last executing test programs:

510.898128ms ago: executing program 0 (id=87):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2080}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x10}}, 0x9c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)

459.352127ms ago: executing program 0 (id=89):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r1)
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x89f4, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

364.308182ms ago: executing program 1 (id=91):
syz_emit_ethernet(0x82, &(0x7f0000000240)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000029}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0)

306.36116ms ago: executing program 1 (id=93):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000003540)=[{{&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000003c0)="b792b6c728fb554a7601af023db5ef276136b78a996790fa4c613b7a5be64d5ff8c6724a4644113eca7528f78f49287997177731aa705fe1994d4c206c850bbd0482928fb1da5bbeca90a52504187d5522d0530ef99a6b258fd36536940f1ff40df9eb2e42be1545105e4bf5373fff66e0155a2c67", 0x75}, {&(0x7f0000001a80)="ac41a48dc274d82568f1f0edab58e901eb8190c035d3d219c5e981fc7645852f5279e75313526688f6c074db7e559a6b5a872376e81b08e8b5dadf7c630bf80c0c651bbe968dfec57dbf3a30e0835cbbe2c2ff090e2a4bfe028a3aaacc87774c777c7355503d672ffb1f372f1610af2693e478c6ba7de720eafd2175cfaaea9eea8e89ff1d0d026512199dc5dc1c651b77792d4b6800105b47f3909d23a2e5dec60608122fb358ffce693f109f4c7ca81b8c33167138f5b0e62f3d620888374305ff44d8409dc6e2424fb2ca26f515bef4be6ec4f1f6f25b799f95bbd5f4a33e7eb8d56101a83d9f8aa19565114a95f95102d16575a0da7eed59ae43aeec5aef75b76355a2b293cc847750fa9c07b432a042d21d048e4d189d22cee4e46753cc64726e5c2bab0b53cff28c9237a2ec8473d53a63339638f273bd3fa333f7906050464074f71b8cad8b114e23056c04c8fd87d43d8c5db0a25e5b5d58d2824712a621e97e8eb0ebf1dd3b042eaec20dbc652611a9f963c14ed17643bde898f918e7ce5031cd8fb31da84a354998d5faaa8155e4ea491d9947217b13fc02fa6d8ee370000b6bdf7063de4f2bd1b0eedb83a4c52910744f8deb374f5d7618f1224e9774830ccdaaacc10e61f31d0d44f160bec6c1ec0e03367099d50579f2224b60359a7f6538a0f8301069c6f6f28d7e3da60eb322c33c22996dd7008e2c8495db3d63419bdb9e976ac716d2465b261d055fd599fca2efd2ff529035557d2f96650dfc019dada9b351301a78f0b437754c66d098fd2f90e29f62efe79a8c22d12f43891b4ac27f8b7031732420b88e24f8b87f4c688fda5c58132ac48f7c6cabb009a11596b2648318944e4908b0bb84339337e21f5260c9b1da5e387a7334f25f364d7924fc60ebb80e4552c213820354a00b44394dd67868f788c6985591e207109d147b7848e217075cabf47f5fb64f50e2790e35b7dd73ed18faf858273b5200171b794ddb7f880a6e7e7386c718b632103b3e89b5ca96bf2fd6c3c7f7e3dcef48c6defa10684889369ae296583dc2d962e6e86549fc3f23a106e998d76c4544ae21e3d51b3cf002ace7a0daa82cb0677079b2d3d14f7e9a0478dace936a2304a4aeda9a68d1144f055a5c4a92ed8b247bc0f293a0052df0c5d64ee55876f4053b3299a56d306c41f754f9e5211b233214ee90ea9cfd79c9e0b7d20c137e9ab01bd4ef1a23a7e0d064246096309e4cf3dcbe1924ff7c203a62322e700388e9a502930dcb5eb499a367f16f1d60b8663570b1adba35525f764ee986baa3e3549ae07f3c55d983037a45abcc055959df8ee5dba0d828eb407265b47e76c7725c713a6107be21a8bbaef247a8bb65e3a07911c115dc0f2951ff4e2c670c7fe0ff84834108ce3dd272e0f4796f98c1a26531d33310fc94588ac49c339ddd03e62032d96d52c8d6adda8f4f72b6d8735b100b6dbf95336207733f5f220091fdf6c425ea7c475d80935de08e21851fbff328e9c591bcddd0d96ae9557f4c7e96f22226a4e0f9938cd01696b7bcc8db64961d03b85ef5d6c8069d434286807d7afd598773b0ca2f8207c58f9b2612f92a18de", 0x470}], 0x2}}, {{&(0x7f0000000740)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000780)="e4", 0x1}], 0x1}}], 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x4)

306.126052ms ago: executing program 2 (id=94):
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0)

305.712375ms ago: executing program 0 (id=95):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a3000000000b4000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d24001280200001800e000100636f6e6e6c696d69740000000c00028008000140000000010c0009800800014000008fce47000d"], 0xfc}}, 0x0)

229.739286ms ago: executing program 1 (id=96):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xb, 0x42, 0x40, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000880), 0x1006, r0, 0x0, 0xd88d02a0}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000000100), 0x0}, 0x20)

229.571245ms ago: executing program 2 (id=97):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030ec0007f03e3f7fffe000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

229.348466ms ago: executing program 0 (id=98):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x2, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
bind$tipc(r0, 0x0, 0x0)

129.244764ms ago: executing program 2 (id=99):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r0)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1}]}, 0x2c}}, 0x64000)

128.981341ms ago: executing program 0 (id=100):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000004d18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000180)="74fa40b249c0d585699ce70fac7b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

128.503693ms ago: executing program 1 (id=101):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x70bd24, 0xffffffff, {0x0, 0x0, 0x1f, 0x0, {}, {0xfff1, 0x2}, {0x6, 0xe}}}, 0x24}}, 0x0)

60.64538ms ago: executing program 2 (id=102):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt(r0, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000000))

60.453908ms ago: executing program 2 (id=103):
r0 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000000), 0x4)

60.257302ms ago: executing program 1 (id=104):
r0 = socket(0x10, 0x80003, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002140)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x2, 0xb, 0x9}, {0x5, 0x1, 0x1000, 0x9, 0x0, 0xc}, 0x3, 0x4, 0xe6d}}, @TCA_TBF_RATE64={0xc, 0x4, 0x5b0d649c4533b841}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x400c004}, 0x0)

1.025728ms ago: executing program 0 (id=105):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000780)="5b34307b5d5ab4d0da618c917d17d72617b51de3b058db3741c1ad288ab3d41b6393", 0x22}], 0x1}, 0x40000000)
recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000001040)=""/31, 0x1f}], 0x1}}], 0x1, 0x200, 0x0)

721.07µs ago: executing program 2 (id=106):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39)

0s ago: executing program 1 (id=107):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffe}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x800)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:58690' (ED25519) to the list of known hosts.
syzkaller login: [   47.695734][ T5757] cgroup: Unknown subsys name 'net'
[   47.806821][ T5757] cgroup: Unknown subsys name 'cpuset'
[   47.811995][ T5757] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.179692][ T5757] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   61.076471][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.079883][ T5860] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.082217][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.085696][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.088710][ T5860] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.092409][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.095432][ T5860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.099420][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.102620][ T5860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.106030][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.110061][ T5860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.115489][ T5860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.118665][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.124769][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   61.128075][ T5860] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.440775][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   61.510318][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   61.530187][ T5859] chnl_net:caif_netlink_parms(): no params data found
[   61.561822][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.566459][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.569490][ T5855] bridge_slave_0: entered allmulticast mode
[   61.573392][ T5855] bridge_slave_0: entered promiscuous mode
[   61.602218][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.605702][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.608695][ T5855] bridge_slave_1: entered allmulticast mode
[   61.612551][ T5855] bridge_slave_1: entered promiscuous mode
[   61.689763][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.707055][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.748481][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.750917][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.753208][ T5852] bridge_slave_0: entered allmulticast mode
[   61.757538][ T5852] bridge_slave_0: entered promiscuous mode
[   61.768953][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.771580][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.774931][ T5859] bridge_slave_0: entered allmulticast mode
[   61.778141][ T5859] bridge_slave_0: entered promiscuous mode
[   61.781739][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.785101][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.787422][ T5859] bridge_slave_1: entered allmulticast mode
[   61.790688][ T5859] bridge_slave_1: entered promiscuous mode
[   61.793519][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.796692][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.799281][ T5852] bridge_slave_1: entered allmulticast mode
[   61.801925][ T5852] bridge_slave_1: entered promiscuous mode
[   61.807526][ T5855] team0: Port device team_slave_0 added
[   61.852299][ T5855] team0: Port device team_slave_1 added
[   61.866531][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.885449][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.910046][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.937287][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.940047][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.950714][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.958567][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.962199][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.965082][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.974753][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.981081][ T5859] team0: Port device team_slave_0 added
[   61.998945][ T5859] team0: Port device team_slave_1 added
[   62.037609][ T5852] team0: Port device team_slave_0 added
[   62.064879][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.067714][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.078662][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.084776][ T5852] team0: Port device team_slave_1 added
[   62.091691][ T5855] hsr_slave_0: entered promiscuous mode
[   62.095454][ T5855] hsr_slave_1: entered promiscuous mode
[   62.117703][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.120337][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.130322][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.136369][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.138817][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.147753][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.157843][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.160475][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.170961][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.242362][ T5859] hsr_slave_0: entered promiscuous mode
[   62.245467][ T5859] hsr_slave_1: entered promiscuous mode
[   62.247575][ T5859] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.250160][ T5859] Cannot create hsr debugfs directory
[   62.285931][ T5852] hsr_slave_0: entered promiscuous mode
[   62.288461][ T5852] hsr_slave_1: entered promiscuous mode
[   62.291256][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.294345][ T5852] Cannot create hsr debugfs directory
[   62.521643][ T5855] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   62.541556][ T5855] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   62.558310][ T5855] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   62.570637][ T5855] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   62.629663][ T5859] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   62.643390][ T5859] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   62.652339][ T5859] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   62.660924][ T5859] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   62.724859][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   62.731103][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   62.738855][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   62.749275][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   62.810287][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.840859][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   62.860202][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.863047][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.877303][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.882499][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.885536][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.936615][ T5859] 8021q: adding VLAN 0 to HW filter on device team0
[   62.941673][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.955458][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.958431][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.967704][ T5855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   62.985133][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.988036][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.012717][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   63.053713][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.056462][ T3569] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.081601][ T3569] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.084155][ T3569] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.156671][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.163031][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.166599][ T5857] Bluetooth: hci2: command tx timeout
[   63.175460][ T5857] Bluetooth: hci1: command tx timeout
[   63.175521][ T5860] Bluetooth: hci0: command tx timeout
[   63.212745][ T5859] veth0_vlan: entered promiscuous mode
[   63.225831][ T5859] veth1_vlan: entered promiscuous mode
[   63.233305][ T5855] veth0_vlan: entered promiscuous mode
[   63.243090][ T5855] veth1_vlan: entered promiscuous mode
[   63.282794][ T5855] veth0_macvtap: entered promiscuous mode
[   63.288297][ T5859] veth0_macvtap: entered promiscuous mode
[   63.300148][ T5859] veth1_macvtap: entered promiscuous mode
[   63.308827][ T5855] veth1_macvtap: entered promiscuous mode
[   63.335740][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.340750][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.350735][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.356804][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.365084][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.371560][ T5855] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.376311][ T5855] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.379314][ T5855] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.382384][ T5855] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.388175][ T5859] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.391165][ T5859] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.395568][ T5859] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.399044][ T5859] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.468289][ T5852] veth0_vlan: entered promiscuous mode
[   63.500888][ T5852] veth1_vlan: entered promiscuous mode
[   63.529527][  T238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.532705][  T238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.538975][ T5852] veth0_macvtap: entered promiscuous mode
[   63.560984][  T238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.563409][  T238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.569651][ T5852] veth1_macvtap: entered promiscuous mode
[   63.596241][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.604600][ T3569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.615332][ T3569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.615580][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.622366][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.627109][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.643912][ T5852] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.652074][ T5852] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.659286][ T5852] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.662728][ T5852] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.690130][ T5859] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   63.790611][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.793430][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.832556][ T3569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.837466][ T3569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.929607][ T5927] netlink: 'syz.2.16': attribute type 3 has an invalid length.
[   64.023258][ T5939] netlink: 'syz.2.18': attribute type 4 has an invalid length.
[   64.110516][ T5945] team_slave_0: entered promiscuous mode
[   64.112491][ T5945] team_slave_1: entered promiscuous mode
[   64.122243][ T5945] macsec1: entered promiscuous mode
[   64.124840][ T5945] team0: entered promiscuous mode
[   64.491137][ T5975] ieee802154 phy0 wpan0: encryption failed: -22
[   64.524167][ T5980] Driver unsupported XDP return value 0 on prog  (id 6) dev N/A, expect packet loss!
[   64.970281][ T6010] netlink: set zone limit has 8 unknown bytes
[   64.973625][ T6011] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   64.985224][ T6005] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   65.010935][ T6005] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   65.238361][ T6026] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   65.244625][ T5860] Bluetooth: hci1: command tx timeout
[   65.244793][ T5857] Bluetooth: hci2: command tx timeout
[   65.253883][ T5857] Bluetooth: hci0: command tx timeout
[   65.288411][ T6028] netlink: 64 bytes leftover after parsing attributes in process `syz.2.64'.
[   65.361354][ T6032] C: renamed from team_slave_0 (while UP)
[   65.367403][ T6032] netlink: 'syz.2.66': attribute type 8 has an invalid length.
[   65.370556][ T6032] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   65.492337][ T6044] warning: `syz.2.71' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.675305][ T6058] netem: incorrect gi model size
[   65.677729][ T6058] netem: change failed
[   65.853452][ T6071] xt_TPROXY: Can be used only with -p tcp or -p udp
[   66.402793][ T6109] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[   66.490873][ T6117] 
[   66.491749][ T6117] =============================
[   66.493366][ T6117] WARNING: suspicious RCU usage
[   66.495204][ T6117] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[   66.498764][ T6117] -----------------------------
[   66.500615][ T6117] net/core/netclassid_cgroup.c:24 suspicious rcu_dereference_check() usage!
[   66.503925][ T6117] 
[   66.503925][ T6117] other info that might help us debug this:
[   66.503925][ T6117] 
[   66.507587][ T6117] 
[   66.507587][ T6117] rcu_scheduler_active = 2, debug_locks = 1
[   66.510284][ T6117] 1 lock held by syz.2.106/6117:
[   66.512179][ T6117]  #0: ffffffff8e13f040 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80
[   66.515660][ T6117] 
[   66.515660][ T6117] stack backtrace:
[   66.517865][ T6117] CPU: 1 UID: 0 PID: 6117 Comm: syz.2.106 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   66.517876][ T6117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   66.517882][ T6117] Call Trace:
[   66.517886][ T6117]  <TASK>
[   66.517890][ T6117]  dump_stack_lvl+0x189/0x250
[   66.517906][ T6117]  ? __pfx_dump_stack_lvl+0x10/0x10
[   66.517916][ T6117]  ? __pfx__printk+0x10/0x10
[   66.517933][ T6117]  ? print_lock_name+0xde/0x100
[   66.517945][ T6117]  lockdep_rcu_suspicious+0x140/0x1d0
[   66.517955][ T6117]  task_cls_state+0x1a5/0x1d0
[   66.517968][ T6117]  bpf_get_cgroup_classid_curr+0x18/0x60
[   66.517978][ T6117]  bpf_prog_841aec7193f618b3+0x1b/0x21
[   66.517986][ T6117]  bpf_prog_run_pin_on_cpu+0x6a/0x150
[   66.517997][ T6117]  bpf_prog_test_run_syscall+0x312/0x4b0
[   66.518007][ T6117]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[   66.518017][ T6117]  ? __fget_files+0x2a/0x420
[   66.518031][ T6117]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[   66.518040][ T6117]  bpf_prog_test_run+0x2c7/0x340
[   66.518050][ T6117]  __sys_bpf+0x4a4/0x860
[   66.518058][ T6117]  ? __pfx___sys_bpf+0x10/0x10
[   66.518069][ T6117]  ? exc_page_fault+0x76/0xf0
[   66.518082][ T6117]  ? rcu_is_watching+0x15/0xb0
[   66.518093][ T6117]  __x64_sys_bpf+0x7c/0x90
[   66.518105][ T6117]  do_syscall_64+0xfa/0x3b0
[   66.518112][ T6117]  ? lockdep_hardirqs_on+0x9c/0x150
[   66.518118][ T6117]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.518126][ T6117]  ? exc_page_fault+0x9f/0xf0
[   66.518138][ T6117]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.518145][ T6117] RIP: 0033:0x7f6a59b8e929
[   66.518153][ T6117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   66.518192][ T6117] RSP: 002b:00007f6a5aab1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   66.518202][ T6117] RAX: ffffffffffffffda RBX: 00007f6a59db5fa0 RCX: 00007f6a59b8e929
[   66.518209][ T6117] RDX: 0000000000000039 RSI: 0000200000000500 RDI: 000000000000000a
[   66.518214][ T6117] RBP: 00007f6a59c10b39 R08: 0000000000000000 R09: 0000000000000000
[   66.518218][ T6117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   66.518223][ T6117] R13: 0000000000000000 R14: 00007f6a59db5fa0 R15: 00007fffeb4cb218
[   66.518236][ T6117]  </TASK>
[   67.324504][ T5857] Bluetooth: hci0: command tx timeout
[   67.324749][ T5860] Bluetooth: hci2: command tx timeout
[   67.326815][ T5857] Bluetooth: hci1: command tx timeout
[   69.404628][ T5857] Bluetooth: hci1: command tx timeout
[   69.404751][ T5218] Bluetooth: hci2: command tx timeout
[   69.407110][ T5860] Bluetooth: hci0: command tx timeout
[   71.168707][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.170929][ T1361] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
06:32:46  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000007 RBX=0000000000000002 RCX=000000007673984f RDX=000000007673984f
RSI=ffff888106ef6180 RDI=ffff888106ef5640 RBP=0000000000000000 RSP=ffffc90002c6f8f0
R8 =0000000000000000 R9 =ffffffff8b3cb272 R10=dffffc0000000000 R11=ffffffff8b3cb1a0
R12=0000000000004007 R13=ffff888106ef6130 R14=ffff888106ef6180 R15=7673984f4ac3c72b
RIP=ffffffff819e3d88 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555594137808 CR3=000000011400c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffff00 XMM03=ffffffffffffff00 ffffffffffffff00
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f6a59c11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000039 RBX=0000000000000039 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000f5e RDI=0000000000000f5f RBP=00000000000003f8 RSP=ffffc9000442f550
R8 =ffff888107f88237 R9 =1ffff11020ff1046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af78f1 R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6a5aab16c0 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c25138e CR3=0000000027058000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f6a59d84478 00007f6a59d84450 XMM03=00007f6a59d84488 00007f6a59d84480
XMM04=00007f6a5a8ed100 00007f6a59d84440 XMM05=00007f6a59d84458 00007f6a59d844a0
XMM06=00007f6a59d84498 00007f6a59d84490 XMM07=00007f6a59d84488 00007f6a59d84480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f6a59c11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
