last executing test programs:

1.274186401s ago: executing program 2 (id=59):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000002090500000000000000000000000001240002"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20010000)

1.139784915s ago: executing program 2 (id=63):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)

1.089055715s ago: executing program 2 (id=67):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a5c000000060a0104000000000000000002000000300004802c0001800c00010062697477697365001c0002800800034040000000080001400000000008000240000000000900010073797a30000000000900020073797a3200"], 0x84}}, 0x0)

958.754168ms ago: executing program 2 (id=70):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58)
close(0x3)

628.990823ms ago: executing program 2 (id=82):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010030000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="0000000000100000240012800b0001006d616373656300001400028005000f0000000000080005"], 0x44}}, 0x0)

570.015797ms ago: executing program 2 (id=85):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
sendto$inet(r0, &(0x7f00000000c0)="d2664e3de44e5781659d1c2224a19de44fba87cf2fcf751c9b218685", 0xffffffffffffffe7, 0x2c000891, 0x0, 0x0)

318.357571ms ago: executing program 1 (id=95):
r0 = socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0xcd, 0x0, 0x20, 0xfd, [0x0, 0x5, 0x0, 0xc, 0x0, 0x0, 0x8, 0x1]}})

317.657632ms ago: executing program 0 (id=96):
r0 = socket(0x11, 0x2, 0x0)
setsockopt(r0, 0x107, 0x1, &(0x7f0000000000)="010000001e00060000084d74f9345ca14fed867be39556fb79a1c82114dc37be1107f06a72f9f8", 0x27)
close(r0)

317.447103ms ago: executing program 1 (id=97):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x38}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0)

275.955488ms ago: executing program 1 (id=98):
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000080)=@base={0x1c, 0x4, 0x41, 0x0, 0x1, 0x1, 0x11, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x6}, 0x50)

275.700433ms ago: executing program 0 (id=99):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x17, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000720101000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90)

217.558404ms ago: executing program 1 (id=100):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r0)
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x100}}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x6819130f3aa8b09c}, 0x40000)

217.326069ms ago: executing program 0 (id=101):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0xfffffd15, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x70, 0x32, 0x53b, 0x70bd2b, 0x25dfdbfb, {0x9}}, 0x70}, 0x1, 0x0, 0x0, 0x3000c891}, 0x0)

217.036731ms ago: executing program 1 (id=102):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}}, 0x8081)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2)

128.839728ms ago: executing program 0 (id=103):
syz_emit_ethernet(0x52, &(0x7f0000000280)={@local, @local, @val, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x14, 0x3a, 0x0, @private0, @mcast2, {[], @ni={0x8c, 0x0, 0x0, 0x5, 0x7f, 0x8000, "f5aa655a"}}}}}}, 0x0)

66.798722ms ago: executing program 0 (id=104):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24)

63.092946ms ago: executing program 1 (id=105):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f00000002c0)='cgroup.controllers\x00', 0x0, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)

0s ago: executing program 0 (id=106):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
recvmmsg(r0, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}, 0x170}], 0x1, 0x1, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:49957' (ED25519) to the list of known hosts.
syzkaller login: [   48.952050][ T5777] cgroup: Unknown subsys name 'net'
[   49.054161][ T5777] cgroup: Unknown subsys name 'cpuset'
[   49.059179][ T5777] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.376184][ T5777] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.808431][ T5202] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.811850][ T5202] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.815609][ T5202] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.819593][ T5202] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.823054][ T5202] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.868238][ T5202] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.872277][ T5202] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.876522][ T5202] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.880571][ T5202] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.884444][ T5202] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.952486][ T5202] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.955903][ T5202] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.959007][ T5202] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.964471][ T5202] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.972073][ T5202] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.134193][ T5809] chnl_net:caif_netlink_parms(): no params data found
[   54.205117][ T5814] chnl_net:caif_netlink_parms(): no params data found
[   54.280937][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.283925][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.286450][ T5809] bridge_slave_0: entered allmulticast mode
[   54.289227][ T5809] bridge_slave_0: entered promiscuous mode
[   54.330875][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.334400][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.337554][ T5809] bridge_slave_1: entered allmulticast mode
[   54.341505][ T5809] bridge_slave_1: entered promiscuous mode
[   54.389537][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.392252][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.394655][ T5814] bridge_slave_0: entered allmulticast mode
[   54.397442][ T5814] bridge_slave_0: entered promiscuous mode
[   54.419004][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.423339][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.426398][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.429450][ T5814] bridge_slave_1: entered allmulticast mode
[   54.434684][ T5814] bridge_slave_1: entered promiscuous mode
[   54.438315][ T5816] chnl_net:caif_netlink_parms(): no params data found
[   54.455520][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.507730][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.533663][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.543065][ T5809] team0: Port device team_slave_0 added
[   54.563113][ T5809] team0: Port device team_slave_1 added
[   54.603701][ T5814] team0: Port device team_slave_0 added
[   54.606682][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.609068][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.611407][ T5816] bridge_slave_0: entered allmulticast mode
[   54.615531][ T5816] bridge_slave_0: entered promiscuous mode
[   54.618903][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.621252][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.624086][ T5816] bridge_slave_1: entered allmulticast mode
[   54.626770][ T5816] bridge_slave_1: entered promiscuous mode
[   54.638025][ T5814] team0: Port device team_slave_1 added
[   54.654741][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.657623][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.669258][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.699983][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.703299][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.712504][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.730322][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.733979][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.742500][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.748745][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.754819][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.762284][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.764541][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.773186][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.838194][ T5816] team0: Port device team_slave_0 added
[   54.860715][ T5809] hsr_slave_0: entered promiscuous mode
[   54.863404][ T5809] hsr_slave_1: entered promiscuous mode
[   54.867359][ T5816] team0: Port device team_slave_1 added
[   54.873022][ T5814] hsr_slave_0: entered promiscuous mode
[   54.875387][ T5814] hsr_slave_1: entered promiscuous mode
[   54.877668][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.880222][ T5814] Cannot create hsr debugfs directory
[   54.936302][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.939205][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.950265][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.981514][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.984773][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.996953][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.072826][ T5816] hsr_slave_0: entered promiscuous mode
[   55.075143][ T5816] hsr_slave_1: entered promiscuous mode
[   55.077360][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.079781][ T5816] Cannot create hsr debugfs directory
[   55.210450][ T5814] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.221045][ T5814] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.233058][ T5814] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.243304][ T5814] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.269752][ T5809] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.278610][ T5809] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.303978][ T5809] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.320877][ T5809] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.326979][ T5816] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.334235][ T5816] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.339315][ T5816] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.351830][ T5816] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.417323][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.435876][ T5814] 8021q: adding VLAN 0 to HW filter on device team0
[   55.446266][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.448775][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.461404][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.469858][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.472294][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.496659][ T5816] 8021q: adding VLAN 0 to HW filter on device team0
[   55.504061][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.511304][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.513781][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.525936][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.528278][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.553648][ T5809] 8021q: adding VLAN 0 to HW filter on device team0
[   55.566642][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.569067][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.594197][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.596714][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.686803][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.708299][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.744283][ T5814] veth0_vlan: entered promiscuous mode
[   55.754469][ T5814] veth1_vlan: entered promiscuous mode
[   55.771425][ T5816] veth0_vlan: entered promiscuous mode
[   55.793535][ T5816] veth1_vlan: entered promiscuous mode
[   55.798575][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.810343][ T5814] veth0_macvtap: entered promiscuous mode
[   55.816292][ T5814] veth1_macvtap: entered promiscuous mode
[   55.833399][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.849713][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.863261][ T5202] Bluetooth: hci0: command tx timeout
[   55.868132][ T5816] veth0_macvtap: entered promiscuous mode
[   55.874500][ T5816] veth1_macvtap: entered promiscuous mode
[   55.880002][ T5814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.884875][ T5814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.888487][ T5814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.892683][ T5814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.922779][ T5809] veth0_vlan: entered promiscuous mode
[   55.929237][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.933095][ T5202] Bluetooth: hci1: command tx timeout
[   55.947356][ T5809] veth1_vlan: entered promiscuous mode
[   55.954621][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.967651][ T5816] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.970561][ T5816] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.975734][ T5816] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.979527][ T5816] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.012081][ T5202] Bluetooth: hci2: command tx timeout
[   56.048959][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.053839][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.061405][ T5809] veth0_macvtap: entered promiscuous mode
[   56.091097][ T5809] veth1_macvtap: entered promiscuous mode
[   56.113215][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.116553][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.127201][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.130113][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.143789][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.172440][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.188600][  T754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.193777][ T5809] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.197394][ T5809] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.200772][ T5809] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.204864][  T754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.217677][ T5814] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.228713][ T5809] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.305264][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.307813][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.358332][ T1180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.361158][ T1180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.443978][ T5877] warning: `syz.0.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   56.875836][ T5908] syzkaller0: entered allmulticast mode
[   57.001176][ T5915] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21'.
[   57.204522][ T5931] netlink: 'syz.2.27': attribute type 1 has an invalid length.
[   57.212237][ T5931] netlink: 'syz.2.27': attribute type 2 has an invalid length.
[   57.530165][ T5952] netlink: 'syz.2.37': attribute type 12 has an invalid length.
[   57.596307][ T5956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.39'.
[   57.638747][ T5960] netlink: 56 bytes leftover after parsing attributes in process `syz.2.41'.
[   57.642542][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.41'.
[   57.714169][ T5962] netem: change failed
[   57.942896][ T5202] Bluetooth: hci0: command tx timeout
[   58.012662][ T5202] Bluetooth: hci1: command tx timeout
[   58.093716][ T5202] Bluetooth: hci2: command tx timeout
[   58.341212][ T5990] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[   58.421045][ T5997] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.453013][ T5998] netlink: 32 bytes leftover after parsing attributes in process `syz.2.59'.
[   58.586962][ T6008] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[   58.665297][ T6016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.68'.
[   59.079662][ T6058] syz.0.86 uses obsolete (PF_INET,SOCK_PACKET)
[   59.451462][ T6092] netlink: 92 bytes leftover after parsing attributes in process `syz.0.101'.
[   59.478476][ T6092] tc_dump_action: action bad kind
[   59.706309][ T6104] 
[   59.707228][ T6104] =============================
[   59.708855][ T6104] WARNING: suspicious RCU usage
[   59.710397][ T6104] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[   59.714656][ T6104] -----------------------------
[   59.716251][ T6104] net/core/netclassid_cgroup.c:24 suspicious rcu_dereference_check() usage!
[   59.719237][ T6104] 
[   59.719237][ T6104] other info that might help us debug this:
[   59.719237][ T6104] 
[   59.722520][ T6104] 
[   59.722520][ T6104] rcu_scheduler_active = 2, debug_locks = 1
[   59.725005][ T6104] 1 lock held by syz.1.108/6104:
[   59.726604][ T6104]  #0: ffffffff8e13f040 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80
[   59.729724][ T6104] 
[   59.729724][ T6104] stack backtrace:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   59.731760][ T6104] CPU: 1 UID: 0 PID: 6104 Comm: syz.1.108 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   59.731777][ T6104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   59.731784][ T6104] Call Trace:
[   59.731791][ T6104]  <TASK>
[   59.731797][ T6104]  dump_stack_lvl+0x189/0x250
[   59.731822][ T6104]  ? __pfx_dump_stack_lvl+0x10/0x10
[   59.731842][ T6104]  ? __pfx__printk+0x10/0x10
[   59.731859][ T6104]  ? print_lock_name+0xde/0x100
[   59.731876][ T6104]  lockdep_rcu_suspicious+0x140/0x1d0
[   59.731899][ T6104]  task_cls_state+0x1a5/0x1d0
[   59.731918][ T6104]  bpf_get_cgroup_classid_curr+0x18/0x60
[   59.731930][ T6104]  bpf_prog_841aec7193f618b3+0x1b/0x21
[   59.731942][ T6104]  bpf_prog_run_pin_on_cpu+0x6a/0x150
[   59.731958][ T6104]  bpf_prog_test_run_syscall+0x312/0x4b0
[   59.731974][ T6104]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[   59.731986][ T6104]  ? __fget_files+0x2a/0x420
[   59.732002][ T6104]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[   59.732016][ T6104]  bpf_prog_test_run+0x2c7/0x340
[   59.732035][ T6104]  __sys_bpf+0x4a4/0x860
[   59.732052][ T6104]  ? __pfx___sys_bpf+0x10/0x10
[   59.732076][ T6104]  ? exc_page_fault+0x76/0xf0
[   59.732132][ T6104]  ? rcu_is_watching+0x15/0xb0
[   59.732157][ T6104]  __x64_sys_bpf+0x7c/0x90
[   59.732173][ T6104]  do_syscall_64+0xfa/0x3b0
[   59.732183][ T6104]  ? lockdep_hardirqs_on+0x9c/0x150
[   59.732200][ T6104]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.732212][ T6104]  ? exc_page_fault+0x9f/0xf0
[   59.732229][ T6104]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.732241][ T6104] RIP: 0033:0x7f00f218e929
[   59.732252][ T6104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   59.732263][ T6104] RSP: 002b:00007f00f301e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   59.732276][ T6104] RAX: ffffffffffffffda RBX: 00007f00f23b5fa0 RCX: 00007f00f218e929
[   59.732284][ T6104] RDX: 0000000000000039 RSI: 0000200000000500 RDI: 000000000000000a
[   59.732292][ T6104] RBP: 00007f00f2210b39 R08: 0000000000000000 R09: 0000000000000000
[   59.732299][ T6104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   59.732306][ T6104] R13: 0000000000000000 R14: 00007f00f23b5fa0 R15: 00007fff0f34f748
[   59.732324][ T6104]  </TASK>
[   60.012031][ T5202] Bluetooth: hci0: command tx timeout
[   60.173166][ T5202] Bluetooth: hci2: command tx timeout
[   60.186412][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.294209][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.365200][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.419213][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.530934][   T12] bridge_slave_1: left allmulticast mode
[   60.542154][   T12] bridge_slave_1: left promiscuous mode
[   60.545441][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.554730][   T12] bridge_slave_0: left allmulticast mode
[   60.558204][   T12] bridge_slave_0: left promiscuous mode
[   60.560584][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.777585][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   60.783402][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   60.787236][   T12] bond0 (unregistering): Released all slaves
[   60.989685][   T12] hsr_slave_0: left promiscuous mode
[   60.992628][   T12] hsr_slave_1: left promiscuous mode
[   60.994742][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.997175][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   61.001014][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.004841][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   61.018703][   T12] veth1_macvtap: left promiscuous mode
[   61.020738][   T12] veth0_macvtap: left promiscuous mode
[   61.023737][   T12] veth1_vlan: left promiscuous mode
[   61.025512][   T12] veth0_vlan: left promiscuous mode
[   61.328104][   T12] team0 (unregistering): Port device team_slave_1 removed
[   61.352893][   T12] team0 (unregistering): Port device team_slave_0 removed
[   61.987940][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.048589][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.124014][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.187557][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.328207][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.384581][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.424650][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.480539][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.568414][   T12] bridge_slave_1: left allmulticast mode
[   62.570768][   T12] bridge_slave_1: left promiscuous mode
[   62.575869][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.583441][   T12] bridge_slave_0: left allmulticast mode
[   62.585824][   T12] bridge_slave_0: left promiscuous mode
[   62.588276][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.596013][   T12] bridge_slave_1: left allmulticast mode
[   62.598385][   T12] bridge_slave_1: left promiscuous mode
[   62.600752][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.607663][   T12] bridge_slave_0: left allmulticast mode
[   62.609984][   T12] bridge_slave_0: left promiscuous mode
[   62.613985][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.944300][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   62.949933][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   62.955582][   T12] bond0 (unregistering): Released all slaves
[   63.180544][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   63.188203][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   63.193905][   T12] bond0 (unregistering): Released all slaves
[   63.564168][   T12] hsr_slave_0: left promiscuous mode
[   63.567005][   T12] hsr_slave_1: left promiscuous mode
[   63.569720][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.573426][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.577256][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.580331][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.591296][   T12] hsr_slave_0: left promiscuous mode
[   63.597012][   T12] hsr_slave_1: left promiscuous mode
[   63.599764][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.604988][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.608665][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.613625][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.635298][   T12] veth1_macvtap: left promiscuous mode
[   63.637659][   T12] veth0_macvtap: left promiscuous mode
[   63.640069][   T12] veth1_vlan: left promiscuous mode
[   63.643851][   T12] veth0_vlan: left promiscuous mode
[   63.647453][   T12] veth1_macvtap: left promiscuous mode
[   63.649809][   T12] veth0_macvtap: left promiscuous mode
[   63.653126][   T12] veth1_vlan: left promiscuous mode
[   63.655304][   T12] veth0_vlan: left promiscuous mode
[   64.008728][   T12] team0 (unregistering): Port device team_slave_1 removed
[   64.044246][   T12] team0 (unregistering): Port device team_slave_0 removed
[   64.405337][   T12] team0 (unregistering): Port device team_slave_1 removed
[   64.424844][   T12] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
08:49:39  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000000 RCX=1ffffffff33902b2 RDX=0000000000000001
RSI=0000000000000004 RDI=ffffc9000066f6c0 RBP=0000000000212008 RSP=ffffc9000066f7e0
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffff520000cded8
R12=ffff888035d54000 R13=ffff888035d55000 R14=1ffff110220b079d R15=ffff888110583ce8
RIP=ffffffff84c7c082 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5856ee56c0 CR3=00000000268d4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffff00 XMM03=ffffffffffffff00 ffffffffffffff00
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f53ea611c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000f6a RDI=0000000000000f6b RBP=00000000000003f8 RSP=ffffc90002eef550
R8 =ffff888107eb0237 R9 =1ffff11020fd6046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48f4 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f00f301e6c0 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2ef1fffc CR3=000000010776e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f00f2384478 00007f00f2384450 XMM03=00007f00f2384488 00007f00f2384480
XMM04=00007f00f2eed100 00007f00f2384440 XMM05=00007f00f2384458 00007f00f23844a0
XMM06=00007f00f2384498 00007f00f2384490 XMM07=00007f00f2384488 00007f00f2384480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f00f2211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
