last executing test programs: 703.076287ms ago: executing program 1 (id=2): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="40000000100001042abd7000", @ANYRES32=0x0, @ANYBLOB="c683060098540b00200012800e00010069703665727370616e0000000c00028006000200ffff0000"], 0x40}, 0x1, 0xd, 0x0, 0x480c5}, 0x44000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="30003300c0000000ffffffffffff080211000000505050505050"], 0x4c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl(r3, 0x8b1b, &(0x7f0000000040)) 614.925987ms ago: executing program 1 (id=6): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc140000004788031c", 0xe, 0x4, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 574.432837ms ago: executing program 2 (id=3): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="03000300000000000000000000000000001f0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x2}, 0x20}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e20, @loopback}, 0x5, 0x0, 0x2}}, 0x2e) close(r6) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x18, 0x43, 0xa01, 0x70bd2d, 0x0, {0xa}, [@generic='b']}, 0x18}}, 0x4000) ioctl$PPPIOCSMAXCID(r3, 0x4010744d, &(0x7f0000000000)=0x20000002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) recvmsg(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xa3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 398.854861ms ago: executing program 4 (id=5): ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, &(0x7f0000000000)={0x0, 0x92}) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x9) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) write$tun(r2, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 334.529211ms ago: executing program 3 (id=4): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x600) write(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0004000000000000000000faff00000000ab180415b6000000000040"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f00000003c0)={0x0, @phonet={0x23, 0x81, 0x9e, 0x3}, @isdn={0x22, 0xc, 0x0, 0x1, 0x9}, @nfc={0x27, 0x0, 0x0, 0x2}, 0x68e7, 0x0, 0x0, 0x0, 0x400, &(0x7f00000002c0)='veth0_to_hsr\x00', 0x4, 0x0, 0x7ff}) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76", 0x390}], 0x1}}], 0x2, 0x4048884) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 281.830921ms ago: executing program 0 (id=1): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x6f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14) 205.865793ms ago: executing program 0 (id=7): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'macvlan1\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 95.793494ms ago: executing program 4 (id=8): unshare(0x400) r0 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt(r0, 0x0, 0x7f, &(0x7f0000001240)="d28fd8eb", 0x4) 214.51µs ago: executing program 4 (id=9): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1b9f", 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20008004) 0s ago: executing program 4 (id=10): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz0\x00', 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x40000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.76' (ED25519) to the list of known hosts. [ 28.946016][ T6538] cgroup: Unknown subsys name 'net' [ 29.072675][ T6538] cgroup: Unknown subsys name 'cpuset' [ 29.074785][ T6538] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.233879][ T6538] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.320357][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.323602][ T6559] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.323742][ T6559] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.324694][ T6558] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.327471][ T6558] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.328445][ T6558] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.328595][ T6558] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.332759][ T6554] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.332981][ T6554] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.334012][ T6554] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.341631][ T6119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.343875][ T6119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.346147][ T6119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.352753][ T6554] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.357456][ T6119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.358984][ T6119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.361883][ T6551] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.363421][ T6551] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.364993][ T6119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.366988][ T6119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.368630][ T6119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.370126][ T6119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.371988][ T6119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.376146][ T6559] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.383060][ T6559] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.522499][ T6552] chnl_net:caif_netlink_parms(): no params data found [ 30.547733][ T6553] chnl_net:caif_netlink_parms(): no params data found [ 30.585894][ T6549] chnl_net:caif_netlink_parms(): no params data found [ 30.608895][ T6548] chnl_net:caif_netlink_parms(): no params data found [ 30.611696][ T6552] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.612078][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.612171][ T6552] bridge_slave_0: entered allmulticast mode [ 30.612659][ T6552] bridge_slave_0: entered promiscuous mode [ 30.613934][ T6552] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.613957][ T6552] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.614018][ T6552] bridge_slave_1: entered allmulticast mode [ 30.614517][ T6552] bridge_slave_1: entered promiscuous mode [ 30.638911][ T6553] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.640212][ T6553] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.641429][ T6553] bridge_slave_0: entered allmulticast mode [ 30.641888][ T6553] bridge_slave_0: entered promiscuous mode [ 30.642672][ T6553] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.642693][ T6553] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.642783][ T6553] bridge_slave_1: entered allmulticast mode [ 30.643168][ T6553] bridge_slave_1: entered promiscuous mode [ 30.657468][ T6549] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.657586][ T6549] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.657658][ T6549] bridge_slave_0: entered allmulticast mode [ 30.658070][ T6549] bridge_slave_0: entered promiscuous mode [ 30.659684][ T6552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.660540][ T6552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.678497][ T6549] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.678553][ T6549] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.678622][ T6549] bridge_slave_1: entered allmulticast mode [ 30.679051][ T6549] bridge_slave_1: entered promiscuous mode [ 30.687807][ T6553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.688752][ T6553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.704945][ T6552] team0: Port device team_slave_0 added [ 30.705775][ T6552] team0: Port device team_slave_1 added [ 30.716403][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.717859][ T6548] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.717939][ T6548] bridge_slave_0: entered allmulticast mode [ 30.720702][ T6548] bridge_slave_0: entered promiscuous mode [ 30.724049][ T6549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.729219][ T6552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.729243][ T6552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.729263][ T6552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.733739][ T6553] team0: Port device team_slave_0 added [ 30.735230][ T6553] team0: Port device team_slave_1 added [ 30.738573][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.739745][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.741060][ T6548] bridge_slave_1: entered allmulticast mode [ 30.742564][ T6548] bridge_slave_1: entered promiscuous mode [ 30.747623][ T6549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.747962][ T6552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.747969][ T6552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.747982][ T6552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.750210][ T6557] chnl_net:caif_netlink_parms(): no params data found [ 30.765201][ T6548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.774886][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.774912][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.774927][ T6553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.775517][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.775525][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.775535][ T6553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.783689][ T6548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.793870][ T6549] team0: Port device team_slave_0 added [ 30.808501][ T6549] team0: Port device team_slave_1 added [ 30.816556][ T6552] hsr_slave_0: entered promiscuous mode [ 30.818126][ T6552] hsr_slave_1: entered promiscuous mode [ 30.820597][ T6553] hsr_slave_0: entered promiscuous mode [ 30.820887][ T6553] hsr_slave_1: entered promiscuous mode [ 30.821058][ T6553] debugfs: 'hsr0' already exists in 'hsr' [ 30.821091][ T6553] Cannot create hsr debugfs directory [ 30.823047][ T6548] team0: Port device team_slave_0 added [ 30.824081][ T6548] team0: Port device team_slave_1 added [ 30.830752][ T6549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.830782][ T6549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.830795][ T6549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.832593][ T6549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.832603][ T6549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.832617][ T6549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.858961][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.860068][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.861263][ T6548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.861980][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.861987][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.862000][ T6548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.882276][ T6557] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.883450][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.884615][ T6557] bridge_slave_0: entered allmulticast mode [ 30.886056][ T6557] bridge_slave_0: entered promiscuous mode [ 30.888329][ T6557] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.889419][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.890635][ T6557] bridge_slave_1: entered allmulticast mode [ 30.892180][ T6557] bridge_slave_1: entered promiscuous mode [ 30.911776][ T6548] hsr_slave_0: entered promiscuous mode [ 30.912051][ T6548] hsr_slave_1: entered promiscuous mode [ 30.912223][ T6548] debugfs: 'hsr0' already exists in 'hsr' [ 30.912233][ T6548] Cannot create hsr debugfs directory [ 30.924057][ T6549] hsr_slave_0: entered promiscuous mode [ 30.924372][ T6549] hsr_slave_1: entered promiscuous mode [ 30.924544][ T6549] debugfs: 'hsr0' already exists in 'hsr' [ 30.924554][ T6549] Cannot create hsr debugfs directory [ 30.937322][ T6557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.939053][ T6557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.960418][ T6557] team0: Port device team_slave_0 added [ 30.977777][ T6557] team0: Port device team_slave_1 added [ 31.010784][ T6557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.012402][ T6557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.016515][ T6557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.019288][ T6557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.019301][ T6557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.019321][ T6557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.055458][ T6557] hsr_slave_0: entered promiscuous mode [ 31.055773][ T6557] hsr_slave_1: entered promiscuous mode [ 31.055964][ T6557] debugfs: 'hsr0' already exists in 'hsr' [ 31.055975][ T6557] Cannot create hsr debugfs directory [ 31.095364][ T6552] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.098648][ T6552] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.105861][ T6552] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.108223][ T6552] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.133451][ T6553] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.138369][ T6552] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.138435][ T6552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.138600][ T6552] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.138629][ T6552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.142396][ T6553] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.144907][ T6553] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.155385][ T6553] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.175455][ T6552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.179352][ T6549] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.185649][ T6549] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.195440][ T6549] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.197663][ T6549] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.205243][ T6553] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.205294][ T6553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.205432][ T6553] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.205460][ T6553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.212571][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.213889][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.215196][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.216484][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.226003][ T6552] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.234714][ T6548] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.249382][ T6552] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.251166][ T6552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.256784][ T2008] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.256853][ T2008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.257197][ T2008] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.257212][ T2008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.261446][ T6548] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.264794][ T6548] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.274457][ T6548] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.301942][ T6553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.303147][ T6557] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.306578][ T6557] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.316520][ T6557] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.319222][ T6557] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.327121][ T6553] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.336239][ T4811] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.336282][ T4811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.336617][ T4811] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.336632][ T4811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.356139][ T6552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.363481][ T6553] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.393835][ T6549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.403783][ T6552] veth0_vlan: entered promiscuous mode [ 31.408097][ T6552] veth1_vlan: entered promiscuous mode [ 31.414662][ T6549] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.433817][ T6549] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.435574][ T6549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.439497][ T6552] veth0_macvtap: entered promiscuous mode [ 31.440519][ T6552] veth1_macvtap: entered promiscuous mode [ 31.445549][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.445588][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.446186][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.446303][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.455213][ T6552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.464002][ T6557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.474751][ T6552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.480712][ T6553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.482750][ T6557] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.488214][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.488258][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.496939][ T15] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.497220][ T15] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.497240][ T15] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.497253][ T15] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.514896][ T6548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.522947][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.522987][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.547877][ T6549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.556823][ T6553] veth0_vlan: entered promiscuous mode [ 31.564634][ T6548] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.567699][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.567746][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.574704][ T6557] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.574745][ T6557] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.577327][ T6553] veth1_vlan: entered promiscuous mode [ 31.581928][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.581962][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.608129][ T6553] veth0_macvtap: entered promiscuous mode [ 31.617631][ T2008] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.617672][ T2008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.620284][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.620313][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.627808][ T6553] veth1_macvtap: entered promiscuous mode [ 31.647127][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.649702][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.657866][ T15] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.658027][ T15] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.658158][ T15] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.658204][ T15] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.660853][ T6548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.669520][ T6557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.705636][ T6549] veth0_vlan: entered promiscuous mode [ 31.708641][ T6549] veth1_vlan: entered promiscuous mode [ 31.719857][ T6549] veth0_macvtap: entered promiscuous mode [ 31.723437][ T6549] veth1_macvtap: entered promiscuous mode [ 31.724255][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.724265][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.726301][ T6552] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.739001][ T6557] veth0_vlan: entered promiscuous mode [ 31.759189][ T6557] veth1_vlan: entered promiscuous mode [ 31.770096][ T6557] veth0_macvtap: entered promiscuous mode [ 31.774182][ T6549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.776607][ T6549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.793394][ T4811] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.793464][ T4811] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.793487][ T4811] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.793501][ T4811] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.794554][ T4811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.794566][ T4811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.799108][ T6557] veth1_macvtap: entered promiscuous mode [ 31.810837][ T6548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.856625][ T6548] veth0_vlan: entered promiscuous mode [ 31.858805][ T6557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.873279][ T6548] veth1_vlan: entered promiscuous mode [ 31.875878][ T726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.875909][ T726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.880792][ T6557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.884942][ T4811] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.885087][ T4811] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.885137][ T4811] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.885155][ T4811] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.903112][ T6667] syz.1.6 uses obsolete (PF_INET,SOCK_PACKET) [ 31.921036][ T6548] veth0_macvtap: entered promiscuous mode [ 31.939407][ T6669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 31.943138][ T6548] veth1_macvtap: entered promiscuous mode [ 31.949454][ T726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.954606][ T726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.968835][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.975574][ T2008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.979157][ T2008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.984504][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.986426][ T726] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.988129][ T726] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.990091][ T726] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.998723][ T726] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.016752][ T726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.016789][ T726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.089429][ T2008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.089467][ T2008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.126866][ T2008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.126903][ T2008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.322296][ T6682] tipc: Started in network mode [ 32.322335][ T6682] tipc: Node identity 9e461eb6cc44, cluster identity 4711 [ 32.322430][ T6682] tipc: Enabled bearer , priority 0 [ 32.353041][ T6559] Bluetooth: hci2: command tx timeout [ 32.353044][ T52] Bluetooth: hci0: command tx timeout [ 32.359779][ T6682] syzkaller0: entered promiscuous mode [ 32.364276][ T6682] syzkaller0: entered allmulticast mode [ 32.365011][ T6682] tipc: Resetting bearer [ 32.421616][ T52] Bluetooth: hci4: command tx timeout [ 32.421877][ T52] Bluetooth: hci3: command tx timeout [ 32.421959][ T52] Bluetooth: hci1: command tx timeout [ 32.426928][ T6680] tipc: Resetting bearer [ ** replaying previous printk message ** [ 32.436211][ T6688] ------------[ cut here ]------------ [ 32.436241][ T6688] verifier bug: not inlined functions bpf_probe_read_user#112 is missing func(1) [ 32.436292][ T6688] WARNING: CPU: 0 PID: 6688 at kernel/bpf/verifier.c:22840 bpf_check+0x1559c/0x15d8c [ 32.440639][ T6688] Modules linked in: [ 32.441273][ T6688] CPU: 0 UID: 0 PID: 6688 Comm: syz.4.10 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 32.443034][ T6688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 32.444508][ T6688] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 32.445621][ T6688] pc : bpf_check+0x1559c/0x15d8c [ 32.446373][ T6688] lr : bpf_check+0x1559c/0x15d8c [ 32.447085][ T6688] sp : ffff80009d597480 [ 32.447756][ T6688] x29: ffff80009d597980 x28: dfff800000000000 x27: 0000000000000006 [ 32.448879][ T6688] x26: 1ffff00012fffc13 x25: ffff800097ffe09c x24: ffff0000f8a80008 [ 32.450081][ T6688] x23: ffff800097ffe098 x22: ffff80008b144140 x21: ffff800092df4000 [ 32.451241][ T6688] x20: ffff800097ffe09c x19: 1ffff00012fffc13 x18: 00000000b7030000 [ 32.452375][ T6688] x17: ffff8000807fe850 x16: ffff80008b007340 x15: 0000000000000001 [ 32.453598][ T6688] x14: 1ffff00013ab2dc4 x13: 0000000000000000 x12: 0000000000000000 [ 32.454788][ T6688] x11: 0000000000080000 x10: 0000000000007971 x9 : 4dd32ad2a1192600 [ 32.455976][ T6688] x8 : 4dd32ad2a1192600 x7 : ffff800080563af4 x6 : 0000000000000000 [ 32.457120][ T6688] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 [ 32.458215][ T6688] x2 : 0000000000000002 x1 : 0000000100000000 x0 : 0000000000000000 [ 32.459358][ T6688] Call trace: [ 32.459816][ T6688] bpf_check+0x1559c/0x15d8c (P) [ 32.460606][ T6688] bpf_prog_load+0xec8/0x13fc [ 32.461360][ T6688] __sys_bpf+0x450/0x628 [ 32.462016][ T6688] __arm64_sys_bpf+0x80/0x98 [ 32.462692][ T6688] invoke_syscall+0x98/0x2b8 [ 32.463371][ T6688] el0_svc_common+0x130/0x23c [ 32.464121][ T6688] do_el0_svc+0x48/0x58 [ 32.464819][ T6688] el0_svc+0x58/0x180 [ 32.465503][ T6688] el0t_64_sync_handler+0x84/0x12c [ 32.466330][ T6688] el0t_64_sync+0x198/0x19c [ 32.467086][ T6688] irq event stamp: 240 [ 32.467712][ T6688] hardirqs last enabled at (239): [] vprintk_store+0x898/0xac8 [ 32.469074][ T6688] hardirqs last disabled at (240): [] el1_brk64+0x1c/0x48 [ 32.470385][ T6688] softirqs last enabled at (8): [] local_bh_enable+0x10/0x34 [ 32.471850][ T6688] softirqs last disabled at (6): [] local_bh_disable+0x10/0x34 [ 32.473237][ T6688] ---[ end trace 0000000000000000 ]--- [ 32.878495][ T6680] tipc: Disabling bearer [ 34.421638][ T6559] Bluetooth: hci0: command tx timeout [ 34.431674][ T6559] Bluetooth: hci2: command tx timeout [ 34.501494][ T6559] Bluetooth: hci1: command tx timeout [ 34.501512][ T6119] Bluetooth: hci4: command tx timeout [ 34.501782][ T52] Bluetooth: hci3: command tx timeout [ 36.511258][ T52] Bluetooth: hci0: command tx timeout [ 36.512270][ T6559] Bluetooth: hci2: command tx timeout [ 36.581634][ T6559] Bluetooth: hci1: command tx timeout [ 36.581669][ T6559] Bluetooth: hci3: command tx timeout [ 36.581691][ T6559] Bluetooth: hci4: command tx timeout [ 38.581273][ T52] Bluetooth: hci2: command tx timeout [ 38.582290][ T52] Bluetooth: hci0: command tx timeout [ 38.661499][ T6119] Bluetooth: hci4: command tx timeout [ 38.661511][ T52] Bluetooth: hci3: command tx timeout [ 38.661536][ T6119] Bluetooth: hci1: command tx timeout