last executing test programs: 758.030695ms ago: executing program 0 (id=7): r0 = socket$nl_crypto(0x10, 0x3, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000700)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x6, 0xee, &(0x7f0000000340)=""/238}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, 0x0, 0x0}, 0x94) sendmsg$netlink(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="e00000001000090500280000000000006f6d888f1d1c4e5ad85ce4966dbd0000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce2d712d2828da0a9423debbb86f9dba4a2dba4dbe076c292c28"], 0xe0}], 0x1, 0x0, 0x0, 0x80}, 0x0) 567.57794ms ago: executing program 0 (id=8): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000200000050005000020000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) 526.957758ms ago: executing program 0 (id=9): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x4e, 0x0, 0x4) sendmsg$kcm(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[{0x10, 0x110, 0xc}], 0x10}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000400000000000000000003850000002c000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1500}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000100)="7062f8d094f23cbd4b9d5f8186ab", 0x0, 0xf01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_USERDATA={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_USERDATA={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) 336.075812ms ago: executing program 1 (id=2): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) (fail_nth: 10) 215.961998ms ago: executing program 0 (id=10): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtaction={0x6c, 0x30, 0xffff, 0xfffffffe, 0x25dfdbf8, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xaf, 0x1, 0x6, 0x1, 0x44c}, @multicast2, @loopback, 0xff000000}}]}, {0x3e}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0xfcffffff, 0x20004000}, 0x40) 39.709786ms ago: executing program 0 (id=11): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000080)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)="7a7df7349475127adcb6392b7fb8270973575d32e1c0cc6af5af231fd44993bec13ef6cd50cabaae58fc340f619f8e6a06c344092db24b6ac157d5fe47dfbc4b98d5b8130c9a15e604af359954aac757c2d3d034cad04f53fb46f8372553ce06c2e925ad6f1206eb605318f620d3121c6cb61129747d3327ac6845b0ae7a5e253fa7a3997644f4c852a39dc9418bb00c9cdd6014b83eb2cc1cceb775f3599ffd62f860d45c4633df9d8ad8cec151c653ef02b8369fae64ffcfe619b6a66eef4b49232192", 0xc4}, {&(0x7f0000000100)="c3382edd63397c89e0ef2b4105d152176b32730611ab642ab6e0a79aba47693ea0251d81a8977f5566010d0c35a3ffdcffe9f7d073d6608c85d7a7d630aeb5d39dbf", 0x42}, {&(0x7f0000000380)="b7baf11f1d35e7ab8fdaf79c153e0b052ea7e83873183ec8b6c920bf0ff09ead3c0f492aa5eb60374f99e52439223476bafbd8c167d8f02df8bd09698e40ae8e9f153071d038e104dece3fc839f0652cc247db044fbdcc79c09f5254323c92a75215423aadfc74236232409d614c801e13ef3ab5a68872c4599bd66241f341c021bf98aba27dcbe60d87c6bc9ba87037f69b90d955a83efa36d143e895c1fd9ccc6d1e06", 0xa4}, {&(0x7f00000001c0)="e17b4828fa59a209ea3061215311d22e7311a9ecae1c520993f5f8e1800c15c99986ef73fe30909ad0ee90a4e8f7b1c67a185e5f2b344e7dbfc0584e5abbff75644262d2da9869eac69882e535068c9dc0b911cc8e38770c08009a8dab25732b", 0x60}, {&(0x7f0000000000)="858fc71b100135f959126a0e3a6d22d3ff62cf159cf919aa905d95", 0x1b}], 0x5, &(0x7f00000004c0)=[{0xc0, 0x3a, 0x200, "29d5c985148427d6817862ab9b0047da339ff3d577e1fbd3493b7af34a08d9aaeec86d7579f1491b7f721be5e4e9514e5bacefae398d094803555b67f1e6d30379a4cac5ee1ce09899965ce2bda2594078ea929f77a50698b917f289a0de0b30805b91d881226eca6bd142c4e1bdf252ac26dd09ca85253e2e8ef923f09a74e0ef207ccff48233884e719929be427e8e0a22fca2f144d198176103b70e531d2027afae3fdd7ab7c5a2"}, {0xd8, 0x115, 0x7, "7fb8cb2a7cfaecc471186055b0531bd4d2ab75426f647137ab185fd5d537bfc33c6e1d109c75512db276efe6d6cf4706191e86dfbdbea57e4a7ebfda493eac140cbf3a3e31d6d527475e43607105302fe97233ebad04b55ee7b365e998b6360b6d84f18310ce51ec390c27851e820acfa28b4a7ebbb18de032ad3c28f6e0d674fc4f718e5f598b78498ccc22c4679a75a6775a4c1838a20397773a1079eed9db1a5ed3411abbce0d16dd9563c11969188a5d800e94d967a5919fd14fdc69615f6fa6c0eba7bb"}, {0xb8, 0x114, 0xb, "1dda587ac1364c3832d522dd6443de01341f95d5ce90ac19f8f825177ce7563ec7a7128c59222577a6fec09ef296bbc7a437536e13055076ec77f3ea0452fc51fbb3c03df88990df3767507fb4fd501ad3709b126d5b680d3ab2e6a76633d4e65acc2cef7ee523ab586ff2eb98e08c0892850f4e58766dda23a8d2fa05262d6a1f66737f5395e8a0ad9e1c717a94714b450e8316ee7cf76a989af02453f6c47e5180bb87db59ecd4"}, {0xf0, 0x10d, 0x7, "46d6c18f162c074f93051b4397cf4ed35d74f68591f31d2ab73908a369f0ff4180ce89d6131a0ee43a4eb75ff09e86aac2921d79a817257097600c3f8f6b595458d0545af09a787c3ea4d6d6d861f0dc6b1ad6b6e1ee5d0b1dee0027d92bb265deaed62927320b354ec7a82932fbe2cdb92c31b04d4f72397110a91c5ffb446060297ee2c30382d77f1b2fcb17de356fa324b0d8e70e693f2419c70d1c82773ae24f371b792b54185670fb84f1d24e5bbe0dab9719ab8bc9bc09a4082419b7f3e48ef235f376c87896a299d7be07c05827dea833d20b77656d29"}, {0xd8, 0x10a, 0x5, "ae48f55ef138454d40e78eb572f44e9a9556406dd2afe89065e28feef50db58dd0dcba6fa2f298c6cc9b9dce98ec550b0dd507508e3f1a2703d20e80a9339c3ee4d5548e2fe768f2169ddcac46362d718a7804a69b715924e3e1219678137e5686d09c44f2a12faecadaea1405e5b186082dc26f5c1519d32649ef4f36f7921f43ae102272b763a69f3378cb9e81b16da06243842328a3c287063dfc888739488ee3b23352da293379df0ad93ac7cf0f8294535f41e07b9f72d7cadd2a7421b5e4a4d0aa4f"}, {0x98, 0x1, 0xfffffffd, "53ab0077f5bbb4da8626f2e4318d9d58b012a3b1e038f1fb47ebc0c97f3db017ac9a7489178938559f623e13c63ae3f9aabf826a4f717bbed6dbab55d959e8d4a5e5af45dda6359568135829c7e050b7a7cf09261538e2bc76c0aebbdd73f2d839284bad5b3bd224cf5e20ad1cf162c2e6317ed94b9466479123388100fdc984de9173"}], 0x4b0}, 0x4010) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, 0x2d, 0x200, 0x70bd25, 0xfefff7fb, {0xc}, [@typed={0xe, 0x3, 0x0, 0x0, @binary="47011ef61bcc146cd0bb"}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c193}, 0x28040) 39.310671ms ago: executing program 1 (id=12): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=@newtaction={0xe80, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xff26}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x1000, 0x4, 0x4, 0x5}, 0x1, 0x2}, [{0xdc8, 0xffffffff, 0x1, 0x4, 0x101, 0x4}, {0x28d, 0x7ff, 0x8, 0x0, 0x9, 0x2}, {0x401, 0xfdfffff5, 0x4, 0x8, 0x3, 0x8}, {0xabf, 0x9, 0x4, 0x5, 0x3, 0x983c3b9}, {0x11, 0x7ea, 0xfffff770, 0x9, 0xc, 0x6}, {0x7, 0x8, 0x1, 0x7f, 0x10001, 0x2}, {0x4, 0xe3e, 0x4f, 0x4, 0x6, 0x1}, {0x8ce, 0x8, 0x2, 0x4, 0xb6f, 0x8}, {0x3, 0x4, 0x0, 0x7dad, 0x7f, 0x6}, {0x1, 0x361, 0x7, 0x4, 0x2, 0x3}, {0x797e, 0x9, 0x1, 0xf56, 0x1, 0x8}, {0x5, 0x8, 0xff, 0x4ff537c1, 0x5, 0x5}, {0x4, 0xe8c, 0xcbf, 0x4, 0x4, 0x400}, {0x800, 0x4, 0xd4f7, 0x9, 0x400, 0xffffff00}, {0xffffffff, 0x4, 0xe546, 0x0, 0x300, 0xd789}, {0x5, 0x5, 0x7, 0x1, 0x7fffffff, 0x8}, {0x7fffffff, 0x401, 0x1, 0xffffffff, 0x380000, 0x2}, {0x1, 0x10000, 0xffffffff, 0x0, 0x17a, 0x6}, {0xff, 0x3ff, 0x91c7, 0x6cff, 0x40, 0x2}, {0x5, 0xffffff00, 0x0, 0x7f, 0x4010000, 0x10001}, {0x7, 0x5, 0x0, 0x1, 0x8, 0x4}, {0x6a7, 0x7, 0x5aa2, 0xb97, 0xb1fb, 0x4}, {0x9, 0x7fffffff, 0x2, 0x6, 0x1, 0x5}, {0xd, 0x3, 0xb3b0, 0x4, 0x80000000, 0x1}, {0xb, 0x0, 0x10000, 0x6, 0x5, 0xd}, {0x29, 0x7, 0x2, 0x1c0, 0x3, 0x10}, {0x5, 0x2, 0x401, 0x3, 0x5, 0x7a01}, {0x7, 0x1611c00, 0xfffffff3, 0x10000, 0x9, 0x101}, {0x1, 0x7, 0x4, 0x3, 0x7}, {0x3, 0x3, 0x1ff, 0x9, 0x6, 0x2}, {0x6bc5896b, 0x1, 0xb7, 0x4, 0x2, 0x9323}, {0x0, 0xfffffff8, 0x1, 0x3, 0xfffffff8, 0x480}, {0xf, 0x7, 0x8, 0x1fb, 0x7, 0x3}, {0x4, 0x5, 0x9, 0x2, 0x2, 0x401}, {0x922e, 0x0, 0x1944, 0x3, 0x9, 0x8}, {0x10001, 0xfffffffa, 0x9, 0x2, 0x3ff, 0xffffffff}, {0x2, 0x1eb8dd6d, 0x5, 0x8, 0x1, 0x6}, {0xa4, 0x7ff, 0xff, 0x1, 0xd1e5}, {0x0, 0x2, 0x0, 0x8, 0x5, 0x101}, {0x5, 0x1, 0x6, 0x7fffffff, 0x8, 0x7}, {0x3, 0x4, 0xadf, 0x0, 0x9, 0x5}, {0x4, 0x2, 0x2, 0x2, 0x7fff, 0x8}, {0x3, 0x8, 0x2, 0x38d9, 0x1, 0x4}, {0x0, 0x824c, 0x3, 0x3, 0xfff, 0x9}, {0x5, 0xc, 0x3, 0x80, 0x5, 0x8}, {0x10001, 0x1, 0x7, 0x4, 0x8, 0x7ff}, {0x7, 0xf34a, 0x9, 0x80000000, 0x2, 0x4}, {0x2, 0xe7, 0x8, 0x80000000, 0x0, 0x8001}, {0xb594, 0x0, 0x2, 0x2000, 0x1, 0x5}, {0x0, 0x5, 0x1, 0xbc, 0x8, 0x1}, {0x3, 0x401, 0x1, 0x6, 0x3, 0x80000001}, {0x4, 0xfff, 0x8, 0xb, 0x8, 0x9d6}, {0x5691221d, 0x5, 0x3ff, 0xa000, 0xd0e, 0x750e}, {0xd, 0x5, 0xfffffffc, 0x35ca, 0x1ff, 0x5}, {0x4, 0x0, 0x3fc, 0x5, 0x10, 0x4}, {0x0, 0x37, 0x5, 0x10, 0x1, 0x5f5ace3f}, {0xffffffff, 0xfffffffa, 0x227, 0x7fffffff, 0x8b, 0x2}, {0x7, 0x7, 0x0, 0x2, 0xc407, 0x7}, {0x8001, 0xd1, 0xff4, 0xb, 0x0, 0x1}, {0x6, 0xc, 0xb, 0xe7, 0x7}, {0x3, 0xb, 0xffffff46, 0x8, 0x7, 0x8}, {0x7, 0x6, 0x4b48, 0x8, 0x6, 0x7}, {0xe5f, 0x10000, 0x4, 0x4, 0x9, 0xf1}, {0x401, 0xd, 0x3, 0x1, 0x80000000, 0x1}, {0x400, 0x3, 0xe8ce, 0x1, 0x8, 0x10}, {0x5, 0x8ee9, 0x2, 0x3, 0x0, 0xc}, {0x7, 0x24d476e8, 0x10200, 0x80000001, 0x6, 0x600000}, {0x6a8, 0x8, 0x3, 0xfffffffb, 0x8000, 0x9}, {0xab, 0x7, 0x7, 0x3, 0x5}, {0x1, 0xa8, 0x7fffffff, 0xfffffff8, 0x7d, 0x9}, {0x40, 0x9da5, 0x10, 0x8, 0x6}, {0x200, 0x6, 0x1, 0x1, 0x9, 0x7f}, {0x8, 0xfffffffa, 0x7e2, 0x7a, 0x6, 0x5}, {0x5e, 0x15ec, 0x1ba09691, 0x5, 0x7fffffff, 0x100}, {0x0, 0x5, 0x1, 0x0, 0xfffffffb, 0x4}, {0x40, 0x3, 0x5, 0x3ff, 0x10000, 0x254}, {0x5, 0xd5, 0x80000000, 0xf, 0x101, 0x5ca}, {0x6, 0x1, 0xf, 0x4, 0x9, 0x3cf1}, {0x7, 0x6000, 0x6, 0xff, 0xd42, 0x100}, {0x1, 0x10000, 0x9, 0x9, 0x7f, 0x1}, {0xf, 0xb, 0x6, 0x8, 0x400, 0x9}, {0x400, 0xbcb, 0x3, 0x9, 0x16b9, 0x3}, {0x1, 0xffffffff, 0x9, 0x1000, 0x80, 0x3}, {0x800, 0x9, 0xff, 0x7fffffff, 0x0, 0xe5}, {0x4, 0x6, 0x4, 0x3ff, 0x3, 0x1000}, {0x80000000, 0x9, 0x6, 0x2, 0x7, 0x5}, {0x80e0470, 0x0, 0x0, 0x1f, 0x2, 0xffff0001}, {0x9, 0x8, 0x4, 0x1, 0x0, 0xfffffffa}, {0xbb3, 0x7, 0x1, 0x7, 0x94, 0x3}, {0x800, 0x5, 0x7, 0x3, 0xa3, 0x80000000}, {0x5, 0xfff, 0x20080, 0x9, 0x26, 0x10000}, {0x1, 0xb, 0x8, 0xffff, 0x0, 0x7}, {0x0, 0x7fffffff, 0x800, 0x6, 0x200f, 0x2}, {0xfffffffb, 0x7, 0x6, 0x8, 0x5, 0x3}, {0x5, 0xcf19, 0x8, 0x0, 0xfff, 0xfffffe00}, {0x2, 0x9, 0x2, 0x1, 0x4, 0x800}, {0xc000, 0x4, 0x807fff, 0x4, 0x1, 0x6}, {0xe37, 0x4, 0x1, 0x6, 0x67b9c8db, 0x4}, {0xac, 0xfffffffe, 0x8f, 0x8001, 0x1d, 0x26}, {0xfffff800, 0x7, 0xffffffff, 0x2, 0xaa6, 0xd4}, {0x3, 0xffffc055, 0x5b6, 0x8, 0xa9, 0x63e}, {0x8, 0xfffffff8, 0xb, 0x7fd1, 0x6, 0x1750e18e}, {0x1000, 0x2, 0x1000, 0x6, 0x6887, 0x4}, {0x80000001, 0x3, 0x89bf, 0x8, 0xffffffff, 0x5}, {0x1, 0x18, 0x190, 0x1, 0xc}, {0x41e2e32, 0x6, 0x6, 0x2, 0x0, 0x4}, {0x0, 0x2, 0x5e, 0x1000, 0x6, 0x8}, {0x7, 0x80000000, 0x20000, 0x0, 0x7fffffff}, {0x2, 0x8001, 0x6, 0x3, 0x8, 0xfffffff7}, {0x3, 0xc, 0x7, 0x9, 0x9, 0x20000009}, {0x6, 0x1000, 0x3, 0xfffffffb, 0x5267, 0x401}, {0x9a, 0x3, 0x8, 0xfffffff9, 0x2, 0x9}, {0x1, 0x8, 0xfffffffc, 0x1}, {0xac5a, 0xfffffffd, 0x8, 0x59f3, 0x2, 0x8}, {0x5, 0xeae, 0x5, 0xc1, 0x2e, 0x8}, {0x7fffffff, 0x9, 0x0, 0xfff, 0x3, 0x10}, {0x80000000, 0x9, 0x8211, 0x800, 0xace, 0xfffffff7}, {0x10000, 0x1e9d, 0xffff8d98, 0xe, 0xfffffffa}, {0x394cf3a4, 0x288, 0x7}, {0x6, 0xf4, 0x9, 0x3, 0x7fff, 0xf}, {0x10001, 0x8, 0x7, 0x2fe, 0x9, 0x4}, {0x7fffffff, 0x1, 0xb, 0x8af, 0x10001, 0xffffff47}, {0x6, 0x6, 0x2, 0x4, 0x0, 0xe}, {0x1, 0x5, 0x9a4, 0x8, 0x8000, 0xfffffbff}, {0x3718, 0xee8, 0x43, 0x0, 0x46, 0x200}, {0x8, 0x9, 0xffffa3fa, 0x7, 0xcb88, 0x6}, {0x1, 0x4, 0x5, 0x6, 0x2, 0xfffffff9}, {0x5, 0xffffffff, 0x61b, 0x4, 0x4, 0x100}], [{0x4, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x2, 0x1}, {0xac098f8bb5bf767, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x33b46010c087959a}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0xe41e256834d3e794}, {0x2}, {0xdf8910d898f3408a, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0xbbd25ed3eb5771ef}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {}, {}, {0x3, 0xcf7dcf0528e1043}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe80}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 0s ago: executing program 0 (id=13): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 4) socket$kcm(0x10, 0x2, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 46.068350][ T5496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.081872][ T5496] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.30' (ED25519) to the list of known hosts. syzkaller login: [ 65.290766][ T5814] cgroup: Unknown subsys name 'net' [ 65.398948][ T5814] cgroup: Unknown subsys name 'cpuset' [ 65.407800][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.759053][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.101884][ T5152] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.110667][ T5152] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.118382][ T5152] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.132896][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.140928][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.184420][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.230817][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.235734][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.238364][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.247629][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.255473][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.260835][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.273631][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.281706][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.286924][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.289860][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.303451][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.306745][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.317933][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.328456][ T5152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.336336][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.344503][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.344809][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.371131][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.379912][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.903099][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 70.055417][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 70.091059][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 70.188064][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 70.220469][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 70.248057][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.256121][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.263402][ T5824] bridge_slave_0: entered allmulticast mode [ 70.270673][ T5824] bridge_slave_0: entered promiscuous mode [ 70.321456][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.328766][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.336009][ T5824] bridge_slave_1: entered allmulticast mode [ 70.342993][ T5824] bridge_slave_1: entered promiscuous mode [ 70.421095][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.428904][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.436151][ T5828] bridge_slave_0: entered allmulticast mode [ 70.443066][ T5828] bridge_slave_0: entered promiscuous mode [ 70.489405][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.496621][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.503764][ T5828] bridge_slave_1: entered allmulticast mode [ 70.511329][ T5828] bridge_slave_1: entered promiscuous mode [ 70.520818][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.534615][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.542483][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.549796][ T5839] bridge_slave_0: entered allmulticast mode [ 70.556771][ T5839] bridge_slave_0: entered promiscuous mode [ 70.582062][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.596765][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.603957][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.611224][ T5839] bridge_slave_1: entered allmulticast mode [ 70.618188][ T5839] bridge_slave_1: entered promiscuous mode [ 70.686343][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.728461][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.735698][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.742878][ T5829] bridge_slave_0: entered allmulticast mode [ 70.750175][ T5829] bridge_slave_0: entered promiscuous mode [ 70.759872][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.770962][ T5824] team0: Port device team_slave_0 added [ 70.776898][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.784588][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.791931][ T5834] bridge_slave_0: entered allmulticast mode [ 70.799396][ T5834] bridge_slave_0: entered promiscuous mode [ 70.809780][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.819456][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.826938][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.834085][ T5829] bridge_slave_1: entered allmulticast mode [ 70.841372][ T5829] bridge_slave_1: entered promiscuous mode [ 70.860076][ T5824] team0: Port device team_slave_1 added [ 70.870152][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.877416][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.884576][ T5834] bridge_slave_1: entered allmulticast mode [ 70.891946][ T5834] bridge_slave_1: entered promiscuous mode [ 70.900490][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.974151][ T5828] team0: Port device team_slave_0 added [ 71.015456][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.026288][ T5828] team0: Port device team_slave_1 added [ 71.047607][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.054558][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.081135][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.095087][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.106473][ T5839] team0: Port device team_slave_0 added [ 71.114076][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.137840][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.144805][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.171289][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.184640][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.196120][ T5839] team0: Port device team_slave_1 added [ 71.196534][ T5831] Bluetooth: hci0: command tx timeout [ 71.214107][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.221133][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.247194][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.298916][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.305959][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.332288][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.366140][ T5831] Bluetooth: hci1: command tx timeout [ 71.378278][ T5829] team0: Port device team_slave_0 added [ 71.388056][ T5834] team0: Port device team_slave_0 added [ 71.394461][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.401537][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.428088][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.438704][ T5831] Bluetooth: hci4: command tx timeout [ 71.447946][ T5829] team0: Port device team_slave_1 added [ 71.453688][ T5842] Bluetooth: hci2: command tx timeout [ 71.459558][ T5831] Bluetooth: hci3: command tx timeout [ 71.466067][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.472460][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.490155][ T5834] team0: Port device team_slave_1 added [ 71.496535][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.503482][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.529973][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.604195][ T5824] hsr_slave_0: entered promiscuous mode [ 71.611202][ T5824] hsr_slave_1: entered promiscuous mode [ 71.640900][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.648290][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.674920][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.692754][ T5828] hsr_slave_0: entered promiscuous mode [ 71.699223][ T5828] hsr_slave_1: entered promiscuous mode [ 71.705280][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 71.711416][ T5828] Cannot create hsr debugfs directory [ 71.719192][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.726209][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.752657][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.764350][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.771695][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.797771][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.821496][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.828603][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.854542][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.924436][ T5839] hsr_slave_0: entered promiscuous mode [ 71.930847][ T5839] hsr_slave_1: entered promiscuous mode [ 71.937266][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 71.943002][ T5839] Cannot create hsr debugfs directory [ 72.072601][ T5829] hsr_slave_0: entered promiscuous mode [ 72.079076][ T5829] hsr_slave_1: entered promiscuous mode [ 72.085158][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 72.091399][ T5829] Cannot create hsr debugfs directory [ 72.107412][ T5834] hsr_slave_0: entered promiscuous mode [ 72.113799][ T5834] hsr_slave_1: entered promiscuous mode [ 72.120034][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 72.126049][ T5834] Cannot create hsr debugfs directory [ 72.543550][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.569740][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.587544][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.607359][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.633249][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.655215][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.678624][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.690439][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.760443][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.771371][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.781260][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.794218][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.921138][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.932150][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.943247][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.955463][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.064693][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.082725][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.099222][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.118212][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.138951][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.171467][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.229936][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.252897][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.271697][ T3441] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.279012][ T3441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.288205][ T5842] Bluetooth: hci0: command tx timeout [ 73.289359][ T3441] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.300713][ T3441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.321185][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.341722][ T750] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.348848][ T750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.373820][ T750] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.380950][ T750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.416710][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.436549][ T5842] Bluetooth: hci1: command tx timeout [ 73.444491][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.467371][ T3441] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.474467][ T3441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.498264][ T750] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.505362][ T750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.515801][ T5840] Bluetooth: hci4: command tx timeout [ 73.521256][ T5831] Bluetooth: hci3: command tx timeout [ 73.527547][ T5842] Bluetooth: hci2: command tx timeout [ 73.548511][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.593043][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.609943][ T750] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.617070][ T750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.657464][ T750] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.664637][ T750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.764544][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.832293][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.839486][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.879921][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.887101][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.020947][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.054478][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.108017][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.291975][ T5824] veth0_vlan: entered promiscuous mode [ 74.329028][ T5824] veth1_vlan: entered promiscuous mode [ 74.355294][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.461657][ T5824] veth0_macvtap: entered promiscuous mode [ 74.509677][ T5824] veth1_macvtap: entered promiscuous mode [ 74.545502][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.558738][ T5829] veth0_vlan: entered promiscuous mode [ 74.589229][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.599227][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.621110][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.637436][ T5829] veth1_vlan: entered promiscuous mode [ 74.667959][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.678952][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.694442][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.718262][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.802068][ T5834] veth0_vlan: entered promiscuous mode [ 74.810662][ T5828] veth0_vlan: entered promiscuous mode [ 74.829268][ T5829] veth0_macvtap: entered promiscuous mode [ 74.867413][ T5829] veth1_macvtap: entered promiscuous mode [ 74.878403][ T5834] veth1_vlan: entered promiscuous mode [ 74.901566][ T5828] veth1_vlan: entered promiscuous mode [ 74.910530][ T5839] veth0_vlan: entered promiscuous mode [ 74.916046][ T2138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.923884][ T2138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.935312][ T5839] veth1_vlan: entered promiscuous mode [ 74.988342][ T2138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.993200][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.010273][ T2138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.027411][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.067381][ T136] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.084990][ T5834] veth0_macvtap: entered promiscuous mode [ 75.097808][ T136] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.107472][ T136] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.129918][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.135121][ T136] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.155305][ T5834] veth1_macvtap: entered promiscuous mode [ 75.183882][ T5839] veth0_macvtap: entered promiscuous mode [ 75.202812][ T5828] veth0_macvtap: entered promiscuous mode [ 75.264442][ T5828] veth1_macvtap: entered promiscuous mode [ 75.284677][ T5839] veth1_macvtap: entered promiscuous mode [ 75.295435][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.342675][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.357236][ T5831] Bluetooth: hci0: command tx timeout [ 75.373157][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.408790][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.441224][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.450445][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.460628][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.489151][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.505252][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.506442][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.515754][ T5831] Bluetooth: hci1: command tx timeout [ 75.545865][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.570619][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.582574][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.595943][ T5840] Bluetooth: hci4: command tx timeout [ 75.601437][ T5831] Bluetooth: hci3: command tx timeout [ 75.606960][ T5842] Bluetooth: hci2: command tx timeout [ 75.633085][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.671648][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.711647][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.720571][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.739995][ T3441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.751514][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.766388][ T3441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.787410][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.810989][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.854659][ T5952] Illegal XDP return value 621853952 on prog (id 3) dev N/A, expect packet loss! [ 76.003527][ T3441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.021323][ T3441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.046984][ T5956] FAULT_INJECTION: forcing a failure. [ 76.046984][ T5956] name failslab, interval 1, probability 0, space 0, times 1 [ 76.083207][ T5956] CPU: 0 UID: 0 PID: 5956 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 76.083231][ T5956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 76.083248][ T5956] Call Trace: [ 76.083258][ T5956] [ 76.083266][ T5956] dump_stack_lvl+0x189/0x250 [ 76.083295][ T5956] ? __pfx____ratelimit+0x10/0x10 [ 76.083317][ T5956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.083334][ T5956] ? __pfx__printk+0x10/0x10 [ 76.083361][ T5956] ? __pfx___might_resched+0x10/0x10 [ 76.083377][ T5956] ? fs_reclaim_acquire+0x7d/0x100 [ 76.083404][ T5956] should_fail_ex+0x414/0x560 [ 76.083428][ T5956] should_failslab+0xa8/0x100 [ 76.083453][ T5956] __kmalloc_noprof+0xcb/0x800 [ 76.083472][ T5956] ? offload_action_alloc+0x2d/0x180 [ 76.083498][ T5956] offload_action_alloc+0x2d/0x180 [ 76.083522][ T5956] tcf_action_offload_add_ex+0x388/0x870 [ 76.083549][ T5956] ? __pfx_tcf_action_offload_add_ex+0x10/0x10 [ 76.083599][ T5956] ? tcf_action_fill_size+0x1c/0x2e0 [ 76.083621][ T5956] ? tcf_action_fill_size+0x1c/0x2e0 [ 76.083644][ T5956] tcf_action_init+0x341/0xab0 [ 76.083674][ T5956] ? __pfx_tcf_action_init+0x10/0x10 [ 76.083722][ T5956] ? __pfx___nla_validate_parse+0x10/0x10 [ 76.083779][ T5956] tc_ctl_action+0x430/0xbd0 [ 76.083810][ T5956] ? __pfx_tc_ctl_action+0x10/0x10 [ 76.083834][ T5956] ? rcu_is_watching+0x15/0xb0 [ 76.083900][ T5956] ? __pfx_tc_ctl_action+0x10/0x10 [ 76.083919][ T5956] rtnetlink_rcv_msg+0x77c/0xb70 [ 76.083945][ T5956] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 76.083965][ T5956] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 76.083984][ T5956] ? ref_tracker_free+0x63a/0x7d0 [ 76.084004][ T5956] ? __asan_memcpy+0x40/0x70 [ 76.084021][ T5956] ? __pfx_ref_tracker_free+0x10/0x10 [ 76.084038][ T5956] ? __skb_clone+0x63/0x7a0 [ 76.084063][ T5956] netlink_rcv_skb+0x208/0x470 [ 76.084081][ T5956] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 76.084104][ T5956] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 76.084131][ T5956] ? netlink_deliver_tap+0x2e/0x1b0 [ 76.084162][ T5956] netlink_unicast+0x82f/0x9e0 [ 76.084195][ T5956] ? __pfx_netlink_unicast+0x10/0x10 [ 76.084219][ T5956] ? netlink_sendmsg+0x642/0xb30 [ 76.084233][ T5956] ? skb_put+0x11b/0x210 [ 76.084259][ T5956] netlink_sendmsg+0x805/0xb30 [ 76.084284][ T5956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.084305][ T5956] ? aa_sock_msg_perm+0xf1/0x1b0 [ 76.084324][ T5956] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 76.084345][ T5956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.084362][ T5956] __sock_sendmsg+0x21c/0x270 [ 76.084385][ T5956] ____sys_sendmsg+0x505/0x820 [ 76.084415][ T5956] ? __pfx_____sys_sendmsg+0x10/0x10 [ 76.084446][ T5956] ? import_iovec+0x74/0xa0 [ 76.084472][ T5956] ___sys_sendmsg+0x21f/0x2a0 [ 76.084498][ T5956] ? __pfx____sys_sendmsg+0x10/0x10 [ 76.084528][ T5956] ? rcu_read_lock_any_held+0xb3/0x120 [ 76.084574][ T5956] ? __fget_files+0x2a/0x420 [ 76.084588][ T5956] ? __fget_files+0x3a0/0x420 [ 76.084614][ T5956] __x64_sys_sendmsg+0x19b/0x260 [ 76.084640][ T5956] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 76.084673][ T5956] ? __pfx_ksys_write+0x10/0x10 [ 76.084696][ T5956] ? do_syscall_64+0xbe/0xf80 [ 76.084720][ T5956] do_syscall_64+0xfa/0xf80 [ 76.084741][ T5956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.084762][ T5956] ? clear_bhb_loop+0x60/0xb0 [ 76.084782][ T5956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.084798][ T5956] RIP: 0033:0x7f4e82b8f749 [ 76.084817][ T5956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.084831][ T5956] RSP: 002b:00007f4e8397a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.084848][ T5956] RAX: ffffffffffffffda RBX: 00007f4e82de5fa0 RCX: 00007f4e82b8f749 [ 76.084860][ T5956] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 76.084870][ T5956] RBP: 00007f4e8397a090 R08: 0000000000000000 R09: 0000000000000000 [ 76.084880][ T5956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 76.084890][ T5956] R13: 00007f4e82de6038 R14: 00007f4e82de5fa0 R15: 00007ffd162cf058 [ 76.084919][ T5956] [ 76.085258][ T5834] ieee80211 phy9: Selected rate control algorithm 'minstrel_ht' [ 76.355111][ T5965] FAULT_INJECTION: forcing a failure. [ 76.355111][ T5965] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 76.355783][ T5965] [ 76.355790][ T5965] ====================================================== [ 76.355796][ T5965] WARNING: possible circular locking dependency detected [ 76.355808][ T5965] syzkaller #0 Not tainted [ 76.355816][ T5965] ------------------------------------------------------ [ 76.355822][ T5965] syz.0.13/5965 is trying to acquire lock: [ 76.355830][ T5965] ffffffff8df35b20 (console_owner){....}-{0:0}, at: vprintk_emit+0x321/0x5f0 [ 76.355871][ T5965] [ 76.355871][ T5965] but task is already holding lock: [ 76.355876][ T5965] ffff8880b893a7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 76.355908][ T5965] [ 76.355908][ T5965] which lock already depends on the new lock. [ 76.355908][ T5965] [ 76.355914][ T5965] [ 76.355914][ T5965] the existing dependency chain (in reverse order) is: [ 76.355923][ T5965] [ 76.355923][ T5965] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 76.355942][ T5965] _raw_spin_lock_nested+0x32/0x50 [ 76.355960][ T5965] raw_spin_rq_lock_nested+0x2a/0x140 [ 76.355973][ T5965] task_rq_lock+0xbc/0x470 [ 76.355985][ T5965] cgroup_move_task+0x92/0x2a0 [ 76.356000][ T5965] css_set_move_task+0x658/0x9e0 [ 76.356020][ T5965] cgroup_post_fork+0x1ef/0x7a0 [ 76.356038][ T5965] copy_process+0x3614/0x3950 [ 76.356052][ T5965] kernel_clone+0x21e/0x820 [ 76.356066][ T5965] user_mode_thread+0xdd/0x140 [ 76.356079][ T5965] rest_init+0x23/0x300 [ 76.356091][ T5965] start_kernel+0x3ae/0x410 [ 76.356103][ T5965] x86_64_start_reservations+0x24/0x30 [ 76.356120][ T5965] x86_64_start_kernel+0x143/0x1c0 [ 76.356136][ T5965] common_startup_64+0x13e/0x147 [ 76.356151][ T5965] [ 76.356151][ T5965] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 76.356171][ T5965] _raw_spin_lock_irqsave+0xa7/0xf0 [ 76.356192][ T5965] try_to_wake_up+0x67/0x12b0 [ 76.356209][ T5965] __wake_up_common_lock+0x137/0x1f0 [ 76.356227][ T5965] tty_port_default_wakeup+0xfb/0x170 [ 76.356244][ T5965] serial8250_tx_chars+0x72e/0x970 [ 76.356257][ T5965] serial8250_handle_irq+0x633/0xbb0 [ 76.356271][ T5965] serial8250_default_handle_irq+0xbf/0x200 [ 76.356288][ T5965] serial8250_interrupt+0x8d/0x180 [ 76.356306][ T5965] __handle_irq_event_percpu+0x285/0xa60 [ 76.356324][ T5965] handle_irq_event+0x8b/0x1e0 [ 76.356341][ T5965] handle_edge_irq+0x23b/0xa10 [ 76.356356][ T5965] __common_interrupt+0x141/0x1f0 [ 76.356373][ T5965] common_interrupt+0xb6/0xe0 [ 76.356385][ T5965] asm_common_interrupt+0x26/0x40 [ 76.356399][ T5965] __mutex_lock+0x152/0x1350 [ 76.356416][ T5965] __unix_dgram_recvmsg+0x1e1/0xd60 [ 76.356431][ T5965] sock_recvmsg+0x22c/0x270 [ 76.356447][ T5965] sock_read_iter+0x231/0x2f0 [ 76.356460][ T5965] vfs_read+0x55a/0xa30 [ 76.356475][ T5965] ksys_read+0x145/0x250 [ 76.356490][ T5965] do_syscall_64+0xfa/0xf80 [ 76.356506][ T5965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.356519][ T5965] [ 76.356519][ T5965] -> #2 (&tty->write_wait){-...}-{3:3}: [ 76.356539][ T5965] _raw_spin_lock_irqsave+0xa7/0xf0 [ 76.356554][ T5965] __wake_up_common_lock+0x2f/0x1f0 [ 76.356571][ T5965] tty_port_default_wakeup+0xfb/0x170 [ 76.356587][ T5965] serial8250_tx_chars+0x72e/0x970 [ 76.356600][ T5965] serial8250_handle_irq+0x633/0xbb0 [ 76.356613][ T5965] serial8250_default_handle_irq+0xbf/0x200 [ 76.356629][ T5965] serial8250_interrupt+0x8d/0x180 [ 76.356648][ T5965] __handle_irq_event_percpu+0x285/0xa60 [ 76.356665][ T5965] handle_irq_event+0x8b/0x1e0 [ 76.356682][ T5965] handle_edge_irq+0x23b/0xa10 [ 76.356697][ T5965] __common_interrupt+0x141/0x1f0 [ 76.356713][ T5965] common_interrupt+0xb6/0xe0 [ 76.356725][ T5965] asm_common_interrupt+0x26/0x40 [ 76.356738][ T5965] pv_native_safe_halt+0x13/0x20 [ 76.356754][ T5965] default_idle+0x13/0x20 [ 76.356772][ T5965] default_idle_call+0x73/0xb0 [ 76.356790][ T5965] do_idle+0x1ea/0x520 [ 76.356803][ T5965] cpu_startup_entry+0x44/0x60 [ 76.356816][ T5965] rest_init+0x2de/0x300 [ 76.356827][ T5965] start_kernel+0x3ae/0x410 [ 76.356839][ T5965] x86_64_start_reservations+0x24/0x30 [ 76.356855][ T5965] x86_64_start_kernel+0x143/0x1c0 [ 76.356871][ T5965] common_startup_64+0x13e/0x147 [ 76.356886][ T5965] [ 76.356886][ T5965] -> #1 (&port_lock_key){-...}-{3:3}: [ 76.356906][ T5965] _raw_spin_lock_irqsave+0xa7/0xf0 [ 76.356920][ T5965] serial8250_console_write+0x17e/0x1ba0 [ 76.356935][ T5965] console_flush_all+0x745/0xb60 [ 76.356951][ T5965] console_unlock+0xbb/0x190 [ 76.356966][ T5965] vprintk_emit+0x4f8/0x5f0 [ 76.356980][ T5965] _printk+0xcf/0x120 [ 76.356996][ T5965] register_console+0xa8b/0xf90 [ 76.357012][ T5965] univ8250_console_init+0x3a/0x70 [ 76.357030][ T5965] console_init+0xfc/0x3f0 [ 76.357046][ T5965] start_kernel+0x254/0x410 [ 76.357057][ T5965] x86_64_start_reservations+0x24/0x30 [ 76.357074][ T5965] x86_64_start_kernel+0x143/0x1c0 [ 76.357090][ T5965] common_startup_64+0x13e/0x147 [ 76.357104][ T5965] [ 76.357104][ T5965] -> #0 (console_owner){....}-{0:0}: [ 76.357123][ T5965] __lock_acquire+0x15a6/0x2cf0 [ 76.357136][ T5965] lock_acquire+0x117/0x340 [ 76.357147][ T5965] vprintk_emit+0x33d/0x5f0 [ 76.357162][ T5965] _printk+0xcf/0x120 [ 76.357178][ T5965] should_fail_ex+0x3f5/0x560 [ 76.357196][ T5965] strncpy_from_user+0x36/0x2c0 [ 76.357209][ T5965] strncpy_from_user_nofault+0x72/0x150 [ 76.357230][ T5965] bpf_probe_read_compat_str+0xe2/0x180 [ 76.357249][ T5965] bpf_prog_573c5a647519ba93+0x3e/0x44 [ 76.357261][ T5965] bpf_trace_run4+0x28e/0x4b0 [ 76.357275][ T5965] __bpf_trace_sched_switch+0x17a/0x1e0 [ 76.357294][ T5965] __traceiter_sched_switch+0x9d/0xd0 [ 76.357312][ T5965] __schedule+0x256b/0x5000 [ 76.357326][ T5965] preempt_schedule_irq+0xb5/0x150 [ 76.357345][ T5965] irqentry_exit+0x5d8/0x660 [ 76.357361][ T5965] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 76.357376][ T5965] bpf_test_timer_continue+0x1/0x320 [ 76.357389][ T5965] bpf_prog_test_run_flow_dissector+0x39c/0x5c0 [ 76.357403][ T5965] bpf_prog_test_run+0x2c7/0x340 [ 76.357419][ T5965] __sys_bpf+0x562/0x860 [ 76.357434][ T5965] __x64_sys_bpf+0x7c/0x90 [ 76.357447][ T5965] do_syscall_64+0xfa/0xf80 [ 76.357463][ T5965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.357476][ T5965] [ 76.357476][ T5965] other info that might help us debug this: [ 76.357476][ T5965] [ 76.357481][ T5965] Chain exists of: [ 76.357481][ T5965] console_owner --> &p->pi_lock --> &rq->__lock [ 76.357481][ T5965] [ 76.357504][ T5965] Possible unsafe locking scenario: [ 76.357504][ T5965] [ 76.357509][ T5965] CPU0 CPU1 [ 76.357514][ T5965] ---- ---- [ 76.357518][ T5965] lock(&rq->__lock); [ 76.357528][ T5965] lock(&p->pi_lock); [ 76.357539][ T5965] lock(&rq->__lock); [ 76.357550][ T5965] lock(console_owner); [ 76.357560][ T5965] [ 76.357560][ T5965] *** DEADLOCK *** [ 76.357560][ T5965] [ 76.357568][ T5965] 3 locks held by syz.0.13/5965: [ 76.357577][ T5965] #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: bpf_test_timer_enter+0xf7/0x260 [ 76.357612][ T5965] #1: ffff8880b893a7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 76.357646][ T5965] #2: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x19c/0x4b0 [ 76.357682][ T5965] [ 76.357682][ T5965] stack backtrace: [ 76.357691][ T5965] CPU: 1 UID: 0 PID: 5965 Comm: syz.0.13 Not tainted syzkaller #0 PREEMPT(full) [ 76.357708][ T5965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 76.357717][ T5965] Call Trace: [ 76.357723][ T5965] [ 76.357730][ T5965] dump_stack_lvl+0x189/0x250 [ 76.357748][ T5965] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.357763][ T5965] ? __pfx__printk+0x10/0x10 [ 76.357783][ T5965] ? print_lock_name+0xde/0x100 [ 76.357803][ T5965] print_circular_bug+0x2e2/0x300 [ 76.357822][ T5965] check_noncircular+0x12e/0x150 [ 76.357842][ T5965] __lock_acquire+0x15a6/0x2cf0 [ 76.357865][ T5965] ? vprintk_emit+0x321/0x5f0 [ 76.357881][ T5965] lock_acquire+0x117/0x340 [ 76.357894][ T5965] ? vprintk_emit+0x321/0x5f0 [ 76.357913][ T5965] ? do_raw_spin_unlock+0x122/0x240 [ 76.357931][ T5965] ? vprintk_emit+0x321/0x5f0 [ 76.357947][ T5965] vprintk_emit+0x33d/0x5f0 [ 76.357963][ T5965] ? vprintk_emit+0x321/0x5f0 [ 76.357980][ T5965] ? __pfx_vprintk_emit+0x10/0x10 [ 76.357996][ T5965] ? is_bpf_text_address+0x292/0x2b0 [ 76.358015][ T5965] ? is_bpf_text_address+0x26/0x2b0 [ 76.358034][ T5965] ? kernel_text_address+0xa5/0xe0 [ 76.358053][ T5965] ? __kernel_text_address+0xd/0x40 [ 76.358075][ T5965] _printk+0xcf/0x120 [ 76.358093][ T5965] ? __pfx____ratelimit+0x10/0x10 [ 76.358111][ T5965] ? __pfx__printk+0x10/0x10 [ 76.358129][ T5965] ? ima_match_policy+0x105/0x21b0 [ 76.358151][ T5965] should_fail_ex+0x3f5/0x560 [ 76.358168][ T5965] strncpy_from_user+0x36/0x2c0 [ 76.358185][ T5965] strncpy_from_user_nofault+0x72/0x150 [ 76.358213][ T5965] bpf_probe_read_compat_str+0xe2/0x180 [ 76.358235][ T5965] bpf_prog_573c5a647519ba93+0x3e/0x44 [ 76.358247][ T5965] bpf_trace_run4+0x28e/0x4b0 [ 76.358264][ T5965] ? bpf_trace_run4+0x19c/0x4b0 [ 76.358281][ T5965] ? __pfx_bpf_trace_run4+0x10/0x10 [ 76.358299][ T5965] ? pick_next_task_fair+0x1ef2/0x2130 [ 76.358316][ T5965] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 76.358338][ T5965] __bpf_trace_sched_switch+0x17a/0x1e0 [ 76.358358][ T5965] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 76.358378][ T5965] ? psi_group_change+0xab8/0x1050 [ 76.358397][ T5965] ? __schedule+0x24c4/0x5000 [ 76.358415][ T5965] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 76.358432][ T5965] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 76.358452][ T5965] __traceiter_sched_switch+0x9d/0xd0 [ 76.358472][ T5965] __schedule+0x256b/0x5000 [ 76.358494][ T5965] ? lockdep_hardirqs_on+0x98/0x140 [ 76.358516][ T5965] ? __pfx___schedule+0x10/0x10 [ 76.358531][ T5965] ? __lock_acquire+0x6b6/0x2cf0 [ 76.358546][ T5965] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 76.358568][ T5965] ? lockdep_hardirqs_on+0x98/0x140 [ 76.358587][ T5965] ? preempt_schedule_irq+0xaa/0x150 [ 76.358606][ T5965] preempt_schedule_irq+0xb5/0x150 [ 76.358623][ T5965] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 76.358643][ T5965] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 76.358661][ T5965] irqentry_exit+0x5d8/0x660 [ 76.358682][ T5965] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 76.358698][ T5965] RIP: 0010:bpf_test_timer_continue+0x1/0x320 [ 76.358715][ T5965] Code: 73 fe ff ff 4c 89 f7 e8 cd 4d bc f8 e9 66 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 41 55 41 54 53 50 4d 89 c7 48 89 0c 24 89 d5 41 89 f4 [ 76.358728][ T5965] RSP: 0018:ffffc900053dfb30 EFLAGS: 00000282 [ 76.358740][ T5965] RAX: 0000000000000026 RBX: dffffc0000000000 RCX: ffffc900053dfba0 [ 76.358751][ T5965] RDX: 00000000fffffff7 RSI: 0000000000000001 RDI: ffffc900053dfba8 [ 76.358762][ T5965] RBP: ffffc900053dfcd0 R08: ffffc900053dfba4 R09: ffffffff8df41cc0 [ 76.358773][ T5965] R10: dffffc0000000000 R11: fffffbfff1f00b4f R12: ffff88803039b400 [ 76.358784][ T5965] R13: 1ffff92000a7bf78 R14: ffffc900053dfd60 R15: 0000000000000026 [ 76.358802][ T5965] bpf_prog_test_run_flow_dissector+0x39c/0x5c0 [ 76.358823][ T5965] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 76.358840][ T5965] ? __fget_files+0x2a/0x420 [ 76.358855][ T5965] ? __fget_files+0x2a/0x420 [ 76.358870][ T5965] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 76.358886][ T5965] bpf_prog_test_run+0x2c7/0x340 [ 76.358906][ T5965] __sys_bpf+0x562/0x860 [ 76.358923][ T5965] ? __pfx___sys_bpf+0x10/0x10 [ 76.358944][ T5965] ? ksys_write+0x22a/0x250 [ 76.358962][ T5965] ? __pfx_ksys_write+0x10/0x10 [ 76.358982][ T5965] __x64_sys_bpf+0x7c/0x90 [ 76.358997][ T5965] do_syscall_64+0xfa/0xf80 [ 76.359016][ T5965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.359030][ T5965] ? clear_bhb_loop+0x60/0xb0 [ 76.359046][ T5965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.359061][ T5965] RIP: 0033:0x7f82c838f749 [ 76.359074][ T5965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.359086][ T5965] RSP: 002b:00007f82c91ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.359110][ T5965] RAX: ffffffffffffffda RBX: 00007f82c85e5fa0 RCX: 00007f82c838f749 [ 76.359121][ T5965] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 76.359130][ T5965] RBP: 00007f82c91ec090 R08: 0000000000000000 R09: 0000000000000000 [ 76.359139][ T5965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.359148][ T5965] R13: 00007f82c85e6038 R14: 00007f82c85e5fa0 R15: 00007ffe7f1834a8 [ 76.359166][ T5965] [ 77.764178][ T5965] CPU: 1 UID: 0 PID: 5965 Comm: syz.0.13 Not tainted syzkaller #0 PREEMPT(full) [ 77.764191][ T5965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 77.764197][ T5965] Call Trace: [ 77.764204][ T5965] [ 77.764210][ T5965] dump_stack_lvl+0x189/0x250 [ 77.764224][ T5965] ? __pfx____ratelimit+0x10/0x10 [ 77.764236][ T5965] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.764246][ T5965] ? __pfx__printk+0x10/0x10 [ 77.764258][ T5965] ? ima_match_policy+0x105/0x21b0 [ 77.764272][ T5965] should_fail_ex+0x414/0x560 [ 77.764284][ T5965] strncpy_from_user+0x36/0x2c0 [ 77.764294][ T5965] strncpy_from_user_nofault+0x72/0x150 [ 77.764310][ T5965] bpf_probe_read_compat_str+0xe2/0x180 [ 77.764325][ T5965] bpf_prog_573c5a647519ba93+0x3e/0x44 [ 77.764333][ T5965] bpf_trace_run4+0x28e/0x4b0 [ 77.764344][ T5965] ? bpf_trace_run4+0x19c/0x4b0 [ 77.764354][ T5965] ? __pfx_bpf_trace_run4+0x10/0x10 [ 77.764364][ T5965] ? pick_next_task_fair+0x1ef2/0x2130 [ 77.764375][ T5965] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 77.764389][ T5965] __bpf_trace_sched_switch+0x17a/0x1e0 [ 77.764401][ T5965] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 77.764413][ T5965] ? psi_group_change+0xab8/0x1050 [ 77.764426][ T5965] ? __schedule+0x24c4/0x5000 [ 77.764437][ T5965] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 77.764448][ T5965] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 77.764459][ T5965] __traceiter_sched_switch+0x9d/0xd0 [ 77.764473][ T5965] __schedule+0x256b/0x5000 [ 77.764486][ T5965] ? lockdep_hardirqs_on+0x98/0x140 [ 77.764499][ T5965] ? __pfx___schedule+0x10/0x10 [ 77.764509][ T5965] ? __lock_acquire+0x6b6/0x2cf0 [ 77.764518][ T5965] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 77.764531][ T5965] ? lockdep_hardirqs_on+0x98/0x140 [ 77.764543][ T5965] ? preempt_schedule_irq+0xaa/0x150 [ 77.764554][ T5965] preempt_schedule_irq+0xb5/0x150 [ 77.764565][ T5965] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 77.764577][ T5965] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 77.764588][ T5965] irqentry_exit+0x5d8/0x660 [ 77.764600][ T5965] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 77.764611][ T5965] RIP: 0010:bpf_test_timer_continue+0x1/0x320 [ 77.764622][ T5965] Code: 73 fe ff ff 4c 89 f7 e8 cd 4d bc f8 e9 66 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 41 55 41 54 53 50 4d 89 c7 48 89 0c 24 89 d5 41 89 f4 [ 77.764629][ T5965] RSP: 0018:ffffc900053dfb30 EFLAGS: 00000282 [ 77.764638][ T5965] RAX: 0000000000000026 RBX: dffffc0000000000 RCX: ffffc900053dfba0 [ 77.764645][ T5965] RDX: 00000000fffffff7 RSI: 0000000000000001 RDI: ffffc900053dfba8 [ 77.764651][ T5965] RBP: ffffc900053dfcd0 R08: ffffc900053dfba4 R09: ffffffff8df41cc0 [ 77.764657][ T5965] R10: dffffc0000000000 R11: fffffbfff1f00b4f R12: ffff88803039b400 [ 77.764663][ T5965] R13: 1ffff92000a7bf78 R14: ffffc900053dfd60 R15: 0000000000000026 [ 77.764673][ T5965] bpf_prog_test_run_flow_dissector+0x39c/0x5c0 [ 77.764685][ T5965] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 77.764695][ T5965] ? __fget_files+0x2a/0x420 [ 77.764704][ T5965] ? __fget_files+0x2a/0x420 [ 77.764712][ T5965] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 77.764721][ T5965] bpf_prog_test_run+0x2c7/0x340 [ 77.764733][ T5965] __sys_bpf+0x562/0x860 [ 77.764744][ T5965] ? __pfx___sys_bpf+0x10/0x10 [ 77.764756][ T5965] ? ksys_write+0x22a/0x250 [ 77.764768][ T5965] ? __pfx_ksys_write+0x10/0x10 [ 77.764780][ T5965] __x64_sys_bpf+0x7c/0x90 [ 77.764789][ T5965] do_syscall_64+0xfa/0xf80 [ 77.764801][ T5965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.764814][ T5965] ? clear_bhb_loop+0x60/0xb0 [ 77.764824][ T5965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.764832][ T5965] RIP: 0033:0x7f82c838f749 [ 77.764840][ T5965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.764847][ T5965] RSP: 002b:00007f82c91ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 77.764856][ T5965] RAX: ffffffffffffffda RBX: 00007f82c85e5fa0 RCX: 00007f82c838f749 [ 77.764862][ T5965] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 77.764868][ T5965] RBP: 00007f82c91ec090 R08: 0000000000000000 R09: 0000000000000000 [ 77.764873][ T5965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.764878][ T5965] R13: 00007f82c85e6038 R14: 00007f82c85e5fa0 R15: 00007ffe7f1834a8 [ 77.764888][ T5965] [ 78.210156][ T5828] ieee80211 phy10: Selected rate control algorithm 'minstrel_ht' [ 78.235312][ T5828] ieee80211 phy11: Selected rate control algorithm 'minstrel_ht' [ 78.267013][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.274901][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.300575][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.307961][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.315403][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.329402][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.348398][ T5831] Bluetooth: hci0: command tx timeout [ 78.353815][ T5831] Bluetooth: hci3: command tx timeout [ 78.359316][ T5831] Bluetooth: hci2: command tx timeout [ 78.364702][ T5831] Bluetooth: hci4: command tx timeout [ 78.372311][ T5842] Bluetooth: hci1: command tx timeout [ 78.416481][ T5963] netlink: 3684 bytes leftover after parsing attributes in process `syz.1.12'. [ 78.451503][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.461196][ T5839] ieee80211 phy12: Selected rate control algorithm 'minstrel_ht' [ 78.471608][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.544523][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.552586][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50