last executing test programs: 4.542906472s ago: executing program 2 (id=142): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) getpid() 4.378809806s ago: executing program 2 (id=146): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x2a}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000140)='tlb_flush\x00', r1}, 0x18) (fail_nth: 6) 3.894862588s ago: executing program 2 (id=149): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1f00}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 3.606932957s ago: executing program 2 (id=150): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0xb032, 0xffffffffffffffff, 0xffffe000) socket$netlink(0x10, 0x3, 0xb) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x36) 3.561097522s ago: executing program 3 (id=152): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x6, 0x5}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000008500000005"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{r0}, &(0x7f0000000c80), &(0x7f0000000cc0)=r1}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 3.386318345s ago: executing program 3 (id=153): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x8, {{0xa, 0x4e24, 0x5, @mcast2, 0x6d00}}, {{0xa, 0x4620, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0x108) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000000201040000000000000000020000050400028004000380a578912d86a22afdfd2b33be24ed42ebb86f05b5b83f121a1324327441c29b0aad10cbae7e27ada12823a41486469be0f578d6c5874b2ca1324663391aa00d9cd86e9ae5e4ad5c7383a9613ea850fbef181057f3fe4f54d329ff9db893ecb08d07428264c685d8a1d285072525"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r6, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000008000000000000095000000002b190017163b5b1300cb87f183b310d21d6d7a7e55e7cc990f6e712f452668775bd83a2063eebfb28acac360ea56557e98c00f1a5cce782a9cc01d125fa55bba77510e8833df6f927842bdc08f777856e4de2a67d8f0e70bdd3ed1ce8f00001c2345c71c04c492c7090001fba66194c4799d2e1dd08df818cd03956564bf2252bc4e1d4606f194b8d52f998f2668f0ac13accec93fac1bce87cda3c9d3934141ab49e3634c630ae5c7d518858f527f5f1d229c219560e022a423815200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x2, 0x80, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0xac, r8, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x50, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r10, 0x10e, 0x4, &(0x7f0000000000)=0x9, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6) clock_gettime(0x0, &(0x7f0000000200)) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_bt_bnep_BNEPCONNADD(r11, 0x400442c8, &(0x7f0000000240)={r5, 0x2, 0xafd9, "282733490c3e0c9917d0e658775e974c36487b279cb5dcc83e88fdf89d852b8e2524eaea2b9de395a072e394b3fab2396c16ad19d692986d6219d712ff1bc32ff0"}) socket$inet_sctp(0x2, 0x5, 0x84) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) 2.959052198s ago: executing program 2 (id=155): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c880000000101040000000000000000020000001800018014000180080001000000000008000200ac141400"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000002b000701feffffff00eeffff027c00000c000180a7fe0600ffffffff100002"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r1 = socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r1}, 0x20) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="f0", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)="031d377d1bfd21", 0x7}, {&(0x7f00000003c0)="edf36e3114d757fe61c07820e3fc1cc0638a11310ae265036f35083939137e8f94f55e2e685300daca9e0b257f097389e71f86d89763f4de819bd323d897805049b489a5ec60c7e6005578d4566b38fa40f250e7ab111fa9f903ee6f35f0a4784d7a82e58bb014aa3dac4ba58db8f33528cda57dcdd911fdcecd5be390a3492940ccabbfebd4212e9a43e89862d0fcd9d4411d1983efeb86213b948a4f2262142bdec5f816d424279a2e8af275ccd0d810bbd901ed168eaeb8", 0xb9}, {&(0x7f0000000200)="6f9f27050e6433d8e58de908f50e0681052da4ee6389dd4142fbc4dbd333ec76d3da252611d16e0a13462c11335f1ac5c6129bb239e4b32cbe8086ad7950e48b3bd53b8dc94cecdea604a7c0262aaff6763f4b6bc4e8a1b8e0315e6898cd3e1e5d61", 0x62}, {&(0x7f0000000500)="feba48e77c2f507f72320eab02ab3cd3573fc6fcdd8646c5e77c658a20d2245aa612184297789264fc17a89a393926f8069bf2a6f463e41e7e7075f594ab351fe1d9721d4c84eae20ae601d18ea178054b7bd981d691e598e3751c7432544c683e21bc9291f9f92c2b9547b9429a61efd16d0410c312a1c8a294178cbdf831e6a716aee84bb77ed420b3d6736681b4af411ccbc074ff9ccaa7f54fcfba34461ec62d3085563015b4167f5e0dc57dd1f391752806cba097645bd837edaadabb1617a8434e", 0xc4}, {&(0x7f0000000700)="08c3f05c14c443fb0a9754ffe20ffa0f0257eebe9e9f5160fc28f93bda4df33b08e983aefd", 0x25}], 0x5}}], 0x2, 0x40) sendmmsg$inet(r7, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001580)="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", 0x216}], 0x1}}], 0x1, 0xc4) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev, @private}, &(0x7f0000000240)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @mcast1, 0x80000, 0x7, 0xffff, 0x100, 0x6, 0x900066, r8}) socket$packet(0x11, 0x3, 0x300) 2.7668845s ago: executing program 4 (id=156): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) getpid() 2.681435965s ago: executing program 4 (id=157): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000200)={0x3, 'wg2\x00', {0xa26b}, 0xff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0xffffffffffffffff, 0x3e, 0x9, 0x2}, 0x20) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x6, 0xa, [0x3, 0x7, 0xeaa, 0xc65, 0x7, 0xc, 0x6, 0x0, 0x4, 0x8]}, &(0x7f00000000c0)=0x1c) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100)={r3, 0x1}, &(0x7f0000000140)=0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000000)="448b7cff030000000000008a15df09", 0xf}, {&(0x7f0000000100)="36d1ce1e6d25a81a70ff16f3", 0xc}], 0x3) syz_emit_ethernet(0x9f, &(0x7f0000000300)={@multicast, @local, @void, {@ipv4={0x800, @tipc={{0x1e, 0x4, 0x2, 0x2, 0x91, 0x65, 0x0, 0x5, 0x6, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x17, 0xaf, [@loopback, @remote, @rand_addr=0x64010102, @multicast2, @multicast2]}, @timestamp_prespec={0x44, 0x3c, 0x8, 0x3, 0x4, [{@local, 0x3293}, {@loopback, 0x4}, {@loopback, 0x8}, {@remote, 0x8}, {@loopback, 0x10001}, {@multicast2, 0x10001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}, @cipso={0x86, 0xf, 0x3, [{0x2, 0x9, "10f8c4725a2cf6"}]}]}}, @payload_conn={{{0x19, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, 0x3, 0x0, 0x3, 0x9, 0x0, 0x4e22, 0x4e21}}, [0x0]}}}}}, 0x0) 2.316273433s ago: executing program 0 (id=160): setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xa}}]}, 0x40}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x3f00, 0x400000, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7ff}]}, 0x34}}, 0x0) 1.328534636s ago: executing program 4 (id=161): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100)=0x1d2df034, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) (async) socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r3, 0x0, 0x40) (async) sendmsg$NFT_MSG_GETSETELEM(r3, 0x0, 0x4008000) (async) socket$packet(0x11, 0x2, 0x300) (async) r4 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x4040000) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth1_vlan\x00', 0x0}) r6 = gettid() r7 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r5, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r6}, @IFLA_TXQLEN={0x8, 0xd, 0xa909}, @IFLA_MAP={0x24, 0xe, {0xfffffffffffffffd, 0x200, 0x2, 0x1, 0xf3, 0x6}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x720c1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) (async) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x21}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\twwr'], 0xa) (async) r10 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80000) sendmsg$inet(r10, &(0x7f00000004c0)={&(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000380)="d44c5c5dc5da8792dbf725d653fbb64965439c94c917c0209270e3d08a49f98a0af0d53766ec760daa5730d5c6b57a", 0x2f}], 0x1}, 0x40) 1.214462442s ago: executing program 0 (id=162): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x6, 0x5}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 1.213599277s ago: executing program 3 (id=163): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0xa4, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffff01, 0xb7c56ad10922c48a, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x80}}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x5, 0x4, 0x80, 0x0, 0x0, 0xe, 0x3}}, {0xa, 0x2, [0x1ff, 0xffa3, 0x0]}}, {{0x1c, 0x1, {0x1, 0x7, 0x2, 0xc, 0x1, 0x6, 0x8, 0x3}}, {0xa, 0x2, [0x4, 0x45e, 0x3]}}]}, @TCA_RATE={0x6, 0x5, {0x6, 0xc5}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 1.172263189s ago: executing program 4 (id=164): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x1, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x8040) 1.14866878s ago: executing program 0 (id=165): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000001c0)=""/206, &(0x7f0000000080)=0xce) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000000)=0x8, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f040000000000000000008500000005000000850000007d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x6f5f0edad851352e, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r2}, 0x18) 1.07646718s ago: executing program 3 (id=167): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) getpid() 966.955025ms ago: executing program 0 (id=169): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3, 0xfff2}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) (fail_nth: 4) 966.267275ms ago: executing program 3 (id=170): socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f0000000100)=0xfffffffa, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbb0180c200000386dd6d002000006488ff00000000000000000000000000000000ff0200000000000000000000000000014f194e20004d90"], 0x9e) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040051}, 0x40000) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0x43, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000003c000100fcff070004000000050000000400009affff24ffffffff800b84206ff4137855660adb98b4e96669710000000c0002000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r6, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) 867.842048ms ago: executing program 1 (id=172): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x20, 0x10, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2205}}, 0x20}, 0x1, 0xba01}, 0x0) 683.295275ms ago: executing program 1 (id=173): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e0000f8850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 388.878522ms ago: executing program 4 (id=174): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x84) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x703d25, 0x2, {0x0, 0x0, 0x0, r2, {0x10, 0xf}, {}, {0x8, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0xb}}]}}]}, 0x3c}}, 0xd4) 339.368718ms ago: executing program 1 (id=175): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x6, 0x5}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 226.747291ms ago: executing program 1 (id=176): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@base={0x1, 0x6, 0x492f, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 213.224395ms ago: executing program 0 (id=177): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x600}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x41}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x32}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 203.157576ms ago: executing program 1 (id=178): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x2) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x1c, 0x14, 0x1, 0x800000, 0x0, "", [@nested={0x4}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="ecc032c4"]}]}, 0x1c}], 0x1}, 0x0) setsockopt$packet_int(r0, 0x107, 0xd, &(0x7f0000000000)=0x46c2, 0x64) syz_emit_ethernet(0x1a, &(0x7f00000000c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @random="0d9f2b69532e", @val={@void, {0x8100, 0x5}}, {@llc_tr={0x11, {@snap={0xab, 0xaa, "16", "61c224", 0xdada}}}}}, 0x0) 144.339969ms ago: executing program 2 (id=179): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) unshare(0x6a040000) unshare(0x44000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0x4}}, 0x14}}, 0x40800) close(r4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f00000001c0)={'ipvlan0\x00', {0x2, 0x0, @broadcast}}) listen(r6, 0x7fff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r7, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$rxrpc(0x21, 0x2, 0xa) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_USER(r9, 0x0, 0x8000) 66.897632ms ago: executing program 3 (id=180): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) getpid() 66.165545ms ago: executing program 0 (id=181): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x805, 0x0, 0x4, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) pwritev(r6, &(0x7f0000000080)=[{0x0}], 0x1, 0x5, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000b3b20000000000000000000072000000ad00000000000000000000000ee4a4004087a192d20cebdf0d0b9a3c73d943974e3b823d98d362c1fc83966443012de863ae097a2584d82fd5acb1e320262260a6679f5e14e007c0971185128c02f88a880b56b4fb2bd3f8b5b63ed57720716ba01857067f321ebe00ea3fc49b39d734dfae3b51"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x0, 0xa}, 0x94) 44.994844ms ago: executing program 4 (id=182): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00ba0100380a04002800128009000100766c616e000000001800028006000100040000000c000200110000001300000008000500", @ANYRES32=r1, @ANYBLOB="0500110001"], 0x58}}, 0x8000002) (fail_nth: 8) 0s ago: executing program 1 (id=183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x6200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r5, &(0x7f0000000140), 0xfffffdef) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000080)={'gre0\x00', @multicast}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) bind$rxrpc(r7, &(0x7f0000001280)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newtfilter={0x83c, 0x2c, 0xd3f, 0x74bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3, 0xfff2}, {}, {0xfff3, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x810, 0x2, [@TCA_FW_POLICE={0x80c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x401, 0x5, 0x8, 0x6, 0x5, 0x8, 0x3, 0x8001, 0xa00, 0x9, 0x401, 0xc79, 0xfffffffc, 0xfd51, 0x400, 0x1, 0x7, 0x8c, 0x312, 0x2, 0x3, 0xffff2b6c, 0xe, 0xbb, 0x0, 0x9, 0x3, 0x3, 0x7b, 0x6, 0x7ff, 0x1, 0x20000000, 0x8000, 0x587e, 0xffffff01, 0x0, 0x9, 0xfffffffc, 0x10001, 0x1, 0x1, 0x7fff, 0xa, 0x1c, 0x0, 0x7, 0x3, 0xfe12, 0xfffffffe, 0x7, 0x9, 0xffffff80, 0x27, 0x8, 0x5, 0x1ff, 0xd4, 0x5, 0x40, 0x6, 0x0, 0x66a8, 0x79b37b80, 0x1000, 0x9ae, 0x2, 0x100, 0x1000, 0x2, 0x9, 0x101, 0xfffffffe, 0x8, 0x9, 0x2, 0xffffffff, 0x0, 0x8, 0x0, 0x1901809c, 0x5, 0x101, 0xc7, 0x3, 0x4, 0x5, 0x0, 0x8, 0x7, 0x1000, 0x9, 0x5, 0x8000, 0x7, 0x3347, 0xb85, 0x2, 0x4, 0x1, 0x7fff, 0x100, 0x4, 0x6, 0x3b9d, 0xc6, 0x1000000, 0x2, 0x7ffffffe, 0x6, 0x8, 0x1, 0x1, 0x1ff, 0xb655, 0x3, 0x3, 0x9, 0xa1, 0x5, 0x9, 0x4, 0x7, 0x9e3, 0xc, 0xb, 0x1, 0x8001, 0x7ff, 0x0, 0x7fffffff, 0x401, 0x7, 0x9, 0x5, 0x2, 0x7, 0x4e8, 0xc, 0x2, 0x12b, 0x2, 0x19dd, 0x6, 0xffff, 0x2, 0xd, 0x8, 0x8, 0xe758, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0x0, 0x9, 0x10001, 0x6, 0x400, 0x7, 0xa95, 0x8, 0x1, 0x8, 0x9, 0x8, 0x3, 0x5, 0x0, 0x6, 0x5, 0x9, 0x5, 0x8, 0x5, 0xe, 0x2, 0x0, 0xcc, 0x6, 0xba, 0x4f, 0x6, 0x3, 0xfffffffe, 0x1, 0x31ec, 0x5, 0x5aed, 0x7fff, 0x4, 0x3, 0x8, 0xeb, 0x5, 0xffff, 0x8000, 0x1, 0x7, 0x2, 0x6, 0x0, 0xc6f3, 0x5, 0x2, 0x5, 0x80000000, 0x4, 0x10000, 0x9, 0x2, 0x1000, 0x800001, 0xa6e6, 0x10001, 0x81, 0x1000, 0x8, 0x9, 0x23, 0x6, 0xfff, 0x8, 0x80, 0xb6df, 0x3, 0x3, 0x7e, 0x8, 0x4, 0x6, 0x5, 0x1ff, 0x8, 0x7, 0x9, 0x1ff, 0xfffffff8, 0x5, 0xffffffff, 0x10000, 0x800, 0xa, 0xe5ff, 0x57f, 0xbdf, 0xedfc, 0x80000000, 0x10, 0x8, 0x2, 0x8000, 0xf47, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x400, 0x9, 0x4bb, 0xfffffffd, 0x2, 0x2dc2e41, 0x8, 0xd, 0x0, 0x7, 0x6, 0xb, 0x5, 0x8, 0x6, 0x8000, 0x9, 0x6, 0x893, 0x1, 0x4, 0xdbc, 0x0, 0x6, 0x5, 0x0, 0xffffdbcc, 0x1, 0x0, 0x5, 0x9, 0x2, 0x994, 0x80000001, 0x7ff, 0x7fff, 0x9, 0xf, 0x2d, 0x92ca, 0xe, 0x1ff, 0x4, 0x0, 0xfffffff8, 0x3, 0x5, 0xd, 0x1ff, 0x4, 0x8f71, 0x1, 0x1000, 0x3, 0x7, 0x5, 0x9, 0xfffff800, 0x0, 0x1eef, 0x401, 0x4, 0xd, 0x6, 0xfffffff2, 0xffff, 0x1, 0x74, 0x4, 0x9, 0xda9, 0x9, 0xffffff1c, 0x7, 0x1, 0xffff667c, 0xe6, 0x359bd746, 0xffffff00, 0x101, 0x1777, 0x2, 0x0, 0x800, 0x0, 0x9, 0xb, 0x6, 0x5c95, 0x4, 0x101, 0x9, 0x51, 0x7, 0x8000, 0x4, 0x0, 0x5, 0x5, 0x9, 0x5, 0xf, 0x3aaa, 0xe6b, 0xccd2, 0x87e, 0x36b2, 0x3, 0x8000, 0x3, 0x6, 0x5, 0x9, 0xd046, 0x4, 0x583, 0x7d7, 0x0, 0x1, 0x4, 0x1, 0x1, 0xfffeffff, 0x80, 0x80000000, 0xc, 0x0, 0x3ff, 0x4, 0x43b, 0x3, 0x80, 0x9, 0x4, 0xfffffa74, 0xfffffffe, 0xfff, 0x7, 0x7, 0x8000, 0xa, 0x2c42, 0x2, 0xfff, 0x4, 0x6, 0xa5f, 0x8, 0x3, 0x1721, 0x7, 0x9, 0x200, 0x7fff, 0x2, 0x1, 0x8, 0x40, 0x3ff, 0x3ee, 0xd, 0x2, 0x8, 0x1, 0x1, 0x7, 0xbc5, 0xe, 0xd0cd, 0x0, 0xfffffffe, 0x6, 0x2, 0xf, 0xfffffffe, 0x8cf9, 0x8, 0x1, 0x7ff, 0x8, 0xffffffff, 0x4, 0x800, 0x7, 0xe4, 0x9, 0xd, 0x9, 0x60, 0x8, 0x6b5, 0x5, 0x1ff, 0x4922ab8d, 0xd, 0x4, 0x1, 0x9, 0xfffffff3, 0x7, 0xb0d, 0x0, 0xa, 0x8001, 0x1, 0x5, 0x1, 0x80000001, 0x4, 0x6, 0x1, 0x0, 0x9, 0xfffffff8, 0x3, 0xc530, 0x9a2, 0x1, 0x3, 0xf, 0xe3f, 0x0, 0x79d9, 0x0, 0x7f, 0x8ec, 0xf0b5, 0x6, 0x2, 0x8, 0x2, 0x7ff, 0x4, 0x2, 0x8, 0x80000000, 0x6, 0x3, 0x5, 0x3, 0xb59c, 0xf, 0x1, 0x5, 0xffff, 0xfffffffc, 0x7, 0xfffffffd, 0x1, 0xb, 0xff, 0x100, 0x6, 0x9, 0xfffffffb]}]}]}}]}, 0x83c}, 0x1, 0x0, 0x0, 0x8858}, 0x4000011) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.250' (ED25519) to the list of known hosts. [ 73.202586][ T5851] cgroup: Unknown subsys name 'net' [ 73.331128][ T5851] cgroup: Unknown subsys name 'cpuset' [ 73.340007][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.742873][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.906695][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.917246][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.925223][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.939871][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.947740][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.000979][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.009813][ T5871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.017852][ T5871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.026438][ T5871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.040404][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.050364][ T5875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.104301][ T5873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.112197][ T5873] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.121366][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.129826][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.137695][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.146959][ T5873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.155959][ T5873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.156248][ T5184] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.171399][ T5184] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.224974][ T5184] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.237530][ T5184] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.248904][ T5184] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.259353][ T5184] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.289161][ T5184] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.768403][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 79.800954][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 79.967256][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 80.112317][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.120230][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.128447][ T5861] bridge_slave_0: entered allmulticast mode [ 80.135506][ T5861] bridge_slave_0: entered promiscuous mode [ 80.144130][ T5877] chnl_net:caif_netlink_parms(): no params data found [ 80.199937][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.207147][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.214775][ T5861] bridge_slave_1: entered allmulticast mode [ 80.222339][ T5861] bridge_slave_1: entered promiscuous mode [ 80.256269][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.263564][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.271056][ T5867] bridge_slave_0: entered allmulticast mode [ 80.278640][ T5867] bridge_slave_0: entered promiscuous mode [ 80.303868][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 80.338668][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.345886][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.353731][ T5867] bridge_slave_1: entered allmulticast mode [ 80.360906][ T5867] bridge_slave_1: entered promiscuous mode [ 80.394467][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.460915][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.477173][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.502535][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.510151][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.517315][ T5865] bridge_slave_0: entered allmulticast mode [ 80.524778][ T5865] bridge_slave_0: entered promiscuous mode [ 80.560445][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.574553][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.582193][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.593166][ T5865] bridge_slave_1: entered allmulticast mode [ 80.600347][ T5865] bridge_slave_1: entered promiscuous mode [ 80.660562][ T5861] team0: Port device team_slave_0 added [ 80.666667][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.673964][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.681409][ T5877] bridge_slave_0: entered allmulticast mode [ 80.689839][ T5877] bridge_slave_0: entered promiscuous mode [ 80.733137][ T5861] team0: Port device team_slave_1 added [ 80.739254][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.746386][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.754109][ T5877] bridge_slave_1: entered allmulticast mode [ 80.761536][ T5877] bridge_slave_1: entered promiscuous mode [ 80.769872][ T5867] team0: Port device team_slave_0 added [ 80.788521][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.822106][ T5867] team0: Port device team_slave_1 added [ 80.828616][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.835798][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.843437][ T5872] bridge_slave_0: entered allmulticast mode [ 80.851665][ T5872] bridge_slave_0: entered promiscuous mode [ 80.861532][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.908971][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.916130][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.923838][ T5872] bridge_slave_1: entered allmulticast mode [ 80.932220][ T5872] bridge_slave_1: entered promiscuous mode [ 80.950933][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.958517][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.985052][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.999830][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.009840][ T5873] Bluetooth: hci0: command tx timeout [ 81.013934][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.061229][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.068537][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.095010][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.140975][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.148122][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.174859][ T5873] Bluetooth: hci1: command tx timeout [ 81.177997][ T5873] Bluetooth: hci2: command tx timeout [ 81.180731][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.210894][ T5865] team0: Port device team_slave_0 added [ 81.219942][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.239318][ T5877] team0: Port device team_slave_0 added [ 81.245985][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.253280][ T5873] Bluetooth: hci3: command tx timeout [ 81.257698][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.284833][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.297235][ T5865] team0: Port device team_slave_1 added [ 81.305707][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.327962][ T5873] Bluetooth: hci4: command tx timeout [ 81.344593][ T5872] team0: Port device team_slave_0 added [ 81.352608][ T5877] team0: Port device team_slave_1 added [ 81.397072][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.404192][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.431020][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.445496][ T5872] team0: Port device team_slave_1 added [ 81.479932][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.486927][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.513141][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.541549][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.548981][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.575828][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.614625][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.621806][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.647948][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.679868][ T5861] hsr_slave_0: entered promiscuous mode [ 81.686627][ T5861] hsr_slave_1: entered promiscuous mode [ 81.704593][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.711774][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.739203][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.802535][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.810246][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.836582][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.933243][ T5867] hsr_slave_0: entered promiscuous mode [ 81.942885][ T5867] hsr_slave_1: entered promiscuous mode [ 81.950306][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 81.956137][ T5867] Cannot create hsr debugfs directory [ 82.003550][ T5865] hsr_slave_0: entered promiscuous mode [ 82.010378][ T5865] hsr_slave_1: entered promiscuous mode [ 82.016688][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 82.022956][ T5865] Cannot create hsr debugfs directory [ 82.090677][ T5877] hsr_slave_0: entered promiscuous mode [ 82.097067][ T5877] hsr_slave_1: entered promiscuous mode [ 82.103967][ T5877] debugfs: 'hsr0' already exists in 'hsr' [ 82.111208][ T5877] Cannot create hsr debugfs directory [ 82.144500][ T5872] hsr_slave_0: entered promiscuous mode [ 82.152506][ T5872] hsr_slave_1: entered promiscuous mode [ 82.159044][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 82.164801][ T5872] Cannot create hsr debugfs directory [ 82.691210][ T5867] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.703546][ T5867] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.731136][ T5867] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.749608][ T5867] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.799784][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.813459][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.823970][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.834935][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.917991][ T5877] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.934706][ T5877] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.945831][ T5877] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.971403][ T5877] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.041217][ T5865] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.056695][ T5865] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.069705][ T5865] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.081056][ T5865] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.088994][ T5873] Bluetooth: hci0: command tx timeout [ 83.205585][ T5872] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.216499][ T5872] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.241481][ T5872] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.249847][ T5873] Bluetooth: hci2: command tx timeout [ 83.249857][ T5184] Bluetooth: hci1: command tx timeout [ 83.264533][ T5872] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.292580][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.327770][ T5873] Bluetooth: hci3: command tx timeout [ 83.373520][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.408340][ T5873] Bluetooth: hci4: command tx timeout [ 83.421230][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.428648][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.449741][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.463461][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.470590][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.525600][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.564589][ T3587] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.571812][ T3587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.592808][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.624259][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.631488][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.642393][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.667949][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.681892][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.712144][ T3587] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.719281][ T3587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.743916][ T5877] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.759993][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.783521][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.790835][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.836101][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.843396][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.857249][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.864547][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.876543][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.883700][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.920580][ T3587] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.927770][ T3587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.103611][ T5877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.123707][ T5872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.246530][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.332153][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.486859][ T5867] veth0_vlan: entered promiscuous mode [ 84.515441][ T5867] veth1_vlan: entered promiscuous mode [ 84.622154][ T5861] veth0_vlan: entered promiscuous mode [ 84.643106][ T5867] veth0_macvtap: entered promiscuous mode [ 84.664135][ T5861] veth1_vlan: entered promiscuous mode [ 84.690166][ T5867] veth1_macvtap: entered promiscuous mode [ 84.713094][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.730096][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.784920][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.799395][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.821614][ T5861] veth0_macvtap: entered promiscuous mode [ 84.851183][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.862661][ T5861] veth1_macvtap: entered promiscuous mode [ 84.927376][ T3587] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.940134][ T3587] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.959678][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.970601][ T5872] veth0_vlan: entered promiscuous mode [ 84.999362][ T3587] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.025892][ T5865] veth0_vlan: entered promiscuous mode [ 85.034519][ T3587] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.050859][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.063216][ T5872] veth1_vlan: entered promiscuous mode [ 85.114570][ T3561] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.133705][ T3587] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.150781][ T5865] veth1_vlan: entered promiscuous mode [ 85.170251][ T5873] Bluetooth: hci0: command tx timeout [ 85.175460][ T3587] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.203444][ T3587] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.267215][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.288836][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.301593][ T5872] veth0_macvtap: entered promiscuous mode [ 85.329077][ T5873] Bluetooth: hci1: command tx timeout [ 85.330328][ T5184] Bluetooth: hci2: command tx timeout [ 85.352377][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.362138][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.397024][ T5872] veth1_macvtap: entered promiscuous mode [ 85.415320][ T5877] veth0_vlan: entered promiscuous mode [ 85.421384][ T5184] Bluetooth: hci3: command tx timeout [ 85.434377][ T5865] veth0_macvtap: entered promiscuous mode [ 85.455539][ T5865] veth1_macvtap: entered promiscuous mode [ 85.466199][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.488899][ T5184] Bluetooth: hci4: command tx timeout [ 85.495960][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.517322][ T5877] veth1_vlan: entered promiscuous mode [ 85.521498][ T5867] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.579446][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.594910][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.606243][ T1339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.619981][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.634059][ T1339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.662627][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.671452][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.676916][ T5980] netlink: 'syz.2.3': attribute type 2 has an invalid length. [ 85.692212][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.721219][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.736337][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.803997][ T5877] veth0_macvtap: entered promiscuous mode [ 85.816793][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.830233][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.876709][ T5877] veth1_macvtap: entered promiscuous mode [ 85.891406][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.928329][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.989856][ T3561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.019183][ T3561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.082342][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.136603][ T5993] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8'. [ 86.176394][ T5993] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8'. [ 86.183974][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.200617][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.239005][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.312728][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.330833][ T1325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.347671][ T1325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.359495][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.415112][ T5999] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10'. [ 86.424483][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.424546][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.491463][ T3587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.515142][ T3587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.646509][ T6009] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2'. [ 86.830345][ T1325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.844841][ T1325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.855747][ T980] cfg80211: failed to load regulatory.db [ 86.876662][ T92] IPVS: starting estimator thread 0... [ 86.939224][ T6013] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 86.977729][ T6018] IPVS: using max 29 ests per chain, 69600 per kthread [ 87.003146][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.012170][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.052235][ T6013] Zero length message leads to an empty skb [ 87.084026][ T6024] syz.2.14: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 87.099784][ T6024] CPU: 0 UID: 0 PID: 6024 Comm: syz.2.14 Not tainted syzkaller #0 PREEMPT(full) [ 87.099808][ T6024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 87.099824][ T6024] Call Trace: [ 87.099835][ T6024] [ 87.099843][ T6024] dump_stack_lvl+0x189/0x250 [ 87.099876][ T6024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.099898][ T6024] ? __pfx__printk+0x10/0x10 [ 87.099923][ T6024] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 87.099944][ T6024] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 87.099968][ T6024] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 87.099993][ T6024] warn_alloc+0x214/0x310 [ 87.100023][ T6024] ? stack_depot_save_flags+0x40/0x860 [ 87.100054][ T6024] ? __pfx_warn_alloc+0x10/0x10 [ 87.100085][ T6024] ? kasan_save_track+0x4f/0x80 [ 87.100109][ T6024] ? xskq_create+0x56/0x170 [ 87.100126][ T6024] ? xsk_init_queue+0xb0/0x110 [ 87.100142][ T6024] ? xsk_setsockopt+0x4dc/0x8d0 [ 87.100169][ T6024] ? do_sock_setsockopt+0x17c/0x1b0 [ 87.100193][ T6024] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 87.100216][ T6024] ? do_syscall_64+0xfa/0x3b0 [ 87.100238][ T6024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.100267][ T6024] __vmalloc_node_range_noprof+0x125/0x12f0 [ 87.100323][ T6024] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 87.100358][ T6024] ? __kasan_kmalloc+0x93/0xb0 [ 87.100387][ T6024] vmalloc_user_noprof+0xad/0xf0 [ 87.100413][ T6024] ? xskq_create+0xbf/0x170 [ 87.100434][ T6024] xskq_create+0xbf/0x170 [ 87.100465][ T6024] xsk_init_queue+0xb0/0x110 [ 87.100488][ T6024] xsk_setsockopt+0x4dc/0x8d0 [ 87.100522][ T6024] ? __pfx_xsk_setsockopt+0x10/0x10 [ 87.100552][ T6024] ? __pfx_aa_sk_perm+0x10/0x10 [ 87.100585][ T6024] ? aa_sock_opt_perm+0xff/0x1b0 [ 87.100607][ T6024] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 87.100626][ T6024] ? __pfx_xsk_setsockopt+0x10/0x10 [ 87.100659][ T6024] do_sock_setsockopt+0x17c/0x1b0 [ 87.100689][ T6024] __x64_sys_setsockopt+0x13f/0x1b0 [ 87.100718][ T6024] do_syscall_64+0xfa/0x3b0 [ 87.100739][ T6024] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.100760][ T6024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.100780][ T6024] ? clear_bhb_loop+0x60/0xb0 [ 87.100805][ T6024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.100825][ T6024] RIP: 0033:0x7f8561f8eec9 [ 87.100848][ T6024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.100865][ T6024] RSP: 002b:00007f8562da3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 87.100886][ T6024] RAX: ffffffffffffffda RBX: 00007f85621e5fa0 RCX: 00007f8561f8eec9 [ 87.100900][ T6024] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 87.100912][ T6024] RBP: 00007f8562011f91 R08: 0000000000000004 R09: 0000000000000000 [ 87.100924][ T6024] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.100937][ T6024] R13: 00007f85621e6038 R14: 00007f85621e5fa0 R15: 00007ffef4f8de38 [ 87.100969][ T6024] [ 87.100981][ T6024] Mem-Info: [ 87.250200][ T5184] Bluetooth: hci0: command tx timeout [ 87.414812][ T5184] Bluetooth: hci2: command tx timeout [ 87.418986][ T6025] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.420395][ T5184] Bluetooth: hci1: command tx timeout [ 87.468714][ T6024] active_anon:6438 inactive_anon:0 isolated_anon:0 [ 87.468714][ T6024] active_file:2175 inactive_file:39873 isolated_file:0 [ 87.468714][ T6024] unevictable:768 dirty:1462 writeback:0 [ 87.468714][ T6024] slab_reclaimable:10569 slab_unreclaimable:94923 [ 87.468714][ T6024] mapped:30046 shmem:1356 pagetables:1045 [ 87.468714][ T6024] sec_pagetables:0 bounce:0 [ 87.468714][ T6024] kernel_misc_reclaimable:0 [ 87.468714][ T6024] free:1326585 free_pcp:23366 free_cma:0 [ 87.518985][ T5873] Bluetooth: hci3: command tx timeout [ 87.524611][ T6024] Node 0 active_anon:25752kB inactive_anon:0kB active_file:8700kB inactive_file:159292kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120284kB dirty:5836kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11872kB pagetables:4144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 87.561335][ T6024] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 87.594648][ T5873] Bluetooth: hci4: command tx timeout [ 87.600169][ T6024] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 87.630025][ T6024] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 87.635843][ T6024] Node 0 DMA32 free:1400280kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25704kB inactive_anon:0kB active_file:8700kB inactive_file:157452kB unevictable:1536kB writepending:5828kB present:3129332kB managed:2559852kB mlocked:0kB bounce:0kB free_pcp:72568kB local_pcp:12724kB free_cma:0kB [ 87.673073][ T6024] lowmem_reserve[]: 0 0 1 1 1 [ 87.678604][ T6024] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:8kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 87.707671][ T6024] lowmem_reserve[]: 0 0 0 0 0 [ 87.712439][ T6024] Node 1 Normal free:3890184kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:12kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21336kB local_pcp:10568kB free_cma:0kB [ 87.778738][ T6024] lowmem_reserve[]: 0 0 0 0 0 [ 87.783769][ T6024] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 87.840435][ T6024] Node 0 DMA32: 5*4kB (M) 3*8kB (M) 6*16kB (UM) 4*32kB (UM) 4*64kB (UM) 3*128kB (UM) 3*256kB (ME) 3*512kB (M) 1*1024kB (M) 5*2048kB (UME) 338*4096kB (M) = 1398924kB [ 87.862392][ T6024] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 87.875903][ T6024] Node 1 Normal: 62*4kB (UME) 44*8kB (UME) 39*16kB (UME) 42*32kB (UME) 22*64kB (UME) 11*128kB (UME) 3*256kB (ME) 6*512kB (UME) 2*1024kB (ME) 0*2048kB 947*4096kB (M) = 3890184kB [ 87.920065][ T6024] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 87.978597][ T6024] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 88.015768][ T6024] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 88.082083][ T6041] netlink: 'syz.0.19': attribute type 1 has an invalid length. [ 88.082630][ T6024] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 88.100910][ T6024] 43915 total pagecache pages [ 88.109232][ T6024] 0 pages in swap cache [ 88.118860][ T6024] Free swap = 124996kB [ 88.126837][ T6041] netlink: 228 bytes leftover after parsing attributes in process `syz.0.19'. [ 88.131151][ T6024] Total swap = 124996kB [ 88.180871][ T6024] 2097051 pages RAM [ 88.191438][ T6024] 0 pages HighMem/MovableOnly [ 88.202873][ T6024] 424998 pages reserved [ 88.218862][ T6024] 0 pages cma reserved [ 88.374984][ T6042] syzkaller0: entered promiscuous mode [ 88.397540][ T6042] syzkaller0: entered allmulticast mode [ 88.626775][ T6061] tipc: Enabling of bearer rejected, failed to enable media [ 88.664584][ T6061] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.204129][ T6077] wg1 speed is unknown, defaulting to 1000 [ 89.338799][ T6077] wg1 speed is unknown, defaulting to 1000 [ 89.571606][ T6077] wg1 speed is unknown, defaulting to 1000 [ 89.630609][ T6077] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 89.674233][ T6078] wg1 speed is unknown, defaulting to 1000 [ 89.720127][ T6077] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 90.083041][ T6077] wg1 speed is unknown, defaulting to 1000 [ 90.246462][ T6077] wg1 speed is unknown, defaulting to 1000 [ 90.398291][ T6090] wg1 speed is unknown, defaulting to 1000 [ 90.412083][ T6077] wg1 speed is unknown, defaulting to 1000 [ 90.473180][ T6077] wg1 speed is unknown, defaulting to 1000 [ 90.502372][ T6077] wg1 speed is unknown, defaulting to 1000 [ 90.560815][ T6077] wg1 speed is unknown, defaulting to 1000 [ 91.771266][ T6141] netlink: 36 bytes leftover after parsing attributes in process `syz.4.43'. [ 91.830970][ T6144] netlink: 'syz.1.46': attribute type 21 has an invalid length. [ 91.854443][ T6144] netlink: 132 bytes leftover after parsing attributes in process `syz.1.46'. [ 91.940132][ T6152] netlink: 20 bytes leftover after parsing attributes in process `syz.0.47'. [ 92.002934][ T6155] syz.1.46 uses obsolete (PF_INET,SOCK_PACKET) [ 92.188811][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.50'. [ 92.201674][ T6159] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 92.231681][ T6165] netlink: 96 bytes leftover after parsing attributes in process `syz.0.51'. [ 92.294404][ T6165] vlan2: entered allmulticast mode [ 92.312324][ T6165] erspan0: entered allmulticast mode [ 92.738067][ T6189] netlink: 'syz.0.57': attribute type 1 has an invalid length. [ 92.768191][ T6189] netlink: 224 bytes leftover after parsing attributes in process `syz.0.57'. [ 92.926267][ T6200] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 92.984802][ T6202] tipc: Started in network mode [ 92.999757][ T6202] tipc: Node identity ea649b838fdd, cluster identity 4711 [ 93.026715][ T6202] tipc: Enabled bearer , priority 0 [ 93.048918][ T6212] syzkaller0: entered promiscuous mode [ 93.054430][ T6212] syzkaller0: entered allmulticast mode [ 93.143623][ T6201] tipc: Resetting bearer [ 93.165845][ T6201] tipc: Disabling bearer [ 93.513760][ T6238] netlink: 'syz.4.69': attribute type 15 has an invalid length. [ 93.881971][ T6268] netlink: 'syz.2.75': attribute type 1 has an invalid length. [ 93.984623][ T6244] team0 (unregistering): Port device team_slave_0 removed [ 93.998248][ T6244] team0 (unregistering): Port device team_slave_1 removed [ 94.046200][ T6269] syzkaller1: entered allmulticast mode [ 94.071669][ T6268] vlan2: entered allmulticast mode [ 94.092077][ T6268] veth1: entered allmulticast mode [ 94.342833][ T6285] netlink: 16 bytes leftover after parsing attributes in process `syz.2.83'. [ 94.456494][ T6286] tipc: Started in network mode [ 94.462591][ T6286] tipc: Node identity 6e5ef926b00d, cluster identity 4711 [ 94.470662][ T6286] tipc: Enabled bearer , priority 0 [ 94.477989][ T6288] netlink: 'syz.2.84': attribute type 1 has an invalid length. [ 94.488858][ T6286] syzkaller0: entered promiscuous mode [ 94.494365][ T6286] syzkaller0: entered allmulticast mode [ 94.620444][ T6296] tipc: Resetting bearer [ 94.784010][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'. [ 94.798755][ T6305] netlink: 20 bytes leftover after parsing attributes in process `syz.2.89'. [ 94.976324][ T6310] tipc: Started in network mode [ 94.980007][ T6317] netlink: 20 bytes leftover after parsing attributes in process `syz.2.93'. [ 95.005679][ T6310] tipc: Node identity 9eabc4a04161, cluster identity 4711 [ 95.013531][ T6310] tipc: Enabled bearer , priority 0 [ 95.022848][ T6316] tipc: Enabling of bearer rejected, already enabled [ 95.040675][ T6310] netlink: 'syz.4.91': attribute type 1 has an invalid length. [ 95.057954][ T6310] syzkaller0: entered promiscuous mode [ 95.063664][ T6310] syzkaller0: entered allmulticast mode [ 95.085671][ T6310] tipc: Resetting bearer [ 95.114370][ T6309] tipc: Resetting bearer [ 95.152225][ T6309] tipc: Disabling bearer [ 95.239197][ T6282] tipc: Resetting bearer [ 95.269269][ T6282] tipc: Disabling bearer [ 95.646275][ T6343] netlink: 'syz.0.100': attribute type 10 has an invalid length. [ 95.669025][ T6343] team0: Port device dummy0 added [ 96.093392][ T6366] netlink: 'syz.3.108': attribute type 2 has an invalid length. [ 96.449106][ T6382] tipc: Started in network mode [ 96.454009][ T6382] tipc: Node identity 3228461ae507, cluster identity 4711 [ 96.468416][ T6382] tipc: Enabled bearer , priority 0 [ 96.475796][ T6382] syzkaller0: entered promiscuous mode [ 96.481660][ T6382] syzkaller0: entered allmulticast mode [ 96.497786][ T6382] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 96.506372][ T6383] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 96.518693][ T6383] tipc: Resetting bearer [ 96.526300][ T6381] tipc: Resetting bearer [ 96.546156][ T6381] tipc: Disabling bearer [ 132.929778][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.936290][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.370690][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.377081][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.567606][ T5875] Bluetooth: hci1: command 0x0406 tx timeout [ 201.582783][ T5864] Bluetooth: hci2: command 0x0406 tx timeout [ 201.584440][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 201.591060][ T5875] Bluetooth: hci0: command 0x0406 tx timeout [ 216.927666][ T5873] Bluetooth: hci4: command 0x0406 tx timeout [ 233.520076][ T6391] FAULT_INJECTION: forcing a failure. [ 233.520076][ T6391] name failslab, interval 1, probability 0, space 0, times 1 [ 233.533168][ T6391] CPU: 1 UID: 0 PID: 6391 Comm: syz.4.118 Not tainted syzkaller #0 PREEMPT(full) [ 233.533193][ T6391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 233.533204][ T6391] Call Trace: [ 233.533212][ T6391] [ 233.533220][ T6391] dump_stack_lvl+0x189/0x250 [ 233.533250][ T6391] ? __pfx____ratelimit+0x10/0x10 [ 233.533271][ T6391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.533291][ T6391] ? __pfx__printk+0x10/0x10 [ 233.533321][ T6391] ? __pfx___might_resched+0x10/0x10 [ 233.533348][ T6391] ? fs_reclaim_acquire+0x7d/0x100 [ 233.533381][ T6391] should_fail_ex+0x414/0x560 [ 233.533413][ T6391] should_failslab+0xa8/0x100 [ 233.533441][ T6391] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 233.533466][ T6391] ? preload_this_cpu_lock+0x49/0xc0 [ 233.533493][ T6391] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 233.533518][ T6391] preload_this_cpu_lock+0x49/0xc0 [ 233.533547][ T6391] alloc_vmap_area+0x41c/0x14a0 [ 233.533586][ T6391] ? __pfx_alloc_vmap_area+0x10/0x10 [ 233.533608][ T6391] ? __kasan_kmalloc+0x93/0xb0 [ 233.533633][ T6391] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 233.533657][ T6391] ? __get_vm_area_node+0x13f/0x300 [ 233.533678][ T6391] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 233.533702][ T6391] __get_vm_area_node+0x1f8/0x300 [ 233.533731][ T6391] __vmalloc_node_range_noprof+0x301/0x12f0 [ 233.533756][ T6391] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 233.533778][ T6391] ? __lock_acquire+0xab9/0xd20 [ 233.533827][ T6391] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 233.533850][ T6391] ? __might_fault+0xb0/0x130 [ 233.533882][ T6391] ? _parse_integer_limit+0x1ae/0x1f0 [ 233.533917][ T6391] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 233.533939][ T6391] __vmalloc_noprof+0xb1/0xf0 [ 233.533963][ T6391] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 233.533990][ T6391] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 233.534018][ T6391] bpf_prog_alloc+0x3c/0x1a0 [ 233.534052][ T6391] bpf_prog_load+0x735/0x1930 [ 233.534089][ T6391] ? __pfx_bpf_prog_load+0x10/0x10 [ 233.534136][ T6391] ? bpf_lsm_bpf+0x9/0x20 [ 233.534157][ T6391] ? security_bpf+0x7e/0x300 [ 233.534186][ T6391] __sys_bpf+0x528/0x870 [ 233.534210][ T6391] ? __pfx___sys_bpf+0x10/0x10 [ 233.534246][ T6391] ? ksys_write+0x22a/0x250 [ 233.534272][ T6391] ? __pfx_ksys_write+0x10/0x10 [ 233.534302][ T6391] __x64_sys_bpf+0x7c/0x90 [ 233.534325][ T6391] do_syscall_64+0xfa/0x3b0 [ 233.534346][ T6391] ? lockdep_hardirqs_on+0x9c/0x150 [ 233.534366][ T6391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.534385][ T6391] ? clear_bhb_loop+0x60/0xb0 [ 233.534409][ T6391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.534429][ T6391] RIP: 0033:0x7faa5578eec9 [ 233.534446][ T6391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.534463][ T6391] RSP: 002b:00007faa5661a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 233.534483][ T6391] RAX: ffffffffffffffda RBX: 00007faa559e5fa0 RCX: 00007faa5578eec9 [ 233.534498][ T6391] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 233.534509][ T6391] RBP: 00007faa5661a090 R08: 0000000000000000 R09: 0000000000000000 [ 233.534521][ T6391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.534531][ T6391] R13: 00007faa559e6038 R14: 00007faa559e5fa0 R15: 00007ffefd1ebb98 [ 233.534562][ T6391] [ 233.872573][ T6389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.950123][ T6396] dvmrp8: entered allmulticast mode [ 233.992028][ T6392] only policy match revision 0 supported [ 233.992052][ T6392] unable to load match [ 234.108495][ T6397] wg1 speed is unknown, defaulting to 1000 [ 234.222813][ T6407] syzkaller1: entered promiscuous mode [ 234.234501][ T6407] syzkaller1: entered allmulticast mode [ 234.896714][ T6400] syz.2.116 (6400) used greatest stack depth: 15864 bytes left [ 235.116268][ T6435] wg1 speed is unknown, defaulting to 1000 [ 235.173150][ T6444] FAULT_INJECTION: forcing a failure. [ 235.173150][ T6444] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 235.189726][ T6446] FAULT_INJECTION: forcing a failure. [ 235.189726][ T6446] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 235.209534][ T6444] CPU: 0 UID: 0 PID: 6444 Comm: syz.4.137 Not tainted syzkaller #0 PREEMPT(full) [ 235.209561][ T6444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 235.209573][ T6444] Call Trace: [ 235.209581][ T6444] [ 235.209589][ T6444] dump_stack_lvl+0x189/0x250 [ 235.209616][ T6444] ? __pfx____ratelimit+0x10/0x10 [ 235.209638][ T6444] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.209660][ T6444] ? __pfx__printk+0x10/0x10 [ 235.209685][ T6444] ? __might_fault+0xb0/0x130 [ 235.209721][ T6444] should_fail_ex+0x414/0x560 [ 235.209753][ T6444] _copy_from_iter+0x1de/0x1790 [ 235.209783][ T6444] ? rcu_is_watching+0x15/0xb0 [ 235.209802][ T6444] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 235.209829][ T6444] ? __pfx__copy_from_iter+0x10/0x10 [ 235.209851][ T6444] ? __build_skb_around+0x257/0x3e0 [ 235.209877][ T6444] ? netlink_sendmsg+0x642/0xb30 [ 235.209902][ T6444] ? skb_put+0x11b/0x210 [ 235.209932][ T6444] netlink_sendmsg+0x6b2/0xb30 [ 235.209964][ T6444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.209988][ T6444] ? aa_sock_msg_perm+0xf1/0x1d0 [ 235.210020][ T6444] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 235.210038][ T6444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.210061][ T6444] __sock_sendmsg+0x219/0x270 [ 235.210094][ T6444] ____sys_sendmsg+0x505/0x830 [ 235.210125][ T6444] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.210159][ T6444] ? import_iovec+0x74/0xa0 [ 235.210187][ T6444] ___sys_sendmsg+0x21f/0x2a0 [ 235.210214][ T6444] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.210278][ T6444] ? __fget_files+0x2a/0x420 [ 235.210304][ T6444] ? __fget_files+0x3a0/0x420 [ 235.210343][ T6444] __x64_sys_sendmsg+0x19b/0x260 [ 235.210371][ T6444] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 235.210407][ T6444] ? __pfx_ksys_write+0x10/0x10 [ 235.210428][ T6444] ? rcu_is_watching+0x15/0xb0 [ 235.210451][ T6444] ? do_syscall_64+0xbe/0x3b0 [ 235.210478][ T6444] do_syscall_64+0xfa/0x3b0 [ 235.210498][ T6444] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.210518][ T6444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.210538][ T6444] ? clear_bhb_loop+0x60/0xb0 [ 235.210562][ T6444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.210580][ T6444] RIP: 0033:0x7faa5578eec9 [ 235.210597][ T6444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.210613][ T6444] RSP: 002b:00007faa5661a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.210634][ T6444] RAX: ffffffffffffffda RBX: 00007faa559e5fa0 RCX: 00007faa5578eec9 [ 235.210648][ T6444] RDX: 00000000000000d4 RSI: 0000200000000140 RDI: 0000000000000004 [ 235.210660][ T6444] RBP: 00007faa5661a090 R08: 0000000000000000 R09: 0000000000000000 [ 235.210672][ T6444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.210683][ T6444] R13: 00007faa559e6038 R14: 00007faa559e5fa0 R15: 00007ffefd1ebb98 [ 235.210715][ T6444] [ 235.212250][ T6446] CPU: 0 UID: 0 PID: 6446 Comm: syz.1.138 Not tainted syzkaller #0 PREEMPT(full) [ 235.212271][ T6446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 235.212282][ T6446] Call Trace: [ 235.212289][ T6446] [ 235.212296][ T6446] dump_stack_lvl+0x189/0x250 [ 235.212321][ T6446] ? __pfx____ratelimit+0x10/0x10 [ 235.212342][ T6446] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.212364][ T6446] ? __pfx__printk+0x10/0x10 [ 235.212399][ T6446] should_fail_ex+0x414/0x560 [ 235.212430][ T6446] _copy_to_user+0x31/0xb0 [ 235.212457][ T6446] bpf_test_finish+0x56f/0x700 [ 235.212488][ T6446] ? __pfx_bpf_test_finish+0x10/0x10 [ 235.212513][ T6446] ? slab_build_skb+0x273/0x3e0 [ 235.212530][ T6446] ? verify_and_copy_hook_state+0x1f5/0x340 [ 235.212556][ T6446] bpf_prog_test_run_nf+0x575/0x830 [ 235.212587][ T6446] ? __pfx_bpf_prog_test_run_nf+0x10/0x10 [ 235.212613][ T6446] ? __fget_files+0x2a/0x420 [ 235.212638][ T6446] ? __fget_files+0x2a/0x420 [ 235.212666][ T6446] ? __pfx_bpf_prog_test_run_nf+0x10/0x10 [ 235.212689][ T6446] bpf_prog_test_run+0x2c4/0x340 [ 235.212718][ T6446] __sys_bpf+0x581/0x870 [ 235.212744][ T6446] ? __pfx___sys_bpf+0x10/0x10 [ 235.212780][ T6446] ? ksys_write+0x22a/0x250 [ 235.212805][ T6446] ? __pfx_ksys_write+0x10/0x10 [ 235.212825][ T6446] ? rcu_is_watching+0x15/0xb0 [ 235.212847][ T6446] __x64_sys_bpf+0x7c/0x90 [ 235.212868][ T6446] do_syscall_64+0xfa/0x3b0 [ 235.212889][ T6446] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.212908][ T6446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.212936][ T6446] ? clear_bhb_loop+0x60/0xb0 [ 235.212960][ T6446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.212978][ T6446] RIP: 0033:0x7fef8178eec9 [ 235.212993][ T6446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.213009][ T6446] RSP: 002b:00007fef825f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 235.213028][ T6446] RAX: ffffffffffffffda RBX: 00007fef819e5fa0 RCX: 00007fef8178eec9 [ 235.213043][ T6446] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 235.213055][ T6446] RBP: 00007fef825f9090 R08: 0000000000000000 R09: 0000000000000000 [ 235.213066][ T6446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.213078][ T6446] R13: 00007fef819e6038 R14: 00007fef819e5fa0 R15: 00007ffd8f530448 [ 235.213109][ T6446] [ 236.316748][ T6468] FAULT_INJECTION: forcing a failure. [ 236.316748][ T6468] name failslab, interval 1, probability 0, space 0, times 0 [ 236.362900][ T6468] CPU: 1 UID: 0 PID: 6468 Comm: syz.2.146 Not tainted syzkaller #0 PREEMPT(full) [ 236.362927][ T6468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 236.362939][ T6468] Call Trace: [ 236.362947][ T6468] [ 236.362955][ T6468] dump_stack_lvl+0x189/0x250 [ 236.362981][ T6468] ? __pfx____ratelimit+0x10/0x10 [ 236.363003][ T6468] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.363022][ T6468] ? __pfx__printk+0x10/0x10 [ 236.363047][ T6468] ? __pfx___might_resched+0x10/0x10 [ 236.363071][ T6468] ? fs_reclaim_acquire+0x7d/0x100 [ 236.363106][ T6468] should_fail_ex+0x414/0x560 [ 236.363133][ T6468] should_failslab+0xa8/0x100 [ 236.363158][ T6468] kmem_cache_alloc_noprof+0x73/0x3c0 [ 236.363179][ T6468] ? security_file_alloc+0x34/0x330 [ 236.363208][ T6468] security_file_alloc+0x34/0x330 [ 236.363232][ T6468] init_file+0x93/0x2f0 [ 236.363254][ T6468] alloc_empty_file+0x6e/0x1d0 [ 236.363272][ T6468] alloc_file_pseudo+0x13d/0x210 [ 236.363290][ T6468] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 236.363304][ T6468] ? __local_bh_enable_ip+0x12d/0x1c0 [ 236.363348][ T6468] anon_inode_getfile+0xc5/0x1a0 [ 236.363372][ T6468] bpf_link_prime+0xfc/0x220 [ 236.363396][ T6468] bpf_raw_tp_link_attach+0x49a/0x6c0 [ 236.363429][ T6468] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 236.363470][ T6468] ? __fget_files+0x2a/0x420 [ 236.363504][ T6468] bpf_raw_tracepoint_open+0x1b2/0x220 [ 236.363533][ T6468] __sys_bpf+0x75a/0x870 [ 236.363556][ T6468] ? __pfx___sys_bpf+0x10/0x10 [ 236.363591][ T6468] ? ksys_write+0x22a/0x250 [ 236.363613][ T6468] ? __pfx_ksys_write+0x10/0x10 [ 236.363631][ T6468] ? rcu_is_watching+0x15/0xb0 [ 236.363652][ T6468] __x64_sys_bpf+0x7c/0x90 [ 236.363671][ T6468] do_syscall_64+0xfa/0x3b0 [ 236.363690][ T6468] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.363706][ T6468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.363721][ T6468] ? clear_bhb_loop+0x60/0xb0 [ 236.363738][ T6468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.363752][ T6468] RIP: 0033:0x7f8561f8eec9 [ 236.363768][ T6468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.363783][ T6468] RSP: 002b:00007f8562da3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 236.363804][ T6468] RAX: ffffffffffffffda RBX: 00007f85621e5fa0 RCX: 00007f8561f8eec9 [ 236.363816][ T6468] RDX: 0000000000000018 RSI: 0000200000000900 RDI: 0000000000000011 [ 236.363826][ T6468] RBP: 00007f8562da3090 R08: 0000000000000000 R09: 0000000000000000 [ 236.363836][ T6468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.363846][ T6468] R13: 00007f85621e6038 R14: 00007f85621e5fa0 R15: 00007ffef4f8de38 [ 236.363876][ T6468] [ 237.460141][ T6435] __nla_validate_parse: 9 callbacks suppressed [ 237.460160][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 237.689417][ T6502] netlink: 'syz.2.155': attribute type 1 has an invalid length. [ 237.698660][ T6502] netlink: 'syz.2.155': attribute type 2 has an invalid length. [ 237.880505][ T6502] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.993551][ T6507] tipc: Enabled bearer , priority 0 [ 238.086037][ T6507] syzkaller0: entered promiscuous mode [ 238.091820][ T6507] syzkaller0: entered allmulticast mode [ 238.102224][ T6507] tipc: Resetting bearer [ 238.145064][ T6502] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.176878][ T6506] tipc: Resetting bearer [ 239.021217][ T9] tipc: Node number set to 3754607776 [ 239.161173][ T6506] tipc: Disabling bearer [ 239.253345][ T6502] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.271842][ T6522] netlink: 'syz.4.161': attribute type 10 has an invalid length. [ 239.329681][ T6522] team0: Port device dummy0 added [ 239.409935][ T6502] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.605196][ T6541] netlink: 48 bytes leftover after parsing attributes in process `syz.1.168'. [ 239.779798][ T6555] FAULT_INJECTION: forcing a failure. [ 239.779798][ T6555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.834208][ T6555] CPU: 0 UID: 0 PID: 6555 Comm: syz.0.169 Not tainted syzkaller #0 PREEMPT(full) [ 239.834235][ T6555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 239.834247][ T6555] Call Trace: [ 239.834255][ T6555] [ 239.834264][ T6555] dump_stack_lvl+0x189/0x250 [ 239.834290][ T6555] ? __pfx____ratelimit+0x10/0x10 [ 239.834311][ T6555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.834333][ T6555] ? __pfx__printk+0x10/0x10 [ 239.834358][ T6555] ? __might_fault+0xb0/0x130 [ 239.834395][ T6555] should_fail_ex+0x414/0x560 [ 239.834427][ T6555] _copy_from_iter+0x1de/0x1790 [ 239.834456][ T6555] ? rcu_is_watching+0x15/0xb0 [ 239.834476][ T6555] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 239.834502][ T6555] ? __pfx__copy_from_iter+0x10/0x10 [ 239.834525][ T6555] ? __build_skb_around+0x257/0x3e0 [ 239.834551][ T6555] ? netlink_sendmsg+0x642/0xb30 [ 239.834571][ T6555] ? skb_put+0x11b/0x210 [ 239.834598][ T6555] netlink_sendmsg+0x6b2/0xb30 [ 239.834629][ T6555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.834655][ T6555] ? aa_sock_msg_perm+0xf1/0x1d0 [ 239.834687][ T6555] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 239.834705][ T6555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.834728][ T6555] __sock_sendmsg+0x219/0x270 [ 239.834761][ T6555] ____sys_sendmsg+0x52d/0x830 [ 239.834792][ T6555] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.834827][ T6555] ? import_iovec+0x74/0xa0 [ 239.834854][ T6555] ___sys_sendmsg+0x21f/0x2a0 [ 239.834898][ T6555] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.834960][ T6555] ? __fget_files+0x2a/0x420 [ 239.834987][ T6555] ? __fget_files+0x3a0/0x420 [ 239.835026][ T6555] __sys_sendmmsg+0x227/0x430 [ 239.835057][ T6555] ? __pfx___sys_sendmmsg+0x10/0x10 [ 239.835083][ T6555] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 239.835134][ T6555] ? ksys_write+0x22a/0x250 [ 239.835161][ T6555] ? __pfx_ksys_write+0x10/0x10 [ 239.835182][ T6555] ? rcu_is_watching+0x15/0xb0 [ 239.835206][ T6555] __x64_sys_sendmmsg+0xa0/0xc0 [ 239.835237][ T6555] do_syscall_64+0xfa/0x3b0 [ 239.835258][ T6555] ? lockdep_hardirqs_on+0x9c/0x150 [ 239.835278][ T6555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.835297][ T6555] ? clear_bhb_loop+0x60/0xb0 [ 239.835321][ T6555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.835339][ T6555] RIP: 0033:0x7f288b98eec9 [ 239.835357][ T6555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.835373][ T6555] RSP: 002b:00007f288c859038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 239.835394][ T6555] RAX: ffffffffffffffda RBX: 00007f288bbe6180 RCX: 00007f288b98eec9 [ 239.835408][ T6555] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000006 [ 239.835421][ T6555] RBP: 00007f288c859090 R08: 0000000000000000 R09: 0000000000000000 [ 239.835432][ T6555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.835443][ T6555] R13: 00007f288bbe6218 R14: 00007f288bbe6180 R15: 00007ffca72878e8 [ 239.835475][ T6555] [ 240.160502][ T3587] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.262061][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.313144][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.376198][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.535137][ T6571] wg1 speed is unknown, defaulting to 1000 [ 240.594074][ T6577] FAULT_INJECTION: forcing a failure. [ 240.594074][ T6577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.594858][ T6577] [ 240.594867][ T6577] ====================================================== [ 240.594874][ T6577] WARNING: possible circular locking dependency detected [ 240.594887][ T6577] syzkaller #0 Not tainted [ 240.594896][ T6577] ------------------------------------------------------ [ 240.594904][ T6577] syz.4.182/6577 is trying to acquire lock: [ 240.594913][ T6577] ffffffff8e12e320 (console_owner){-...}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 240.594964][ T6577] [ 240.594964][ T6577] but task is already holding lock: [ 240.594970][ T6577] ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 240.595019][ T6577] [ 240.595019][ T6577] which lock already depends on the new lock. [ 240.595019][ T6577] [ 240.595030][ T6577] [ 240.595030][ T6577] the existing dependency chain (in reverse order) is: [ 240.595037][ T6577] [ 240.595037][ T6577] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 240.595066][ T6577] lock_acquire+0x120/0x360 [ 240.595089][ T6577] _raw_spin_lock_nested+0x32/0x50 [ 240.595109][ T6577] raw_spin_rq_lock_nested+0x2a/0x140 [ 240.595137][ T6577] task_rq_lock+0xbc/0x470 [ 240.595161][ T6577] cgroup_move_task+0x92/0x2a0 [ 240.595177][ T6577] css_set_move_task+0x658/0x9e0 [ 240.595195][ T6577] cgroup_post_fork+0x1ef/0x790 [ 240.595213][ T6577] copy_process+0x3862/0x3c00 [ 240.595230][ T6577] kernel_clone+0x21e/0x840 [ 240.595248][ T6577] user_mode_thread+0xdd/0x140 [ 240.595266][ T6577] rest_init+0x23/0x300 [ 240.595289][ T6577] start_kernel+0x3a9/0x410 [ 240.595315][ T6577] x86_64_start_reservations+0x24/0x30 [ 240.595335][ T6577] x86_64_start_kernel+0x143/0x1c0 [ 240.595353][ T6577] common_startup_64+0x13e/0x147 [ 240.595375][ T6577] [ 240.595375][ T6577] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 240.595400][ T6577] lock_acquire+0x120/0x360 [ 240.595423][ T6577] _raw_spin_lock_irqsave+0xa7/0xf0 [ 240.595439][ T6577] try_to_wake_up+0x67/0x12b0 [ 240.595458][ T6577] __wake_up_common_lock+0x137/0x1f0 [ 240.595479][ T6577] tty_port_default_wakeup+0xa2/0xf0 [ 240.595499][ T6577] serial8250_tx_chars+0x72e/0x970 [ 240.595516][ T6577] serial8250_handle_irq+0x633/0xbb0 [ 240.595532][ T6577] serial8250_default_handle_irq+0xbf/0x1e0 [ 240.595553][ T6577] serial8250_interrupt+0x8d/0x160 [ 240.595578][ T6577] __handle_irq_event_percpu+0x289/0x980 [ 240.595596][ T6577] handle_irq_event+0x8b/0x1e0 [ 240.595615][ T6577] handle_edge_irq+0x23b/0xa10 [ 240.595632][ T6577] __common_interrupt+0x13e/0x1f0 [ 240.595656][ T6577] common_interrupt+0xb6/0xe0 [ 240.595680][ T6577] asm_common_interrupt+0x26/0x40 [ 240.595697][ T6577] pv_native_safe_halt+0x13/0x20 [ 240.595714][ T6577] default_idle+0x13/0x20 [ 240.595735][ T6577] default_idle_call+0x74/0xb0 [ 240.595757][ T6577] do_idle+0x1e8/0x510 [ 240.595793][ T6577] cpu_startup_entry+0x44/0x60 [ 240.595818][ T6577] rest_init+0x2de/0x300 [ 240.595841][ T6577] start_kernel+0x3a9/0x410 [ 240.595864][ T6577] x86_64_start_reservations+0x24/0x30 [ 240.595884][ T6577] x86_64_start_kernel+0x143/0x1c0 [ 240.595902][ T6577] common_startup_64+0x13e/0x147 [ 240.595924][ T6577] [ 240.595924][ T6577] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 240.595949][ T6577] lock_acquire+0x120/0x360 [ 240.595972][ T6577] _raw_spin_lock_irqsave+0xa7/0xf0 [ 240.595988][ T6577] __wake_up_common_lock+0x2f/0x1f0 [ 240.596008][ T6577] tty_port_default_wakeup+0xa2/0xf0 [ 240.596027][ T6577] serial8250_tx_chars+0x72e/0x970 [ 240.596043][ T6577] serial8250_handle_irq+0x633/0xbb0 [ 240.596060][ T6577] serial8250_default_handle_irq+0xbf/0x1e0 [ 240.596082][ T6577] serial8250_interrupt+0x8d/0x160 [ 240.596106][ T6577] __handle_irq_event_percpu+0x289/0x980 [ 240.596126][ T6577] handle_irq_event+0x8b/0x1e0 [ 240.596148][ T6577] handle_edge_irq+0x23b/0xa10 [ 240.596165][ T6577] __common_interrupt+0x13e/0x1f0 [ 240.596193][ T6577] common_interrupt+0xb6/0xe0 [ 240.596216][ T6577] asm_common_interrupt+0x26/0x40 [ 240.596233][ T6577] pv_native_safe_halt+0x13/0x20 [ 240.596250][ T6577] default_idle+0x13/0x20 [ 240.596271][ T6577] default_idle_call+0x74/0xb0 [ 240.596293][ T6577] do_idle+0x1e8/0x510 [ 240.596315][ T6577] cpu_startup_entry+0x44/0x60 [ 240.596338][ T6577] rest_init+0x2de/0x300 [ 240.596377][ T6577] start_kernel+0x3a9/0x410 [ 240.596405][ T6577] x86_64_start_reservations+0x24/0x30 [ 240.596424][ T6577] x86_64_start_kernel+0x143/0x1c0 [ 240.596442][ T6577] common_startup_64+0x13e/0x147 [ 240.596464][ T6577] [ 240.596464][ T6577] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 240.596489][ T6577] lock_acquire+0x120/0x360 [ 240.596512][ T6577] _raw_spin_lock_irqsave+0xa7/0xf0 [ 240.596528][ T6577] serial8250_console_write+0x17e/0x1ba0 [ 240.596546][ T6577] console_flush_all+0x728/0xc40 [ 240.596565][ T6577] console_unlock+0xc4/0x270 [ 240.596581][ T6577] vprintk_emit+0x5b7/0x7a0 [ 240.596596][ T6577] _printk+0xcf/0x120 [ 240.596618][ T6577] register_console+0xa8b/0xf90 [ 240.596636][ T6577] univ8250_console_init+0x3a/0x70 [ 240.596656][ T6577] console_init+0x10e/0x430 [ 240.596674][ T6577] start_kernel+0x254/0x410 [ 240.596697][ T6577] x86_64_start_reservations+0x24/0x30 [ 240.596717][ T6577] x86_64_start_kernel+0x143/0x1c0 [ 240.596735][ T6577] common_startup_64+0x13e/0x147 [ 240.596757][ T6577] [ 240.596757][ T6577] -> #0 (console_owner){-...}-{0:0}: [ 240.596788][ T6577] validate_chain+0xb9b/0x2140 [ 240.596803][ T6577] __lock_acquire+0xab9/0xd20 [ 240.596826][ T6577] lock_acquire+0x120/0x360 [ 240.596849][ T6577] console_flush_all+0x6d2/0xc40 [ 240.596868][ T6577] console_unlock+0xc4/0x270 [ 240.596883][ T6577] vprintk_emit+0x5b7/0x7a0 [ 240.596899][ T6577] _printk+0xcf/0x120 [ 240.596919][ T6577] should_fail_ex+0x3f5/0x560 [ 240.596943][ T6577] strncpy_from_user+0x36/0x290 [ 240.596965][ T6577] strncpy_from_user_nofault+0x72/0x150 [ 240.596985][ T6577] bpf_probe_read_user_str+0x2a/0x70 [ 240.597009][ T6577] bpf_prog_693483806bd7978c+0x64/0x6c [ 240.597024][ T6577] bpf_trace_run2+0x284/0x4b0 [ 240.597049][ T6577] __bpf_trace_tlb_flush+0xf5/0x150 [ 240.597070][ T6577] trace_tlb_flush+0x115/0x140 [ 240.597091][ T6577] switch_mm_irqs_off+0x53e/0x7a0 [ 240.597112][ T6577] __schedule+0x110e/0x4cc0 [ 240.597128][ T6577] schedule+0x165/0x360 [ 240.597143][ T6577] schedule_preempt_disabled+0x13/0x30 [ 240.597161][ T6577] __mutex_lock+0x7e6/0x1350 [ 240.597180][ T6577] rtnl_newlink+0x8e9/0x1c80 [ 240.597199][ T6577] rtnetlink_rcv_msg+0x7cc/0xb70 [ 240.597217][ T6577] netlink_rcv_skb+0x208/0x470 [ 240.597236][ T6577] netlink_unicast+0x82c/0x9e0 [ 240.597251][ T6577] netlink_sendmsg+0x805/0xb30 [ 240.597271][ T6577] __sock_sendmsg+0x219/0x270 [ 240.597297][ T6577] ____sys_sendmsg+0x505/0x830 [ 240.597319][ T6577] ___sys_sendmsg+0x21f/0x2a0 [ 240.597340][ T6577] __x64_sys_sendmsg+0x19b/0x260 [ 240.597366][ T6577] do_syscall_64+0xfa/0x3b0 [ 240.597381][ T6577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.597395][ T6577] [ 240.597395][ T6577] other info that might help us debug this: [ 240.597395][ T6577] [ 240.597400][ T6577] Chain exists of: [ 240.597400][ T6577] console_owner --> &p->pi_lock --> &rq->__lock [ 240.597400][ T6577] [ 240.597428][ T6577] Possible unsafe locking scenario: [ 240.597428][ T6577] [ 240.597433][ T6577] CPU0 CPU1 [ 240.597438][ T6577] ---- ---- [ 240.597442][ T6577] lock(&rq->__lock); [ 240.597452][ T6577] lock(&p->pi_lock); [ 240.597464][ T6577] lock(&rq->__lock); [ 240.597475][ T6577] lock(console_owner); [ 240.597484][ T6577] [ 240.597484][ T6577] *** DEADLOCK *** [ 240.597484][ T6577] [ 240.597496][ T6577] 6 locks held by syz.4.182/6577: [ 240.597506][ T6577] #0: ffffffff8fa502d0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 240.597558][ T6577] #1: ffffffff8f53ab88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 240.597597][ T6577] #2: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 240.597637][ T6577] #3: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x186/0x4b0 [ 240.597671][ T6577] #4: ffffffff8e12e380 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 240.597705][ T6577] #5: ffffffff8e015c50 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 240.597738][ T6577] [ 240.597738][ T6577] stack backtrace: [ 240.597746][ T6577] CPU: 0 UID: 0 PID: 6577 Comm: syz.4.182 Not tainted syzkaller #0 PREEMPT(full) [ 240.597762][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 240.597775][ T6577] Call Trace: [ 240.597786][ T6577] [ 240.597792][ T6577] dump_stack_lvl+0x189/0x250 [ 240.597813][ T6577] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.597828][ T6577] ? __pfx__printk+0x10/0x10 [ 240.597846][ T6577] ? print_lock_name+0xde/0x100 [ 240.597864][ T6577] print_circular_bug+0x2ee/0x310 [ 240.597880][ T6577] check_noncircular+0x134/0x160 [ 240.597895][ T6577] validate_chain+0xb9b/0x2140 [ 240.597916][ T6577] __lock_acquire+0xab9/0xd20 [ 240.597938][ T6577] ? console_flush_all+0x13a/0xc40 [ 240.597952][ T6577] lock_acquire+0x120/0x360 [ 240.597970][ T6577] ? console_flush_all+0x13a/0xc40 [ 240.597991][ T6577] ? do_raw_spin_unlock+0x122/0x240 [ 240.598007][ T6577] ? console_flush_all+0x13a/0xc40 [ 240.598026][ T6577] console_flush_all+0x6d2/0xc40 [ 240.598045][ T6577] ? console_flush_all+0x13a/0xc40 [ 240.598061][ T6577] ? console_flush_all+0x13a/0xc40 [ 240.598078][ T6577] ? __pfx_console_flush_all+0x10/0x10 [ 240.598096][ T6577] ? is_printk_cpu_sync_owner+0x32/0x40 [ 240.598115][ T6577] console_unlock+0xc4/0x270 [ 240.598129][ T6577] ? __pfx_console_unlock+0x10/0x10 [ 240.598143][ T6577] ? is_printk_cpu_sync_owner+0x32/0x40 [ 240.598162][ T6577] vprintk_emit+0x5b7/0x7a0 [ 240.598175][ T6577] ? __pfx_vprintk_emit+0x10/0x10 [ 240.598191][ T6577] ? unwind_next_frame+0xa5/0x2390 [ 240.598209][ T6577] _printk+0xcf/0x120 [ 240.598225][ T6577] ? __pfx____ratelimit+0x10/0x10 [ 240.598241][ T6577] ? __pfx__printk+0x10/0x10 [ 240.598260][ T6577] ? __x64_sys_sendmsg+0x19b/0x260 [ 240.598279][ T6577] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 240.598298][ T6577] should_fail_ex+0x3f5/0x560 [ 240.598318][ T6577] strncpy_from_user+0x36/0x290 [ 240.598336][ T6577] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 240.598351][ T6577] strncpy_from_user_nofault+0x72/0x150 [ 240.598368][ T6577] bpf_probe_read_user_str+0x2a/0x70 [ 240.598398][ T6577] bpf_prog_693483806bd7978c+0x64/0x6c [ 240.598412][ T6577] bpf_trace_run2+0x284/0x4b0 [ 240.598426][ T6577] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 240.598434][ T6577] ? bpf_trace_run2+0x186/0x4b0 [ 240.598445][ T6577] ? __pfx_bpf_trace_run2+0x10/0x10 [ 240.598456][ T6577] ? kvm_sched_clock_read+0x11/0x20 [ 240.598466][ T6577] ? sched_clock_cpu+0x74/0x430 [ 240.598479][ T6577] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 240.598492][ T6577] __bpf_trace_tlb_flush+0xf5/0x150 [ 240.598504][ T6577] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 240.598518][ T6577] ? psi_group_change+0xab8/0x1050 [ 240.598536][ T6577] trace_tlb_flush+0x115/0x140 [ 240.598548][ T6577] switch_mm_irqs_off+0x53e/0x7a0 [ 240.598561][ T6577] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 240.598572][ T6577] ? psi_task_switch+0x4e3/0x880 [ 240.598582][ T6577] __schedule+0x110e/0x4cc0 [ 240.598594][ T6577] ? __lock_acquire+0xab9/0xd20 [ 240.598608][ T6577] ? __lock_acquire+0xab9/0xd20 [ 240.598621][ T6577] ? __pfx___schedule+0x10/0x10 [ 240.598633][ T6577] ? schedule+0x91/0x360 [ 240.598642][ T6577] schedule+0x165/0x360 [ 240.598651][ T6577] schedule_preempt_disabled+0x13/0x30 [ 240.598661][ T6577] __mutex_lock+0x7e6/0x1350 [ 240.598672][ T6577] ? __mutex_lock+0x5bb/0x1350 [ 240.598684][ T6577] ? rtnl_newlink+0x8e9/0x1c80 [ 240.598694][ T6577] ? __pfx___mutex_lock+0x10/0x10 [ 240.598707][ T6577] ? ns_capable+0x8a/0xf0 [ 240.598721][ T6577] ? rtnl_link_get_net_capable+0x16a/0x350 [ 240.598734][ T6577] rtnl_newlink+0x8e9/0x1c80 [ 240.598743][ T6577] ? __dev_queue_xmit+0x1b8d/0x3b50 [ 240.598759][ T6577] ? __pfx_rtnl_newlink+0x10/0x10 [ 240.598775][ T6577] ? kasan_quarantine_put+0xdd/0x220 [ 240.598792][ T6577] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.598804][ T6577] ? nlmon_xmit+0xb0/0x100 [ 240.598814][ T6577] ? kmem_cache_free+0x18f/0x400 [ 240.598828][ T6577] ? __local_bh_enable_ip+0x12d/0x1c0 [ 240.598843][ T6577] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.598854][ T6577] ? __local_bh_enable_ip+0x12d/0x1c0 [ 240.598868][ T6577] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 240.598883][ T6577] ? __dev_queue_xmit+0x27b/0x3b50 [ 240.598896][ T6577] ? __dev_queue_xmit+0x27b/0x3b50 [ 240.598912][ T6577] ? __dev_queue_xmit+0x27b/0x3b50 [ 240.598925][ T6577] ? __dev_queue_xmit+0x1d79/0x3b50 [ 240.598939][ T6577] ? __lock_acquire+0xab9/0xd20 [ 240.598957][ T6577] ? __pfx_rtnl_newlink+0x10/0x10 [ 240.598966][ T6577] rtnetlink_rcv_msg+0x7cc/0xb70 [ 240.598978][ T6577] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 240.598987][ T6577] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 240.598997][ T6577] ? ref_tracker_free+0x63a/0x7d0 [ 240.599011][ T6577] ? __asan_memcpy+0x40/0x70 [ 240.599020][ T6577] ? __pfx_ref_tracker_free+0x10/0x10 [ 240.599033][ T6577] ? __skb_clone+0x63/0x7a0 [ 240.599049][ T6577] netlink_rcv_skb+0x208/0x470 [ 240.599060][ T6577] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 240.599071][ T6577] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 240.599083][ T6577] ? netlink_deliver_tap+0x2e/0x1b0 [ 240.599096][ T6577] netlink_unicast+0x82c/0x9e0 [ 240.599107][ T6577] ? __pfx_netlink_unicast+0x10/0x10 [ 240.599116][ T6577] ? netlink_sendmsg+0x642/0xb30 [ 240.599126][ T6577] ? skb_put+0x11b/0x210 [ 240.599137][ T6577] netlink_sendmsg+0x805/0xb30 [ 240.599150][ T6577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.599162][ T6577] ? aa_sock_msg_perm+0xf1/0x1d0 [ 240.599177][ T6577] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 240.599187][ T6577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.599198][ T6577] __sock_sendmsg+0x219/0x270 [ 240.599213][ T6577] ____sys_sendmsg+0x505/0x830 [ 240.599226][ T6577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 240.599240][ T6577] ? import_iovec+0x74/0xa0 [ 240.599252][ T6577] ___sys_sendmsg+0x21f/0x2a0 [ 240.599265][ T6577] ? __pfx____sys_sendmsg+0x10/0x10 [ 240.599285][ T6577] ? __fget_files+0x2a/0x420 [ 240.599299][ T6577] ? __fget_files+0x3a0/0x420 [ 240.599314][ T6577] __x64_sys_sendmsg+0x19b/0x260 [ 240.599327][ T6577] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 240.599341][ T6577] ? __pfx_ksys_write+0x10/0x10 [ 240.599353][ T6577] ? rcu_is_watching+0x15/0xb0 [ 240.599363][ T6577] ? do_syscall_64+0xbe/0x3b0 [ 240.599374][ T6577] do_syscall_64+0xfa/0x3b0 [ 240.599385][ T6577] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.599394][ T6577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.599404][ T6577] ? clear_bhb_loop+0x60/0xb0 [ 240.599414][ T6577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.599424][ T6577] RIP: 0033:0x7faa5578eec9 [ 240.599433][ T6577] Code: Unable to access opcode bytes at 0x7faa5578ee9f. [ 240.599438][ T6577] RSP: 002b:00007faa5661a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.599448][ T6577] RAX: ffffffffffffffda RBX: 00007faa559e5fa0 RCX: 00007faa5578eec9 [ 240.599455][ T6577] RDX: 0000000008000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 240.599462][ T6577] RBP: 00007faa5661a090 R08: 0000000000000000 R09: 0000000000000000 [ 240.599468][ T6577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.599474][ T6577] R13: 00007faa559e6038 R14: 00007faa559e5fa0 R15: 00007ffefd1ebb98 [ 240.599484][ T6577] [ 242.121844][ T6577] CPU: 0 UID: 0 PID: 6577 Comm: syz.4.182 Not tainted syzkaller #0 PREEMPT(full) [ 242.121859][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 242.121866][ T6577] Call Trace: [ 242.121873][ T6577] [ 242.121880][ T6577] dump_stack_lvl+0x189/0x250 [ 242.121895][ T6577] ? __pfx____ratelimit+0x10/0x10 [ 242.121907][ T6577] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.121917][ T6577] ? __pfx__printk+0x10/0x10 [ 242.121929][ T6577] ? __x64_sys_sendmsg+0x19b/0x260 [ 242.121943][ T6577] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 242.121957][ T6577] should_fail_ex+0x414/0x560 [ 242.121971][ T6577] strncpy_from_user+0x36/0x290 [ 242.121984][ T6577] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 242.121995][ T6577] strncpy_from_user_nofault+0x72/0x150 [ 242.122007][ T6577] bpf_probe_read_user_str+0x2a/0x70 [ 242.122023][ T6577] bpf_prog_693483806bd7978c+0x64/0x6c [ 242.122032][ T6577] bpf_trace_run2+0x284/0x4b0 [ 242.122043][ T6577] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 242.122052][ T6577] ? bpf_trace_run2+0x186/0x4b0 [ 242.122063][ T6577] ? __pfx_bpf_trace_run2+0x10/0x10 [ 242.122074][ T6577] ? kvm_sched_clock_read+0x11/0x20 [ 242.122084][ T6577] ? sched_clock_cpu+0x74/0x430 [ 242.122098][ T6577] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 242.122111][ T6577] __bpf_trace_tlb_flush+0xf5/0x150 [ 242.122124][ T6577] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 242.122138][ T6577] ? psi_group_change+0xab8/0x1050 [ 242.122153][ T6577] trace_tlb_flush+0x115/0x140 [ 242.122166][ T6577] switch_mm_irqs_off+0x53e/0x7a0 [ 242.122179][ T6577] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 242.122190][ T6577] ? psi_task_switch+0x4e3/0x880 [ 242.122201][ T6577] __schedule+0x110e/0x4cc0 [ 242.122213][ T6577] ? __lock_acquire+0xab9/0xd20 [ 242.122227][ T6577] ? __lock_acquire+0xab9/0xd20 [ 242.122240][ T6577] ? __pfx___schedule+0x10/0x10 [ 242.122253][ T6577] ? schedule+0x91/0x360 [ 242.122262][ T6577] schedule+0x165/0x360 [ 242.122271][ T6577] schedule_preempt_disabled+0x13/0x30 [ 242.122281][ T6577] __mutex_lock+0x7e6/0x1350 [ 242.122292][ T6577] ? __mutex_lock+0x5bb/0x1350 [ 242.122304][ T6577] ? rtnl_newlink+0x8e9/0x1c80 [ 242.122316][ T6577] ? __pfx___mutex_lock+0x10/0x10 [ 242.122329][ T6577] ? ns_capable+0x8a/0xf0 [ 242.122343][ T6577] ? rtnl_link_get_net_capable+0x16a/0x350 [ 242.122356][ T6577] rtnl_newlink+0x8e9/0x1c80 [ 242.122366][ T6577] ? __dev_queue_xmit+0x1b8d/0x3b50 [ 242.122383][ T6577] ? __pfx_rtnl_newlink+0x10/0x10 [ 242.122399][ T6577] ? kasan_quarantine_put+0xdd/0x220 [ 242.122410][ T6577] ? lockdep_hardirqs_on+0x9c/0x150 [ 242.122421][ T6577] ? nlmon_xmit+0xb0/0x100 [ 242.122432][ T6577] ? kmem_cache_free+0x18f/0x400 [ 242.122446][ T6577] ? __local_bh_enable_ip+0x12d/0x1c0 [ 242.122460][ T6577] ? lockdep_hardirqs_on+0x9c/0x150 [ 242.122476][ T6577] ? __local_bh_enable_ip+0x12d/0x1c0 [ 242.122490][ T6577] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 242.122505][ T6577] ? __dev_queue_xmit+0x27b/0x3b50 [ 242.122518][ T6577] ? __dev_queue_xmit+0x27b/0x3b50 [ 242.122530][ T6577] ? __dev_queue_xmit+0x27b/0x3b50 [ 242.122543][ T6577] ? __dev_queue_xmit+0x1d79/0x3b50 [ 242.122557][ T6577] ? __lock_acquire+0xab9/0xd20 [ 242.122576][ T6577] ? __pfx_rtnl_newlink+0x10/0x10 [ 242.122585][ T6577] rtnetlink_rcv_msg+0x7cc/0xb70 [ 242.122597][ T6577] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 242.122607][ T6577] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 242.122616][ T6577] ? ref_tracker_free+0x63a/0x7d0 [ 242.122630][ T6577] ? __asan_memcpy+0x40/0x70 [ 242.122640][ T6577] ? __pfx_ref_tracker_free+0x10/0x10 [ 242.122653][ T6577] ? __skb_clone+0x63/0x7a0 [ 242.122668][ T6577] netlink_rcv_skb+0x208/0x470 [ 242.122680][ T6577] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 242.122690][ T6577] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 242.122703][ T6577] ? netlink_deliver_tap+0x2e/0x1b0 [ 242.122715][ T6577] netlink_unicast+0x82c/0x9e0 [ 242.122726][ T6577] ? __pfx_netlink_unicast+0x10/0x10 [ 242.122736][ T6577] ? netlink_sendmsg+0x642/0xb30 [ 242.122746][ T6577] ? skb_put+0x11b/0x210 [ 242.122757][ T6577] netlink_sendmsg+0x805/0xb30 [ 242.122770][ T6577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.122782][ T6577] ? aa_sock_msg_perm+0xf1/0x1d0 [ 242.122798][ T6577] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 242.122808][ T6577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.122819][ T6577] __sock_sendmsg+0x219/0x270 [ 242.122835][ T6577] ____sys_sendmsg+0x505/0x830 [ 242.122849][ T6577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 242.122863][ T6577] ? import_iovec+0x74/0xa0 [ 242.122875][ T6577] ___sys_sendmsg+0x21f/0x2a0 [ 242.122888][ T6577] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.122908][ T6577] ? __fget_files+0x2a/0x420 [ 242.122921][ T6577] ? __fget_files+0x3a0/0x420 [ 242.122937][ T6577] __x64_sys_sendmsg+0x19b/0x260 [ 242.122950][ T6577] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 242.122965][ T6577] ? __pfx_ksys_write+0x10/0x10 [ 242.122976][ T6577] ? rcu_is_watching+0x15/0xb0 [ 242.122985][ T6577] ? do_syscall_64+0xbe/0x3b0 [ 242.122997][ T6577] do_syscall_64+0xfa/0x3b0 [ 242.123008][ T6577] ? lockdep_hardirqs_on+0x9c/0x150 [ 242.123017][ T6577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.123027][ T6577] ? clear_bhb_loop+0x60/0xb0 [ 242.123038][ T6577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.123048][ T6577] RIP: 0033:0x7faa5578eec9 [ 242.123057][ T6577] Code: Unable to access opcode bytes at 0x7faa5578ee9f. [ 242.123062][ T6577] RSP: 002b:00007faa5661a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.123074][ T6577] RAX: ffffffffffffffda RBX: 00007faa559e5fa0 RCX: 00007faa5578eec9 [ 242.123081][ T6577] RDX: 0000000008000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 242.123088][ T6577] RBP: 00007faa5661a090 R08: 0000000000000000 R09: 0000000000000000 [ 242.123094][ T6577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.123099][ T6577] R13: 00007faa559e6038 R14: 00007faa559e5fa0 R15: 00007ffefd1ebb98 [ 242.123110][ T6577] [ 242.720501][ T6577] vlan2: entered allmulticast mode [ 242.727054][ T6577] bond0: entered allmulticast mode [ 242.734593][ T6577] bond_slave_0: entered allmulticast mode [ 242.740620][ T6577] bond_slave_1: entered allmulticast mode [ 242.775157][ T6574] wg1 speed is unknown, defaulting to 1000