last executing test programs: 3.859591822s ago: executing program 3 (id=543): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f0000000340)=""/224, 0xe0, 0x0, &(0x7f0000000280)=""/79, 0x4f}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003648cb8c11000000d000000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000a40)="e0856497ba6cf0f21a0000000010", 0x0, 0x20000702, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0xffffffff}]}, 0x30}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x8d) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)=ANY=[@ANYBLOB="1c000003190001002bbd6000fcdbdf250a202003ff04fd0700000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4) setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYRES8], 0x1) r7 = socket$inet6(0xa, 0x3, 0x7) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000540)={@dev={0xac, 0x14, 0x14, 0x14}, @loopback, r10}, 0xc) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000000)={@remote, 0x3, r9}) r12 = socket(0x11, 0x6, 0xc) setsockopt$inet6_int(r12, 0x29, 0x10, &(0x7f0000000000)=0x3, 0xfedf) ioctl(r12, 0x9e, &(0x7f0000000000)) ioctl(r12, 0x8936, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r13, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}}}}]}, 0x58}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) unshare(0x24060400) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(r7, 0x8981, &(0x7f0000000580)={'geneve1\x00', 0x6d}) close(r1) 3.567699053s ago: executing program 3 (id=548): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000000c0)="d7dc00fc00ffffffdf009a27012f27000000000000000000", 0x18) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4000) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000034000580300001800e000100696d6d656469617465"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3}}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4000) r7 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000002000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000ffffeb0723d900"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r10}, @call={0x85, 0x0, 0x0, 0x75}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r11}, 0x10) getsockopt$EBT_SO_GET_ENTRIES(r7, 0x0, 0x81, 0x0, &(0x7f00000002c0)) 3.242584361s ago: executing program 4 (id=553): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0xa, 0x5, 0x7, 0xc1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r4 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000001940)={r4, 0x1, 0x3}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x200000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000280)=0xd00, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x8, 0x17, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="85e3de50d5b66bd8f1ff08251a6c", 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f0000000000)="fc0000", 0x3) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6(0xa, 0x80002, 0x88) socket$inet6_sctp(0xa, 0x801, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffd, 0x3, 0x20, 0x9, 0x4}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0xfffffffffffffffe, 0x9, 0x5, 0x3, 0x4, 0x20}, 0x0, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) splice(r8, 0x0, r10, 0x0, 0x4a0a, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.122732667s ago: executing program 1 (id=554): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x49b, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETINFOOLD(r2, 0x89e3, &(0x7f0000000180)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000002c0)}}], 0x1, 0x4008040) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001440)=ANY=[], 0xc4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, 0x0, 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0}}, 0xffffffffffffff2e) socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4004104) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$kcm(0x2, 0xa, 0x2) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet_tcp_buf(r1, 0x6, 0xb, &(0x7f0000001780)="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", 0x1000) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001080)={0x10, 0x2d, 0x1}, 0x10}], 0x1}, 0x300) 2.703239092s ago: executing program 1 (id=557): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) r2 = socket(0x28, 0x5, 0x0) (async) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r3, 0x4) (async) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) (async) r4 = accept4$unix(r3, 0x0, 0x0, 0x800) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) (async) recvfrom$unix(r4, &(0x7f0000000140)=""/248, 0xffffffffffffff6f, 0x22, 0x0, 0x0) (async) write$tun(r0, &(0x7f0000002280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x1000, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0x8b, 0x29, 0x0, @rand_addr=0x64010120, @broadcast, {[@timestamp_addr={0x44, 0x4, 0xf, 0x1, 0x1}]}}, "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"}}, 0xfce) 2.563329415s ago: executing program 0 (id=559): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0xf4739000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="20000008ba10190fd394da240000000000000001fbdbdf250800010002000000"], 0x20}, 0x1, 0x0, 0x0, 0x48010}, 0x24004040) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x3, @remote}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) socket$inet(0x2, 0x4000000805, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x6) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000100)="19dded60d36b76db8c3a370186f6a7b5bc9f17", 0x13, 0x4000040, &(0x7f0000000140)={0x2, 0x4e24, @multicast1}, 0x10) 2.501932051s ago: executing program 2 (id=560): ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000300)=0x8, 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f0000000140)=0x30, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x3, 0x24, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0xc7}, @timestamp={0x44, 0x4, 0x48, 0x0, 0x8}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}], 0x1c) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 2.391146313s ago: executing program 0 (id=561): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x4}, {0x6, 0x60}]}) (async) write$ppp(r1, &(0x7f0000000440)='f#', 0x2) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f08000140000000002c000580040001007061796c6f6164001c00028008000340000000e1080004400000008b08000240000000050900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)={0x268, 0x1, 0x5, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [{{0x254, 0x1, {{0x3, 0x9}, 0x7, 0x2, 0x1000, 0x3, 0xe, 'syz1\x00', "50c050e81f3fe1b144d3e9c16f3804230903fb23ab1ee2d0a805fcb9cab3636a", "1bd88ede7d50bb7adda664fb1e8710e68db4bded2d7c826da996550857be9310", [{0x7, 0x6, {0x3, 0x400}}, {0xfae6, 0x37, {0x0, 0x1}}, {0x9, 0x3, {0x3, 0x5}}, {0x1, 0xdfc, {0x3, 0x93f}}, {0x8, 0x6, {0x2}}, {0xe, 0x3ff, {0x1}}, {0x401, 0x5, {0x0, 0xfffffff8}}, {0x9, 0x3ff, {0x1, 0x8}}, {0x1, 0x6, {0x2, 0x1}}, {0x9, 0xff, {0x2, 0x4}}, {0x7, 0xd3, {0x1, 0x5}}, {0x5000, 0x4, {0x3, 0xfff}}, {0x9, 0x57b1, {0x0, 0x800}}, {0x7, 0x3, {0x1}}, {0x0, 0x200, {0x2, 0x9}}, {0x714e, 0x1, {0x1, 0x60}}, {0xd, 0x3, {0x1, 0x9}}, {0x8, 0x1ff, {0x1}}, {0x57, 0xfffb, {0x2, 0x2d}}, {0x3, 0x8, {0x2, 0x8}}, {0x5, 0x4, {0x2, 0xffffffff}}, {0x9, 0x6, {0x2, 0x7}}, {0x2, 0x4, {0x0, 0x7}}, {0x5, 0x40, {0x1, 0x6}}, {0xc, 0x7a, {0x3, 0x8}}, {0x2, 0x1, {0x1, 0x1}}, {0x8001, 0x140, {0x2, 0x100}}, {0xfff, 0x55a5, {0x2, 0x6}}, {0x200, 0x10, {0x0, 0x5}}, {0x1, 0xfffd, {0x3, 0x6}}, {0x3, 0x0, {0x0, 0x2}}, {0x24, 0x9, {0x3, 0x1}}, {0x928d, 0x1000, {0x3, 0x8}}, {0x2, 0x3, {0x0, 0x5}}, {0x2, 0x3ff, {0x3, 0x5}}, {0x4, 0x8c00, {0x0, 0x10001}}, {0x4, 0xbf1, {0x0, 0x1c5359fd}}, {0x9f5, 0x8c0, {0x1, 0x8}}, {0x7, 0x40, {0x0, 0x8001}}, {0x7, 0x1, {0x0, 0xc}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080d0}, 0x20000000) (async) r6 = socket$inet6(0xa, 0x2, 0x3a) r7 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000100)="8907040400", 0x5) (async) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xf4cf216791fa448f, 0x0) (async) unshare(0x22020400) (async) connect$inet6(r6, 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000540)=ANY=[@ANYBLOB='+cpu '], 0x5) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) connect$pppl2tp(r3, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e22, @private=0xa010101}, 0x0, 0x2, 0x4, 0x1}}, 0x26) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='-cpu '], 0x5) (async) close(r9) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="00003837743d9c5d88abce1883aac89e006111d730b4a4057e88aa5895fbfa811eede60e0900c4a912c286e61934cffa54bf888451f7e460d2664ae1563164aef7c153b0d16f3ac3a43a366fa9639c0812b2f66fbdc7143241a866804b8a42b8e1365bf7f92ed7c553d97d36e2424f22922f5241a82aee", @ANYRES16=r10, @ANYBLOB="0100000000000000000014000000240007800c0003000000000000000000080002000500000096fd04000000000000000000"], 0x38}}, 0x0) (async) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="780000000a0601010000000000000000010000070500010007000000100007800900120073797a32000000000800094000000005280008800c00078008000640000000010c000780060004404e2100000c0007800800064000007fff0900020073797a300000000005000100070000000800094000000008f9acc9161247"], 0x78}, 0x1, 0x0, 0x0, 0x2000c081}, 0x10) 2.390531734s ago: executing program 1 (id=562): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000000)={0x0, 0x0}) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) r3 = accept4(r0, 0x0, 0x0, 0x80000) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x2002, 0x9}]}]}}, &(0x7f0000000f40)=""/4089, 0x3a, 0xff9, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x22000000}, 0x3000c010) bind$rds(r4, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b2fd2c5}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="020029bd7000fcdbdf2583000000000006000802110000000000"], 0xfe0}, 0x1, 0x0, 0x0, 0x20008091}, 0x801) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.266329833s ago: executing program 4 (id=563): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000009500"/24], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2.208731238s ago: executing program 0 (id=564): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@RTM_DELMDB={0x58, 0x55, 0x1, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x29, 0x1, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@dev}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@broadcast}}}]}, 0x58}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x16400}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4, 0x2, 0x0, 0x1, [@vti_common_policy]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040895}, 0x40800) 2.079482124s ago: executing program 4 (id=565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000001f0a05010000000000000000070000000900020073797a3100000000090001801400008004000180080003", @ANYRES64=r0, @ANYRES16=r0, @ANYRES64=r0], 0xc8}}, 0xc1) 2.031664242s ago: executing program 0 (id=566): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0xa) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000000c0)={0x5}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x3}}]}}}]}, 0x78}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x8, &(0x7f0000000a00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x10c, &(0x7f0000000cc0)=""/268, 0x729c10b274fd1a11, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, @void, @value}, 0x94) epoll_pwait(0xffffffffffffffff, 0xfffffffffffffffc, 0x74b9b5e, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r5, 0x400454cc, 0x0) 1.973726477s ago: executing program 4 (id=567): pselect6(0x0, 0x0, &(0x7f0000000000)={0x9, 0x40, 0x683, 0x3, 0x10, 0x3, 0x2e, 0x3ff}, &(0x7f0000000040)={0xffffffffffffffd7, 0x4, 0xd89, 0x3, 0x0, 0x0, 0x4, 0x6}, &(0x7f0000000080)={0x77359400}, &(0x7f0000000100)={&(0x7f00000000c0)={[0x8]}, 0x8}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/237, 0xe}], 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket(0x2b, 0x1, 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x1411, 0x1, 0x70bd29}, 0x10}}, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB="0800000000010000"], 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711414000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.871381699s ago: executing program 3 (id=568): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 1.779673442s ago: executing program 3 (id=569): socket$packet(0x11, 0x3, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000fffffed40000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a30000000007c000000060a0104000000000000000001000000540004802000018007000100727400001400028008000240000000030800014000000003240001800b00010072656a656374000014000280080001400000000105ff07000000000000000180080001006669620008000b40000000000900010073797a300000000014000000110001"], 0x104}}, 0x0) 1.609229432s ago: executing program 2 (id=570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) unshare(0x22020600) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@map, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8}, @NFTA_BITWISE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "cc"}]}], {0x14}}, 0x8c}}, 0x0) 1.543283743s ago: executing program 3 (id=571): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000001100006a0a00ff00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868e6cd1678f74e30a0e8c1bf176db2a6b2f01806fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b97163c1d6d0e196bf02f46c7953ab1abda45cbe8d0d26b506971431bb6b1fb46b2aa425833f8a98f7dc8f76b74635fc9f9de9ca3c0ec0cb9bf4e418d076df4c7df0a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74135b29194e533583412dff048f0000000000000000b2728a0481e9f0da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa209000000000000003ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8500bc7d202e0990"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0x0, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r5], 0x40}}, 0x4000) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r5], 0x40}}, 0x4000) 1.49648115s ago: executing program 2 (id=572): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000400)="63a2", 0x2}], 0x1}}], 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x30, r2, 0xf1aad47e89fb43b5, 0x0, 0x0, {0x5}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r7, {0x0, 0x3}, {0xfff1, 0x2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000000)=0x6, 0x4) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x7600) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'hugetlb'}, {0x2d, 'blkio'}, {0x2b, 'hugetlb'}]}, 0x19) 509.303082ms ago: executing program 3 (id=573): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x10, 0x80000) (async) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x10, 0x80000) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) setsockopt$rose(r0, 0x104, 0x1, &(0x7f0000000000)=0x4, 0x4) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000a0000000f000900000000050000000030615f2e3000715f0000a10000000000000039a2fe1fae5f4910df5d4d277c6947d58b8a347c23210442943d7f0b1ce6ad38d5ad1cb2b1"], &(0x7f0000000280)=""/122, 0x36, 0x7a, 0x1, 0x5, 0x10000, @value=r2}, 0x28) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e5ff04", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x1, 0x0, 0x200}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e5ff04", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x1, 0x0, 0x200}}}}}}}, 0x0) ioctl$sock_bt_hci(r4, 0x400448de, &(0x7f00000001c0)) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xa, 0xfff1}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xa, 0xfff1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0xfffffffc, {0x0, 0x0, 0x0, r7, {0xfff1}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r7, @fallback=0x62, r3, 0x8, &(0x7f0000000080)={0xfffffffe}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r7, @fallback=0x62, r3, 0x8, &(0x7f0000000080)={0xfffffffe}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 482.192156ms ago: executing program 0 (id=574): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x48) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r3}, 0x10) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x300000d, 0x12, r4, 0x1000) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) recvmmsg(r1, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/47, 0x2f}], 0x1}, 0x3ff}], 0x1, 0x123, 0x0) (async) shutdown(r1, 0x1) unshare(0x20000400) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) (async) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r7, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}]}, 0x24}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x28, 0x0, 0x1, 0x70b527, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x48844) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002cbd7000ffdbdf251b00000008000300", @ANYRES32=r12, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 439.305581ms ago: executing program 2 (id=575): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000100)=0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c000180060006008848"], 0x24}, 0x1, 0x0, 0x0, 0x8081}, 0xc000) (async) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x1, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x2400c851}, 0x24000000) 422.891492ms ago: executing program 1 (id=576): socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r2}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x80080, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socket$inet(0x2, 0x3, 0x2) socket$inet(0x2, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711231000000000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x7, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000160001000000180095000000000000000500feff"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES8=r1], 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000001000000000000000ffffffff006630ea576f93198beb6a967f0926265ba088f928211765c58887ceb3edb6f34fdc40987b9510783fd608c0173bf0aea27fe1e384d12bd5c8dd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 334.969562ms ago: executing program 4 (id=577): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmmsg$inet6(r1, &(0x7f00000008c0)=[{{&(0x7f0000000600)={0xa, 0x4e24, 0x8, @private2, 0x988}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000640)="5e89f617007cf9bbf4884e7bc29242d3a7d8a62384bbcc6db343f1406843881b18bbf8d0bf720e8484f8be19bdc9949bc3f5cb304bcbb7e586979fa3ddf26e0d0beade4a4f78026801f93a6a49241219709e9f5b17c3e383a0ec0c9c4f4abffa244519d41c392ec3b4f92f180228c6cad1a111c4e41d17826c705084", 0x7c}, {&(0x7f00000006c0)="cd9e53472efd7ada42fb41fe40fd1bc4cb9f96992eab5cfe1ad1abd2cfcd20189daace143c0dd02b7637a8cb55b638654043104a8a11801a9b1c5c1a3370f79b106ee4cfb801d68cf1932243478c30a43aa66c0f704dc2099329039f8c57661e97ad43a9dc9ab535ba145828a8e48b9804d887d7328df98a3c8a6cc61217c04a00ba3a1bb5d16e686d8c9a671c7dab5f5533038b9c22438ac3916f010dabc01afa856950d2bdda9878dfeeafb56c43d96dd9a8f89e0493e7724917fdc795f876a26d54d86a98ccfde420522becd65c7a22c9", 0xd2}, {&(0x7f00000007c0)="787e826d2731e9f709b345fad56889", 0xf}, {&(0x7f0000000800)="69c45ad71d37e89e08275c83e30dbf155ff3e5efd703ba4ac10c7cdede392e19f7e0f2a8f86c568ea6605c6c8f1238f575fefcc1828ea0d517e5e94e6c75cbab9b18caac824b8d65ae8f43f82f0b1e2cd34494ba71ce1629", 0x58}], 0x4}}], 0x1, 0x408c0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="3400a7863f75c7a920b40bc59c0000140001002b216eee2995c166c08f4e7d9d3a81c3", @ANYRES32=r4, @ANYBLOB="08000800e00400001400020000000000000000000000ffffe0000002"], 0x34}, 0x1, 0x2}, 0x10) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100027bd7000fedbdf250f0000000600280001000000050037000100000008003b000300000008002c001000000008000600", @ANYRES32=0x0, @ANYBLOB="08003b04820b000008001600375bc54966710fdbdaf61cb5c050456e7296cb250aa7a494bcbff7bdb6a6bb57d4afb3e868942a910724b87175aee9a48162f8a52d9a498bdabc355811eb0d0d3cad934b816b422fc3063609e1303fff0d2c0a3289041c49d8a89415f3f1c7b7557a0f8482116aab8b259358aa0b274b4b4f03ac2136098872ff9ebb1c2484f8756cb4de1814576ab987177a9936f72b720c6710791ed5007dcebf6b5d6b4702bb881f20a02beacc2ca3a7eb45e9eb69224dfe9d7854c9f5842eb38dabd9566e0d10b8c62578bbace2b4216257b2f7b44908950bc7630097d14b5719dbc56c844785ea5bfa38", @ANYRES32=r4, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x841) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000280)=@newchain={0x74, 0x64, 0x400, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffe0, 0xc}, {0xe, 0xe}, {0x5, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0xfffffff6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_CHAIN={0x8, 0xb, 0x400}, @TCA_CHAIN={0x8, 0xb, 0x200}]}, 0x74}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r5, 0x0, 0x1, &(0x7f0000000240), 0x4) r6 = socket(0x11, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000953942"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r8, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 251.532607ms ago: executing program 1 (id=578): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES8=r0], 0x5c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, [0x0, 0x1, 0x0, 0x6, 0x4, 0x3], [0x2, 0x5e, 0xd3c, 0x7, 0xffffff16, 0x3, 0xb]}}) r2 = accept$inet6(r1, 0x0, &(0x7f00000000c0)) poll(&(0x7f0000000180)=[{}, {r0, 0x6000}, {r1, 0x2}, {r2, 0x8}, {r0, 0x8}], 0x5, 0x5) (async) poll(&(0x7f0000000180)=[{}, {r0, 0x6000}, {r1, 0x2}, {r2, 0x8}, {r0, 0x8}], 0x5, 0x5) 247.264849ms ago: executing program 2 (id=579): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 183.909541ms ago: executing program 4 (id=580): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x28, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x1a, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x48001) sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0) ioctl$sock_proto_private(r2, 0x891a, &(0x7f0000000580)="d8990ef9b33a26") ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vlan1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x58, &(0x7f0000000000)={&(0x7f0000000240)=@ipv6_getroute={0x2c, 0x1a, 0x800, 0x70bd29, 0x25dfdbff, {0xa, 0xb4, 0x14, 0x8, 0xfe, 0x4, 0x6291d8386a2dd0e3, 0x2, 0x100}, [@RTA_MARK={0x8, 0x10, 0x3}, @RTA_OIF={0x8}]}, 0x2c}}, 0x0) 107.170579ms ago: executing program 0 (id=581): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) r4 = socket(0x1d, 0x2, 0x6) r5 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r5, &(0x7f0000000440)={&(0x7f0000000380)=@phonet, 0x80, &(0x7f0000000540)=[{&(0x7f00000008c0)=""/230, 0xe6}, {&(0x7f00000009c0)=""/213, 0xd5}, {&(0x7f0000000ac0)=""/215, 0xd7}, {&(0x7f0000000bc0)=""/241, 0xf1}, {&(0x7f0000000400)=""/35, 0x23}, {&(0x7f0000000cc0)=""/248, 0xf8}], 0x6, &(0x7f0000000dc0)=""/224, 0xe0}, 0x10002) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000840)={@cgroup, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bind$can_j1939(r4, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0xd121dae3649e435f, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)={0x200, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x860}, {0x6, 0x11, 0x32}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6cef}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x14}, {0x6, 0x11, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x3, 0x11, 0xc}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x8d}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x4}}]}, 0x200}, 0x1, 0x0, 0x0, 0x20008891}, 0x40) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1}, 0x0) recvmmsg(r7, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000000, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500005c0000000000119078000000000000000000004e200048907803000000000000006d4dfdeb8cf7bbfe143803bec2ce783e04cd320e248d2d6c8650f1adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x22}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x4a}]}, &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 106.515887ms ago: executing program 2 (id=582): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000009000010000000000000000000500000a1c000000000a01040002400000000228000000080a05f8c835b382ade1b400000001080900010073797a3000000088b3a9afe27f007f2258af8e000800cb548c54657d150932ea491367b183fce0021b61376e35520a40000000021400b5b410370100000000000000000005ae3b527d0100"], 0x6c}, 0x1, 0x0, 0x0, 0x20000005}, 0x6000000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2, @remote, 0x9c, 0x6, 0x84, 0x500, 0x4, 0x2150061}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x18) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) socket$netlink(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff}) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000001e00851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180259daf2ffffff0000000000000400750000001700000095"], &(0x7f0000000080)='GPL\x00', 0xdc7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 1 (id=583): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000080)="09000000010001", 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.170' (ED25519) to the list of known hosts. [ 65.208784][ T5813] cgroup: Unknown subsys name 'net' [ 65.355692][ T5813] cgroup: Unknown subsys name 'cpuset' [ 65.364300][ T5813] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.691433][ T5813] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.171417][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.179465][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.180086][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.187883][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.200937][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.207442][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.209435][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.218313][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.229632][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.229754][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.237071][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.244607][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.251642][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.260350][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.271486][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.272056][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.279513][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.287564][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.293942][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.300856][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.308187][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.315640][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.328206][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.337351][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.352984][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.797196][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 69.965248][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 70.076870][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 70.104641][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.111785][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.119953][ T5826] bridge_slave_0: entered allmulticast mode [ 70.127844][ T5826] bridge_slave_0: entered promiscuous mode [ 70.139800][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.146972][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.154151][ T5826] bridge_slave_1: entered allmulticast mode [ 70.161431][ T5826] bridge_slave_1: entered promiscuous mode [ 70.267395][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.274881][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.282016][ T5827] bridge_slave_0: entered allmulticast mode [ 70.289697][ T5827] bridge_slave_0: entered promiscuous mode [ 70.297631][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.304810][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.311893][ T5827] bridge_slave_1: entered allmulticast mode [ 70.319306][ T5827] bridge_slave_1: entered promiscuous mode [ 70.402053][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.415142][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.424773][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 70.457569][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.469080][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.546428][ T5826] team0: Port device team_slave_0 added [ 70.555124][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 70.566042][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.573785][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.580973][ T5823] bridge_slave_0: entered allmulticast mode [ 70.588227][ T5823] bridge_slave_0: entered promiscuous mode [ 70.618270][ T5826] team0: Port device team_slave_1 added [ 70.631027][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.639315][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.647604][ T5823] bridge_slave_1: entered allmulticast mode [ 70.655276][ T5823] bridge_slave_1: entered promiscuous mode [ 70.664376][ T5827] team0: Port device team_slave_0 added [ 70.720727][ T5827] team0: Port device team_slave_1 added [ 70.767812][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.775510][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.801639][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.826873][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.852972][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.859931][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.886006][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.897419][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.906844][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.935082][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.948349][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.981530][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.990565][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.017326][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.074901][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.082060][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.089504][ T5824] bridge_slave_0: entered allmulticast mode [ 71.096760][ T5824] bridge_slave_0: entered promiscuous mode [ 71.105031][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.112141][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.119345][ T5824] bridge_slave_1: entered allmulticast mode [ 71.126805][ T5824] bridge_slave_1: entered promiscuous mode [ 71.171095][ T5823] team0: Port device team_slave_0 added [ 71.222162][ T5826] hsr_slave_0: entered promiscuous mode [ 71.228511][ T5826] hsr_slave_1: entered promiscuous mode [ 71.238856][ T5823] team0: Port device team_slave_1 added [ 71.258079][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.265930][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.275260][ T5829] bridge_slave_0: entered allmulticast mode [ 71.282128][ T5829] bridge_slave_0: entered promiscuous mode [ 71.318157][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.325894][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.340569][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.350612][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.360685][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.368170][ T5829] bridge_slave_1: entered allmulticast mode [ 71.375983][ T5829] bridge_slave_1: entered promiscuous mode [ 71.387134][ T5827] hsr_slave_0: entered promiscuous mode [ 71.393335][ T5840] Bluetooth: hci2: command tx timeout [ 71.393568][ T5840] Bluetooth: hci4: command tx timeout [ 71.393683][ T5840] Bluetooth: hci0: command tx timeout [ 71.399055][ T55] Bluetooth: hci3: command tx timeout [ 71.404843][ T5840] Bluetooth: hci1: command tx timeout [ 71.414676][ T5827] hsr_slave_1: entered promiscuous mode [ 71.427353][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.435203][ T5827] Cannot create hsr debugfs directory [ 71.458662][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.514373][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.521334][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.547655][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.583830][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.600860][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.610090][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.636137][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.661317][ T5824] team0: Port device team_slave_0 added [ 71.671348][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.712120][ T5824] team0: Port device team_slave_1 added [ 71.738751][ T5829] team0: Port device team_slave_0 added [ 71.748054][ T5829] team0: Port device team_slave_1 added [ 71.863304][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.870279][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.896787][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.918355][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.925573][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.951633][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.964990][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.971939][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.998523][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.028412][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.035508][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.061651][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.084393][ T5823] hsr_slave_0: entered promiscuous mode [ 72.090551][ T5823] hsr_slave_1: entered promiscuous mode [ 72.097150][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.104918][ T5823] Cannot create hsr debugfs directory [ 72.158726][ T5824] hsr_slave_0: entered promiscuous mode [ 72.165602][ T5824] hsr_slave_1: entered promiscuous mode [ 72.171766][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.179810][ T5824] Cannot create hsr debugfs directory [ 72.324998][ T5829] hsr_slave_0: entered promiscuous mode [ 72.331150][ T5829] hsr_slave_1: entered promiscuous mode [ 72.337776][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.345886][ T5829] Cannot create hsr debugfs directory [ 72.447408][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.460832][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.506051][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.548633][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.700536][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.711146][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.736910][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.751863][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.826284][ T5823] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.837175][ T5823] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.867038][ T5823] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.877367][ T5823] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.948366][ T5829] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.986914][ T5829] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.999506][ T5829] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.010922][ T5829] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.081753][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.097612][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.116887][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.143866][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.178662][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.231420][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.260399][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.281524][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.288736][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.327402][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.334651][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.371283][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.388258][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.414619][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.421759][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.434900][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.441990][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.473440][ T5840] Bluetooth: hci1: command tx timeout [ 73.473535][ T55] Bluetooth: hci3: command tx timeout [ 73.478847][ T5840] Bluetooth: hci4: command tx timeout [ 73.484948][ T5837] Bluetooth: hci0: command tx timeout [ 73.490793][ T5142] Bluetooth: hci2: command tx timeout [ 73.539939][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.558210][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.601638][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.608858][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.622249][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.629411][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.650538][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.711627][ T5827] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.725773][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.769284][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.788086][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.820142][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.827297][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.879311][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.886539][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.908232][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.938539][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.966748][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.973928][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.020582][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.027768][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.112414][ T5826] veth0_vlan: entered promiscuous mode [ 74.134265][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.158264][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.201606][ T5826] veth1_vlan: entered promiscuous mode [ 74.309503][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.355604][ T5826] veth0_macvtap: entered promiscuous mode [ 74.374014][ T5827] veth0_vlan: entered promiscuous mode [ 74.408600][ T5826] veth1_macvtap: entered promiscuous mode [ 74.450807][ T5827] veth1_vlan: entered promiscuous mode [ 74.526992][ T5823] veth0_vlan: entered promiscuous mode [ 74.556309][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.569973][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.585892][ T5823] veth1_vlan: entered promiscuous mode [ 74.608449][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.625989][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.635170][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.646179][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.656487][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.677021][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.704086][ T5827] veth0_macvtap: entered promiscuous mode [ 74.722026][ T5827] veth1_macvtap: entered promiscuous mode [ 74.772063][ T5823] veth0_macvtap: entered promiscuous mode [ 74.815231][ T5823] veth1_macvtap: entered promiscuous mode [ 74.849202][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.862066][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.878185][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.906058][ T5824] veth0_vlan: entered promiscuous mode [ 74.923963][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.935947][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.945906][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.956564][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.967754][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.982368][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.995709][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.007392][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.036880][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.047785][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.058088][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.068756][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.081833][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.095741][ T5823] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.105912][ T5823] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.116743][ T5823] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.125581][ T5823] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.148559][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.159326][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.168992][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.177756][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.206875][ T5824] veth1_vlan: entered promiscuous mode [ 75.249814][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.265009][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.339813][ T5824] veth0_macvtap: entered promiscuous mode [ 75.348658][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.362864][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.376836][ T5829] veth0_vlan: entered promiscuous mode [ 75.413575][ T5824] veth1_macvtap: entered promiscuous mode [ 75.421522][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.432360][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.445509][ T5829] veth1_vlan: entered promiscuous mode [ 75.492342][ T994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.493426][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.504999][ T994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.558670][ T5840] Bluetooth: hci3: command tx timeout [ 75.564735][ T5142] Bluetooth: hci0: command tx timeout [ 75.570158][ T5142] Bluetooth: hci1: command tx timeout [ 75.570477][ T5829] veth0_macvtap: entered promiscuous mode [ 75.576548][ T5838] Bluetooth: hci4: command tx timeout [ 75.581891][ T55] Bluetooth: hci2: command tx timeout [ 75.595213][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.616760][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.644667][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.658762][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.669288][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.679982][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.690844][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.719214][ T5829] veth1_macvtap: entered promiscuous mode [ 75.725646][ T5914] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 75.768285][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.779633][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.801753][ T5913] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.813644][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.825589][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.835547][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.846024][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.857508][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.869255][ T1082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.893614][ T1082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.908950][ T5918] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 75.928917][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 75.942629][ T5913] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 75.951222][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.967288][ T5824] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.980355][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.987998][ T5824] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.997123][ T5824] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.006277][ T5824] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.029063][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.049440][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.059788][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.070383][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.081262][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.091819][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.102062][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.118109][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.130845][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.205551][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.245830][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.266751][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.274443][ T5921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 76.290881][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.300960][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.313579][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.323448][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.333927][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.345848][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.412966][ T5922] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 76.436548][ T5924] netlink: 'syz.2.3': attribute type 29 has an invalid length. [ 76.464728][ T5829] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.502958][ T5829] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.520558][ T5829] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.541859][ T5829] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.592365][ T5921] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.653428][ T5927] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 76.669371][ T5924] netlink: 'syz.2.3': attribute type 29 has an invalid length. [ 76.681786][ T5927] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 76.726966][ T5921] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.760974][ T5926] netlink: 464 bytes leftover after parsing attributes in process `syz.2.3'. [ 76.797530][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.823185][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.870649][ T5921] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.009963][ T5921] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.036764][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.049438][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.080855][ T5931] netlink: 'syz.2.7': attribute type 11 has an invalid length. [ 77.130012][ T994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.149844][ T994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.286984][ T5935] Cannot find add_set index 0 as target [ 77.305193][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.325380][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.514598][ T10] IPVS: starting estimator thread 0... [ 77.585968][ T5943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.600362][ T5944] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9'. [ 77.632925][ T5938] IPVS: using max 32 ests per chain, 76800 per kthread [ 77.636332][ T5937] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8'. [ 77.639968][ T55] Bluetooth: hci1: command tx timeout [ 77.658785][ T5837] Bluetooth: hci2: command tx timeout [ 77.659122][ T5142] Bluetooth: hci4: command tx timeout [ 77.664216][ T5837] Bluetooth: hci3: command tx timeout [ 77.678782][ T5948] netlink: 'syz.4.5': attribute type 11 has an invalid length. [ 77.991006][ T5955] wg1 speed is unknown, defaulting to 1000 [ 78.012372][ T5955] wg1 speed is unknown, defaulting to 1000 [ 78.036984][ T5955] wg1 speed is unknown, defaulting to 1000 [ 78.055374][ T5951] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9'. [ 78.058763][ T5955] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 78.087089][ T5955] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 78.095033][ T5951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 78.130023][ T5951] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9'. [ 78.161464][ T5955] wg1 speed is unknown, defaulting to 1000 [ 78.176488][ T5955] wg1 speed is unknown, defaulting to 1000 [ 78.184505][ T5955] wg1 speed is unknown, defaulting to 1000 [ 78.195902][ T5955] wg1 speed is unknown, defaulting to 1000 [ 78.208492][ T5955] wg1 speed is unknown, defaulting to 1000 [ 78.715134][ T5971] netlink: 'syz.3.18': attribute type 10 has an invalid length. [ 78.739964][ T5971] bridge0: port 3(dummy0) entered blocking state [ 78.757115][ T5971] bridge0: port 3(dummy0) entered disabled state [ 78.801547][ T5971] dummy0: entered allmulticast mode [ 78.832180][ T5971] dummy0: entered promiscuous mode [ 78.865212][ T5971] bridge0: port 3(dummy0) entered blocking state [ 78.871770][ T5971] bridge0: port 3(dummy0) entered forwarding state [ 79.074034][ T5975] wg1 speed is unknown, defaulting to 1000 [ 79.229306][ T5971] wg1 speed is unknown, defaulting to 1000 [ 79.944579][ T5994] ipt_rpfilter: unknown options [ 80.057277][ T5996] Bluetooth: MGMT ver 1.23 [ 80.226050][ T5921] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.280017][ T5921] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.335465][ T6007] veth0: entered promiscuous mode [ 80.355610][ T5921] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.499667][ T5921] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.573628][ T24] cfg80211: failed to load regulatory.db [ 81.615592][ T6045] __nla_validate_parse: 8 callbacks suppressed [ 81.615608][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34'. [ 81.670771][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34'. [ 82.064171][ T6062] Cannot find set identified by id 0 to match [ 82.194130][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.39'. [ 82.448591][ T6076] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.650481][ T6077] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.659129][ T6077] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.807625][ T6077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.824659][ T6077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.108790][ T6077] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.120834][ T6077] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.130710][ T6077] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.141663][ T6077] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.211528][ T6084] netlink: 44 bytes leftover after parsing attributes in process `syz.4.43'. [ 83.407653][ T6092] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 83.424173][ T6095] Zero length message leads to an empty skb [ 83.433945][ T6096] vlan0: entered promiscuous mode [ 83.628435][ T6095] netlink: 44 bytes leftover after parsing attributes in process `syz.4.46'. [ 83.801765][ T6112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.52'. [ 83.858489][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.54'. [ 83.886962][ T6112] bridge_slave_1: left allmulticast mode [ 83.893743][ T6112] bridge_slave_1: left promiscuous mode [ 83.899565][ T6112] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.948087][ T6112] bridge_slave_0: left allmulticast mode [ 83.963527][ T6112] bridge_slave_0: left promiscuous mode [ 83.969531][ T6112] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.220546][ T6125] netlink: 'syz.2.56': attribute type 2 has an invalid length. [ 84.245239][ T6125] : entered promiscuous mode [ 84.562193][ T6128] netlink: 'syz.2.57': attribute type 303 has an invalid length. [ 84.655007][ T6133] sctp: [Deprecated]: syz.3.59 (pid 6133) Use of int in max_burst socket option. [ 84.655007][ T6133] Use struct sctp_assoc_value instead [ 84.911380][ T6138] netlink: 'syz.4.60': attribute type 39 has an invalid length. [ 84.922322][ T6140] netlink: 28 bytes leftover after parsing attributes in process `syz.3.61'. [ 84.938923][ T6138] veth0_macvtap: left promiscuous mode [ 84.962597][ T6144] openvswitch: netlink: Missing key (keys=40, expected=80) [ 85.352245][ T6154] wireguard0: entered promiscuous mode [ 85.365820][ T6154] wireguard0: entered allmulticast mode [ 85.438757][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.66'. [ 85.540008][ T6166] netlink: 16 bytes leftover after parsing attributes in process `syz.1.69'. [ 85.938548][ T6157] syz.2.63: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 85.961367][ T6157] CPU: 1 UID: 0 PID: 6157 Comm: syz.2.63 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 85.961391][ T6157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 85.961405][ T6157] Call Trace: [ 85.961415][ T6157] [ 85.961423][ T6157] dump_stack_lvl+0x189/0x250 [ 85.961461][ T6157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.961485][ T6157] ? __pfx__printk+0x10/0x10 [ 85.961502][ T6157] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 85.961528][ T6157] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 85.961554][ T6157] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 85.961583][ T6157] warn_alloc+0x214/0x310 [ 85.961613][ T6157] ? __pfx_warn_alloc+0x10/0x10 [ 85.961644][ T6157] ? __get_vm_area_node+0x1c5/0x2d0 [ 85.961663][ T6157] ? __get_vm_area_node+0x25a/0x2d0 [ 85.961691][ T6157] __vmalloc_node_range_noprof+0x5f2/0x12c0 [ 85.961711][ T6157] ? do_syscall_64+0xf6/0x210 [ 85.961764][ T6157] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 85.961792][ T6157] ? __kasan_kmalloc_large+0x1a/0xa0 [ 85.961816][ T6157] ? rcu_is_watching+0x15/0xb0 [ 85.961841][ T6157] ? hash_ipmark_create+0x3e6/0x1080 [ 85.961863][ T6157] ? hash_ipmark_create+0x3e6/0x1080 [ 85.961883][ T6157] __kvmalloc_node_noprof+0x3a0/0x5e0 [ 85.961904][ T6157] ? hash_ipmark_create+0x3e6/0x1080 [ 85.961926][ T6157] ? hash_ipmark_create+0x387/0x1080 [ 85.961953][ T6157] hash_ipmark_create+0x3e6/0x1080 [ 85.961984][ T6157] ? __nla_parse+0x40/0x60 [ 85.962004][ T6157] ? __pfx_hash_ipmark_create+0x10/0x10 [ 85.962028][ T6157] ip_set_create+0xa94/0x1940 [ 85.962049][ T6157] ? ip_set_create+0x4a2/0x1940 [ 85.962080][ T6157] ? __pfx_ip_set_create+0x10/0x10 [ 85.962139][ T6157] nfnetlink_rcv_msg+0xb4a/0x1130 [ 85.962162][ T6157] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 85.962203][ T6157] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 85.962277][ T6157] netlink_rcv_skb+0x219/0x490 [ 85.962297][ T6157] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 85.962320][ T6157] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 85.962353][ T6157] ? apparmor_capable+0x137/0x1b0 [ 85.962376][ T6157] ? bpf_lsm_capable+0x9/0x20 [ 85.962397][ T6157] ? security_capable+0x7e/0x2e0 [ 85.962422][ T6157] nfnetlink_rcv+0x273/0x2530 [ 85.962450][ T6157] ? kernel_text_address+0xa5/0xe0 [ 85.962471][ T6157] ? __kernel_text_address+0xd/0x40 [ 85.962489][ T6157] ? unwind_get_return_address+0x4d/0x90 [ 85.962506][ T6157] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 85.962523][ T6157] ? arch_stack_walk+0xfc/0x150 [ 85.962553][ T6157] ? stack_trace_save+0x9c/0xe0 [ 85.962573][ T6157] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 85.962591][ T6157] ? stack_depot_save_flags+0x40/0x910 [ 85.962616][ T6157] ? kasan_save_track+0x4f/0x80 [ 85.962632][ T6157] ? kasan_save_track+0x3e/0x80 [ 85.962657][ T6157] ? __lock_acquire+0xaac/0xd20 [ 85.962698][ T6157] ? __lock_acquire+0xaac/0xd20 [ 85.962727][ T6157] ? netlink_deliver_tap+0x2e/0x1b0 [ 85.962750][ T6157] ? netlink_deliver_tap+0x2e/0x1b0 [ 85.962768][ T6157] ? netlink_deliver_tap+0x2e/0x1b0 [ 85.962799][ T6157] netlink_unicast+0x758/0x8d0 [ 85.962828][ T6157] netlink_sendmsg+0x805/0xb30 [ 85.962858][ T6157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.962879][ T6157] ? aa_sock_msg_perm+0x94/0x160 [ 85.962898][ T6157] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 85.962916][ T6157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.962936][ T6157] __sock_sendmsg+0x219/0x270 [ 85.962964][ T6157] ____sys_sendmsg+0x505/0x830 [ 85.962992][ T6157] ? __pfx_____sys_sendmsg+0x10/0x10 [ 85.963022][ T6157] ? import_iovec+0x74/0xa0 [ 85.963046][ T6157] ___sys_sendmsg+0x21f/0x2a0 [ 85.963070][ T6157] ? __pfx____sys_sendmsg+0x10/0x10 [ 85.963124][ T6157] ? __fget_files+0x2a/0x420 [ 85.963143][ T6157] ? __fget_files+0x3a0/0x420 [ 85.963174][ T6157] __x64_sys_sendmsg+0x19b/0x260 [ 85.963197][ T6157] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 85.963235][ T6157] ? do_syscall_64+0xba/0x210 [ 85.963261][ T6157] do_syscall_64+0xf6/0x210 [ 85.963283][ T6157] ? clear_bhb_loop+0x45/0xa0 [ 85.963305][ T6157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.963321][ T6157] RIP: 0033:0x7fd63178e969 [ 85.963344][ T6157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.963358][ T6157] RSP: 002b:00007fd62e9f0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.963375][ T6157] RAX: ffffffffffffffda RBX: 00007fd6319b6400 RCX: 00007fd63178e969 [ 85.963387][ T6157] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000f [ 85.963397][ T6157] RBP: 00007fd631810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 85.963408][ T6157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.963417][ T6157] R13: 0000000000000000 R14: 00007fd6319b6400 R15: 00007fff4f092378 [ 85.963446][ T6157] [ 86.451796][ T6157] Mem-Info: [ 86.458628][ T6157] active_anon:4914 inactive_anon:0 isolated_anon:0 [ 86.458628][ T6157] active_file:1307 inactive_file:38310 isolated_file:0 [ 86.458628][ T6157] unevictable:768 dirty:589 writeback:0 [ 86.458628][ T6157] slab_reclaimable:10079 slab_unreclaimable:98848 [ 86.458628][ T6157] mapped:31743 shmem:1427 pagetables:861 [ 86.458628][ T6157] sec_pagetables:0 bounce:0 [ 86.458628][ T6157] kernel_misc_reclaimable:0 [ 86.458628][ T6157] free:1351377 free_pcp:358 free_cma:0 [ 86.507650][ T6157] Node 0 active_anon:19656kB inactive_anon:0kB active_file:5228kB inactive_file:153164kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126972kB dirty:2344kB writeback:0kB shmem:4172kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10976kB pagetables:3444kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 86.543106][ T6157] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 86.595421][ T6157] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 86.720303][ T6157] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 86.729610][ T6157] Node 0 DMA32 free:1477512kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:19556kB inactive_anon:0kB active_file:5228kB inactive_file:153064kB unevictable:1536kB writepending:2320kB present:3129332kB managed:2564076kB mlocked:0kB bounce:0kB free_pcp:1500kB local_pcp:972kB free_cma:0kB [ 86.769596][ T6157] lowmem_reserve[]: 0 0 0 0 0 [ 86.774456][ T6157] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 86.801234][ T6157] lowmem_reserve[]: 0 0 0 0 0 [ 86.806039][ T6157] Node 1 Normal free:3912428kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:12kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:0kB free_cma:0kB [ 86.836707][ T6157] lowmem_reserve[]: 0 0 0 0 0 [ 86.841469][ T6157] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 86.854204][ T6157] Node 0 DMA32: 74*4kB (UM) 38*8kB (UME) 36*16kB (UME) 97*32kB (UME) 49*64kB (UME) 35*128kB (UME) 17*256kB (M) 17*512kB (UME) 8*1024kB (ME) 6*2048kB (ME) 350*4096kB (UM) = 1479032kB [ 86.872812][ T6157] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 86.884387][ T6157] Node 1 Normal: 187*4kB (UE) 60*8kB (UME) 32*16kB (UME) 251*32kB (UME) 85*64kB (UME) 27*128kB (UM) 14*256kB (UM) 6*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (M) = 3912428kB [ 86.902649][ T6157] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 86.912206][ T6157] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 86.921544][ T6157] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 86.932743][ T6157] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 86.940124][ T6179] lo speed is unknown, defaulting to 1000 [ 86.942025][ T6157] 41046 total pagecache pages [ 86.951940][ T6179] lo speed is unknown, defaulting to 1000 [ 86.952717][ T6157] 0 pages in swap cache [ 86.959661][ T6179] lo speed is unknown, defaulting to 1000 [ 86.962357][ T6157] Free swap = 124996kB [ 86.962367][ T6157] Total swap = 124996kB [ 86.962376][ T6157] 2097051 pages RAM [ 86.962384][ T6157] 0 pages HighMem/MovableOnly [ 86.962390][ T6157] 424374 pages reserved [ 86.962397][ T6157] 0 pages cma reserved [ 86.987440][ T6179] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 87.168202][ T6179] lo speed is unknown, defaulting to 1000 [ 87.210421][ T6179] lo speed is unknown, defaulting to 1000 [ 87.232018][ T6179] lo speed is unknown, defaulting to 1000 [ 87.263153][ T6179] lo speed is unknown, defaulting to 1000 [ 87.293921][ T6179] lo speed is unknown, defaulting to 1000 [ 87.312097][ T6191] __nla_validate_parse: 1 callbacks suppressed [ 87.312112][ T6191] netlink: 40 bytes leftover after parsing attributes in process `syz.2.77'. [ 87.325365][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'. [ 87.423858][ T6195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.76'. [ 87.489425][ T6197] netlink: 'syz.4.78': attribute type 4 has an invalid length. [ 87.621914][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.79'. [ 87.652854][ T6202] netlink: 60 bytes leftover after parsing attributes in process `syz.1.76'. [ 87.685752][ T6205] xt_recent: Unsupported userspace flags (00000048) [ 87.715782][ T6205] netlink: 32 bytes leftover after parsing attributes in process `syz.3.79'. [ 88.366813][ T6230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.88'. [ 88.823480][ T6237] sctp: [Deprecated]: syz.2.90 (pid 6237) Use of int in max_burst socket option. [ 88.823480][ T6237] Use struct sctp_assoc_value instead [ 89.454997][ T6268] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 89.498950][ T6268] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 89.528834][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.99'. [ 89.849213][ T6283] netlink: 96 bytes leftover after parsing attributes in process `syz.3.102'. [ 90.034912][ T6082] Set syz1 is full, maxelem 65536 reached [ 90.191622][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.103'. [ 90.204592][ T6286] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 90.220018][ T6286] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 90.483398][ T6296] x_tables: duplicate underflow at hook 1 [ 90.503572][ T30] audit: type=1800 audit(1746223419.994:2): pid=6266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.98" name="cgroup.controllers" dev="tmpfs" ino=192 res=0 errno=0 [ 90.581148][ T6295] warning: `syz.2.105' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.598098][ T6298] bridge_slave_1: left allmulticast mode [ 90.624630][ T6298] bridge_slave_1: left promiscuous mode [ 90.647975][ T6298] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.703289][ T6298] bridge_slave_0: left allmulticast mode [ 90.716612][ T6298] bridge_slave_0: left promiscuous mode [ 90.734934][ T6298] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.910376][ T6300] bridge0: entered promiscuous mode [ 90.930284][ T6300] bridge0: entered allmulticast mode [ 90.943412][ T6300] team0: Port device bridge0 added [ 90.996375][ T6308] batman_adv: batadv0: Adding interface: ip6gretap1 [ 91.029327][ T6308] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.071916][ T6308] batman_adv: batadv0: Interface activated: ip6gretap1 [ 91.325743][ T6329] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 91.350931][ T6316] syzkaller1: entered promiscuous mode [ 91.358241][ T6316] syzkaller1: entered allmulticast mode [ 91.638702][ T6332] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.735628][ T6332] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.787361][ T6344] lo speed is unknown, defaulting to 1000 [ 91.939472][ T6332] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.057478][ T6332] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.345653][ T6332] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.418741][ T6332] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.489413][ T6332] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.576316][ T6332] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.658898][ T6374] netlink: 'syz.1.125': attribute type 3 has an invalid length. [ 92.677360][ T6374] netlink: 'syz.1.125': attribute type 1 has an invalid length. [ 92.730849][ T6377] __nla_validate_parse: 9 callbacks suppressed [ 92.730865][ T6377] netlink: 248 bytes leftover after parsing attributes in process `syz.0.127'. [ 92.796070][ T6382] netlink: 24 bytes leftover after parsing attributes in process `syz.4.129'. [ 92.805474][ T6382] netlink: 48 bytes leftover after parsing attributes in process `syz.4.129'. [ 92.847737][ T6346] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 93.149463][ T6393] netlink: 36 bytes leftover after parsing attributes in process `syz.0.132'. [ 93.271879][ T6397] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.134'. [ 93.431195][ T6398] netlink: 44 bytes leftover after parsing attributes in process `syz.0.132'. [ 93.515659][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'. [ 93.587419][ T6406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.137'. [ 93.596935][ T6398] netlink: 48 bytes leftover after parsing attributes in process `syz.0.132'. [ 93.633051][ T6406] netlink: 'syz.3.137': attribute type 13 has an invalid length. [ 93.651846][ T6406] netlink: 'syz.3.137': attribute type 17 has an invalid length. [ 93.661089][ T6411] netlink: 20 bytes leftover after parsing attributes in process `syz.2.138'. [ 93.793114][ T5142] Bluetooth: hci3: command 0x0401 tx timeout [ 93.899725][ T6406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.929567][ T5911] lo speed is unknown, defaulting to 1000 [ 94.000117][ T6414] lo speed is unknown, defaulting to 1000 [ 94.314784][ T6436] lo speed is unknown, defaulting to 1000 [ 94.458546][ T6441] dummy0: left allmulticast mode [ 94.473018][ T6441] dummy0: left promiscuous mode [ 94.485395][ T6441] bridge0: port 3(dummy0) entered disabled state [ 94.497449][ T6445] netlink: 'syz.3.145': attribute type 10 has an invalid length. [ 94.565411][ T6441] bridge_slave_0: left allmulticast mode [ 94.571319][ T6441] bridge_slave_0: left promiscuous mode [ 94.577405][ T6441] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.620214][ T6441] bridge_slave_1: left allmulticast mode [ 94.652413][ T6441] bridge_slave_1: left promiscuous mode [ 94.686640][ T6441] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.750722][ T6441] bond0: (slave bond_slave_0): Releasing backup interface [ 94.816535][ T6441] bond0: (slave bond_slave_1): Releasing backup interface [ 94.839070][ T6441] team0: Port device team_slave_0 removed [ 94.851560][ T6441] team0: Port device team_slave_1 removed [ 94.865815][ T6441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.873481][ T6441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.882080][ T6441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.890805][ T6441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.907537][ T6441] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 94.916368][ T6441] batman_adv: batadv0: Removing interface: ip6gretap1 [ 94.955050][ T6445] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 95.488030][ T6481] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:20001 [ 96.028318][ T6504] netlink: 'syz.4.161': attribute type 21 has an invalid length. [ 96.045311][ T6507] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 96.076689][ T6507] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 96.127152][ T6504] netlink: 'syz.4.161': attribute type 1 has an invalid length. [ 96.149939][ T6507] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 96.197225][ T6507] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 96.233038][ T6507] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 96.260117][ T6507] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 96.316812][ T6507] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 96.403274][ T6507] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 96.469058][ T6507] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 96.550668][ T6519] dvmrp0: entered allmulticast mode [ 96.563903][ T6507] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 96.606322][ T6507] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 96.684678][ T6525] lo speed is unknown, defaulting to 1000 [ 97.324479][ T6545] sctp: [Deprecated]: syz.4.173 (pid 6545) Use of struct sctp_assoc_value in delayed_ack socket option. [ 97.324479][ T6545] Use struct sctp_sack_info instead [ 97.410295][ T5142] block nbd0: Receive control failed (result -32) [ 98.148956][ T6579] x_tables: duplicate underflow at hook 3 [ 98.159184][ T6579] netlink: 'syz.3.183': attribute type 1 has an invalid length. [ 98.544207][ T6585] lo speed is unknown, defaulting to 1000 [ 99.325420][ T6620] sctp: [Deprecated]: syz.2.198 (pid 6620) Use of int in max_burst socket option deprecated. [ 99.325420][ T6620] Use struct sctp_assoc_value instead [ 99.776212][ T6636] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.898681][ T6636] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.042178][ T6636] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.115058][ T6647] smc: net device bond0 applied user defined pnetid SYZ0 [ 100.137312][ T6651] smc: net device bond0 erased user defined pnetid SYZ0 [ 100.179890][ T6636] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.297974][ T6646] lo speed is unknown, defaulting to 1000 [ 100.522124][ T6676] __nla_validate_parse: 10 callbacks suppressed [ 100.522142][ T6676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.212'. [ 100.550276][ T6676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.212'. [ 100.709860][ T6683] netlink: 28 bytes leftover after parsing attributes in process `syz.4.214'. [ 100.863717][ T6688] netlink: 'syz.1.215': attribute type 1 has an invalid length. [ 100.880213][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.215'. [ 100.924524][ T6636] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.104815][ T6636] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.162143][ T6690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.213'. [ 101.373559][ T6707] netlink: 20 bytes leftover after parsing attributes in process `syz.1.217'. [ 101.492253][ T6636] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.567502][ T6636] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.692289][ T6717] netlink: 36 bytes leftover after parsing attributes in process `syz.3.219'. [ 101.790251][ T6723] net_ratelimit: 23 callbacks suppressed [ 101.790268][ T6723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.850912][ T6723] netlink: 'syz.0.221': attribute type 19 has an invalid length. [ 102.022980][ T6730] lo speed is unknown, defaulting to 1000 [ 102.025088][ T6725] netlink: 44 bytes leftover after parsing attributes in process `syz.3.219'. [ 102.158761][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.219'. [ 102.205081][ T6725] netlink: 48 bytes leftover after parsing attributes in process `syz.3.219'. [ 102.277997][ T6733] lo speed is unknown, defaulting to 1000 [ 102.547564][ T6747] tipc: Started in network mode [ 102.556368][ T6747] tipc: Node identity ac1414aa, cluster identity 4711 [ 102.566227][ T6747] tipc: Enabled bearer , priority 10 [ 102.596746][ T6732] lo speed is unknown, defaulting to 1000 [ 103.386219][ T6776] netlink: 'syz.3.236': attribute type 21 has an invalid length. [ 103.567380][ T1569] tipc: Node number set to 2886997162 [ 104.395168][ T6817] lo speed is unknown, defaulting to 1000 [ 104.414923][ T6823] netlink: 'syz.4.247': attribute type 21 has an invalid length. [ 104.426375][ T6823] IPv6: NLM_F_CREATE should be specified when creating new route [ 104.945146][ T6833] dummy0: entered promiscuous mode [ 105.432015][ T6855] Illegal XDP return value 4294967274 on prog (id 122) dev N/A, expect packet loss! [ 106.013784][ T6877] __nla_validate_parse: 19 callbacks suppressed [ 106.013801][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 106.093677][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 106.235310][ T6882] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.244448][ T6882] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.253689][ T6882] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.263956][ T6882] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.301670][ T6882] team0: Port device vxlan0 added [ 106.404071][ T6894] lo speed is unknown, defaulting to 1000 [ 106.435782][ T6891] lo speed is unknown, defaulting to 1000 [ 106.469856][ T6903] netlink: 36 bytes leftover after parsing attributes in process `syz.1.272'. [ 106.656416][ T6905] netlink: 16 bytes leftover after parsing attributes in process `syz.0.269'. [ 106.784373][ T6909] netlink: 44 bytes leftover after parsing attributes in process `syz.1.272'. [ 106.969530][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.272'. [ 107.012721][ T6909] netlink: 48 bytes leftover after parsing attributes in process `syz.1.272'. [ 107.334874][ T6920] ipt_rpfilter: unknown options [ 107.668180][ T6928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.278'. [ 107.716115][ T6928] netlink: 16 bytes leftover after parsing attributes in process `syz.2.278'. [ 108.002953][ T6935] lo speed is unknown, defaulting to 1000 [ 108.212225][ T6940] netlink: 'syz.1.281': attribute type 4 has an invalid length. [ 108.681844][ T6957] ipt_rpfilter: unknown options [ 108.749260][ T6960] bond0: option min_links: invalid value (18446744073709551609) [ 108.763137][ T6960] bond0: option min_links: allowed values 0 - 2147483647 [ 108.771632][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.289'. [ 108.788177][ T6960] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 108.811671][ T6905] lo speed is unknown, defaulting to 1000 [ 109.709427][ T6988] xt_CT: You must specify a L4 protocol and not use inversions on it [ 110.184690][ T7001] netlink: 'syz.0.310': attribute type 39 has an invalid length. [ 110.689416][ T7028] netlink: 'syz.4.309': attribute type 13 has an invalid length. [ 110.742914][ T7028] gretap0: refused to change device tx_queue_len [ 110.749288][ T7028] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 110.855173][ T7034] sock: sock_set_timeout: `syz.0.311' (pid 7034) tries to set negative timeout [ 111.271444][ T7060] __nla_validate_parse: 2 callbacks suppressed [ 111.271461][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.315'. [ 111.287140][ T7053] lo speed is unknown, defaulting to 1000 [ 111.357821][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.315'. [ 111.428255][ T7056] netlink: 16 bytes leftover after parsing attributes in process `syz.1.317'. [ 111.685553][ T7071] netlink: 'syz.2.321': attribute type 1 has an invalid length. [ 111.706010][ T7071] netlink: 'syz.2.321': attribute type 1 has an invalid length. [ 111.756488][ T7078] openvswitch: netlink: IP tunnel dst address not specified [ 111.779745][ T7078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.323'. [ 111.781271][ T7071] netlink: 192 bytes leftover after parsing attributes in process `syz.2.321'. [ 111.789344][ T7078] netlink: 60 bytes leftover after parsing attributes in process `syz.4.323'. [ 111.833385][ T7083] openvswitch: netlink: IP tunnel dst address not specified [ 111.857627][ T7079] netlink: 132 bytes leftover after parsing attributes in process `syz.2.321'. [ 111.882180][ T7078] vlan0: entered promiscuous mode [ 111.992276][ T7092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.325'. [ 112.043044][ T7092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.325'. [ 112.420601][ T7100] lo speed is unknown, defaulting to 1000 [ 112.525473][ T7109] netlink: 36 bytes leftover after parsing attributes in process `syz.4.332'. [ 113.644405][ T5880] IPVS: starting estimator thread 0... [ 113.742723][ T7151] IPVS: using max 40 ests per chain, 96000 per kthread [ 113.825176][ T7159] netlink: 'syz.4.345': attribute type 1 has an invalid length. [ 113.881066][ T7159] bond1: entered promiscuous mode [ 113.886823][ T7159] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.041478][ T7160] lo speed is unknown, defaulting to 1000 [ 115.019234][ T7222] xt_CT: You must specify a L4 protocol and not use inversions on it [ 115.050502][ T7225] netlink: 'syz.2.366': attribute type 10 has an invalid length. [ 115.081615][ T7225] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.105418][ T7225] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.121049][ T7225] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.130092][ T7225] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.146436][ T7225] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 115.160455][ T7225] team0: Failed to send options change via netlink (err -105) [ 115.174000][ T7225] team0: Port device geneve0 added [ 117.923836][ T7225] syz.2.366 (7225) used greatest stack depth: 20024 bytes left [ 118.229397][ T7239] lo speed is unknown, defaulting to 1000 [ 118.348767][ T7253] __nla_validate_parse: 16 callbacks suppressed [ 118.348804][ T7253] netlink: 40 bytes leftover after parsing attributes in process `syz.0.376'. [ 118.378614][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.378'. [ 118.390262][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.376'. [ 118.519134][ T7251] lo speed is unknown, defaulting to 1000 [ 118.777293][ T7270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.380'. [ 118.895939][ T7270] bridge_slave_1: left allmulticast mode [ 118.902003][ T7270] bridge_slave_1: left promiscuous mode [ 118.908585][ T7270] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.928078][ T7270] bridge_slave_0: left allmulticast mode [ 118.934095][ T7270] bridge_slave_0: left promiscuous mode [ 118.940023][ T7270] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.290569][ T7277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.382'. [ 119.367119][ T7277] 8021q: adding VLAN 0 to HW filter on device team1 [ 119.477696][ T7284] netlink: 24 bytes leftover after parsing attributes in process `syz.3.385'. [ 119.590448][ T7291] netlink: 24 bytes leftover after parsing attributes in process `syz.3.385'. [ 119.698416][ T7286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.828366][ T7294] xt_CT: No such helper "pptp" [ 119.942725][ T7303] openvswitch: netlink: Duplicate or invalid key (type 0). [ 119.949970][ T7303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.991594][ T7305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.389'. [ 120.015629][ T7305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.389'. [ 120.078350][ T7309] syzkaller1: entered promiscuous mode [ 120.084314][ T7309] syzkaller1: entered allmulticast mode [ 120.257560][ T7316] dvmrp8: entered allmulticast mode [ 120.266421][ T7316] dvmrp8: left allmulticast mode [ 120.696619][ T7340] netlink: 144 bytes leftover after parsing attributes in process `syz.4.400'. [ 120.766825][ T7339] vlan0: entered promiscuous mode [ 120.807086][ T7339] vlan0: entered allmulticast mode [ 120.877697][ T7348] xt_hashlimit: max too large, truncated to 1048576 [ 120.933099][ T7325] bond0: (slave bond_slave_0): Releasing backup interface [ 120.981723][ T7325] bond0: (slave bond_slave_1): Releasing backup interface [ 121.016223][ T7325] team0: Port device team_slave_0 removed [ 121.026984][ T7325] team0: Port device team_slave_1 removed [ 121.040054][ T7325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.048237][ T7325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.060851][ T7325] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.070003][ T7325] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.084796][ T7325] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.093385][ T7325] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.108141][ T7325] team0: Port device geneve0 removed [ 121.119379][ T7325] team0: Port device bridge0 removed [ 121.449671][ T5876] IPVS: starting estimator thread 0... [ 121.479155][ T7374] netlink: 'syz.0.410': attribute type 10 has an invalid length. [ 121.494900][ T7374] team0: Device dummy0 is up. Set it down before adding it as a team port [ 121.544087][ T7372] IPVS: using max 32 ests per chain, 76800 per kthread [ 122.322328][ T7402] netlink: 'syz.2.418': attribute type 1 has an invalid length. [ 122.479739][ T7410] lo speed is unknown, defaulting to 1000 [ 123.073864][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 123.296084][ T7461] ip6gre1: entered promiscuous mode [ 123.416166][ T7466] __nla_validate_parse: 11 callbacks suppressed [ 123.416183][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.440'. [ 123.451986][ T7466] gre0: entered promiscuous mode [ 123.497281][ T7466] netlink: 68 bytes leftover after parsing attributes in process `syz.1.440'. [ 124.242134][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.450'. [ 124.262983][ T7504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.450'. [ 124.300860][ T7504] netlink: 'syz.4.450': attribute type 20 has an invalid length. [ 125.470301][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.454'. [ 125.480286][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.454'. [ 125.574872][ T7520] netlink: 36 bytes leftover after parsing attributes in process `syz.2.453'. [ 125.809205][ T7527] lo speed is unknown, defaulting to 1000 [ 125.868912][ T7528] netlink: 44 bytes leftover after parsing attributes in process `syz.2.453'. [ 125.918706][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.453'. [ 125.941493][ T7528] netlink: 48 bytes leftover after parsing attributes in process `syz.2.453'. [ 126.136715][ T7539] bond0: (slave bond_slave_0): Releasing backup interface [ 126.169203][ T7539] bond0: (slave bond_slave_1): Releasing backup interface [ 126.237316][ T7539] team0: Port device team_slave_0 removed [ 126.249467][ T7539] team0: Port device team_slave_1 removed [ 126.287403][ T7539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.316573][ T7539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.338806][ T7539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.346412][ T7539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.415153][ T7544] team0: Mode "l" not found [ 126.537622][ T30] audit: type=1800 audit(1746223456.024:3): pid=7553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.462" name="memory.events" dev="tmpfs" ino=602 res=0 errno=0 [ 126.596184][ T30] audit: type=1804 audit(1746223456.074:4): pid=7553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.462" name="memory.events" dev="tmpfs" ino=602 res=1 errno=0 [ 126.677659][ T7557] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 127.179745][ T7584] syz_tun: entered allmulticast mode [ 127.212772][ T7583] syz_tun: left allmulticast mode [ 128.166530][ T7621] lo speed is unknown, defaulting to 1000 [ 128.384847][ T7634] C: renamed from lo (while UP) [ 128.435005][ T7634] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 128.539340][ T7638] __nla_validate_parse: 24 callbacks suppressed [ 128.539357][ T7638] netlink: 300 bytes leftover after parsing attributes in process `syz.2.489'. [ 128.917855][ T7646] lo speed is unknown, defaulting to 1000 [ 129.171839][ T7653] syzkaller1: entered promiscuous mode [ 129.185371][ T7653] syzkaller1: entered allmulticast mode [ 129.324564][ T7664] Cannot find add_set index 0 as target [ 129.402133][ T7662] netlink: 16 bytes leftover after parsing attributes in process `syz.3.494'. [ 129.497293][ T7676] netlink: 36 bytes leftover after parsing attributes in process `syz.0.499'. [ 129.529014][ T7655] lo speed is unknown, defaulting to 1000 [ 129.968303][ T7672] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.220905][ T7698] netlink: 20 bytes leftover after parsing attributes in process `syz.1.504'. [ 130.364204][ T7694] syzkaller0: entered promiscuous mode [ 130.369830][ T7694] syzkaller0: entered allmulticast mode [ 130.515814][ T7707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.507'. [ 130.585775][ T7707] netlink: 2 bytes leftover after parsing attributes in process `syz.2.507'. [ 130.605400][ T7707] netlink: 16 bytes leftover after parsing attributes in process `syz.2.507'. [ 130.817908][ T7715] netlink: 28 bytes leftover after parsing attributes in process `syz.0.510'. [ 130.839087][ T7715] netlink: 28 bytes leftover after parsing attributes in process `syz.0.510'. [ 131.820790][ T7707] sit1: entered allmulticast mode [ 131.874408][ T7669] lo speed is unknown, defaulting to 1000 [ 131.958620][ T7707] syz.2.507 (7707) used greatest stack depth: 19976 bytes left [ 131.998909][ T7722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.513'. [ 132.028258][ T7728] netlink: 'syz.1.515': attribute type 13 has an invalid length. [ 132.054270][ T7728] netlink: 'syz.1.515': attribute type 12 has an invalid length. [ 132.469442][ T7750] xt_CT: No such helper "pptp" [ 132.774290][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.986607][ T7759] lo speed is unknown, defaulting to 1000 [ 133.617314][ T7786] can: request_module (can-proto-3) failed. [ 133.623455][ T7790] wireguard0: entered promiscuous mode [ 133.728489][ T7799] dummy0: entered promiscuous mode [ 133.756754][ T7799] macsec1: entered promiscuous mode [ 133.766953][ T7799] macsec1: entered allmulticast mode [ 133.787821][ T7799] dummy0: entered allmulticast mode [ 133.834374][ T7799] dummy0: left allmulticast mode [ 133.842569][ T7799] dummy0: left promiscuous mode [ 133.848015][ T7811] __nla_validate_parse: 4 callbacks suppressed [ 133.848030][ T7811] netlink: 36 bytes leftover after parsing attributes in process `syz.1.538'. [ 134.060976][ T7805] lo speed is unknown, defaulting to 1000 [ 134.787117][ T7843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.545'. [ 134.809956][ T7844] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 134.848456][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.545'. [ 134.897895][ T47] IPVS: starting estimator thread 0... [ 134.912584][ T7849] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 134.913181][ T7851] netlink: 24 bytes leftover after parsing attributes in process `syz.3.548'. [ 135.001762][ T7849] netlink: 476 bytes leftover after parsing attributes in process `syz.0.547'. [ 135.012871][ T7849] bond_slave_0: entered promiscuous mode [ 135.018702][ T7849] netlink: 64 bytes leftover after parsing attributes in process `syz.0.547'. [ 135.027747][ T7857] IPVS: using max 31 ests per chain, 74400 per kthread [ 135.035158][ T7849] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 135.158681][ T7866] netlink: 'syz.2.552': attribute type 1 has an invalid length. [ 135.170210][ T7859] lo speed is unknown, defaulting to 1000 [ 135.195407][ T7866] netlink: 224 bytes leftover after parsing attributes in process `syz.2.552'. [ 135.253885][ T7866] macvtap1: entered promiscuous mode [ 135.266057][ T7866] macvtap1: entered allmulticast mode [ 135.724820][ T7887] syzkaller1: entered promiscuous mode [ 135.748443][ T7887] syzkaller1: entered allmulticast mode [ 135.917023][ T7905] netlink: 'syz.2.560': attribute type 39 has an invalid length. [ 136.564389][ T7925] syzkaller0: entered promiscuous mode [ 136.579757][ T7925] syzkaller0: entered allmulticast mode [ 136.630901][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.569'. [ 136.658757][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.569'. [ 136.784427][ T7937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.571'. [ 137.751108][ T7937] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 137.753075][ T7940] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 137.773951][ T7943] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 137.962738][ T7955] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 138.328344][ T7981] ------------[ cut here ]------------ [ 138.372577][ T7981] UBSAN: array-index-out-of-bounds in ./include/net/ipv6.h:616:21 [ 138.380475][ T7981] index 16 is out of range for type 'const __u8[16]' (aka 'const unsigned char[16]') [ 138.442248][ T7981] CPU: 0 UID: 0 PID: 7981 Comm: syz.2.582 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 138.442274][ T7981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 138.442285][ T7981] Call Trace: [ 138.442291][ T7981] [ 138.442300][ T7981] dump_stack_lvl+0x189/0x250 [ 138.442333][ T7981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.442356][ T7981] ? __pfx__printk+0x10/0x10 [ 138.442370][ T7981] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 138.442404][ T7981] ubsan_epilogue+0xa/0x40 [ 138.442421][ T7981] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 138.442448][ T7981] ? __asan_memcpy+0x40/0x70 [ 138.442467][ T7981] ipv6_addr_prefix+0x145/0x1d0 [ 138.442496][ T7981] ip6_route_info_create+0x629/0xa70 [ 138.442523][ T7981] ip6_route_add+0x29/0x2f0 [ 138.442539][ T7981] ? ipv6_route_ioctl+0x313/0x480 [ 138.442561][ T7981] ipv6_route_ioctl+0x35c/0x480 [ 138.442587][ T7981] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 138.442638][ T7981] inet6_ioctl+0x219/0x280 [ 138.442653][ T7981] ? __pfx_inet6_ioctl+0x10/0x10 [ 138.442678][ T7981] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 138.442708][ T7981] sock_do_ioctl+0xd9/0x300 [ 138.442733][ T7981] ? __pfx_sock_do_ioctl+0x10/0x10 [ 138.442754][ T7981] ? __lock_acquire+0xaac/0xd20 [ 138.442785][ T7981] sock_ioctl+0x576/0x790 [ 138.442809][ T7981] ? __pfx_sock_ioctl+0x10/0x10 [ 138.442834][ T7981] ? __fget_files+0x3a0/0x420 [ 138.442854][ T7981] ? __fget_files+0x2a/0x420 [ 138.442875][ T7981] ? bpf_lsm_file_ioctl+0x9/0x20 [ 138.442894][ T7981] ? __pfx_sock_ioctl+0x10/0x10 [ 138.442915][ T7981] __se_sys_ioctl+0xf9/0x170 [ 138.442945][ T7981] do_syscall_64+0xf6/0x210 [ 138.442969][ T7981] ? clear_bhb_loop+0x45/0xa0 [ 138.442989][ T7981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.443005][ T7981] RIP: 0033:0x7fd63178e969 [ 138.443020][ T7981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.443033][ T7981] RSP: 002b:00007fd63257f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.443051][ T7981] RAX: ffffffffffffffda RBX: 00007fd6319b6080 RCX: 00007fd63178e969 [ 138.443063][ T7981] RDX: 0000200000000440 RSI: 000000000000890b RDI: 0000000000000004 [ 138.443074][ T7981] RBP: 00007fd631810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 138.443084][ T7981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.443093][ T7981] R13: 0000000000000000 R14: 00007fd6319b6080 R15: 00007fff4f092378 [ 138.443122][ T7981] [ 138.734500][ T7981] ---[ end trace ]--- [ 138.738635][ T7981] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 138.745840][ T7981] CPU: 1 UID: 0 PID: 7981 Comm: syz.2.582 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 138.757732][ T7981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 138.767794][ T7981] Call Trace: [ 138.771074][ T7981] [ 138.774014][ T7981] dump_stack_lvl+0x99/0x250 [ 138.778619][ T7981] ? __asan_memcpy+0x40/0x70 [ 138.783214][ T7981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.788429][ T7981] ? __pfx__printk+0x10/0x10 [ 138.793044][ T7981] panic+0x2db/0x790 [ 138.796963][ T7981] ? __pfx_panic+0x10/0x10 [ 138.801382][ T7981] ? _printk+0xcf/0x120 [ 138.805531][ T7981] ? __pfx__printk+0x10/0x10 [ 138.810119][ T7981] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 138.816018][ T7981] check_panic_on_warn+0x89/0xb0 [ 138.820949][ T7981] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 138.826665][ T7981] ? __asan_memcpy+0x40/0x70 [ 138.831254][ T7981] ipv6_addr_prefix+0x145/0x1d0 [ 138.836105][ T7981] ip6_route_info_create+0x629/0xa70 [ 138.841388][ T7981] ip6_route_add+0x29/0x2f0 [ 138.845881][ T7981] ? ipv6_route_ioctl+0x313/0x480 [ 138.850901][ T7981] ipv6_route_ioctl+0x35c/0x480 [ 138.855762][ T7981] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 138.861147][ T7981] inet6_ioctl+0x219/0x280 [ 138.865569][ T7981] ? __pfx_inet6_ioctl+0x10/0x10 [ 138.870501][ T7981] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 138.876481][ T7981] sock_do_ioctl+0xd9/0x300 [ 138.881010][ T7981] ? __pfx_sock_do_ioctl+0x10/0x10 [ 138.886117][ T7981] ? __lock_acquire+0xaac/0xd20 [ 138.890977][ T7981] sock_ioctl+0x576/0x790 [ 138.895313][ T7981] ? __pfx_sock_ioctl+0x10/0x10 [ 138.900170][ T7981] ? __fget_files+0x3a0/0x420 [ 138.904839][ T7981] ? __fget_files+0x2a/0x420 [ 138.909433][ T7981] ? bpf_lsm_file_ioctl+0x9/0x20 [ 138.914365][ T7981] ? __pfx_sock_ioctl+0x10/0x10 [ 138.919208][ T7981] __se_sys_ioctl+0xf9/0x170 [ 138.923789][ T7981] do_syscall_64+0xf6/0x210 [ 138.928289][ T7981] ? clear_bhb_loop+0x45/0xa0 [ 138.932963][ T7981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.938843][ T7981] RIP: 0033:0x7fd63178e969 [ 138.943251][ T7981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.962853][ T7981] RSP: 002b:00007fd63257f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.971262][ T7981] RAX: ffffffffffffffda RBX: 00007fd6319b6080 RCX: 00007fd63178e969 [ 138.979222][ T7981] RDX: 0000200000000440 RSI: 000000000000890b RDI: 0000000000000004 [ 138.987182][ T7981] RBP: 00007fd631810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 138.995148][ T7981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.003116][ T7981] R13: 0000000000000000 R14: 00007fd6319b6080 R15: 00007fff4f092378 [ 139.011092][ T7981] [ 139.014340][ T7981] Kernel Offset: disabled [ 139.018656][ T7981] Rebooting in 86400 seconds..