last executing test programs: 8.245018381s ago: executing program 3 (id=15061): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0x6, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2032}, 0x50) (async) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000cc0), &(0x7f0000000340)=@udp=r1, 0x1}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)={0x14, r5, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2400c805}, 0x2400c000) (async) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xffffffffffffff19, &(0x7f0000000040)={&(0x7f0000000280)={0x7c, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xfffffffffffffe7a, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1, @TIPC_NLA_NET_NODEID_W1={0x0, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0x0, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_NET_NODEID_W1={0x0, 0x4, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0x0, 0x4, 0x8bfc}, @TIPC_NLA_NET_ID={0x0, 0x1, 0xc5}, @TIPC_NLA_NET_ID={0x0, 0x1, 0x10000006}, @TIPC_NLA_NET_NODEID_W1={0x0, 0x4, 0x9}, @TIPC_NLA_NET_ID]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008804}, 0x4000) syz_emit_ethernet(0x92, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ee527a", 0x5c, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@routing={0x84, 0x2, 0x1, 0x4, 0x0, [@private0]}], {{}, {}, {}, {0x8, 0x88be, 0x1}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}}, 0x0) 7.968041399s ago: executing program 3 (id=15064): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) (async, rerun: 64) r1 = socket$inet(0x2, 0xa, 0x6) (rerun: 64) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}, 'veth1_to_bridge\x00'}) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000640)={{0x2, 0x0, @dev}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'pim6reg\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32) syz_emit_ethernet(0x0, 0x0, 0x0) (async, rerun: 32) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000100)={0x1d, r4}, 0x10) 7.257326205s ago: executing program 3 (id=15073): r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) (async) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x40000008}) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(twofish-asm)\x00'}, 0x58) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x312) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000"], 0x48) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) (async, rerun: 32) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (rerun: 32) r6 = accept4(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r6) (async) r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_NSTYPE(r7, 0xb703, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r10 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}]}}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x200, 0x70bd28, 0x40, {0x0, 0x0, 0x0, 0x0, 0x210}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 6.229888379s ago: executing program 3 (id=15086): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 6.005632811s ago: executing program 3 (id=15089): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000f6608000000000000180000000000000000000000000000009500000000000000360a020000000010180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) 5.759091747s ago: executing program 3 (id=15094): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000060000000000000c03000000000000000000001401000000000000000000000d000000000000000000005f"], 0x0, 0x44}, 0x20) 3.251001939s ago: executing program 0 (id=15130): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x28, &(0x7f0000000580)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @printk={@i}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffff9}, @jmp={0x5, 0x0, 0xa, 0x1, 0x2, 0xfffffffffffffff4, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_fd={0x18, 0xa}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x8}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}], &(0x7f00000006c0)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000700)=""/39, 0x41100, 0x50, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x7, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffeb6, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x90656}, [@IFLA_XDP={0x0, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x0, 0x1, r3}, @IFLA_XDP_FLAGS={0x0, 0x3, 0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x690}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) 3.129726558s ago: executing program 4 (id=15132): syz_emit_ethernet(0x5a, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaabb08004e00004c0000000001059078ac141400ac1e01014414070300000000fffffffee000000200000000830b61e00000027f0000018302000000000000009d2296a59b9714f84c9d3469d468a3fe2f6ef9e4f9cc3ed938a0190008fd0c49c60eca6e47bda73c5971fc55c14365134c30e2723d3e6f943edd2fa4b1b86f9b182d09f347e012a3405dc75d3db46cc56012c024e79d6f6e077d01264d67dfe5e44a888e96adc4720849f54d1b8d65e33a7c3118f45f83c2528a389de74aac6e738a227490a005e88bbff6f1f78ca7eff09e48bf2860f2afd9a0c24b7059f2d45ef9a877a17a2a", @ANYRES32=0x41424344, @ANYRESDEC=0x0, @ANYRESOCT], 0x0) r0 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000440)={'sit0\x00', r1, 0x10, 0x10, 0x3ae6, 0x3f, {{0x3a, 0x4, 0x3, 0x1, 0xe8, 0x65, 0x0, 0x9, 0x2f, 0x0, @local, @multicast1, {[@rr={0x7, 0xb, 0x47, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @lsrr={0x83, 0xb, 0x83, [@multicast2, @private=0xa010102]}, @ssrr={0x89, 0x23, 0x44, [@empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x23}, @remote, @empty, @multicast1, @loopback, @multicast1]}, @noop, @timestamp_prespec={0x44, 0x3c, 0x34, 0x3, 0x0, [{@multicast1, 0x44}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@private=0xa010102, 0x9}, {@remote, 0xff}, {@multicast2, 0xfffffdff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@multicast2, 0x9}]}, @timestamp_prespec={0x44, 0x1c, 0xbb, 0x3, 0x4, [{@broadcast, 0x2}, {@empty, 0x40}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x6}]}, @end, @generic={0x44, 0x8, "c8721bf3c3fe"}, @cipso={0x86, 0x38, 0x0, [{0x2, 0x9, "751c04182e2b0e"}, {0x5, 0xc, "e9f66f23aa30f75ec613"}, {0x7, 0xe, "4e7c8cc653114ebc6b19268f"}, {0x6, 0x5, "84c92f"}, {0x1, 0xa, "adb570dfb706801b"}]}, @noop]}}}}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x2a, 0x2, 0x0) unshare(0x2c020400) connect$inet(r7, &(0x7f0000000380)={0x2, 0x4e24, @remote}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)={0x38, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x38}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x8d, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420002e61afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) syz_emit_ethernet(0x2a, &(0x7f0000000940)={@local, @empty, @void, {@ipv4={0x8902, @igmp={{0x5, 0x4, 0x1, 0x19, 0x1c, 0x68, 0x0, 0xf, 0x2, 0x0, @private=0xa010101, @local}, {0x13, 0x1c, 0x0, @empty}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000000000000000000000850000002f000000180100002020752500000000002020207b1af8ff00000000bfa101000000000007010000f8ff1cffb702000008000000b70300006813000085000000b400000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2235, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x852, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x6, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x7, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x6, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0x200af6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x6, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0x80000ec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x140, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb827, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffffff, 0x3, 0x9, 0xc, 0x5, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0xe, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbba, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x4, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x4, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x9, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0xa, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x6, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000080)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x14) 2.7518912s ago: executing program 0 (id=15137): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7000000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) 2.655615327s ago: executing program 4 (id=15139): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) unshare(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a05000000004000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) 2.530704022s ago: executing program 0 (id=15140): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x60}}, 0x8800) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x3, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0xff00, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000008d2b2b0400ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfffe, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x5, "457d29f44382270a8831cd672ca3a810"}}}]}, 0x44}}, 0x400) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@newtfilter={0x68, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xfff5, 0x4}, {0xa}, {0x7, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_ARP_TIP_MASK={0x8}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @local}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0xffff, 0xb}}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x68}}, 0x4800) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @sack_perm, @window={0x3, 0x9, 0x9}, @window={0x3, 0x6, 0xff81}, @timestamp, @sack_perm, @window={0x3, 0x1, 0x5}], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r7, &(0x7f0000000380)='x', 0x1, 0x480c1, 0x0, 0x0) r8 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r8, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x306, @local}, 0x6, {0x2, 0x4e20, @remote}}) 2.49694823s ago: executing program 4 (id=15142): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1fffffff}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0xfff0}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.313222348s ago: executing program 4 (id=15143): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x6) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2.086194617s ago: executing program 4 (id=15146): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x10000000}, 0x48) 2.019982853s ago: executing program 4 (id=15147): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'hsr0\x00', @random="a061f7bdf7c1"}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x4000800}, 0x80) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000300)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r4, &(0x7f0000000340)=""/86, 0x56, 0x100, 0x0, 0x0) splice(r3, 0x0, r4, 0x0, 0x1, 0x0) bind$rds(r4, &(0x7f00000002c0)={0x2, 0x4e24, @broadcast}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfeefffff}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0) r5 = socket$pptp(0x18, 0x1, 0x2) write(r2, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000200)={{r5, &(0x7f0000000000)='hsr0\x00', 0x240000, &(0x7f0000000080)={@_ha_fsid={[0xffffffff, 0x3]}, {0x3, 0x3, 0x83, 0x7f}}, 0x3ee5, &(0x7f00000000c0), &(0x7f0000000100)=0xda9}, {[0xa4c3, 0x1, 0x8, 0x7]}, 0x800, 0x9b, &(0x7f0000000140)=""/155}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000280)={'gre0\x00', 0x8000}) 1.836351317s ago: executing program 1 (id=15148): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300f808000000b70400000000000085000000550000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.618954276s ago: executing program 1 (id=15149): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000180)={{0x3b, @private=0xa010100, 0x4e20, 0x0, 'wrr\x00', 0x1, 0xfff, 0x2b}, {@remote, 0x4e21, 0x1, 0x20000000, 0x3, 0x3}}, 0x44) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x34e, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000000000)=""/238, &(0x7f00000002c0)=0xee) 1.618337258s ago: executing program 0 (id=15150): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000400000000000000000000030000000003000000030000000000010101000fffff00000800000000010000000100000506000000010000000200000000000000005f"], &(0x7f0000001540)=""/4096, 0x58, 0x1000, 0xa}, 0x20) 1.52766933s ago: executing program 1 (id=15151): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4001}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0xfffffffffffffdef) 1.487191133s ago: executing program 0 (id=15152): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2, 0xfff8, 0x40000000}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 1.416948771s ago: executing program 1 (id=15153): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x22020600) socket$igmp6(0xa, 0x3, 0x2) close(0x4) syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$inet_buf(r0, 0x118, 0x29, 0x0, &(0x7f00000003c0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0) 1.191768664s ago: executing program 0 (id=15155): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000340)={0x7, 0x6, 0x31, 0x5, 0x80, 0x9, 0x42, 0x1, 0xb, 0x7, 0x8, 0x8, 0xfe, 0x4}, 0xe) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8a450200000000002400128009000100626f6e6400000041140002800500010006000000080002"], 0x44}}, 0x40) 682.281921ms ago: executing program 2 (id=15158): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p={0x18, 0x1, 0x0, 0x0, 0x257020d0}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0x6, 0x0, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 442.293574ms ago: executing program 2 (id=15159): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000700004e20000000000000000000000200", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff0000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a0002"], 0x128}, 0x1, 0x0, 0x0, 0x4004091}, 0x0) 332.858121ms ago: executing program 2 (id=15160): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x400001ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xff], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x168, 0x198, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@iprange={{0x68}, {@ipv6=@mcast2, @ipv4=@loopback, @ipv6=@mcast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x12}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x438) syz_emit_ethernet(0xfe2, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbfffffffffffb86dd674396200fac11fffe8000000000000000000000e1e1ff0aff0200000000000000000000000000016cb4340604030f"], 0x0) 182.943586ms ago: executing program 2 (id=15161): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="54040000160001000000000000000000fc000000000000000000000000000001ac1414bb0000000000000000000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x454}, 0x1, 0x0, 0x0, 0x4005}, 0x0) 182.674302ms ago: executing program 1 (id=15162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000240000010000000900010073797a30000000000900030073797a320000000090000000060a010400000000000000000100000308000b400000000068000480340001800b000100657874686472000024000280080001400000000c08000340000000020500020007000000080004400000002f3000018008000100636d700024000280100003800a000100910d000000000000080001400000000608000240000000000900010073797a30"], 0x104}, 0x1, 0x0, 0x0, 0x180}, 0x0) 99.385935ms ago: executing program 1 (id=15163): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="aabb", 0x2}], 0x1}}], 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) listen(r3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @remote, @val={@void}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local}}}}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r4) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}, @ip_retopts={{0x10}}], 0x30}, 0x200000e0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 77.419969ms ago: executing program 2 (id=15164): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000006c0)={0xffffffffffffffff, &(0x7f0000000080)='GPL\x00', 0x2000, &(0x7f0000000600)={@align=0x80, {0x8, 0x5, 0x9, 0x1}}, 0x8, &(0x7f0000000640)={@_ha_fsid}, &(0x7f0000000680)=0x2}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000700)={0x0, 0x9, 0x200}, &(0x7f0000000800)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000840)={r1, 0x7e, "b31f2f4f27ed3439fd7c7ceab6ce1afc0280f00fb0fda3168432ad1b28c913919d273e415cbd04b87f12e9f72289889e94ed51ff4c270d97fffc6f4b4cd3caf00ed77f1436600797c452b4d7ed5257da6d8a7d79bc9b96275c318a5f508a67468b0aabc5699b238c4051c36f4659e17b9d419bdc00b627813e50a4e077d7"}, &(0x7f0000000900)=0x86) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3c, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x2a, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/570], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r2}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e000000030100000000040000000000000008001f0001"], 0xd4}}, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = socket$rxrpc(0x21, 0x2, 0x2) listen(r6, 0x40) 0s ago: executing program 2 (id=15165): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d07000000000001000007000000", @ANYRES32=r1, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000a0000000000000000000014200001"], 0x58}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f00000000c0), 0x0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, r1, 0x25, 0x10, @void}, 0x10) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, r1, 0x25, 0x10, @void}, 0x10) recvmsg$unix(r2, 0x0, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [{0x19, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x19, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f025"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf0630af1f98aea6fb3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7596d779b8353aac33a57d79b05613a12328f6101000000634a287570af5e4e12e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e7a94fe18e88605abbbe1a02a326a63ce65f81ed0000000000"}]}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x8000000, 0xe, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d31677b2d0bfa91", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x8000000, 0xe, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d31677b2d0bfa91", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r2) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r2) kernel console output (not intermixed with test programs): after parsing attributes in process `syz.1.13619'. [ 1053.565906][T14008] Cannot find map_set index 0 as target [ 1053.839850][T26712] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1054.059454][T14030] lo speed is unknown, defaulting to 1000 [ 1054.072742][T14030] lo speed is unknown, defaulting to 1000 [ 1054.380301][ T4812] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1054.878908][T14062] netlink: 'syz.1.13640': attribute type 4 has an invalid length. [ 1054.908401][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1055.458205][T26712] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1055.500275][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.789272][T14110] block nbd3: server does not support multiple connections per device. [ 1055.830155][T14110] block nbd3: shutting down sockets [ 1055.846539][T14118] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13661'. [ 1055.888995][T14118] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13661'. [ 1055.967346][T14112] netlink: 128 bytes leftover after parsing attributes in process `syz.1.13661'. [ 1055.990605][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1056.023225][T14124] netlink: 56 bytes leftover after parsing attributes in process `syz.0.13667'. [ 1056.101336][T14129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13668'. [ 1056.197194][T14129] bond2: entered promiscuous mode [ 1056.202928][T14129] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1056.275678][T14129] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1056.309038][T14129] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 1056.322476][T14129] bond2: (slave sit1): Error -95 calling set_mac_address [ 1056.440466][T14150] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001 [ 1056.551141][T14110] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1056.559085][T26712] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1056.585403][T14110] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1056.602422][T14161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13675'. [ 1056.675215][T14110] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1056.682654][T14160] lo speed is unknown, defaulting to 1000 [ 1056.688689][T14110] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1056.706941][T14160] lo speed is unknown, defaulting to 1000 [ 1056.759537][T14110] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1056.779034][T14110] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1056.876627][T14110] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1056.913555][T14110] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1057.005116][ T5286] veth0_vlan: left promiscuous mode [ 1057.067967][T30396] veth0_vlan: entered promiscuous mode [ 1057.111838][T26712] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1057.411059][T14195] Cannot find map_set index 0 as target [ 1057.446804][T14198] netlink: 76 bytes leftover after parsing attributes in process `syz.2.13687'. [ 1057.615907][T14209] Unsupported ieee802154 address type: 0 [ 1057.669511][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1058.035223][T14232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13698'. [ 1058.105713][T14239] netlink: 292 bytes leftover after parsing attributes in process `syz.1.13701'. [ 1058.220155][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1058.243469][T14250] Cannot find set identified by id 65534 to match [ 1058.250652][T14252] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13705'. [ 1058.332924][T14252] syzkaller0: entered promiscuous mode [ 1058.351123][T14252] syzkaller0: entered allmulticast mode [ 1058.763875][T14277] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13712'. [ 1058.780354][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1059.237499][T14308] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13726'. [ 1059.256981][T14308] siw: device registration error -23 [ 1059.328890][T26712] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1059.464880][T14325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13732'. [ 1059.495585][T14325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13732'. [ 1059.495883][T14324] netlink: 'syz.3.13735': attribute type 49 has an invalid length. [ 1059.890711][ T4807] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1059.974462][T14354] netlink: 56 bytes leftover after parsing attributes in process `syz.3.13746'. [ 1060.108441][T14361] netlink: 'syz.3.13750': attribute type 4 has an invalid length. [ 1060.160401][T14366] netlink: 'syz.2.13751': attribute type 4 has an invalid length. [ 1060.488282][ T4812] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1060.489648][T14381] xt_hashlimit: size too large, truncated to 1048576 [ 1060.573584][T14387] netlink: 'syz.0.13758': attribute type 9 has an invalid length. [ 1061.034644][ T4812] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1061.051416][T14419] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13771'. [ 1061.155749][T14425] netlink: 'syz.1.13773': attribute type 1 has an invalid length. [ 1061.250830][T14425] bond5: entered promiscuous mode [ 1061.263782][T14425] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1061.391500][T14431] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1061.402635][T14431] bond5: (slave bond6): making interface the new active one [ 1061.410429][T14431] bond6: entered promiscuous mode [ 1061.425353][T14431] bond5: (slave bond6): Enslaving as an active interface with an up link [ 1061.581326][ T4812] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1061.887449][T14467] x_tables: duplicate underflow at hook 2 [ 1062.153206][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1062.495768][T14503] __nla_validate_parse: 3 callbacks suppressed [ 1062.495788][T14503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13795'. [ 1062.709126][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1062.802059][T14517] netlink: 'syz.0.13800': attribute type 4 has an invalid length. [ 1062.850620][T14520] netlink: 76 bytes leftover after parsing attributes in process `syz.3.13802'. [ 1062.915504][T14524] Cannot find set identified by id 65534 to match [ 1062.993998][T14528] netlink: 556 bytes leftover after parsing attributes in process `syz.4.13805'. [ 1063.129381][T14536] syzkaller0: entered promiscuous mode [ 1063.151682][T14536] syzkaller0: entered allmulticast mode [ 1063.270134][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1063.833836][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1063.965070][T14576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1064.398214][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1064.938604][ T4812] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1065.478649][T26712] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1065.998319][T26712] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1066.518324][T26712] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1067.038437][T26712] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1067.558349][ T4816] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1068.078330][ T4812] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1068.598553][T26712] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1069.118694][ T4812] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1069.638720][T26712] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1070.158260][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1070.678379][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1071.199125][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1071.718271][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1072.238537][T26712] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1072.758260][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1073.278626][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1073.798267][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1074.319281][T26712] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1074.838369][T26712] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1075.358275][T26712] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1075.878542][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1076.398430][ T4812] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1076.918266][ T4816] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1077.438629][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1077.958269][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1078.478406][ T4816] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1078.998242][ T4812] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1079.518451][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1080.038253][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1080.558254][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1081.088713][ T4812] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1081.608721][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1082.128552][ T4812] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1082.648501][ T4806] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1083.168435][ T4816] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1083.688538][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1084.208324][ T4816] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1084.728330][ T4816] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1085.248562][ T4806] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1085.768488][ T4812] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1086.288537][ T4806] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1086.808462][ T4816] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1087.328286][ T4816] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1087.848788][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1088.368306][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1088.888299][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1089.408518][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1089.928812][ T4816] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1090.448635][ T4812] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1090.968394][ T4806] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1091.488913][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1092.008407][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1092.528418][ T4812] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1093.058339][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1093.578321][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1094.098243][ T4806] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1094.618289][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1095.138953][ T4816] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1095.659839][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1096.178566][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1096.698449][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1097.218355][ T4806] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1097.739544][ T4816] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1098.258375][ T4812] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1098.780685][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1099.298391][ T4812] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1099.818233][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1100.338250][ T4812] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1100.859325][ T4806] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1101.378442][ T4812] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1101.899409][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1102.418977][ T4816] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1102.939390][ T4812] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1103.458286][ T4812] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1103.978505][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1104.498292][ T4806] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1105.019909][ T4806] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1105.538270][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1106.059894][ T4816] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1106.578322][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1107.098504][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1107.618252][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1108.139279][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1108.658271][ T4806] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1109.178344][ T4816] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1109.698488][ T4806] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1110.218646][ T4816] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1110.738745][ T4816] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1111.258401][ T4806] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1111.780067][ T4812] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1112.298471][ T4806] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1112.818421][ T4812] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1113.338922][ T4816] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1113.858509][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1114.379286][ T4806] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1114.898456][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1115.418488][ T4806] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1115.938564][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1116.458418][ T4812] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1116.944300][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.959467][ T4810] bridge_slave_1: left allmulticast mode [ 1116.965520][ T4810] bridge_slave_1: left promiscuous mode [ 1116.971834][ T4810] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.979888][ T4812] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1116.997467][ T4810] bridge_slave_0: left allmulticast mode [ 1117.004591][ T4810] bridge_slave_0: left promiscuous mode [ 1117.010819][ T4810] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.025980][ T4810] pimreg: left allmulticast mode [ 1117.292888][ T4810] bond4 (unregistering): (slave bridge2): Releasing backup interface [ 1117.302577][ T4810] bridge2 (unregistering): left promiscuous mode [ 1117.309658][ T4810] bridge2 (unregistering): left allmulticast mode [ 1117.336206][ T4810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1117.347774][ T4810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1117.360238][ T4810] bond0 (unregistering): Released all slaves [ 1117.373612][ T4810] bond1 (unregistering): Released all slaves [ 1117.387835][ T4810] bond2 (unregistering): (slave veth3): Releasing active interface [ 1117.397779][ T4810] bond2 (unregistering): Released all slaves [ 1117.416742][ T4810] bond3 (unregistering): Released all slaves [ 1117.433788][ T4810] bond4 (unregistering): Released all slaves [ 1117.452905][ T4810] bond5 (unregistering): Released all slaves [ 1117.466629][ T4810] bond6 (unregistering): Released all slaves [ 1117.480782][ T4810] bond7 (unregistering): Released all slaves [ 1117.501131][ T4812] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1117.520757][ T4810] bond8 (unregistering): (slave batadv0): Releasing active interface [ 1117.529293][ T4810] batadv0: left promiscuous mode [ 1117.534462][ T4810] batadv0: left allmulticast mode [ 1117.541035][ T4810] bond8 (unregistering): Released all slaves [ 1117.556490][ T4810] bond9 (unregistering): Released all slaves [ 1117.570622][ T4810] bond10 (unregistering): Released all slaves [ 1117.859515][ T4810] tipc: Disabling bearer [ 1117.865159][ T4810] tipc: Left network mode [ 1118.030408][ T4816] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1118.047701][ T4810] hsr_slave_0: left promiscuous mode [ 1118.055978][ T4810] hsr_slave_1: left promiscuous mode [ 1118.064632][ T4810] veth1_macvtap: left promiscuous mode [ 1118.070898][ T4810] veth0_macvtap: left promiscuous mode [ 1118.076510][ T4810] veth1_vlan: left promiscuous mode [ 1118.082152][ T4810] veth0_vlan: left promiscuous mode [ 1118.342677][ T4810] team0 (unregistering): Port device team_slave_1 removed [ 1118.358134][ T4810] team0 (unregistering): Port device team_slave_0 removed [ 1118.485444][ T4808] smbdirect: ib_dev[syz2] removed [ 1118.492329][ T5722] lo speed is unknown, defaulting to 1000 [ 1118.508292][ T5722] syz2: Port: 1 Link DOWN [ 1118.548435][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1118.870817][ T4810] IPVS: stop unused estimator thread 0... [ 1119.068212][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1119.588155][T26712] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1120.108189][ T4807] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1120.628282][ T4807] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1121.148205][ T4816] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1121.668901][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1122.188377][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1122.718401][ T4816] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1123.238678][ T4807] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1123.769450][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1124.288241][ T4816] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1124.808466][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1125.328427][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1125.848360][ T4807] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1126.368386][ T4816] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1126.888236][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1127.408401][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1127.928292][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1128.448584][ T4807] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1128.968536][ T4807] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1129.488470][ T4816] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1130.008364][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1130.528262][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1131.048280][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1131.568264][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1132.088224][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1132.608380][ T4807] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1133.128359][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1133.648264][ T4807] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1134.168288][ T4807] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1134.688309][ T4807] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1135.016043][T14655] tipc: Started in network mode [ 1135.037544][T14655] tipc: Node identity bee2839abca7, cluster identity 4711 [ 1135.083351][T14655] tipc: Enabled bearer , priority 0 [ 1135.190609][T14655] tipc: Disabling bearer [ 1135.208531][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1135.476300][T14670] netlink: 25 bytes leftover after parsing attributes in process `syz.4.13844'. [ 1135.520123][T14670] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13844'. [ 1135.551313][T14670] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13844'. [ 1135.571381][T14670] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13844'. [ 1135.753971][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1136.251657][T14714] Cannot find add_set index 0 as target [ 1136.278267][T14716] netlink: 56 bytes leftover after parsing attributes in process `syz.3.13861'. [ 1136.293060][ T4816] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1136.297829][T14714] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13860'. [ 1136.353601][T14714] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13860'. [ 1136.631354][T14731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13865'. [ 1136.834955][T14735] macsec1: entered promiscuous mode [ 1136.841530][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1137.016109][T14738] bond5: entered promiscuous mode [ 1137.035019][T14738] bond5: entered allmulticast mode [ 1137.252952][T14752] veth0: entered promiscuous mode [ 1137.302367][T14756] veth0: left promiscuous mode [ 1137.399459][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1137.464611][T14765] netlink: 76 bytes leftover after parsing attributes in process `syz.3.13877'. [ 1137.561088][T14767] tap0: tun_chr_ioctl cmd 1074025677 [ 1137.576675][T14767] tap0: linktype set to 804 [ 1137.596234][T14767] netlink: 170676 bytes leftover after parsing attributes in process `syz.1.13878'. [ 1137.627837][T14767] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 1137.658456][T14767] openvswitch: netlink: Message has 512 unknown bytes. [ 1137.924927][T14784] lo speed is unknown, defaulting to 1000 [ 1137.959189][ T4807] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1138.271920][T14805] syzkaller0: entered promiscuous mode [ 1138.313173][T14805] syzkaller0: entered allmulticast mode [ 1138.456005][T14805] tipc: Enabled bearer , priority 0 [ 1138.504214][T14803] tipc: Resetting bearer [ 1138.519216][ T4807] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1138.573251][T14803] tipc: Disabling bearer [ 1139.080613][ T4816] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1139.099136][T14813] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.107115][T14813] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.443575][T14813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1139.480719][T14813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1139.640904][ T4807] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1139.757933][T14784] dvmrp0: entered allmulticast mode [ 1139.819506][ T4807] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.841993][ T4807] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.871396][ T4810] dvmrp0: left allmulticast mode [ 1140.070096][ T4807] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.093514][ T4807] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.158594][T26712] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1140.704755][T14883] __nla_validate_parse: 145 callbacks suppressed [ 1140.704776][T14883] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13921'. [ 1140.733573][T14883] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13921'. [ 1141.047110][T14912] SET target dimension over the limit! [ 1141.244764][T14928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13939'. [ 1141.610270][ T6184] IPVS: starting estimator thread 0... [ 1141.692046][T14955] netlink: 9 bytes leftover after parsing attributes in process `syz.3.13951'. [ 1141.693297][T14957] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.13952'. [ 1141.720088][ T4812] net_ratelimit: 2 callbacks suppressed [ 1141.720104][ T4812] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1141.728388][T14959] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.13952'. [ 1141.744168][T14953] IPVS: using max 33 ests per chain, 79200 per kthread [ 1141.761709][T14955] netlink: 9 bytes leftover after parsing attributes in process `syz.3.13951'. [ 1141.784221][T14964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13952'. [ 1141.826903][T14957] netlink: 52 bytes leftover after parsing attributes in process `syz.2.13952'. [ 1142.000189][T14977] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13960'. [ 1142.152192][T14986] lo speed is unknown, defaulting to 1000 [ 1142.304197][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1142.444831][T15007] syzkaller1: entered promiscuous mode [ 1142.467348][T15007] syzkaller1: entered allmulticast mode [ 1142.869086][T26712] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1143.380633][T15057] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 1143.410703][ T4807] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1143.842151][T15088] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1143.874057][T15091] netlink: 'syz.2.14005': attribute type 1 has an invalid length. [ 1143.924735][T15091] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1143.958391][ T4807] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1143.984852][T15094] xt_hashlimit: Unknown mode mask 3FFFF, kernel too old? [ 1144.064833][T15091] veth5: entered allmulticast mode [ 1144.114224][T15091] bond3: (slave veth5): Enslaving as an active interface with a down link [ 1144.150064][T15097] bond1: (slave veth0_to_bond): Releasing active interface [ 1144.162279][T15097] veth0_to_bond: left allmulticast mode [ 1144.168498][T15097] veth0_to_bond: left promiscuous mode [ 1144.206593][T15097] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1144.261819][T15100] bond3: entered promiscuous mode [ 1144.268307][T15100] bond3: entered allmulticast mode [ 1144.340415][T15091] macvlan0: entered promiscuous mode [ 1144.357746][T15091] macvlan0: entered allmulticast mode [ 1144.373245][T15091] bond3: (slave macvlan0): Error -98 calling set_mac_address [ 1144.518507][ T4807] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1144.567643][T15119] Cannot find map_set index 0 as target [ 1144.632679][T15123] syzkaller0: entered promiscuous mode [ 1144.649494][T15123] syzkaller0: entered allmulticast mode [ 1145.059030][T26712] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1145.299518][T15160] netlink: 'syz.0.14027': attribute type 25 has an invalid length. [ 1145.331563][T15160] netlink: 'syz.0.14027': attribute type 3 has an invalid length. [ 1145.598634][ T4807] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1145.661291][T15183] xt_hashlimit: size too large, truncated to 1048576 [ 1145.879552][T15198] netlink: 'syz.1.14043': attribute type 1 has an invalid length. [ 1145.964408][T15198] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1146.003114][T15204] SET target dimension over the limit! [ 1146.017240][T15200] veth5: entered allmulticast mode [ 1146.030701][T15200] bond7: (slave veth5): Enslaving as an active interface with a down link [ 1146.080393][T15198] bond1: (slave veth0_to_bond): Releasing active interface [ 1146.121720][T15208] __nla_validate_parse: 13 callbacks suppressed [ 1146.121736][T15208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14047'. [ 1146.129492][T15198] veth0_to_bond: left allmulticast mode [ 1146.153372][T15198] veth0_to_bond: left promiscuous mode [ 1146.165545][T15198] bond7: (slave veth0_to_bond): making interface the new active one [ 1146.176303][T15198] veth0_to_bond: entered promiscuous mode [ 1146.182921][T15198] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1146.222149][T15200] bond7: entered promiscuous mode [ 1146.227800][T15200] bond7: entered allmulticast mode [ 1146.233529][T15200] veth0_to_bond: entered allmulticast mode [ 1146.302277][T15209] macvlan2: entered promiscuous mode [ 1146.310517][T15209] macvlan2: entered allmulticast mode [ 1146.321536][T15209] bond7: (slave macvlan2): Error -98 calling set_mac_address [ 1146.507060][T15231] netlink: 'syz.2.14055': attribute type 32 has an invalid length. [ 1146.649986][T15239] netlink: 170676 bytes leftover after parsing attributes in process `syz.0.14059'. [ 1147.076152][T15252] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14065'. [ 1147.168724][T26712] net_ratelimit: 4 callbacks suppressed [ 1147.168757][T26712] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1147.387806][T15270] netlink: 16170 bytes leftover after parsing attributes in process `syz.1.14071'. [ 1147.437222][T15267] netlink: 80 bytes leftover after parsing attributes in process `syz.2.14069'. [ 1147.451148][T15267] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14069'. [ 1147.478683][T15267] netlink: 64 bytes leftover after parsing attributes in process `syz.2.14069'. [ 1147.687151][T15283] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14074'. [ 1147.712667][T15282] netlink: 9 bytes leftover after parsing attributes in process `syz.0.14075'. [ 1147.712910][T15283] netlink: 'syz.4.14074': attribute type 1 has an invalid length. [ 1147.730954][ T4812] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1147.805038][T15283] netlink: 'syz.4.14074': attribute type 2 has an invalid length. [ 1147.857128][T15283] netlink: 'syz.4.14074': attribute type 2 has an invalid length. [ 1147.886263][T15283] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.14074'. [ 1147.914909][T15290] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1148.137664][T15290] xt_CT: No such helper "netbios-ns" [ 1148.238766][ T4812] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1148.799195][ T4816] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1149.358996][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1149.729115][T15363] xt_hashlimit: size too large, truncated to 1048576 [ 1149.735108][T15365] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1149.743994][T15365] IPv6: NLM_F_CREATE should be set when creating new route [ 1149.757860][T15365] IPv6: NLM_F_CREATE should be set when creating new route [ 1149.775842][T15367] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1149.908784][T15365] syzkaller0: entered promiscuous mode [ 1149.914693][T15365] syzkaller0: entered allmulticast mode [ 1149.920930][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1150.479667][ T4816] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1151.028369][ T4816] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1151.194725][T15411] __nla_validate_parse: 13 callbacks suppressed [ 1151.194744][T15411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14117'. [ 1151.286077][T15417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14118'. [ 1151.594978][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1152.628359][ T4810] net_ratelimit: 1 callbacks suppressed [ 1152.628393][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1153.167458][ T4807] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1153.700923][ T4806] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1154.235310][T26712] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1154.763828][T26712] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1155.308316][T26712] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1155.429140][T15417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1155.455141][T15417] batadv0: mtu less than device minimum [ 1155.464705][T15417] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1155.481165][T15417] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1155.494203][T15417] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1155.626190][T15417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1155.716605][T15414] lo speed is unknown, defaulting to 1000 [ 1155.783283][T15428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14122'. [ 1156.075436][T15442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14128'. [ 1156.093352][T15444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14129'. [ 1156.132643][T15452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14130'. [ 1156.220920][T15442] ip6gretap0: entered promiscuous mode [ 1156.624607][T15477] sctp: [Deprecated]: syz.2.14138 (pid 15477) Use of int in max_burst socket option deprecated. [ 1156.624607][T15477] Use struct sctp_assoc_value instead [ 1156.643655][T15479] netlink: 'syz.3.14136': attribute type 6 has an invalid length. [ 1156.876119][T15488] netlink: 'syz.4.14140': attribute type 1 has an invalid length. [ 1157.023492][T15488] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1157.355314][T15490] bond5: (slave veth3): Enslaving as an active interface with a down link [ 1157.672435][T15507] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1157.737869][T15507] bond5: (slave batadv1): making interface the new active one [ 1157.807336][T15507] batadv1: entered promiscuous mode [ 1157.869829][T15507] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 1157.913583][T26712] net_ratelimit: 21 callbacks suppressed [ 1157.913625][T26712] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1158.104014][T15531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14151'. [ 1158.444261][T15543] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14156'. [ 1158.455618][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1158.507779][T15543] syzkaller0: entered promiscuous mode [ 1158.514067][T15543] syzkaller0: entered allmulticast mode [ 1158.641919][T15547] syzkaller0: entered promiscuous mode [ 1158.648804][T15547] syzkaller0: entered allmulticast mode [ 1158.743832][T15547] tipc: Enabled bearer , priority 0 [ 1158.764069][T15546] tipc: Resetting bearer [ 1158.834969][T15546] tipc: Disabling bearer [ 1158.896981][T15553] syzkaller0: entered promiscuous mode [ 1158.924685][T15553] syzkaller0: entered allmulticast mode [ 1159.010041][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1159.047760][T15553] tipc: Enabled bearer , priority 0 [ 1159.074834][T15552] tipc: Resetting bearer [ 1159.149343][T15552] tipc: Disabling bearer [ 1159.516186][T15571] lo speed is unknown, defaulting to 1000 [ 1159.538393][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1159.564491][T15576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14172'. [ 1159.616696][T15579] netlink: 'syz.2.14174': attribute type 4 has an invalid length. [ 1159.782534][T15576] lo speed is unknown, defaulting to 1000 [ 1160.079070][ T4806] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1160.520299][T15612] netlink: 56 bytes leftover after parsing attributes in process `syz.0.14187'. [ 1160.642899][ T4806] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1161.093943][T15635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14196'. [ 1161.219385][T26712] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1161.339540][T15635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14196'. [ 1161.368670][T15643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14198'. [ 1161.434036][T15643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14198'. [ 1161.530280][T15649] netlink: 9 bytes leftover after parsing attributes in process `syz.4.14201'. [ 1161.531883][T15651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14202'. [ 1161.788709][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1162.090107][T15683] netlink: 'syz.4.14212': attribute type 13 has an invalid length. [ 1162.334495][T15692] netlink: 'syz.0.14217': attribute type 16 has an invalid length. [ 1162.347319][ T4806] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1162.888618][ T4807] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1163.448998][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1163.988209][ T4807] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1164.508268][T30222] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1165.029055][T30222] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1165.192160][T15730] __nla_validate_parse: 3 callbacks suppressed [ 1165.192181][T15730] netlink: 9 bytes leftover after parsing attributes in process `syz.0.14231'. [ 1165.244336][T15735] netlink: 556 bytes leftover after parsing attributes in process `syz.3.14234'. [ 1165.254340][T15730] netlink: 9 bytes leftover after parsing attributes in process `syz.0.14231'. [ 1165.397090][T15741] netlink: 9 bytes leftover after parsing attributes in process `syz.4.14236'. [ 1165.474898][T15742] netlink: 'syz.3.14237': attribute type 1 has an invalid length. [ 1165.511251][T15748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14240'. [ 1165.537193][T15742] netlink: 240 bytes leftover after parsing attributes in process `syz.3.14237'. [ 1165.562823][T15742] netlink: 'syz.3.14237': attribute type 1 has an invalid length. [ 1165.580531][ T4807] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1165.672954][T15755] netlink: 48 bytes leftover after parsing attributes in process `syz.2.14244'. [ 1165.950737][T15768] netlink: 136 bytes leftover after parsing attributes in process `syz.3.14251'. [ 1165.984989][T15768] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 1166.049286][T15777] netlink: 'syz.4.14253': attribute type 4 has an invalid length. [ 1166.086454][T15777] netlink: 'syz.4.14253': attribute type 4 has an invalid length. [ 1166.130308][ T4807] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1166.151173][T15773] lo speed is unknown, defaulting to 1000 [ 1166.156795][T15777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14253'. [ 1166.259897][T15788] netlink: 48 bytes leftover after parsing attributes in process `syz.4.14253'. [ 1166.689011][T30222] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1167.258960][ T4806] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1167.649308][T15851] openvswitch: netlink: Message has 512 unknown bytes. [ 1167.801339][T15861] Cannot find set identified by id 65534 to match [ 1167.996084][T15873] sch_tbf: peakrate 5 is lower than or equals to rate 6 ! [ 1168.838493][ T4807] net_ratelimit: 2 callbacks suppressed [ 1168.838513][ T4807] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1168.918761][ T4807] batadv1: left promiscuous mode [ 1169.398645][T30222] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1169.601104][T15956] IPv6: NLM_F_CREATE should be specified when creating new route [ 1169.749012][T15964] bridge_slave_1: Caught tx_queue_len zero misconfig [ 1169.958268][ T4807] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1170.519599][T16000] netlink: 'syz.0.14334': attribute type 1 has an invalid length. [ 1170.527562][ T4807] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1170.813796][T16011] __nla_validate_parse: 14 callbacks suppressed [ 1170.813832][T16011] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14340'. [ 1170.893868][T16013] Cannot find map_set index 0 as target [ 1171.029085][T30222] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1171.115149][T16017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14342'. [ 1171.157096][T16017] netlink: 80 bytes leftover after parsing attributes in process `syz.1.14342'. [ 1171.382878][T16024] netlink: 92 bytes leftover after parsing attributes in process `syz.3.14345'. [ 1171.430424][T16035] netlink: 556 bytes leftover after parsing attributes in process `syz.1.14347'. [ 1171.435158][T16024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14345'. [ 1171.451546][T16024] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14345'. [ 1171.472271][T16025] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14345'. [ 1171.489593][T16025] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14345'. [ 1171.549163][T16025] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14345'. [ 1171.579400][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1172.187423][T26712] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1172.643790][T16072] bond6 (unregistering): Released all slaves [ 1172.749995][T30222] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1172.980999][T16075] syzkaller0: entered promiscuous mode [ 1172.986728][T16075] syzkaller0: entered allmulticast mode [ 1173.313088][ T4812] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1173.849227][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1174.397676][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1174.921001][T26712] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1175.438421][T26712] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1175.959378][T26712] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1176.480963][ T4810] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1177.020859][ T4807] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1177.541896][ T4816] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1178.060204][ T4806] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1178.151051][T16153] veth0: entered promiscuous mode [ 1178.169851][T16154] veth0: left promiscuous mode [ 1178.360176][T16161] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1178.412165][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.478177][T16161] __nla_validate_parse: 31 callbacks suppressed [ 1178.478197][T16161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14396'. [ 1178.795155][T16185] netlink: 180 bytes leftover after parsing attributes in process `syz.2.14405'. [ 1179.094486][T16193] bond6 (unregistering): Released all slaves [ 1179.116502][ T4812] net_ratelimit: 1 callbacks suppressed [ 1179.116520][ T4812] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1179.170399][T16204] netlink: 276 bytes leftover after parsing attributes in process `syz.2.14411'. [ 1179.240294][T16204] syzkaller0: entered promiscuous mode [ 1179.299578][T16204] syzkaller0: entered allmulticast mode [ 1179.698838][ T4812] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1179.858844][T16231] lo speed is unknown, defaulting to 1000 [ 1179.906481][T16233] netlink: 556 bytes leftover after parsing attributes in process `syz.1.14419'. [ 1180.021630][T16239] netlink: 'syz.2.14422': attribute type 1 has an invalid length. [ 1180.123390][T16239] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1180.262219][ T4806] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1180.277907][T16243] veth7: entered allmulticast mode [ 1180.306304][T16243] bond4: (slave veth7): Enslaving as an active interface with a down link [ 1180.328219][T16239] bond3: (slave veth0_to_bond): Releasing active interface [ 1180.344007][T16239] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1180.366762][T16249] bond4: entered promiscuous mode [ 1180.372807][T16249] bond4: entered allmulticast mode [ 1180.547458][T16254] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1180.609071][T16258] syzkaller1: entered promiscuous mode [ 1180.625863][T16258] syzkaller1: entered allmulticast mode [ 1180.820047][ T4816] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1181.303640][T16293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14437'. [ 1181.388960][T26712] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1181.654407][T16308] netlink: 'syz.4.14443': attribute type 2 has an invalid length. [ 1181.930938][T30222] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1182.026002][T16321] Cannot find map_set index 0 as target [ 1182.144469][T16328] syzkaller0: entered promiscuous mode [ 1182.156926][T16328] syzkaller0: entered allmulticast mode [ 1182.281720][T16328] tipc: Enabled bearer , priority 0 [ 1182.288954][T16335] netlink: 56 bytes leftover after parsing attributes in process `syz.0.14456'. [ 1182.301591][T16327] tipc: Resetting bearer [ 1182.409339][T16327] tipc: Disabling bearer [ 1182.497613][ T4806] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1182.731143][T16349] lo speed is unknown, defaulting to 1000 [ 1182.965662][T16363] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14465'. [ 1183.058818][T30222] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1183.083982][T16369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14469'. [ 1183.108756][T16371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14469'. [ 1183.336302][T16381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14471'. [ 1183.618324][T30222] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1183.703255][T16395] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14475'. [ 1184.018660][T16407] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14483'. [ 1184.198258][ T4812] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1184.309667][T16426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14487'. [ 1184.790197][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1184.915976][T16459] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14499'. [ 1184.995137][T16462] netlink: 44 bytes leftover after parsing attributes in process `syz.4.14501'. [ 1185.363821][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1185.387440][T16476] netlink: 144 bytes leftover after parsing attributes in process `syz.2.14507'. [ 1185.934493][T30222] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1185.971656][T16509] netlink: 56 bytes leftover after parsing attributes in process `syz.4.14522'. [ 1186.011069][T16514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14525'. [ 1186.040624][T16516] netlink: 64 bytes leftover after parsing attributes in process `syz.0.14525'. [ 1186.064356][T16515] netlink: 76 bytes leftover after parsing attributes in process `syz.3.14524'. [ 1186.069828][T16519] FAULT_INJECTION: forcing a failure. [ 1186.069828][T16519] name failslab, interval 1, probability 0, space 0, times 0 [ 1186.110919][T16513] syzkaller0: entered promiscuous mode [ 1186.117079][T16519] CPU: 1 UID: 0 PID: 16519 Comm: syz.2.14526 Not tainted syzkaller #0 PREEMPT(full) [ 1186.117104][T16519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1186.117117][T16519] Call Trace: [ 1186.117125][T16519] [ 1186.117133][T16519] dump_stack_lvl+0xe8/0x150 [ 1186.117170][T16519] should_fail_ex+0x40c/0x560 [ 1186.117206][T16519] should_failslab+0xa8/0x100 [ 1186.117237][T16519] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1186.117261][T16519] ? skb_clone+0x212/0x3a0 [ 1186.117287][T16519] ? skb_clone+0x212/0x3a0 [ 1186.117316][T16519] skb_clone+0x212/0x3a0 [ 1186.117338][T16519] ? nfnetlink_rcv+0x4b0/0x28c0 [ 1186.117364][T16519] nfnetlink_rcv+0x4de/0x28c0 [ 1186.117389][T16519] ? kernel_text_address+0xa5/0xe0 [ 1186.117452][T16519] ? __kernel_text_address+0xd/0x30 [ 1186.117482][T16519] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1186.117514][T16519] ? arch_stack_walk+0xfb/0x150 [ 1186.117556][T16519] ? stack_trace_save+0xa9/0x100 [ 1186.117581][T16519] ? __lock_acquire+0x683/0x2cf0 [ 1186.117615][T16519] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1186.117657][T16519] ? __lock_acquire+0x683/0x2cf0 [ 1186.117694][T16519] ? __netlink_lookup+0xc6/0x8b0 [ 1186.117729][T16519] ? netlink_deliver_tap+0x2e/0x1b0 [ 1186.117755][T16519] ? netlink_deliver_tap+0x2e/0x1b0 [ 1186.117785][T16519] ? netlink_deliver_tap+0x2e/0x1b0 [ 1186.117809][T16519] ? netlink_deliver_tap+0x2e/0x1b0 [ 1186.117838][T16519] netlink_unicast+0x7bb/0x940 [ 1186.117872][T16519] netlink_sendmsg+0x813/0xb40 [ 1186.117906][T16519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1186.117933][T16519] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1186.117963][T16519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1186.117985][T16519] sock_sendmsg_nosec+0x13a/0x180 [ 1186.118016][T16519] ____sys_sendmsg+0x54e/0x850 [ 1186.118043][T16519] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1186.118074][T16519] ? import_iovec+0x73/0xa0 [ 1186.118098][T16519] ___sys_sendmsg+0x2a5/0x360 [ 1186.118119][T16519] ? __lock_acquire+0x683/0x2cf0 [ 1186.118147][T16519] ? __pfx____sys_sendmsg+0x10/0x10 [ 1186.118202][T16519] ? __fget_files+0x2a/0x420 [ 1186.118226][T16519] ? __fget_files+0x3a2/0x420 [ 1186.118258][T16519] __x64_sys_sendmsg+0x1b1/0x290 [ 1186.118286][T16519] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1186.118326][T16519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.118349][T16519] do_syscall_64+0x174/0x580 [ 1186.118371][T16519] ? trace_irq_disable+0x3b/0x140 [ 1186.118396][T16519] ? clear_bhb_loop+0x40/0x90 [ 1186.118421][T16519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.118440][T16519] RIP: 0033:0x7f65e899de59 [ 1186.118459][T16519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1186.118476][T16519] RSP: 002b:00007f65e9833028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1186.118497][T16519] RAX: ffffffffffffffda RBX: 00007f65e8c25fa0 RCX: 00007f65e899de59 [ 1186.118511][T16519] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1186.118524][T16519] RBP: 00007f65e9833090 R08: 0000000000000000 R09: 0000000000000000 [ 1186.118537][T16519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1186.118548][T16519] R13: 00007f65e8c26038 R14: 00007f65e8c25fa0 R15: 00007ffc95769198 [ 1186.118580][T16519] [ 1186.128947][T16513] syzkaller0: entered allmulticast mode [ 1186.508097][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1186.572355][T16533] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1187.028352][ T4812] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1187.503713][T16577] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.600013][T30222] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1188.168198][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1188.720936][T30222] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1188.778495][T16637] __nla_validate_parse: 3 callbacks suppressed [ 1188.778513][T16637] netlink: 156 bytes leftover after parsing attributes in process `syz.0.14570'. [ 1188.816722][T16638] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14569'. [ 1188.927244][T16643] ip6tnl3: entered allmulticast mode [ 1188.981349][T16647] IPVS: set_ctl: invalid protocol: 0 172.20.20.35:20004 [ 1189.290036][T30222] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1189.322905][T16655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14575'. [ 1189.518122][T16663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14580'. [ 1189.601208][T16663] macvtap1: entered promiscuous mode [ 1189.625496][T16663] erspan0: entered promiscuous mode [ 1189.655656][T16663] macvtap1: entered allmulticast mode [ 1189.696975][T16663] erspan0: entered allmulticast mode [ 1189.725628][T16667] erspan0: left allmulticast mode [ 1189.731270][T16667] erspan0: left promiscuous mode [ 1189.746764][T16667] macvtap1: left promiscuous mode [ 1189.764187][T16667] macvtap1: left allmulticast mode [ 1189.839298][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1190.105287][T16690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14591'. [ 1190.326619][T16701] Cannot find set identified by id 65534 to match [ 1190.388913][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1190.459144][T16708] netlink: 'syz.0.14597': attribute type 4 has an invalid length. [ 1190.662620][T16713] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14599'. [ 1190.722555][T16713] team0 (unregistering): Port device team_slave_0 removed [ 1190.744505][T16713] team0 (unregistering): Port device team_slave_1 removed [ 1190.792187][T16728] 8021q: VLANs not supported on gre0 [ 1190.898861][T16730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14602'. [ 1190.910431][T16730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14602'. [ 1190.929259][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1190.985694][T16730] geneve2: entered promiscuous mode [ 1191.004327][T16737] netlink: 556 bytes leftover after parsing attributes in process `syz.1.14606'. [ 1191.014828][T16730] geneve2: entered allmulticast mode [ 1191.031833][ T7112] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.073205][ T7112] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.105902][ T7112] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.126721][ T7112] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.241714][T16745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14608'. [ 1191.261485][ T5820] IPVS: starting estimator thread 0... [ 1191.369163][T16746] IPVS: using max 31 ests per chain, 74400 per kthread [ 1191.488716][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1191.664168][T16768] bond6: option min_links: invalid value (18446744073709551612) [ 1191.674551][T16768] bond6: option min_links: allowed values 0 - 2147483647 [ 1191.690026][T16768] bond6 (unregistering): Released all slaves [ 1191.853283][T16782] FAULT_INJECTION: forcing a failure. [ 1191.853283][T16782] name failslab, interval 1, probability 0, space 0, times 0 [ 1191.871685][T16782] CPU: 0 UID: 0 PID: 16782 Comm: syz.0.14620 Not tainted syzkaller #0 PREEMPT(full) [ 1191.871711][T16782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1191.871721][T16782] Call Trace: [ 1191.871729][T16782] [ 1191.871736][T16782] dump_stack_lvl+0xe8/0x150 [ 1191.871767][T16782] should_fail_ex+0x40c/0x560 [ 1191.871801][T16782] should_failslab+0xa8/0x100 [ 1191.871837][T16782] __kmalloc_noprof+0xfe/0x720 [ 1191.871860][T16782] ? lock_sock_nested+0x6a/0x100 [ 1191.871890][T16782] ? sock_kmalloc+0xd6/0x160 [ 1191.871913][T16782] ? sock_kmalloc+0xd6/0x160 [ 1191.871943][T16782] sock_kmalloc+0xd6/0x160 [ 1191.871971][T16782] af_alg_alloc_areq+0x8c/0x200 [ 1191.872112][T16782] skcipher_recvmsg+0x31e/0xe10 [ 1191.872151][T16782] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1191.872169][T16782] ? __lock_acquire+0x683/0x2cf0 [ 1191.872194][T16782] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1191.872222][T16782] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1191.872241][T16782] ? security_socket_recvmsg+0x7e/0x2c0 [ 1191.872288][T16782] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1191.872308][T16782] sock_recvmsg+0x196/0x1e0 [ 1191.872372][T16782] ____sys_recvmsg+0x1e6/0x4a0 [ 1191.872405][T16782] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1191.872446][T16782] ? import_iovec+0x73/0xa0 [ 1191.872473][T16782] ___sys_recvmsg+0x213/0x5a0 [ 1191.872502][T16782] ? __pfx____sys_recvmsg+0x10/0x10 [ 1191.872532][T16782] ? __fget_files+0x2a/0x420 [ 1191.872575][T16782] ? __fget_files+0x3a2/0x420 [ 1191.872610][T16782] __x64_sys_recvmsg+0x1ae/0x290 [ 1191.872635][T16782] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1191.872673][T16782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.872694][T16782] do_syscall_64+0x174/0x580 [ 1191.872715][T16782] ? clear_bhb_loop+0x40/0x90 [ 1191.872738][T16782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.872755][T16782] RIP: 0033:0x7fae7979de59 [ 1191.872773][T16782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1191.872790][T16782] RSP: 002b:00007fae7a72b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1191.872808][T16782] RAX: ffffffffffffffda RBX: 00007fae79a25fa0 RCX: 00007fae7979de59 [ 1191.872822][T16782] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 1191.872835][T16782] RBP: 00007fae7a72b090 R08: 0000000000000000 R09: 0000000000000000 [ 1191.872847][T16782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1191.872859][T16782] R13: 00007fae79a26038 R14: 00007fae79a25fa0 R15: 00007ffeb6ffc478 [ 1191.872891][T16782] [ 1192.150855][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1192.436635][T16796] Cannot find set identified by id 65534 to match [ 1192.648903][T16717] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1192.986931][T16826] netlink: zone id is out of range [ 1192.992990][T16826] netlink: zone id is out of range [ 1193.003149][T16826] netlink: zone id is out of range [ 1193.673700][T16863] netlink: 'syz.1.14653': attribute type 49 has an invalid length. [ 1194.663854][T16916] __nla_validate_parse: 6 callbacks suppressed [ 1194.663873][T16916] netlink: 9 bytes leftover after parsing attributes in process `syz.2.14677'. [ 1194.799154][T16922] netlink: 72 bytes leftover after parsing attributes in process `syz.2.14681'. [ 1194.812010][T16924] netlink: 'syz.4.14680': attribute type 1 has an invalid length. [ 1194.848792][ T7112] net_ratelimit: 12 callbacks suppressed [ 1194.848811][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1194.968342][T16932] lo: Caught tx_queue_len zero misconfig [ 1195.128730][T16943] netlink: 'syz.2.14689': attribute type 3 has an invalid length. [ 1195.339810][T16958] FAULT_INJECTION: forcing a failure. [ 1195.339810][T16958] name failslab, interval 1, probability 0, space 0, times 0 [ 1195.386968][T16958] CPU: 1 UID: 0 PID: 16958 Comm: syz.3.14695 Not tainted syzkaller #0 PREEMPT(full) [ 1195.386999][T16958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1195.387011][T16958] Call Trace: [ 1195.387019][T16958] [ 1195.387028][T16958] dump_stack_lvl+0xe8/0x150 [ 1195.387062][T16958] should_fail_ex+0x40c/0x560 [ 1195.387096][T16958] should_failslab+0xa8/0x100 [ 1195.387125][T16958] __kmalloc_cache_noprof+0xa8/0x660 [ 1195.387150][T16958] ? nf_tables_newchain+0x1e10/0x28b0 [ 1195.387170][T16958] ? nf_tables_newchain+0x1e10/0x28b0 [ 1195.387194][T16958] nf_tables_newchain+0x1e10/0x28b0 [ 1195.387237][T16958] ? __pfx_nf_tables_newchain+0x10/0x10 [ 1195.387285][T16958] ? nfnl_pernet+0x23/0x240 [ 1195.387308][T16958] ? nfnl_pernet+0x23/0x240 [ 1195.387338][T16958] ? __nla_parse+0x40/0x60 [ 1195.387364][T16958] nfnetlink_rcv+0x1288/0x28c0 [ 1195.387421][T16958] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1195.387460][T16958] ? ref_tracker_free+0x689/0x830 [ 1195.387505][T16958] ? skb_clone+0x246/0x3a0 [ 1195.387533][T16958] ? __netlink_deliver_tap+0x811/0x860 [ 1195.387567][T16958] ? netlink_deliver_tap+0x2e/0x1b0 [ 1195.387591][T16958] ? netlink_deliver_tap+0x2e/0x1b0 [ 1195.387620][T16958] netlink_unicast+0x7bb/0x940 [ 1195.387653][T16958] netlink_sendmsg+0x813/0xb40 [ 1195.387686][T16958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1195.387716][T16958] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1195.387746][T16958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1195.387770][T16958] sock_sendmsg_nosec+0x13a/0x180 [ 1195.387802][T16958] ____sys_sendmsg+0x54e/0x850 [ 1195.387832][T16958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1195.387863][T16958] ? import_iovec+0x73/0xa0 [ 1195.387885][T16958] ___sys_sendmsg+0x2a5/0x360 [ 1195.387906][T16958] ? __lock_acquire+0x683/0x2cf0 [ 1195.387936][T16958] ? __pfx____sys_sendmsg+0x10/0x10 [ 1195.387994][T16958] ? __fget_files+0x2a/0x420 [ 1195.388018][T16958] ? __fget_files+0x3a2/0x420 [ 1195.388052][T16958] __x64_sys_sendmsg+0x1b1/0x290 [ 1195.388080][T16958] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1195.388122][T16958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.388144][T16958] do_syscall_64+0x174/0x580 [ 1195.388165][T16958] ? trace_irq_disable+0x3b/0x140 [ 1195.388187][T16958] ? clear_bhb_loop+0x40/0x90 [ 1195.388208][T16958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.388234][T16958] RIP: 0033:0x7f694d19de59 [ 1195.388252][T16958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1195.388268][T16958] RSP: 002b:00007f694df7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1195.388287][T16958] RAX: ffffffffffffffda RBX: 00007f694d425fa0 RCX: 00007f694d19de59 [ 1195.388301][T16958] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1195.388312][T16958] RBP: 00007f694df7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1195.388323][T16958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1195.388334][T16958] R13: 00007f694d426038 R14: 00007f694d425fa0 R15: 00007ffe5e529de8 [ 1195.388378][T16958] [ 1195.409609][T16962] syzkaller1: entered promiscuous mode [ 1195.411803][T16957] can: request_module (can-proto-4) failed. [ 1195.414878][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1195.432757][T16962] syzkaller1: entered allmulticast mode [ 1195.743835][T16964] syzkaller1: left promiscuous mode [ 1195.752033][T16964] syzkaller1: left allmulticast mode [ 1195.881010][T16979] sctp: [Deprecated]: syz.3.14701 (pid 16979) Use of int in maxseg socket option. [ 1195.881010][T16979] Use struct sctp_assoc_value instead [ 1196.010957][T16717] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1196.058405][T16972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14700'. [ 1196.129482][T16990] netlink: 9 bytes leftover after parsing attributes in process `syz.0.14703'. [ 1196.157052][T16990] netlink: 9 bytes leftover after parsing attributes in process `syz.0.14703'. [ 1196.369677][T17004] netlink: 'syz.0.14709': attribute type 4 has an invalid length. [ 1196.558139][ T7115] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1196.565165][T17019] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14716'. [ 1196.622995][T17021] tap0: tun_chr_ioctl cmd 1074025677 [ 1196.628657][T17021] tap0: linktype set to 780 [ 1196.817625][T17026] netlink: 68 bytes leftover after parsing attributes in process `syz.2.14719'. [ 1196.832309][T17031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14721'. [ 1196.850966][T17026] netlink: 14 bytes leftover after parsing attributes in process `syz.2.14719'. [ 1196.864878][T17026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1196.894461][T17026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1196.910881][T17026] bond0 (unregistering): Released all slaves [ 1196.923742][T17036] SET target dimension over the limit! [ 1196.951349][T17034] netlink: 'syz.2.14719': attribute type 5 has an invalid length. [ 1197.059669][T17045] netlink: 556 bytes leftover after parsing attributes in process `syz.0.14726'. [ 1197.113133][T16721] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1197.645209][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1197.699951][T17080] netlink: 'syz.1.14742': attribute type 40 has an invalid length. [ 1197.722524][T17086] netlink: 'syz.4.14741': attribute type 32 has an invalid length. [ 1197.750356][T17083] bond2: (slave lo): Releasing backup interface [ 1197.795605][T17083] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1197.871951][T17083] bridge_slave_0: left allmulticast mode [ 1197.886180][T17083] bridge_slave_0: left promiscuous mode [ 1197.897079][T17083] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.913601][T17083] bridge_slave_1: left allmulticast mode [ 1197.931590][T17083] bridge_slave_1: left promiscuous mode [ 1197.940802][T17083] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.954456][T17083] bond0: (slave bond_slave_0): Releasing backup interface [ 1197.981130][T17083] bond0: (slave bond_slave_1): Releasing backup interface [ 1197.993247][T17083] team0: Port device team_slave_0 removed [ 1198.002169][T17083] team0: Port device team_slave_1 removed [ 1198.008808][T17083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1198.016185][T17083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1198.024771][T17083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1198.032153][T17083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1198.040664][T17083] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1198.057608][T17086] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1198.130099][T17098] ip6gre1: entered promiscuous mode [ 1198.143839][T17098] ip6gre1: entered allmulticast mode [ 1198.190830][T16717] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1198.236799][T17108] netlink: 'syz.3.14750': attribute type 4 has an invalid length. [ 1198.338410][T17115] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1198.550255][T17126] gretap0: entered promiscuous mode [ 1198.579736][T17126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1198.588407][T17126] 8021q: adding VLAN 0 to HW filter on device team0 [ 1198.605144][T17126] veth1_macvtap: left promiscuous mode [ 1198.612276][T17126] veth0_macvtap: left promiscuous mode [ 1198.619134][T17126] veth0_macvtap: entered promiscuous mode [ 1198.674110][T17126] veth1_macvtap: entered promiscuous mode [ 1198.686994][T17126] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1198.695488][T17126] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1198.705079][T17126] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1198.713785][T17126] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1198.787709][ T7115] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1198.865230][T17126] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1198.877508][T17126] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1198.907947][T17126] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1198.918447][T17126] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1198.942408][T17126] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1199.958602][ T7115] net_ratelimit: 1 callbacks suppressed [ 1199.958622][ T7115] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1200.048135][T16717] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.056977][T16717] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.170976][T16717] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.195398][T16717] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.240434][ T4808] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1200.297916][ T4808] bond5: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 1200.508977][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1200.595550][T17198] __nla_validate_parse: 4 callbacks suppressed [ 1200.595569][T17198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14786'. [ 1200.639911][T17198] netlink: 'syz.2.14786': attribute type 1 has an invalid length. [ 1200.654733][T17198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14786'. [ 1200.959326][T17210] SET target dimension over the limit! [ 1201.127023][T16724] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1201.636808][T17226] netlink: 'syz.0.14800': attribute type 21 has an invalid length. [ 1201.665266][T17226] netlink: 128 bytes leftover after parsing attributes in process `syz.0.14800'. [ 1201.681040][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1201.690257][T17226] netlink: 'syz.0.14800': attribute type 4 has an invalid length. [ 1201.704428][T17226] netlink: 'syz.0.14800': attribute type 5 has an invalid length. [ 1201.712807][T17226] netlink: 3 bytes leftover after parsing attributes in process `syz.0.14800'. [ 1201.746714][T17232] netlink: 36 bytes leftover after parsing attributes in process `syz.4.14801'. [ 1202.340001][T17255] netlink: 76 bytes leftover after parsing attributes in process `syz.1.14807'. [ 1202.351889][T16720] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1202.484501][T17263] netlink: 204 bytes leftover after parsing attributes in process `syz.2.14806'. [ 1202.495747][T17263] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14806'. [ 1202.683172][T17272] netlink: 556 bytes leftover after parsing attributes in process `syz.0.14812'. [ 1202.838738][T16724] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1203.025425][T17282] SET target dimension over the limit! [ 1203.358903][T16720] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1203.878151][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1204.432591][T16720] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1204.636404][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1204.928267][T16720] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1205.296332][T17286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14818'. [ 1205.448124][T16724] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1205.646884][T17301] netlink: 'syz.0.14824': attribute type 1 has an invalid length. [ 1205.782926][T17301] bond7: entered promiscuous mode [ 1205.790400][T17301] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1205.931590][T17308] veth9: entered promiscuous mode [ 1205.988996][T17308] bond7: (slave veth9): Enslaving as a backup interface with a down link [ 1206.041488][T16724] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1206.127031][T17325] gre0: left promiscuous mode [ 1206.165722][T17328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14835'. [ 1206.178494][T17325] gre0: left allmulticast mode [ 1206.196656][T17331] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14837'. [ 1206.202634][T17325] bond1: left promiscuous mode [ 1206.210508][T17325] bond1: left allmulticast mode [ 1206.215759][T17325] veth3: left allmulticast mode [ 1206.227972][T17325] bond3: left promiscuous mode [ 1206.232811][T17325] bond3: left allmulticast mode [ 1206.264536][T17325] veth5: left allmulticast mode [ 1206.283125][T17336] netlink: 556 bytes leftover after parsing attributes in process `syz.4.14838'. [ 1206.291490][T17325] bond4: left promiscuous mode [ 1206.320550][T17325] bond4: left allmulticast mode [ 1206.326856][T17325] veth7: left allmulticast mode [ 1206.390457][T17325] geneve2: left promiscuous mode [ 1206.402682][T17343] netlink: 76 bytes leftover after parsing attributes in process `syz.0.14841'. [ 1206.405877][T17325] geneve2: left allmulticast mode [ 1206.457756][ T4808] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.516331][ T4808] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.525437][ T4808] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.534526][ T4808] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.622464][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1206.637478][T17347] netlink: 'syz.4.14844': attribute type 32 has an invalid length. [ 1206.804379][T17358] bond9: (slave bond_slave_1): Device is not our slave [ 1206.816391][T17358] bond9: option active_slave: invalid value (bond_slave_1) [ 1206.846607][T17358] bond9 (unregistering): Released all slaves [ 1206.904468][T17366] lo speed is unknown, defaulting to 1000 [ 1207.081405][T17371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14850'. [ 1207.145915][T17373] netlink: 56 bytes leftover after parsing attributes in process `syz.2.14851'. [ 1207.172134][T16720] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1207.312284][T17380] netlink: 144 bytes leftover after parsing attributes in process `syz.0.14848'. [ 1207.694338][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1208.003963][ T6624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1208.048437][ T6624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1208.056847][ T6624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1208.067707][ T6624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1208.078875][ T6624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1208.200797][T30222] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1208.281739][T17404] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1208.295409][T17404] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.724837][T17433] x_tables: duplicate underflow at hook 2 [ 1208.749701][T16721] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1208.779566][T17404] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1208.813568][T17404] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.034144][T17443] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14872'. [ 1209.152641][T17404] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1209.173558][T17404] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.323022][ T7115] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1209.349444][T17461] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14879'. [ 1209.371344][T17462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14877'. [ 1209.373085][T17404] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1209.395710][T17404] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.418101][T17456] syzkaller1: entered promiscuous mode [ 1209.423975][T17416] lo speed is unknown, defaulting to 1000 [ 1209.438184][T17456] syzkaller1: entered allmulticast mode [ 1209.861251][T17416] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.868865][T16724] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1209.887348][T17416] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.897663][T17416] bridge_slave_0: entered allmulticast mode [ 1209.906063][T17416] bridge_slave_0: entered promiscuous mode [ 1209.915502][T17416] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.923225][T17416] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.934217][T17416] bridge_slave_1: entered allmulticast mode [ 1209.944586][T17416] bridge_slave_1: entered promiscuous mode [ 1209.965840][T17492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1210.029191][T17416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1210.052455][T17416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1210.122565][T17416] team0: Port device team_slave_0 added [ 1210.145769][T17416] team0: Port device team_slave_1 added [ 1210.188774][T16724] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1210.200394][T16724] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.219531][ T5644] Bluetooth: hci3: command tx timeout [ 1210.252895][T16724] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1210.262146][T16724] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.275162][T17416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1210.287323][T17416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1210.347014][T17416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1210.381975][ T7112] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1210.390407][ T7112] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.400085][T17416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1210.409873][T17416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1210.438114][T17416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1210.448891][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1210.508608][T17416] hsr_slave_0: entered promiscuous mode [ 1210.515283][T17416] hsr_slave_1: entered promiscuous mode [ 1210.521719][T17416] debugfs: 'hsr0' already exists in 'hsr' [ 1210.544991][T17416] Cannot create hsr debugfs directory [ 1210.550645][ T7112] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1210.559423][ T7112] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.777387][T17516] xt_connbytes: Forcing CT accounting to be enabled [ 1210.999240][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1211.031094][T17416] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.041944][T17416] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1211.364950][T17547] syzkaller0: entered promiscuous mode [ 1211.381536][T17548] __nla_validate_parse: 5 callbacks suppressed [ 1211.381554][T17548] netlink: 292 bytes leftover after parsing attributes in process `syz.3.14911'. [ 1211.402163][T17547] syzkaller0: entered allmulticast mode [ 1211.447929][T17548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14911'. [ 1211.458557][T17548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14911'. [ 1211.467662][T17548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14911'. [ 1211.476905][T17548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14911'. [ 1211.485915][T17548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14911'. [ 1211.495000][T17548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14911'. [ 1211.503996][T17548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14911'. [ 1211.513173][T17548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14911'. [ 1211.530783][T17554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14914'. [ 1211.545502][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1211.617624][T17416] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.632485][T17416] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1211.749088][T17565] syzkaller0: entered promiscuous mode [ 1211.754693][T17565] syzkaller0: entered allmulticast mode [ 1211.793825][T17565] tipc: Enabled bearer , priority 0 [ 1211.804078][T17564] tipc: Resetting bearer [ 1211.836277][T17564] tipc: Disabling bearer [ 1212.040554][T16721] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1212.069537][T17416] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.083790][T17416] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1212.115537][T17577] netlink: 'syz.0.14923': attribute type 1 has an invalid length. [ 1212.149411][T17577] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1212.182532][T17577] veth11: entered allmulticast mode [ 1212.191985][T17577] bond8: (slave veth11): Enslaving as an active interface with a down link [ 1212.220938][T17577] bond4: (slave veth0_to_bond): Releasing active interface [ 1212.230456][T17577] veth0_to_bond: left promiscuous mode [ 1212.239668][T17584] x_tables: duplicate underflow at hook 1 [ 1212.245953][T17577] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1212.283682][ T5644] Bluetooth: hci3: command tx timeout [ 1212.292292][T17416] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.302833][T17416] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1212.322657][T17577] bond8: entered promiscuous mode [ 1212.337706][T17577] bond8: entered allmulticast mode [ 1212.613258][T16724] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1212.660853][T17416] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1212.670049][T17416] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1212.678641][T17416] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1212.688299][T17416] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1212.696665][T17416] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1212.730996][T17416] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1212.739001][T17416] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1212.749752][T17416] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1212.979169][T17416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1213.006137][T17416] 8021q: adding VLAN 0 to HW filter on device team0 [ 1213.021526][T16721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.028778][T16721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1213.090174][T16720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.097447][T16720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1213.158963][T16721] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1213.601918][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1213.604583][T17653] syzkaller0: entered promiscuous mode [ 1213.640949][T17653] syzkaller0: entered allmulticast mode [ 1213.658277][T16720] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1213.762590][T17416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1214.012409][T17416] veth0_vlan: entered promiscuous mode [ 1214.025745][T17416] veth1_vlan: entered promiscuous mode [ 1214.084195][T17416] veth0_macvtap: entered promiscuous mode [ 1214.104530][T17416] veth1_macvtap: entered promiscuous mode [ 1214.127796][T17416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1214.157818][T17416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1214.172929][ T7112] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.181766][ T7112] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.191210][ T7112] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.200064][ T7112] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.266549][ T7115] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1214.369863][ T5644] Bluetooth: hci3: command tx timeout [ 1214.812992][T16721] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1215.313163][T30222] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1215.854402][T16724] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1216.382621][ T5644] Bluetooth: hci3: command tx timeout [ 1216.386909][T16724] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1216.513556][T17654] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1216.986615][T16724] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1217.555173][ T7115] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1218.113915][T16724] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1218.485156][ T7115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1218.507641][ T7115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1218.589523][T16721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1218.614374][T16721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1218.662610][T16721] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1218.786444][T17697] __nla_validate_parse: 41 callbacks suppressed [ 1218.786463][T17697] netlink: 9 bytes leftover after parsing attributes in process `syz.4.14863'. [ 1219.061855][T17717] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14967'. [ 1219.073212][T17717] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14967'. [ 1219.083797][T17717] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14967'. [ 1219.094634][T17717] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14967'. [ 1219.105921][T17717] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14967'. [ 1219.117983][T17717] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14967'. [ 1219.127395][T17717] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14967'. [ 1219.137014][T17717] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14967'. [ 1219.146264][T17717] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14967'. [ 1219.241913][ T7115] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1219.910971][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1220.069240][T17773] x_tables: duplicate underflow at hook 1 [ 1220.340512][T17789] Cannot find set identified by id 65534 to match [ 1220.433297][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1220.517203][T17793] bond0: (slave ip6tnl0): refused to change device type [ 1220.784037][T17808] bond1 (unregistering): Released all slaves [ 1220.978721][ T7115] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1221.679169][T17846] Cannot find set identified by id 0 to match [ 1221.714826][ T7115] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1222.309003][ T7115] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1222.616327][T17894] lo speed is unknown, defaulting to 1000 [ 1222.829822][T17903] netlink: 'syz.2.15026': attribute type 1 has an invalid length. [ 1222.844635][T17886] veth0_macvtap: entered allmulticast mode [ 1222.858925][ T7115] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1222.941976][T17886] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1223.104308][T17905] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 1223.362237][T16721] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1223.404354][T17914] lo speed is unknown, defaulting to 1000 [ 1223.909348][T16718] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1223.976523][T17956] xt_l2tp: v2 sid > 0xffff: 8388608 [ 1224.026322][T17957] netlink: 'syz.2.15043': attribute type 13 has an invalid length. [ 1224.337068][T17980] syzkaller0: entered promiscuous mode [ 1224.342697][T17980] syzkaller0: entered allmulticast mode [ 1224.373823][T17980] tipc: Enabled bearer , priority 0 [ 1224.373999][T17982] __nla_validate_parse: 177 callbacks suppressed [ 1224.374014][T17982] netlink: 76 bytes leftover after parsing attributes in process `syz.2.15051'. [ 1224.437397][T17979] tipc: Resetting bearer [ 1224.465177][T17979] tipc: Disabling bearer [ 1224.473722][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1224.599547][T17986] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15053'. [ 1224.826778][T17992] netlink: 'syz.0.15056': attribute type 4 has an invalid length. [ 1224.864209][T17992] netlink: 'syz.0.15056': attribute type 4 has an invalid length. [ 1224.936916][T17994] netlink: 556 bytes leftover after parsing attributes in process `syz.3.15057'. [ 1224.978516][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1225.141098][T18006] atomic_op ffff888025406998 conn xmit_atomic 0000000000000000 [ 1225.307577][T18013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15062'. [ 1225.379658][T18014] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15062'. [ 1225.496064][T18025] netlink: 64 bytes leftover after parsing attributes in process `syz.1.15065'. [ 1225.538109][T16718] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1225.565582][T18013] netlink: 44 bytes leftover after parsing attributes in process `syz.4.15062'. [ 1225.620838][T18013] bond_slave_1: entered promiscuous mode [ 1225.665016][T18013] bond_slave_1: entered allmulticast mode [ 1225.897717][T18039] lo speed is unknown, defaulting to 1000 [ 1225.934778][T18039] lo speed is unknown, defaulting to 1000 [ 1226.013155][T18039] lo speed is unknown, defaulting to 1000 [ 1226.054742][T18039] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1226.089515][T18048] netlink: 9 bytes leftover after parsing attributes in process `syz.4.15072'. [ 1226.118082][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1226.146668][T18039] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1226.199542][T18039] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1226.267261][T18039] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1226.302339][T18039] lo speed is unknown, defaulting to 1000 [ 1226.309969][T18039] lo speed is unknown, defaulting to 1000 [ 1226.380976][T18039] lo speed is unknown, defaulting to 1000 [ 1226.411153][T18039] lo speed is unknown, defaulting to 1000 [ 1226.430640][T18039] lo speed is unknown, defaulting to 1000 [ 1226.454193][T18039] lo speed is unknown, defaulting to 1000 [ 1226.471929][T18039] lo speed is unknown, defaulting to 1000 [ 1226.499672][T18039] lo speed is unknown, defaulting to 1000 [ 1226.521065][T18039] lo speed is unknown, defaulting to 1000 [ 1226.552814][T18039] lo speed is unknown, defaulting to 1000 [ 1226.579544][T18039] lo speed is unknown, defaulting to 1000 [ 1226.599053][T18039] lo speed is unknown, defaulting to 1000 [ 1226.727789][T16724] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1226.822452][T18078] SET target dimension over the limit! [ 1227.077003][T18082] bond9 (unregistering): Released all slaves [ 1227.286475][T16718] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1227.388653][T18108] ip6gre1: entered promiscuous mode [ 1227.407640][T18108] ip6gre1: entered allmulticast mode [ 1227.625452][T18124] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1227.868478][T16718] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1228.041040][ T6624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1228.055711][ T6624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1228.069307][ T6624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1228.077301][ T6624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1228.131627][T18144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15105'. [ 1228.141788][ T6624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1228.351882][T18152] netlink: 'syz.0.15106': attribute type 1 has an invalid length. [ 1228.436113][T16718] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1228.522133][T18166] netlink: 9 bytes leftover after parsing attributes in process `syz.4.15109'. [ 1228.569487][ T9438] team0: Port device syz_tun removed [ 1228.773627][T18179] FAULT_INJECTION: forcing a failure. [ 1228.773627][T18179] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.788381][T18179] CPU: 1 UID: 0 PID: 18179 Comm: syz.2.15114 Not tainted syzkaller #0 PREEMPT(full) [ 1228.788408][T18179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1228.788419][T18179] Call Trace: [ 1228.788427][T18179] [ 1228.788435][T18179] dump_stack_lvl+0xe8/0x150 [ 1228.788479][T18179] should_fail_ex+0x40c/0x560 [ 1228.788512][T18179] should_failslab+0xa8/0x100 [ 1228.788540][T18179] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1228.788564][T18179] ? skb_clone+0x212/0x3a0 [ 1228.788585][T18179] ? skb_clone+0x212/0x3a0 [ 1228.788613][T18179] skb_clone+0x212/0x3a0 [ 1228.788633][T18179] ? nfnetlink_rcv+0x4b0/0x28c0 [ 1228.788659][T18179] nfnetlink_rcv+0x4de/0x28c0 [ 1228.788683][T18179] ? kernel_text_address+0xa5/0xe0 [ 1228.788712][T18179] ? __kernel_text_address+0xd/0x30 [ 1228.788739][T18179] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1228.788763][T18179] ? arch_stack_walk+0xfb/0x150 [ 1228.788793][T18179] ? stack_trace_save+0xa9/0x100 [ 1228.788818][T18179] ? __lock_acquire+0x683/0x2cf0 [ 1228.788844][T18179] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1228.788886][T18179] ? __lock_acquire+0x683/0x2cf0 [ 1228.788922][T18179] ? __netlink_lookup+0xc6/0x8b0 [ 1228.788956][T18179] ? netlink_deliver_tap+0x2e/0x1b0 [ 1228.788980][T18179] ? netlink_deliver_tap+0x2e/0x1b0 [ 1228.789011][T18179] ? netlink_deliver_tap+0x2e/0x1b0 [ 1228.789035][T18179] ? netlink_deliver_tap+0x2e/0x1b0 [ 1228.789063][T18179] netlink_unicast+0x7bb/0x940 [ 1228.789097][T18179] netlink_sendmsg+0x813/0xb40 [ 1228.789132][T18179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1228.789159][T18179] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1228.789192][T18179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1228.789218][T18179] sock_sendmsg_nosec+0x13a/0x180 [ 1228.789250][T18179] ____sys_sendmsg+0x54e/0x850 [ 1228.789280][T18179] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1228.789314][T18179] ? import_iovec+0x73/0xa0 [ 1228.789341][T18179] ___sys_sendmsg+0x2a5/0x360 [ 1228.789363][T18179] ? __lock_acquire+0x683/0x2cf0 [ 1228.789391][T18179] ? __pfx____sys_sendmsg+0x10/0x10 [ 1228.789479][T18179] ? __fget_files+0x2a/0x420 [ 1228.789503][T18179] ? __fget_files+0x3a2/0x420 [ 1228.789537][T18179] __x64_sys_sendmsg+0x1b1/0x290 [ 1228.789565][T18179] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1228.789607][T18179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.789629][T18179] do_syscall_64+0x174/0x580 [ 1228.789650][T18179] ? trace_irq_disable+0x3b/0x140 [ 1228.789674][T18179] ? clear_bhb_loop+0x40/0x90 [ 1228.789698][T18179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.789717][T18179] RIP: 0033:0x7f65e899de59 [ 1228.789737][T18179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1228.789754][T18179] RSP: 002b:00007f65e9833028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1228.789775][T18179] RAX: ffffffffffffffda RBX: 00007f65e8c25fa0 RCX: 00007f65e899de59 [ 1228.789789][T18179] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1228.789802][T18179] RBP: 00007f65e9833090 R08: 0000000000000000 R09: 0000000000000000 [ 1228.789814][T18179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1228.789826][T18179] R13: 00007f65e8c26038 R14: 00007f65e8c25fa0 R15: 00007ffc95769198 [ 1228.789858][T18179] [ 1229.152195][T16718] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1229.285249][T18141] lo speed is unknown, defaulting to 1000 [ 1229.292631][T18141] lo speed is unknown, defaulting to 1000 [ 1229.319341][T18164] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1229.455156][ T7112] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.503847][T18194] __nla_validate_parse: 2 callbacks suppressed [ 1229.503873][T18194] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15119'. [ 1229.708550][T18210] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15124'. [ 1229.762710][T16718] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1229.900776][ T7112] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.928944][T18214] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1230.047350][T18227] netlink: 56 bytes leftover after parsing attributes in process `syz.1.15128'. [ 1230.105991][T18231] netlink: 'syz.0.15130': attribute type 1 has an invalid length. [ 1230.197096][T18232] netlink: 52 bytes leftover after parsing attributes in process `syz.0.15130'. [ 1230.228343][T18231] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1230.282822][ T7112] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.309562][ T5644] Bluetooth: hci4: command tx timeout [ 1230.324588][ T7115] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1230.342209][T18232] bond10: entered allmulticast mode [ 1230.360955][T18238] netlink: 5 bytes leftover after parsing attributes in process `syz.4.15132'. [ 1230.390569][T18231] bond10: (slave ip6gretap2): making interface the new active one [ 1230.398428][T18231] ip6gretap2: entered allmulticast mode [ 1230.404926][T18231] bond10: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1230.661082][T18259] netlink: 9 bytes leftover after parsing attributes in process `syz.4.15139'. [ 1230.690884][T18259] netlink: 9 bytes leftover after parsing attributes in process `syz.4.15139'. [ 1230.747580][T18263] netlink: 'syz.0.15140': attribute type 12 has an invalid length. [ 1230.798282][T18141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.810460][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1230.818576][T18141] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.858191][T18141] bridge_slave_0: entered allmulticast mode [ 1230.866185][T18141] bridge_slave_0: entered promiscuous mode [ 1230.897694][T18141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.926045][T18141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.938549][T18141] bridge_slave_1: entered allmulticast mode [ 1230.946355][T18141] bridge_slave_1: entered promiscuous mode [ 1231.046003][ T7112] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.065916][T18141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1231.097724][T18141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1231.214977][T18283] syzkaller0: entered promiscuous mode [ 1231.233787][T18283] syzkaller0: entered allmulticast mode [ 1231.256224][T18141] team0: Port device team_slave_0 added [ 1231.270610][T18141] team0: Port device team_slave_1 added [ 1231.368847][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1231.383996][T18290] hsr0: entered promiscuous mode [ 1231.449691][T18141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1231.468011][T18141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1231.494455][T18141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1231.508721][T18141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1231.515729][T18141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1231.542095][T18141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1231.568358][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1231.632770][T18141] hsr_slave_0: entered promiscuous mode [ 1231.639552][T18141] hsr_slave_1: entered promiscuous mode [ 1231.646052][T18141] debugfs: 'hsr0' already exists in 'hsr' [ 1231.651803][T18141] Cannot create hsr debugfs directory [ 1231.693378][T18298] IPVS: set_ctl: invalid protocol: 59 10.1.1.0:20000 [ 1231.901688][T30222] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1232.389752][ T5644] Bluetooth: hci4: command tx timeout [ 1232.498362][T30222] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1232.866675][T18332] netlink: 56 bytes leftover after parsing attributes in process `syz.2.15159'. [ 1233.114038][T16724] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1233.132794][T18338] netlink: 556 bytes leftover after parsing attributes in process `syz.2.15161'. [ 1233.230232][T18343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15164'. [ 1233.649458][T30222] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1234.176474][ T7112] BUG: MAX_LOCKDEP_KEYS too low! [ 1234.181527][ T7112] turning off the locking correctness validator. [ 1234.187929][ T7112] CPU: 1 UID: 0 PID: 7112 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 1234.187954][ T7112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1234.187968][ T7112] Workqueue: netns cleanup_net [ 1234.188062][ T7112] Call Trace: [ 1234.188072][ T7112] [ 1234.188082][ T7112] dump_stack_lvl+0xe8/0x150 [ 1234.188111][ T7112] register_lock_class+0x2aa/0x2e0 [ 1234.188135][ T7112] ? add_lock_to_list+0xc7/0x100 [ 1234.188164][ T7112] __lock_acquire+0xab/0x2cf0 [ 1234.188197][ T7112] ? dev_reset_queue+0x138/0x1b0 [ 1234.188259][ T7112] lock_acquire+0x106/0x350 [ 1234.188283][ T7112] ? dev_reset_queue+0x138/0x1b0 [ 1234.188306][ T7112] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1234.188329][ T7112] ? dev_reset_queue+0x138/0x1b0 [ 1234.188350][ T7112] _raw_spin_lock_bh+0x36/0x50 [ 1234.188376][ T7112] ? dev_reset_queue+0x138/0x1b0 [ 1234.188396][ T7112] dev_reset_queue+0x138/0x1b0 [ 1234.188419][ T7112] dev_deactivate_many+0x778/0xda0 [ 1234.188443][ T7112] ? dev_deactivate_many+0x25d/0xda0 [ 1234.188467][ T7112] __dev_close_many+0x180/0x6e0 [ 1234.188484][ T7112] ? ops_undo_list+0x319/0x8d0 [ 1234.188503][ T7112] ? cleanup_net+0x572/0x810 [ 1234.188520][ T7112] ? process_scheduled_works+0xa8e/0x14e0 [ 1234.188541][ T7112] ? worker_thread+0xa47/0xfb0 [ 1234.188561][ T7112] ? ret_from_fork_asm+0x1a/0x30 [ 1234.188579][ T7112] ? __pfx___dev_close_many+0x10/0x10 [ 1234.188601][ T7112] netif_close_many+0x222/0x410 [ 1234.188620][ T7112] ? __pfx_netif_close_many+0x10/0x10 [ 1234.188642][ T7112] unregister_netdevice_many_notify+0xb76/0x2150 [ 1234.188700][ T7112] ? call_rcu+0x64b/0x8b0 [ 1234.188719][ T7112] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1234.188748][ T7112] ? __pfx_nexthop_net_exit_rtnl+0x10/0x10 [ 1234.188818][ T7112] ? rtnl_is_locked+0x15/0x20 [ 1234.188871][ T7112] ? nexthop_net_exit_rtnl+0x258/0x2a0 [ 1234.188926][ T7112] ops_undo_list+0x391/0x8d0 [ 1234.188948][ T7112] ? __pfx_ops_undo_list+0x10/0x10 [ 1234.188968][ T7112] ? idr_destroy+0x218/0x290 [ 1234.188987][ T7112] ? do_raw_spin_unlock+0xf5/0x210 [ 1234.189010][ T7112] cleanup_net+0x572/0x810 [ 1234.189030][ T7112] ? __pfx_cleanup_net+0x10/0x10 [ 1234.189052][ T7112] ? rcu_is_watching+0x15/0xb0 [ 1234.189079][ T7112] ? process_scheduled_works+0xa20/0x14e0 [ 1234.189100][ T7112] process_scheduled_works+0xa8e/0x14e0 [ 1234.189132][ T7112] ? __pfx_process_scheduled_works+0x10/0x10 [ 1234.189155][ T7112] ? assign_work+0x3cf/0x5d0 [ 1234.189176][ T7112] worker_thread+0xa47/0xfb0 [ 1234.189210][ T7112] kthread+0x388/0x470 [ 1234.189235][ T7112] ? __pfx_worker_thread+0x10/0x10 [ 1234.189255][ T7112] ? __pfx_kthread+0x10/0x10 [ 1234.189279][ T7112] ret_from_fork+0x514/0xb70 [ 1234.189307][ T7112] ? __pfx_ret_from_fork+0x10/0x10 [ 1234.189332][ T7112] ? __switch_to+0xc89/0x1420 [ 1234.189355][ T7112] ? __pfx_kthread+0x10/0x10 [ 1234.189380][ T7112] ret_from_fork_asm+0x1a/0x30 [ 1234.189404][ T7112] [ 1234.479124][ T5644] Bluetooth: hci4: command tx timeout [ 1234.479664][T16720] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1235.015972][T30222] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1235.538888][ T7115] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1236.064148][ T7115] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1236.540704][ T5644] Bluetooth: hci4: command tx timeout [ 1236.588451][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1237.136971][T16722] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1237.659212][T16722] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1238.189182][T30222] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1238.713624][ T7115] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1239.241647][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1239.784373][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1239.819373][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1239.821353][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.309338][T16722] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1240.862745][T16722] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1241.378884][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1241.903285][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1242.432225][T16717] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1242.964843][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1243.489115][T16717] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1244.009095][T30222] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1244.532123][T16722] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1244.948403][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1245.059196][ T7115] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1245.583304][T16722] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1246.101430][ T7115] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1246.623425][T16724] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1247.161315][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1247.689824][T16717] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1248.212848][ T7115] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1248.748242][T16724] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1249.285097][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1249.822559][T30222] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1250.360416][ T7115] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1250.879040][ T7115] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1251.398750][ T4808] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1251.923027][T16724] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1252.435833][T16717] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1252.965940][ T7115] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1253.488767][T30222] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1254.008864][T16724] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 VM DIAGNOSIS: Connection timed out during banner exchange Connection to 10.128.0.34 port 22 timed out failed to run ["ssh" "-p" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "IdentitiesOnly=yes" "-o" "BatchMode=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "root@10.128.0.34" "cat" "/proc/lockdep_stats" "/proc/lockdep" "/proc/lockdep_chains"]: exit status 255