last executing test programs: 8.255619596s ago: executing program 1 (id=2): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc8}}, 0x20000000) 8.123363159s ago: executing program 1 (id=6): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x40) 7.876107955s ago: executing program 1 (id=7): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd27, 0x25dfdbf6, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 7.018502343s ago: executing program 3 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002680)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x102, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000002c0)={0x420, 0x3f4, 0x20, 0x70bd2b, 0x25dfdbfc, {0x1, 0x1, 0x33, [0x80, 0x9, 0xa, 0x5, 0x3, 0x7f, 0x2, 0x2, 0x8, 0x36d, 0xe6e, 0xc1, 0xb, 0x4, 0x10, 0x7, 0x6d4, 0x9, 0x9, 0xd15, 0x7, 0x40, 0xffffff8c, 0x9, 0x8, 0x9, 0x11f, 0x3, 0x8, 0x88c8, 0x1, 0x3ff, 0x8, 0x5, 0xd, 0x6, 0xaa, 0x9, 0x4, 0x3, 0x9, 0xfffffffb, 0x3, 0x3, 0x400, 0x7, 0x8, 0x7, 0x234c000, 0x527, 0x0, 0x25a369d2, 0x10, 0x2, 0xb2e, 0x1ff, 0x7, 0x7, 0x80000000, 0xbb, 0xffffffff, 0x2f31, 0x0, 0x17a], [0x7, 0x1ff, 0x7fffffff, 0x7, 0x3, 0x1, 0xa2a7, 0x101, 0x3, 0x27, 0x7f, 0x9, 0x101, 0x200, 0x1, 0x850c, 0x5, 0x0, 0x80, 0x10001, 0xa07, 0x7, 0x9f9, 0x9e, 0x8, 0x8, 0x0, 0xffffbef3, 0x8001, 0x1, 0x5, 0x4, 0x6, 0x8, 0x9, 0xe91, 0x18ce, 0x18001, 0x7, 0x4e, 0x9, 0x8, 0x45, 0x8, 0x8001, 0x9, 0x9, 0x6c00, 0x0, 0x28, 0xd992, 0x80, 0xf, 0xe, 0x7fff, 0x8, 0xfffffff7, 0x8, 0x1eab, 0x7fff, 0x1, 0x5, 0x100, 0xffffce60], [0xfffff664, 0xb4c, 0x8, 0x4, 0x3, 0x1000, 0x10000, 0x6, 0x5, 0x80, 0x6, 0x7fffffff, 0x1000010, 0x80000, 0x3, 0x3, 0x3, 0xc13f, 0x9, 0x9, 0xe1f, 0x100, 0x5, 0x3ea, 0x183, 0x1, 0x3, 0x5488, 0x9, 0xe, 0x8, 0x0, 0x400000, 0xf0e, 0xb, 0x39, 0x5, 0xf7, 0xc133, 0x7a, 0xb, 0x66, 0x8, 0x4, 0x59, 0x9, 0x1, 0xe, 0x9, 0x6, 0x8, 0x7fffffff, 0x2, 0x8, 0x4, 0x3, 0x6, 0x7, 0xc468, 0x7, 0xfffffffb, 0x4ffb, 0x8, 0xfe91472f], [0xfffffff9, 0xfffffffe, 0x1, 0x0, 0xc000, 0x3b9, 0xfffffffd, 0x6000, 0x400, 0x7f, 0xbc45, 0x115, 0x7, 0x8, 0xf5, 0x5, 0x2e, 0x7, 0x0, 0x7fff, 0x8, 0x2, 0x9, 0x80, 0x400, 0x7, 0x4, 0x10, 0x4c, 0x10000, 0xfff, 0xa51f, 0x937a, 0x5, 0x5, 0x1, 0x6, 0x6, 0x8c, 0x4, 0xffffff67, 0x5, 0x2, 0xf, 0x0, 0x2, 0x200, 0x6a9d, 0x6, 0x352, 0xbaa, 0x7, 0x8, 0xf5, 0x1ff, 0x1, 0x80, 0x5, 0x2, 0x8, 0x6, 0x4, 0x6, 0xfffffff8]}}, 0x420}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) 6.336079055s ago: executing program 3 (id=15): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x70bd2c, 0x25dfdbfc, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x80}}, 0x0) 6.071854262s ago: executing program 3 (id=18): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d3f0006007c09e8fc55a10a0015000600142603600e1208000f0000000401a8000100fe80ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a", 0x88}], 0x1}, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="100000001314"], 0x10}, 0x1, 0x0, 0x0, 0x4001}, 0x4044000) 5.752691711s ago: executing program 3 (id=21): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'u'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 5.431963354s ago: executing program 3 (id=23): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = syz_open_procfs(0x0, 0x0) lseek(r3, 0x10001, 0x0) 4.163836782s ago: executing program 3 (id=26): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f00000002c0)}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x10}) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r7, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r8, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 3.565940508s ago: executing program 2 (id=28): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[], 0x28}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=@newlink={0x3c, 0x10, 0x403, 0x70bd29, 0x0, {0x0, 0x0, 0x74, r4, 0x0, 0x4010}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}}, 0x0) 3.296907222s ago: executing program 0 (id=30): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x1}}, 0x80, 0x0}, 0x20008010) 3.230236585s ago: executing program 2 (id=31): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) 3.027917832s ago: executing program 4 (id=32): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r2, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4, 0x20}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.027789062s ago: executing program 0 (id=33): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000}, 0x48) 2.91624103s ago: executing program 2 (id=34): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xa585ccb00c38cc75}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 2.755328696s ago: executing program 0 (id=35): socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001100)={r1, 0x0, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0x56d7, 0x4, 0x20, 0x5, "12b6f6932b03aa1571802122a5988817185cde0a83d2e2c9efd456d2ae1da87654127611a98856902f07e6af6e05e2051d31ed16805ba67802decd505596dc6d", "5222d8bb08173bb785aa85c639b9d75d2418c272e602769dc235a6052327e07f", [0x3, 0x2]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 2.68803379s ago: executing program 4 (id=36): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001f80)=r0, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x3, 0x6, 0x3, 0x0, 0x0, {0x7}}, 0x14}}, 0x24000894) 2.687833783s ago: executing program 2 (id=37): r0 = socket(0x10, 0x803, 0x0) socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in=@dev, @in6}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x24, 0x3, "ec7110"}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000000000, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.929824123s ago: executing program 4 (id=38): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x201, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xe09a, 0x80, 0x1, 0x341}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}) r3 = syz_clone(0x5c830200, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xc, 0x86}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) clock_gettime(0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000240)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) sendfile(r6, r6, 0x0, 0x9) sendmsg$nl_route_sched(r4, 0x0, 0x4000) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r3, &(0x7f00000000c0)='personality\x00') 1.739234848s ago: executing program 4 (id=39): mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$dri(0x0, 0x8, 0x200000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$read(0xb, 0x0, 0x0, 0x0) mkdir(0x0, 0x12) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x803, 0x0) 1.734194932s ago: executing program 0 (id=40): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a09040000000000000000020000000900020073797a32000000000900010073797a30004d0000200004801c0001800b000100657874686472"], 0x74}}, 0x20080) 1.219791061s ago: executing program 2 (id=41): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket(0x28, 0x1, 0x0) r1 = syz_io_uring_setup(0x112, &(0x7f0000000280)={0x0, 0x408c, 0x100, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x2121, 0x0, {0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) io_uring_enter(r1, 0x47f6, 0xb277, 0x0, 0x0, 0x0) 1.035137334s ago: executing program 0 (id=42): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 941.496972ms ago: executing program 4 (id=43): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x1, 0x70bd26, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe7, 0xfff2}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x4, 0x80000000, 0x866}}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47, 0x2}}}}]}]}, 0x68}}, 0x20000014) 237.550773ms ago: executing program 0 (id=44): openat$fb0(0xffffffffffffff9c, 0x0, 0x400601, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$snddsp(0xffffffffffffffff, &(0x7f00000003c0)="c942bde4bef5843809351af4f2cbb6555fa01a66edfc6e6f4dfe5025604f005c5c675944dfc7a254a549cb8d4a9de47bee28f544945b47331060f98b5cc8086dc24b12db4412c45e4ca6c95e73bd111e39723f9168f5dc92f9e7ece872f50891efa8e71a46a192ffa463b921f9e59c1880b26bb2575dea9fd274ab5cefd59bc3abd22efe4062ed61bfe14487c61d40491f474cbf0fefda8015ee6944e9a92eda4a6c5f5060254bc76b9d2c7acbc4722e5d77091c05933932cfc230283108820168d3c84307bc2f3b09a773b03f9e1764f606e93a1f61f1512bd5751367a2551b48d6f8971b1f2e69750f1ca23f465921f6c479719172", 0xf6) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x38, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x18, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 180.014767ms ago: executing program 2 (id=45): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 4 (id=46): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0x11) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.22' (ED25519) to the list of known hosts. [ 87.415752][ T5820] cgroup: Unknown subsys name 'net' [ 87.538429][ T5820] cgroup: Unknown subsys name 'cpuset' [ 87.547524][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.329505][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.060508][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.069342][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.070935][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.085484][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.093351][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.100678][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.103349][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.116776][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.125284][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.133515][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.143208][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.152486][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.162815][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.175125][ T5154] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.175280][ T9] cfg80211: failed to load regulatory.db [ 92.183177][ T5154] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.197371][ T5154] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.205670][ T5154] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.222754][ T5154] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.230683][ T5154] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.239017][ T5154] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.247295][ T5154] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.264329][ T5154] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.273223][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.282518][ T5154] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.292162][ T5154] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.920422][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 93.027830][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 93.160593][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 93.211922][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 93.335753][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 93.369334][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.377763][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.388217][ T5832] bridge_slave_0: entered allmulticast mode [ 93.396979][ T5832] bridge_slave_0: entered promiscuous mode [ 93.448837][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.456337][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.463583][ T5832] bridge_slave_1: entered allmulticast mode [ 93.471464][ T5832] bridge_slave_1: entered promiscuous mode [ 93.513682][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.521088][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.528660][ T5831] bridge_slave_0: entered allmulticast mode [ 93.536179][ T5831] bridge_slave_0: entered promiscuous mode [ 93.617062][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.624886][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.632061][ T5831] bridge_slave_1: entered allmulticast mode [ 93.639670][ T5831] bridge_slave_1: entered promiscuous mode [ 93.646520][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.653673][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.661680][ T5835] bridge_slave_0: entered allmulticast mode [ 93.669636][ T5835] bridge_slave_0: entered promiscuous mode [ 93.703424][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.711640][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.719676][ T5839] bridge_slave_0: entered allmulticast mode [ 93.727607][ T5839] bridge_slave_0: entered promiscuous mode [ 93.736152][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.743373][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.750752][ T5839] bridge_slave_1: entered allmulticast mode [ 93.759167][ T5839] bridge_slave_1: entered promiscuous mode [ 93.801239][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.811498][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.819398][ T5835] bridge_slave_1: entered allmulticast mode [ 93.826887][ T5835] bridge_slave_1: entered promiscuous mode [ 93.853773][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.866467][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.898025][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.976301][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.001937][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.016050][ T5832] team0: Port device team_slave_0 added [ 94.037796][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.051867][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.078050][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.089700][ T5832] team0: Port device team_slave_1 added [ 94.096298][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.103877][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.111720][ T5838] bridge_slave_0: entered allmulticast mode [ 94.119231][ T5838] bridge_slave_0: entered promiscuous mode [ 94.143805][ T5831] team0: Port device team_slave_0 added [ 94.155482][ T5834] Bluetooth: hci1: command tx timeout [ 94.187319][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.195781][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.203203][ T5838] bridge_slave_1: entered allmulticast mode [ 94.211919][ T5838] bridge_slave_1: entered promiscuous mode [ 94.234422][ T5834] Bluetooth: hci3: command tx timeout [ 94.234777][ T5154] Bluetooth: hci0: command tx timeout [ 94.240196][ T5831] team0: Port device team_slave_1 added [ 94.293482][ T5839] team0: Port device team_slave_0 added [ 94.314718][ T5154] Bluetooth: hci2: command tx timeout [ 94.315266][ T5834] Bluetooth: hci4: command tx timeout [ 94.331710][ T5835] team0: Port device team_slave_0 added [ 94.341122][ T5835] team0: Port device team_slave_1 added [ 94.348092][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.355122][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.381152][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.393816][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.400915][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.426979][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.456078][ T5839] team0: Port device team_slave_1 added [ 94.526270][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.539736][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.566163][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.573176][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.600150][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.612109][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.619589][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.645690][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.659192][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.666477][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.693592][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.753843][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.761349][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.788877][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.836866][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.843869][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.870504][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.884007][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.891460][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.918221][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.962243][ T5832] hsr_slave_0: entered promiscuous mode [ 94.968882][ T5832] hsr_slave_1: entered promiscuous mode [ 94.979875][ T5838] team0: Port device team_slave_0 added [ 95.036991][ T5838] team0: Port device team_slave_1 added [ 95.094333][ T5835] hsr_slave_0: entered promiscuous mode [ 95.100691][ T5835] hsr_slave_1: entered promiscuous mode [ 95.107646][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.116109][ T5835] Cannot create hsr debugfs directory [ 95.143123][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.151129][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.177778][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.200871][ T5831] hsr_slave_0: entered promiscuous mode [ 95.207394][ T5831] hsr_slave_1: entered promiscuous mode [ 95.213673][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.221890][ T5831] Cannot create hsr debugfs directory [ 95.271813][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.279424][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.306687][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.349170][ T5839] hsr_slave_0: entered promiscuous mode [ 95.356368][ T5839] hsr_slave_1: entered promiscuous mode [ 95.362915][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.371632][ T5839] Cannot create hsr debugfs directory [ 95.670498][ T5838] hsr_slave_0: entered promiscuous mode [ 95.677790][ T5838] hsr_slave_1: entered promiscuous mode [ 95.683983][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.691940][ T5838] Cannot create hsr debugfs directory [ 96.121612][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.137374][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.173176][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.191686][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.234929][ T5834] Bluetooth: hci1: command tx timeout [ 96.288832][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.311063][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.314999][ T5834] Bluetooth: hci0: command tx timeout [ 96.322596][ T5154] Bluetooth: hci3: command tx timeout [ 96.335294][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.365318][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.394787][ T5834] Bluetooth: hci2: command tx timeout [ 96.400520][ T5154] Bluetooth: hci4: command tx timeout [ 96.447651][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.465498][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.486963][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.501659][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.613992][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.631846][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.651962][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.685835][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.729591][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.821925][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.839181][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.853407][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.876951][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.887023][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.933133][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.940420][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.981157][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.988414][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.070131][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.121305][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.134006][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.176636][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.183818][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.231288][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.238639][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.359024][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.382045][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.411309][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.418540][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.453565][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.460803][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.576789][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.631818][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.653620][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.661385][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.721207][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.728640][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.773619][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.789102][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.848366][ T196] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.855655][ T196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.940781][ T196] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.948160][ T196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.979835][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.180346][ T5832] veth0_vlan: entered promiscuous mode [ 98.222900][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.263220][ T5832] veth1_vlan: entered promiscuous mode [ 98.318223][ T5154] Bluetooth: hci1: command tx timeout [ 98.394708][ T5154] Bluetooth: hci3: command tx timeout [ 98.400339][ T5154] Bluetooth: hci0: command tx timeout [ 98.467565][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.477320][ T5834] Bluetooth: hci2: command tx timeout [ 98.483649][ T5154] Bluetooth: hci4: command tx timeout [ 98.528607][ T5832] veth0_macvtap: entered promiscuous mode [ 98.551787][ T5832] veth1_macvtap: entered promiscuous mode [ 98.627715][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.665323][ T5835] veth0_vlan: entered promiscuous mode [ 98.681469][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.722551][ T5839] veth0_vlan: entered promiscuous mode [ 98.731857][ T5835] veth1_vlan: entered promiscuous mode [ 98.744013][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.771469][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.780307][ T5831] veth0_vlan: entered promiscuous mode [ 98.793704][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.815113][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.823884][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.837862][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.863108][ T5839] veth1_vlan: entered promiscuous mode [ 98.909685][ T5831] veth1_vlan: entered promiscuous mode [ 99.026421][ T5835] veth0_macvtap: entered promiscuous mode [ 99.045966][ T5839] veth0_macvtap: entered promiscuous mode [ 99.097584][ T5835] veth1_macvtap: entered promiscuous mode [ 99.116097][ T5839] veth1_macvtap: entered promiscuous mode [ 99.133137][ T5831] veth0_macvtap: entered promiscuous mode [ 99.187493][ T5831] veth1_macvtap: entered promiscuous mode [ 99.239076][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.266148][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.286983][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.303522][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.327923][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.367528][ T5839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.376880][ T5839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.386513][ T5839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.395287][ T5839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.410155][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.424017][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.436703][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.446080][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.460635][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.470314][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.479754][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.489125][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.537897][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.571375][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.583747][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.593091][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.603583][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.686209][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.721219][ T196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.730176][ T196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.859245][ T5838] veth0_vlan: entered promiscuous mode [ 99.892636][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.911158][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.013265][ T5838] veth1_vlan: entered promiscuous mode [ 100.057586][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.080159][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.091337][ T196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.128750][ T196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.247651][ T5838] veth0_macvtap: entered promiscuous mode [ 100.300194][ T5958] ip_vti0 speed is unknown, defaulting to 1000 [ 100.301503][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.310451][ T5838] veth1_macvtap: entered promiscuous mode [ 100.330337][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.368292][ T5958] ip_vti0 speed is unknown, defaulting to 1000 [ 100.401743][ T5154] Bluetooth: hci1: command tx timeout [ 100.409021][ T5958] ip_vti0 speed is unknown, defaulting to 1000 [ 100.430445][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.472930][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.485466][ T5154] Bluetooth: hci0: command tx timeout [ 100.491478][ T5154] Bluetooth: hci3: command tx timeout [ 100.503145][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.555175][ T5154] Bluetooth: hci4: command tx timeout [ 100.560788][ T5834] Bluetooth: hci2: command tx timeout [ 100.593132][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.736810][ T5838] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.768587][ T5838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.789856][ T5838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.800904][ T5838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.906312][ T5958] infiniband syz1: set active [ 100.934136][ T5958] infiniband syz1: added ip_vti0 [ 100.976089][ T2152] ip_vti0 speed is unknown, defaulting to 1000 [ 101.060079][ T5958] RDS/IB: syz1: added [ 101.064881][ T5958] smc: adding ib device syz1 with port count 1 [ 101.071641][ T5958] smc: ib device syz1 port 1 has pnetid [ 101.107085][ T2152] ip_vti0 speed is unknown, defaulting to 1000 [ 101.192603][ T5958] ip_vti0 speed is unknown, defaulting to 1000 [ 101.378104][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.457214][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.756759][ T5982] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.857371][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.889228][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.286778][ T5993] Zero length message leads to an empty skb [ 102.436984][ T5997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 102.472208][ T5996] netlink: 'syz.2.20': attribute type 29 has an invalid length. [ 102.550355][ T6001] netlink: 'syz.2.20': attribute type 29 has an invalid length. [ 102.770656][ T5958] ip_vti0 speed is unknown, defaulting to 1000 [ 105.228621][ T5958] ip_vti0 speed is unknown, defaulting to 1000 [ 105.603503][ T6046] loop4: detected capacity change from 0 to 524255232 [ 105.674353][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 105.761694][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 106.064734][ T6047] loop4: detected capacity change from 524255232 to 524287956 [ 106.485797][ T6056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.40'. [ 106.573863][ T6056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.40'. [ 107.445600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 107.707624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 107.797703][ T5958] ip_vti0 speed is unknown, defaulting to 1000 [ 108.137977][ T6068] tipc: Started in network mode [ 108.153464][ T6068] tipc: Node identity 2e0f168a10a3, cluster identity 4711 [ 108.172923][ T6071] [ 108.175766][ T6071] ============================= [ 108.181052][ T6071] WARNING: suspicious RCU usage [ 108.186614][ T6071] 6.16.0-syzkaller #0 Not tainted [ 108.191691][ T6071] ----------------------------- [ 108.194499][ T6068] tipc: Enabled bearer , priority 0 [ 108.196973][ T6071] net/core/netclassid_cgroup.c:24 suspicious rcu_dereference_check() usage! [ 108.212635][ T6071] [ 108.212635][ T6071] other info that might help us debug this: [ 108.212635][ T6071] [ 108.224581][ T6071] [ 108.224581][ T6071] rcu_scheduler_active = 2, debug_locks = 1 [ 108.226790][ T6069] syzkaller0: entered promiscuous mode [ 108.232681][ T6071] 1 lock held by syz.4.46/6071: [ 108.232700][ T6071] #0: ffffffff8e13f2c0 (rcu_read_lock_trace [ 108.242676][ T6069] syzkaller0: entered allmulticast mode [ 108.245785][ T6071] ){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80 [ 108.263811][ T6071] [ 108.263811][ T6071] stack backtrace: [ 108.270030][ T6071] CPU: 0 UID: 0 PID: 6071 Comm: syz.4.46 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 108.270059][ T6071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.270071][ T6071] Call Trace: [ 108.270080][ T6071] [ 108.270089][ T6071] dump_stack_lvl+0x189/0x250 [ 108.270125][ T6071] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.270150][ T6071] ? __pfx__printk+0x10/0x10 [ 108.270181][ T6071] ? print_lock_name+0xde/0x100 [ 108.270214][ T6071] lockdep_rcu_suspicious+0x140/0x1d0 [ 108.270243][ T6071] task_cls_state+0x1a5/0x1d0 [ 108.270265][ T6071] bpf_get_cgroup_classid_curr+0x18/0x60 [ 108.270306][ T6071] bpf_prog_cd2e46495e8fe8a5+0x20/0x26 [ 108.270327][ T6071] bpf_prog_run_pin_on_cpu+0x67/0x150 [ 108.270363][ T6071] bpf_prog_test_run_syscall+0x312/0x4b0 [ 108.270399][ T6071] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 108.270429][ T6071] ? __fget_files+0x2a/0x420 [ 108.270460][ T6071] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 108.270493][ T6071] bpf_prog_test_run+0x2c7/0x340 [ 108.270530][ T6071] __sys_bpf+0x4a4/0x860 [ 108.270564][ T6071] ? __pfx___sys_bpf+0x10/0x10 [ 108.270617][ T6071] ? rcu_is_watching+0x15/0xb0 [ 108.270650][ T6071] __x64_sys_bpf+0x7c/0x90 [ 108.270678][ T6071] do_syscall_64+0xfa/0x3b0 [ 108.270701][ T6071] ? lockdep_hardirqs_on+0x9c/0x150 [ 108.270723][ T6071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.270742][ T6071] ? clear_bhb_loop+0x60/0xb0 [ 108.270768][ T6071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.270787][ T6071] RIP: 0033:0x7f465cb8ebe9 [ 108.270805][ T6071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.270822][ T6071] RSP: 002b:00007f465da50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 108.270845][ T6071] RAX: ffffffffffffffda RBX: 00007f465cdb5fa0 RCX: 00007f465cb8ebe9 [ 108.270860][ T6071] RDX: 000000000000003a RSI: 0000200000000340 RDI: 000000000000000a [ 108.270874][ T6071] RBP: 00007f465cc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 108.270886][ T6071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.270898][ T6071] R13: 00007f465cdb6038 R14: 00007f465cdb5fa0 R15: 00007ffc348035c8 [ 108.270933][ T6071] [ 108.622259][ T6068] tipc: Resetting bearer [ 108.654761][ T6067] tipc: Resetting bearer [ 108.723041][ T6067] tipc: Disabling bearer [ 108.912470][ T5958] ip_vti0 speed is unknown, defaulting to 1000 [ 109.110663][ T5958] syz.1.7 (5958) used greatest stack depth: 19400 bytes left