last executing test programs: 45.855873589s ago: executing program 3 (id=16552): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x25dfdbfe, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe4]}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x40000, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000200)='f', 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000008400000008"], 0x20}, 0x0) sendmsg$inet(r1, &(0x7f0000000280)={&(0x7f00000002c0)={0x2, 0x0, @dev}, 0x5, &(0x7f0000000300)=[{&(0x7f0000000340)='&', 0x1}], 0x1, &(0x7f0000000380)=ANY=[], 0x20}, 0x0) bpf$MAP_CREATE(0x4000000000000, 0x0, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) write(0xca, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={{0x14}, [], {0x14}}, 0x28}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0xffffffffffffff13, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="65968a1f1489980f6d1c6e8c4c180fdf6798d6c196326b7d5411c59fafeb1b0137ab2dbf1f19988c3d558baef2cd0086bb34bc299524c2027aa86593e808f3e70478ece2ca09936acc2040f293703ea7e5277623299c5ecd39d6647dc5986b67666eec3d3ea702a33627530395c56e804d5affdc2723b723f98250d3636a1ceb5cda9ef7a0ba67208630b68b76646a396b328256af8ba58d1bf32c50a492fb46d3e250eedfdfa578de967a0b730d46eed8dcf2708b274c15198e636277a1a4e60412870ced7b8d6330c056d6ad391c", @ANYRES16=r2, @ANYRES16=r1, @ANYRES64=r3, @ANYRES16=r3, @ANYRESOCT=r3], 0x38}, 0x1, 0x0, 0x0, 0x95}, 0x400c088) 45.34249663s ago: executing program 3 (id=16556): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000020a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a30"], 0x110}}, 0x0) 45.152836157s ago: executing program 3 (id=16559): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000200), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000240)={0x1, [0x0]}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000002c0)={r2, 0x12, "1fe473a8cb3169d4d5b7259627b5cf5b8a50"}, &(0x7f0000000300)=0x1a) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x11) r4 = socket$unix(0x1, 0x1, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f00000003c0)={0x60001, 0x31c}, 0x8) bind$bt_sco(r5, 0x0, 0x0) listen(r5, 0x0) close(0x4) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000480)="10030000", 0x4, 0x4004, &(0x7f00000004c0)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)='y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)}], 0x1}}], 0x3, 0x40488c1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x8, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) close(0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)={@fallback, 0xffffffffffffffff, 0x19, 0x4}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'veth0_vlan\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) 45.050614908s ago: executing program 4 (id=16560): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000200), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000240)={0x1, [0x0]}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000002c0)={r2, 0x12, "1fe473a8cb3169d4d5b7259627b5cf5b8a50"}, &(0x7f0000000300)=0x1a) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x11) r4 = socket$unix(0x1, 0x1, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r5, 0x1, 0xd, 0x0, 0x0) bind$bt_sco(r5, &(0x7f0000000400), 0x8) listen(r5, 0x0) close(0x4) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000480)="10030000", 0x4, 0x4004, &(0x7f00000004c0)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)='y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)}], 0x1}}], 0x3, 0x40488c1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x8, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) close(0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)={@fallback, 0xffffffffffffffff, 0x19, 0x4}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'veth0_vlan\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) 44.08940403s ago: executing program 4 (id=16571): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002980)=ANY=[@ANYBLOB="380000006a0019052abd7000fddbdf250000000000000000080001"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000002880)={0x18, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x14}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000028c0)=ANY=[@ANYBLOB="0700000004000000000900000200000028680000", @ANYRES32, @ANYBLOB="000000000000200000000000000000000000b1a4563006dbb0000093037aa0903bec498b4d7652c0334a472bcc34c4a4149df9cfbd427d8ff61fe50228120e6a3281267da5ed762b3dc36d4497c378dfddc995899083ba236182e01e66210003516e07904372357f6ba40299abf6d1b64c7ed1ccd1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r4}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r4}, 0xc) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)=""/4102, 0x1006}, {&(0x7f0000001540)=""/241, 0xf1}, {&(0x7f0000001640)=""/4095, 0xfff}, {&(0x7f0000002640)=""/146, 0x92}, {&(0x7f0000002700)=""/221, 0xdd}], 0x5}, 0x40000000) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x28, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 43.971776022s ago: executing program 0 (id=16572): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB="bf16000000000000b707000b000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000001000085000000550000001500020000000000bf010000000000008500000056000000b70000000200000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 43.963275333s ago: executing program 4 (id=16574): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote, 0x2}, 0x1c) shutdown(r0, 0x1) (async) setsockopt(r0, 0x84, 0x80, &(0x7f0000000380)="1af3050000f2bd5b", 0x8) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e20, @loopback}}}, 0x84) (async, rerun: 64) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (rerun: 32) getpeername(r3, 0x0, 0x0) (async) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) (rerun: 64) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async, rerun: 32) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) (async, rerun: 32) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r9, 0x12, 0x2, &(0x7f0000000300), &(0x7f0000000340)) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x40000) (async) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) close(r10) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 43.578005341s ago: executing program 2 (id=16576): socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x2}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x20004004) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty=0x10000000, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x200000000, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}, 0x1, 0x200000000000000}, 0x10) 43.470620839s ago: executing program 0 (id=16578): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(r1, &(0x7f0000000200)=[{0x0}], 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000060a030400000000000000000a0000010900010073797a3100000000200004801c200180090001006d617371000000000c00028008000240000000000900020073797a3200000000140000001100010000000000000000000a00000a"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001800dd8d00000000000000000200000000000006000000000d4e17007f4a20c6b2020e73f176b9ffd7e1b0af3685c6239e3c1da4fc839d470d8cf89f00ff9f84725370dbf8210ed015ef094c4b0f4d3b40193aaa83629b9523120fdd8b28373b1e8ee2002751b248f80bbfa0048c052af2a5a7b8d7d125924337c2b7db2e4ac6ae3dc9861f58c3a0abe87d594a86cfe81ce4b43781048ca119fad44600"/170], 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xc3ffffffffffffff}, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r5, &(0x7f0000006100)=[{{&(0x7f0000000880)=@un=@abs, 0x80, &(0x7f0000000b40)=[{0x0}], 0x1}, 0x4}], 0x1, 0x12040, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19}, 0x94) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000aa00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="dc70b75fa4b0b69054d33a073e54eca77c118802b955617d0716c3e88f7bb6934e69ee9abefff665db717a6ddca708ca0edade1f2b376ff6", @ANYBLOB="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"], 0x50d8}}, 0xc000) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0xfffffee3}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000a80)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x12, 0x6, 0x4, 0x4, 0x0, 0x1}, 0x50) 43.435663522s ago: executing program 1 (id=16579): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp-reno', 0xa) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000000c0), 0x1a, 0x4008001, 0x80) close(r3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000500)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000540)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r6, &(0x7f0000000580)={&(0x7f00000005c0)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x200448c0) r7 = socket$kcm(0x2d, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) getsockopt$bt_hci(r7, 0x11d, 0x2, 0x0, &(0x7f0000000140)) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000280)={0x3, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x0, @empty}}}, 0x108) sendfile(r3, r2, 0x0, 0xf03a0005) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a"], 0x5c}}, 0x0) 43.38374168s ago: executing program 2 (id=16580): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0x95}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000100600a88000000090a050000000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b44001280200001800a00010071756f7461000000100002800c0001400000000000000080140001800c000100636f756e746572000400028001000180080001006c6f670008000340000001"], 0xb0}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 43.336228413s ago: executing program 0 (id=16581): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r2, @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x2000800) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x20, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x8, 0x25}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) connect$inet6(r2, &(0x7f0000000040)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e25, 0xe5, @ipv4={'\x00', '\xff\xff', @local}, 0x12}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000280)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 43.225260529s ago: executing program 1 (id=16582): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c0000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="03920000004000003c00128008000100677470003000028008000300eec2060408000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYBLOB="1400"], 0x6c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x200080c4) 43.146755882s ago: executing program 0 (id=16583): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r5, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x137}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8c4}, 0x40005) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x18, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10, 0x7}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_ACT={0xfffffffffffffe35}]}}]}, 0x4c}}, 0x0) 43.136840318s ago: executing program 2 (id=16584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000020a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a30"], 0x110}}, 0x0) (fail_nth: 7) 42.575164289s ago: executing program 2 (id=16585): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="580000001500add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 42.518752729s ago: executing program 1 (id=16586): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg(r1, &(0x7f0000000340), 0x0, 0x24008000) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000020a01880000000000006000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c0001800800014000000004500000000c0a01010000000000000000020000030900020073797a31000000000900010073797a300000000024000380"], 0xfc}}, 0x0) ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, 0x0) sendmsg$IPSET_CMD_SAVE(r0, 0x0, 0x4008004) 42.34606033s ago: executing program 4 (id=16587): r0 = socket(0x2, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x2, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="200a000000000000000000000000000095000000000000006bef80454bb38dde38e864e1f61a8c4724a0f85a6e8a20c3611a69e61f596a41fa23999b06b8c8a423bdefe28232440d7611557ae3284f0d3bd364f14c49259a8b50ef4dcd7c20f841babb9797b2efc9107ca7ce3dc6d53389702f2a8ea4cae5a3712c06de8ed2687a228104a80cd4ce3f38e6f63af1ef5ca3208a360b9f83c512eaed8937a2acf9b48a519d073665ece5d3ff7e264f0bb9f18acdacf00ba1db3753e9c9127e6484c691130a88bacc2f291182cb94c0ae15142d2dd18b589ec79520"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, 0xffffffffffffffff}, 0x94) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x4e22, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000380)=@assoc_value={r5, 0xd}, 0x8) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0xc, &(0x7f0000000000)=0x40, 0x49) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x57, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRES8=r7], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES32=r0, @ANYRESOCT=r0], 0x50) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000000000002000002e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002004e2100"/259], 0x110) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000005000000018010000776c6c2500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0xc, &(0x7f0000000a00)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000ac0)=r11, 0x4) sendmsg$inet(r13, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x20000000) sendto$inet(r0, 0x0, 0x0, 0x48810, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) 42.233457705s ago: executing program 2 (id=16588): r0 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) r1 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc20001180"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000380)={'sit0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x7800, 0x8000, 0x8, 0x4000001, {{0x5, 0x4, 0x2, 0x15, 0x14, 0x65, 0x200, 0x15, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019008400"], 0x48}}, 0x4084) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r1, &(0x7f0000000380), 0x4000000000001f2, 0x0) shutdown(r0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x102030405060708, {0x0, 0x1, 0x4}, 0x2}, 0x54) connect$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x0, 0xee, 0x4}, 0xff}, 0x18) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x1c, 0x0, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000640)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000680), r9) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="7f0023010000340200000200000008000100", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x8ec486f21879f1fe}, 0x0) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f00000007c0), r12) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f0000000800)=0x0) sendmsg$NFC_CMD_SE_IO(r12, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x28, r13, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_APDU={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40002) socket(0x10, 0x803, 0x0) 42.158540081s ago: executing program 0 (id=16589): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000d80)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0xe0dbf46ca9d044ba, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x89, 0x0, @private, @multicast1, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @multicast1, @local]}]}}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'bridge0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x29, 0x4, 0x3, 0x80000001, 0x2e, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @remote, 0x20, 0x8, 0x100, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000740)={'syztnl2\x00', r4, 0x29, 0x84, 0x84, 0x4038a0b, 0x11, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r7) getsockname$packet(r7, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000800)=0x14) sendmsg$nl_route(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x202, {0x0, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x8d0) sendmsg$nl_route_sched(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b00)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x38, r0, 0x10ada85e65c25349, 0x70bd2b, 0x25dfdbfc, {{0x67}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x4}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x38}}, 0x6048004) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e, 0x0, 0x2}, 0x28) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r10, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r11, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf61000000000000070100000400000085000000c2000000bf610000000000000701000004000000850000005d000000b70000000000000095"], &(0x7f0000000380)='GPL\x00', 0xa, 0x1000, &(0x7f0000001180)=""/4096, 0x2a079ff5b90a2b9f, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0xf, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x4}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000d00)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, r12, 0x8, 0x0, 0x0, 0x10, 0x0, 0xf9ff, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000d40)=[{0x0, 0x1, 0x9, 0x1}], 0x10, 0xfffffd2b}, 0x94) 42.098508957s ago: executing program 1 (id=16590): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c0001800683010058"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) 41.823963861s ago: executing program 4 (id=16591): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(r1, &(0x7f0000000200)=[{0x0}], 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000060a030400000000000000000a0000010900010073797a3100000000200004801c200180090001006d617371000000000c00028008000240000000000900020073797a3200000000140000001100010000000000000000000a00000a"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001800dd8d00000000000000000200000000000006000000000d4e17007f4a20c6b2020e73f176b9ffd7e1b0af3685c6239e3c1da4fc839d470d8cf89f00ff9f84725370dbf8210ed015ef094c4b0f4d3b40193aaa83629b9523120fdd8b28373b1e8ee2002751b248f80bbfa0048c052af2a5a7b8d7d125924337c2b7db2e4ac6ae3dc9861f58c3a0abe87d594a86cfe81ce4b43781048ca119fad44600"/170], 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xc3ffffffffffffff}, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r5, &(0x7f0000006100)=[{{&(0x7f0000000880)=@un=@abs, 0x80, &(0x7f0000000b40)=[{0x0}], 0x1}, 0x4}], 0x1, 0x12040, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19}, 0x94) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000aa00)=ANY=[@ANYBLOB="d850000044000701fefffffffcdbdf25037c000004004580c0500180bc506480b850cd80b450d680b05018800400f28004008d809f506a80cb84262700fc44f829e9ac5d2b0168d2ed51fbf02783ae7705c94d9468d49caa3fe7907450398014006d800500a4000000000008004d00ac14140c5950028037000180d01032234b706888b980d85f5def3c191ca34a6233501153013bfba3d086610cf508856addde7e5c76f43c436ca7ad24952a0b0085125080106436907b2a903f7e0157da1114736ba94b5dbf4f9c4f80f729a22252376abc3c07a20ec89bb97eb05c339e1274645639afd083cb636ee66d5c151197e89a6e61c57a8c6166ab600ed3768498f99189e39e1b69fc318fdf49ec5bb01f58252c64b18d56a5d340c13a8bc9079abfef0061800400d98004006b00ea11c6ebcf7daba729395ae46378a6c5ea317653ba1c9c415186a816e5b96d1bb170d08a0c3662a881ae356dd004bdcec0f7523da7ba2cca516faf18cc0f269d75b20e5b9a1ba0fe28c74d055c36a00d4055fe19f4d587c63364210d3ba1c9065fb993f13e48a2b2ae7f807b33ef09377821210240935f332253a7abc5a81e51fdf5a47c34d6b6735a1cfc8a2c08d27a668b14211d555addb43097e24d6122e4fd6eb36336a962c07465bbf558eda52d3381f3a8731316953ac9ec5a1621ddb5f93beacfaeb9a06ed666cd011e61d39471491d66ccdbacf99d42fcd8313f8e7625cc2700cf10c58006000d005b000000c41b098a50dda9bb69dd1b8fbc7e1d6a6d00426bb56a116f397aee87932d5a5dcaf58f5d35653926a46cfd0c7cae541dc5e9a0e092c7fe0373937164401ea504e79bea646aef3e0f16f82ba596e064bf2b2cc8528df217def0e6b8974ff2d7952dca23f00149d9b4189a26e057806a67f166922f06db4ce6e19cdaf26b1fa56a7b52b69794ca5624b7dee8f48eba85ae25559334a6af7439a0d58e3b238cb98d501cc026e13fc0269f68b83e006359e5a79f7916096d99fbe600a35a8b55205f631a0a2fe3f13938fdbe4cb259df8a7a69d00594b28249d1764d7b202230c0ca148f6efdfe3108fe38dfd34e5711df4bd741729e138c73faba648361fb53a772d70f8662818764f66302f3314ba96f7c175ec76242b5fb66ff2dd7e81a9bfddf8c58101b30c85fa65239218400300bb7cae9fe6dd4e5827af6c51f506a657aba798068b80283b55149491b49ea8db6c27ea283f0284410098268320e90a7a6508fa9d86f7cc74dfc42688d7e8281692b4f4a66654188f1ef99d1074291c751f57327c93bb1b411bab7e65aa8b26272e211367e80e903796ef0c705856941c9e14940f5925c6dfd7995d6769b7c788ad28125a487594560cd614132be9eb9f74b23f0412cc589ee152ed50adad3ad7722a0f67a3e523798e5fda6dd9eaf4e8407af3f8679efce7ed3fd7f1ff687ad45e2e769ea4cb12ec8eb4c9902b84cc5c4428181a4321379486852a809b0947c464fe5eb261c9d4b74bf0c85e0a92b87933e2bd0ff3538a882fc8460016c5964b963ac67040ab872c438d792c797a9cd57f0f6caea157c7866362dd4f41088f5d02e2bca6a07838a85f1cbef335e0e069641135b4c3e5a055f9fc501859c7c90ea1105faba48a9f6b5d58f6fc3ea487811c760b5848d0aae86fd6c482625087b6831873b26cdae442675fad68b5e904e4ba013fc9ae86f271290671b6c9b65ce00f40e11938384744bed5f4e6ec68e530eb89da516a6d032f979688821893f0920e8b2b51f47081270d0b209c875fa7817f375568e0e08a85b50c3e69a6c5935fda95c43732c2963071ea98cba4382403b95ffa88fcb8b7155685304d8021ba5ab6ce1fb98aea0ac742e69f6039506b4dbaa6af01a0a0dd683717d59373a88b602fc0f3165b1b7817af9490081239d1a2ecdf21b65023bc071fc18aae01ea888182f326969fda2f073219bb135ef632f67a83eb12deb8ee880e8f4bf217e077d83ae9fdbbd8ef4556c5ecd9de9a0387970766a1515ea10099d080eb0f3c31b542fdbb05e2359728c287cc38c98908a8335e2b2f0f32950639670be162075ec4711ca4396ecc32d803195f8992afd430c1e8f9de7810f4bd2708d55eccdf048f87e5e02040a572ec122934a6fcab35091fe94107bf1d1fc19cc28b60cb27ad86c5a2929f4d6781182164c18c86b04ae221746e952d5cf9a26dc9df51f2837bb0d13bdbba32fe810ec3fb6a985c277bc13f1ce5d23285e388ec1a30473d1d6437ed77ca1e42e6c41a6bb81185bf7e7880cbeb13c95ab547f3655787869f608d1e2fc1536dd67163104acbd961a632ce46dcb9ab1d79c7d77ea58c6caa462ca6caa7f4d9365cdcb3703a78d6ed4684c069bbcaf7f9e10f6377652f0bfce0a4204f1dc1dde6e1fcd5dd441749bd6479d90734426a59a749fd1d9c35651b79c21865bb261ad1cf776b4d6556160f1742e7c838824258fd547c98c1ff6967e36a68e2d1e238a582f2a0600a8fffd19d7166959bfdf1387911406b4bf8fdb7095d32eb9c286cf36499f15238ec7fe416b42c9240d6d25c4dd46a024127d688464d1d2ae1726587dd65a43e5133bec63e5b78bcac5b062d149ff1b0a65a73fcb0e0281ddfba3847d6b3170a85e74accce9cc4e5b724dd22ff236149df77f68b2c7511c86b51bf4b0c2d4b78755fe0433ac79480c77fbbdc6a8f388866cffc16f1c7fd28fdaac9649853c2aeb18c2bccd3a687f4854e93dae6fdba1ba7525e6a50ef1030897cbe0e44fc877b1709bf140f2a75c32bfcf3843705b8eced1591f7cf5f026a8a2768f0f98169044fa5e0787a70051ed03f013db08865e35bf492181707cacff3127ffe31ec99c35ebed947f1e6f20fea488399f424034a309b6b0f1dcf26a99346f3e36e004a02f31821c74012056649b7576c3609903ac934ddd1eb7578adaee500412870ac6d1ba0b179282a8def13eb50dd98c212cb4736928ba542eaf0a28c8b56c2977c13e9db017097e5f937f710c1f754e674a3dd014805e47c139a9849b41a9a704b82be90f48d3b6757334cd9f6dca805cfa93254b1e2d6a68865cca329eedafb9e0c73c158484e7d992c35e37cfbea8becaec8e1d358ea37ee757c4f5ce6b1bb1815c3c8d80dd8c97fec1b9d4618b38cfffcc2ae805e848c48a5847f5aca059a15f3b8b687483a8d95ef143544e2b8d0f00e90bc403695213aad03b9656e1a63f8905c22d1e89cd761768aeb0c610d95640ee26aabb9ec22261fc1c82f6596da0157518a48df88f6c65afbfda0ab3d6b1dd6485833ab895877b08c649916e39146f580ef33f524c33db12ff14e0d9595097e6c850894e3910d6fc14c80d3d049222d4b37182ffd0bd876ee93b4f46802f2c80cd7821acddad18560641436815648ad905cf56eba110e54617a9601ef04829cba95193aca589248a5a251c4324c4420ecf12ae04e4f5334c0c2c04e7eccac3466f7be1938668b68e67e2b43bef196729603bea1f5af2d959a49625c0a2304e79dba43f482ea91db3dcae842460f05754cb2f1cb26191d1015405bc5593e227cb3a4dd791027b69389ed99ed468b7fb19abc8923ed2d15bfeba7845c5bc47fafe2ba8d22c7ad17eaf348f9515d85108b08a17ebae461e5520cc54c667b4fc6ee6cf382082e8b51508264eeaa2c966f6d8c28d0be1b9e6757ef9d92499f5984a2ea22f75b0cef8320c3afff7fea3f68682d35cd0a8bd590e7a854e684f7e38362b8b63625ff13b56bbde27722f4b215e5e03e9ec22cc3312b4cb7d04a30118101e26e3ed0d432bead3971bbce729b619e3d6c0e41654837a633f68fea9655078b678f7cc023293ff5b14c1982d5fae0960f686855ff219e8289a865802a23a56383ee09931e0939b5ef5e63fcdc55b5b38882378f6bea2ddea534a7804815a847c9fe95c861be8ed9b34f2f26b0e74aa64e1bfd1be6a943fc7706e98469233a38a37e15635bcb9291ff488e460773ea4378cab865fc478923883961bcee5d71d329990ff3472d0779c1679f41f091437fa4e43bbc95c46a7585c747a77b2ca4f019cc5f65df463b7b0154fbacad87e9e0c5bc0b94227e661e1bd000fd154e4e4ac2d8ffb92cb1e562afd7ca8d5f093ad4ed0185bf1cb56ea1596e8da48e12885e4e13da282aa483cd8fd5cec3eb871711f12663539401f3deae877f51538c09de134600e1d262b808f2c4da5023c87252b27fbf79dbfb901e9966408195c8c2fd6d91833620d0b70ef69ddee6e672d135c0794cc3a42c6dab20756052f15ef26058a1cd01e7fe22d370f708d9dc8c369538e4eed407c4e34fac739dadf35d2ba19e0c25257272023a7aa25a9885ff95c03c52100b1289513cdb519498691c6b780dbcbf4b508e22c6ee708ba7bbe3c2ce961b54261c643d2cba2d2ce880231df714826d5bd45c57f4532fa48e22eade4fac92e03c92f506271285a157712d27dc9b42eed3314a59595705216e8225c946fc4193d42b1203f237fc3e35cd15e797d86f19a44a7e15f1064808ba4aed7004872ed1f5b691fc635b222f6e1d602a0134e87160432732b78e9df76980bbf42713e0508cc7635a605dd949d233a72b3b08f8a5ae9d81675df110993533abbea32c0c63b00961fbf3b6c6e80f086774b3a3ff4a210662d9a71cec43d2ee62ed2fdc56e3225a1f9466da00e1af3ed417ae24b5b5020d37ba949bc5f663a8d3f32b1a0662245711049bd2d03284bc2b6319be35e53e145c3f309b4f5e60ee2ecfe40a454c2b257e6cc80b8600d3bd642b8ccd2bd3c5d49b3de07be953dddfcac96c13019e53f52858defb4ca40da16d1371bdc2064c083586f56fa0dbb8cb6b60909753b8eb1aca6de192b8b21fbc0408f2effc44db01229bd559c74e3ed710859c8c142bbf78b4e3abb84dff73d6ffed99d0d694a13bf21cfdb856dedce5f740ffcd407ca3dea9354e978f8b1cb7cf06c70003997d3ebcd5fa38185698db7e8c184c8eb7b2640c22c0bc8ec51747cc0a0cc706349e548d2f8bd9858ac3962f8965da1742ee22fa31782e9c3d976ee8410075dd48b5850228872ba4510567a136ca1de43f810dad56440adc478c3c6bc160cc9d4c92f50e1ffb29a1c718f79d6123830b09995a71f76fb5fb925fcfd08f2885c74724195841edcf146fdd6ff3f96471ac0feb8ab7eaea640997573afb7c6768383710c60752c37155d52a0d472d4fd3ddcd18c559726257043944c536e36e5d569f09693d915c621e607df38ec29f0e4422613f4e5f45f286afde51f5079a1ee960000bc0a946cb5ccc225eb54f9a3cc113279642193f8369be5ffa1dd3dc42ac13bdee38029c53c8fe1d428116030893e7c49f42af0df6765e23aec30654875633023089fd3918b5390004c7d0812ba8fbfb2040e08abe08e39833c020ce5e5b77960565b1c0062605ce53530f54e0c65a0028df727660657694bc92dc3fc2b392cd0274fb576494118b37eb1efd6d304d45f4f101d6b211b0df806c411512dd2c0ffc3419144c09de70c2ad006b7f68e9a143bdbf2beeb0b3aeb177922e2a26be1d23355c76a05a6d303b2e16866dda6c8e21ca933593a3da91557050eb85c91bd175049a0da1b5651763951aeda3a971b477d6059ce262f21dd22f0b9fcae20a06fc7d3ecb3f56547fa92b512aabbd3d652854afa4837f6a7d8f72370d5c331d1b5d2d3788d05f1279bb5abe7b2ffb972e884c29954515d8aa114b74060f5d6ef8e72b1808c534b53534245f8278a315abb71425a5871839100ff261b167b04a37ed3d3ea8d18cd5d99f74bfee0edaff564f3ab4494f9132bd9d5a2a0f688a4398cd0ed9ba9ec6fe421338ab18ce8a7606c93535b7e629bb694741f7e5f3a1ce91c3248cdb5c4cd556ff09d22b2c65bb5f0a3dac47b089914d5903ad7638c82e6eb36c44dac04fc62b4fe841b01259a7cbba79895752f7e699ac0c8ee313aa6d618c41c5ccd76accc22eb693e3e69f5276537c645009340524f7f2bda0a4facd9b0cc9b3d4a152305211db838d3bdacd84cee76792c4c6ad9f6b1582b962d2ce037c8b2810fa589977b4bcc20adb295bd274df8f9e8d0993e7a0aec91bc1cef4f06c19a88bb3b583cc28e3ea824a21beae3736710a8f7513172a4bce7e6bd8a3117c606ae102533a97d54f8c9e727ae7e07a066cc2028fdccff77350f29a1288dd8e51d718024dae754eb35d32a3404ed2db6c0cc020fcfaad05199d227f019ca680b66e5e7d2f39c03117c3238eefacfed2b3af3ad43fd509172fc83076a40bc0b4bc0da26db657e4a068588e4c82d8574e25e2a53046e472be2c181463a516ba30a5d0fdfb64732e84baf9fc1360f052628e1877de983a4d3e7fdbb6c1029f5eaa7c90b059e7a4c7d2085e3d099e9c1158cbe5928554f0e1c9a3f9bdb3f9e7e0ca1b5e07fd31f6d8cd819bf093cf60ffce1fb0bbc4d4f9eee8159847c3f6fac0e71edd2143f221077ccb8c7cb543837cd661a68aeea5c365fb3473b5645428bb1b6601a060e3f4bc327b667a2ba94ddb761c14ee607cc0ca0a0c4ce8d19f86450da18f3d112509982aa5ee80ee21410129a7e72c2ddae7bfc0c2b95c80024935fde374d204e6223ed164ac05d584bd43caa66be566a63f39b0800de00", @ANYRES32, @ANYBLOB="dc70b75fa4b0b69054d33a073e54eca77c118802b955617d0716c3e88f7bb6934e69ee9abefff665db717a6ddca708ca0edade1f2b376ff6", @ANYBLOB="001500430024273a5c5cd12b2d7b4028292d2d5e2800000000b45038e4ea0707c6efdf45717fd4c7aafd317ee88a629b425976e48913e14894f214ba5cbc9819098d36f00947a00e7dec9b7e9845388acd27107800000087234b808016e56eb9e01589bb3f82b802c966dc4dad641770ee243a02fdd4ad0d567262a3da499ccf6591f41119c284d165599e9120791efc566340dcb19cd8f4b756032d6fcc6ce3e5ce22fc7b12e15e6583b417e258312505ddf4898109b53937b5a0bbb2050ded5887132ca81768507bade0bd8ce0a20f911586775c00394374c2c2ccbacde00c1893b3c75a98802b303008af6086de730f16dc5c898ade97ada275a01e430e8cc9b1f13db1f0cfe5919f1be83fe67cc8985c36086f3c350081ec15d12409517a2551760a957a709cbe67e0f5ee85bd43fc7e11a0eb12c642c45c913f7db096b4820c627f2db3c00c7332fd5f4941a2c94b6c66fa7e92a957d3083feaee27291e68542088d2d5a8d50ea7644fce79085bd02bd5e6138a57f5ad302532b71158b2991bb7e8408f4d50ce6c3a6e1e7be1e4acd66d64c979673487f5ae72cc28b773e9fedf5265b4562d56345e1af1585be899791d8beb15d0e155cb5f26914f34d82dcfecce67a135eda82d4cec07f1f8a15f623696f46e320114e7f2f45c3e317fc789fef6caddd5321c4e2e20f172d0edadced4733d15f2a7d0675b18ad9d400cc8d662d70b9c99b2afeb6bf70938b598e58a49dfaf17c5b3ba488d813dd1580c6b3e1f4c809d253968255193a41387a592116d6f0db309eac4eef44766d6bbb9604fcba66f85de6caca82d86af1bf8ee21437fe3a204d371564732c2ca990d453887876bf9b1ad7b04f642ec06099933591da4596cbddcaf9cfe86a9c04e4dd005cd5c54ce9eedf23707a609bccbf3a0468b2f7244fc28675a5ca22b78651bef629871ecfd0eb1f102af06271fee84e0fda9cf9067dbe4c54384b475ff5f123cfd22355c0ea4189a4731180d8aa8bf22fc68d2e9a215ae8c5f0bd12736a3c15d3253735058793f975bb379126d7a3b87e20866af93a3d18c88207b9eec5d55b6bccfcb4f861f74572a857e3d71dec246e9bc5fe4e1c1d5d06850a71efc16260d1ff9b7f2f7176841619a051961dfe1ea21f1b67c4cbae19afc2af10b6085209f3846d9c7088ede3a1acd9d54ce4449cad03cab55314d1c8c0f22494cc9bda8c2a0128030d371ea6510713072a84761a5a16e8ff7a72eb12e6719c866f65783be85d0273ad4dc599b177df3752e7d91494f176d476695e0b24fc94724b9527f75aca90b5d2505099c9958bbeb6c1a2f675cc993ef7fa76584fa4199f54f490ced351e31a16510b0f26ca8d382ee08bbe267d30848e66699c6ca6c63cf1ee25b583db3501379f0657df89a79efa217886d33a0b73ccac0aec68d0a25453b25ee2586c15acb63e9d127c0e63a6df64745ef30d95ab6655600c9228aab108ca5b7f016d58bc78516ae7efeb53cae0ff5b8856f568fab6029197d28538f6258935fa8741fe7815922ecfee82b4ae27e3172cd6e0cba16ddfa35afa175e64bf10f5112a13213b7f1ca00cc777a1952857e558e4de9f230489825a4ae9ef26e440153cce3c1ba1095cd681954b9ac6c7a7dfc16d0f24035eeddc71e890bc55a4bea37f2991abddccd45018d5a7d4ff640b240a0b82c8cad62f9765fe3cc1a8685796067eee4348ca02c226a7a3d2e9ffee87c660ada779d5e41c04cf0f35194d13cd9c0b0c427d7e7d358d1"], 0x50d8}}, 0xc000) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0xfffffee3}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000a80)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x12, 0x6, 0x4, 0x4, 0x0, 0x1}, 0x50) 41.790670168s ago: executing program 3 (id=16592): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp-reno', 0xa) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000000c0), 0x1a, 0x4008001, 0x80) close(r3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000500)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000540)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r6, &(0x7f0000000580)={&(0x7f00000005c0)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x200448c0) r7 = socket$kcm(0x2d, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) getsockopt$bt_hci(r7, 0x11d, 0x2, 0x0, &(0x7f0000000140)) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000280)={0x3, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x0, @empty}}}, 0x108) sendfile(r3, r2, 0x0, 0xf03a0005) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a"], 0x5c}}, 0x0) 41.551564105s ago: executing program 1 (id=16593): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000003c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="010000006b0100000300000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) 41.355490458s ago: executing program 0 (id=16594): socket(0x18, 0x3, 0x1a75) (async) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x5, 0x0, 0x5, 0x2, 0x0, 0x0, 0x10000, 0xffffffff}}) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0x124, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x2c, 0x10, 0x801, 0x41, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048050}, 0x20040090) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000600)=ANY=[@ANYRES16=r3, @ANYRESOCT=r3], 0x32600) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, 0x0, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) close(0x3) r7 = socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet_tcp_buf(r7, 0x6, 0x1f, &(0x7f0000000240)='espintcp', 0x8) (async) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) (async) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) (async) recvfrom(r6, 0x0, 0x0, 0x17, 0x0, 0x0) (async) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000cc0)=0xffff1884, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_MSG_GETSETELEM(r5, 0x0, 0x8000) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a300000000005000400000000000500050002000000140007800800134040000000080012400080"], 0x64}}, 0x0) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0xb, &(0x7f0000000780)=0x800000, 0x48) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) 34.171252913s ago: executing program 3 (id=16595): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000010000100000000000000000005"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) unshare(0x22020600) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a216798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271fefc583eec8912c37562d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de7368ca69f6f8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a113c38159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b2059ba4b923a1188dd61dc7de058a4dfa7e85a8bdf1d41a2d8bd044d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4ae52066bb5d4045c958549b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9530243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e1dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd040000000000000034137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c5d904408996ec5db6a4d15b71ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd000000000072716bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff42961f8f3b555d9e8aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e8173d3d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f000000000000000000000000000000005519fe545110a9c01d6f0da7b0731b19ae17b64d6eb1a47675aea60371f629ed3446beb20bf2bab80e451b4139dc6c87e6b395edc142e24b596f636f8c248beeb268dbbf120b26693f73a6362e7c6bff6b08514763f6fbe6c914baf7e25ac7e8d36babeb6c58d012cf7b1ffbe996204af87412b9b21da1dfb01aa5a4ff142deb3bd70d11cf71752bdb33f1dfb6ef107ef3cb0016b2b6dcffb0be5a95d56172098ebf6075cc048f94350e2adb108eabccfae942bbca66ea83139ab4062963be6d549907b17d95b248601322cd8cc6540b6e369c7ebd9b98ec00000000"], &(0x7f00000018c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001900), 0xfffffedf, 0x10, &(0x7f0000001940)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001980)={r0, 0x31, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0xfffffffffffffe9a, 0x0, 0x0, 0x0, 0x0}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000009c0)={0x1c, 0x30, 0xa, 0x301, 0x70bd2a, 0x25dfdbff, {0x1, 0x0, 0x6}, [@generic="32bf4e0266"]}, 0x1c}}, 0x4000040) 32.818832445s ago: executing program 2 (id=16596): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000740)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000780)={'syzkaller0\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004890) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a40)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000a80), 0x56) sendmsg$kcm(r4, &(0x7f0000000b00)={&(0x7f0000000b40)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000c00)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee", 0x1d}], 0x1}, 0x0) 28.858519502s ago: executing program 4 (id=16597): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0xc3072, 0xffffffffffffffff, 0x3000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e26, @private=0xa010100}, {0x306, @local}, 0x12, {0x2, 0x4, @multicast1}, 'lo\x00'}) 27.741696045s ago: executing program 1 (id=16598): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000001000ffff2ebd700001dcdf2500000000", @ANYRES32=0x0, @ANYBLOB="010000000120000008000500", @ANYRES32=r1, @ANYBLOB="1c00128009000100766c616e000000000c000280060001000300000008001f01070000000a000200aaaaaa"], 0x58}, 0x1, 0x0, 0x0, 0x45}, 0x40000) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_hsr\x00', 0x0}) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x2, 0x10, 0x3, 0x3, 0xa, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x3, 0x0, 0x0, 0x6e6bbb, 0x6, {0x6, 0x33, 0x2, 0x5, 0x0, 0x8, 0x0, @in=@empty, @in=@broadcast}}]}, 0x50}}, 0x4000) (async) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r4, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r4, {0x0, 0x7}, {0xf, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) close(r6) 23.571680644s ago: executing program 32 (id=16594): socket(0x18, 0x3, 0x1a75) (async) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x5, 0x0, 0x5, 0x2, 0x0, 0x0, 0x10000, 0xffffffff}}) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0x124, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x2c, 0x10, 0x801, 0x41, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048050}, 0x20040090) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000600)=ANY=[@ANYRES16=r3, @ANYRESOCT=r3], 0x32600) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, 0x0, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) close(0x3) r7 = socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet_tcp_buf(r7, 0x6, 0x1f, &(0x7f0000000240)='espintcp', 0x8) (async) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) (async) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) (async) recvfrom(r6, 0x0, 0x0, 0x17, 0x0, 0x0) (async) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000cc0)=0xffff1884, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_MSG_GETSETELEM(r5, 0x0, 0x8000) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a300000000005000400000000000500050002000000140007800800134040000000080012400080"], 0x64}}, 0x0) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0xb, &(0x7f0000000780)=0x800000, 0x48) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) 19.78062468s ago: executing program 3 (id=16600): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0x95}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a88110000090a050000000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b44001280200001800a00010071756f7461000000100002800c0001400000000000000080140001800c000100636f756e746572000400028001000180080001006c6f670008000340000001"], 0xb0}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 14.589853795s ago: executing program 33 (id=16596): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000740)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000780)={'syzkaller0\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004890) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a40)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000a80), 0x56) sendmsg$kcm(r4, &(0x7f0000000b00)={&(0x7f0000000b40)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000c00)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee", 0x1d}], 0x1}, 0x0) 7.629736153s ago: executing program 34 (id=16598): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000001000ffff2ebd700001dcdf2500000000", @ANYRES32=0x0, @ANYBLOB="010000000120000008000500", @ANYRES32=r1, @ANYBLOB="1c00128009000100766c616e000000000c000280060001000300000008001f01070000000a000200aaaaaa"], 0x58}, 0x1, 0x0, 0x0, 0x45}, 0x40000) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_hsr\x00', 0x0}) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x2, 0x10, 0x3, 0x3, 0xa, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x3, 0x0, 0x0, 0x6e6bbb, 0x6, {0x6, 0x33, 0x2, 0x5, 0x0, 0x8, 0x0, @in=@empty, @in=@broadcast}}]}, 0x50}}, 0x4000) (async) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r4, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r4, {0x0, 0x7}, {0xf, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) close(r6) 3.055522732s ago: executing program 35 (id=16597): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0xc3072, 0xffffffffffffffff, 0x3000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e26, @private=0xa010100}, {0x306, @local}, 0x12, {0x2, 0x4, @multicast1}, 'lo\x00'}) 0s ago: executing program 36 (id=16600): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0x95}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a88110000090a050000000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b44001280200001800a00010071756f7461000000100002800c0001400000000000000080140001800c000100636f756e746572000400028001000180080001006c6f670008000340000001"], 0xb0}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) kernel console output (not intermixed with test programs): ntered promiscuous mode [ 2118.586908][T27521] syzkaller1: entered allmulticast mode [ 2118.700546][ T7300] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2118.700581][ T7300] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2119.216351][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2119.216390][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2119.416587][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2119.435808][T27542] netlink: 'syz.4.15747': attribute type 6 has an invalid length. [ 2119.724448][T27519] rxe_eth0 speed is unknown, defaulting to 1000 [ 2119.733749][ T7300] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2119.733782][ T7300] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2119.789157][T27551] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15750'. [ 2119.833719][T27549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15749'. [ 2119.883653][T27551] bridge0: port 3(syz_tun) entered blocking state [ 2119.883774][T27551] bridge0: port 3(syz_tun) entered forwarding state [ 2120.043478][T27519] virt_wifi0 speed is unknown, defaulting to 1000 [ 2120.045352][T27519] dummy0 speed is unknown, defaulting to 1000 [ 2120.184487][T27555] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 2120.236687][ T7306] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2120.461461][T24895] Bluetooth: hci5: command tx timeout [ 2120.504333][T27569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2120.515670][T27569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2120.587100][T27579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15758'. [ 2120.844511][T27588] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15759'. [ 2120.916693][T27583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2120.925585][T27583] 8021q: adding VLAN 0 to HW filter on device team0 [ 2120.970563][T27583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2121.103522][T27583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2121.117935][T27583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2121.150264][T27583] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2121.150292][T27583] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2121.204750][T27583] veth1_vlan: left promiscuous mode [ 2121.213566][T27583] veth0_vlan: left promiscuous mode [ 2121.225843][T27583] veth0_vlan: entered promiscuous mode [ 2121.235410][T27583] veth1_vlan: entered promiscuous mode [ 2121.249342][T27583] veth1_macvtap: left promiscuous mode [ 2121.252011][T27583] veth0_macvtap: left promiscuous mode [ 2121.253684][T27583] veth0_macvtap: entered promiscuous mode [ 2121.265092][T27583] veth1_macvtap: entered promiscuous mode [ 2121.305116][T27583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2121.315032][T27583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2121.337308][T27583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2121.339371][T27583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2121.410525][ T7306] bridge0: port 1(bridge_slave_0) entered blocking state [ 2121.410639][ T7306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2121.413971][ T7306] bridge0: port 2(bridge_slave_1) entered blocking state [ 2121.414101][ T7306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2121.478518][T27597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15763'. [ 2121.542122][ T7303] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2121.542161][ T7303] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2121.542267][T23025] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2121.542298][T23025] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2121.542358][ T7303] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2121.542389][ T7303] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2121.542449][ T7303] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2121.542478][ T7303] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2121.713718][T27597] netlink: 'syz.4.15763': attribute type 1 has an invalid length. [ 2121.713742][T27597] netlink: 92 bytes leftover after parsing attributes in process `syz.4.15763'. [ 2121.731961][T27519] bridge0: port 1(bridge_slave_0) entered blocking state [ 2121.732656][T27519] bridge0: port 1(bridge_slave_0) entered disabled state [ 2121.733272][T27519] bridge_slave_0: entered allmulticast mode [ 2121.752819][T27519] bridge_slave_0: entered promiscuous mode [ 2121.771148][T27519] bridge0: port 2(bridge_slave_1) entered blocking state [ 2121.771642][T27519] bridge0: port 2(bridge_slave_1) entered disabled state [ 2121.771803][T27519] bridge_slave_1: entered allmulticast mode [ 2121.774774][T27519] bridge_slave_1: entered promiscuous mode [ 2121.900114][T27608] netlink: 'syz.0.15764': attribute type 16 has an invalid length. [ 2121.900140][T27608] netlink: 'syz.0.15764': attribute type 17 has an invalid length. [ 2121.956990][T27608] hsr0: left promiscuous mode [ 2122.130104][T27519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2122.146438][ T7303] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 2122.146528][ T7303] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 2122.146609][ T7303] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 2122.146660][ T7303] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 2122.186734][T27519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2122.262059][T27519] team0: Port device team_slave_0 added [ 2122.265182][T27519] team0: Port device team_slave_1 added [ 2122.368825][T27611] syzkaller0: entered promiscuous mode [ 2122.368850][T27611] syzkaller0: entered allmulticast mode [ 2122.375920][T27519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2122.375940][T27519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2122.375968][T27519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2122.437349][T27519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2122.437368][T27519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2122.437396][T27519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2122.536390][T24895] Bluetooth: hci5: command tx timeout [ 2122.713982][T27619] syzkaller0: entered promiscuous mode [ 2122.714011][T27619] syzkaller0: entered allmulticast mode [ 2122.715366][T27612] tipc: Started in network mode [ 2122.715400][T27612] tipc: Node identity 262bf0541b99, cluster identity 4711 [ 2122.715649][T27612] tipc: Enabled bearer , priority 0 [ 2122.838072][T27629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15771'. [ 2123.329602][T23025] net_ratelimit: 517 callbacks suppressed [ 2123.329626][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2123.329650][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2123.836807][ T7302] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2123.836844][ T7302] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2124.348247][ T7300] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2124.348282][ T7300] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2124.626369][T24895] Bluetooth: hci5: command tx timeout [ 2124.863576][ T7300] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2124.863611][ T7300] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2125.373796][ T7312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2125.373832][ T7312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2126.715788][T24895] Bluetooth: hci5: command tx timeout [ 2127.030398][T27609] tipc: Resetting bearer [ 2127.053168][T27609] tipc: Disabling bearer [ 2127.167836][ T7549] tipc: Node number set to 1035137108 [ 2127.298425][T27519] hsr_slave_0: entered promiscuous mode [ 2127.302392][T27519] hsr_slave_1: entered promiscuous mode [ 2127.310421][T27519] debugfs: 'hsr0' already exists in 'hsr' [ 2127.310485][T27519] Cannot create hsr debugfs directory [ 2127.470552][T27647] syzkaller1: entered promiscuous mode [ 2127.470579][T27647] syzkaller1: entered allmulticast mode [ 2127.577261][T27654] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15775'. [ 2127.827569][T27657] xt_hashlimit: size too large, truncated to 1048576 [ 2127.935166][T27661] xt_hashlimit: size too large, truncated to 1048576 [ 2127.958117][T27662] netlink: 'syz.0.15779': attribute type 11 has an invalid length. [ 2128.466782][ T7302] net_ratelimit: 13 callbacks suppressed [ 2128.466805][ T7302] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2128.466832][ T7302] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2128.572634][T27673] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 2128.706811][T27671] syzkaller0: entered promiscuous mode [ 2128.706841][T27671] syzkaller0: entered allmulticast mode [ 2128.987814][ T7305] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2128.987851][ T7305] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2129.506816][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2129.506851][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2130.016371][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2130.016408][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2130.532277][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2132.991900][T27676] team0: No ports can be present during mode change [ 2133.470049][T27711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15791'. [ 2133.491435][T27711] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 2133.492603][T27711] ip6gre1: left promiscuous mode [ 2133.492626][T27711] ip6gre1: left allmulticast mode [ 2133.518847][T27711] batman_adv: batadv0: Interface deactivated: gretap1 [ 2133.540729][T27717] net_ratelimit: 11 callbacks suppressed [ 2133.540753][T27717] netlink: zone id is out of range [ 2133.540774][T27717] netlink: zone id is out of range [ 2133.540785][T27717] netlink: zone id is out of range [ 2133.540795][T27717] netlink: zone id is out of range [ 2133.540804][T27717] netlink: zone id is out of range [ 2133.540813][T27717] netlink: zone id is out of range [ 2133.540827][T27717] netlink: zone id is out of range [ 2133.540837][T27717] netlink: zone id is out of range [ 2133.540846][T27717] netlink: zone id is out of range [ 2133.540856][T27717] netlink: zone id is out of range [ 2133.642942][T27715] sctp: [Deprecated]: syz.3.15792 (pid 27715) Use of int in max_burst socket option deprecated. [ 2133.642942][T27715] Use struct sctp_assoc_value instead [ 2133.754395][T27716] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2133.760440][T27519] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2133.780820][T27519] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2133.788802][T27519] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2133.805421][T27715] netlink: 'syz.3.15792': attribute type 8 has an invalid length. [ 2133.829835][T27519] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2133.832522][T27519] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2133.859104][T27519] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2133.900555][T27723] netlink: 280 bytes leftover after parsing attributes in process `syz.4.15794'. [ 2133.964027][T27519] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2133.980947][T27519] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2134.046621][T27725] syzkaller0: entered promiscuous mode [ 2134.046650][T27725] syzkaller0: entered allmulticast mode [ 2134.097760][T27727] netlink: 'syz.2.15795': attribute type 1 has an invalid length. [ 2137.707322][T27727] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 2137.779123][T27746] vlan2: entered allmulticast mode [ 2137.779150][T27746] bond0: entered allmulticast mode [ 2137.779166][T27746] bond_slave_0: entered allmulticast mode [ 2137.779210][T27746] bond_slave_1: entered allmulticast mode [ 2137.936943][T27751] sctp: [Deprecated]: syz.3.15802 (pid 27751) Use of int in max_burst socket option deprecated. [ 2137.936943][T27751] Use struct sctp_assoc_value instead [ 2138.103614][T27751] netlink: 'syz.3.15802': attribute type 8 has an invalid length. [ 2138.289742][T27519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2138.412956][T27519] 8021q: adding VLAN 0 to HW filter on device team0 [ 2138.455432][ T7302] bridge0: port 1(bridge_slave_0) entered blocking state [ 2138.455548][ T7302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2138.540014][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 2138.540135][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2138.737053][T23025] net_ratelimit: 516 callbacks suppressed [ 2138.737077][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2138.737101][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2139.233593][T27782] netlink: 19 bytes leftover after parsing attributes in process `syz.2.15809'. [ 2139.249223][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2139.249258][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2139.436476][T27785] syzkaller0: entered promiscuous mode [ 2139.436503][T27785] syzkaller0: entered allmulticast mode [ 2139.460905][T27782] netlink: 19 bytes leftover after parsing attributes in process `syz.2.15809'. [ 2139.520375][T27788] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.15811'. [ 2139.759045][ T7306] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2139.759105][ T7306] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2140.039677][T27803] netlink: 48 bytes leftover after parsing attributes in process `syz.0.15817'. [ 2140.131189][T27804] netlink: 'syz.3.15816': attribute type 6 has an invalid length. [ 2140.266486][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2140.266523][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2140.369724][T27812] xt_hashlimit: invalid rate [ 2140.554284][T27826] netlink: 88 bytes leftover after parsing attributes in process `syz.2.15822'. [ 2140.554311][T27826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15822'. [ 2140.584549][T27826] netlink: 'syz.2.15822': attribute type 11 has an invalid length. [ 2140.703111][T27519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2140.779552][ T7302] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2140.779588][ T7302] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2140.828596][T27829] block nbd0: NBD_DISCONNECT [ 2140.828639][T27829] block nbd0: Send disconnect failed -32 [ 2140.828662][T27829] block nbd0: shutting down sockets [ 2141.047935][T27519] veth0_vlan: entered promiscuous mode [ 2141.114995][T27519] veth1_vlan: entered promiscuous mode [ 2141.395789][T27519] veth0_macvtap: entered promiscuous mode [ 2141.410138][T27519] veth1_macvtap: entered promiscuous mode [ 2141.601123][T27844] syzkaller0: entered promiscuous mode [ 2141.601152][T27844] syzkaller0: entered allmulticast mode [ 2141.664558][T27849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15828'. [ 2141.771708][T27855] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15827'. [ 2143.525039][T27829] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2143.869576][ T7306] net_ratelimit: 10 callbacks suppressed [ 2143.869601][ T7306] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2143.869627][ T7306] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2143.876613][T27860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15829'. [ 2144.382912][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2144.382949][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2144.898401][ T7307] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2144.898437][ T7307] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2145.409718][ T7307] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2145.409756][ T7307] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2145.471341][T27847] syzkaller1: entered promiscuous mode [ 2145.471364][T27847] syzkaller1: entered allmulticast mode [ 2145.584936][T27867] netlink: 'syz.4.15830': attribute type 4 has an invalid length. [ 2145.584965][T27867] netlink: 5620 bytes leftover after parsing attributes in process `syz.4.15830'. [ 2145.694760][T27863] netlink: 'syz.2.15829': attribute type 1 has an invalid length. [ 2145.694787][T27863] netlink: 92 bytes leftover after parsing attributes in process `syz.2.15829'. [ 2145.716357][T27519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2145.745566][T27519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2145.822826][T27871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15833'. [ 2145.822884][T27871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15833'. [ 2145.886828][ T7306] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2145.887478][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2145.887684][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2145.887869][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2145.929589][ T7302] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2145.929676][ T7302] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2146.257670][T27887] sctp: [Deprecated]: syz.2.15838 (pid 27887) Use of int in max_burst socket option deprecated. [ 2146.257670][T27887] Use struct sctp_assoc_value instead [ 2146.374995][T23025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2146.375021][T23025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2146.418671][T27889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15834'. [ 2146.425834][T27889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15834'. [ 2146.647612][T27889] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2146.648733][T27892] netlink: 'syz.2.15838': attribute type 8 has an invalid length. [ 2146.761419][T27893] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 2146.767126][ T7302] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2146.767293][ T7302] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2146.767343][ T7302] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2146.909090][ T7302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2146.909114][ T7302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2146.957636][ T62] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2147.305073][T27908] syzkaller0: entered promiscuous mode [ 2147.305103][T27908] syzkaller0: entered allmulticast mode [ 2147.391173][T27915] xt_l2tp: invalid flags combination: 8 [ 2147.514173][T27919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15843'. [ 2147.531716][T27920] netlink: 'syz.1.15842': attribute type 26 has an invalid length. [ 2147.623506][T27924] netlink: 'syz.0.15844': attribute type 219 has an invalid length. [ 2149.002285][T23025] net_ratelimit: 10 callbacks suppressed [ 2149.002310][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2149.002337][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2149.515623][ T7300] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2149.515650][ T7300] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2150.027338][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2150.027375][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2150.536848][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2150.536875][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2151.054400][ T7300] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2151.054436][ T7300] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2151.643075][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2151.644457][ T7312] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2151.644512][ T7312] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2151.644549][ T7312] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2151.772509][T27930] ip6tnl1: entered allmulticast mode [ 2152.091001][T27944] netlink: 136 bytes leftover after parsing attributes in process `syz.3.15851'. [ 2152.220596][T26259] Bluetooth: hci2: command 0x0401 tx timeout [ 2152.802661][T27945] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15852'. [ 2152.816841][ T7302] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2152.817079][ T7302] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2152.860937][ T7551] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2153.085567][ T7312] IPVS: starting estimator thread 0... [ 2153.108272][T27961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15856'. [ 2153.154629][T27961] bond1: (slave bond_slave_0): Device is not our slave [ 2153.154654][T27961] bond1: option active_slave: invalid value (bond_slave_0) [ 2153.163550][T27961] bond1 (unregistering): Released all slaves [ 2153.177879][T27964] IPVS: using max 27 ests per chain, 64800 per kthread [ 2153.186472][T27963] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15855'. [ 2153.371245][T27974] 8021q: VLANs not supported on ip6_vti0 [ 2153.396469][ T7549] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2153.590120][ T7549] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2153.827797][T27978] syzkaller0: entered promiscuous mode [ 2153.827825][T27978] syzkaller0: entered allmulticast mode [ 2154.001163][T27982] netlink: 68 bytes leftover after parsing attributes in process `syz.3.15861'. [ 2154.075467][T27995] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15863'. [ 2154.149431][T23025] net_ratelimit: 10 callbacks suppressed [ 2154.149454][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2154.149481][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2154.660244][ T7306] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2154.660279][ T7306] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2154.914371][T28004] ip_tables: iptables: counters copy to user failed while replacing table [ 2155.167608][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2155.167645][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2155.347172][T28010] xt_hashlimit: invalid rate [ 2155.676723][ T7312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2155.676761][ T7312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2156.193439][ T7302] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2157.026411][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2158.590440][T28017] macsec1: entered promiscuous mode [ 2158.590465][T28017] bridge0: entered promiscuous mode [ 2158.612974][T28015] team_slave_1: entered allmulticast mode [ 2158.907259][T28035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15872'. [ 2159.163927][T28048] Cannot find del_set index 0 as target [ 2159.270258][ T7312] net_ratelimit: 11 callbacks suppressed [ 2159.270282][ T7312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2159.270350][ T7312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2159.776690][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2159.776727][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2159.873228][T28070] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.15879'. [ 2160.299395][ T7302] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2160.299439][ T7302] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2160.806958][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2160.806996][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2160.915298][T23025] IPVS: starting estimator thread 0... [ 2160.972817][T28098] xt_hashlimit: size too large, truncated to 1048576 [ 2160.996431][T28099] IPVS: using max 25 ests per chain, 60000 per kthread [ 2161.160557][T28097] bond1: entered allmulticast mode [ 2161.161212][T28097] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2161.326449][ T7300] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2161.326501][ T7300] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2161.433678][T28121] xfrm1: entered allmulticast mode [ 2161.585060][T28122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15896'. [ 2161.764307][T28122] netlink: 'syz.0.15896': attribute type 1 has an invalid length. [ 2161.764335][T28122] netlink: 92 bytes leftover after parsing attributes in process `syz.0.15896'. [ 2161.863279][T28137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15902'. [ 2161.863310][T28137] netlink: 19 bytes leftover after parsing attributes in process `syz.3.15902'. [ 2162.078830][T28145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15906'. [ 2162.137014][T28145] bond1: (slave bond_slave_0): Device is not our slave [ 2162.137071][T28145] bond1: option active_slave: invalid value (bond_slave_0) [ 2162.143399][T28145] bond1 (unregistering): Released all slaves [ 2162.332548][T28152] netlink: 'syz.4.15907': attribute type 1 has an invalid length. [ 2162.461681][T28155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15908'. [ 2162.709132][T28169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15912'. [ 2162.831999][T28169] bridge0: port 2(bridge_slave_1) entered disabled state [ 2162.834788][T28169] bridge0: port 1(bridge_slave_0) entered disabled state [ 2162.906308][T28173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15915'. [ 2162.999249][T28176] Cannot find del_set index 0 as target [ 2163.052171][T28169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2163.066541][T28169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2163.580120][T27024] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2163.580166][T27024] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2163.580275][T27024] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2163.580309][T27024] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2163.592531][T27024] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2163.592631][T27024] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2163.592754][T27024] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2163.592836][T27024] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2164.159790][ T7302] IPVS: starting estimator thread 0... [ 2164.268508][T28207] IPVS: using max 26 ests per chain, 62400 per kthread [ 2164.303206][T28212] FAULT_INJECTION: forcing a failure. [ 2164.303206][T28212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2164.303244][T28212] CPU: 1 UID: 0 PID: 28212 Comm: syz.3.15929 Not tainted syzkaller #0 PREEMPT(full) [ 2164.303270][T28212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2164.303284][T28212] Call Trace: [ 2164.303294][T28212] [ 2164.303305][T28212] dump_stack_lvl+0xe8/0x150 [ 2164.303342][T28212] should_fail_ex+0x410/0x560 [ 2164.303379][T28212] _copy_from_iter+0x1d3/0x1660 [ 2164.303411][T28212] ? __alloc_skb+0x27a/0x7a0 [ 2164.303448][T28212] ? __alloc_skb+0x27a/0x7a0 [ 2164.303485][T28212] ? __alloc_skb+0x27a/0x7a0 [ 2164.303519][T28212] ? __pfx__copy_from_iter+0x10/0x10 [ 2164.303551][T28212] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 2164.303576][T28212] ? __alloc_skb+0x27a/0x7a0 [ 2164.303609][T28212] ? __alloc_skb+0x27a/0x7a0 [ 2164.303649][T28212] ? netlink_sendmsg+0x650/0xb40 [ 2164.303680][T28212] ? skb_put+0x112/0x210 [ 2164.303705][T28212] netlink_sendmsg+0x6c0/0xb40 [ 2164.303746][T28212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2164.303787][T28212] ? apparmor_socket_sendmsg+0x98/0x360 [ 2164.303821][T28212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2164.303851][T28212] sock_sendmsg_nosec+0x14e/0x190 [ 2164.303885][T28212] ____sys_sendmsg+0x54e/0x850 [ 2164.303916][T28212] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2164.303950][T28212] ? import_iovec+0x73/0xa0 [ 2164.303988][T28212] ___sys_sendmsg+0x2a5/0x360 [ 2164.304017][T28212] ? __lock_acquire+0x747/0x2de0 [ 2164.304047][T28212] ? __pfx____sys_sendmsg+0x10/0x10 [ 2164.304109][T28212] ? __fget_files+0x2a/0x420 [ 2164.304145][T28212] ? __fget_files+0x3a2/0x420 [ 2164.304190][T28212] __x64_sys_sendmsg+0x1b1/0x290 [ 2164.304219][T28212] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2164.304267][T28212] do_syscall_64+0x166/0x520 [ 2164.304298][T28212] ? trace_irq_disable+0x3b/0x140 [ 2164.304322][T28212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2164.304346][T28212] ? clear_bhb_loop+0x70/0xc0 [ 2164.304374][T28212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2164.304398][T28212] RIP: 0033:0x7f5e1bd9e559 [ 2164.304418][T28212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2164.304438][T28212] RSP: 002b:00007f5e19ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2164.304462][T28212] RAX: ffffffffffffffda RBX: 00007f5e1c025fa0 RCX: 00007f5e1bd9e559 [ 2164.304480][T28212] RDX: 0000000002000000 RSI: 0000200000000380 RDI: 0000000000000005 [ 2164.304496][T28212] RBP: 00007f5e19ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 2164.304511][T28212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2164.304525][T28212] R13: 00007f5e1c026038 R14: 00007f5e1c025fa0 R15: 00007fff5f2457f8 [ 2164.304562][T28212] [ 2164.348004][T28212] __nla_validate_parse: 2 callbacks suppressed [ 2164.348051][T28212] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.15929'. [ 2164.400360][T27024] net_ratelimit: 490 callbacks suppressed [ 2164.400417][T27024] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2164.400500][T27024] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2164.579902][T28213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15927'. [ 2164.657383][T28213] netlink: 'syz.1.15927': attribute type 1 has an invalid length. [ 2164.657408][T28213] netlink: 92 bytes leftover after parsing attributes in process `syz.1.15927'. [ 2164.665374][T28217] netlink: 80 bytes leftover after parsing attributes in process `syz.2.15930'. [ 2164.907908][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2164.907961][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2165.195719][T28221] bridge0: port 4(ip6gretap0) entered blocking state [ 2165.195852][T28221] bridge0: port 4(ip6gretap0) entered forwarding state [ 2165.217604][T28227] batadv_slave_1: entered promiscuous mode [ 2165.358419][T28221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15932'. [ 2165.382648][T28221] batadv_slave_1 (unregistering): left promiscuous mode [ 2165.418134][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2165.418172][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2165.614378][T28236] netlink: 100 bytes leftover after parsing attributes in process `syz.1.15938'. [ 2165.686400][T28239] netlink: 'syz.4.15940': attribute type 10 has an invalid length. [ 2165.686424][T28239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15940'. [ 2165.811393][T28240] tap0: tun_chr_ioctl cmd 1074025676 [ 2165.811420][T28240] tap0: owner set to 0 [ 2165.813227][T28239] tap0: tun_chr_ioctl cmd 1074025676 [ 2165.813247][T28239] tap0: owner set to 0 [ 2165.926437][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2165.926476][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2165.977935][T28247] netlink: 80 bytes leftover after parsing attributes in process `syz.3.15942'. [ 2166.114300][T28253] netlink: 'syz.3.15944': attribute type 6 has an invalid length. [ 2166.136338][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2166.436621][ T7300] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2166.436655][ T7300] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2166.437602][T28262] netlink: 'syz.2.15947': attribute type 1 has an invalid length. [ 2166.467167][T28264] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15949'. [ 2166.499954][T28262] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 2166.499998][T28262] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 2166.500075][T28262] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 2166.590337][T28268] netlink: 'syz.3.15948': attribute type 1 has an invalid length. [ 2166.787534][T28268] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2166.806673][T28278] xt_IDLETIMER: timeout value is zero [ 2166.922767][T28273] bond1: (slave geneve2): making interface the new active one [ 2166.940859][T28273] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 2166.957251][T27024] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2167.046592][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2167.046659][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2167.046700][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2167.505508][T28272] udevd[28272]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 2167.771824][T28280] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 2167.772498][T28286] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 2167.885431][T28305] bridge0: port 4(ip6gretap0) entered disabled state [ 2168.051747][T28311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15960'. [ 2168.202858][T28311] bridge0: port 3(syz_tun) entered disabled state [ 2168.230504][T28311] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 2168.260597][T28318] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 2169.311502][T28363] xt_hashlimit: size too large, truncated to 1048576 [ 2169.424548][T28364] xt_hashlimit: size too large, truncated to 1048576 [ 2169.453875][T28366] net_ratelimit: 999 callbacks suppressed [ 2169.453899][T28366] ip_tables: iptables: counters copy to user failed while replacing table [ 2169.525662][T28369] FAULT_INJECTION: forcing a failure. [ 2169.525662][T28369] name failslab, interval 1, probability 0, space 0, times 0 [ 2169.525699][T28369] CPU: 0 UID: 0 PID: 28369 Comm: syz.2.15981 Not tainted syzkaller #0 PREEMPT(full) [ 2169.525725][T28369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2169.525740][T28369] Call Trace: [ 2169.525749][T28369] [ 2169.525760][T28369] dump_stack_lvl+0xe8/0x150 [ 2169.525798][T28369] should_fail_ex+0x410/0x560 [ 2169.525835][T28369] should_failslab+0xa8/0x100 [ 2169.525869][T28369] __kmalloc_cache_noprof+0xa3/0x600 [ 2169.525894][T28369] ? copy_array+0xab/0x100 [ 2169.525917][T28369] ? bpf_copy_verifier_state+0xb1f/0x1170 [ 2169.525938][T28369] ? bpf_copy_verifier_state+0xb1f/0x1170 [ 2169.525969][T28369] bpf_copy_verifier_state+0xb1f/0x1170 [ 2169.526004][T28369] push_stack+0x1b9/0x380 [ 2169.526048][T28369] do_check_insn+0x8194/0x17d00 [ 2169.526109][T28369] ? __pfx_do_check_insn+0x10/0x10 [ 2169.526151][T28369] ? vscnprintf+0x5c/0x90 [ 2169.526178][T28369] ? bpf_verifier_vlog+0x3d1/0x900 [ 2169.526215][T28369] ? verbose+0x11d/0x1a0 [ 2169.526244][T28369] ? __pfx_verbose+0x10/0x10 [ 2169.526275][T28369] ? print_insn_state+0x106/0x170 [ 2169.526305][T28369] do_check_common+0x364c/0x5610 [ 2169.526377][T28369] ? __pfx_do_check_common+0x10/0x10 [ 2169.526407][T28369] ? __pfx_verbose+0x10/0x10 [ 2169.526427][T28369] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 2169.526464][T28369] do_check_main+0xa2/0x1f0 [ 2169.526494][T28369] bpf_check+0x2775/0x2ef0 [ 2169.526541][T28369] ? __pfx_bpf_check+0x10/0x10 [ 2169.526571][T28369] ? bpf_obj_name_cpy+0x194/0x1e0 [ 2169.526617][T28369] bpf_prog_load+0x14d6/0x1c20 [ 2169.526660][T28369] ? __pfx_bpf_prog_load+0x10/0x10 [ 2169.526715][T28369] __sys_bpf+0xd0d/0xd90 [ 2169.526752][T28369] ? __pfx___sys_bpf+0x10/0x10 [ 2169.526791][T28369] ? __fget_files+0x2a/0x420 [ 2169.526845][T28369] ? ksys_write+0x242/0x270 [ 2169.526872][T28369] ? __pfx_ksys_write+0x10/0x10 [ 2169.526901][T28369] __x64_sys_bpf+0xba/0xd0 [ 2169.526929][T28369] do_syscall_64+0x166/0x520 [ 2169.526959][T28369] ? trace_irq_disable+0x3b/0x140 [ 2169.526984][T28369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2169.527008][T28369] ? clear_bhb_loop+0x70/0xc0 [ 2169.527036][T28369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2169.527059][T28369] RIP: 0033:0x7fb8a999e559 [ 2169.527081][T28369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2169.527101][T28369] RSP: 002b:00007fb8aa7a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2169.527126][T28369] RAX: ffffffffffffffda RBX: 00007fb8a9c25fa0 RCX: 00007fb8a999e559 [ 2169.527143][T28369] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005 [ 2169.527158][T28369] RBP: 00007fb8aa7a8090 R08: 0000000000000000 R09: 0000000000000000 [ 2169.527173][T28369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2169.527186][T28369] R13: 00007fb8a9c26038 R14: 00007fb8a9c25fa0 R15: 00007ffcb7752e58 [ 2169.527222][T28369] [ 2169.528703][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2169.528733][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2169.870498][T28366] netlink: 'syz.4.15979': attribute type 4 has an invalid length. [ 2169.926423][T28366] netlink: 'syz.4.15979': attribute type 4 has an invalid length. [ 2169.990220][T28372] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 2170.043900][ T7302] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2170.043937][ T7302] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2170.145768][T28380] sctp: [Deprecated]: syz.3.15984 (pid 28380) Use of int in max_burst socket option deprecated. [ 2170.145768][T28380] Use struct sctp_assoc_value instead [ 2170.425321][T28397] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 2170.470577][T28387] __nla_validate_parse: 5 callbacks suppressed [ 2170.470600][T28387] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15987'. [ 2170.514575][T28387] hsr_slave_1 (unregistering): left promiscuous mode [ 2170.546422][ T7303] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2170.546459][ T7303] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2171.020284][T28421] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 2171.058650][ T7312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2171.269258][T28428] netlink: 'syz.4.15994': attribute type 16 has an invalid length. [ 2171.269284][T28428] netlink: 'syz.4.15994': attribute type 17 has an invalid length. [ 2171.329242][T28428] xfrm1: left allmulticast mode [ 2171.593831][T28448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16000'. [ 2171.713293][T28456] netlink: 19 bytes leftover after parsing attributes in process `syz.3.16004'. [ 2171.727267][T28456] netlink: 19 bytes leftover after parsing attributes in process `syz.3.16004'. [ 2171.820256][T28448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16000'. [ 2171.820283][T28448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16000'. [ 2171.939452][T28460] pim6reg: entered allmulticast mode [ 2172.032989][T27024] IPVS: starting estimator thread 0... [ 2172.063666][T28448] veth3: entered allmulticast mode [ 2172.099911][T28448] bond1: (slave veth3): Enslaving as an active interface with an up link [ 2172.116549][T28471] IPVS: using max 29 ests per chain, 69600 per kthread [ 2172.127595][T28458] bond1 (unregistering): (slave veth3): Releasing backup interface [ 2172.171883][T28458] bond1 (unregistering): Released all slaves [ 2172.696281][T24895] Bluetooth: hci3: command 0x0405 tx timeout [ 2174.637889][ T7300] net_ratelimit: 13 callbacks suppressed [ 2174.637914][ T7300] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2174.637941][ T7300] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2175.146463][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2175.146505][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2175.407045][T28485] veth0: entered promiscuous mode [ 2175.589611][T28503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16015'. [ 2175.593287][T28502] openvswitch: netlink: Duplicate or invalid key (type 0). [ 2175.669745][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2175.669826][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2175.919729][T28483] veth0: left promiscuous mode [ 2176.027318][T28513] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 2176.111497][T28516] netlink: 'syz.4.16018': attribute type 16 has an invalid length. [ 2176.111524][T28516] netlink: 'syz.4.16018': attribute type 17 has an invalid length. [ 2176.176670][T27024] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2176.176706][T27024] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2176.390636][T28526] netlink: 'syz.3.16025': attribute type 1 has an invalid length. [ 2176.695381][T28540] Cannot find map_set index 135 as target [ 2176.914435][T28548] netlink: 19 bytes leftover after parsing attributes in process `syz.4.16032'. [ 2176.994412][T28548] netlink: 19 bytes leftover after parsing attributes in process `syz.4.16032'. [ 2177.689207][T28575] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16040'. [ 2178.014839][T28597] netlink: 'syz.2.16045': attribute type 1 has an invalid length. [ 2178.014867][T28597] netlink: 224 bytes leftover after parsing attributes in process `syz.2.16045'. [ 2178.076546][T28596] netlink: 'syz.4.16042': attribute type 16 has an invalid length. [ 2178.076601][T28596] netlink: 'syz.4.16042': attribute type 17 has an invalid length. [ 2178.280588][T28581] pim6reg1: entered promiscuous mode [ 2178.281769][T28581] pim6reg1: entered allmulticast mode [ 2178.317926][T28603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16046'. [ 2178.366387][T23025] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2178.366440][T23025] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2178.366479][T23025] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2178.366516][T23025] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2178.531629][T28605] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2178.600765][T28605] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2178.688822][T28614] sctp: [Deprecated]: syz.3.16049 (pid 28614) Use of int in max_burst socket option. [ 2178.688822][T28614] Use struct sctp_assoc_value instead [ 2178.689432][T28614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16049'. [ 2178.690925][T28612] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16047'. [ 2178.768205][T28587] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2178.768234][T28587] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 2178.836729][T28587] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2178.836756][T28587] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 2178.906301][T28587] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2178.906327][T28587] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 2178.963554][T28587] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2178.963583][T28587] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 2179.092578][T28587] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2179.092606][T28587] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 2179.408996][T28632] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16053'. [ 2179.798345][ T62] net_ratelimit: 517 callbacks suppressed [ 2179.798367][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2179.798402][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2179.881671][T28648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16059'. [ 2179.939133][T28648] netlink: zone id is out of range [ 2179.939152][T28648] netlink: zone id is out of range [ 2179.939252][T28648] netlink: zone id is out of range [ 2179.939263][T28648] netlink: zone id is out of range [ 2179.939343][T28648] netlink: zone id is out of range [ 2179.939353][T28648] netlink: zone id is out of range [ 2179.939538][T28648] netlink: zone id is out of range [ 2179.939548][T28648] netlink: zone id is out of range [ 2180.016262][T28654] netlink: 'syz.2.16061': attribute type 16 has an invalid length. [ 2180.016290][T28654] netlink: 'syz.2.16061': attribute type 17 has an invalid length. [ 2180.062717][T28654] veth3: left allmulticast mode [ 2180.478630][T28673] x_tables: unsorted underflow at hook 2 [ 2180.530946][T28677] xt_hashlimit: size too large, truncated to 1048576 [ 2180.642908][T28682] __nla_validate_parse: 4 callbacks suppressed [ 2180.642930][T28682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16073'. [ 2180.912189][T28682] bridge0: port 2(bridge_slave_1) entered disabled state [ 2180.912977][T28682] bridge0: port 1(bridge_slave_0) entered disabled state [ 2180.963946][T28693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16075'. [ 2181.079922][T28682] team_slave_1: left allmulticast mode [ 2181.084361][T28682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2181.117927][T28682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2181.149691][T28697] netlink: 104 bytes leftover after parsing attributes in process `syz.3.16077'. [ 2181.268466][T28682] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 2181.302883][T28682] macsec1: left promiscuous mode [ 2181.311711][T28682] bond1: left allmulticast mode [ 2181.326998][ T7300] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2181.334011][T27024] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2181.334323][T27024] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2181.334517][T27024] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2181.393560][T28701] netlink: 'syz.2.16075': attribute type 1 has an invalid length. [ 2181.393591][T28701] netlink: 92 bytes leftover after parsing attributes in process `syz.2.16075'. [ 2181.872078][T28723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16086'. [ 2181.987228][T28730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16090'. [ 2182.063720][T28734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16092'. [ 2182.350000][T28734] bond3: (slave bond_slave_0): Device is not our slave [ 2182.350052][T28734] bond3: option active_slave: invalid value (bond_slave_0) [ 2182.389580][T28734] bond3 (unregistering): Released all slaves [ 2182.437425][T28750] Cannot find map_set index 135 as target [ 2182.601365][T28759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16099'. [ 2182.710592][T28765] team0: entered promiscuous mode [ 2182.710620][T28765] team_slave_0: entered promiscuous mode [ 2182.710926][T28765] team_slave_1: entered promiscuous mode [ 2182.711267][T28765] team0: entered allmulticast mode [ 2182.711286][T28765] team_slave_0: entered allmulticast mode [ 2182.711303][T28765] team_slave_1: entered allmulticast mode [ 2182.712677][T28765] 8021q: adding VLAN 0 to HW filter on device team0 [ 2182.713418][T28765] team0: Cannot enslave team device to itself [ 2182.871889][T28774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16104'. [ 2182.896463][T28774] netlink: 92 bytes leftover after parsing attributes in process `syz.0.16104'. [ 2182.934123][T28774] netlink: 'syz.0.16104': attribute type 16 has an invalid length. [ 2182.957426][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2183.153059][T28779] syzkaller0: entered promiscuous mode [ 2183.153086][T28779] syzkaller0: entered allmulticast mode [ 2183.416510][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2183.676956][T28794] vlan3: entered promiscuous mode [ 2183.977587][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2184.822527][T28816] Cannot find map_set index 135 as target [ 2184.896732][T23025] net_ratelimit: 1522 callbacks suppressed [ 2184.896757][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2184.896785][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2185.109836][T28825] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 2185.203921][T28827] ip_tables: iptables: counters copy to user failed while replacing table [ 2185.406897][ T7303] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2185.406932][ T7303] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2185.897508][T28843] __nla_validate_parse: 2 callbacks suppressed [ 2185.897543][T28843] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16133'. [ 2185.940840][ T7303] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2185.940876][ T7303] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2186.119247][T28845] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16134'. [ 2186.256397][T28852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16137'. [ 2186.385931][T28860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16141'. [ 2186.389314][T28858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16138'. [ 2186.390375][T28852] bond1: (slave bond_slave_0): Device is not our slave [ 2186.390430][T28852] bond1: option active_slave: invalid value (bond_slave_0) [ 2186.403858][T28852] bond1 (unregistering): Released all slaves [ 2186.446667][ T7303] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2186.446701][ T7303] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2186.626779][T28860] bond3: (slave bond_slave_0): Device is not our slave [ 2186.626805][T28860] bond3: option active_slave: invalid value (bond_slave_0) [ 2186.663014][T28860] bond3 (unregistering): Released all slaves [ 2189.300404][T28932] FAULT_INJECTION: forcing a failure. [ 2189.300404][T28932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2189.300443][T28932] CPU: 0 UID: 0 PID: 28932 Comm: syz.1.16163 Not tainted syzkaller #0 PREEMPT(full) [ 2189.300469][T28932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2189.300484][T28932] Call Trace: [ 2189.300494][T28932] [ 2189.300504][T28932] dump_stack_lvl+0xe8/0x150 [ 2189.300539][T28932] should_fail_ex+0x410/0x560 [ 2189.300574][T28932] _copy_from_user+0x2d/0xb0 [ 2189.300609][T28932] ___sys_sendmsg+0x1c6/0x360 [ 2189.300633][T28932] ? __lock_acquire+0x747/0x2de0 [ 2189.300662][T28932] ? __pfx____sys_sendmsg+0x10/0x10 [ 2189.300720][T28932] ? __fget_files+0x2a/0x420 [ 2189.300753][T28932] ? __fget_files+0x3a2/0x420 [ 2189.300795][T28932] __x64_sys_sendmsg+0x1b1/0x290 [ 2189.300832][T28932] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2189.300878][T28932] do_syscall_64+0x166/0x520 [ 2189.300907][T28932] ? trace_irq_disable+0x3b/0x140 [ 2189.300932][T28932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2189.300954][T28932] ? clear_bhb_loop+0x70/0xc0 [ 2189.300982][T28932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2189.301007][T28932] RIP: 0033:0x7f398739e559 [ 2189.301025][T28932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2189.301038][T28932] RSP: 002b:00007f39881e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2189.301056][T28932] RAX: ffffffffffffffda RBX: 00007f3987625fa0 RCX: 00007f398739e559 [ 2189.301068][T28932] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2189.301079][T28932] RBP: 00007f39881e4090 R08: 0000000000000000 R09: 0000000000000000 [ 2189.301089][T28932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2189.301100][T28932] R13: 00007f3987626038 R14: 00007f3987625fa0 R15: 00007ffd83cf54a8 [ 2189.301125][T28932] [ 2190.061446][T27024] net_ratelimit: 13 callbacks suppressed [ 2190.061473][T27024] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2190.061499][T27024] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2190.566626][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2190.566664][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2191.067654][T27024] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2191.067691][T27024] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2191.584219][ T7303] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2191.584258][ T7303] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2192.097978][T27024] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2192.098014][T27024] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2192.719569][T28906] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 2192.725411][T28908] ovs-system: entered promiscuous mode [ 2193.315746][T28967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16175'. [ 2193.380986][T28958] netlink: 'syz.3.16172': attribute type 1 has an invalid length. [ 2193.381281][T28958] netlink: 'syz.3.16172': attribute type 32 has an invalid length. [ 2193.814039][T28989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16185'. [ 2193.839972][T28991] IPVS: set_ctl: invalid protocol: 124 172.30.1.2:20002 [ 2193.858646][T28994] syzkaller0: entered promiscuous mode [ 2193.858671][T28994] syzkaller0: entered allmulticast mode [ 2194.254222][T29010] netlink: 'syz.4.16193': attribute type 3 has an invalid length. [ 2194.904877][T29030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16202'. [ 2195.056721][T29032] net_ratelimit: 515 callbacks suppressed [ 2195.056749][T29032] netlink: zone id is out of range [ 2195.056760][T29032] netlink: zone id is out of range [ 2195.056770][T29032] netlink: zone id is out of range [ 2195.056780][T29032] netlink: zone id is out of range [ 2195.056790][T29032] netlink: zone id is out of range [ 2195.056800][T29032] netlink: zone id is out of range [ 2195.056813][T29032] netlink: zone id is out of range [ 2195.056822][T29032] netlink: zone id is out of range [ 2195.056832][T29032] netlink: zone id is out of range [ 2195.056841][T29032] netlink: zone id is out of range [ 2195.303892][T29034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16203'. [ 2195.804267][T29054] netlink: 'syz.0.16213': attribute type 2 has an invalid length. [ 2195.926795][T29059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16215'. [ 2196.265314][T29077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16218'. [ 2196.279598][T29077] team0: left promiscuous mode [ 2196.279624][T29077] team_slave_0: left promiscuous mode [ 2196.279810][T29077] team_slave_1: left promiscuous mode [ 2196.279954][T29077] team0: left allmulticast mode [ 2196.279969][T29077] team_slave_0: left allmulticast mode [ 2196.279986][T29077] team_slave_1: left allmulticast mode [ 2197.023960][T29108] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16226'. [ 2197.055841][T29106] vlan2: entered promiscuous mode [ 2197.055866][T29106] syz_tun: entered promiscuous mode [ 2197.107660][T29114] netlink: 'syz.0.16228': attribute type 1 has an invalid length. [ 2197.176976][T29114] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2197.180792][T29108] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 2197.216737][T29117] gretap1: entered promiscuous mode [ 2197.282440][T29118] netlink: 'syz.3.16227': attribute type 16 has an invalid length. [ 2197.282468][T29118] netlink: 'syz.3.16227': attribute type 17 has an invalid length. [ 2197.460447][T29117] bond7 (unregistering): Released all slaves [ 2197.503807][T29121] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 2197.504406][T29121] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2198.178590][T29152] syzkaller1: entered promiscuous mode [ 2198.178617][T29152] syzkaller1: entered allmulticast mode [ 2198.943832][T29181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16247'. [ 2199.083098][T29190] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16251'. [ 2199.143965][T29194] netlink: 156 bytes leftover after parsing attributes in process `syz.1.16249'. [ 2199.144289][T29190] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16251'. [ 2199.405920][T29202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16253'. [ 2199.405952][T29202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16253'. [ 2199.692454][T29214] netlink: 'syz.4.16255': attribute type 21 has an invalid length. [ 2199.692480][T29214] netlink: 128 bytes leftover after parsing attributes in process `syz.4.16255'. [ 2199.692564][T29214] netlink: 3 bytes leftover after parsing attributes in process `syz.4.16255'. [ 2199.725528][T29217] FAULT_INJECTION: forcing a failure. [ 2199.725528][T29217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2199.725567][T29217] CPU: 0 UID: 0 PID: 29217 Comm: syz.1.16256 Not tainted syzkaller #0 PREEMPT(full) [ 2199.725605][T29217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2199.725625][T29217] Call Trace: [ 2199.725634][T29217] [ 2199.725644][T29217] dump_stack_lvl+0xe8/0x150 [ 2199.725681][T29217] should_fail_ex+0x410/0x560 [ 2199.725718][T29217] _copy_from_user+0x2d/0xb0 [ 2199.725755][T29217] ___sys_recvmsg+0x173/0x5a0 [ 2199.725788][T29217] ? __pfx____sys_recvmsg+0x10/0x10 [ 2199.725820][T29217] ? lock_acquire+0x115/0x350 [ 2199.725879][T29217] do_recvmmsg+0x31a/0x7f0 [ 2199.725915][T29217] ? __pfx_do_recvmmsg+0x10/0x10 [ 2199.725954][T29217] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2199.725990][T29217] ? __fget_files+0x3a2/0x420 [ 2199.726039][T29217] __x64_sys_recvmmsg+0x198/0x250 [ 2199.726069][T29217] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2199.726109][T29217] do_syscall_64+0x166/0x520 [ 2199.726139][T29217] ? trace_irq_disable+0x3b/0x140 [ 2199.726163][T29217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2199.726187][T29217] ? clear_bhb_loop+0x70/0xc0 [ 2199.726217][T29217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2199.726240][T29217] RIP: 0033:0x7f398739e559 [ 2199.726261][T29217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2199.726282][T29217] RSP: 002b:00007f39881e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2199.726307][T29217] RAX: ffffffffffffffda RBX: 00007f3987625fa0 RCX: 00007f398739e559 [ 2199.726325][T29217] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004 [ 2199.726341][T29217] RBP: 00007f39881e4090 R08: 0000000000000000 R09: 0000000000000000 [ 2199.726356][T29217] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 2199.726369][T29217] R13: 00007f3987626038 R14: 00007f3987625fa0 R15: 00007ffd83cf54a8 [ 2199.726414][T29217] [ 2200.266411][ T7312] net_ratelimit: 1019 callbacks suppressed [ 2200.266439][ T7312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2200.266465][ T7312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2200.345852][T29237] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16261'. [ 2200.418944][T29238] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 2200.462651][T29241] syzkaller1: entered promiscuous mode [ 2200.462678][T29241] syzkaller1: entered allmulticast mode [ 2200.773510][T29251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16263'. [ 2200.785631][ T7303] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2200.785666][ T7303] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2201.122842][T29253] netlink: 'syz.4.16263': attribute type 1 has an invalid length. [ 2201.290239][T27024] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2201.290276][T27024] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2201.499570][T29268] Bluetooth: MGMT ver 1.23 [ 2201.796435][T27024] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2201.796469][T27024] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2201.797338][T29283] syzkaller0: entered promiscuous mode [ 2201.797361][T29283] syzkaller0: entered allmulticast mode [ 2202.313854][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2202.354483][T29294] netlink: 'syz.4.16276': attribute type 1 has an invalid length. [ 2202.564335][T29307] netlink: 'syz.3.16278': attribute type 21 has an invalid length. [ 2202.596865][T29300] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 2202.604624][T29301] bond3: entered promiscuous mode [ 2202.655641][T29297] macvlan4: entered promiscuous mode [ 2202.655666][T29297] macvlan4: entered allmulticast mode [ 2202.684107][T29297] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 2202.691532][T29297] bond3: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2202.754332][T29307] netlink: 'syz.3.16278': attribute type 5 has an invalid length. [ 2203.329938][T29336] bond4: (slave bond_slave_0): Device is not our slave [ 2203.329972][T29336] bond4: option active_slave: invalid value (bond_slave_0) [ 2203.331930][T29336] bond4 (unregistering): Released all slaves [ 2203.514970][T29346] netlink: 'syz.0.16287': attribute type 16 has an invalid length. [ 2203.514995][T29346] netlink: 'syz.0.16287': attribute type 17 has an invalid length. [ 2203.582834][T29346] vlan2: left allmulticast mode [ 2203.582860][T29346] bond0: left allmulticast mode [ 2203.582875][T29346] bond_slave_0: left allmulticast mode [ 2203.582892][T29346] bond_slave_1: left allmulticast mode [ 2203.597239][T29346] ip6tnl1: left allmulticast mode [ 2203.659471][T29346] gretap1: left promiscuous mode [ 2203.871277][T29367] vlan0: entered promiscuous mode [ 2204.315219][T29385] __nla_validate_parse: 13 callbacks suppressed [ 2204.315246][T29385] netlink: 19 bytes leftover after parsing attributes in process `syz.0.16302'. [ 2204.342575][T29385] netlink: 19 bytes leftover after parsing attributes in process `syz.0.16302'. [ 2204.514406][T29393] netlink: 'syz.2.16306': attribute type 11 has an invalid length. [ 2204.514434][T29393] netlink: 36 bytes leftover after parsing attributes in process `syz.2.16306'. [ 2204.685996][T29396] vlan0: entered promiscuous mode [ 2204.692372][T29396] hsr0: entered promiscuous mode [ 2204.692615][T29396] vlan0: entered allmulticast mode [ 2204.692632][T29396] hsr0: entered allmulticast mode [ 2204.692647][T29396] hsr_slave_0: entered allmulticast mode [ 2204.692666][T29396] hsr_slave_1: entered allmulticast mode [ 2204.840286][T29396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16306'. [ 2204.867389][T29396] hsr_slave_0: left promiscuous mode [ 2204.892064][T29396] hsr_slave_1: left promiscuous mode [ 2205.026868][T29410] netlink: 80 bytes leftover after parsing attributes in process `syz.1.16310'. [ 2205.026965][T29410] netlink: 80 bytes leftover after parsing attributes in process `syz.1.16310'. [ 2205.104460][T29410] netlink: 80 bytes leftover after parsing attributes in process `syz.1.16310'. [ 2205.104566][T29410] netlink: 80 bytes leftover after parsing attributes in process `syz.1.16310'. [ 2205.378296][ T7303] net_ratelimit: 11 callbacks suppressed [ 2205.378340][ T7303] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2205.378367][ T7303] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2205.464569][T29410] netlink: 80 bytes leftover after parsing attributes in process `syz.1.16310'. [ 2205.464671][T29410] netlink: 80 bytes leftover after parsing attributes in process `syz.1.16310'. [ 2205.467700][T29426] xt_hashlimit: size too large, truncated to 1048576 [ 2205.563218][T29430] xt_hashlimit: size too large, truncated to 1048576 [ 2205.584149][T29427] netlink: 'syz.0.16313': attribute type 16 has an invalid length. [ 2205.584202][T29427] netlink: 'syz.0.16313': attribute type 17 has an invalid length. [ 2205.889237][ T7312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2205.889273][ T7312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2205.989854][T29442] vlan0: entered promiscuous mode [ 2206.090457][T29446] veth3: entered allmulticast mode [ 2206.396682][ T7306] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2206.396719][ T7306] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2206.541671][T29461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2206.577802][T29461] 8021q: adding VLAN 0 to HW filter on device team0 [ 2206.635300][T29461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2206.720630][T29461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2206.723287][T29461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2206.743581][T29461] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2206.760274][T29461] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2206.825252][ T7306] bridge0: port 1(bridge_slave_0) entered blocking state [ 2206.825360][ T7306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2206.848517][ T7306] bridge0: port 2(bridge_slave_1) entered blocking state [ 2206.848631][ T7306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2206.907127][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2206.907187][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2207.247268][T29492] xt_hashlimit: size too large, truncated to 1048576 [ 2207.418935][ T7303] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2207.593265][T29502] bond7: (slave bond_slave_0): Device is not our slave [ 2207.593297][T29502] bond7: option active_slave: invalid value (bond_slave_0) [ 2207.614142][T29502] bond7 (unregistering): Released all slaves [ 2208.241854][T29530] netlink: 'syz.1.16353': attribute type 5 has an invalid length. [ 2208.256017][T29530] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:533 [ 2210.031232][T29597] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 2210.486915][ T7312] net_ratelimit: 11 callbacks suppressed [ 2210.486939][ T7312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2210.486962][ T7312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2210.997608][ T7302] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2210.997641][ T7302] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2211.507626][ T7312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2211.507666][ T7312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2212.018680][ T7306] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2212.018731][ T7306] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2212.132720][T29622] netlink: 'syz.0.16380': attribute type 10 has an invalid length. [ 2212.188802][T29623] __nla_validate_parse: 7 callbacks suppressed [ 2212.188828][T29623] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16380'. [ 2212.202735][T29619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16378'. [ 2212.284910][T29625] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2212.294493][T29624] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16380'. [ 2212.406262][T29628] netlink: 56 bytes leftover after parsing attributes in process `syz.2.16378'. [ 2212.526607][ T7302] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2212.526659][ T7302] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2212.696998][T29625] xt_CT: No such helper "netbios-ns" [ 2212.705087][T29619] team0: Port device team_slave_0 removed [ 2213.112815][T29636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16382'. [ 2213.484313][T29644] ip6gretap1: entered allmulticast mode [ 2213.763755][T29656] netlink: 'syz.3.16386': attribute type 1 has an invalid length. [ 2213.896771][T29656] bond2: entered promiscuous mode [ 2213.897285][T29656] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2214.110874][T29656] veth3: entered allmulticast mode [ 2214.133542][T29656] bond2: (slave veth3): making interface the new active one [ 2214.133569][T29656] veth3: entered promiscuous mode [ 2214.157678][T29656] bond2: (slave veth3): Enslaving as an active interface with an up link [ 2214.169353][T29664] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16387'. [ 2214.169455][T29664] netlink: 44 bytes leftover after parsing attributes in process `syz.2.16387'. [ 2214.565920][T29669] syzkaller1: entered promiscuous mode [ 2214.565946][T29669] syzkaller1: entered allmulticast mode [ 2215.586621][ T7303] net_ratelimit: 10 callbacks suppressed [ 2215.586644][ T7303] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2215.586686][ T7303] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2215.625788][T29691] syzkaller0: entered promiscuous mode [ 2215.625861][T29691] syzkaller0: entered allmulticast mode [ 2216.096595][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2216.096630][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2216.181401][T29709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16403'. [ 2216.206671][T29709] macsec1: entered promiscuous mode [ 2216.594449][T29729] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16410'. [ 2216.606375][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2216.606407][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2216.714869][T29733] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16412'. [ 2216.895310][T29738] syzkaller1: entered promiscuous mode [ 2216.895336][T29738] syzkaller1: entered allmulticast mode [ 2217.116626][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2217.116663][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2217.147540][T29743] netlink: 'syz.1.16415': attribute type 6 has an invalid length. [ 2217.371892][T29750] vlan2: entered promiscuous mode [ 2217.371921][T29750] syz_tun: entered promiscuous mode [ 2217.629831][ T7306] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2217.629867][ T7306] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2217.913192][T29769] syzkaller0: entered promiscuous mode [ 2217.913218][T29769] syzkaller0: entered allmulticast mode [ 2217.941889][T29772] netlink: 'syz.2.16423': attribute type 1 has an invalid length. [ 2218.123945][T29772] gretap1: entered allmulticast mode [ 2218.143354][T29772] bond1: (slave gretap1): making interface the new active one [ 2218.159127][T29772] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 2218.285857][T29788] netlink: 72 bytes leftover after parsing attributes in process `syz.0.16431'. [ 2218.564393][T29800] syzkaller0: entered promiscuous mode [ 2218.564418][T29800] syzkaller0: entered allmulticast mode [ 2218.740653][T29806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16436'. [ 2218.762201][T29806] ip6gre2: entered promiscuous mode [ 2218.762226][T29806] ip6gre2: entered allmulticast mode [ 2218.887245][T29809] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16437'. [ 2219.127214][T29814] xt_NETMAP: bad MAP_IPS. [ 2219.146005][T29814] netlink: 56 bytes leftover after parsing attributes in process `syz.1.16439'. [ 2220.706337][ T13] net_ratelimit: 11 callbacks suppressed [ 2220.706363][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2220.706390][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2221.216377][ T7312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2221.216414][ T7312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2221.519508][T29816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16440'. [ 2221.628469][T29820] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16441'. [ 2221.628509][T29820] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16441'. [ 2221.726805][ T7307] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2221.726841][ T7307] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2222.236694][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2222.236728][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2222.524731][T29858] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16453'. [ 2222.746266][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2222.746301][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2222.798423][T29866] netlink: 48 bytes leftover after parsing attributes in process `syz.1.16455'. [ 2223.278283][T29891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16464'. [ 2223.367051][T29891] bond4: (slave bond_slave_0): Device is not our slave [ 2223.367077][T29891] bond4: option active_slave: invalid value (bond_slave_0) [ 2223.379352][T29891] bond4 (unregistering): Released all slaves [ 2223.882333][T29911] xt_hashlimit: size too large, truncated to 1048576 [ 2223.959856][T29916] xt_hashlimit: size too large, truncated to 1048576 [ 2224.002704][T29915] netlink: 296 bytes leftover after parsing attributes in process `syz.4.16470'. [ 2224.586767][T29933] syzkaller0: entered promiscuous mode [ 2224.586797][T29933] syzkaller0: entered allmulticast mode [ 2225.816531][ T7307] net_ratelimit: 12 callbacks suppressed [ 2225.816558][ T7307] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2225.816583][ T7307] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2226.325962][ T7312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2226.326000][ T7312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2226.843908][ T7303] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2226.843945][ T7303] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2227.358373][ T7302] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2227.358411][ T7302] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2227.874550][ T7303] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2227.874590][ T7303] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2228.518797][T29943] tipc: Started in network mode [ 2228.518833][T29943] tipc: Node identity ac14142f, cluster identity 4711 [ 2228.519055][T29943] tipc: New replicast peer: 172.20.20.170 [ 2228.519405][T29943] tipc: Enabled bearer , priority 10 [ 2228.554728][T29945] vlan2: entered promiscuous mode [ 2228.554753][T29945] syz_tun: entered promiscuous mode [ 2228.619501][T29958] netlink: 'syz.0.16482': attribute type 1 has an invalid length. [ 2228.663102][T29947] tipc: New replicast peer: 0.0.0.0 [ 2228.749236][T29958] bond7: entered promiscuous mode [ 2228.749712][T29958] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2228.823322][T29962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16483'. [ 2228.851452][T29958] bond7: (slave bridge4): making interface the new active one [ 2228.851481][T29958] bridge4: entered promiscuous mode [ 2228.853032][T29958] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 2229.024175][T29962] netlink: 120 bytes leftover after parsing attributes in process `syz.3.16483'. [ 2229.172839][T29966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16484'. [ 2229.745849][T29990] syzkaller0: entered promiscuous mode [ 2229.745907][T29990] syzkaller0: entered allmulticast mode [ 2229.752880][ T3075] tipc: Node number set to 2886997039 [ 2230.115043][T30009] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16497'. [ 2230.115073][T30009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16497'. [ 2230.835684][T30021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16500'. [ 2230.943543][T23025] net_ratelimit: 11 callbacks suppressed [ 2230.943568][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2230.943595][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2231.461642][ T7307] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2231.461683][ T7307] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2231.977936][ T7307] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2231.977975][ T7307] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2232.398720][T30029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16503'. [ 2232.485028][ T7312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2232.485067][ T7312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2232.986626][ T7312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2232.986663][ T7312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2235.038744][T30025] netlink: 'syz.0.16500': attribute type 1 has an invalid length. [ 2235.038772][T30025] netlink: 92 bytes leftover after parsing attributes in process `syz.0.16500'. [ 2235.105980][T30029] bond4: (slave bond_slave_0): Device is not our slave [ 2235.116518][T30029] bond4: option active_slave: invalid value (bond_slave_0) [ 2235.125126][T30029] bond4 (unregistering): Released all slaves [ 2235.600310][T30053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16504'. [ 2235.600850][T30056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16513'. [ 2235.715352][T30056] bridge0: port 2(bridge_slave_1) entered disabled state [ 2235.715836][T30056] bridge0: port 1(bridge_slave_0) entered disabled state [ 2235.830600][T30056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2235.852225][T30056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2235.920909][T30056] bond7: left promiscuous mode [ 2235.920937][T30056] bridge4: left promiscuous mode [ 2236.076796][ T7306] net_ratelimit: 508 callbacks suppressed [ 2236.076819][ T7306] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2236.076846][ T7306] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2236.143934][T30071] netlink: 'syz.1.16515': attribute type 1 has an invalid length. [ 2236.184946][T30070] lo: entered allmulticast mode [ 2236.270969][T30071] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2236.271662][T30070] lo: left allmulticast mode [ 2236.297803][T30075] bond4: (slave dummy0): Enslaving as a backup interface with an up link [ 2236.379041][ T7306] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2236.516450][ T7300] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2236.524556][T30086] netlink: 'syz.2.16518': attribute type 1 has an invalid length. [ 2236.586600][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2236.586641][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2236.675921][T30078] netlink: 'syz.1.16515': attribute type 10 has an invalid length. [ 2236.675948][T30078] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16515'. [ 2236.716579][T30098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16518'. [ 2236.730095][T30077] syzkaller0: entered promiscuous mode [ 2236.730258][T30077] syzkaller0: entered allmulticast mode [ 2236.825780][T30086] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2236.898513][T30088] bond3: (slave veth5): Enslaving as an active interface with a down link [ 2236.938045][T30090] bond3: (slave dummy0): making interface the new active one [ 2236.939894][T30090] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 2236.990103][T30078] dummy0: entered promiscuous mode [ 2236.995861][T30078] bond4: (slave dummy0): Removing an active aggregator [ 2237.017704][T30078] bond4: (slave dummy0): Releasing backup interface [ 2237.099720][ T7302] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2237.099756][ T7302] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2237.269548][T30114] netlink: 19 bytes leftover after parsing attributes in process `syz.4.16527'. [ 2237.271742][T30114] netlink: 19 bytes leftover after parsing attributes in process `syz.4.16527'. [ 2237.607514][ T7302] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2237.607552][ T7302] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2237.819870][T30122] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16530'. [ 2241.229035][ T7312] net_ratelimit: 12 callbacks suppressed [ 2241.229058][ T7312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2241.229082][ T7312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2241.465285][T30133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16534'. [ 2241.510950][T30130] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 2241.511552][T30130] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2241.519015][T30130] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2241.645719][T30136] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16531'. [ 2241.756963][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2241.756998][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2242.271623][ T7307] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2242.271660][ T7307] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2242.781722][ T7312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2242.781837][ T7312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2243.031588][T30151] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 2243.068464][T30161] syzkaller0: entered promiscuous mode [ 2243.068496][T30161] syzkaller0: entered allmulticast mode [ 2243.286456][ T7312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2246.378197][ T7306] net_ratelimit: 13 callbacks suppressed [ 2246.378221][ T7306] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2246.378247][ T7306] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2246.887433][ T7312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2246.887461][ T7312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2247.396528][ T7302] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2247.396565][ T7302] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2247.610989][T30163] batman_adv: batadv0: Adding interface: veth0 [ 2247.611010][T30163] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2247.611057][T30163] batman_adv: batadv0: Interface activated: veth0 [ 2247.612805][T30185] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 2247.613310][T30185] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2247.614296][T30185] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2247.767845][T30189] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16548'. [ 2247.864884][T30192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16549'. [ 2247.893665][T30192] netlink: 'syz.3.16549': attribute type 1 has an invalid length. [ 2247.893691][T30192] netlink: 92 bytes leftover after parsing attributes in process `syz.3.16549'. [ 2247.921835][ T7307] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2247.921879][ T7307] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2247.982959][T30189] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16548'. [ 2248.225635][T30204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16554'. [ 2248.225661][T30204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16554'. [ 2248.225693][T30204] netlink: 'syz.1.16554': attribute type 19 has an invalid length. [ 2248.225709][T30204] netlink: 'syz.1.16554': attribute type 20 has an invalid length. [ 2248.268114][T30203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16553'. [ 2248.272400][T30203] netlink: zone id is out of range [ 2248.295309][T30205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16554'. [ 2248.295332][T30205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16554'. [ 2248.295358][T30205] netlink: 'syz.1.16554': attribute type 19 has an invalid length. [ 2248.295373][T30205] netlink: 'syz.1.16554': attribute type 20 has an invalid length. [ 2248.364342][T30209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16554'. [ 2248.364379][T30209] netlink: 'syz.1.16554': attribute type 19 has an invalid length. [ 2248.364395][T30209] netlink: 'syz.1.16554': attribute type 20 has an invalid length. [ 2248.364887][T30210] netlink: 'syz.1.16554': attribute type 19 has an invalid length. [ 2248.364905][T30210] netlink: 'syz.1.16554': attribute type 20 has an invalid length. [ 2248.497478][ T7312] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2248.497923][ T7312] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2248.497964][ T7312] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2248.498000][ T7312] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2248.822600][T30218] netlink: 'syz.2.16557': attribute type 1 has an invalid length. [ 2248.965114][T30229] bond2: left promiscuous mode [ 2248.965187][T30229] veth3: left promiscuous mode [ 2248.977958][T30229] veth3: left allmulticast mode [ 2249.030092][T30234] syzkaller1: entered promiscuous mode [ 2249.030119][T30234] syzkaller1: entered allmulticast mode [ 2249.164066][T30237] batman_adv: batadv0: Interface deactivated: veth0 [ 2249.212722][T30237] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 2249.236803][T30237] bond3: left promiscuous mode [ 2249.237908][T30237] ip6gre2: left promiscuous mode [ 2249.237932][T30237] ip6gre2: left allmulticast mode [ 2249.962757][T30270] FAULT_INJECTION: forcing a failure. [ 2249.962757][T30270] name failslab, interval 1, probability 0, space 0, times 0 [ 2249.962876][T30270] CPU: 1 UID: 0 PID: 30270 Comm: syz.1.16573 Not tainted syzkaller #0 PREEMPT(full) [ 2249.962903][T30270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2249.962918][T30270] Call Trace: [ 2249.962928][T30270] [ 2249.962939][T30270] dump_stack_lvl+0xe8/0x150 [ 2249.962977][T30270] should_fail_ex+0x410/0x560 [ 2249.963015][T30270] should_failslab+0xa8/0x100 [ 2249.963049][T30270] __kmalloc_noprof+0xfe/0x720 [ 2249.963083][T30270] ? __kmalloc_cache_noprof+0x14d/0x600 [ 2249.963108][T30270] ? alloc_pipe_info+0x1f9/0x4c0 [ 2249.963133][T30270] ? alloc_pipe_info+0x1f9/0x4c0 [ 2249.963170][T30270] alloc_pipe_info+0x1f9/0x4c0 [ 2249.963202][T30270] splice_direct_to_actor+0xa41/0xcb0 [ 2249.963238][T30270] ? lock_acquire+0x115/0x350 [ 2249.963264][T30270] ? __pfx_aa_file_perm+0x10/0x10 [ 2249.963302][T30270] ? __pfx_direct_splice_actor+0x10/0x10 [ 2249.963325][T30270] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2249.963360][T30270] do_splice_direct+0x195/0x290 [ 2249.963387][T30270] ? __pfx_do_splice_direct+0x10/0x10 [ 2249.963412][T30270] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 2249.963440][T30270] ? bpf_lsm_file_permission+0x9/0x20 [ 2249.963474][T30270] ? security_file_permission+0x75/0x260 [ 2249.963504][T30270] ? rw_verify_area+0x203/0x4c0 [ 2249.963532][T30270] do_sendfile+0x52e/0x7c0 [ 2249.963572][T30270] ? __pfx_do_sendfile+0x10/0x10 [ 2249.963603][T30270] ? __fget_files+0x3a2/0x420 [ 2249.963650][T30270] __se_sys_sendfile64+0x144/0x1a0 [ 2249.963682][T30270] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 2249.963724][T30270] do_syscall_64+0x166/0x520 [ 2249.963755][T30270] ? trace_irq_disable+0x3b/0x140 [ 2249.963779][T30270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2249.963803][T30270] ? clear_bhb_loop+0x70/0xc0 [ 2249.963829][T30270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2249.963852][T30270] RIP: 0033:0x7f398739e559 [ 2249.963873][T30270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2249.963892][T30270] RSP: 002b:00007f39881e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2249.963918][T30270] RAX: ffffffffffffffda RBX: 00007f3987625fa0 RCX: 00007f398739e559 [ 2249.963935][T30270] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2249.963949][T30270] RBP: 00007f39881e4090 R08: 0000000000000000 R09: 0000000000000000 [ 2249.963965][T30270] R10: 00000000f03a0005 R11: 0000000000000246 R12: 0000000000000001 [ 2249.963980][T30270] R13: 00007f3987626038 R14: 00007f3987625fa0 R15: 00007ffd83cf54a8 [ 2249.964016][T30270] [ 2250.807877][T30295] tipc: Enabled bearer , priority 0 [ 2250.830565][T30297] FAULT_INJECTION: forcing a failure. [ 2250.830565][T30297] name failslab, interval 1, probability 0, space 0, times 0 [ 2250.830602][T30297] CPU: 1 UID: 0 PID: 30297 Comm: syz.2.16584 Not tainted syzkaller #0 PREEMPT(full) [ 2250.830629][T30297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2250.830645][T30297] Call Trace: [ 2250.830654][T30297] [ 2250.830665][T30297] dump_stack_lvl+0xe8/0x150 [ 2250.830705][T30297] should_fail_ex+0x410/0x560 [ 2250.830743][T30297] should_failslab+0xa8/0x100 [ 2250.830780][T30297] __kmalloc_cache_noprof+0xa3/0x600 [ 2250.830808][T30297] ? nft_flush_table+0x1989/0x1d40 [ 2250.830840][T30297] ? nft_flush_table+0x1989/0x1d40 [ 2250.830880][T30297] nft_flush_table+0x1989/0x1d40 [ 2250.830915][T30297] ? nft_pernet+0x23/0x240 [ 2250.830945][T30297] ? nft_pernet+0x23/0x240 [ 2250.830975][T30297] ? nla_strcmp+0xf8/0x130 [ 2250.831013][T30297] nf_tables_deltable+0xd1d/0xe80 [ 2250.831042][T30297] ? nfnetlink_rcv+0x8d1/0x28c0 [ 2250.831079][T30297] ? __pfx_nf_tables_deltable+0x10/0x10 [ 2250.831114][T30297] ? nfnl_pernet+0x23/0x240 [ 2250.831155][T30297] ? __nla_parse+0x40/0x60 [ 2250.831196][T30297] nfnetlink_rcv+0x1288/0x28c0 [ 2250.831263][T30297] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2250.831348][T30297] ? lock_acquire+0x115/0x350 [ 2250.831385][T30297] ? netlink_deliver_tap+0x2e/0x1b0 [ 2250.831418][T30297] ? netlink_deliver_tap+0x2e/0x1b0 [ 2250.831456][T30297] netlink_unicast+0x7bd/0x940 [ 2250.831497][T30297] netlink_sendmsg+0x813/0xb40 [ 2250.831545][T30297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2250.831588][T30297] ? apparmor_socket_sendmsg+0x98/0x360 [ 2250.831622][T30297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2250.831652][T30297] sock_sendmsg_nosec+0x14e/0x190 [ 2250.831687][T30297] ____sys_sendmsg+0x54e/0x850 [ 2250.831719][T30297] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2250.831755][T30297] ? import_iovec+0x73/0xa0 [ 2250.831794][T30297] ___sys_sendmsg+0x2a5/0x360 [ 2250.831817][T30297] ? __lock_acquire+0x747/0x2de0 [ 2250.831847][T30297] ? __pfx____sys_sendmsg+0x10/0x10 [ 2250.831914][T30297] ? __fget_files+0x2a/0x420 [ 2250.831950][T30297] ? __fget_files+0x3a2/0x420 [ 2250.831997][T30297] __x64_sys_sendmsg+0x1b1/0x290 [ 2250.832026][T30297] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2250.832077][T30297] do_syscall_64+0x166/0x520 [ 2250.832115][T30297] ? trace_irq_disable+0x3b/0x140 [ 2250.832140][T30297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2250.832165][T30297] ? clear_bhb_loop+0x70/0xc0 [ 2250.832195][T30297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2250.832219][T30297] RIP: 0033:0x7fb8a999e559 [ 2250.832241][T30297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2250.832263][T30297] RSP: 002b:00007fb8aa7a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2250.832289][T30297] RAX: ffffffffffffffda RBX: 00007fb8a9c25fa0 RCX: 00007fb8a999e559 [ 2250.832308][T30297] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2250.832324][T30297] RBP: 00007fb8aa7a8090 R08: 0000000000000000 R09: 0000000000000000 [ 2250.832339][T30297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2250.832354][T30297] R13: 00007fb8a9c26038 R14: 00007fb8a9c25fa0 R15: 00007ffcb7752e58 [ 2250.832392][T30297] [ 2251.442838][T30293] tipc: Disabling bearer [ 2251.827530][ T7307] net_ratelimit: 1511 callbacks suppressed [ 2251.827555][ T7307] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2251.827584][ T7307] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2252.349600][ T7302] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2252.349639][ T7302] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2252.485536][T30317] netlink: zone id is out of range [ 2252.485556][T30317] netlink: zone id is out of range [ 2252.485566][T30317] netlink: zone id is out of range [ 2252.485576][T30317] netlink: zone id is out of range [ 2252.485585][T30317] netlink: zone id is out of range [ 2252.485595][T30317] netlink: zone id is out of range [ 2257.656406][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2258.436024][ C1] sched: DL replenish lagged too much [ 2269.247807][T23025] net_ratelimit: 495 callbacks suppressed [ 2269.247833][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2269.248049][T23025] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2287.184595][ T7311] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2287.184816][ T7311] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2288.593961][T24895] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2289.627764][T24895] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2289.634741][T24895] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2289.885246][T24895] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2289.897149][T24895] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2296.502713][T26259] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2297.186908][T26259] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2297.284608][T26259] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2297.324869][T26259] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2297.335694][T26259] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2300.636507][T26259] Bluetooth: hci0: command tx timeout [ 2302.806031][T26259] Bluetooth: hci0: command tx timeout [ 2303.423638][T27024] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2303.423877][T27024] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2304.984760][T26259] Bluetooth: hci0: command tx timeout [ 2305.902925][T24895] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2306.126723][T24895] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2306.197255][T24895] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2306.762844][T24895] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2307.016164][T24895] Bluetooth: hci0: command tx timeout [ 2307.146612][T24895] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2307.397407][ T7311] bridge_slave_1: left allmulticast mode [ 2307.397844][ T7311] bridge_slave_1: left promiscuous mode [ 2307.399162][ T7311] bridge0: port 2(bridge_slave_1) entered disabled state [ 2309.659312][T24895] Bluetooth: hci6: command tx timeout [ 2311.736484][T24895] Bluetooth: hci6: command tx timeout [ 2312.519899][T26259] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2313.215353][T26259] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2313.346386][T26259] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2313.430698][T26259] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2313.432786][T25311] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2313.839680][T25311] Bluetooth: hci6: command tx timeout [ 2315.496388][T25311] Bluetooth: hci7: command tx timeout [ 2316.066883][T25311] Bluetooth: hci6: command tx timeout [ 2316.892681][T24895] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2316.951814][T24895] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2317.197993][T24895] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2317.286793][T24895] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2317.288551][T24895] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2317.576277][T25311] Bluetooth: hci7: command tx timeout [ 2318.108383][T24895] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2318.211447][T24895] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2318.224206][T24895] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2318.346894][T24895] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2318.884223][T24895] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2319.376495][T24895] Bluetooth: hci8: command tx timeout [ 2319.662662][T25311] Bluetooth: hci7: command tx timeout [ 2320.024672][ T7307] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2320.024923][ T7307] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2321.418905][T24895] Bluetooth: hci8: command tx timeout [ 2321.749384][T24895] Bluetooth: hci7: command tx timeout [ 2322.327678][T24895] Bluetooth: hci9: command tx timeout [ 2323.756777][T24895] Bluetooth: hci8: command tx timeout [ 2324.376220][T25311] Bluetooth: hci9: command tx timeout [ 2325.816371][T25311] Bluetooth: hci8: command tx timeout [ 2326.456190][T25311] Bluetooth: hci9: command tx timeout [ 2328.736857][T25311] Bluetooth: hci9: command tx timeout [ 2338.695727][T30391] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2338.696025][T30391] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2358.568602][T24895] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2358.754516][T24895] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2358.854471][T24895] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2359.116718][T24895] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2359.239840][T24895] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2359.653993][T27024] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2359.654253][T27024] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2362.096079][T25311] Bluetooth: hci1: command tx timeout [ 2362.648226][T24895] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2362.837395][T24895] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2363.266555][T24895] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2363.464813][T24895] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2363.472736][T24895] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2364.206556][T24895] Bluetooth: hci1: command tx timeout [ 2365.615387][T24895] Bluetooth: hci2: command tx timeout [ 2366.253371][T24895] Bluetooth: hci1: command tx timeout [ 2367.714837][T24895] Bluetooth: hci2: command tx timeout [ 2368.299564][T24895] Bluetooth: hci1: command tx timeout [ 2369.787018][T24895] Bluetooth: hci2: command tx timeout [ 2371.317859][T24895] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2371.816342][T24895] Bluetooth: hci2: command tx timeout [ 2371.926570][T24895] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2371.929922][T24895] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2371.932860][T24895] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2371.935247][T24895] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2374.496579][T25311] Bluetooth: hci3: command tx timeout [ 2376.536563][T25311] Bluetooth: hci3: command tx timeout [ 2377.979701][ T7310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2377.979960][ T7310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2378.627403][T24895] Bluetooth: hci3: command tx timeout [ 2379.568035][T24895] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2379.587292][T24895] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2379.589832][T24895] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2379.866843][T24895] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2379.868713][T24895] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2380.708051][T25311] Bluetooth: hci3: command tx timeout [ 2384.076055][T26259] Bluetooth: hci4: command tx timeout [ 2386.137486][T30424] Bluetooth: hci4: command tx timeout [ 2386.620607][T30424] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2386.781372][T30424] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2386.865926][T30424] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2386.967735][T30424] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2386.978365][T24895] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2388.256295][T26259] Bluetooth: hci4: command tx timeout [ 2389.156341][T26259] Bluetooth: hci5: command tx timeout [ 2389.731162][ T7311] team0: Port device bridge4 removed [ 2390.296341][T26259] Bluetooth: hci4: command tx timeout [ 2391.176451][T26259] Bluetooth: hci5: command tx timeout [ 2393.290979][T26259] Bluetooth: hci5: command tx timeout [ 2395.336169][T26259] Bluetooth: hci5: command tx timeout [ 2396.517443][T10653] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2396.517698][T10653] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2398.307449][ T7311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2399.277339][ T7311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2401.668307][ T7311] bond0 (unregistering): Released all slaves [ 2403.178702][ T7311] bond1 (unregistering): Released all slaves [ 2404.705715][ T7311] bond2 (unregistering): Released all slaves [ 2408.218481][ T7311] bond3 (unregistering): Released all slaves [ 2411.898062][ T7311] bond4 (unregistering): Released all slaves [ 2412.915988][T30395] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2412.916300][T30395] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2416.855753][ T7311] bond5 (unregistering): Released all slaves [ 2422.364176][ T7311] bond6 (unregistering): Released all slaves [ 2423.643562][T30424] Bluetooth: hci0: command 0x0406 tx timeout [ 2424.698377][T30424] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2425.155903][T30424] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2425.300658][T30424] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2425.523380][T30424] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2425.657702][T30424] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2427.976143][T26259] Bluetooth: hci10: command tx timeout [ 2430.066836][T26259] Bluetooth: hci10: command tx timeout [ 2432.226403][T26259] Bluetooth: hci10: command tx timeout [ 2433.900248][T26259] Bluetooth: hci6: command 0x0406 tx timeout [ 2434.033794][T27027] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2434.034080][T27027] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2434.307644][T26259] Bluetooth: hci10: command tx timeout [ 2435.298477][T26259] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 2435.459638][T26259] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 2435.556356][T26259] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 2437.470550][T30424] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 2437.472671][T30424] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 2439.256567][T30424] Bluetooth: hci7: command 0x0406 tx timeout [ 2440.086758][T30424] Bluetooth: hci11: command tx timeout [ 2442.911238][T26259] Bluetooth: hci11: command tx timeout [ 2442.912215][T26259] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 2442.935807][T26259] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 2443.219350][T30454] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 2443.224294][T30454] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 2443.227494][T30454] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 2443.670768][T30454] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 2443.740293][T30454] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 2443.767339][T30454] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 2443.958209][T30454] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 2444.359028][T30454] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 2444.976442][T26259] Bluetooth: hci11: command tx timeout [ 2444.976483][T30454] Bluetooth: hci8: command 0x0406 tx timeout [ 2444.976492][T26259] Bluetooth: hci9: command 0x0406 tx timeout [ 2445.416695][T24895] Bluetooth: hci12: command tx timeout [ 2447.266452][T26259] Bluetooth: hci11: command tx timeout [ 2447.496419][T26259] Bluetooth: hci12: command tx timeout [ 2449.867343][T30454] Bluetooth: hci12: command tx timeout [ 2450.536152][T24895] Bluetooth: hci13: command tx timeout [ 2451.321805][T30449] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 2451.618246][T30449] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 2451.977172][T30449] Bluetooth: hci12: command tx timeout [ 2452.116379][T30449] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 2452.686529][T24895] Bluetooth: hci13: command tx timeout [ 2453.916649][T30449] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 2454.506774][T30449] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 2454.706682][T30454] Bluetooth: hci13: command tx timeout [ 2456.127088][T30465] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2456.127333][T30465] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2456.776821][T30454] Bluetooth: hci13: command tx timeout [ 2456.976158][T30454] Bluetooth: hci14: command tx timeout [ 2459.296819][T30454] Bluetooth: hci14: command tx timeout [ 2461.336145][T30449] Bluetooth: hci14: command tx timeout [ 2462.344712][T26258] syz_tun (unregistering): left allmulticast mode [ 2462.345466][T26258] bridge0: port 3(syz_tun) entered disabled state [ 2463.446006][T30449] Bluetooth: hci14: command tx timeout [ 2481.998552][ T7300] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2481.998784][ T7300] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2484.057435][T24895] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2484.486639][T24895] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2484.489681][ T31] INFO: task syz-executor:25309 blocked for more than 144 seconds. [ 2484.489707][ T31] Not tainted syzkaller #0 [ 2484.489721][ T31] Blocked by coredump. [ 2484.489729][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2484.489741][ T31] task:syz-executor state:D stack:22344 pid:25309 tgid:25309 ppid:1 task_flags:0x40054c flags:0x00080003 [ 2484.489808][ T31] Call Trace: [ 2484.489818][ T31] [ 2484.489834][ T31] __schedule+0x17db/0x58f0 [ 2484.489889][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 2484.490170][ T31] ? stack_depot_save_flags+0x33/0x7f0 [ 2484.490211][ T31] ? __pfx___schedule+0x10/0x10 [ 2484.490251][ T31] ? schedule+0x90/0x2b0 [ 2484.490286][ T31] schedule+0x164/0x2b0 [ 2484.490318][ T31] schedule_preempt_disabled+0x13/0x30 [ 2484.490348][ T31] __mutex_lock+0x7c1/0x1550 [ 2484.490387][ T31] ? __mutex_lock+0x5d4/0x1550 [ 2484.490425][ T31] ? tun_chr_close+0x3e/0x1c0 [ 2484.490458][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2484.490512][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 2484.490542][ T31] tun_chr_close+0x3e/0x1c0 [ 2484.490572][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 2484.490601][ T31] __fput+0x418/0xa50 [ 2484.490645][ T31] task_work_run+0x1d9/0x270 [ 2484.490676][ T31] ? __pfx_task_work_run+0x10/0x10 [ 2484.490703][ T31] ? do_exit+0x735/0x2360 [ 2484.490725][ T31] ? kmem_cache_free+0x182/0x650 [ 2484.490753][ T31] ? put_net+0x191/0x260 [ 2484.490791][ T31] do_exit+0x73a/0x2360 [ 2484.490822][ T31] ? lock_acquire+0x115/0x350 [ 2484.490848][ T31] ? __pfx_do_exit+0x10/0x10 [ 2484.490877][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 2484.491156][ T31] do_group_exit+0x22d/0x2f0 [ 2484.491180][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2484.491215][ T31] get_signal+0x121b/0x12c0 [ 2484.491270][ T31] arch_do_signal_or_restart+0xbb/0x860 [ 2484.491310][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2484.491355][ T31] ? ksys_read+0x1fc/0x270 [ 2484.491389][ T31] exit_to_user_mode_loop+0x10e/0x770 [ 2484.491416][ T31] ? rcu_is_watching+0x16/0xb0 [ 2484.491452][ T31] do_syscall_64+0x328/0x520 [ 2484.491484][ T31] ? trace_irq_disable+0x3b/0x140 [ 2484.491510][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2484.491536][ T31] ? clear_bhb_loop+0x70/0xc0 [ 2484.491566][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2484.491591][ T31] RIP: 0033:0x7fb43835ed8e [ 2484.491613][ T31] RSP: 002b:00007fffb75420a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2484.491638][ T31] RAX: fffffffffffffe00 RBX: 0000555555cf2500 RCX: 00007fb43835ed8e [ 2484.491656][ T31] RDX: 0000000000000030 RSI: 00007fffb75421a0 RDI: 00000000000000f9 [ 2484.491673][ T31] RBP: 00007fffb754214c R08: 0000000000000000 R09: 0000000000000000 [ 2484.491689][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000012f [ 2484.491705][ T31] R13: 0000555555d05a00 R14: 000000000022b505 R15: 00007fffb75421a0 [ 2484.491744][ T31] [ 2484.491799][ T31] INFO: task syz-executor:30386 blocked for more than 144 seconds. [ 2484.491817][ T31] Not tainted syzkaller #0 [ 2484.491830][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2484.491842][ T31] task:syz-executor state:D stack:26616 pid:30386 tgid:30386 ppid:1 task_flags:0x400140 flags:0x00080002 [ 2484.492143][ T31] Call Trace: [ 2484.492153][ T31] [ 2484.492168][ T31] __schedule+0x17db/0x58f0 [ 2484.492215][ T31] ? trace_irq_disable+0x3b/0x140 [ 2484.492255][ T31] ? __pfx___schedule+0x10/0x10 [ 2484.492295][ T31] ? schedule+0x90/0x2b0 [ 2484.492328][ T31] schedule+0x164/0x2b0 [ 2484.492360][ T31] schedule_preempt_disabled+0x13/0x30 [ 2484.492390][ T31] __mutex_lock+0x7c1/0x1550 [ 2484.492428][ T31] ? __mutex_lock+0x5d4/0x1550 [ 2484.492465][ T31] ? inet_rtm_newaddr+0x470/0x19f0 [ 2484.492504][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2484.492552][ T31] ? __nla_parse+0x40/0x60 [ 2484.492594][ T31] inet_rtm_newaddr+0x470/0x19f0 [ 2484.492630][ T31] ? __kernel_text_address+0xd/0x30 [ 2484.492658][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2484.492693][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 2484.492752][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 2484.492785][ T31] rtnetlink_rcv_msg+0x802/0xc00 [ 2484.492822][ T31] ? netlink_sendmsg+0x5d4/0xb40 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2484.492858][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 2484.493128][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2484.493169][ T31] ? __lock_acquire+0x747/0x2de0 [ 2484.493210][ T31] netlink_rcv_skb+0x226/0x4a0 [ 2484.493245][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2484.493285][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2484.493332][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 2484.493363][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 2484.493402][ T31] netlink_unicast+0x7bd/0x940 [ 2484.493443][ T31] netlink_sendmsg+0x813/0xb40 [ 2484.493488][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2484.493530][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 2484.493565][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2484.493597][ T31] sock_sendmsg_nosec+0x14e/0x190 [ 2484.493633][ T31] __sys_sendto+0x408/0x5a0 [ 2484.493676][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 2484.493747][ T31] ? do_user_addr_fault+0xc4c/0x1340 [ 2484.493776][ T31] __x64_sys_sendto+0xde/0x100 [ 2484.493817][ T31] do_syscall_64+0x166/0x520 [ 2484.493849][ T31] ? trace_irq_disable+0x3b/0x140 [ 2484.493874][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2484.494145][ T31] ? clear_bhb_loop+0x70/0xc0 [ 2484.494177][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2484.494201][ T31] RIP: 0033:0x7f894015ed8e [ 2484.494221][ T31] RSP: 002b:00007ffeac897d18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2484.494246][ T31] RAX: ffffffffffffffda RBX: 0000555562ea5500 RCX: 00007f894015ed8e [ 2484.494265][ T31] RDX: 0000000000000028 RSI: 00007f8940f54670 RDI: 0000000000000003 [ 2484.494290][ T31] RBP: 0000000000000001 R08: 00007ffeac897d94 R09: 000000000000000c [ 2484.494306][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2484.494321][ T31] R13: 0000000000000000 R14: 00007f8940f54670 R15: 0000000000000000 [ 2484.494358][ T31] [ 2484.494389][ T31] [ 2484.494389][ T31] Showing all locks held in the system: [ 2484.494401][ T31] locks held by kworker/0:1/10: 3, on CPU#0: [ 2484.494419][ T31] #0: ffff88801c06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2484.494486][ T31] #1: ffffc900000f7c40 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2484.494551][ T31] #2: ffffffff915ba820 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x31/0x120 [ 2484.494613][ T31] locks held by kworker/u8:1/13: 4, last CPU#0: [ 2484.494630][ T31] #0: ffff88802132c140 ((wq_completion)krds_cp_wq#4/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2484.494695][ T31] #1: ffffc90000127c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2484.494761][ T31] #2: ffff888054968f80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 2484.495171][ T31] #3: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: __inet_dev_addr_type+0x146/0x4f0 [ 2484.495262][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 2484.495279][ T31] #0: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2484.495372][ T31] locks held by getty/5377: 2, on CPU#1: [ 2484.495389][ T31] #0: ffff888036b990a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2484.495484][ T31] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 2484.495556][ T31] locks held by kworker/u8:21/23025: 3, on CPU#0: [ 2484.495574][ T31] #0: ffff88801e7db140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2484.495639][ T31] #1: ffffc900036a7c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2484.495705][ T31] #2: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 2484.495820][ T31] locks held by kworker/u8:0/1512: 3, last CPU#0: [ 2484.495838][ T31] #0: ffff88804ca5b140 ((wq_completion)krds_cp_wq#19/5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2484.508159][T24895] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2484.523515][T24895] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2484.525583][T24895] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2485.029253][T30449] Bluetooth: hci1: command 0x0406 tx timeout [ 2486.239652][ T31] #1: ffffc90004897c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2486.239744][ T31] #2: ffff888034c7ea80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 2486.239815][ T31] locks held by kworker/0:15/3075: 3, on CPU#0: [ 2486.239833][ T31] #0: ffff88801c06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2486.240139][ T31] #1: ffffc90006d07c40 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2486.240207][ T31] #2: ffffffff915ba820 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x31/0x120 [ 2486.240267][ T31] locks held by kworker/0:16/3076: 2, last CPU#0: [ 2486.240284][ T31] #0: ffff88801c069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2486.240349][ T31] #1: ffffc90006d17c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2486.240422][ T31] locks held by kworker/0:19/3079: 3, on CPU#0: [ 2486.240439][ T31] #0: ffff88801c06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2486.240502][ T31] #1: ffffc90006d47c40 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2486.240566][ T31] #2: ffffffff915ba820 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x31/0x120 [ 2486.240627][ T31] locks held by kworker/1:0/3086: 3, on CPU#1: [ 2486.240644][ T31] #0: ffff88801c06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2486.240708][ T31] #1: ffffc90006c47c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2486.240772][ T31] #2: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 2486.241159][ T31] locks held by kworker/1:9/3097: 3, on CPU#1: [ 2486.241178][ T31] #0: ffff88801c06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2486.241242][ T31] #1: ffffc90006dffc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2486.241305][ T31] #2: ffffffff8fd62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 2486.241383][ T31] locks held by kworker/u8:7/7300: 4, last CPU#0: [ 2486.241401][ T31] #0: ffff8880272dd940 ((wq_completion)krds_cp_wq#16/0#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2486.241472][ T31] #1: ffffc90004af7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2486.241537][ T31] #2: ffff888034c7c080 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 2486.241603][ T31] #3: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: __inet_dev_addr_type+0x146/0x4f0 [ 2486.241676][ T31] locks held by kworker/u8:9/7301: 4, last CPU#1: [ 2486.241692][ T31] #0: ffff888021f35940 ((wq_completion)krds_cp_wq#19/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2486.241756][ T31] #1: ffffc90004ae7c40 ( [ 2486.818439][T30449] Bluetooth: hci6: command tx timeout [ 2486.836645][ T31] (work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2486.836714][ T31] #2: ffff888034c7f980 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 2486.836798][ T31] #3: ffff8880b853bb20 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 2486.836877][ T31] locks held by kworker/u8:11/7303: 3, last CPU#1: [ 2486.837171][ T31] #0: ffff888054a19140 ((wq_completion)krds_cp_wq#16/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2486.837245][ T31] #1: ffffc90004a27c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2486.837318][ T31] #2: ffff888034c7d880 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 2486.837401][ T31] locks held by kworker/u8:14/7305: 4, last CPU#0: [ 2486.837420][ T31] #0: ffff88804ca5a140 ((wq_completion)krds_cp_wq#19/4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2486.837492][ ** replaying previous printk message ** [ 2486.837492][ T31] #1: ffffc90004987c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2486.837564][ T31] #2: ffff888034c7ed80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 2486.837637][ T31] #3: ffff88805b5a8260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 2486.837796][ T31] locks held by kworker/u8:17/7306: 3, last CPU#1: [ 2486.837816][ T31] #0: ffff888034096140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2486.837887][ T31] #1: ffffc9000466fc40 ((work_completion)(&(&bat_priv->bla.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2486.838232][ T31] #2: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: batadv_bla_periodic_work+0x336/0xb40 [ 2486.838369][ T31] locks held by kworker/u8:22/7310: 3, last CPU#0: [ 2486.838396][ T31] #0: ffff888021f32940 ((wq_completion)krds_cp_wq#19/1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2486.838468][ T31] #1: ffffc900040c7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2486.838540][ T31] #2: ffff888034c7f680 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 2487.128352][ T31] locks held by kworker/u8:23/7311: 5, on CPU#0: [ 2487.128379][ T31] #0: ffff88801d2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2487.128454][ T31] #1: ffffc90004077c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2487.128517][ T31] #2: ffffffff91247348 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 2487.128586][ T31] #3: ffffffff915ba820 (ovs_mutex){+.+.}-{4:4}, at: ovs_exit_net+0xe4/0x7a0 [ 2487.128644][ T31] #4: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: internal_dev_destroy+0xf0/0x170 [ 2487.128793][ T31] locks held by kworker/u8:24/7312: 4, last CPU#0: [ 2487.128811][ T31] #0: ffff88807c24e140 ((wq_completion)krds_cp_wq#19/7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2487.128873][ T31] #1: ffffc90004057c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2487.129172][ T31] #2: ffff888034c7e480 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 2487.129245][ T31] #3: ffff888033218fe0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 2487.129320][ T31] locks held by kworker/0:5/14470: 3, on CPU#0: [ 2487.129337][ T31] #0: ffff88801c06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2487.129397][ T31] #1: ffffc90006e1fc40 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2487.129460][ T31] #2: ffffffff915ba820 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x31/0x120 [ 2487.129526][ T31] locks held by syz-executor/25309: 1, on CPU#0: [ 2487.129542][ T31] #0: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 2487.129605][ T31] locks held by syz-executor/26807: 1, on CPU#0: [ 2487.129622][ T31] #0: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 2487.129682][ T31] locks held by kworker/u8:2/27024: 3, on CPU#1: [ 2487.129698][ T31] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2487.129759][ T31] #1: ffffc90003ec7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2487.129819][ T31] #2: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 2487.129879][ T31] locks held by kworker/u8:3/27025: 3, last CPU#1: [ 2487.130155][ T31] #0: ffff88804ca5f140 ((wq_completion)krds_cp_wq#19/3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2487.130220][ T31] #1: ffffc900052dfc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2487.130285][ T31] #2: ffff888034c7f080 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 2487.130358][ T31] locks held by kworker/u8:5/27027: 3, last CPU#0: [ 2487.130375][ T31] #0: ffff88802ad4f140 ((wq_completion)krds_cp_wq#19/6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2487.130439][ T31] #1: ffffc90004bd7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2487.130502][ T31] #2: ffff888034c7e780 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 2487.130567][ T31] locks held by kworker/u8:6/27028: 3, last CPU#1: [ 2487.130584][ T31] #0: ffff88804ca5d140 ((wq_completion)krds_cp_wq#19/2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2487.130646][ T31] #1: ffffc90004b67c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2487.130709][ T31] #2: ffff888034c7f380 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 2487.906487][ T31] locks held by syz-executor/30380: 1, last CPU#0: [ 2487.906515][ T31] #0: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: is_module_text_address+0x1d/0x1e0 [ 2487.906591][ T31] locks held by syz-executor/30383: 1, last CPU#1: [ 2487.906609][ T31] #0: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: is_bpf_text_address+0x26/0x2b0 [ 2487.906675][ T31] locks held by syz-executor/30386: 1, on CPU#1: [ 2487.906692][ T31] #0: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 2487.906769][ T31] locks held by syz-executor/30403: 1, on CPU#0: [ 2487.906786][ T31] #0: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 2487.906852][ T31] locks held by syz-executor/30409: 1, on CPU#0: [ 2487.906870][ T31] #0: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 2487.906934][ T31] locks held by syz-executor/30415: 1, on CPU#1: [ 2487.906951][ T31] #0: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 2487.907017][ T31] locks held by syz-executor/30421: 1, on CPU#0: [ 2487.907034][ T31] #0: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 2487.907340][ T31] locks held by syz-executor/30428: 1, on CPU#1: [ 2487.907358][ T31] #0: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 2487.907423][ T31] locks held by syz-executor/30437: 1, on CPU#0: [ 2487.907440][ T31] #0: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 2487.907507][ T31] locks held by syz-executor/30445: 1, on CPU#0: [ 2487.907524][ T31] #0: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 2487.907590][ T31] locks held by syz-executor/30452: 1, on CPU#1: [ 2487.907607][ T31] #0: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 2487.907672][ T31] locks held by kworker/u9:5/30454: 7, on CPU#1: [ 2487.907690][ T31] #0: ffff88802acd0140 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2487.907762][ T31] #1: ffffc90005cafc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2487.907826][ T31] #2: ffff8880658b8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 2487.907970][ T31] #3: ffff8880658b80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 2487.908035][ T31] #4: ffffffff913d0200 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 2487.908390][ T31] #5: ffff88802acd0af8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x550 [ 2487.908486][ T31] #6: ffffffff8fd62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 2487.908566][ T31] locks held by syz-executor/30455: 1, on CPU#1: [ 2487.908583][ T31] #0: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 2487.908647][ T31] locks held by syz-executor/30463: 1, on CPU#0: [ 2487.908664][ T31] #0: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 2487.908727][ T31] locks held by kworker/u8:13/30465: 2, on CPU#1: [ 2487.908743][ T31] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2487.908813][ T31] #1: ffffc90003b97c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2487.908876][ T31] locks held by syz-executor/30472: 2, last CPU#1: [ 2487.908892][ T31] #0: ffff888036f0b440 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 2487.908951][ T31] #1: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 2487.909018][ T31] locks held by syz-executor/30478: 2, last CPU#1: [ 2487.909264][ T31] #0: ffff88801c113440 (&mm->mmap_lock){++++}-{4:4}, at: do_mprotect_pkey+0x25c/0xd10 [ 2487.909324][ T31] #1: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 2487.909388][ T31] locks held by modprobe/30480: 2, last CPU#0: [ 2487.909404][ T31] #0: ffff88807e4d5900 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 2487.909463][ T31] #1: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 2488.866642][T24895] Bluetooth: hci6: command tx timeout [ 2489.056363][ T31] [ 2489.056403][ T31] ============================================= [ 2489.056403][ T31] [ 2489.056462][ T31] NMI backtrace for cpu 1 [ 2489.056520][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2489.056592][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2489.056633][ T31] Call Trace: [ 2489.056656][ T31] [ 2489.056666][ T31] dump_stack_lvl+0xe8/0x150 [ 2489.056763][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 2489.056827][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2489.056923][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 2489.057000][ T31] sys_info+0x135/0x170 [ 2489.057053][ T31] watchdog+0xfd7/0x1030 [ 2489.057136][ T31] ? watchdog+0x1c7/0x1030 [ 2489.057229][ T31] kthread+0x38b/0x480 [ 2489.057283][ T31] ? __pfx_watchdog+0x10/0x10 [ 2489.057337][ T31] ? __pfx_kthread+0x10/0x10 [ 2489.057410][ T31] ret_from_fork+0x514/0xb70 [ 2489.057516][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2489.057603][ T31] ? __switch_to+0xc89/0x1420 [ 2489.057678][ T31] ? __pfx_kthread+0x10/0x10 [ 2489.057743][ T31] ret_from_fork_asm+0x1a/0x30 [ 2489.057887][ T31] [ 2489.058369][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2489.058405][ C0] NMI backtrace for cpu 0 [ 2489.058420][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 2489.058441][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2489.058453][ C0] RIP: 0010:debug_object_activate+0x0/0x420 [ 2489.058576][ C0] Code: bd 9d 8d 0c 00 74 06 e9 8e de fe 06 cc ba 01 00 00 00 e9 13 fc ff ff 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 48 49 89 f6 48 [ 2489.058593][ C0] RSP: 0018:ffffc90000007bf8 EFLAGS: 00000002 [ 2489.058610][ C0] RAX: ffffffff81b4b723 RBX: ffff8880b8428440 RCX: ffff88801f2a0000 [ 2489.058625][ C0] RDX: 0000000001000101 RSI: ffffffff8c0f9ce0 RDI: ffff88807a760300 [ 2489.058639][ C0] RBP: 0000000000000000 R08: 0000000001000101 R09: 0000000000000004 [ 2489.058652][ C0] R10: dffffc0000000000 R11: fffff52000000f78 R12: 0000000000000001 [ 2489.058673][ C0] R13: dffffc0000000000 R14: ffff88807a760300 R15: 0000000000000000 [ 2489.058687][ C0] FS: 0000000000000000(0000) GS:ffff888123ad0000(0000) knlGS:0000000000000000 [ 2489.058704][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2489.058717][ C0] CR2: 000055fb19dac570 CR3: 000000000fb48000 CR4: 00000000003526f0 [ 2489.058734][ C0] Call Trace: [ 2489.058742][ C0] [ 2489.058749][ C0] enqueue_hrtimer+0xa9/0x2c0 [ 2489.058771][ C0] __hrtimer_run_queues+0x4ce/0xa10 [ 2489.058810][ C0] hrtimer_interrupt+0x4cd/0xaa0 [ 2489.058855][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 2489.058879][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 2489.058905][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2489.058926][ C0] RIP: 0010:handle_softirqs+0x15c/0x860 [ 2489.058952][ C0] Code: 6c 24 1c 44 0f b7 fb 48 c7 c7 c0 42 0b 8c e8 4b 21 5f 0a 65 66 c7 05 4d dd 0b 13 00 00 e8 2c 4b 47 00 fb 49 c7 c6 c0 a0 a0 8f ff ff ff ff 41 0f bc c7 41 89 c4 41 ff c4 0f 84 17 04 00 00 48 [ 2489.058969][ C0] RSP: 0018:ffffc90000007f30 EFLAGS: 00000202 [ 2489.058984][ C0] RAX: 00000000001a20f4 RBX: ffff88801f2a0100 RCX: 8000000000000101 [ 2489.058998][ C0] RDX: 0000000000000000 RSI: ffffffff8e459e4b RDI: ffffffff8c6dd880 [ 2489.059012][ C0] RBP: 000000000000000a R08: ffffffff9179b87f R09: 1ffffffff22f370f [ 2489.059025][ C0] R10: dffffc0000000000 R11: fffffbfff22f3710 R12: 0000000000000000 [ 2489.059038][ C0] R13: 0000000000000000 R14: ffffffff8fa0a0c0 R15: 0000000000000100 [ 2489.059068][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 2489.059104][ C0] __irq_exit_rcu+0xcb/0x220 [ 2489.059134][ C0] irq_exit_rcu+0x9/0x30 [ 2489.059162][ C0] sysvec_call_function_single+0xa3/0xc0 [ 2489.059193][ C0] [ 2489.059201][ C0] [ 2489.059211][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 2489.059236][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 2489.059266][ C0] Code: f7 e8 4d 3f b9 f5 f7 c3 00 02 00 00 74 05 e8 40 8e e5 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 84 3c aa f5 65 48 8b 05 0c 20 aa 08 48 85 c0 74 18 5b 41 5e e9 [ 2489.059282][ C0] RSP: 0018:ffffc90000157ca8 EFLAGS: 00000206 [ 2489.059298][ C0] RAX: 0000000000000002 RBX: 0000000000000206 RCX: 8000000000000001 [ 2489.059310][ C0] RDX: 0000000000000000 RSI: ffffffff8e459e4b RDI: 0000000000000001 [ 2489.059323][ C0] RBP: ffffc90000157e18 R08: ffffffff9179b87f R09: 1ffffffff22f370f [ 2489.059338][ C0] R10: dffffc0000000000 R11: fffffbfff22f3710 R12: 0000000000000002 [ 2489.059351][ C0] R13: ffff88801f2a0000 R14: ffffffff9bd3ae20 R15: dffffc0000000000 [ 2489.059377][ C0] nbcon_kthread_func+0x6c4/0x880 [ 2489.059402][ C0] ? nbcon_kthread_func+0x163/0x880 [ 2489.059422][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 2489.059447][ C0] ? __kthread_parkme+0x71/0x1f0 [ 2489.059475][ C0] ? __kthread_parkme+0x199/0x1f0 [ 2489.059505][ C0] kthread+0x38b/0x480 [ 2489.059522][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 2489.059542][ C0] ? __pfx_kthread+0x10/0x10 [ 2489.059560][ C0] ret_from_fork+0x514/0xb70 [ 2489.059591][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2489.059619][ C0] ? __switch_to+0xc89/0x1420 [ 2489.059646][ C0] ? __pfx_kthread+0x10/0x10 [ 2489.059673][ C0] ret_from_fork_asm+0x1a/0x30 [ 2489.059710][ C0] [ 2489.060590][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2490.446927][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2490.456085][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2490.466193][ T31] Call Trace: [ 2490.469509][ T31] [ 2490.472474][ T31] vpanic+0x56d/0xa60 [ 2490.476508][ T31] ? __pfx_vpanic+0x10/0x10 [ 2490.481053][ T31] ? console_srcu_read_unlock+0x3a/0x60 [ 2490.486650][ T31] panic+0xc5/0xd0 [ 2490.490417][ T31] ? __pfx_panic+0x10/0x10 [ 2490.494906][ T31] ? wq_watchdog_touch+0xf9/0x160 [ 2490.499983][ T31] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 2490.506184][ T31] watchdog+0x1030/0x1030 [ 2490.510572][ T31] ? watchdog+0x1c7/0x1030 [ 2490.515046][ T31] kthread+0x38b/0x480 [ 2490.519160][ T31] ? __pfx_watchdog+0x10/0x10 [ 2490.523863][ T31] ? __pfx_kthread+0x10/0x10 [ 2490.528492][ T31] ret_from_fork+0x514/0xb70 [ 2490.533139][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2490.538293][ T31] ? __switch_to+0xc89/0x1420 [ 2490.543026][ T31] ? __pfx_kthread+0x10/0x10 [ 2490.547648][ T31] ret_from_fork_asm+0x1a/0x30 [ 2490.552490][ T31] [ 2490.556164][ T31] Kernel Offset: disabled [ 2490.560502][ T31] Rebooting in 86400 seconds..