last executing test programs: 6.166499182s ago: executing program 3 (id=3927): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) unshare(0x20000400) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup=r1, 0x26, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x1b0, 0x43, 0xa0, 0x1b0, 0x98, 0x2c0, 0x178, 0x178, 0x2c0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x190, 0x1b0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0xfffffffd, 0x8, 0x1, 'syz0\x00'}}, @common=@unspec=@cgroup0={{0x28}, {0xa}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x9}]}}, @common=@icmp={{0x28}, {0xb, "17e4"}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b8) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e65746465"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000955a20fc81f0077ddce3709cc3afce2da908197712e2b1f4b216c4a13576b20a56083d25b0206b73a98e9995b11dafa8ab50c2af55d4ded17386c908ff0f572f09e7b8759cdea7b0f1834ee25a449fcc4eae8f5174baa5d51771cb083bb2cc4dc3ad74cf25f34c0d0662f60d7fbf79d0dee1c6807fe18585d006eac8122a7fa54a9bccd972c6cadec7849e28acad01e56a1d7630f8"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000955a20fc81f0077ddce3709cc3afce2da908197712e2b1f4b216c4a13576b20a56083d25b0206b73a98e9995b11dafa8ab50c2af55d4ded17386c908ff0f572f09e7b8759cdea7b0f1834ee25a449fcc4eae8f5174baa5d51771cb083bb2cc4dc3ad74cf25f34c0d0662f60d7fbf79d0dee1c6807fe18585d006eac8122a7fa54a9bccd972c6cadec7849e28acad01e56a1d7630f8"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b00)={r7, 0xffffffffffffffff, 0x2, 0x0, @void}, 0x10) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b00)={r7, 0xffffffffffffffff, 0x2, 0x0, @void}, 0x10) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100", @ANYRESOCT=r7, @ANYRES32=r3, @ANYRES8=r2, @ANYRES64=r6, @ANYBLOB="ce55689ddc8e7de23d21fdb066c70fb85dc5d3a48cf3df03e87f388f7443013cee7474103cbe4534e671390d2b5fa50343396961e045d38296ee3e6714add94fa39c7c4e0a1f842645971e4341aad92c16e8140fb0dc"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) (async) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100", @ANYRESOCT=r7, @ANYRES32=r3, @ANYRES8=r2, @ANYRES64=r6, @ANYBLOB="ce55689ddc8e7de23d21fdb066c70fb85dc5d3a48cf3df03e87f388f7443013cee7474103cbe4534e671390d2b5fa50343396961e045d38296ee3e6714add94fa39c7c4e0a1f842645971e4341aad92c16e8140fb0dc"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) socket$inet(0x2, 0x3, 0x2) (async) r11 = socket$inet(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fcffffff00000000000040001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008085000000730000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fcffffff00000000000040001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008085000000730000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r12, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r12, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$inet_msfilter(r11, 0x0, 0x29, &(0x7f00000000c0)=ANY=[], 0x1c) (async) setsockopt$inet_msfilter(r11, 0x0, 0x29, &(0x7f00000000c0)=ANY=[], 0x1c) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080000000000000096000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r13, r13}, 0x4) 5.777106204s ago: executing program 3 (id=3931): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e64000000080002"], 0x110}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r3, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) (fail_nth: 2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 5.768800371s ago: executing program 4 (id=3932): getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000780)={{0xffffffffffffffff, &(0x7f0000000140)='#[(@\\\x00', 0x8001, &(0x7f0000000180)={@align=0xa, {0x7, 0x3, 0x3, 0x8000000000000000}}, 0x0, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x5}, 0x5, &(0x7f00000006c0)=[{0x3, 0x99200000, &(0x7f0000000240)='.,}\\&,\x00', &(0x7f0000000280)="eb31884f4f8e87cc6397b2db5dde8f94d9367189afc0ef9784997326661bec4476b353001b1cd0c7bc19ce39e683527532248c3163c8870e3c1566653d7992013c9b7d0354d654104976e88b067239c46c4b2768e525fa794a47b77b", 0x5c, 0x8}, {0x2, 0x7, &(0x7f0000000300)='!]\x00', &(0x7f0000000340)="facbb66c103966609e907664aed892136b28f4e4789bae6cf498340225c20d7ad1afbe84cd1309eb98c7fcd0bac651be6d8860df98d4fc42d0cd890b98031e1cff4bfdb2598bb013a824c79ac7062ebe8a40b1b40d122f5574657eac408696b2cb29298760e43b5fc0812e9a0a63524652", 0x71, 0x8}, {0x3, 0x21f, &(0x7f00000003c0)='&&\x00', &(0x7f0000000400)="786d44ece7a5b570d88763c5cf6020c3117ca775ee894289183c529af6f612f0", 0x20, 0x12}, {0x2, 0x9, &(0x7f0000000440)='%-\x00', &(0x7f0000000480)="11bd4e5e7f67aa9940285d4dae45d04d82b15ba1d9f4d54637a125dd606d56998f6aaaa241e6db1f60c331d80a14e274fca6b7d9b80c4823b9dfe6c3b30fc7501d382520e6036cad4bb35af60b2427333b1489a10b08496bdf64c7cb73f29d5d3f150b1706f785c39e748ac183f7d3bc86cdd100d254b533debfba4477fb1002f2b1b80d663d67fe3925ce321803bdc162b511ea1d77dfac28b1b50378bef6250a86898c287b985be987e9634e3bf0f628312562e8b7df2de3900ee8363c3369d3e44c4de87d244fa2c3e8828c7dd87dce24bc6481ca0900ae8662594236b7107a03", 0xe2, 0xa}, {0x1, 0x7, &(0x7f0000000580)='{$#\x00', &(0x7f00000005c0)="05643d12d77ba7d4b04e1861d6efaf42db374ea75d75472f7a9000524c0a3001d6d100ea29a6586df913fe036df4478c0b191a6a91d96a7492872a4cc44e8b95c8fcc2d4a97fc961f2f2c66a162841ebdc4e9ceda8f53f8214b0f1d3890d61c3b13e695ff61b51c0536b6b3a05375ee885a7fa30117f41cd7a1a4b7142443ad7d1fbbb2d9c200703fd09488857ebc69cd664ac83c3d34ea06499c35ea87cb2955376213adf02ef7a5a94a54e377be4b8338458384bad49ab65d520b15f1ff5b648e69eadc3c84fb3292561dc7141d53788f0e3974b9ad7", 0xd7, 0xc0920f005e1f7e05}]}) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r2, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0xc008000) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x60, r2, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_FAMILY={0x5, 0xd, 0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FAMILY={0x5, 0xd, 0x1d}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0xd70ded191de57c87) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000a80)={0x0, 0x4, 0x7, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000e80)={r4, "e7a794bd77cc74f5e100cde5077386ce"}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r1) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000001fc0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x44, r5, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x48}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="df39a5b39bf5"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="103f61b2ca8e"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4810) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000002480)={&(0x7f0000002000)=@hci={0x1f, 0x4, 0x7}, 0x80, &(0x7f0000002140)=[{&(0x7f0000002080)="3271ea2d87c5b3944a459219dce494612b133c0e4894e9c1", 0x18}, {&(0x7f00000020c0)="65519fbe5ecbc86faede719feb016b61d9e8e30bac7640468391097bf937bb6dc1c39e1e1a2d95c4c11d2353fdaa992d9100c29d3b1db5f856ce646f3b9572333eee6b8747071d6805a3e7f1f8e0e6e220d94af7f2325d10a95e91", 0x5b}], 0x2, &(0x7f0000002180)=[{0xa0, 0x102, 0x8, "89c979268e8e173178a4221421c3f13f42d59682fe0150bd72900f69c6c47ec57da66bc60619aa7104d632cd8523a769dcf1118d0e25f12c1ea37661c00087860308c3139b903fef904150828cadaaeb30d7df6b15486f0d3759c6f6047e74ff24bca841f8eea5549214238a5a28ea8db7ec5e818ac64ab74df9aeedde202653df082703be0827a303a5"}, {0x18, 0x3a, 0x401, "48e5ab7237c7"}, {0x50, 0x118, 0x5, "831603c1228d118e1505869b7d143097f4c0e7fea11989354bb48068d6ca5edd04b705e0ff82f417b2284bf29dbca7bc3a68b061b1b0481836e2"}, {0x28, 0x88, 0x5, "c88f5586a37b99d714cf11e9778a8b53b4c67b0c"}, {0xd0, 0x10e, 0x1, "db20174a5e26c3d95f3b628afb5c769b42818ccaa9df3abdb337b7964fe308c34440a4912ef67e7564c239768c37d964c645817e8ce7093dab5f6b5110365283d95b004c0cb23fb62878969bbfbfbebdcdc5b686c4cfd94aaa96a5dcc10ae111a562795da6a74ee34aab7b648050a3c862d25dc38339618f4152e23e1746dbfa2be813bf2d40d3f1e208670b514e3b718c68ab15b8ab16e81edc021f550bca9290f4cd697c7d6615403c1206b9abb639d6f2a900948029f01b08fdaf"}, {0xc8, 0x10f, 0x1, "6601dfb011a63107ed4e534494f512db5c54442acf69fd6d99b95bdd14d2275b1df651590a76ffd07d4a50736e5f613dbc539c601b9c53f765f59280793f3277f4ea85f6828f5f359589079b051ec7e85fd7918c17a7f32bc21747b2b0c8ec984b5f84194cb43256731af93e113c74b1eaf7b29c3c960fb8f43af1575cd0e6129c3cc880a29e2429d7f13762efd9d849b50f1b204019a4dd11c853a2b5cb3f21256dcb8ab671817e2bc1a89e95a0e2e72aa33e81"}], 0x2c8}, 0x0) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f00000024c0)={{0xa, 0x4e20, 0x10001, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, {0xa, 0x4e23, 0x80000001, @empty, 0xa}, 0xffffffffffffffff, {[0x100, 0x40, 0x1ff, 0x1, 0x6cb, 0x0, 0x401, 0x6]}}, 0x5c) r7 = syz_genetlink_get_family_id$team(&(0x7f0000002580), r6) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000025c0)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002900)={r1, 0xe0, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000002640)=[0x0, 0x0], &(0x7f0000002680)=[0x0], 0x0, 0xbc, &(0x7f00000026c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000002740), &(0x7f0000002780), 0x8, 0x95, 0x8, 0x8, &(0x7f00000027c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000029c0)={'ip6tnl0\x00', &(0x7f0000002940)={'syztnl1\x00', r0, 0x2f, 0x5, 0x0, 0xfffffff3, 0x30, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x67, 0x1, 0x9, 0x101}}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000002f00)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002a00)={0x4c0, r7, 0x4, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r0}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xcb}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e2}}}]}}, {{0x8, 0x1, r0}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x452cfd68}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1b463e63}}}]}}, {{0x8, 0x1, r0}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r0}, {0x4}}, {{0x8, 0x1, r9}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x18418000}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x4c0}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000002f80)=0x0) sendmsg$nl_generic(r6, &(0x7f00000041c0)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x88}, 0xc, &(0x7f0000004180)={&(0x7f0000002fc0)={0x1190, 0x3b, 0x10, 0x70bd27, 0x25dfdbfd, {0x18}, [@typed={0x8, 0xf2, 0x0, 0x0, @str=')@,\x00'}, @generic="2c0ab3c0c1f2fd6fb0414e6907cad188287793add0165ac3badba922e522a824ac4868bf9faacc784a34ff795b521ea503d9ca766a3ab21c748eedd4c67661", @typed={0x14, 0x70, 0x0, 0x0, @ipv6=@private2}, @typed={0x8, 0xc7, 0x0, 0x0, @fd=r3}, @nested={0xc, 0x12d, 0x0, 0x1, [@typed={0x8, 0x8d, 0x0, 0x0, @pid=r11}]}, @nested={0x8, 0x14c, 0x0, 0x1, [@typed={0x4, 0x47}]}, @generic="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", @typed={0x4, 0x2f}, @nested={0xfe, 0x2b, 0x0, 0x1, [@generic="8589b41160b387c30037936da66a123056c64f2590109689543899879602d660f7e51c5985737bbf13d7ae56ec84d0b9f3fcac75acdcc72d6ec29f4633215e00131a665375d815218a3ab83428c9d1df0ed06500c56af3aa577e0f2ee672d9a0fa8da6907cad0c1467d8d2bb00dbf7c8d63e1483801c522a2b1e5f875badd6b1a90df67159313440b43931c3c5b5198295edafc512905bf8918f16dac8d0663533e99ee4df418baf9fdcabc67489623df802458ffb116857d032d59b3bda0cd0624286d5ba735e118825a2fbd5eca239bb75a3b5871ad4f61ba8de1b6d8784fb7056490b535e", @nested={0x4, 0x13f}, @nested={0x4, 0x13a}, @nested={0x4, 0x2e}, @typed={0x8, 0x38, 0x0, 0x0, @u32=0x5}]}]}, 0x1190}, 0x1, 0x0, 0x0, 0x4010}, 0x40081) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000004240)=@req={0x28, &(0x7f0000004200)={'veth0_to_batadv\x00', @ifru_flags=0x800}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000004280)={'lo\x00', 0x200}) socket$alg(0x26, 0x5, 0x0) connect$inet6(r1, &(0x7f00000042c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}, 0x1c) accept$unix(r1, &(0x7f0000004300)=@abs, &(0x7f0000004380)=0x6e) socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000043c0)={@empty, 0x9, 0x2, 0x1, 0x4, 0x5, 0x5}, 0x20) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000004400)={0x40, {{0xa, 0x4e22, 0x7, @private2, 0x200}}}, 0x88) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000044c0)={{0x3a, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x4, 'nq\x00', 0x1, 0x8, 0x16}, {@remote, 0x4e21, 0x1, 0x256, 0x81, 0x1}}, 0x44) socket$alg(0x26, 0x5, 0x0) 5.508753934s ago: executing program 3 (id=3933): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000400006608000000000000180000000000000000000000000001009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000002c0)=""/232, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff9d}, 0x78) 5.248017376s ago: executing program 4 (id=3935): r0 = socket(0x40000000015, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000001240)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r3, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60f900f500140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="290000000000000046f9d0dd6438ff0b187333f8b57550e47449049870b30d168b5326492e"], 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0x1c, 0x18, 0x9, 0x70bd2d, 0xfffffffe, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4, 0x2000}}, 0x1c}}, 0x4800) writev(r5, &(0x7f0000002600)=[{&(0x7f0000000040)="0c210fb85a17eddec4703077f6bf5835174c2a8639d04856f2c588bb009ddf3a20c27d951e6e1c65a256d596f9041acc7d52f92addea9019cd2adbc40d94f8e5a0843ee8473eeb83c819b73ec2efef5a4ec7099c6eaf05cf3f48a5b518b2d16c51dfd30047e073e299b896484ec79641fb0c38e317a1a97fe965feef4b1485f9e0bf073b49098d125ed4b99e3138b015c60a6a49edf1f590ef5d445e7f2ae1d0d000004cb263b38149aa7550ccf7eb439cbb129c82bc5cb2ef26dd1c0052c5fd0cc74461aba08a1f3895c51802f3c4c5c7691777bf0a84c6", 0xd8}, {&(0x7f0000000140)="ee25f1897b1c18fed7e4ef4f026b7c872d0c591f170f4b4246257ae96734d45321c5780c6a44878c11dab712867b978ae848a8f9e4eaed93bb46eba103510a79d5de1c5dd6d788cd2e02da813ac840404651530892934cf7da5510f70548b26abd2cd93be315516d2f5a79117a36cb806eb0c24acebe4ba1ff9599b07ef2ffebd7b9334b2266a0145c597c5eb810fd8c8d5ce341ca5ee72a721f58b4dec7531f4f5ed120cc121bdbc6a3d62df08bac9f041f9c9ee24ffb266afca1fa3a3fa2531a6b476a619824b0be0606574121b1eb01116bf29c0726d748da2e9c15d99546416269cd330a91f2a6e9011c8b16c60ccd21df3fb7c9827bb242", 0xfa}, {&(0x7f0000000240)="66bb2cc131911811db94916caa09a2d1c947c25456d9db25f4167028deec0e4d69339f4ad1e02bed71faa66a5a6b5a307daf5a155410236329a67cb508b2da5c60d33687989b50385cd22d4ee5", 0x4d}, {&(0x7f0000000440)="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", 0xde1}], 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="fcffffffffffffff06000100000732756478c84a797a3200000000"], 0x30}}, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="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", 0x142}, {&(0x7f0000000d00)="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", 0x33f}], 0x2}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, 0x0}, 0x4) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) listen(r0, 0x1) 5.189016304s ago: executing program 4 (id=3936): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6a}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xbfff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x80) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @mcast2}]}}}]}, 0x54}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r3}, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x8031, 0xffffffffffffffff, 0x67476000) write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.139843355s ago: executing program 3 (id=3937): syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="633cd5f8000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff85000000190000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x17}}) close(r2) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x0, 0x98, 0x98, 0xffffffff, 0x1d0, 0x98, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) 4.644296967s ago: executing program 1 (id=3941): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmsg(r0, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x3c65e5a12d2f864f) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x6e21, 0x7, @mcast2, 0x3}, 0x1c) syz_emit_ethernet(0xffffffffffffffac, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd605ad3af00080000fe8000000000000000000000000000aaff020000000000000000000000000001730001010000009b045c66"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="2503fe0000000000000016000000140001808c9b0cf31ef3af153284cc00040e0001"], 0x28}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup=r4, r4, 0x2b, 0x2004, 0x0, @value=r4}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES8=r0], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000203030000008004000036350c8800100800010001000000"], 0x1c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x3, 0x3, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20008015}, 0x4040) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003, 0x0, 0x0, 0x41100}, 0x94) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r9, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) recvmmsg(r9, &(0x7f0000004440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/83, 0x53}, 0x2}], 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x44}}, 0x40) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0x6bb}], 0x1, 0x40000103, 0x0) 4.525684356s ago: executing program 4 (id=3943): socket$inet6_udp(0xa, 0x2, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) (async) r1 = openat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) 4.362576439s ago: executing program 4 (id=3945): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 33) 4.00415171s ago: executing program 4 (id=3949): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xf8, 0x0, 0xf8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'bond0\x00', {}, {}, 0x11, 0x0, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xe}}, @common=@unspec=@connmark={{0x30}, {0x1, 0x2, 0xfe}}]}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @rand_addr=0x64010101, 0x0, 0x0, 'dvmrp0\x00', 'dvmrp1\x00', {0xb25f05e6834eb86f}, {0xff}, 0x1d, 0x1, 0x49}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@addrtype={{0x30}, {0x60b, 0xe03, 0x1, 0x20000000}}, @common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x2, 0x0, 0x5], 0x0, 0x2}, {0x1, [0x3, 0x8, 0x5, 0x6, 0x2], 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x4008010) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r7, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xd}, @handle=@pci={{0x8}, {0x11}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xeb49c09cdb29a3a2}, 0x8000) sendmmsg$inet6(r1, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x800) 3.613403251s ago: executing program 1 (id=3951): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x11, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x603, 0x0, 0x0, 0x0, 0x1c0}, [@btf_id={0x18, 0xd, 0x3, 0x0, 0x1}]}, 0x0, 0x9, 0x1000, &(0x7f0000000640)=""/4096, 0x40f00, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001680), 0x0, 0x10, 0x1}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x36, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r3}, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b702000001040000bfa30000000000000703000000feffff7a0af0fff8bffffd79"], 0x0}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000240035b900000000000000000700000006000480ffef00"], 0x24}}, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r4, 0x0, 0xffffffff000) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/238, 0xee}], 0x1}, 0xffffffff}], 0x1, 0x10002, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x2) 2.680370442s ago: executing program 0 (id=3955): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2c, 0x25, 0x301, 0x670bd24, 0x25dfdbfc, {0x15}, [@typed={0x15, 0x15e, 0x0, 0x0, @binary="378d39000000dc0337cae8b37b6af0b7fc"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8de00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000340)=0x10) sendto$phonet(r4, &(0x7f0000000bc0)="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", 0xfe, 0x0, &(0x7f0000000cc0)={0x23, 0x2c, 0x9, 0x4}, 0x10) recvmsg$can_bcm(r3, &(0x7f0000000b80)={&(0x7f0000000000)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f00000000c0)=""/218, 0xda}, {&(0x7f0000000280)=""/19, 0x13}, {&(0x7f0000000440)=""/254, 0xfe}, {&(0x7f0000000540)=""/176, 0xb0}, {&(0x7f0000000600)=""/38, 0x26}, {&(0x7f0000000640)=""/173, 0xad}, {&(0x7f0000000700)=""/134, 0x86}, {&(0x7f0000000940)=""/214, 0xd6}], 0x9, &(0x7f0000000b00)=""/119, 0x77}, 0x40002243) 2.496494448s ago: executing program 1 (id=3956): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001c80)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000007df272ede11a34528871e994785fc775", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0xfff, 0x2, 0x8, 0x3, 0x1, 0x6, 0x7ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback={0x2}}, 0x1c) listen(r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e002300d733789a279c0000ac000002221d2d00", @ANYRES32=r0, @ANYBLOB="3d1800"/20, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="0300000003000000020000000900"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x300}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x17}}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0x1011, &(0x7f0000000840)=""/4113, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x1, {0x2, 0x0, 0x2}, 0x2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r7, 0xf501, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}, 0x1, 0xba01}, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x5, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r8, 0x0, 0x20) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) read$alg(r8, &(0x7f0000000300)=""/74, 0x4a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$alg(r8, &(0x7f0000001a80)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000440)="7914ca86ac613eb90a2234ca61f60ca925720bc4ee7b04440209652966561466ea1ce9ce571c08650f6202c6cd068740b7a4d6d4fbe4ec60f235317ca96d50062a0c6078323cbd45dddeae820ec77231cb6ad349e6166bb5803c06a97d519bfc69aae44410afb5d8e68f06506c9fa23d9a4fb52f8dbf6b83fd2d1738c3c5286249df9b7b716ad0c1562efc351c846b00153e478951c26eacf5708b9d9d00bbd2b938b90fbad1cd6f63ea1d567e98645e9d88ac221fb6c4ab9d8ec510e47594a321ca6770d24c6801e9ac201be23dd93e1cdfc6", 0xd3}, {&(0x7f00000002c0)="06b902cf49f587414c8583d6532fe37f8318e86b30c7a10523fbe1e2bf51dc0c3c6d38976ceffccd27ab952ef164848b1224f9491d700d", 0x37}, {&(0x7f00000005c0)="d56707ca935a811af3f39397d0d83bf7fe5489702c822352a2fa846e8002c6d0e144e08275d3d19e12ffbf5d575156e14faf51b2906f8bc61d0c4fadce4e05258a82e32ad4b99a5e4cccc38c97891b1811b37069bda1e5e5da839a05abd2fde3ab025d7527b0203ea69a38c6eeab6fe7ddab501ebea97d18b0240ec3654a69084364a0c81a9a71563c71b9f5d1274c648248c184faf21567fd612371", 0x9c}, {&(0x7f0000000380)="54d6953012f0b819612feafb3c4c5ab14affccf1ac7fa319899e43eb496e11660092aa87ade9fd7a8bfc51", 0x2b}, {&(0x7f0000000680)="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", 0x1000}, {0x0}], 0x6, &(0x7f0000001b00)=ANY=[@ANYBLOB="9000000000000000170100000200000078000000a6d40c75666cb7060ade7756bd93f37d72d8ef599beaeb63e467945edc1a85d4219820c15be1ab24cc5d0fa2e0a6ded326769e6bb09b958f2ce064d50f1398f7e6520f3ea8e02a457a62c3db6510abfe54030d2762ff7e6fd054c5263ad1150d13fdc30ea040001d19ef008be3869b3de0e66662c527e74f0000000018000000000000001701000004000000070000000000000022cc19e04ed14b6084aeaa62c1a07020a7bdaf320a7913699670d72b12dfcea7f6f7ad81192e62813130753668b6323827a40a7e760180d1d100a018d5c5ed99b0877e1d033728b6c2333e9b66df779061962fcf8b77e3cdf1b6eee156bdeedf09a53c8e604ab86802634131974c024dc0dd5b2973a1a82817e3673bf7b9128640551df3b490c9ccd264581dad408f8ee083c678ad5acb198fcfb44edf0b84600eb23519910e778a3558df0ac7abcd638ed178ca"], 0xa8, 0x20000890}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000018c0)="cace821b880b3a8987565eed8a72f0eef1166e48a615adc16324c4264858c007848b5e2b273947b7680780de46e099afa9d82129d03f1a9ead7da77bf32b3c4a27cb113771c2e0d03cfc8e646926d60cd0fabb01e0385c46a30be1069653f25c1e4d4d3c979ced90af9af626eeac8451d554261e3db0997c44a7", 0x7a}], 0x1, &(0x7f0000001940)=[@assoc={0x18, 0x117, 0x4, 0xffffffff}, @iv={0x38, 0x117, 0x2, 0x20, "e0350c31f1901a88a5a54e880133c2d4b3b64a772071db29240aaa9098a6987c"}, @assoc={0x18, 0x117, 0x4, 0x1f6}, @assoc={0x18, 0x117, 0x4, 0x1ad7}, @op={0x18}, @iv={0x90, 0x117, 0x2, 0x76, "b034ecdb9a2f83c12a7541b7da7337796db9c8d8fb30046841a38bc2aa5733ed092a13ad75be2e0c57456a98d91f84bc497a9aca698d7fbde0d3a9e1294b34096cce1d942445f4eb53791e8a05cdeedee523ebd7ca1a66f6c49f8a58f44cb30024f2a0ec4901166f8860653dd95a85dd71eb1b46b737"}], 0x128, 0x24008000}], 0x2, 0x8c0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) 2.317059122s ago: executing program 0 (id=3957): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005500000085000000d000000095"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x27, 0x10, 0x0, &(0x7f0000000040)="f8ad48ec7202cb291ac1cc0c5b868b73", 0x0, 0x3ad9, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async, rerun: 64) r2 = socket$inet6(0xa, 0x3, 0x6) (rerun: 64) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xbd1, 0x0, 0x2}, {0x81, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x0, 0x0, 0x7, 0x7, 0x0, 0x2}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000580)={{{@in=@private=0xa010101, @in6=@local, 0x4e24, 0x7, 0x4e23, 0xe, 0xa, 0x80, 0x0, 0x3b}, {0x7fff, 0xec, 0x4, 0x8000000000000001, 0x0, 0x7, 0x9, 0x5}, {0xe, 0x4, 0x6, 0x4}, 0x7f, 0x6e6bb9, 0x1, 0x0, 0x2}, {{@in6=@mcast2, 0x4d5, 0x2b}, 0xa, @in6=@local, 0x3503, 0x3, 0x3, 0x89, 0xa, 0x81, 0x7f0000}}, 0xe8) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x2}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)="fffe18cc583694ff83a9220b72a0ce15a74a1180723eb6b6213da7390568263816972f81c3027226ae3c12b64719833554148b7499f8c0f38344c54864a192edfdcc0de8e3faff1f3d15122bb8bd0a6c8961068b262ff0af06e0fde66a8c2dc92fd34f46c16d710dfdae705bfc626e", 0x6f}], 0x1}, 0x20000000) 1.907009567s ago: executing program 0 (id=3959): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 34) 1.688215858s ago: executing program 1 (id=3961): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x4, &(0x7f0000000080)=0x6, 0x4) getsockopt$inet_mptcp_buf(r4, 0x6, 0x4, 0xfffffffffffffffd, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=ANY=[@ANYBLOB="24000000360007010300000000000002017c0000100008"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, r6, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000002060104000000000000000006000002050005000200000005000400000000001400078008001240001000000800134000005bad050001000700000005000100070000000900020073"], 0x74}}, 0x4000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000ad50120800014000000000140004"], 0xa4}, 0x1, 0x0, 0x0, 0x20040001}, 0x40810) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x50}}, 0x4000010) 1.624050074s ago: executing program 0 (id=3962): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280), 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, &(0x7f00000004c0)) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x80c1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r1}, 0x48) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet6(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x844) write(r3, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYBLOB="f616675411cebfad0f2315d3c7447fc15eff4fa73074741b5f8061729e84ae5035aa7675c1b16aae10d1c9b1ec0ae523d54febdafaf702e1761e65c4e3d9034b228f30486ec7f270f941e378cf1d2d2be5005a0e4570265d5fb92e5599994a551517858b4c6f31ba87bcf225eeeb7a0c7c7ba27b445b8b80476c09c9adc06c42c78b024a890b32495689eba888678a963b554cd529947b28454e51232397c5ad46d2bca05a41dcfd1dada57523af3cd32d2bdb119b88b5f7e92d9ed78af44ba29b84b8c84e639b6212ba2b66674c8cd4c3907f8644203bc728147f8b", @ANYRESDEC], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6}, 0x94) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="020029bd7000fbdbdf25070000a4"], 0x14}, 0x1, 0x0, 0x0, 0x200040c0}, 0x880) 1.512141777s ago: executing program 0 (id=3964): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000005a80)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f0000000240)=0x409, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000ffffffffa000f2710263d2ac", 0x0, 0xe505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd}, 0x2e) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f0000000880)={{r5}, "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"}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="44000000100000042abd7000ffdbdfa500000000836f3c2fc30a889b3f1775377f30262a69d64aab0dc57818fea9e8985a3d5b1f1881a9a804b911d10ac8a4178cc247e6a9fed41f69733014004a9639116e4d7d61269c88a668379de29fb8bc9b1e36ccc351d6656177e09adca61a6f2fe675eee1ad857f59c3762da50571a20667efaac105179445dddd908b4e06b801dd709cc3074d0898e4e584611118d146", @ANYRES32=0x0, @ANYBLOB="00000000305b0100140003006e657464657673696d30000000000000080016800400018008000400ff010000"], 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000040000100fcff0700040000000100000004004880100001800c00108004000b80040005800c0002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$kcm(0x29, 0x2, 0x0) 812.308254ms ago: executing program 2 (id=3968): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0xfffffffffffffead, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0xfffffffffffffd05, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0xfffffffffffffead, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0xfffffffffffffd05, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x18}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) (async) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000240)={@broadcast, @local, 0x1, 0x4, [@empty, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x20) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r3, 0x913e0000) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x1000) listen(r1, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="440000000214010029bd7000fcdbdf250800010000000000080001000100000008004400", @ANYRES32, @ANYBLOB='\b\x00D\x00', @ANYRES32, @ANYBLOB="080004"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40100) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x804006a, 0x3, 0x4, 0x4, 0x7f, 0x81}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r6, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r6, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), r3) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xff}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000002000000020000000020000000000000000000084060100ec000000000100000d"], &(0x7f0000000f40)=""/4079, 0x3a, 0xfef, 0x6, 0x4}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000002000000020000000020000000000000000000084060100ec000000000100000d"], &(0x7f0000000f40)=""/4079, 0x3a, 0xfef, 0x6, 0x4}, 0x28) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000500000000000069078ac1414bbac1414aa4e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="f0020000907800001312abb9bfe0c34c72d52466fa8369f6e7870013122a9c444be69caceb047b79a300000000000000"], 0x0) 760.97075ms ago: executing program 0 (id=3969): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = socket(0x1e, 0x1, 0x0) sendto$packet(r0, 0x0, 0xffffffffffffff5a, 0x842, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$inet6(0xa, 0x1, 0x84) socket(0x28, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000008000b40000000002c0004802800018007000100637400001c0002800800014000000015050003000100000008000240000000080900010073797a3000000000140000001100010000000000003f88000000000a"], 0xc8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x40) read$alg(r4, &(0x7f0000003140)=""/189, 0x10a) 467.754087ms ago: executing program 1 (id=3970): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x2c, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1}}, @NHA_OIF={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r2, 0x8080583a, 0xfffffffffffffffd) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x4c, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x38}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x503, 0x70bd2a, 0xc, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6249}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x50}}, 0x800) 404.364523ms ago: executing program 3 (id=3971): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback=r0, 0x26, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000b40)=@filter={'filter\x00', 0xe, 0x4, 0x90, [0x0, 0x200000000300, 0x200000000754, 0x2000000008ca], 0x0, 0x0, &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}]}, 0x108) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x519fd189, 0x4) listen(r2, 0x8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000240)="b78efa779404bf4a70c9ccb3e5c716400e6c6a29fc35f6bc3feeeec98ac08f4a2da06934bade5e59777cfbf255bd34198694ecd3519e6cebf7b5bd4e2d97ef3afd3cf75d4e2ac6f120a2ead5f4401125f54048d9083f54aba3efe60626", &(0x7f00000002c0)=""/148}, 0x20) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r4) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000001980)={0x2b, 0x0, 0x0, 0x1}, 0x8) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x28) poll(&(0x7f0000000040)=[{r5, 0x20}], 0x1, 0x404) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xa4, &(0x7f000000cf3d)=""/164, 0x0, 0x5f, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback=r0, 0x26, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000b40)=@filter={'filter\x00', 0xe, 0x4, 0x90, [0x0, 0x200000000300, 0x200000000754, 0x2000000008ca], 0x0, 0x0, &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}]}, 0x108) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x519fd189, 0x4) (async) listen(r2, 0x8) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000240)="b78efa779404bf4a70c9ccb3e5c716400e6c6a29fc35f6bc3feeeec98ac08f4a2da06934bade5e59777cfbf255bd34198694ecd3519e6cebf7b5bd4e2d97ef3afd3cf75d4e2ac6f120a2ead5f4401125f54048d9083f54aba3efe60626", &(0x7f00000002c0)=""/148}, 0x20) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r4) (async) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000001980)={0x2b, 0x0, 0x0, 0x1}, 0x8) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) listen(r5, 0x28) (async) poll(&(0x7f0000000040)=[{r5, 0x20}], 0x1, 0x404) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xa4, &(0x7f000000cf3d)=""/164, 0x0, 0x5f, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) 404.049816ms ago: executing program 2 (id=3972): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 35) 315.0385ms ago: executing program 1 (id=3973): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@delqdisc={0x24, 0x25, 0x1, 0x70bd25, 0x255fdbff, {0x0, 0x0, 0x0, r7, {0x4}, {0x8, 0xfff1}, {0x4, 0xfff1}}}, 0x24}}, 0x240080c8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20) setsockopt$sock_attach_bpf(r8, 0x1, 0x7, &(0x7f0000000000), 0x4) r10 = socket$xdp(0x2c, 0x3, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r11, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r11, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r11, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000040)={0x20000000}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c000000000061136b0000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f0200006706000020000000620a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2736f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfdb247bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded5275c00"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000d, 0x11, r10, 0x100000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0x0, 0xa, 0x0, 0x6}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x530a}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x1010, &(0x7f0000003dc0)=""/4112, 0x41100, 0x3}, 0x94) 308.062925ms ago: executing program 2 (id=3974): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280), 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, &(0x7f00000004c0)) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x80c1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r1}, 0x48) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet6(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x844) write(r3, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYBLOB="f616675411cebfad0f2315d3c7447fc15eff4fa73074741b5f8061729e84ae5035aa7675c1b16aae10d1c9b1ec0ae523d54febdafaf702e1761e65c4e3d9034b228f30486ec7f270f941e378cf1d2d2be5005a0e4570265d5fb92e5599994a551517858b4c6f31ba87bcf225eeeb7a0c7c7ba27b445b8b80476c09c9adc06c42c78b024a890b32495689eba888678a963b554cd529947b28454e51232397c5ad46d2bca05a41dcfd1dada57523af3cd32d2bdb119b88b5f7e92d9ed78af44ba29b84b8c84e639b6212ba2b66674c8cd4c3907f8644203bc728147f8b", @ANYRESDEC], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6}, 0x94) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="020029bd7000fbdbdf25070000a4"], 0x14}, 0x1, 0x0, 0x0, 0x200040c0}, 0x880) 186.565549ms ago: executing program 2 (id=3975): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x4, 0xe, 0x10, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@ptr={0x8, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x30, 0xa14fde17bcb0b48d, 0x0, 0x30, 0x30, 0x61, 0x30, 0x0, 0x61]}}, &(0x7f0000000080)=""/10, 0x2f, 0xa, 0x1, 0x2}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 117.152331ms ago: executing program 3 (id=3976): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x61, @private0, 0x4}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000340)="14e59c292bbb8ec96dd9ab0a228283f5d6c02d924f300bcf209f8348051024bd37a80420009a734ba9076e84ea451a75eeeea1bfbb3c8815f492", 0x3a}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4ea0, 0x10, @private0, 0x9}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000000)="95", 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000005c0)={0x0, 0x3}, 0x8) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280), 0x4) close(0x3) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r2, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x1, @private=0xa010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x488c4}, 0x0) shutdown(0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x28000600) close(0x3) recvfrom(r3, 0x0, 0x0, 0x10020, 0x0, 0x0) close(0x3) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000000) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r4, &(0x7f0000002740)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x10, @local, 0x19d}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="380000000000000029000000040000003a030000000000000109000000000000000000c910000000000000000000000000000000000000001400000000000000290000003e0000000a00000000000000140000000000000029000000430000000400000000000000a80000000000000029000000390000003212020a00000000000000000000000000000000000000010000000000000000fc00000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001ff02000000000000000000000000000100000000000000000000000000000000fc010000000000000000000000000000ff0100000000000000000000000000012000000000000000290000"], 0x148}}], 0x2, 0x0) close(r0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r5, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e24, @private=0xa010101}], 0x10) setsockopt(r6, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) connect$inet6(r5, 0x0, 0x5) 94.25197ms ago: executing program 2 (id=3977): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtaction={0x894, 0x30, 0xfbed, 0x70bd29, 0x25dfdbff, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x6, 0x0, 0x3, 0x4, 0x2, 0x2, 0x4000, 0x0, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc, 0x2, 0x5f41fde7, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7ff, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x8001, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x1, 0x0, 0x100000, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x75b, 0x0, 0x0, 0xf, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3bf0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x2, 0x1000, 0x0, 0x0, 0x9, 0x3, 0xa088, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x87, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xaa84911, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0xfff, 0x1, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x200, 0x0, 0x0, 0xffffffff, 0x7, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x40000, 0x2, 0x2, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x2, 0x0, 0x9, 0x0, 0x17a00, 0x0, 0x5, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8db, 0xffffffff, 0x0, 0x9, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x10, 0x0, 0x0, 0xf, 0x0, 0x7c, 0x0, 0x5, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xcd9, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x4000, 0x10, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0xfffffff9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x319e, 0xfb18, 0x6, 0x9, 0x0, 0x484a, 0x0, 0x2, 0x0, 0x6, 0x0, 0xfffffffc, 0x9, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfbfffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x5a62, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0xff, 0xfffc, 0x5}, {0x5, 0x0, 0x0, 0x9, 0x0, 0xfffffffc}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x2}}}}]}]}, 0x894}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) (async) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) (async) close(r1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtaction={0x894, 0x30, 0xfbed, 0x70bd29, 0x25dfdbff, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x6, 0x0, 0x3, 0x4, 0x2, 0x2, 0x4000, 0x0, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc, 0x2, 0x5f41fde7, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7ff, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x8001, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x1, 0x0, 0x100000, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x75b, 0x0, 0x0, 0xf, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3bf0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x2, 0x1000, 0x0, 0x0, 0x9, 0x3, 0xa088, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x87, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xaa84911, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0xfff, 0x1, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x200, 0x0, 0x0, 0xffffffff, 0x7, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x40000, 0x2, 0x2, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x2, 0x0, 0x9, 0x0, 0x17a00, 0x0, 0x5, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8db, 0xffffffff, 0x0, 0x9, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x10, 0x0, 0x0, 0xf, 0x0, 0x7c, 0x0, 0x5, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xcd9, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x4000, 0x10, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0xfffffff9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x319e, 0xfb18, 0x6, 0x9, 0x0, 0x484a, 0x0, 0x2, 0x0, 0x6, 0x0, 0xfffffffc, 0x9, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfbfffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x5a62, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0xff, 0xfffc, 0x5}, {0x5, 0x0, 0x0, 0x9, 0x0, 0xfffffffc}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x2}}}}]}]}, 0x894}}, 0x0) (async) 0s ago: executing program 2 (id=3978): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@mcast2, @in=@local}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xb}, @in6=@dev={0xfe, 0x80, '\x00', 0x42}, 0x4e24, 0x1, 0x4e21, 0xd96c, 0x2, 0x80, 0x80, 0x2f, r1, r2}, {0x80000000, 0x7, 0x5861d9e, 0xd8e, 0x3, 0x3, 0x100000001, 0x9}, {0xfff, 0x0, 0xe59, 0x8}, 0x7, 0x6e6bbb, 0x2, 0x0, 0x2, 0x2}, {{@in=@empty, 0x4d3, 0x3c}, 0x2, @in=@loopback, 0x3501, 0x1, 0x2, 0x4, 0x56e, 0x1, 0x29}}, 0xe8) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x439, 0x70bd26, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x42093, 0x4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x22, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048014}, 0x4040) kernel console output (not intermixed with test programs): batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 600.434314][ T4943] Bluetooth: hci0: command tx timeout [ 600.885711][ T9116] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 600.900016][ T9116] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 601.200098][T19118] lo speed is unknown, defaulting to 1000 [ 601.509303][T19057] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.548527][T19057] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.581152][T19057] bridge_slave_0: entered allmulticast mode [ 601.599747][T19057] bridge_slave_0: entered promiscuous mode [ 601.627265][T19191] netlink: 'syz.0.3250': attribute type 4 has an invalid length. [ 601.707843][T19196] tipc: Started in network mode [ 601.730093][T19196] tipc: Node identity ac14140f, cluster identity 4711 [ 601.745320][T19196] tipc: New replicast peer: 255.255.255.255 [ 601.777059][T19196] tipc: Enabled bearer , priority 26 [ 601.791649][T19198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3248'. [ 601.828393][T19057] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.845667][T19057] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.872286][T19057] bridge_slave_1: entered allmulticast mode [ 601.896636][T19057] bridge_slave_1: entered promiscuous mode [ 602.127427][T19057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.179601][T19212] siw: device registration error -23 [ 602.208853][T19057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.476611][T19057] team0: Port device team_slave_0 added [ 602.531302][T19057] team0: Port device team_slave_1 added [ 602.910977][T19057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.928209][T19057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.001187][T19057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.042366][ T7186] tipc: Node number set to 2886997007 [ 603.238364][T19057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.266813][T19057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.309139][T19057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.731618][T19057] hsr_slave_0: entered promiscuous mode [ 603.829809][T19057] hsr_slave_1: entered promiscuous mode [ 603.850051][T19057] debugfs: 'hsr0' already exists in 'hsr' [ 603.858974][T19057] Cannot create hsr debugfs directory [ 603.974317][ T13] net_ratelimit: 11 callbacks suppressed [ 603.974338][ T13] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 603.994339][ T13] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 604.545376][ T9053] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 604.559928][ T9053] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 604.836792][T19281] vlan2: entered promiscuous mode [ 604.842728][T19281] bridge0: entered promiscuous mode [ 605.070869][T19284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3270'. [ 605.102962][T19284] veth3: entered promiscuous mode [ 605.114342][ T9053] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 605.130711][ T9053] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 605.654648][ T9113] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 605.670301][ T9113] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 606.195215][ T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 606.209945][ T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 607.359387][T19259] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 607.402383][T19057] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 607.473546][T19057] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 607.492927][T19057] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 607.526013][T19057] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 607.536732][T19057] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 607.618256][T19057] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 607.663616][T19057] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 607.843410][T19057] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 608.452331][T19314] syzkaller1: entered promiscuous mode [ 608.468733][T19314] syzkaller1: entered allmulticast mode [ 608.492080][T19314] xt_hashlimit: size too large, truncated to 1048576 [ 608.608962][T19320] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3279'. [ 608.707894][T19057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.940091][T19057] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.997368][T19333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3283'. [ 609.023659][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.031175][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.093440][T19333] gtp1: entered promiscuous mode [ 609.120262][T19333] gtp1: entered allmulticast mode [ 609.188914][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.196215][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.212237][T19338] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3284'. [ 609.275536][ T13] net_ratelimit: 11 callbacks suppressed [ 609.275556][ T13] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 609.295652][ T13] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 609.434780][T19336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3284'. [ 609.529188][T19343] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3286'. [ 609.723008][T19347] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3287'. [ 609.874784][T19350] syzkaller0: entered promiscuous mode [ 609.911768][T19350] syzkaller0: entered allmulticast mode [ 609.974513][ T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 609.989243][ T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 610.578788][T12539] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 610.593669][T12539] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 611.147602][T19057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.185291][ T9116] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 611.199643][ T9116] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 611.420436][T19057] veth0_vlan: entered promiscuous mode [ 611.482483][T19057] veth1_vlan: entered promiscuous mode [ 611.650768][T19057] veth0_macvtap: entered promiscuous mode [ 611.708655][T19057] veth1_macvtap: entered promiscuous mode [ 611.830683][T19389] lo speed is unknown, defaulting to 1000 [ 611.847426][ T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 611.861659][ T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 611.881612][T19057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.941607][T19057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.992278][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.015567][T19393] netlink: 'syz.2.3295': attribute type 4 has an invalid length. [ 612.021889][T19394] netlink: 'syz.2.3295': attribute type 4 has an invalid length. [ 612.023816][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.097352][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.169933][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.619462][ T9113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.651339][ T9113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.674120][T19403] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3299'. [ 612.772697][ T9053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.799168][ T9053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.053776][T19389] lo speed is unknown, defaulting to 1000 [ 613.437266][T19415] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3301'. [ 613.506403][T19415] netlink: 'syz.1.3301': attribute type 1 has an invalid length. [ 613.534344][T19415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3301'. [ 613.674862][T19416] bond1: entered promiscuous mode [ 613.706322][T19416] 8021q: adding VLAN 0 to HW filter on device bond1 [ 613.747063][T19416] bridge0: port 3(bond1) entered blocking state [ 613.779863][T19416] bridge0: port 3(bond1) entered disabled state [ 613.817483][T19416] bond1: entered allmulticast mode [ 613.848381][T19416] bridge0: port 3(bond1) entered blocking state [ 613.855263][T19416] bridge0: port 3(bond1) entered forwarding state [ 613.964930][ T12] bridge0: port 3(bond1) entered disabled state [ 614.494938][ T9113] net_ratelimit: 8 callbacks suppressed [ 614.494984][ T9113] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 614.517967][ T9113] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 614.610085][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 614.628757][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 614.638368][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 614.647425][T19429] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3304'. [ 614.657032][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 614.657683][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 614.878167][ T5630] syz_tun (unregistering): left allmulticast mode [ 615.034476][ T9113] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 615.050696][ T9113] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 615.164875][T19436] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 615.615905][ T9116] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 615.630651][ T9116] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 615.820278][T19446] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3307'. [ 615.862456][T19446] ksmbd: Unknown IPC event: 1, ignore. [ 616.280024][ T9116] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 616.294314][ T9116] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 616.601863][T19454] bond2: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 616.618463][T19426] lo speed is unknown, defaulting to 1000 [ 616.754299][ T4943] Bluetooth: hci3: command tx timeout [ 616.897745][ T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 616.914048][ T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 616.988932][T19462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3311'. [ 617.072781][T19462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3311'. [ 617.487517][ T9053] bond7: left allmulticast mode [ 617.510769][ T9053] bridge0: port 4(bond7) entered disabled state [ 617.542264][ T9053] bridge_slave_1: left allmulticast mode [ 617.573752][ T9053] bridge_slave_1: left promiscuous mode [ 617.603745][ T9053] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.682139][ T9053] bond0: left allmulticast mode [ 617.704274][ T9053] bond_slave_0: left allmulticast mode [ 617.721703][ T9053] bond_slave_1: left allmulticast mode [ 617.753465][ T9053] bridge4: port 1(bond0) entered disabled state [ 617.803699][ T9053] dvmrp0: left allmulticast mode [ 618.633456][ T9053] gretap0 (unregistering): left promiscuous mode [ 618.799184][ T9053] bond8 (unregistering): (slave geneve4): Releasing active interface [ 618.838364][ T4943] Bluetooth: hci3: command tx timeout [ 619.162068][ T9053] bond4 (unregistering): (slave bridge3): Releasing active interface [ 619.358929][ T9053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.407390][ T9053] bond_slave_0: left promiscuous mode [ 619.427266][ T9053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.454672][ T9053] bond_slave_1: left promiscuous mode [ 619.475786][ T9053] bond0 (unregistering): Released all slaves [ 619.547884][ T9053] bond1 (unregistering): Released all slaves [ 619.567106][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 619.571404][ T13] net_ratelimit: 8 callbacks suppressed [ 619.571453][ T13] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 619.599569][ T13] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 619.699794][ T9053] bond2 (unregistering): (slave veth3): Releasing active interface [ 619.710195][ T9053] bond2 (unregistering): Released all slaves [ 619.741184][ T9053] bond3 (unregistering): Released all slaves [ 619.793476][ T9053] bond4 (unregistering): Released all slaves [ 619.905262][ T9053] bond5 (unregistering): Released all slaves [ 619.968642][ T9053] bond6 (unregistering): Released all slaves [ 620.023712][ T9053] bond7 (unregistering): Released all slaves [ 620.048250][ T9053] bond8 (unregistering): Released all slaves [ 620.082361][ T9053] bond9 (unregistering): (slave lo): Releasing backup interface [ 620.100003][ T9053] bond9 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 620.125099][ T9053] bond9 (unregistering): Released all slaves [ 620.149824][ T9053] bond10 (unregistering): Released all slaves [ 620.164417][T12538] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 620.178856][T12538] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 620.244718][T19426] lo speed is unknown, defaulting to 1000 [ 620.263833][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 620.287699][ T7194] lo speed is unknown, defaulting to 1000 [ 620.694420][T12538] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 620.709772][T12538] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 620.914210][ T4943] Bluetooth: hci3: command tx timeout [ 620.963287][T19457] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 621.285938][T12539] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 621.301815][T12539] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 621.621219][T19517] xt_l2tp: v2 sid > 0xffff: 8388608 [ 621.857330][T12539] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 621.873722][T12539] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 622.434808][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 622.614785][T19426] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.632908][T19426] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.667582][T19426] bridge_slave_0: entered allmulticast mode [ 622.692232][T19426] bridge_slave_0: entered promiscuous mode [ 622.728857][T19426] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.747797][T19426] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.778345][T19426] bridge_slave_1: entered allmulticast mode [ 622.809726][T19426] bridge_slave_1: entered promiscuous mode [ 622.994673][ T4943] Bluetooth: hci3: command tx timeout [ 623.094658][T19426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.109303][T19426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.253786][T19426] team0: Port device team_slave_0 added [ 623.369754][T19426] team0: Port device team_slave_1 added [ 623.602512][T19543] syzkaller1: entered promiscuous mode [ 623.627346][T19543] syzkaller1: entered allmulticast mode [ 623.704749][T19426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.725917][T19426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.814295][T19426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.991875][T19426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.026968][T19426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.183375][T19426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.207568][T19557] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3324'. [ 624.678804][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 624.975212][T19575] bond2: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 625.000838][T19575] bond2 (unregistering): Released all slaves [ 625.046658][ T9116] net_ratelimit: 10 callbacks suppressed [ 625.046681][ T9116] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 625.067099][ T9116] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 625.194752][T19426] hsr_slave_0: entered promiscuous mode [ 625.216513][T19426] hsr_slave_1: entered promiscuous mode [ 625.232173][T19426] debugfs: 'hsr0' already exists in 'hsr' [ 625.244107][T19426] Cannot create hsr debugfs directory [ 625.262362][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 625.341977][T19589] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3332'. [ 625.655775][ T9116] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 625.670878][ T9116] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 625.892901][T19606] sctp: [Deprecated]: syz.0.3337 (pid 19606) Use of struct sctp_assoc_value in delayed_ack socket option. [ 625.892901][T19606] Use struct sctp_sack_info instead [ 625.971909][T19604] netlink: 'syz.1.3338': attribute type 12 has an invalid length. [ 625.995285][T19603] netlink: 'syz.1.3338': attribute type 12 has an invalid length. [ 626.302382][T12538] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 626.318794][T12538] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 626.431167][T19622] netlink: 4312 bytes leftover after parsing attributes in process `syz.3.3341'. [ 626.875243][T19630] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.3344'. [ 626.915007][ T9116] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 626.930703][ T9116] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 626.955663][T19630] openvswitch: netlink: Key type 11488 is out of range max 32 [ 627.163502][T19642] netlink: 'syz.0.3345': attribute type 2 has an invalid length. [ 627.212784][T19642] netlink: 'syz.0.3345': attribute type 1 has an invalid length. [ 627.311825][T19647] netlink: 'syz.0.3345': attribute type 1 has an invalid length. [ 627.350608][T19647] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3345'. [ 627.381396][T19618] lo speed is unknown, defaulting to 1000 [ 627.495733][T12538] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 628.000070][T19637] syzkaller0: entered promiscuous mode [ 628.024554][T19637] syzkaller0: entered allmulticast mode [ 628.502465][T19668] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 628.509815][T19668] IPv6: NLM_F_CREATE should be set when creating new route [ 628.517169][T19668] IPv6: NLM_F_CREATE should be set when creating new route [ 628.670392][T19618] lo speed is unknown, defaulting to 1000 [ 629.020118][T19679] xt_hashlimit: size too large, truncated to 1048576 [ 629.317719][T19681] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.486146][T19681] bridge_slave_0 (unregistering): left allmulticast mode [ 629.535104][T19681] bridge_slave_0 (unregistering): left promiscuous mode [ 629.573439][T19681] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.125954][ T9116] net_ratelimit: 9 callbacks suppressed [ 630.125977][ T9116] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 630.145968][ T9116] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 630.350209][T19426] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 630.386492][T19426] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 630.415016][T19426] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 630.440618][T19426] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 630.782726][T19426] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 630.814541][ T13] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 630.830800][ T13] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 630.869725][T19426] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 630.905636][T19426] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 630.961751][T19426] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 631.120256][T19701] syzkaller0: entered promiscuous mode [ 631.140681][T19701] syzkaller0: entered allmulticast mode [ 631.480608][ T59] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 631.496732][ T59] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 631.615128][T19426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 631.720791][T19426] 8021q: adding VLAN 0 to HW filter on device team0 [ 631.780603][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.788811][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 631.896762][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.905127][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.158956][ T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 632.174161][ T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 632.210481][T19426] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 632.814733][ T13] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 632.829492][ T13] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 633.063223][T19747] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3363'. [ 633.088487][T19747] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3363'. [ 633.135329][T19747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3363'. [ 633.149265][T19748] syzkaller1: entered promiscuous mode [ 633.156256][T19748] syzkaller1: entered allmulticast mode [ 633.889728][T19766] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 634.023697][T19765] lo speed is unknown, defaulting to 1000 [ 634.886886][T19788] tipc: Started in network mode [ 634.912655][T19788] tipc: Node identity d6d95f573bb5, cluster identity 4711 [ 634.977210][T19788] tipc: Enabled bearer , priority 0 [ 635.012651][T19796] syzkaller0: entered promiscuous mode [ 635.047826][T19796] syzkaller0: entered allmulticast mode [ 635.207166][T19426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 635.297466][T19788] tipc: Resetting bearer [ 635.384500][T19786] tipc: Resetting bearer [ 635.481144][T19786] tipc: Disabling bearer [ 635.514363][ T9116] net_ratelimit: 8 callbacks suppressed [ 635.514385][ T9116] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 635.535217][ T9116] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 635.553557][T19765] lo speed is unknown, defaulting to 1000 [ 635.789873][T19426] veth0_vlan: entered promiscuous mode [ 635.843394][T19426] veth1_vlan: entered promiscuous mode [ 636.060182][T19426] veth0_macvtap: entered promiscuous mode [ 636.089678][T19782] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 636.104615][T19782] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 636.138222][T19426] veth1_macvtap: entered promiscuous mode [ 636.341983][T19426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 636.479183][T19426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 636.502982][T19813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3372'. [ 636.557596][T12539] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.598859][T12539] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.647218][T12539] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.671467][ T9116] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 636.688227][ T9116] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 636.707402][T12539] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.810195][T19821] netlink: 'syz.4.3373': attribute type 163 has an invalid length. [ 637.286650][T19781] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 637.301907][T19781] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 637.647709][T19828] syzkaller1: entered promiscuous mode [ 637.668381][T19828] syzkaller1: entered allmulticast mode [ 637.715398][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.759247][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.985010][ T59] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 638.001925][ T59] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 638.098753][T12539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.140148][T19841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.163801][T12539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.678947][T19856] netlink: 'syz.2.3302': attribute type 5 has an invalid length. [ 639.038755][T19861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3378'. [ 639.398221][T19872] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3380'. [ 639.445332][T19872] xt_hashlimit: invalid rate [ 639.620256][T19878] lo speed is unknown, defaulting to 1000 [ 639.709259][T19886] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 639.737299][T19886] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.746915][T19886] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.839780][T19889] netlink: 'syz.1.3384': attribute type 10 has an invalid length. [ 639.959156][T19886] netlink: 'syz.1.3384': attribute type 10 has an invalid length. [ 639.997101][T19889] team0: Failed to send options change via netlink (err -105) [ 640.029001][T19889] team0: Port device dummy0 added [ 640.036547][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 640.155677][T19886] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 640.204870][T19886] team0: Failed to send options change via netlink (err -105) [ 640.241269][T19886] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 640.292348][T19886] team0: Port device dummy0 removed [ 640.381153][T19886] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 640.683826][ T12] net_ratelimit: 9 callbacks suppressed [ 640.683848][ T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 640.707556][ T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 640.759159][T19901] syzkaller1: entered promiscuous mode [ 640.803274][T19901] syzkaller1: entered allmulticast mode [ 641.127764][T19878] lo speed is unknown, defaulting to 1000 [ 641.379701][ T153] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 641.395205][ T153] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 641.624741][T19927] syzkaller0: entered promiscuous mode [ 641.650929][T19927] syzkaller0: entered allmulticast mode [ 641.843038][T19937] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 642.004695][T12539] nci: nci_rx_work: unknown MT 0x1 [ 642.045089][ T153] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 642.061081][ T153] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 642.125326][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 642.662034][ T59] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 642.679979][ T59] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 642.744013][T19932] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 642.826656][T19956] IPv6: addrconf: prefix option has invalid lifetime [ 642.877999][T19959] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3394'. [ 643.216212][T19965] netlink: 'syz.0.3397': attribute type 8 has an invalid length. [ 643.256071][T19962] netlink: 'syz.3.3398': attribute type 3 has an invalid length. [ 643.283575][ T13] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 643.300755][T19962] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3398'. [ 643.310922][T19969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3397'. [ 644.625349][T19983] syzkaller1: entered promiscuous mode [ 644.673555][T19983] syzkaller1: entered allmulticast mode [ 644.732353][T20002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3409'. [ 645.070571][T20001] syz.4.3411: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 645.137484][T20001] CPU: 0 UID: 0 PID: 20001 Comm: syz.4.3411 Not tainted syzkaller #0 PREEMPT(full) [ 645.137518][T20001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 645.137542][T20001] Call Trace: [ 645.137556][T20001] [ 645.137567][T20001] dump_stack_lvl+0xe8/0x150 [ 645.137602][T20001] warn_alloc+0x249/0x340 [ 645.137638][T20001] ? stack_trace_save+0xa9/0x100 [ 645.137676][T20001] ? __pfx_warn_alloc+0x10/0x10 [ 645.137716][T20001] ? kasan_save_track+0x4f/0x80 [ 645.137745][T20001] ? kasan_save_track+0x3e/0x80 [ 645.137774][T20001] ? __kasan_kmalloc+0x93/0xb0 [ 645.137804][T20001] ? __kmalloc_cache_noprof+0x31c/0x660 [ 645.137834][T20001] ? xskq_create+0x56/0x170 [ 645.137943][T20001] ? xsk_setsockopt+0x54c/0x990 [ 645.137970][T20001] ? do_sock_setsockopt+0x17c/0x1b0 [ 645.138053][T20001] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 645.138085][T20001] ? do_syscall_64+0x15f/0xf80 [ 645.138134][T20001] __vmalloc_node_range_noprof+0x132/0x1750 [ 645.138204][T20001] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 645.138245][T20001] ? __kasan_kmalloc+0x93/0xb0 [ 645.138294][T20001] vmalloc_user_noprof+0xad/0xe0 [ 645.138327][T20001] ? xskq_create+0xbf/0x170 [ 645.138360][T20001] xskq_create+0xbf/0x170 [ 645.138396][T20001] xsk_init_queue+0x8a/0xe0 [ 645.138430][T20001] xsk_setsockopt+0x54c/0x990 [ 645.138461][T20001] ? __pfx_xsk_setsockopt+0x10/0x10 [ 645.138495][T20001] ? __pfx_aa_sk_perm+0x10/0x10 [ 645.138567][T20001] ? aa_sock_opt_perm+0xff/0x1a0 [ 645.138626][T20001] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 645.138659][T20001] ? __pfx_xsk_setsockopt+0x10/0x10 [ 645.138691][T20001] do_sock_setsockopt+0x17c/0x1b0 [ 645.138730][T20001] __x64_sys_setsockopt+0x13d/0x1b0 [ 645.138768][T20001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.138794][T20001] do_syscall_64+0x15f/0xf80 [ 645.138814][T20001] ? trace_irq_disable+0x3b/0x140 [ 645.138847][T20001] ? clear_bhb_loop+0x40/0x90 [ 645.138875][T20001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.138896][T20001] RIP: 0033:0x7f7fadb9cdd9 [ 645.138918][T20001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.138938][T20001] RSP: 002b:00007f7faea85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 645.138961][T20001] RAX: ffffffffffffffda RBX: 00007f7fade15fa0 RCX: 00007f7fadb9cdd9 [ 645.138978][T20001] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 645.138991][T20001] RBP: 00007f7fadc32d69 R08: 0000000000000004 R09: 0000000000000000 [ 645.139005][T20001] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.139019][T20001] R13: 00007f7fade16038 R14: 00007f7fade15fa0 R15: 00007ffc7d510878 [ 645.139054][T20001] [ 645.461785][T20003] syzkaller0: entered promiscuous mode [ 645.467415][T20003] syzkaller0: entered allmulticast mode [ 645.494494][T20001] Mem-Info: [ 645.499517][T20001] active_anon:7645 inactive_anon:0 isolated_anon:0 [ 645.499517][T20001] active_file:2440 inactive_file:40898 isolated_file:0 [ 645.499517][T20001] unevictable:768 dirty:227 writeback:0 [ 645.499517][T20001] slab_reclaimable:12250 slab_unreclaimable:933223 [ 645.499517][T20001] mapped:30573 shmem:1298 pagetables:1432 [ 645.499517][T20001] sec_pagetables:0 bounce:0 [ 645.499517][T20001] kernel_misc_reclaimable:0 [ 645.499517][T20001] free:467291 free_pcp:22882 free_cma:0 [ 645.546088][T20001] Node 0 active_anon:30580kB inactive_anon:0kB active_file:9760kB inactive_file:163396kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44468kB dirty:908kB writeback:0kB shmem:3656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15352kB pagetables:5604kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 645.581084][T20001] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:77824kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 645.624416][T20001] Node 0 DMA free:11264kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 645.698001][ T153] net_ratelimit: 7 callbacks suppressed [ 645.698020][ T153] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 645.718123][ T153] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 645.757031][T20001] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 645.762927][T20001] Node 0 DMA32 free:680944kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30484kB inactive_anon:0kB active_file:9760kB inactive_file:163396kB unevictable:1536kB writepending:936kB zspages:0kB present:3129332kB managed:2552540kB mlocked:0kB bounce:0kB free_pcp:33808kB local_pcp:19352kB free_cma:0kB [ 645.859560][T20001] lowmem_reserve[]: 0 0 0 0 0 [ 645.869954][T20001] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 645.991321][T20001] lowmem_reserve[]: 0 0 0 0 0 [ 646.040715][T20001] Node 1 Normal free:1177008kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:57984kB local_pcp:27156kB free_cma:0kB [ 646.141998][T20001] lowmem_reserve[]: 0 0 0 0 0 [ 646.176604][T20001] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11264kB [ 646.230607][T20001] Node 0 DMA32: 5368*4kB (UME) 4526*8kB (UME) 2400*16kB (UME) 161*32kB (UME) 166*64kB (UME) 473*128kB (UM) 489*256kB (UM) 261*512kB (UME) 146*1024kB (U) 49*2048kB (UME) 0*4096kB = 681072kB [ 646.269956][ T13] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 646.284741][ T13] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 646.342351][T20001] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 646.370380][T20001] Node 1 Normal: 4*4kB (UM) 14*8kB (UM) 7*16kB (UM) 10*32kB (UM) 12*64kB (UM) 9*128kB (UM) 8*256kB (UM) 6*512kB (UM) 6*1024kB (UM) 4*2048kB (U) 282*4096kB (UM) = 1177008kB [ 646.407123][T20001] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 646.419952][T20041] ipt_REJECT: ECHOREPLY no longer supported. [ 646.428007][T20001] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 646.438814][T20001] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 646.453606][T20001] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 646.464102][T20001] 44632 total pagecache pages [ 646.469025][T20001] 0 pages in swap cache [ 646.475673][T20001] Free swap = 124996kB [ 646.480041][T20001] Total swap = 124996kB [ 646.485234][T20001] 2097051 pages RAM [ 646.489359][T20001] 0 pages HighMem/MovableOnly [ 646.494701][T20001] 427134 pages reserved [ 646.499110][T20001] 0 pages cma reserved [ 646.617326][T20018] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3414'. [ 646.637119][T20045] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3418'. [ 646.657498][T20019] syzkaller1: entered promiscuous mode [ 646.663554][T20019] syzkaller1: entered allmulticast mode [ 646.741393][T20044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3418'. [ 646.874271][ T59] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 646.889177][ T59] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 646.906059][T20049] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3419'. [ 647.440111][ T13] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 647.456232][ T13] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 647.974285][T19782] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 647.990177][T19782] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 650.282763][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 651.064640][ T9116] net_ratelimit: 10 callbacks suppressed [ 651.064662][ T9116] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 651.084688][ T9116] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 651.419312][T20055] syzkaller1: entered promiscuous mode [ 651.454389][T20055] syzkaller1: entered allmulticast mode [ 651.715525][ T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 651.731589][ T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 651.761046][T20074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3425'. [ 652.293530][T20058] syzkaller1: entered promiscuous mode [ 652.303097][T20058] syzkaller1: entered allmulticast mode [ 652.316823][ T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 652.331820][ T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 652.602966][T20081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3427'. [ 652.703010][T20088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 652.855955][ T59] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 652.870184][ T59] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 652.969381][T20098] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3432'. [ 653.432022][T20110] bridge1: entered promiscuous mode [ 653.455602][ T9116] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 653.983530][T20132] veth0_to_team: entered promiscuous mode [ 654.095856][T20133] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3440'. [ 654.120998][T20131] syzkaller1: entered promiscuous mode [ 654.148368][T20131] syzkaller1: entered allmulticast mode [ 654.173007][T20128] lo speed is unknown, defaulting to 1000 [ 654.372027][T20166] netlink: 'syz.4.3443': attribute type 13 has an invalid length. [ 654.536758][T20166] netlink: 'syz.4.3443': attribute type 17 has an invalid length. [ 655.026154][T20178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3445'. [ 655.057793][T20142] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.124893][T20142] batman_adv: batadv0: Interface deactivated: dummy0 [ 655.230105][T20142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.291923][T20142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.809570][T20166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.832096][T20166] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.845875][T20166] batman_adv: batadv0: Interface activated: dummy0 [ 655.886788][T20166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.940969][T20166] veth0_to_team: left promiscuous mode [ 655.961139][T20166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 656.030552][T20166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 656.074967][T20164] net_ratelimit: 70 callbacks suppressed [ 656.074990][T20164] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 656.094887][T20164] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 656.129132][T20166] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 656.142237][T20166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 656.175710][T20166] veth1_vlan: left promiscuous mode [ 656.184665][T20166] veth0_vlan: left promiscuous mode [ 656.191582][T20166] veth0_vlan: entered promiscuous mode [ 656.201840][T20166] veth1_vlan: entered promiscuous mode [ 656.214056][T20166] veth1_macvtap: left promiscuous mode [ 656.221301][T20166] veth0_macvtap: left promiscuous mode [ 656.229333][T20166] veth0_macvtap: entered promiscuous mode [ 656.248467][T20166] veth1_macvtap: entered promiscuous mode [ 656.258246][T20166] bridge0: port 3(vlan2) entered blocking state [ 656.264796][T20166] bridge0: port 3(vlan2) entered forwarding state [ 656.276546][T20166] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 656.290809][T20166] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 656.303693][T20166] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 656.317175][T20166] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 656.356772][T20166] 8021q: adding VLAN 0 to HW filter on device bond1 [ 656.369261][T20166] veth3: left promiscuous mode [ 656.398634][T20178] vlan2: entered promiscuous mode [ 656.405118][T20178] gretap0: entered promiscuous mode [ 656.473445][T20128] lo speed is unknown, defaulting to 1000 [ 656.496425][T20169] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.506113][T20169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.524127][T12538] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 656.624846][T20159] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 656.639572][T20159] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 656.843367][T20203] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3450'. [ 656.938034][T20205] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3451'. [ 656.954051][T20205] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3451'. [ 657.023693][T20162] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 657.033072][T20206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3450'. [ 657.066090][T19781] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 657.256370][T20169] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 657.271646][T20169] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 657.468969][T20211] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3453'. [ 657.647455][T20164] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 657.838271][T20219] lo speed is unknown, defaulting to 1000 [ 657.856467][T20164] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 658.443682][T20231] syzkaller1: entered promiscuous mode [ 658.452692][T20231] syzkaller1: entered allmulticast mode [ 658.743386][T20219] lo speed is unknown, defaulting to 1000 [ 660.598211][T20162] tipc: Subscription rejected, illegal request [ 660.684251][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 661.071057][T20272] sctp: [Deprecated]: syz.2.3467 (pid 20272) Use of struct sctp_assoc_value in delayed_ack socket option. [ 661.071057][T20272] Use struct sctp_sack_info instead [ 661.145606][T20278] Bluetooth: MGMT ver 1.23 [ 661.321394][T19781] net_ratelimit: 19 callbacks suppressed [ 661.321415][T19781] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 661.408836][T20280] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3469'. [ 661.458515][T20282] tipc: Can't bind to reserved service type 2 [ 661.477535][T20169] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 661.492275][T20169] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 661.888076][T19781] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 662.044068][T20162] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 662.058643][T20162] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 662.079998][T20290] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3472'. [ 662.098862][T20290] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3472'. [ 662.478575][T20162] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 662.574572][T20303] netlink: 'syz.1.3477': attribute type 5 has an invalid length. [ 662.624569][T20159] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 662.640756][T20159] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 662.700387][T20302] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3477'. [ 662.746544][T20306] veth3: entered promiscuous mode [ 662.914471][ T7178] hsr0: entered promiscuous mode [ 662.931284][T20314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3481'. [ 663.035634][T20162] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 663.296862][T20314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3481'. [ 663.373531][T20314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3481'. [ 663.410107][T20314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3481'. [ 663.449056][T20314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3481'. [ 663.517473][T20314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3481'. [ 663.529514][T20326] lo speed is unknown, defaulting to 1000 [ 663.537437][T20314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3481'. [ 663.631123][T20334] netlink: 'syz.1.3488': attribute type 3 has an invalid length. [ 663.854666][T20336] pim6reg99999991: entered allmulticast mode [ 664.279181][T20338] syzkaller0: entered promiscuous mode [ 664.301168][T20338] syzkaller0: entered allmulticast mode [ 666.614171][T20164] net_ratelimit: 20 callbacks suppressed [ 666.614223][T20164] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 666.794592][T19781] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 666.810435][T19781] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 667.144373][T20162] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 667.336752][T19782] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 667.352623][T19782] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 667.666440][T20162] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 667.874462][T20162] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 667.890472][T20162] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 668.187009][T20162] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 668.203349][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 669.071012][T20351] __nla_validate_parse: 27 callbacks suppressed [ 669.071042][T20351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3495'. [ 669.091816][T20351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3495'. [ 669.102959][T20351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3495'. [ 669.113750][T20351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3495'. [ 669.131813][T20351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3495'. [ 669.153269][T20351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3495'. [ 669.164687][T20351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3495'. [ 669.176940][T20351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3495'. [ 669.191714][T20351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3495'. [ 669.204651][T20351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3495'. [ 669.355258][T20373] netlink: 'syz.1.3499': attribute type 1 has an invalid length. [ 669.370232][T20351] veth0_vlan: left promiscuous mode [ 669.379872][T20351] veth0_vlan: entered promiscuous mode [ 669.426224][T20351] vlan2: left promiscuous mode [ 669.431125][T20351] bridge0: left promiscuous mode [ 669.457503][T20326] lo speed is unknown, defaulting to 1000 [ 669.631271][T20379] netlink: 'syz.3.3500': attribute type 3 has an invalid length. [ 669.666120][T20373] 8021q: adding VLAN 0 to HW filter on device bond3 [ 669.740512][T20371] bond3: (slave veth5): Enslaving as an active interface with a down link [ 669.788212][T20374] bond0: (slave dummy0): Releasing backup interface [ 669.801205][T20374] bond3: (slave dummy0): making interface the new active one [ 669.815109][T20374] dummy0: entered promiscuous mode [ 669.820931][T20374] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 669.978553][T20382] ip6gre1: entered promiscuous mode [ 669.990811][T20382] ip6gre1: entered allmulticast mode [ 670.703089][T20329] siw: device registration error -23 [ 670.818294][T20389] lo speed is unknown, defaulting to 1000 [ 670.858848][T20401] vcan0: entered promiscuous mode [ 670.868370][T20401] vcan0: entered allmulticast mode [ 671.609118][T20404] syzkaller1: entered promiscuous mode [ 671.616093][T20404] syzkaller1: entered allmulticast mode [ 671.800698][T19781] net_ratelimit: 20 callbacks suppressed [ 671.800721][T19781] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 671.846624][T20389] lo speed is unknown, defaulting to 1000 [ 672.004864][T19781] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 672.021405][T19781] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 672.117732][T20412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 672.344311][T19782] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 672.521995][T20424] netlink: 'syz.1.3511': attribute type 3 has an invalid length. [ 672.569889][T20155] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 672.587627][T20155] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 672.835066][T20399] Bluetooth: hci2: command 0x0406 tx timeout [ 672.884011][T19782] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 673.175298][T19782] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 673.190006][T19782] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 673.881991][T20447] 8021q: adding VLAN 0 to HW filter on device bond1 [ 674.235647][T20451] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 674.638867][T20468] __nla_validate_parse: 71 callbacks suppressed [ 674.638889][T20468] netlink: 820 bytes leftover after parsing attributes in process `syz.0.3523'. [ 674.655733][T20468] netlink: 820 bytes leftover after parsing attributes in process `syz.0.3523'. [ 674.698714][T20453] lo speed is unknown, defaulting to 1000 [ 675.121238][T20481] netlink: 'syz.0.3525': attribute type 3 has an invalid length. [ 675.139764][T20481] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3525'. [ 676.392666][T20504] netlink: 'syz.4.3530': attribute type 142 has an invalid length. [ 676.845607][T12538] net_ratelimit: 26 callbacks suppressed [ 676.845628][T12538] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 676.865639][T12538] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 676.997092][ T7178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.074619][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.076707][T20155] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 677.316124][T20453] lo speed is unknown, defaulting to 1000 [ 677.338946][T20511] tipc: Started in network mode [ 677.353217][T20511] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 677.373265][T20511] tipc: Enabled bearer , priority 31 [ 677.474659][T20036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.491759][T19781] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 677.508063][T19781] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 677.684265][T19782] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 677.703446][T20528] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3536'. [ 677.848265][T20530] netlink: 'syz.1.3537': attribute type 3 has an invalid length. [ 677.881839][T20530] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3537'. [ 678.035062][ T7178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.149197][T20533] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3538'. [ 678.485023][ T7178] tipc: Node number set to 10136234 [ 678.872643][T20561] siw: device registration error -23 [ 678.962146][T20563] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3545'. [ 679.757078][T20578] netlink: 'syz.3.3550': attribute type 3 has an invalid length. [ 679.796641][T20578] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3550'. [ 680.216136][T20593] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3554'. [ 681.005065][T20164] dummy0: left promiscuous mode [ 681.272826][T20591] lo speed is unknown, defaulting to 1000 [ 681.980264][T20624] Bluetooth: MGMT ver 1.23 [ 682.134217][T12538] net_ratelimit: 29 callbacks suppressed [ 682.134272][T12538] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 682.158072][T12538] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 682.204221][T20031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.324602][T19781] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 682.688892][T20591] lo speed is unknown, defaulting to 1000 [ 682.774027][T19782] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 682.788662][T19782] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 682.894249][T19782] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 683.234423][T20031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.392337][T19782] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 683.410448][T19782] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 683.554921][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 683.710526][T20655] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3567'. [ 683.871060][T20657] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3568'. [ 684.035506][ T4943] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 684.037755][T20399] Bluetooth: hci2: command 0x0406 tx timeout [ 684.691994][T20672] netlink: 'syz.1.3574': attribute type 14 has an invalid length. [ 684.726614][T20672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3574'. [ 685.363239][T20680] netlink: 'syz.2.3577': attribute type 1 has an invalid length. [ 685.496934][T20683] netlink: 'syz.2.3577': attribute type 1 has an invalid length. [ 685.570828][T20683] netlink: 'syz.2.3577': attribute type 1 has an invalid length. [ 685.618344][T20680] 8021q: adding VLAN 0 to HW filter on device bond1 [ 685.651964][T20685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3578'. [ 685.733754][T20682] bond1: (slave geneve2): making interface the new active one [ 685.787253][T20682] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 686.113438][T20692] Cannot find del_set index 0 as target [ 686.641275][T20687] ip6gre1: left promiscuous mode [ 686.990115][T20701] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 687.047033][T20701] bond2 (unregistering): Released all slaves [ 687.398321][ T7178] net_ratelimit: 27 callbacks suppressed [ 687.398345][ T7178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.574416][T20169] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 687.588585][T20169] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 687.683708][T20169] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 687.715030][T20036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.889191][T20727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3589'. [ 687.915768][T20727] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 688.187609][T20169] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 688.202369][T20169] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 688.295580][T20737] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3592'. [ 688.323083][T20169] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 688.435542][ T7178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.776040][T20751] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3598'. [ 688.818333][T20751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3598'. [ 688.836328][T20752] pim6reg1: entered promiscuous mode [ 688.853295][T20752] pim6reg1: entered allmulticast mode [ 688.895930][T20751] vlan0: entered allmulticast mode [ 688.921950][T20751] erspan0: entered allmulticast mode [ 688.939085][T20759] xt_l2tp: wrong L2TP version: 0 [ 688.976350][T20760] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3600'. [ 689.012091][T20760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3600'. [ 689.197923][T20764] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3602'. [ 689.354825][T20764] bond0: entered promiscuous mode [ 689.402848][T20764] bond_slave_0: entered promiscuous mode [ 689.450743][T20764] bond_slave_1: entered promiscuous mode [ 689.527611][T20764] bond0: left promiscuous mode [ 689.563158][T20764] bond_slave_0: left promiscuous mode [ 689.588042][T20764] bond_slave_1: left promiscuous mode [ 689.772652][T20775] lo speed is unknown, defaulting to 1000 [ 690.111599][T20795] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3609'. [ 690.136125][T20798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3610'. [ 690.482420][T20805] lo speed is unknown, defaulting to 1000 [ 690.598562][T20806] ip6tnl1: entered allmulticast mode [ 691.188492][T20775] lo speed is unknown, defaulting to 1000 [ 692.140869][T20805] lo speed is unknown, defaulting to 1000 [ 692.409748][T20847] __nla_validate_parse: 1 callbacks suppressed [ 692.409805][T20847] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3624'. [ 692.435530][T20155] net_ratelimit: 28 callbacks suppressed [ 692.435551][T20155] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 692.455553][T20155] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 692.489708][T20155] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 692.532542][T20844] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3624'. [ 692.596071][T20031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.998609][T20846] bridge1: entered promiscuous mode [ 693.005455][T20846] bridge1: entered allmulticast mode [ 693.011996][T20155] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 693.026524][T20155] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 693.031552][T20846] team0: Port device bridge1 added [ 693.051246][T20848] bridge0: port 3(team0) entered blocking state [ 693.080134][T20155] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 693.106388][T20848] bridge0: port 3(team0) entered disabled state [ 693.116173][T20848] team0: entered allmulticast mode [ 693.122117][T20848] team_slave_0: entered allmulticast mode [ 693.132919][T20848] team_slave_1: entered allmulticast mode [ 693.157890][T20848] team0: entered promiscuous mode [ 693.164553][T20848] team_slave_0: entered promiscuous mode [ 693.171462][T20848] team_slave_1: entered promiscuous mode [ 693.203945][T20848] bridge0: port 3(team0) entered blocking state [ 693.213210][T20848] bridge0: port 3(team0) entered forwarding state [ 693.462925][T20847] lo speed is unknown, defaulting to 1000 [ 693.584674][T19782] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 693.601468][T19782] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 693.636704][T20031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.297573][T20847] lo speed is unknown, defaulting to 1000 [ 695.556907][T20898] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3639'. [ 695.592587][T20898] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3639'. [ 695.855854][T20910] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3643'. [ 695.889269][T20912] netlink: 'syz.2.3642': attribute type 30 has an invalid length. [ 696.816557][T20930] veth1_macvtap: left promiscuous mode [ 696.847693][T20930] macsec0: entered allmulticast mode [ 696.899922][T20932] veth1_macvtap: entered promiscuous mode [ 696.909093][T20932] veth1_macvtap: entered allmulticast mode [ 696.921426][T20932] macsec0: left allmulticast mode [ 696.929593][T20932] veth1_macvtap: left allmulticast mode [ 697.534644][T20947] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3654'. [ 697.764661][T20155] net_ratelimit: 27 callbacks suppressed [ 697.764719][T20155] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 697.787085][T20155] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 697.819191][ T7178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.960889][T20155] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 698.034607][T20957] syzkaller0: entered promiscuous mode [ 698.063113][T20957] syzkaller0: entered allmulticast mode [ 698.435175][ T4943] Bluetooth: hci1: command 0x0406 tx timeout [ 698.445755][T20976] sctp: [Deprecated]: syz.0.3662 (pid 20976) Use of int in maxseg socket option. [ 698.445755][T20976] Use struct sctp_assoc_value instead [ 698.470987][T19781] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 698.487304][T19781] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 698.575716][T20979] netlink: 'syz.3.3663': attribute type 1 has an invalid length. [ 698.583744][T20979] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3663'. [ 698.621298][T20159] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 698.801975][T20986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3666'. [ 698.834327][ T7174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.024205][T20159] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 699.040650][T20159] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 699.126859][T20992] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3667'. [ 699.298454][T21005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3667'. [ 699.478616][T21009] bridge0: port 1(erspan0) entered blocking state [ 699.488466][T21009] bridge0: port 1(erspan0) entered disabled state [ 699.501151][T21009] erspan0: entered allmulticast mode [ 699.571787][T21015] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3675'. [ 699.592584][T21009] erspan0: entered promiscuous mode [ 699.603907][T21009] bridge0: port 1(erspan0) entered blocking state [ 699.611379][T21009] bridge0: port 1(erspan0) entered forwarding state [ 699.840532][T21023] syzkaller0: entered promiscuous mode [ 699.870177][T21023] syzkaller0: entered allmulticast mode [ 702.554807][T21015] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 702.924695][T20036] net_ratelimit: 26 callbacks suppressed [ 702.924730][T20036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.995251][ T7178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.062497][T21065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3685'. [ 703.087873][T21066] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.3688'. [ 703.194217][T19781] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 703.211105][T19781] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 703.237010][T21069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3689'. [ 703.289863][T20162] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 703.636544][T21080] team0: entered promiscuous mode [ 703.667655][T21080] team_slave_0: entered promiscuous mode [ 703.701709][T21080] team_slave_1: entered promiscuous mode [ 703.758822][T21080] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 703.786933][ T9113] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 703.801784][ T9113] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 703.905825][ T9113] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 703.987690][T21086] lo speed is unknown, defaulting to 1000 [ 704.037401][ T7178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.228022][T21099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3699'. [ 704.239452][T21099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3699'. [ 704.251242][T21099] netlink: 'syz.4.3699': attribute type 7 has an invalid length. [ 704.368917][T20159] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 704.369243][T21099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3699'. [ 704.394030][T21099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3699'. [ 704.405132][T20159] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 704.428100][T21099] netlink: 'syz.4.3699': attribute type 7 has an invalid length. [ 704.440135][T20159] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 704.478631][T20159] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 704.781426][T21107] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3702'. [ 704.940178][T21106] lo speed is unknown, defaulting to 1000 [ 705.033200][T21086] lo speed is unknown, defaulting to 1000 [ 705.125095][T21113] netlink: 21 bytes leftover after parsing attributes in process `syz.4.3704'. [ 705.165245][T21114] FAULT_INJECTION: forcing a failure. [ 705.165245][T21114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 705.212438][T21114] CPU: 1 UID: 0 PID: 21114 Comm: syz.3.3703 Not tainted syzkaller #0 PREEMPT(full) [ 705.212470][T21114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 705.212484][T21114] Call Trace: [ 705.212492][T21114] [ 705.212503][T21114] dump_stack_lvl+0xe8/0x150 [ 705.212535][T21114] should_fail_ex+0x412/0x560 [ 705.212697][T21114] _copy_from_user+0x2d/0xb0 [ 705.212758][T21114] __sys_bpf+0x229/0x950 [ 705.212796][T21114] ? __pfx___sys_bpf+0x10/0x10 [ 705.212848][T21114] ? ksys_write+0x242/0x270 [ 705.212884][T21114] ? __pfx_ksys_write+0x10/0x10 [ 705.212913][T21114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.212942][T21114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.212966][T21114] __x64_sys_bpf+0x7c/0x90 [ 705.212998][T21114] do_syscall_64+0x15f/0xf80 [ 705.213021][T21114] ? clear_bhb_loop+0x40/0x90 [ 705.213049][T21114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.213071][T21114] RIP: 0033:0x7faa2d59cdd9 [ 705.213092][T21114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 705.213110][T21114] RSP: 002b:00007faa2e48e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 705.213134][T21114] RAX: ffffffffffffffda RBX: 00007faa2d815fa0 RCX: 00007faa2d59cdd9 [ 705.213151][T21114] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 705.213165][T21114] RBP: 00007faa2e48e090 R08: 0000000000000000 R09: 0000000000000000 [ 705.213178][T21114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 705.213191][T21114] R13: 00007faa2d816038 R14: 00007faa2d815fa0 R15: 00007fffe49bdf48 [ 705.213227][T21114] [ 706.047123][T21106] lo speed is unknown, defaulting to 1000 [ 706.327395][T21130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3710'. [ 707.999708][T21144] bond1: option primary_reselect: invalid value (133) [ 708.055697][T20162] net_ratelimit: 25 callbacks suppressed [ 708.055721][T20162] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 708.075621][T20162] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 708.160173][T21144] bond1 (unregistering): Released all slaves [ 708.167799][T21148] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 708.175893][T21148] __nla_validate_parse: 3 callbacks suppressed [ 708.175910][T21148] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3714'. [ 708.186586][T20159] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 708.207430][T20031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.421802][T21155] FAULT_INJECTION: forcing a failure. [ 708.421802][T21155] name failslab, interval 1, probability 0, space 0, times 0 [ 708.453870][T21153] netlink: 'syz.4.3715': attribute type 10 has an invalid length. [ 708.464077][T21155] CPU: 0 UID: 0 PID: 21155 Comm: syz.0.3716 Not tainted syzkaller #0 PREEMPT(full) [ 708.464107][T21155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 708.464119][T21155] Call Trace: [ 708.464127][T21155] [ 708.464137][T21155] dump_stack_lvl+0xe8/0x150 [ 708.464167][T21155] should_fail_ex+0x412/0x560 [ 708.464200][T21155] should_failslab+0xa8/0x100 [ 708.464235][T21155] __kmalloc_noprof+0xe8/0x760 [ 708.464264][T21155] ? bpf_test_init+0x9f/0x150 [ 708.464376][T21155] bpf_test_init+0x9f/0x150 [ 708.464410][T21155] bpf_prog_test_run_xdp+0x529/0x1160 [ 708.464460][T21155] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 708.464498][T21155] ? __fget_files+0x2a/0x420 [ 708.464531][T21155] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 708.464565][T21155] bpf_prog_test_run+0x2c7/0x340 [ 708.464592][T21155] __sys_bpf+0x643/0x950 [ 708.464628][T21155] ? __pfx___sys_bpf+0x10/0x10 [ 708.464686][T21155] ? ksys_write+0x242/0x270 [ 708.464721][T21155] ? __pfx_ksys_write+0x10/0x10 [ 708.464758][T21155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.464783][T21155] __x64_sys_bpf+0x7c/0x90 [ 708.464819][T21155] do_syscall_64+0x15f/0xf80 [ 708.464839][T21155] ? trace_irq_disable+0x3b/0x140 [ 708.464871][T21155] ? clear_bhb_loop+0x40/0x90 [ 708.464898][T21155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.464920][T21155] RIP: 0033:0x7f17cdb9cdd9 [ 708.464940][T21155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.464960][T21155] RSP: 002b:00007f17ce9cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 708.464983][T21155] RAX: ffffffffffffffda RBX: 00007f17cde15fa0 RCX: 00007f17cdb9cdd9 [ 708.464999][T21155] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 708.465012][T21155] RBP: 00007f17ce9cf090 R08: 0000000000000000 R09: 0000000000000000 [ 708.465026][T21155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.465038][T21155] R13: 00007f17cde16038 R14: 00007f17cde15fa0 R15: 00007fff8c838988 [ 708.465072][T21155] [ 708.465779][T21153] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3715'. [ 708.768956][T20155] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 708.784059][T20155] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 708.884449][T20162] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 709.034739][T20036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.073893][T21156] lo speed is unknown, defaulting to 1000 [ 709.234560][ T7174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.253645][T21164] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3718'. [ 709.384037][T20155] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 709.614726][T21168] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 709.660690][T21156] lo speed is unknown, defaulting to 1000 [ 710.047916][T21182] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3725'. [ 710.058721][T21182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3725'. [ 710.161799][T21186] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3726'. [ 710.188782][T21188] FAULT_INJECTION: forcing a failure. [ 710.188782][T21188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 710.209828][T21188] CPU: 1 UID: 0 PID: 21188 Comm: syz.3.3727 Not tainted syzkaller #0 PREEMPT(full) [ 710.209860][T21188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 710.209874][T21188] Call Trace: [ 710.209882][T21188] [ 710.209891][T21188] dump_stack_lvl+0xe8/0x150 [ 710.209923][T21188] should_fail_ex+0x412/0x560 [ 710.209959][T21188] _copy_from_user+0x2d/0xb0 [ 710.209993][T21188] bpf_test_init+0xd8/0x150 [ 710.210030][T21188] bpf_prog_test_run_xdp+0x529/0x1160 [ 710.210080][T21188] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 710.210119][T21188] ? __fget_files+0x2a/0x420 [ 710.210152][T21188] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 710.210186][T21188] bpf_prog_test_run+0x2c7/0x340 [ 710.210213][T21188] __sys_bpf+0x643/0x950 [ 710.210249][T21188] ? __pfx___sys_bpf+0x10/0x10 [ 710.210300][T21188] ? ksys_write+0x242/0x270 [ 710.210334][T21188] ? __pfx_ksys_write+0x10/0x10 [ 710.210372][T21188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.210396][T21188] __x64_sys_bpf+0x7c/0x90 [ 710.210427][T21188] do_syscall_64+0x15f/0xf80 [ 710.210457][T21188] ? trace_irq_disable+0x3b/0x140 [ 710.210489][T21188] ? clear_bhb_loop+0x40/0x90 [ 710.210516][T21188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.210538][T21188] RIP: 0033:0x7faa2d59cdd9 [ 710.210558][T21188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.210578][T21188] RSP: 002b:00007faa2e48e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 710.210601][T21188] RAX: ffffffffffffffda RBX: 00007faa2d815fa0 RCX: 00007faa2d59cdd9 [ 710.210617][T21188] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 710.210631][T21188] RBP: 00007faa2e48e090 R08: 0000000000000000 R09: 0000000000000000 [ 710.210644][T21188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 710.210657][T21188] R13: 00007faa2d816038 R14: 00007faa2d815fa0 R15: 00007fffe49bdf48 [ 710.210693][T21188] [ 710.563743][T21195] vcan0: tx drop: invalid da for name 0xfffffffffffffffe [ 710.641254][T21201] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3731'. [ 710.883409][T21220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3736'. [ 710.975638][T21224] tap0: tun_chr_ioctl cmd 1074025680 [ 710.981921][T21225] FAULT_INJECTION: forcing a failure. [ 710.981921][T21225] name failslab, interval 1, probability 0, space 0, times 0 [ 711.007370][T21225] CPU: 0 UID: 0 PID: 21225 Comm: syz.4.3738 Not tainted syzkaller #0 PREEMPT(full) [ 711.007399][T21225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 711.007412][T21225] Call Trace: [ 711.007421][T21225] [ 711.007430][T21225] dump_stack_lvl+0xe8/0x150 [ 711.007462][T21225] should_fail_ex+0x412/0x560 [ 711.007497][T21225] should_failslab+0xa8/0x100 [ 711.007534][T21225] __kvmalloc_node_noprof+0x178/0x8a0 [ 711.007567][T21225] ? bpf_test_run_xdp_live+0x1f2/0x1cf0 [ 711.007611][T21225] bpf_test_run_xdp_live+0x1f2/0x1cf0 [ 711.007650][T21225] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 711.007694][T21225] ? __pfx_autoremove_wake_function+0x10/0x10 [ 711.007730][T21225] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 711.007785][T21225] ? 0xffffffffa020519c [ 711.007803][T21225] ? 0xffffffffa020629c [ 711.007820][T21225] ? 0xffffffffa02062d4 [ 711.007837][T21225] ? 0xffffffffa0207be8 [ 711.007881][T21225] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 711.007997][T21225] ? _copy_from_user+0x94/0xb0 [ 711.008027][T21225] ? bpf_test_init+0x113/0x150 [ 711.008053][T21225] ? xdp_convert_md_to_buff+0x5b/0x330 [ 711.008085][T21225] bpf_prog_test_run_xdp+0x81c/0x1160 [ 711.008131][T21225] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 711.008167][T21225] ? __fget_files+0x2a/0x420 [ 711.008198][T21225] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 711.008335][T21225] bpf_prog_test_run+0x2c7/0x340 [ 711.008362][T21225] __sys_bpf+0x643/0x950 [ 711.008396][T21225] ? __pfx___sys_bpf+0x10/0x10 [ 711.008443][T21225] ? ksys_write+0x242/0x270 [ 711.008475][T21225] ? __pfx_ksys_write+0x10/0x10 [ 711.008509][T21225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.008533][T21225] __x64_sys_bpf+0x7c/0x90 [ 711.008562][T21225] do_syscall_64+0x15f/0xf80 [ 711.008581][T21225] ? trace_irq_disable+0x3b/0x140 [ 711.008612][T21225] ? clear_bhb_loop+0x40/0x90 [ 711.008640][T21225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.008661][T21225] RIP: 0033:0x7f7fadb9cdd9 [ 711.008682][T21225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 711.008700][T21225] RSP: 002b:00007f7faea85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 711.008724][T21225] RAX: ffffffffffffffda RBX: 00007f7fade15fa0 RCX: 00007f7fadb9cdd9 [ 711.008740][T21225] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 711.008754][T21225] RBP: 00007f7faea85090 R08: 0000000000000000 R09: 0000000000000000 [ 711.008768][T21225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 711.008780][T21225] R13: 00007f7fade16038 R14: 00007f7fade15fa0 R15: 00007ffc7d510878 [ 711.008816][T21225] [ 711.761192][ T4943] Bluetooth: hci3: command 0x0405 tx timeout [ 711.988245][T21253] tipc: Enabled bearer , priority 0 [ 712.019356][T21255] vlan0: entered allmulticast mode [ 712.038896][T21255] bridge0: port 4(vlan0) entered blocking state [ 712.050247][T21255] bridge0: port 4(vlan0) entered disabled state [ 712.059888][T21255] vlan0: entered promiscuous mode [ 712.073321][T21259] FAULT_INJECTION: forcing a failure. [ 712.073321][T21259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.095344][T21259] CPU: 1 UID: 0 PID: 21259 Comm: syz.3.3750 Not tainted syzkaller #0 PREEMPT(full) [ 712.095377][T21259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 712.095390][T21259] Call Trace: [ 712.095399][T21259] [ 712.095409][T21259] dump_stack_lvl+0xe8/0x150 [ 712.095439][T21259] should_fail_ex+0x412/0x560 [ 712.095475][T21259] _copy_from_user+0x2d/0xb0 [ 712.095510][T21259] bpf_test_init+0xd8/0x150 [ 712.095546][T21259] bpf_prog_test_run_xdp+0x529/0x1160 [ 712.095598][T21259] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 712.095636][T21259] ? __fget_files+0x2a/0x420 [ 712.095669][T21259] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 712.095703][T21259] bpf_prog_test_run+0x2c7/0x340 [ 712.095730][T21259] __sys_bpf+0x643/0x950 [ 712.095765][T21259] ? __pfx___sys_bpf+0x10/0x10 [ 712.095816][T21259] ? ksys_write+0x242/0x270 [ 712.095850][T21259] ? __pfx_ksys_write+0x10/0x10 [ 712.095886][T21259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.095910][T21259] __x64_sys_bpf+0x7c/0x90 [ 712.095942][T21259] do_syscall_64+0x15f/0xf80 [ 712.095962][T21259] ? trace_irq_disable+0x3b/0x140 [ 712.095994][T21259] ? clear_bhb_loop+0x40/0x90 [ 712.096021][T21259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.096043][T21259] RIP: 0033:0x7faa2d59cdd9 [ 712.096064][T21259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.096082][T21259] RSP: 002b:00007faa2e48e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 712.096105][T21259] RAX: ffffffffffffffda RBX: 00007faa2d815fa0 RCX: 00007faa2d59cdd9 [ 712.096121][T21259] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 712.096135][T21259] RBP: 00007faa2e48e090 R08: 0000000000000000 R09: 0000000000000000 [ 712.096148][T21259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.096160][T21259] R13: 00007faa2d816038 R14: 00007faa2d815fa0 R15: 00007fffe49bdf48 [ 712.096195][T21259] [ 712.141272][T21253] tipc: Disabling bearer [ 712.354541][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 712.440463][T21270] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3755'. [ 712.495522][T21270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3755'. [ 713.114480][T20159] net_ratelimit: 24 callbacks suppressed [ 713.114500][T20159] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 713.147044][T21307] syzkaller1: tun_chr_ioctl cmd 21731 [ 713.191320][T21303] sctp: [Deprecated]: syz.1.3766 (pid 21303) Use of int in max_burst socket option. [ 713.191320][T21303] Use struct sctp_assoc_value instead [ 713.232847][T20159] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 713.247736][T20159] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 713.546071][T21324] __nla_validate_parse: 7 callbacks suppressed [ 713.546091][T21324] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3769'. [ 713.601751][T21328] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3769'. [ 713.637603][T20031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.700913][T21324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3769'. [ 713.774337][T20169] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 713.835897][T20159] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 713.850057][T20159] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 714.324895][T19781] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 714.475067][T20159] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 714.489837][T20159] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 714.521140][T21354] netlink: 'syz.0.3778': attribute type 10 has an invalid length. [ 714.588916][T21354] team0: Port device dummy0 added [ 714.595567][T21362] netlink: 'syz.0.3778': attribute type 10 has an invalid length. [ 714.621244][T21362] team0: Port device dummy0 removed [ 714.650221][T21362] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 715.111570][T21382] bridge0: port 3(team0) entered disabled state [ 715.118196][T21382] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.138228][T21382] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.160195][T21392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3789'. [ 715.304412][T21382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 715.316925][T21382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 715.421553][T20155] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.431712][T20155] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.441815][T20155] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.451401][T20155] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.614515][T21404] syzkaller0: entered promiscuous mode [ 715.631311][T21404] syzkaller0: entered allmulticast mode [ 715.882535][T21419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3798'. [ 715.995021][T21426] tipc: Started in network mode [ 716.000167][T21426] tipc: Node identity ac14140f, cluster identity 4711 [ 716.007500][T21426] tipc: New replicast peer: 255.255.255.255 [ 716.014450][T21426] tipc: Enabled bearer , priority 26 [ 716.355995][T21445] xt_hashlimit: size too large, truncated to 1048576 [ 716.634220][T21460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3813'. [ 716.658816][T21460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3813'. [ 717.071833][T20034] tipc: Node number set to 2886997007 [ 717.575592][T21467] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 717.729790][T21513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3829'. [ 717.731186][T21515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3829'. [ 717.908756][T21513] bridge3: port 1(veth3) entered blocking state [ 717.940065][T21513] bridge3: port 1(veth3) entered disabled state [ 717.975856][T21513] veth3: entered allmulticast mode [ 718.001516][T21513] veth3: entered promiscuous mode [ 718.035003][T21515] bridge3: port 2(veth0_to_bond) entered blocking state [ 718.065644][T21523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3824'. [ 718.075190][T21515] bridge3: port 2(veth0_to_bond) entered disabled state [ 718.076227][T21515] veth0_to_bond: entered allmulticast mode [ 718.091327][T21515] veth0_to_bond: entered promiscuous mode [ 718.186862][T21525] xfrm0: entered allmulticast mode [ 718.208884][T21525] net_ratelimit: 26 callbacks suppressed [ 718.208907][T21525] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 718.503783][T19782] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 718.523336][T21534] netlink: 'syz.4.3836': attribute type 1 has an invalid length. [ 718.537688][T21541] netlink: 'syz.0.3837': attribute type 1 has an invalid length. [ 718.599086][T21534] 8021q: adding VLAN 0 to HW filter on device bond2 [ 718.620596][T20159] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 718.620635][T20159] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 718.656221][T20034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.719940][T21549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3838'. [ 718.836566][ T7178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.852884][T21538] netlink: 'syz.1.3838': attribute type 8 has an invalid length. [ 719.036815][T21568] netlink: 277 bytes leftover after parsing attributes in process `syz.1.3842'. [ 719.074726][T20155] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 719.124053][T20159] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 719.138361][T20159] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 719.319026][T21580] netlink: 211856 bytes leftover after parsing attributes in process `syz.4.3846'. [ 719.331417][ T7190] IPVS: starting estimator thread 0... [ 719.425391][T21581] IPVS: using max 24 ests per chain, 57600 per kthread [ 719.594043][T19782] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 720.019324][T21600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3853'. [ 720.275116][T21604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3856'. [ 720.479971][T21620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3861'. [ 720.582789][T21620] syzkaller0: entered promiscuous mode [ 720.606678][T21620] syzkaller0: entered allmulticast mode [ 720.741603][T21620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3861'. [ 721.127786][T21647] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3870'. [ 721.150336][T21647] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3870'. [ 721.371745][T21652] tipc: Enabled bearer , priority 0 [ 721.566737][T21651] syzkaller0: entered promiscuous mode [ 721.572289][T21651] syzkaller0: entered allmulticast mode [ 721.581991][T21662] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3874'. [ 721.594742][T21651] tipc: Resetting bearer [ 722.548373][T20169] tipc: Resetting bearer [ 722.568529][T21644] tipc: Resetting bearer [ 723.347899][ T9113] net_ratelimit: 26 callbacks suppressed [ 723.347919][ T9113] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 723.454162][ T9113] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 723.468701][ T9113] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 723.878605][T19781] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 723.994195][T19781] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 724.008642][T19781] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 724.046055][T20031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.155895][ T4943] Bluetooth: hci0: command 0x0406 tx timeout [ 724.414308][ T9113] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 724.535665][T20159] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 724.550040][T20159] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 726.443327][T21644] tipc: Disabling bearer [ 726.492987][T21683] bridge2: entered promiscuous mode [ 728.373385][T19781] net_ratelimit: 25 callbacks suppressed [ 728.373407][T19781] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 728.394315][T19781] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 728.664157][T19781] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 728.915191][T20162] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 728.929546][T20162] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 729.235774][T20162] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 729.235928][ T7174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.452908][T19781] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 729.467066][T19781] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 729.780680][ T9113] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 732.195409][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 733.394264][ T7178] net_ratelimit: 24 callbacks suppressed [ 733.394289][ T7178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.549803][ T9113] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 733.704172][T20155] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 733.718711][T20155] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 734.074100][T20155] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 734.208267][T20034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.315780][ T9113] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 734.331250][ T9113] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 734.434381][ T7174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.639900][T20155] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 738.409344][T19781] net_ratelimit: 25 callbacks suppressed [ 738.409362][T19781] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 738.594559][ T7174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.604343][T19782] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 738.620194][T19782] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 738.962360][T20155] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 739.144282][ T9113] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 739.158877][ T9113] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 739.402739][T20399] Bluetooth: hci3: command 0x0405 tx timeout [ 739.484112][T20155] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 739.634282][ T7174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.727805][T20169] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 743.454423][T20169] net_ratelimit: 24 callbacks suppressed [ 743.454441][T20169] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 743.474182][T20169] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 743.499661][T20029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.794263][ T7174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.822226][T19782] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 744.040627][T19781] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 744.054882][T19781] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 744.344101][T20155] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 744.582881][T20155] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 744.598260][T20155] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 748.619057][T20162] net_ratelimit: 31 callbacks suppressed [ 748.619080][T20162] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 748.904314][T20162] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 748.919748][T20162] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 748.994327][ T7178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.144071][ T9113] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 749.444417][T19782] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 749.458519][T19782] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 749.664179][T19782] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 750.033792][T20169] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 750.035790][ T7174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.249859][T21692] rdma_rxe: rxe_newlink: failed to add lo [ 751.270966][T21696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3886'. [ 751.294144][T21696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3886'. [ 751.333316][T21699] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3888'. [ 751.712790][T21712] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.853766][T21722] lo speed is unknown, defaulting to 1000 [ 751.974997][T21732] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3896'. [ 752.262690][T21712] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.410376][T21722] lo speed is unknown, defaulting to 1000 [ 752.475018][T21749] tipc: Started in network mode [ 752.480125][T21749] tipc: Node identity ac14140f, cluster identity 4711 [ 752.487307][T21749] tipc: New replicast peer: 255.255.255.255 [ 752.494090][T21749] tipc: Enabled bearer , priority 26 [ 752.565488][T21750] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 752.578431][T21750] syzkaller0: entered promiscuous mode [ 752.583965][T21750] syzkaller0: entered allmulticast mode [ 752.756361][T21712] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.864837][T21757] netlink: 'syz.2.3904': attribute type 1 has an invalid length. [ 752.906660][T21757] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3904'. [ 753.126850][T21767] ip6gre1: entered promiscuous mode [ 753.132228][T21767] ip6gre1: entered allmulticast mode [ 753.268698][T21712] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.385773][T21778] team0: entered promiscuous mode [ 753.390894][T21778] team_slave_0: entered promiscuous mode [ 753.404242][T21778] team_slave_1: entered promiscuous mode [ 753.565731][ T7190] tipc: Node number set to 2886997007 [ 753.704095][T20162] net_ratelimit: 28 callbacks suppressed [ 753.704125][T20162] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 753.726173][T20162] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 753.916829][T19782] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.981885][T21790] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 754.011432][T19782] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 754.038168][T21790] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 754.063333][T21790] veth0_virt_wifi: entered allmulticast mode [ 754.189853][T21790] veth0_virt_wifi: entered promiscuous mode [ 754.197909][ T7178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.226807][T21790] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 754.234951][T21790] bridge0: port 3(veth0_virt_wifi) entered forwarding state [ 754.261001][T20162] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.327866][T19782] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 754.342186][T19782] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 754.419868][T19781] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.542139][T19782] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.592342][T19782] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 754.928245][T19781] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 754.942907][T19781] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 755.143044][T21826] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3925'. [ 755.160898][T19782] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 755.178609][T21826] netlink: 'syz.0.3925': attribute type 3 has an invalid length. [ 755.187114][T21826] netlink: 'syz.0.3925': attribute type 2 has an invalid length. [ 755.197823][T21826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3925'. [ 755.246489][T21827] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 755.307709][T21827] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 755.316784][T21827] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 755.465128][T21834] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3927'. [ 755.485459][T21834] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3927'. [ 755.760250][T21849] FAULT_INJECTION: forcing a failure. [ 755.760250][T21849] name failslab, interval 1, probability 0, space 0, times 0 [ 755.773110][T21849] CPU: 1 UID: 0 PID: 21849 Comm: syz.3.3931 Not tainted syzkaller #0 PREEMPT(full) [ 755.773137][T21849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 755.773148][T21849] Call Trace: [ 755.773159][T21849] [ 755.773167][T21849] dump_stack_lvl+0xe8/0x150 [ 755.773195][T21849] should_fail_ex+0x412/0x560 [ 755.773225][T21849] should_failslab+0xa8/0x100 [ 755.773255][T21849] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 755.773282][T21849] ? __alloc_skb+0x186/0x7d0 [ 755.773387][T21849] ? __alloc_skb+0x1d0/0x7d0 [ 755.773410][T21849] ? __local_bh_enable_ip+0xd0/0x130 [ 755.773433][T21849] __alloc_skb+0x1d0/0x7d0 [ 755.773464][T21849] netlink_sendmsg+0x5d4/0xb40 [ 755.773530][T21849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 755.773560][T21849] ? aa_sock_msg_perm+0xf1/0x1b0 [ 755.773588][T21849] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 755.773616][T21849] ____sys_sendmsg+0x972/0x9f0 [ 755.773645][T21849] ? __might_fault+0xaf/0x130 [ 755.773675][T21849] ? __pfx_____sys_sendmsg+0x10/0x10 [ 755.773711][T21849] ? import_iovec+0x73/0xa0 [ 755.773778][T21849] ___sys_sendmsg+0x2a5/0x360 [ 755.773804][T21849] ? __lock_acquire+0x6b5/0x2cf0 [ 755.773829][T21849] ? __pfx____sys_sendmsg+0x10/0x10 [ 755.773891][T21849] ? __fget_files+0x2a/0x420 [ 755.773911][T21849] ? __fget_files+0x3a0/0x420 [ 755.773942][T21849] __x64_sys_sendmsg+0x1bd/0x2a0 [ 755.773973][T21849] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 755.774012][T21849] ? __pfx_ksys_write+0x10/0x10 [ 755.774047][T21849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.774066][T21849] do_syscall_64+0x15f/0xf80 [ 755.774084][T21849] ? trace_irq_disable+0x3b/0x140 [ 755.774112][T21849] ? clear_bhb_loop+0x40/0x90 [ 755.774134][T21849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.774152][T21849] RIP: 0033:0x7faa2d59cdd9 [ 755.774172][T21849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.774186][T21849] RSP: 002b:00007faa2e48e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 755.774205][T21849] RAX: ffffffffffffffda RBX: 00007faa2d815fa0 RCX: 00007faa2d59cdd9 [ 755.774218][T21849] RDX: 0000000000020040 RSI: 0000200000000840 RDI: 0000000000000004 [ 755.774229][T21849] RBP: 00007faa2e48e090 R08: 0000000000000000 R09: 0000000000000000 [ 755.774240][T21849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 755.774250][T21849] R13: 00007faa2d816038 R14: 00007faa2d815fa0 R15: 00007fffe49bdf48 [ 755.774279][T21849] [ 756.397078][T21865] netlink: 'syz.2.3938': attribute type 9 has an invalid length. [ 756.424576][T21865] bridge4: entered allmulticast mode [ 756.472220][T20162] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.484958][T20162] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.507439][T20162] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.539807][T20162] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.553380][T21868] lo speed is unknown, defaulting to 1000 [ 756.696901][T21875] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3939'. [ 756.942347][T21881] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3941'. [ 757.235024][T21891] bond4: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 757.283326][T21891] bond4 (unregistering): Released all slaves [ 757.470616][T21868] lo speed is unknown, defaulting to 1000 [ 757.501822][T21902] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3948'. [ 757.753547][T21909] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 757.801454][T21909] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.007176][T21915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3951'. [ 758.039925][T21919] tipc: Enabled bearer , priority 0 [ 758.047579][T21920] syzkaller0: entered promiscuous mode [ 758.053121][T21920] syzkaller0: entered allmulticast mode [ 758.157653][T21920] tipc: Resetting bearer [ 758.195141][T21920] tipc: Disabling bearer [ 758.780544][T21909] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.809098][T19781] net_ratelimit: 18 callbacks suppressed [ 758.809120][T19781] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 758.830014][T19781] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 758.879213][T21909] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.028744][T19781] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 759.363652][T21940] bond4: option lacp_active: invalid value (8) [ 759.378999][T21940] bond4 (unregistering): Released all slaves [ 759.386172][T20169] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 759.400768][T20169] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 759.577652][T20169] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 759.734222][T21909] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 759.744598][T21909] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.846498][T21953] netlink: 'syz.1.3961': attribute type 8 has an invalid length. [ 759.952612][T19781] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 759.966779][T19781] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 760.164529][T20169] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 760.193161][T21964] openvswitch: netlink: IP tunnel dst address not specified [ 760.693348][T21909] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 760.703785][T21909] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.034458][T21981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3970'. [ 761.447337][T20155] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.455971][T20155] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.536149][T22007] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3978'. [ 761.648516][T19782] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.664911][T19782] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.682526][T19782] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.691292][T19782] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.715269][T20162] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.773942][ T9053] unregister_netdevice: waiting for bond9 to become free. Usage count = 2 [ 761.788879][T20162] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.876896][T22011] netlink: 'syz.2.3979': attribute type 1 has an invalid length. [ 761.911093][T22014] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3980'. [ 761.926462][T22014] netlink: 'syz.1.3980': attribute type 3 has an invalid length. [ 761.934264][T22014] netlink: 'syz.1.3980': attribute type 2 has an invalid length. [ 761.942028][T22014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3980'. [ 763.984398][T20155] net_ratelimit: 20 callbacks suppressed [ 763.984416][T20155] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 764.232480][T20169] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 764.247435][T20169] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 764.578791][ T9113] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 764.764046][T20162] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 764.778074][T20162] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 765.132915][T20162] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 765.350224][ T9113] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 765.364829][ T9113] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 765.654279][T20169] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 769.130681][ T9113] net_ratelimit: 18 callbacks suppressed [ 769.130727][ T9113] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 769.150406][ T9113] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 769.384218][T20159] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 769.723290][T20159] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 769.737925][T20159] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 769.904099][T20159] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 770.368308][ T9113] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 770.383145][ T9113] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 770.424088][ T9113] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 770.907435][T20169] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a