last executing test programs:

3.401574988s ago: executing program 0 (id=310):
r0 = socket$tipc(0x1e, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000000)

3.391060328s ago: executing program 0 (id=312):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0xfffe, @local, 'geneve1\x00'}}, 0x1e)
close(0x3)

3.231345756s ago: executing program 0 (id=315):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x1, 0x4}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='rss_stat\x00', r2}, 0x18)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8)
sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000040), 0x4)
socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r3, 0x0, 0x0, 0x2400ed80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c)
writev(r3, &(0x7f0000001180)=[{&(0x7f0000001240)="06367d6d", 0x4}], 0x1)

3.170711031s ago: executing program 0 (id=317):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002000000b7000000000000009500c2000000000095000012000000000e09b9445761db3ed82f7be4b9f1628b9a5c40384cb45e62e827e611f21a01a76f66f616553959b478ad3c46bb20e558783b21dd5307760617deec8b1b75c00853ee69e33ba2c01c28950365dd46fcc9f2ac6d20197fd68292e8445824f49b6fba41a316e13e462e31ca00d2622d56318d78e271d364329e7ae732bf8dade587bb30d67e23f78662621b74aabfd8eaf399893bab50fed33101f5a1085f991877907bd6117db675155932860499977f7384a8d94e810492c284fc7cc784ed942bf11d72897a7896f5f8c957984312e9d39eaa478a3065afd52404cb058b"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
close(r4)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
close(r5)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000001ac0)=r5, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r5, 0x0, 0x0}, 0x10)

3.101736072s ago: executing program 0 (id=319):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x4c}]}, &(0x7f0000000080)='GPL\x00'}, 0x90)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4)
recvmmsg(r0, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/27, 0x1b}, 0x7}], 0x1, 0x45833af92e4b39ff, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000c40), 0x12)
r7 = openat$cgroup_procs(r4, &(0x7f0000000140)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000100), 0x12)
r8 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r9 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f00000000c0), 0x40)
pread64(r9, &(0x7f0000001840)=""/4096, 0x1000, 0x1)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a090400000000000000000200000044000480140001800c0001006e6f747261636b00040002802c0001800e000100696d6d656469617465000000180002800c00028005000100c400000008000140000000090900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a300000000014000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4002840}, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0)
socket$rds(0x15, 0x5, 0x0)
r10 = socket$inet_sctp(0x2, 0x800000000000001, 0x84)
setsockopt$inet_sctp_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000040)={0x0, 0xfffffffb, 0x7, 0x6}, 0x10)

762.040258ms ago: executing program 2 (id=403):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet6_int(r0, 0x29, 0x12, 0x0, &(0x7f0000000040)=0xfffffffffffffe44)

761.722002ms ago: executing program 2 (id=404):
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x12, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711217000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2568}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x11, 0xa, 0x300)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

681.631209ms ago: executing program 2 (id=405):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62)

681.322321ms ago: executing program 2 (id=406):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b700000030020100bca30000000000006603000040feffff7b0af0ff0000000079a4f0ff000000001f030000000000002e030200000000002604fdffffff000e61142400000000001d430000000000007a0a00fe0000001f61141c0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300000000000000000000000000000000062c7cf52e9624806a4833e1c0059e5a703ab9c2e9b38779270dc5e80af75d509b1a31fe6ed3f8c0172659256dc88de4e377c8a07e95ec5549ae47dc43b93a159a201be254048b9e0857ea3c736c761e686f9b3d0690f035617a12055b2cb3a03794d67b95e7f4fc6af323120c09d0503c8ce92e869e22bb2590299ad76d541f844d32f96184f74d433793bbd75ec15fb1497ce835445212421cb4e3ce08395c9055a2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)

611.994898ms ago: executing program 2 (id=407):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000093, 0x8000)
sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x2, 0x0, 0x0, 0x20040800}, 0x0)

611.707095ms ago: executing program 2 (id=408):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x5, 0x2}, 0x1c)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

340.235544ms ago: executing program 1 (id=410):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="4d60ec4f", 0x4}], 0x1)

339.915824ms ago: executing program 1 (id=411):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0x1, 0x6}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xffffff0c, 0x3, 0x80000001, 0xfffffff6}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

161.708523ms ago: executing program 1 (id=412):
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000ffdbdf250a0000005c0009800800020001000000080001000008000008000100070000000800010000080000080001000600000008000200ffffff7f0800020004000000080001007f0000bf0e978fc9ca88e40008000100911f000008"], 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c0009"], 0x30}}, 0x0)

161.341853ms ago: executing program 1 (id=413):
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={0x0, 0x0, 0x4020}, 0x18)

62.286837ms ago: executing program 1 (id=414):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b0af8ff00"], &(0x7f0000000440)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100))

61.858942ms ago: executing program 1 (id=415):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d)
write$tun(r1, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x5f, 0x61, 0x30]}}, &(0x7f0000001180)=""/4096, 0x1d, 0x1000, 0x1, 0x6}, 0x28)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e000000180002801400"], 0x48}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x10000000}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x44}}, 0x0)
sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0)
r5 = getpid()
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r6)
sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}}, 0x0)
r8 = socket(0x1e, 0x4, 0x0)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0x0, 0x720d, 0x148, 0x0, 0x148, 0x1b0, 0x240, 0x240, 0x1b0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x4, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x0, 'veth1_macvtap\x00', 'pim6reg1\x00', {}, {0xff}, 0x1d, 0x3, 0x49}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x5, 0x1, 0x3], 0x2}, {0xffffffffffffffff, [0x1, 0xb2cc575b459b5b33, 0x7, 0x2, 0x2]}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010900, 'pim6reg0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8)
setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r10 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r10, 0x84, 0x6b, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x30)
sendmmsg(r10, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmmsg(r8, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xd335}], 0x2, 0x2120, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000008000004000000000000613200000000000095b9c6ac547f4b261536b0411c296a12aa28239b9fe0ee6531764eb82dd13ba338e8e3c97c96339eff896e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x8, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x9}, @IFLA_BOND_XMIT_HASH_POLICY={0x5}]}}}]}, 0x44}}, 0x0)

0s ago: executing program 0 (id=416):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'dummy0\x00', 0x3}, 0x18)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:53906' (ED25519) to the list of known hosts.
syzkaller login: [   48.433792][ T5791] cgroup: Unknown subsys name 'net'
[   48.538599][ T5791] cgroup: Unknown subsys name 'cpuset'
[   48.543180][ T5791] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.286573][ T5791] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.209875][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.213051][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.215599][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.218386][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.221038][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.249088][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.251754][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.254497][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.257668][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.260357][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.279346][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.282131][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.284841][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.288577][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.291286][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.449356][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   54.568195][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   54.573525][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.577520][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.580781][ T5826] bridge_slave_0: entered allmulticast mode
[   54.584717][ T5826] bridge_slave_0: entered promiscuous mode
[   54.593344][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.596979][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.599954][ T5826] bridge_slave_1: entered allmulticast mode
[   54.603839][ T5826] bridge_slave_1: entered promiscuous mode
[   54.687070][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.708396][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.763211][ T5826] team0: Port device team_slave_0 added
[   54.765414][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.768144][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.770531][ T5831] bridge_slave_0: entered allmulticast mode
[   54.774092][ T5831] bridge_slave_0: entered promiscuous mode
[   54.779434][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   54.792198][ T5826] team0: Port device team_slave_1 added
[   54.808088][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.810486][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.812993][ T5831] bridge_slave_1: entered allmulticast mode
[   54.816002][ T5831] bridge_slave_1: entered promiscuous mode
[   54.861766][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.864002][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.873226][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.899829][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.902751][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.914573][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.921987][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.947385][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.991975][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.994990][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.999186][ T5833] bridge_slave_0: entered allmulticast mode
[   55.003094][ T5833] bridge_slave_0: entered promiscuous mode
[   55.033279][ T5831] team0: Port device team_slave_0 added
[   55.036946][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.039965][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.043145][ T5833] bridge_slave_1: entered allmulticast mode
[   55.047486][ T5833] bridge_slave_1: entered promiscuous mode
[   55.069868][ T5826] hsr_slave_0: entered promiscuous mode
[   55.073017][ T5826] hsr_slave_1: entered promiscuous mode
[   55.080397][ T5831] team0: Port device team_slave_1 added
[   55.112252][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.144676][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.161822][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.164742][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.176663][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.198207][ T5833] team0: Port device team_slave_0 added
[   55.200486][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.202705][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.211207][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.221644][ T5833] team0: Port device team_slave_1 added
[   55.269957][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.272261][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.280436][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.287708][ T5831] hsr_slave_0: entered promiscuous mode
[   55.289940][ T5831] hsr_slave_1: entered promiscuous mode
[   55.292111][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.294616][ T5831] Cannot create hsr debugfs directory
[   55.296935][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.299446][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.309408][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.371190][ T5833] hsr_slave_0: entered promiscuous mode
[   55.373471][ T5833] hsr_slave_1: entered promiscuous mode
[   55.376377][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.378902][ T5833] Cannot create hsr debugfs directory
[   55.518770][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.534664][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.554265][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.566880][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.636667][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.642503][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.660081][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.676596][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.713420][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.720683][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.730508][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.735339][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.778933][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.807989][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   55.819768][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.822475][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.847155][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.850115][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.858212][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.874846][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   55.890822][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.893509][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.909494][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.911805][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.930307][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.960136][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   55.968891][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.971251][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.993860][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.996862][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.012569][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.121961][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.153524][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.173592][ T5831] veth0_vlan: entered promiscuous mode
[   56.199492][ T5831] veth1_vlan: entered promiscuous mode
[   56.237219][ T5826] veth0_vlan: entered promiscuous mode
[   56.250553][ T5826] veth1_vlan: entered promiscuous mode
[   56.259241][ T5831] veth0_macvtap: entered promiscuous mode
[   56.267808][ T5829] Bluetooth: hci0: command tx timeout
[   56.274136][ T5831] veth1_macvtap: entered promiscuous mode
[   56.288961][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.305399][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.318420][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.324853][ T5826] veth0_macvtap: entered promiscuous mode
[   56.340519][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.344264][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.346505][ T5829] Bluetooth: hci2: command tx timeout
[   56.348195][   T55] Bluetooth: hci1: command tx timeout
[   56.354336][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.359843][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.367199][ T5826] veth1_macvtap: entered promiscuous mode
[   56.399732][ T5833] veth0_vlan: entered promiscuous mode
[   56.405227][ T5833] veth1_vlan: entered promiscuous mode
[   56.411417][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.422745][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.436103][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.439522][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.442499][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.445428][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.469525][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.478804][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.507643][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.510268][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.534532][ T5833] veth0_macvtap: entered promiscuous mode
[   56.547519][ T5833] veth1_macvtap: entered promiscuous mode
[   56.561540][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.580257][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.583502][ T4610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.595440][ T4610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.599659][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.614323][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.622986][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.627337][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.630079][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.645092][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.649910][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.678753][ T5893] GUP no longer grows the stack in syz.2.3 (5893): 200000006000-20000000a000 (200000005000)
[   56.689334][ T5893] CPU: 0 UID: 0 PID: 5893 Comm: syz.2.3 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   56.689356][ T5893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   56.689365][ T5893] Call Trace:
[   56.689370][ T5893]  <TASK>
[   56.689377][ T5893]  dump_stack_lvl+0x189/0x250
[   56.689409][ T5893]  ? __pfx_dump_stack_lvl+0x10/0x10
[   56.689422][ T5893]  ? __pfx__printk+0x10/0x10
[   56.689438][ T5893]  ? find_vma+0xe7/0x160
[   56.689479][ T5893]  __get_user_pages+0x2a60/0x30b0
[   56.689518][ T5893]  ? __pfx___get_user_pages+0x10/0x10
[   56.689529][ T5893]  ? __gup_longterm_locked+0xbf7/0x15b0
[   56.689540][ T5893]  ? down_read_killable+0x1d1/0x350
[   56.689554][ T5893]  ? try_get_folio+0x633/0x660
[   56.689569][ T5893]  __gup_longterm_locked+0xd66/0x15b0
[   56.689585][ T5893]  ? try_grab_folio_fast+0x1be/0x4f0
[   56.689606][ T5893]  ? gup_fast_fallback+0x1afc/0x2260
[   56.689622][ T5893]  gup_fast_fallback+0x1cd4/0x2260
[   56.689655][ T5893]  ? __pfx_gup_fast_fallback+0x10/0x10
[   56.689665][ T5893]  ? trace_contention_end+0x39/0x120
[   56.689681][ T5893]  ? __mutex_lock+0x330/0xe80
[   56.689693][ T5893]  ? futex_unqueue+0x22/0x240
[   56.689708][ T5893]  ? futex_unqueue+0x22/0x240
[   56.689720][ T5893]  ? futex_unqueue+0x22/0x240
[   56.689732][ T5893]  ? is_valid_gup_args+0x11f/0x200
[   56.689742][ T5893]  ? get_user_pages_fast+0x4d/0xb0
[   56.689754][ T5893]  __iov_iter_get_pages_alloc+0x39a/0xb40
[   56.689800][ T5893]  ? __pfx_pipe_clear_nowait+0x10/0x10
[   56.689818][ T5893]  ? get_futex_key+0x880/0x1640
[   56.689832][ T5893]  ? wait_for_space+0x24d/0x2d0
[   56.689848][ T5893]  iov_iter_get_pages2+0x5e/0xa0
[   56.689866][ T5893]  __se_sys_vmsplice+0x548/0x10d0
[   56.689896][ T5893]  ? __pfx___se_sys_vmsplice+0x10/0x10
[   56.689913][ T5893]  ? __pfx_futex_wait+0x10/0x10
[   56.689934][ T5893]  ? __lock_acquire+0xab9/0xd20
[   56.689975][ T5893]  ? do_pipe2+0xf7/0x170
[   56.689989][ T5893]  ? rcu_is_watching+0x15/0xb0
[   56.690006][ T5893]  ? do_syscall_64+0xbe/0x3b0
[   56.690024][ T5893]  do_syscall_64+0xfa/0x3b0
[   56.690035][ T5893]  ? lockdep_hardirqs_on+0x9c/0x150
[   56.690055][ T5893]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.690066][ T5893]  ? exc_page_fault+0x9f/0xf0
[   56.690080][ T5893]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.690091][ T5893] RIP: 0033:0x7fd59bb8e929
[   56.690102][ T5893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   56.690111][ T5893] RSP: 002b:00007fd59ca1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[   56.690125][ T5893] RAX: ffffffffffffffda RBX: 00007fd59bdb5fa0 RCX: 00007fd59bb8e929
[   56.690134][ T5893] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000e
[   56.690141][ T5893] RBP: 00007fd59bc10b39 R08: 0000000000000000 R09: 0000000000000000
[   56.690147][ T5893] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[   56.690154][ T5893] R13: 0000000000000000 R14: 00007fd59bdb5fa0 R15: 00007ffca39d71d8
[   56.690170][ T5893]  </TASK>
[   56.891414][ T4610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.940919][ T4610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.975132][ T5903] bridge0: entered promiscuous mode
[   56.982923][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.992473][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.093356][ T5907] netlink: 'syz.0.1': attribute type 13 has an invalid length.
[   57.098355][ T5905] Cannot find set identified by id 1 to match
[   57.101447][ T5905] syz.1.8 uses obsolete (PF_INET,SOCK_PACKET)
[   57.221051][ T5915] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12'.
[   57.456660][ T5927] trusted_key: syz.1.18 sent an empty control message without MSG_MORE.
[   57.584693][   T24] IPVS: starting estimator thread 0...
[   57.638968][ T5937] Bluetooth: MGMT ver 1.23
[   57.710183][ T5935] IPVS: using max 78 ests per chain, 187200 per kthread
[   57.943682][ T5962] netlink: 32 bytes leftover after parsing attributes in process `syz.1.33'.
[   58.019623][ T5971] netlink: 'syz.2.38': attribute type 1 has an invalid length.
[   58.032325][ T5974] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.347052][   T55] Bluetooth: hci0: command tx timeout
[   58.394186][ T6003] netlink: 28 bytes leftover after parsing attributes in process `syz.2.53'.
[   58.398574][ T6003] netlink: 28 bytes leftover after parsing attributes in process `syz.2.53'.
[   58.426049][   T55] Bluetooth: hci2: command tx timeout
[   58.436690][   T55] Bluetooth: hci1: command tx timeout
[   58.873204][ T6034] netlink: 288 bytes leftover after parsing attributes in process `syz.0.67'.
[   58.977184][ T6040] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.990127][ T6040] bond0: (slave rose0): Enslaving as an active interface with an up link
[   59.834111][ T6099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.89'.
[   60.061201][ T6118] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[   60.282433][ T6133] netlink: 28 bytes leftover after parsing attributes in process `syz.1.104'.
[   60.308501][ T6137] xt_CONNSECMARK: invalid mode: 254
[   60.355435][ T6139] netlink: 176 bytes leftover after parsing attributes in process `syz.1.107'.
[   60.425871][ T5829] Bluetooth: hci0: command tx timeout
[   60.507576][ T5829] Bluetooth: hci1: command tx timeout
[   60.509811][ T5829] Bluetooth: hci2: command tx timeout
[   60.723332][ T6171] Zero length message leads to an empty skb
[   60.798272][ T6181] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   60.922926][ T6190] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.097121][ T6197] netlink: 'syz.0.130': attribute type 10 has an invalid length.
[   61.099719][ T6197] netlink: 40 bytes leftover after parsing attributes in process `syz.0.130'.
[   61.102800][ T6197] dummy0: entered promiscuous mode
[   61.118865][ T6197] dummy0: entered allmulticast mode
[   61.127946][ T6197] bridge0: port 3(dummy0) entered blocking state
[   61.135930][ T6197] bridge0: port 3(dummy0) entered disabled state
[   61.148125][ T6197] bridge0: port 3(dummy0) entered blocking state
[   61.151102][ T6197] bridge0: port 3(dummy0) entered forwarding state
[   61.223200][ T6201] IPVS: Error joining to the multicast group
[   61.284876][ T6205] pimreg: entered allmulticast mode
[   62.211329][ T6240] netlink: 156 bytes leftover after parsing attributes in process `syz.1.147'.
[   62.268017][ T6251] netlink: 36 bytes leftover after parsing attributes in process `syz.0.154'.
[   62.277350][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.154'.
[   62.501363][ T6270] netlink: 36 bytes leftover after parsing attributes in process `syz.0.164'.
[   62.507747][ T5829] Bluetooth: hci0: command tx timeout
[   62.586794][   T55] Bluetooth: hci1: command tx timeout
[   62.588634][ T5829] Bluetooth: hci2: command tx timeout
[   62.663453][ T6281] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.168'.
[   63.173807][ T6321] netlink: 104 bytes leftover after parsing attributes in process `syz.2.188'.
[   63.554838][ T6349] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.197'.
[   63.567036][ T6345] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.197'.
[   63.802970][ T6366] netlink: 'syz.0.203': attribute type 1 has an invalid length.
[   63.817793][ T6366] netlink: 'syz.0.203': attribute type 2 has an invalid length.
[   63.821859][ T6366] netlink: 'syz.0.203': attribute type 8 has an invalid length.
[   63.824964][ T6366] netlink: 1148 bytes leftover after parsing attributes in process `syz.0.203'.
[   63.994856][ T6379] bridge1: entered allmulticast mode
[   64.066990][ T6387] Set syz0 is full, maxelem 0 reached
[   64.248029][ T6402] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   64.352004][ T6412] netlink: 'syz.1.217': attribute type 8 has an invalid length.
[   64.587364][ T6430] netlink: 24 bytes leftover after parsing attributes in process `syz.2.226'.
[   64.885493][ T6457] netlink: zone id is out of range
[   64.988473][ T6472] nbd: must specify at least one socket
[   65.022794][ T6476] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   65.033911][ T6463] bridge0: entered promiscuous mode
[   65.038326][ T6463] vlan2: entered promiscuous mode
[   65.050728][ T6478] netlink: 180 bytes leftover after parsing attributes in process `syz.2.240'.
[   65.344521][ T6502] warning: `syz.1.257' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.481496][ T6516] netlink: 'syz.1.263': attribute type 6 has an invalid length.
[   66.075440][ T6559] bridge0: port 3(dummy0) entered disabled state
[   66.077990][ T6559] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.082051][ T6559] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.259551][ T6559] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.299722][ T6559] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.373284][ T6559] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.378757][ T6559] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.382079][ T6559] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.388058][ T6559] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.395513][ T6559] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[   67.486446][ T6651] Driver unsupported XDP return value 0 on prog  (id 56) dev N/A, expect packet loss!
[   67.551056][ T6655] netlink: 'syz.1.326': attribute type 33 has an invalid length.
[   67.554157][ T6655] __nla_validate_parse: 4 callbacks suppressed
[   67.554165][ T6655] netlink: 152 bytes leftover after parsing attributes in process `syz.1.326'.
[   67.870996][ T6681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'.
[   67.889987][ T6683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.340'.
[   68.663772][ T6746] netlink: 'syz.2.370': attribute type 10 has an invalid length.
[   68.667231][ T6746] netlink: 40 bytes leftover after parsing attributes in process `syz.2.370'.
[   68.679430][ T6746] team0: Port device geneve0 added
[   68.711207][ T6748] ip6tnl1: entered promiscuous mode
[   68.718413][ T6748] ip6tnl1: entered allmulticast mode
[   68.957756][ T6774] netlink: 'syz.2.384': attribute type 4 has an invalid length.
[   68.972267][ T6774] netlink: 'syz.2.384': attribute type 4 has an invalid length.
[   69.391565][ T6808] netlink: 'syz.2.398': attribute type 2 has an invalid length.
[   69.533704][ T6812] sctp: [Deprecated]: syz.2.400 (pid 6812) Use of struct sctp_assoc_value in delayed_ack socket option.
[   69.533704][ T6812] Use struct sctp_sack_info instead
[   70.120700][ T6837] tipc: Started in network mode
[   70.122536][ T6837] tipc: Node identity aebeb1b3e392, cluster identity 4711
[   70.125077][ T6837] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.128587][ T6837] syzkaller0: entered promiscuous mode
[   70.130484][ T6837] syzkaller0: entered allmulticast mode
[   70.147071][ T6837] tipc: Resetting bearer <eth:syzkaller0>
[   70.152090][ T6836] tipc: Resetting bearer <eth:syzkaller0>
[   70.160617][ T6836] tipc: Disabling bearer <eth:syzkaller0>
[   70.470458][ T6853] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0
[   70.507754][ T6856] 
[   70.510247][ T6856] =============================
[   70.511760][ T6856] WARNING: suspicious RCU usage
[   70.513327][ T6856] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[   70.517325][ T6856] -----------------------------
[   70.518970][ T6856] net/core/netclassid_cgroup.c:24 suspicious rcu_dereference_check() usage!
[   70.521811][ T6856] 
[   70.521811][ T6856] other info that might help us debug this:
[   70.521811][ T6856] 
[   70.525354][ T6856] 
[   70.525354][ T6856] rcu_scheduler_active = 2, debug_locks = 1
[   70.528230][ T6856] 1 lock held by syz.0.417/6856:
[   70.529893][ T6856]  #0: ffffffff8e13f340 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80
[   70.533221][ T6856] 
[   70.533221][ T6856] stack backtrace:
[   70.535177][ T6856] CPU: 0 UID: 0 PID: 6856 Comm: syz.0.417 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   70.535189][ T6856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   70.535195][ T6856] Call Trace:
[   70.535200][ T6856]  <TASK>
[   70.535203][ T6856]  dump_stack_lvl+0x189/0x250
[   70.535219][ T6856]  ? __pfx_dump_stack_lvl+0x10/0x10
[   70.535229][ T6856]  ? __pfx__printk+0x10/0x10
[   70.535242][ T6856]  ? print_lock_name+0xde/0x100
[   70.535255][ T6856]  lockdep_rcu_suspicious+0x140/0x1d0
[   70.535269][ T6856]  task_cls_state+0x1a5/0x1d0
[   70.535284][ T6856]  bpf_get_cgroup_classid_curr+0x18/0x60
[   70.535294][ T6856]  bpf_prog_841aec7193f618b3+0x1b/0x21
[   70.535302][ T6856]  bpf_prog_run_pin_on_cpu+0x6a/0x150
[   70.535314][ T6856]  bpf_prog_test_run_syscall+0x312/0x4b0
[   70.535325][ T6856]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[   70.535333][ T6856]  ? __fget_files+0x2a/0x420
[   70.535346][ T6856]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[   70.535355][ T6856]  bpf_prog_test_run+0x2c7/0x340
[   70.535365][ T6856]  __sys_bpf+0x4a4/0x860
[   70.535373][ T6856]  ? __pfx___sys_bpf+0x10/0x10
[   70.535383][ T6856]  ? exc_page_fault+0x76/0xf0
[   70.535396][ T6856]  ? rcu_is_watching+0x15/0xb0
[   70.535408][ T6856]  __x64_sys_bpf+0x7c/0x90
[   70.535419][ T6856]  do_syscall_64+0xfa/0x3b0
[   70.535428][ T6856]  ? lockdep_hardirqs_on+0x9c/0x150
[   70.535438][ T6856]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.535446][ T6856]  ? exc_page_fault+0x9f/0xf0
[   70.535457][ T6856]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.535464][ T6856] RIP: 0033:0x7fa01658e929
[   70.535472][ T6856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   70.535478][ T6856] RSP: 002b:00007fa017406038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   70.535487][ T6856] RAX: ffffffffffffffda RBX: 00007fa0167b5fa0 RCX: 00007fa01658e929
[   70.535493][ T6856] RDX: 0000000000000039 RSI: 0000200000000500 RDI: 000000000000000a
[   70.535499][ T6856] RBP: 00007fa016610b39 R08: 0000000000000000 R09: 0000000000000000
[   70.535504][ T6856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   70.535509][ T6856] R13: 0000000000000000 R14: 00007fa0167b5fa0 R15: 00007ffe273ae4c8
[   70.535520][ T6856]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   70.654880][ T6852] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   70.659619][ T6852] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   70.663146][ T6852] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   70.666843][ T6852] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   70.770119][ T6847] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   70.773885][ T6847] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.831045][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[   70.833307][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[   70.866293][ T6847] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   70.869731][ T6847] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.000588][ T6847] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   71.004781][ T6847] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.064113][ T6847] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   71.070489][ T6847] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.140082][ T6847] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   71.143008][ T6847] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.157683][ T6847] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   71.163206][ T6847] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.183209][ T6847] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   71.187680][ T6847] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.196900][ T6847] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   71.199869][ T6847] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.396936][   T12] dummy0: left allmulticast mode
[   71.399248][   T12] dummy0: left promiscuous mode
[   71.402372][   T12] bridge0: port 3(dummy0) entered disabled state
[   71.417310][   T12] bridge_slave_1: left allmulticast mode
[   71.419888][   T12] bridge_slave_1: left promiscuous mode
[   71.422283][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.432690][   T12] bridge_slave_0: left allmulticast mode
[   71.434976][   T12] bridge_slave_0: left promiscuous mode
[   71.438216][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.693227][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   71.698629][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   71.701898][   T12] bond0 (unregistering): Released all slaves
[   71.710952][   T12] bond1 (unregistering): Released all slaves
[   71.827142][   T12] IPVS: stopping backup sync thread 6853 ...
[   72.005511][   T12] hsr_slave_0: left promiscuous mode
[   72.008466][   T12] hsr_slave_1: left promiscuous mode
[   72.010869][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.013769][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.267578][   T12] team0 (unregistering): Port device team_slave_1 removed
[   72.299749][   T12] team0 (unregistering): Port device team_slave_0 removed
[   72.882950][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.949001][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.976306][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.025894][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.149507][   T12] bridge_slave_1: left allmulticast mode
[   73.151916][   T12] bridge_slave_1: left promiscuous mode
[   73.154436][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.169365][   T12] bridge_slave_0: left allmulticast mode
[   73.171525][   T12] bridge_slave_0: left promiscuous mode
[   73.173993][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.306503][   T12] team0: Port device geneve0 removed
[   73.482327][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   73.486867][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   73.491444][   T12] bond0 (unregistering): Released all slaves
[   75.390867][   T12] hsr_slave_0: left promiscuous mode
[   75.393002][   T12] hsr_slave_1: left promiscuous mode
[   75.395069][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.398808][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.401842][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.404356][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.412403][   T12] veth1_macvtap: left promiscuous mode
[   75.414559][   T12] veth0_macvtap: left promiscuous mode
[   75.416749][   T12] veth1_vlan: left promiscuous mode
[   75.418745][   T12] veth0_vlan: left promiscuous mode
[   75.473216][   T12] pimreg (unregistering): left allmulticast mode
[   75.641712][   T12] team0 (unregistering): Port device team_slave_1 removed
[   75.660745][   T12] team0 (unregistering): Port device team_slave_0 removed
[   76.112911][   T12] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   76.117375][   T12] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.160659][   T12] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   76.164494][   T12] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.210278][   T12] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   76.213658][   T12] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.260085][   T12] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   76.263739][   T12] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.362603][   T12] bridge_slave_1: left allmulticast mode
[   76.365085][   T12] bridge_slave_1: left promiscuous mode
[   76.367119][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.370796][   T12] bridge_slave_0: left allmulticast mode
[   76.373084][   T12] bridge_slave_0: left promiscuous mode
[   76.375593][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.622963][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   76.628560][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   76.632360][   T12] bond0 (unregistering): Released all slaves
[   76.690876][   T12] tipc: Left network mode
[   76.856583][   T12] hsr_slave_0: left promiscuous mode
[   76.862663][   T12] hsr_slave_1: left promiscuous mode
[   76.864749][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.867889][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.870695][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.873053][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.895406][   T12] veth1_macvtap: left promiscuous mode
[   76.898155][   T12] veth0_macvtap: left promiscuous mode
[   76.899973][   T12] veth1_vlan: left promiscuous mode
[   76.901672][   T12] veth0_vlan: left promiscuous mode
[   77.165552][   T12] team0 (unregistering): Port device team_slave_1 removed
[   77.195264][   T12] team0 (unregistering): Port device team_slave_0 removed
[   77.788974][   T12] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
21:53:39  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000063 RBX=0000000000000063 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000f22 RDI=0000000000000f23 RBP=00000000000003f8 RSP=ffffc90002d6f550
R8 =ffff888021a70237 R9 =1ffff1100434e046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98a0 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa0174066c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2ff1fffc CR3=0000000029e1e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fa016785478 00007fa016785450 XMM03=00007fa016785488 00007fa016785480
XMM04=00007fa0172ed100 00007fa016785440 XMM05=00007fa016785458 00007fa0167854a0
XMM06=00007fa016785498 00007fa016785490 XMM07=00007fa016785488 00007fa016785480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fa016611c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffff888105179940 RBX=0000000000000000 RCX=ffffffff81649b84 RDX=0000000040000000
RSI=0000000000000008 RDI=ffff888105178000 RBP=ffffc90002ddf470 RSP=ffffc90002ddf298
R8 =ffff888105178007 R9 =1ffff11020a2f000 R10=dffffc0000000000 R11=ffffed1020a2f001
R12=ffff888105178000 R13=0000000000000001 R14=ffff888105178000 R15=ffff888105179940
RIP=ffffffff8223bbca RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fda4e9ce108 CR3=000000011a81c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=000000000000ff00 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
