last executing test programs: 2.623759406s ago: executing program 2 (id=190): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70bd2c, 0x25dddbbd, {0x0, 0x0, 0x0, 0x0, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x6}, {0x9, 0xfffffff9, 0x0, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)="c2bba4d36f", 0x5}], 0x1}, 0x20004014) 2.464160699s ago: executing program 0 (id=192): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff00000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x100f, &(0x7f0000002000)=""/4111, 0x41100, 0x24}, 0x94) 2.365967331s ago: executing program 1 (id=194): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000002, 0x13, r0, 0x80c3e000) 2.341690622s ago: executing program 0 (id=195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x255fdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xc33, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xfffd, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240440e1}, 0x200040d0) socket$packet(0x11, 0x3, 0x300) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x7}, 0x80, &(0x7f0000004900)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 1.971804729s ago: executing program 1 (id=197): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=@newlink={0x68, 0x10, 0x40d, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}]}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x1800) 1.910252251s ago: executing program 3 (id=198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x3b}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 1.814452122s ago: executing program 3 (id=199): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}}, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @private0={0xfc, 0x0, '\x00', 0x1}}]}}]}, 0x50}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 876.032872ms ago: executing program 1 (id=200): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x84, @local, 0x4e21, 0x3, 'dh\x00', 0x0, 0xa7e, 0x13f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f28, 0x3, 'nq\x00', 0x5, 0x8, 0x78}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x10003, 0xcd, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 831.267933ms ago: executing program 2 (id=201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, 0x0, 0x14) 780.159944ms ago: executing program 3 (id=202): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x23, 0x80002, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="0a000000010001", 0x7) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x19, &(0x7f0000000200)=0x9, 0x4) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) writev(r4, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1}]}, 0x10) socket$netlink(0x10, 0x3, 0x9) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x25, 0xb, @void}, 0x10) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffdd, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4004800}, 0x4004) syz_genetlink_get_family_id$team(&(0x7f0000000500), r1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0003000000004133c73c1000"], 0x30}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 763.084635ms ago: executing program 1 (id=203): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff00000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x100f, &(0x7f0000002000)=""/4111, 0x41100, 0x24}, 0x94) 661.802827ms ago: executing program 0 (id=204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x2, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x803, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xb, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0x3ff}, {0x5, 0x3, 0x6, 0x1000, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x9, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x9, 0x66a}, {0xfff, 0x6, 0x8, 0xb2f3, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x2, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0x80000001, 0x9, 0x5, 0xff}, {0x5, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0xfffe, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x61a6}, {0xd203, 0x100007, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x7}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x21, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x5, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x2}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0x80000000, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0xd99d, 0x6}, {0x9, 0x1000002, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x8, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x20000885) 605.980038ms ago: executing program 2 (id=205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) 605.258618ms ago: executing program 1 (id=206): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x296) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x4000010, r0, 0x4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000440)=0x8, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000001500)=""/3, &(0x7f00000000c0)=0xfec2) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000003e0007010300000000000000027c00000400428011000100686d"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)={0x44, 0x16, 0x1, 0x0, 0x0, {0xa}, [@nested={0x2e, 0xca, 0x0, 0x1, [@generic="93cdd067cfdca7c2d84a4e1ac1606e11a392ccaf54023707f83a0c166e6aeff02d9d7448c1f9ba51f1f6"]}]}, 0x44}}, 0x0) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 468.834931ms ago: executing program 3 (id=207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x3b}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 391.743342ms ago: executing program 2 (id=208): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x3, 0xeffc}, &(0x7f0000000080)=0x90) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0x84, &(0x7f0000000080)=""/4096, &(0x7f0000001200)=0x1000) 296.857774ms ago: executing program 2 (id=209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70bd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r5, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x6}, {0x9, 0xfffffff9, 0x0, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)="c2bba4d36f", 0x5}], 0x1}, 0x20004014) 296.138364ms ago: executing program 3 (id=210): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x85c}, 0x0) 163.967017ms ago: executing program 0 (id=211): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f28, 0x3, 'nq\x00', 0x5, 0x8, 0x78}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x10003, 0xcd, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 122.538288ms ago: executing program 3 (id=212): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x255fdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xc33, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xfffd, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240440e1}, 0x200040d0) socket$packet(0x11, 0x3, 0x300) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x7}, 0x80, &(0x7f0000004900)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 101.166468ms ago: executing program 1 (id=213): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ff07056b", @ANYRES16=0x0, @ANYBLOB="010002000000fedbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="0800080001", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000440)={{0xffffffffffffffff, &(0x7f0000000100)='^\x00', 0x40402, 0x0, 0x6, &(0x7f0000000240), &(0x7f0000000280)=0xca}, {[0x3, 0x2, 0x80, 0x6]}, 0x800, 0x1a, &(0x7f00000003c0)=""/26}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 82.152629ms ago: executing program 0 (id=214): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000003e00)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}, {{&(0x7f00000005c0)={0xa, 0x4e24, 0x73, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000600)="28e27d766282cd4939f24f57736fc64fb606c4", 0x13}, {&(0x7f0000001180)="225d040cdb05156f8748c5a8683d2a4b946d6e9d98632838feca630acdf82964a1b15383b813966aac9a7e3d439795c231dfdd56a4ed061f04966ef5e09d8b1555157e52d8f529dd614f", 0x4a}, {&(0x7f0000000700)="912c1872179d53a5cea0bb78d8077d87a3575e1da5184fefdb47cb57f37fe714a12dbb8c23aac0fd458c9cbdb8ae2d6a7da0f465b447373b56de47", 0x3b}], 0x3}}, {{&(0x7f0000000780)={0xa, 0x4e24, 0x80000001, @dev={0xfe, 0x80, '\x00', 0xd}, 0xfffffffd}, 0x1c, &(0x7f0000000b40)=[{&(0x7f00000007c0)="3646e071e3d51515a92b19ea506782192925b66b098e723eab7be4d02870efda208547abecf539f1de882dfb0df022d1fc824bae543475aacff0aa3b29224c01d7d388c39221706b", 0x48}, {&(0x7f0000000900)="ab9ef1b745821077041fa4ac40b45bb66975f87dbb747559a5130f759e2dd2147f4312492934d46fd5d96267c212dd7bb73ef12b39b51cac97c4a62e45b09d4e9c3c385d6d3ca6441d69f8c9ba73b54dd6771ffa31dae4aefc63e9277350646cf03c958581f147ddf7e637333be10456d929ba83dc13926a96ffb9f2c69f068faa935a1803ab63b3759219bca1a1c5b4d5eef6876a47b479a156af7b7193ab2d8dd4ecc1a360ef2b98e4efdf141de5fede86015411", 0xb5}, {&(0x7f00000009c0)}, {&(0x7f0000000a00)="44ea072a1f6e1fb043814ad9fd075946621ecd549c29fe5e3853a328402ed08f7e3a4a35c02ea078b2232cf8eb5da7debf44a09c3dbd737a48632ca8ea9ea3ee9e0e66fa8c073a155d303107c34d74d61888358e4f9250909232d477dbbbd34a27e955b2964c00df450afd35b4aa2b8e421808f2ae4c0f58f5faa1fd828949d2fa5b009a8f4ef53493c4e0514dd28d685cffcd63d29606506040eab209c7eab231bb0aca28bd9cc6d600f5c91df81ec1", 0xb0}, {&(0x7f0000000ac0)="5579db77845b2dea2f71298b53a6d1d4452d8fd7f41d8eaa0bbccf38b10d757fb39cfa572dd9554643f876a671f613468ecbd3da84657c4be5408ef66c2dce4989d40aef24b8a1dff21c440bfc8c33", 0x4f}], 0x5}}, {{&(0x7f0000000bc0)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1a}, 0xfffffffe}, 0x1c, &(0x7f0000000d40)=[{&(0x7f0000000dc0)="e6b7ca0c64d4110d2e8b92ea349485d7b501000000000000006f438eac1c1169b859f7d1afc86096452b2edf0a5aa2bc201f96a2261b32a223b6d8008d465e930c1cd1321313e1fa600bd9c083bd33f10c421329429021df443b3dcc4e9e6a63d9f027dfa6df2933a9dd3c1696d16714db3440570bdb07d648608d1f3e1c319b914c4f222918b2dedb2ba693e78e472dc746296409be959ac8b977cec221529efaf165c463d94c6d179f81b35e5cc0537a", 0xb1}, {&(0x7f0000000c40)="c1b44f79a0f9d3a9bc578be2e44a4588d2653983bebdf0b9669044e0a1a0648021a036edbc3c3129f17decacd7bdbf7cca4baad5b87141366a986915e0f4fdd3e6f8830f7188be95e35162b6296c96f3e517c0349eb519814a754f6f3108935f1b0663d5bceec0ae8f0259044a8bf316b9af50fc6b80032ed2aa57a3817566f6bd13ce50d933b49a15fc8b60626f702c6ac8936542f2d4b63f61f9e1a3771ddf7e32b579109f74a5a9e8bde9027b3f376d380fc5b074da3b1c65031239c9f14e689a698d0545de16dc8e496098d24f1d93e8d0e7cf2f6e21541a37c21fe40ff66b60a32ee9f5d82955e59adb", 0xec}], 0x2, &(0x7f0000000d80)=[@hopopts_2292={{0x38, 0x29, 0x36, {0x5c, 0x3, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x8, 0x3ff, [0x6, 0x10000]}}]}}}], 0x38}}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f0000001380)="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", 0x10a}], 0x1, &(0x7f0000005080)=ANY=[], 0x1f8}}, {{0x0, 0x0, 0x0}}], 0x6, 0xc040) 133.9µs ago: executing program 2 (id=215): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x23, 0x80002, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="0a000000010001", 0x7) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x19, &(0x7f0000000200)=0x9, 0x4) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) writev(r4, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1}]}, 0x10) socket$netlink(0x10, 0x3, 0x9) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x25, 0xb, @void}, 0x10) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffdd, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4004800}, 0x4004) syz_genetlink_get_family_id$team(&(0x7f0000000500), r1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0003000000004133c73c1000"], 0x30}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 0s ago: executing program 0 (id=216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.195' (ED25519) to the list of known hosts. [ 73.838059][ T5763] cgroup: Unknown subsys name 'net' [ 73.973315][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.345367][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.810138][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.818623][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.826120][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.828258][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.834098][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.848698][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.848809][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.856616][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.870800][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.878721][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.886021][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.894441][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.902968][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.907575][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.919006][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.926652][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.934558][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.944833][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.952496][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.960758][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.969996][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.977474][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.985126][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.992874][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.193395][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 77.370061][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.378807][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.386011][ T5775] bridge_slave_0: entered allmulticast mode [ 77.392941][ T5775] bridge_slave_0: entered promiscuous mode [ 77.402091][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.409247][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.416376][ T5775] bridge_slave_1: entered allmulticast mode [ 77.423477][ T5775] bridge_slave_1: entered promiscuous mode [ 77.470299][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.494911][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.553744][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 77.566480][ T5775] team0: Port device team_slave_0 added [ 77.589264][ T5775] team0: Port device team_slave_1 added [ 77.600760][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 77.659723][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.666690][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.692937][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.720690][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.729320][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.755663][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.831919][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 77.856030][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.863694][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.871138][ T5778] bridge_slave_0: entered allmulticast mode [ 77.878514][ T5778] bridge_slave_0: entered promiscuous mode [ 77.885976][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.893282][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.900623][ T5782] bridge_slave_0: entered allmulticast mode [ 77.909634][ T5782] bridge_slave_0: entered promiscuous mode [ 77.932723][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.940289][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.947534][ T5782] bridge_slave_1: entered allmulticast mode [ 77.954156][ T5782] bridge_slave_1: entered promiscuous mode [ 77.971882][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.979236][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.986381][ T5778] bridge_slave_1: entered allmulticast mode [ 77.993245][ T5778] bridge_slave_1: entered promiscuous mode [ 78.036239][ T5775] hsr_slave_0: entered promiscuous mode [ 78.042671][ T5775] hsr_slave_1: entered promiscuous mode [ 78.058623][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.071243][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.113925][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.157584][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.175716][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.183118][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.194351][ T5783] bridge_slave_0: entered allmulticast mode [ 78.201930][ T5783] bridge_slave_0: entered promiscuous mode [ 78.215596][ T5782] team0: Port device team_slave_0 added [ 78.246978][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.254580][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.262245][ T5783] bridge_slave_1: entered allmulticast mode [ 78.269056][ T5783] bridge_slave_1: entered promiscuous mode [ 78.277575][ T5782] team0: Port device team_slave_1 added [ 78.285691][ T5778] team0: Port device team_slave_0 added [ 78.325348][ T5778] team0: Port device team_slave_1 added [ 78.366248][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.379984][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.386950][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.412927][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.425448][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.434174][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.460381][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.473366][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.499842][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.506795][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.532948][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.550239][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.557900][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.584024][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.652203][ T5783] team0: Port device team_slave_0 added [ 78.661340][ T5783] team0: Port device team_slave_1 added [ 78.691717][ T5778] hsr_slave_0: entered promiscuous mode [ 78.698365][ T5778] hsr_slave_1: entered promiscuous mode [ 78.704320][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.712313][ T5778] Cannot create hsr debugfs directory [ 78.762059][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.769323][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.795577][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.813776][ T5782] hsr_slave_0: entered promiscuous mode [ 78.820150][ T5782] hsr_slave_1: entered promiscuous mode [ 78.826147][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.834130][ T5782] Cannot create hsr debugfs directory [ 78.854777][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.861902][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.888036][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.968004][ T5786] Bluetooth: hci0: command tx timeout [ 78.998597][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.039667][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.048374][ T5777] Bluetooth: hci3: command tx timeout [ 79.051626][ T5787] Bluetooth: hci1: command tx timeout [ 79.054035][ T5786] Bluetooth: hci2: command tx timeout [ 79.062632][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.099986][ T5783] hsr_slave_0: entered promiscuous mode [ 79.106154][ T5783] hsr_slave_1: entered promiscuous mode [ 79.112832][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.120632][ T5783] Cannot create hsr debugfs directory [ 79.127631][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.339121][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.360380][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.394040][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.403763][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.463838][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.478986][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.494921][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.506332][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.613707][ T5783] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.624805][ T5783] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.641754][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.651554][ T5783] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.664238][ T5783] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.698322][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.744510][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.752130][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.771017][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.791363][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.798586][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.825213][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.903293][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.910420][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.923410][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.930528][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.024665][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.063194][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.111732][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.133888][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.154757][ T2908] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.161953][ T2908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.211894][ T2908] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.219065][ T2908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.243197][ T2908] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.250391][ T2908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.265334][ T2908] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.272490][ T2908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.306235][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.464216][ T5775] veth0_vlan: entered promiscuous mode [ 80.491289][ T5775] veth1_vlan: entered promiscuous mode [ 80.539618][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.618665][ T5775] veth0_macvtap: entered promiscuous mode [ 80.644710][ T5775] veth1_macvtap: entered promiscuous mode [ 80.694039][ T5782] veth0_vlan: entered promiscuous mode [ 80.742945][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.762524][ T5782] veth1_vlan: entered promiscuous mode [ 80.801368][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.831476][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.840573][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.852991][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.862379][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.890043][ T5782] veth0_macvtap: entered promiscuous mode [ 80.910459][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.923793][ T5782] veth1_macvtap: entered promiscuous mode [ 80.941261][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.978992][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.990299][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.002905][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.013819][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.024539][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.035485][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.048023][ T5786] Bluetooth: hci0: command tx timeout [ 81.070381][ T5782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.079891][ T5782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.089090][ T5782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.098801][ T5782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.129765][ T5786] Bluetooth: hci2: command tx timeout [ 81.130836][ T5787] Bluetooth: hci3: command tx timeout [ 81.135557][ T5777] Bluetooth: hci1: command tx timeout [ 81.240194][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.249034][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.256545][ T5778] veth0_vlan: entered promiscuous mode [ 81.286867][ T5783] veth0_vlan: entered promiscuous mode [ 81.301093][ T3441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.313369][ T3441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.322796][ T2930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.333613][ T5783] veth1_vlan: entered promiscuous mode [ 81.344879][ T2930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.358382][ T5778] veth1_vlan: entered promiscuous mode [ 81.417307][ T2908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.425160][ T2908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.505000][ T5783] veth0_macvtap: entered promiscuous mode [ 81.541889][ T5778] veth0_macvtap: entered promiscuous mode [ 81.563010][ T5783] veth1_macvtap: entered promiscuous mode [ 81.599053][ T5778] veth1_macvtap: entered promiscuous mode [ 81.629963][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.661418][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.675422][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.691207][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.703563][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.730692][ T5842] tipc: Started in network mode [ 81.735680][ T5842] tipc: Node identity 6e6d8af88501, cluster identity 4711 [ 81.744327][ T5842] tipc: Enabled bearer , priority 0 [ 81.756439][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.770321][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.781305][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.791944][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.805174][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.824473][ T5839] syzkaller0: entered promiscuous mode [ 81.837497][ T5839] syzkaller0: entered allmulticast mode [ 81.844420][ T5843] syzkaller0: entered promiscuous mode [ 81.852761][ T5843] syzkaller0: entered allmulticast mode [ 81.912772][ T5783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.947115][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.955852][ T5783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.969162][ T5783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.988133][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.006862][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.022686][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.035437][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.046386][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.057323][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.069157][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.128021][ T5842] tipc: Resetting bearer [ 82.150890][ T5838] tipc: Resetting bearer [ 82.188719][ T5838] tipc: Disabling bearer [ 82.219405][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.247477][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.265309][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.282310][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.297936][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.317537][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.339014][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.403616][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.437805][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.463921][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.477276][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.674294][ T5853] syzkaller0: entered promiscuous mode [ 82.684304][ T5853] syzkaller0: entered allmulticast mode [ 82.706123][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.723515][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.779791][ T5855] Zero length message leads to an empty skb [ 82.829665][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.869409][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.889858][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.917853][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.036572][ T2943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.060225][ T2943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.132394][ T5777] Bluetooth: hci0: command tx timeout [ 83.207869][ T5777] Bluetooth: hci3: command tx timeout [ 83.217645][ T5777] Bluetooth: hci1: command tx timeout [ 83.223081][ T5777] Bluetooth: hci2: command tx timeout [ 83.436523][ T5878] netlink: 'syz.3.12': attribute type 39 has an invalid length. [ 83.599044][ T5884] netlink: 'syz.0.14': attribute type 4 has an invalid length. [ 83.956630][ T5891] syzkaller0: entered promiscuous mode [ 83.965557][ T5891] syzkaller0: entered allmulticast mode [ 83.981401][ T5895] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17'. [ 84.114868][ T5897] syzkaller0: entered promiscuous mode [ 84.124700][ T5897] syzkaller0: entered allmulticast mode [ 84.128587][ T5899] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20'. [ 85.217773][ T5777] Bluetooth: hci0: command tx timeout [ 85.287376][ T5786] Bluetooth: hci1: command tx timeout [ 85.287623][ T5787] Bluetooth: hci3: command tx timeout [ 85.292846][ T5777] Bluetooth: hci2: command tx timeout [ 85.325755][ T5938] syzkaller0: entered promiscuous mode [ 85.347300][ T5938] syzkaller0: entered allmulticast mode [ 85.472231][ T5947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.38'. [ 85.484851][ T5949] netlink: 76 bytes leftover after parsing attributes in process `syz.2.36'. [ 85.909563][ T5777] block nbd0: Receive control failed (result -32) [ 86.531834][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.52'. [ 86.673110][ T5992] netlink: 60 bytes leftover after parsing attributes in process `syz.2.53'. [ 86.682973][ T5992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.53'. [ 86.712457][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.53'. [ 86.742973][ T5994] syzkaller0: entered promiscuous mode [ 86.748683][ T5994] syzkaller0: entered allmulticast mode [ 86.896666][ T28] cfg80211: failed to load regulatory.db [ 87.245954][ T6008] tipc: Started in network mode [ 87.266691][ T6008] tipc: Node identity 72c6ebd041aa, cluster identity 4711 [ 87.291330][ T6008] tipc: Enabled bearer , priority 0 [ 87.306250][ T6010] syzkaller0: entered promiscuous mode [ 87.313848][ T6010] syzkaller0: entered allmulticast mode [ 87.335283][ T6008] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 87.351371][ T6013] syzkaller1: entered promiscuous mode [ 87.356877][ T6013] syzkaller1: entered allmulticast mode [ 87.375742][ T6008] tipc: Resetting bearer [ 87.397269][ T6012] tipc: Started in network mode [ 87.402181][ T6012] tipc: Node identity 16aa9cf26859, cluster identity 4711 [ 87.409680][ T6012] tipc: Enabled bearer , priority 0 [ 87.416455][ T6007] tipc: Resetting bearer [ 87.433744][ T6007] tipc: Disabling bearer [ 87.444547][ T6014] syzkaller0: entered promiscuous mode [ 87.452594][ T6014] syzkaller0: entered allmulticast mode [ 87.506516][ T6012] tipc: Resetting bearer [ 87.566558][ T6011] tipc: Resetting bearer [ 87.642239][ T6011] tipc: Disabling bearer [ 87.725650][ T6025] syzkaller0: entered promiscuous mode [ 87.744595][ T6025] syzkaller0: entered allmulticast mode [ 87.953152][ T5770] block nbd0: NBD_DISCONNECT [ 87.967919][ T5770] block nbd0: Send disconnect failed -32 [ 87.988748][ T5770] block nbd0: shutting down sockets [ 88.321693][ T5770] udevd[5770]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 88.688255][ T6067] Bluetooth: MGMT ver 1.22 [ 88.719509][ T6065] syzkaller0: entered promiscuous mode [ 88.747611][ T6065] syzkaller0: entered allmulticast mode [ 89.026677][ T6071] syzkaller0: entered promiscuous mode [ 89.037144][ T6071] syzkaller0: entered allmulticast mode [ 89.536878][ T6096] team0: Device vxcan1 is of different type [ 89.805204][ T27] audit: type=1107 audit(1783902901.970:2): pid=6107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 89.923001][ T6112] bridge_slave_1: left allmulticast mode [ 89.929092][ T6112] bridge_slave_1: left promiscuous mode [ 89.935946][ T6112] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.951971][ T6112] bridge_slave_0: left allmulticast mode [ 89.957883][ T6112] bridge_slave_0: left promiscuous mode [ 89.963961][ T6112] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.270482][ T6121] tipc: Enabled bearer , priority 0 [ 90.298458][ T6121] syzkaller0: entered promiscuous mode [ 90.322451][ T6121] syzkaller0: entered allmulticast mode [ 90.360956][ T6121] tipc: Resetting bearer [ 90.384896][ T6118] tipc: Resetting bearer [ 90.411840][ T6118] tipc: Disabling bearer [ 90.562175][ T6127] syzkaller0: entered promiscuous mode [ 90.597112][ T6127] syzkaller0: entered allmulticast mode [ 90.645541][ T6127] TC_ACT_REPEAT abuse ? [ 90.653040][ T6133] netlink: 256 bytes leftover after parsing attributes in process `syz.1.107'. [ 90.655331][ T6131] syz.3.106 uses obsolete (PF_INET,SOCK_PACKET) [ 90.666482][ T6133] netlink: 64 bytes leftover after parsing attributes in process `syz.1.107'. [ 90.738379][ T5787] Bluetooth: hci0: command 0x0c1a tx timeout [ 90.775761][ T5777] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 91.319591][ T6157] syzkaller0: entered promiscuous mode [ 91.337199][ T6157] syzkaller0: entered allmulticast mode [ 91.753615][ T6166] netlink: 16 bytes leftover after parsing attributes in process `syz.2.120'. [ 92.076325][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.130'. [ 92.108126][ T6183] Driver unsupported XDP return value 0 on prog (id 19) dev N/A, expect packet loss! [ 92.113292][ T6185] bond0: entered promiscuous mode [ 92.130942][ T6185] bond_slave_0: entered promiscuous mode [ 92.141276][ T6185] bond_slave_1: entered promiscuous mode [ 92.166634][ T6185] gretap0: entered promiscuous mode [ 92.183727][ T6185] hsr1: entered promiscuous mode [ 92.618125][ T6205] netlink: 16 bytes leftover after parsing attributes in process `syz.2.137'. [ 92.633878][ T6204] syzkaller0: entered promiscuous mode [ 92.652484][ T6204] syzkaller0: entered allmulticast mode [ 92.920492][ T6210] syzkaller0: entered promiscuous mode [ 92.934578][ T6210] syzkaller0: entered allmulticast mode [ 93.074395][ T6216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.143'. [ 93.420313][ T6226] netlink: 'syz.0.149': attribute type 2 has an invalid length. [ 93.440120][ T6226] netlink: 'syz.0.149': attribute type 1 has an invalid length. [ 93.457677][ T6226] netlink: 224 bytes leftover after parsing attributes in process `syz.0.149'. [ 93.524491][ T6228] netlink: 16 bytes leftover after parsing attributes in process `syz.3.148'. [ 93.667657][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.147'. [ 93.681330][ T6224] netlink: del zone limit has 4 unknown bytes [ 93.834171][ T6235] xt_hashlimit: size too large, truncated to 1048576 [ 93.851738][ T6235] xt_hashlimit: invalid interval [ 93.915358][ T6233] syzkaller0: entered promiscuous mode [ 93.938225][ T6233] syzkaller0: entered allmulticast mode [ 94.486692][ T27] audit: type=1107 audit(1783902906.650:3): pid=6254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 94.727735][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.161'. [ 94.741126][ T6257] netlink: del zone limit has 4 unknown bytes [ 95.743231][ T6269] tipc: Started in network mode [ 95.757261][ T6269] tipc: Node identity 1e8bc3adfcb2, cluster identity 4711 [ 95.781777][ T6269] tipc: Enabled bearer , priority 0 [ 95.806800][ T6275] syzkaller0: entered promiscuous mode [ 95.813709][ T6275] syzkaller0: entered allmulticast mode [ 95.826024][ T6274] __nla_validate_parse: 1 callbacks suppressed [ 95.826037][ T6274] netlink: 32 bytes leftover after parsing attributes in process `syz.1.166'. [ 95.870048][ T6269] tipc: Resetting bearer [ 95.918020][ T6268] tipc: Resetting bearer [ 95.960414][ T6268] tipc: Disabling bearer [ 96.223367][ T27] audit: type=1107 audit(1783902908.390:4): pid=6284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 96.383664][ T6288] syzkaller0: entered promiscuous mode [ 96.399266][ T6288] syzkaller0: entered allmulticast mode [ 96.455532][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.170'. [ 96.467249][ T6283] netlink: del zone limit has 4 unknown bytes [ 97.964779][ T6294] netlink: 16 bytes leftover after parsing attributes in process `syz.2.173'. [ 98.124908][ T27] audit: type=1107 audit(1783902910.290:5): pid=6309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 98.235100][ T6314] syzkaller0: entered promiscuous mode [ 98.241535][ T6314] syzkaller0: entered allmulticast mode [ 98.446632][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.182'. [ 98.458838][ T6319] tipc: Enabled bearer , priority 0 [ 98.465787][ T6312] netlink: del zone limit has 4 unknown bytes [ 98.479831][ T6319] syzkaller0: entered promiscuous mode [ 98.485326][ T6319] syzkaller0: entered allmulticast mode [ 98.545298][ T6319] tipc: Resetting bearer [ 98.582916][ T6318] tipc: Resetting bearer [ 98.629810][ T6318] tipc: Disabling bearer [ 98.750256][ T6327] netlink: 16 bytes leftover after parsing attributes in process `syz.1.191'. [ 98.927593][ T6336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.193'. [ 98.955572][ T6336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.193'. [ 99.012782][ T6331] syzkaller0: entered promiscuous mode [ 99.019616][ T6331] syzkaller0: entered allmulticast mode [ 99.292448][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.196'. [ 99.307235][ T6342] netlink: del zone limit has 4 unknown bytes [ 100.359058][ T6344] syzkaller0: entered promiscuous mode [ 100.364576][ T6344] syzkaller0: entered allmulticast mode [ 100.472708][ T5765] IPVS: starting estimator thread 0... [ 100.567620][ T6357] IPVS: using max 20 ests per chain, 48000 per kthread [ 100.631604][ T6361] netlink: 16 bytes leftover after parsing attributes in process `syz.3.202'. [ 100.855716][ T6369] tc action pedit 'at' offset 5 out of bounds [ 100.862192][ T6369] tc action pedit 'at' offset 5 out of bounds [ 100.868361][ T6369] tc action pedit 'at' offset 5 out of bounds [ 100.874457][ T6369] tc action pedit 'at' offset 5 out of bounds [ 100.880592][ T6369] tc action pedit 'at' offset 5 out of bounds [ 100.886684][ T6369] tc action pedit 'at' offset 5 out of bounds [ 100.892844][ T6369] tc action pedit 'at' offset 5 out of bounds [ 100.898972][ T6369] tc action pedit 'at' offset 5 out of bounds [ 100.905087][ T6369] tc action pedit 'at' offset 5 out of bounds [ 100.911227][ T6369] tc action pedit 'at' offset 5 out of bounds [ 100.917349][ T6369] 0: reclassify loop, rule prio 0, protocol 800 [ 101.098097][ T6368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'. [ 101.107388][ T6368] netlink: del zone limit has 4 unknown bytes [ 101.375997][ T6383] syzkaller0: entered promiscuous mode [ 101.383800][ T6383] syzkaller0: entered allmulticast mode [ 101.395809][ T6389] netlink: 16 bytes leftover after parsing attributes in process `syz.2.215'. [ 101.424572][ T6386] netlink: 36 bytes leftover after parsing attributes in process `syz.1.213'. [ 101.434026][ T6386] ------------[ cut here ]------------ [ 101.439602][ T6386] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 101.452343][ T6386] WARNING: CPU: 0 PID: 6386 at net/sched/cls_u32.c:855 u32_change+0x1ce8/0x2690 [ 101.461835][ T6386] Modules linked in: [ 101.465752][ T6386] CPU: 0 PID: 6386 Comm: syz.1.213 Not tainted syzkaller #0 [ 101.473579][ T6386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 101.483977][ T6386] RIP: 0010:u32_change+0x1ce8/0x2690 [ 101.489543][ T6386] Code: f8 eb 59 e8 aa 7c d2 f8 c6 05 89 8a c2 05 01 b9 10 00 00 00 48 c7 c7 60 06 c8 8b 4c 89 fe 48 c7 c2 e0 06 c8 8b e8 88 55 9c f8 <0f> 0b e9 1f f0 ff ff e8 7c 7c d2 f8 eb 24 e8 75 7c d2 f8 c6 05 16 [ 101.509372][ T6386] RSP: 0018:ffffc9000bc56d60 EFLAGS: 00010246 [ 101.515469][ T6386] RAX: 27c6fb9df1906f00 RBX: ffff88802d03f000 RCX: 0000000000080000 [ 101.523563][ T6386] RDX: ffffc9000d81b000 RSI: 000000000000b367 RDI: 000000000000b368 [ 101.531693][ T6386] RBP: ffffc9000bc56ef8 R08: ffffc9000bc56967 R09: 1ffff9200178ad2c [ 101.540094][ T6386] R10: dffffc0000000000 R11: fffff5200178ad2d R12: 1ffff9200178adbc [ 101.548150][ T6386] R13: ffff88802d03d8e8 R14: ffff888061369dc0 R15: 0000000000000020 [ 101.556151][ T6386] FS: 00007f5cbf5a66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 101.565708][ T6386] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.572526][ T6386] CR2: 00007fe3fc000020 CR3: 0000000031308000 CR4: 00000000003506f0 [ 101.580570][ T6386] Call Trace: [ 101.583862][ T6386] [ 101.586820][ T6386] ? u32_get+0x370/0x370 [ 101.591140][ T6386] tc_new_tfilter+0x1109/0x1820 [ 101.596003][ T6386] ? tcf_proto_signal_destroying+0x240/0x240 [ 101.602161][ T6386] ? rcu_read_unlock+0x8c/0xa0 [ 101.606966][ T6386] ? tcf_proto_signal_destroying+0x240/0x240 [ 101.613508][ T6386] ? tcf_proto_signal_destroying+0x240/0x240 [ 101.619669][ T6386] rtnetlink_rcv_msg+0x892/0xf90 [ 101.624631][ T6386] ? rtnetlink_rcv_msg+0x220/0xf90 [ 101.629865][ T6386] ? rtnetlink_bind+0x80/0x80 [ 101.634574][ T6386] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 101.640645][ T6386] ? lock_chain_count+0x20/0x20 [ 101.645513][ T6386] ? __local_bh_enable_ip+0x13a/0x1c0 [ 101.650943][ T6386] ? lockdep_hardirqs_on+0x98/0x150 [ 101.656194][ T6386] ? __local_bh_enable_ip+0x13a/0x1c0 [ 101.662208][ T6386] ? _local_bh_enable+0xa0/0xa0 [ 101.667261][ T6386] ? __dev_queue_xmit+0x275/0x3630 [ 101.672469][ T6386] ? __dev_queue_xmit+0x1bc2/0x3630 [ 101.677819][ T6386] ? __dev_queue_xmit+0x275/0x3630 [ 101.682998][ T6386] ? ref_tracker_free+0x686/0x830 [ 101.688211][ T6386] netlink_rcv_skb+0x235/0x4c0 [ 101.693017][ T6386] ? rtnetlink_bind+0x80/0x80 [ 101.697786][ T6386] ? netlink_ack+0x1160/0x1160 [ 101.702596][ T6386] ? __lock_acquire+0x7d80/0x7d80 [ 101.707745][ T6386] ? netlink_deliver_tap+0x2e/0x1b0 [ 101.712971][ T6386] netlink_unicast+0x7b1/0x930 [ 101.717863][ T6386] netlink_sendmsg+0x8d0/0xbf0 [ 101.722660][ T6386] ? netlink_getsockopt+0x590/0x590 [ 101.727938][ T6386] ? apparmor_socket_sendmsg+0x8e/0x330 [ 101.733509][ T6386] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 101.738851][ T6386] ? security_socket_sendmsg+0x80/0xa0 [ 101.744343][ T6386] ? netlink_getsockopt+0x590/0x590 [ 101.749692][ T6386] ____sys_sendmsg+0x61b/0x980 [ 101.754500][ T6386] ? __asan_memset+0x22/0x40 [ 101.759171][ T6386] ? __sys_sendmsg_sock+0x30/0x30 [ 101.764873][ T6386] ? __import_iovec+0x5f2/0x850 [ 101.770034][ T6386] ? import_iovec+0x73/0xa0 [ 101.774569][ T6386] ___sys_sendmsg+0x2a6/0x360 [ 101.779341][ T6386] ? __sys_sendmsg+0x2b0/0x2b0 [ 101.784187][ T6386] __sys_sendmmsg+0x2ca/0x510 [ 101.789021][ T6386] ? __ia32_sys_sendmsg+0x90/0x90 [ 101.794093][ T6386] ? __ia32_sys_get_robust_list+0x110/0x110 [ 101.800078][ T6386] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 101.806080][ T6386] ? lock_chain_count+0x20/0x20 [ 101.811034][ T6386] __x64_sys_sendmmsg+0xa0/0xb0 [ 101.815913][ T6386] do_syscall_64+0x55/0xb0 [ 101.820408][ T6386] ? clear_bhb_loop+0x40/0x90 [ 101.825107][ T6386] ? clear_bhb_loop+0x40/0x90 [ 101.829878][ T6386] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.835846][ T6386] RIP: 0033:0x7f5cbe79de59 [ 101.840369][ T6386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.860060][ T6386] RSP: 002b:00007f5cbf5a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 101.869204][ T6386] RAX: ffffffffffffffda RBX: 00007f5cbea25fa0 RCX: 00007f5cbe79de59 [ 101.877394][ T6386] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 101.885384][ T6386] RBP: 00007f5cbe833e6f R08: 0000000000000000 R09: 0000000000000000 [ 101.893508][ T6386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.901577][ T6386] R13: 00007f5cbea26038 R14: 00007f5cbea25fa0 R15: 00007ffdf0dfe1e8 [ 101.909642][ T6386] [ 101.912673][ T6386] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 101.919951][ T6386] CPU: 0 PID: 6386 Comm: syz.1.213 Not tainted syzkaller #0 [ 101.927239][ T6386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 101.937371][ T6386] Call Trace: [ 101.940736][ T6386] [ 101.943661][ T6386] dump_stack_lvl+0x18c/0x250 [ 101.948342][ T6386] ? show_regs_print_info+0x20/0x20 [ 101.953541][ T6386] ? load_image+0x420/0x420 [ 101.958084][ T6386] panic+0x2ca/0x720 [ 101.961997][ T6386] ? bpf_jit_dump+0xd0/0xd0 [ 101.966498][ T6386] __warn+0x2e0/0x470 [ 101.970569][ T6386] ? u32_change+0x1ce8/0x2690 [ 101.975257][ T6386] ? u32_change+0x1ce8/0x2690 [ 101.979936][ T6386] report_bug+0x2be/0x4f0 [ 101.984273][ T6386] ? u32_change+0x1ce8/0x2690 [ 101.988952][ T6386] ? u32_change+0x1ce8/0x2690 [ 101.993631][ T6386] ? u32_change+0x1cea/0x2690 [ 101.998311][ T6386] handle_bug+0xcf/0x120 [ 102.002553][ T6386] exc_invalid_op+0x1a/0x50 [ 102.007049][ T6386] asm_exc_invalid_op+0x1a/0x20 [ 102.011910][ T6386] RIP: 0010:u32_change+0x1ce8/0x2690 [ 102.017201][ T6386] Code: f8 eb 59 e8 aa 7c d2 f8 c6 05 89 8a c2 05 01 b9 10 00 00 00 48 c7 c7 60 06 c8 8b 4c 89 fe 48 c7 c2 e0 06 c8 8b e8 88 55 9c f8 <0f> 0b e9 1f f0 ff ff e8 7c 7c d2 f8 eb 24 e8 75 7c d2 f8 c6 05 16 [ 102.036812][ T6386] RSP: 0018:ffffc9000bc56d60 EFLAGS: 00010246 [ 102.042963][ T6386] RAX: 27c6fb9df1906f00 RBX: ffff88802d03f000 RCX: 0000000000080000 [ 102.050932][ T6386] RDX: ffffc9000d81b000 RSI: 000000000000b367 RDI: 000000000000b368 [ 102.058898][ T6386] RBP: ffffc9000bc56ef8 R08: ffffc9000bc56967 R09: 1ffff9200178ad2c [ 102.066861][ T6386] R10: dffffc0000000000 R11: fffff5200178ad2d R12: 1ffff9200178adbc [ 102.074828][ T6386] R13: ffff88802d03d8e8 R14: ffff888061369dc0 R15: 0000000000000020 [ 102.082819][ T6386] ? u32_get+0x370/0x370 [ 102.087085][ T6386] tc_new_tfilter+0x1109/0x1820 [ 102.091960][ T6386] ? tcf_proto_signal_destroying+0x240/0x240 [ 102.097957][ T6386] ? rcu_read_unlock+0x8c/0xa0 [ 102.102719][ T6386] ? tcf_proto_signal_destroying+0x240/0x240 [ 102.108713][ T6386] ? tcf_proto_signal_destroying+0x240/0x240 [ 102.114703][ T6386] rtnetlink_rcv_msg+0x892/0xf90 [ 102.119645][ T6386] ? rtnetlink_rcv_msg+0x220/0xf90 [ 102.124761][ T6386] ? rtnetlink_bind+0x80/0x80 [ 102.129450][ T6386] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 102.135434][ T6386] ? lock_chain_count+0x20/0x20 [ 102.140284][ T6386] ? __local_bh_enable_ip+0x13a/0x1c0 [ 102.145651][ T6386] ? lockdep_hardirqs_on+0x98/0x150 [ 102.150889][ T6386] ? __local_bh_enable_ip+0x13a/0x1c0 [ 102.156254][ T6386] ? _local_bh_enable+0xa0/0xa0 [ 102.161104][ T6386] ? __dev_queue_xmit+0x275/0x3630 [ 102.166210][ T6386] ? __dev_queue_xmit+0x1bc2/0x3630 [ 102.171411][ T6386] ? __dev_queue_xmit+0x275/0x3630 [ 102.176534][ T6386] ? ref_tracker_free+0x686/0x830 [ 102.181570][ T6386] netlink_rcv_skb+0x235/0x4c0 [ 102.186334][ T6386] ? rtnetlink_bind+0x80/0x80 [ 102.191005][ T6386] ? netlink_ack+0x1160/0x1160 [ 102.195774][ T6386] ? __lock_acquire+0x7d80/0x7d80 [ 102.200799][ T6386] ? netlink_deliver_tap+0x2e/0x1b0 [ 102.205999][ T6386] netlink_unicast+0x7b1/0x930 [ 102.210771][ T6386] netlink_sendmsg+0x8d0/0xbf0 [ 102.215543][ T6386] ? netlink_getsockopt+0x590/0x590 [ 102.220744][ T6386] ? apparmor_socket_sendmsg+0x8e/0x330 [ 102.226288][ T6386] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 102.231575][ T6386] ? security_socket_sendmsg+0x80/0xa0 [ 102.237030][ T6386] ? netlink_getsockopt+0x590/0x590 [ 102.242230][ T6386] ____sys_sendmsg+0x61b/0x980 [ 102.247003][ T6386] ? __asan_memset+0x22/0x40 [ 102.251592][ T6386] ? __sys_sendmsg_sock+0x30/0x30 [ 102.256614][ T6386] ? __import_iovec+0x5f2/0x850 [ 102.261470][ T6386] ? import_iovec+0x73/0xa0 [ 102.265973][ T6386] ___sys_sendmsg+0x2a6/0x360 [ 102.270657][ T6386] ? __sys_sendmsg+0x2b0/0x2b0 [ 102.275479][ T6386] __sys_sendmmsg+0x2ca/0x510 [ 102.280175][ T6386] ? __ia32_sys_sendmsg+0x90/0x90 [ 102.285209][ T6386] ? __ia32_sys_get_robust_list+0x110/0x110 [ 102.291109][ T6386] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 102.297090][ T6386] ? lock_chain_count+0x20/0x20 [ 102.301940][ T6386] __x64_sys_sendmmsg+0xa0/0xb0 [ 102.306791][ T6386] do_syscall_64+0x55/0xb0 [ 102.311207][ T6386] ? clear_bhb_loop+0x40/0x90 [ 102.315878][ T6386] ? clear_bhb_loop+0x40/0x90 [ 102.320553][ T6386] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.326452][ T6386] RIP: 0033:0x7f5cbe79de59 [ 102.330864][ T6386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.350551][ T6386] RSP: 002b:00007f5cbf5a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 102.358963][ T6386] RAX: ffffffffffffffda RBX: 00007f5cbea25fa0 RCX: 00007f5cbe79de59 [ 102.366933][ T6386] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 102.374907][ T6386] RBP: 00007f5cbe833e6f R08: 0000000000000000 R09: 0000000000000000 [ 102.382876][ T6386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.390841][ T6386] R13: 00007f5cbea26038 R14: 00007f5cbea25fa0 R15: 00007ffdf0dfe1e8 [ 102.398822][ T6386] [ 102.402070][ T6386] Kernel Offset: disabled [ 102.406382][ T6386] Rebooting in 86400 seconds..