.
[   59.832948][ T6385] Driver unsupported XDP return value 0 on prog  (id 32) dev N/A, expect packet loss!
[   59.882348][ T6393] 
[   59.883258][ T6393] =============================
[   59.884821][ T6393] WARNING: suspicious RCU usage
[   59.886417][ T6393] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[   59.889704][ T6393] -----------------------------
[   59.891289][ T6393] net/core/netclassid_cgroup.c:24 suspicious rcu_dereference_check() usage!
[   59.894166][ T6393] 
[   59.894166][ T6393] other info that might help us debug this:
[   59.894166][ T6393] 
[   59.897378][ T6393] 
[   59.897378][ T6393] rcu_scheduler_active = 2, debug_locks = 1
[   59.900043][ T6393] 1 lock held by syz.0.208/6393:
[   59.901800][ T6393]  #0: ffffffff8e13f040 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80
[   59.905107][ T6393] 
[   59.905107][ T6393] stack backtrace:
[   59.907091][ T6393] CPU: 0 UID: 0 PID: 6393 Comm: syz.0.208 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   59.907102][ T6393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   59.907107][ T6393] Call Trace:
[   59.907112][ T6393]  <TASK>
[   59.907115][ T6393]  dump_stack_lvl+0x189/0x250
[   59.907133][ T6393]  ? __pfx_dump_stack_lvl+0x10/0x10
[   59.907149][ T6393]  ? __pfx__printk+0x10/0x10
[   59.907167][ T6393]  ? print_lock_name+0xde/0x100
[   59.907185][ T6393]  lockdep_rcu_suspicious+0x140/0x1d0
[   59.907202][ T6393]  task_cls_state+0x1a5/0x1d0
[   59.907217][ T6393]  bpf_get_cgroup_classid_curr+0x18/0x60
[   59.907226][ T6393]  bpf_prog_841aec7193f618b3+0x1b/0x21
[   59.907233][ T6393]  bpf_prog_run_pin_on_cpu+0x6a/0x150
[   59.907246][ T6393]  bpf_prog_test_run_syscall+0x312/0x4b0
[   59.907257][ T6393]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[   59.907266][ T6393]  ? __fget_files+0x2a/0x420
[   59.907280][ T6393]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[   59.907292][ T6393]  bpf_prog_test_run+0x2c7/0x340
[   59.907302][ T6393]  __sys_bpf+0x4a4/0x860
[   59.907309][ T6393]  ? __pfx___sys_bpf+0x10/0x10
[   59.907327][ T6393]  ? exc_page_fault+0x76/0xf0
[   59.907345][ T6393]  ? rcu_is_watching+0x15/0xb0
[   59.907366][ T6393]  __x64_sys_bpf+0x7c/0x90
[   59.907383][ T6393]  do_syscall_64+0xfa/0x3b0
[   59.907394][ T6393]  ? lockdep_hardirqs_on+0x9c/0x150
[   59.907405][ T6393]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.907416][ T6393]  ? exc_page_fault+0x9f/0xf0
[   59.907427][ T6393]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.907434][ T6393] RIP: 0033:0x7ff424b8e929
[   59.907441][ T6393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   59.907448][ T6393] RSP: 002b:00007ff425986038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   59.907456][ T6393] RAX: ffffffffffffffda RBX: 00007ff424db5fa0 RCX: 00007ff424b8e929
[   59.907462][ T6393] RDX: 0000000000000039 RSI: 0000200000000500 RDI: 000000000000000a
[   59.907466][ T6393] RBP: 00007ff424c10b39 R08: 0000000000000000 R09: 0000000000000000
[   59.907470][ T6393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   59.907475][ T6393] R13: 0000000000000000 R14: 00007ff424db5fa0 R15: 00007ffec4756348
[   59.907485][ T6393]  </TASK>
[   60.112355][ T5854] Bluetooth: hci0: command tx timeout
[   60.192090][ T5218] Bluetooth: hci2: command tx timeout
[   60.193235][ T5854] Bluetooth: hci1: command tx timeout

VM DIAGNOSIS:
03:05:22  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000072 RBX=0000000000000072 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000f49 RDI=0000000000000f4a RBP=00000000000003f8 RSP=ffffc9000641f550
R8 =ffff888107108237 R9 =1ffff11020e21046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af78eb R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff4259866c0 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff425985fc8 CR3=0000000028596000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007ff424d84478 00007ff424d84450 XMM03=00007ff424d84488 00007ff424d84480
XMM04=00007ff4258ed100 00007ff424d84440 XMM05=00007ff424d84458 00007ff424d844a0
XMM06=00007ff424d84498 00007ff424d84490 XMM07=00007ff424d84488 00007ff424d84480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007ff424c11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff821b1c01 RBX=dffffc0000000001 RCX=ffffffff821b1d04 RDX=0000000000000001
RSI=0000000000000100 RDI=ffffc900060f7760 RBP=0000000000000004 RSP=ffffc900060f76a8
R8 =ffffc900060f785f R9 =1ffff92000c1ef0b R10=dffffc0000000000 R11=fffff52000c1eeec
R12=dffffc0000000003 R13=dffffc0000000000 R14=fffff52000c1ef0c R15=1ffff92000c1eeec
RIP=ffffffff8223caad RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3171dff8 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff818ce575 ffffffff818ce484
XMM02=00007f69be584478 ffffffff823cfc6d XMM03=00007f69be584488 00007f69be584480
XMM04=00007f69bf0ed100 00007f69be584440 XMM05=00007f69be584458 00007f69be5844a0
XMM06=00007f69be584498 00007f69be584490 XMM07=00007f69be584488 00007f69be584480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f69be411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
