last executing test programs: 3.713907123s ago: executing program 1 (id=291): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES32=r0, @ANYBLOB="00000000030000c7490b85bb000000000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000780)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb}, 0x1c) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23}, 0x18}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x10, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x6, 0x8}, 0x10, 0xffffffffffffffff, r5, 0xa, &(0x7f0000000780), &(0x7f00000007c0)=[{0x0, 0x1, 0xd, 0x8}, {0x3, 0x3, 0x1, 0xb}, {0x0, 0x2, 0x6, 0xc}, {0x1, 0x4, 0x4}, {0x3, 0x1, 0x7, 0x1}, {0x0, 0x1, 0x9, 0x5}, {0x0, 0x1, 0x7, 0x3}, {0x2, 0x1, 0x8, 0x8}, {0x5, 0x5, 0xc, 0x6}, {0x2, 0x5, 0x10, 0x6}], 0x10, 0x3, @void, @value}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x117, 0x5, 0x0, 0x4) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000) recvmmsg(r6, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x4008101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000000c0)=""/177, 0xb1}, {&(0x7f00000004c0)=""/257, 0x101}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000003bc0)=""/4116, 0x1014}, {&(0x7f00000017c0)=""/227, 0xe3}, {&(0x7f0000000340)=""/219, 0xdb}], 0x7}, 0x80000000}], 0x4, 0x40000030, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, r9, 0x7, 0x0, 0x4000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 3.093608581s ago: executing program 3 (id=296): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b03d25a806f8c6394f90324fc602f1a04000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x40, 0xa, 0x20, 0x80, 0x87}, {0x0, 0x5}, {0x0, 0x1}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x6c}, 0x0, @in6=@mcast2, 0x80, 0x0, 0x0, 0x0, 0x4, 0xfffffffd}}, 0xe8) listen(r2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x3) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0xfb, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@end]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x40, 0x2, 0x0, 0x0, {[@window={0x3, 0x3, 0x3d}, @sack={0x5, 0x2}, @fastopen={0x22, 0x4, '~\t'}, @sack={0x5, 0x1e, [0x5, 0x5, 0x10, 0x0, 0xc2, 0xfffffff7, 0xfffffffb]}, @exp_fastopen={0xfe, 0x4}, @md5sig={0x13, 0x12, "4d561d7ef6737b6a2efa8f86467f69a2"}]}}}}}}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83", 0x1e, 0x840, 0x0, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000011143dcf0000000000000000080001000000000008004b00"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtfilter={0x78, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0x0, 0xa}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x4c, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_ACT={0x34, 0x7, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x800) r11 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x10000, @private0, 0x2}, @in6={0xa, 0x4e23, 0x8, @remote, 0x3}, @in6={0xa, 0x4e23, 0x1bc9, @dev={0xfe, 0x80, '\x00', 0x38}, 0x7}, @in={0x2, 0x4e20, @broadcast}]}, &(0x7f0000000180)=0x10) 2.859015926s ago: executing program 3 (id=297): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b03d25a806f8c6394f90324fc602f1a04000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x40, 0xa, 0x20, 0x80, 0x87}, {0x0, 0x5}, {0x0, 0x1}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x6c}, 0x0, @in6=@mcast2, 0x80, 0x0, 0x0, 0x0, 0x4, 0xfffffffd}}, 0xe8) listen(r2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x3) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0xfb, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@end]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x40, 0x2, 0x0, 0x0, {[@window={0x3, 0x3, 0x3d}, @sack={0x5, 0x2}, @fastopen={0x22, 0x4, '~\t'}, @sack={0x5, 0x1e, [0x5, 0x5, 0x10, 0x0, 0xc2, 0xfffffff7, 0xfffffffb]}, @exp_fastopen={0xfe, 0x4}, @md5sig={0x13, 0x12, "4d561d7ef6737b6a2efa8f86467f69a2"}]}}}}}}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83", 0x1e, 0x840, 0x0, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000011143dcf0000000000000000080001000000000008004b00"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtfilter={0x78, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0x0, 0xa}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x4c, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_ACT={0x34, 0x7, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x800) r11 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x10000, @private0, 0x2}, @in6={0xa, 0x4e23, 0x8, @remote, 0x3}, @in6={0xa, 0x4e23, 0x1bc9, @dev={0xfe, 0x80, '\x00', 0x38}, 0x7}, @in={0x2, 0x4e20, @broadcast}]}, &(0x7f0000000180)=0x10) 2.708621s ago: executing program 1 (id=299): socket$inet6_sctp(0xa, 0x4, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x80}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x54099000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a27f2", 0x2, 0x2c, 0x0, @remote, @local, {[@routing={0xff, 0x0, 0x1, 0x8}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5000002000000000000006000000000303a00ff020000000000000000000000000001fc01000000000000e900000000000000040090780000000363fefbd400020001fc010000000000000000000000000000fc0100"/102], 0x66) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f00000001c0)=0x80000002, 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) 2.460435371s ago: executing program 0 (id=301): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x1c, 0x4, 0x410, 0x108, 0x0, 0x0, 0x328, 0x328, 0x328, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x108, 0x0, {0x3ed}}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz1\x00', {0x6}}}}, {{@arp={@broadcast, @loopback, 0x0, 0xffffff00, 0xfe, 0x8, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0xff, 0xff]}}, 0x0, 0x0, 0xffff, 0x4000, 0xf7fe, 0x2, 'gretap0\x00', 'bridge_slave_0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @multicast1, @private=0xa010101, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @empty, @broadcast, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x460) 2.389814224s ago: executing program 3 (id=302): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'vxcan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010100, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0xa}]}]}, 0xa0}}, 0x0) r6 = socket$inet(0x2, 0x1, 0x5) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000003d0007010000000000000000027c0000040000000c00018006000600894f"], 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7020000000008300000008000300", @ANYRES32=0x0, @ANYBLOB="50000e804c0002150400018004000200040002002c000180180801800400080004000100060004000100000004000a000c0001800400080004000c000400018000"/80], 0x6c}, 0x1, 0x0, 0x0, 0x24048084}, 0x884) r10 = socket$caif_stream(0x25, 0x1, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x4582}, {r6, 0x2000}, {r8, 0x2308}, {r10, 0x1000}, {r0, 0x2000}, {r3, 0x4512}, {r0}, {r3, 0x4}], 0x8, &(0x7f00000000c0), &(0x7f0000000140)={[0x6000]}, 0x8) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000280)=0x8) sendmsg$nl_route_sched(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd090032000300300000006000000001002f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120088a8"], 0xfdef) 2.206492021s ago: executing program 2 (id=304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FITHAW(r1, 0xc0045878) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)={0xa8, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x88, 0x1, 0x0, 0x1, [@nested={0x84, 0x10, 0x0, 0x1, [@typed={0x7f, 0x8, 0x0, 0x0, @binary="509d5dba6c50869ca71ec714b69739fc7eb4464e4b4c200003f460a768d2149821eb570d55bdf9c7ec33e87d6b7b3328f40e7a7ee63fd9ecdfdecf44f1ed43b28ac62902ae549e7dffe73df6ffa0b7bd9e7af241ea0bcaccdc07e7e3a67ffdb31dd9ac07c4539116d944d69b30fe22b75efc16ab7259989d89d02b"}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}], 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x1ac, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x11b2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA={0xec, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc10d}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd45}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbb0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0xd0}, 0x8000) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000104010100000000000000ffff0004000500010003"], 0x1c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@mpls_getroute={0x148, 0x1a, 0x0, 0x70bd2a, 0x25dfdbff, {0x1c, 0x20, 0x0, 0x7, 0xfd, 0x2, 0xc8, 0x7, 0x1500}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x7}, @RTA_NEWDST={0x84, 0x13, [{0x7fff}, {0x101}, {0x7, 0x0, 0x1}, {0xa, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x81}, {0x1ff}, {0xf, 0x0, 0x1}, {0x6890}, {0x5, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x4}, {0x7ff, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x7}, {0x7ff, 0x0, 0x1}, {0xf6a38}, {0x6, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x7e}, {0x7, 0x0, 0x1}, {0x4}, {0x8}, {0x3b}, {0x8, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x7, 0x0, 0x1}, {}, {0xa}, {0x9, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x2}, @RTA_NEWDST={0x84, 0x13, [{0x8001, 0x0, 0x1}, {0x3}, {0x4, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x6}, {0x1}, {}, {0x8001, 0x0, 0x1}, {0xc0000}, {0x7d5a, 0x0, 0x1}, {}, {0x4, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x80}, {0x6}, {0x2, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x8}, {0x100}, {0x3, 0x0, 0x1}, {0xffff}, {0x0, 0x0, 0x1}, {0x65a4}, {0x6, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0xfffff}, {0x200}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0xfff}]}, @RTA_VIA={0x14, 0x12, {0x1d, "0c337c8680f2a13b96bb22763684"}}]}, 0x148}, 0x1, 0x5502000000000000}, 0x0) unshare(0x2c020400) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100}]}, 0x28}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$inet(0x2, 0x1, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x5c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x5c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r10, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, 0x0) r11 = socket$kcm(0x2, 0xa, 0x2) socket$igmp6(0xa, 0x3, 0x3a) ioctl$SIOCSIFHWADDR(r11, 0x8914, 0x0) 2.119257357s ago: executing program 0 (id=305): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettaction={0x34, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x1a}]}, 0x34}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8947, &(0x7f0000000140)={'bond0\x00'}) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r4, &(0x7f0000001b00)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x1) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000120000f00"}}}]}, 0x48}}, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x0, 0x1, &(0x7f00000001c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000200)='GPL\x00', 0x7, 0xc2, &(0x7f0000000600)=""/194, 0x41000, 0x2, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x8, 0x7f, 0xb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r3, r3, 0xffffffffffffffff, r10, 0xffffffffffffffff], 0x0, 0x10, 0x6e, @void, @value}, 0x94) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x25a5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000180)=0x1000, 0x81) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r11, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', r12, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.912977288s ago: executing program 3 (id=306): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000001080)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x2, 0x4, 0xdd9d, 0x0, 0x4, 0x800}}, {0x4}}]}]}, 0x5c}}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYBLOB="0000000002000000b705000008000000850000"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PPPIOCSACTIVE(r6, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r6, &(0x7f0000000100)=""/113, 0x71) write$ppp(r6, &(0x7f0000000200)="bc72", 0x2) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0x7, 0x4, 0x1, 0x5, 0x6, 0x4, 0x2, 0x5, r4}, 0x20) connect$ax25(r1, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r7 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000080)}], 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x46, &(0x7f0000000240)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}]}}}}}}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 1.871225819s ago: executing program 4 (id=307): socket$inet6_sctp(0xa, 0x4, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff8085000000710000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x54099000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a27f2", 0x2, 0x2c, 0x0, @remote, @local, {[@routing={0xff, 0x0, 0x1, 0x8}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5000002000000000000006000000000303a00ff020000000000000000000000000001fc01000000000000e900000000000000040090780000000363fefbd400020001fc010000000000000000000000000000fc0100"/102], 0x66) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f00000001c0)=0x80000002, 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8000) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) 1.835486662s ago: executing program 1 (id=308): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000200)="240000001a005f0400f9f4070009040180202000000000000000000004001e0000000000", 0x24) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x20, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x6, "e6673fcf"}, @window={0x3, 0x3, 0xfe}]}}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x22, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0xc800) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000000)=ANY=[], 0x6) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="30000000000000008400000001000000"], 0x30}], 0x1, 0x0) read$alg(r5, &(0x7f0000000280)=""/147, 0x93) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000240)={0x6, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}}, 0x0, 0x2, [{{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e21, @rand_addr=0x64010100}}]}, 0x190) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) getpeername(r6, 0x0, &(0x7f0000001ac0)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'ip6erspan0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x45, 0x0, 0x3}, {}, {}, {0x6}]}) socket$netlink(0x10, 0x3, 0x0) 1.466854838s ago: executing program 1 (id=309): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES32=r0, @ANYBLOB="00000000030000c7490b85bb000000000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000780)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb}, 0x1c) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23}, 0x18}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x10, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x6, 0x8}, 0x10, 0xffffffffffffffff, r5, 0xa, &(0x7f0000000780), &(0x7f00000007c0)=[{0x0, 0x1, 0xd, 0x8}, {0x3, 0x3, 0x1, 0xb}, {0x0, 0x2, 0x6, 0xc}, {0x1, 0x4, 0x4}, {0x3, 0x1, 0x7, 0x1}, {0x0, 0x1, 0x9, 0x5}, {0x0, 0x1, 0x7, 0x3}, {0x2, 0x1, 0x8, 0x8}, {0x5, 0x5, 0xc, 0x6}, {0x2, 0x5, 0x10, 0x6}], 0x10, 0x3, @void, @value}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x117, 0x5, 0x0, 0x4) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000) recvmmsg(r6, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x4008101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000000c0)=""/177, 0xb1}, {&(0x7f00000004c0)=""/257, 0x101}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000003bc0)=""/4116, 0x1014}, {&(0x7f00000017c0)=""/227, 0xe3}, {&(0x7f0000000340)=""/219, 0xdb}], 0x7}, 0x80000000}], 0x4, 0x40000030, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, r9, 0x7, 0x0, 0x4000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 1.411116477s ago: executing program 3 (id=310): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FITHAW(r1, 0xc0045878) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)={0xa8, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x88, 0x1, 0x0, 0x1, [@nested={0x84, 0x10, 0x0, 0x1, [@typed={0x7f, 0x8, 0x0, 0x0, @binary="509d5dba6c50869ca71ec714b69739fc7eb4464e4b4c200003f460a768d2149821eb570d55bdf9c7ec33e87d6b7b3328f40e7a7ee63fd9ecdfdecf44f1ed43b28ac62902ae549e7dffe73df6ffa0b7bd9e7af241ea0bcaccdc07e7e3a67ffdb31dd9ac07c4539116d944d69b30fe22b75efc16ab7259989d89d02b"}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}], 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x1ac, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x11b2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA={0xec, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc10d}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd45}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbb0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0xd0}, 0x8000) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000104010100000000000000ffff0004000500010003"], 0x1c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@mpls_getroute={0x148, 0x1a, 0x0, 0x70bd2a, 0x25dfdbff, {0x1c, 0x20, 0x0, 0x7, 0xfd, 0x2, 0xc8, 0x7, 0x1500}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x7}, @RTA_NEWDST={0x84, 0x13, [{0x7fff}, {0x101}, {0x7, 0x0, 0x1}, {0xa, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x81}, {0x1ff}, {0xf, 0x0, 0x1}, {0x6890}, {0x5, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x4}, {0x7ff, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x7}, {0x7ff, 0x0, 0x1}, {0xf6a38}, {0x6, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x7e}, {0x7, 0x0, 0x1}, {0x4}, {0x8}, {0x3b}, {0x8, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x7, 0x0, 0x1}, {}, {0xa}, {0x9, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x2}, @RTA_NEWDST={0x84, 0x13, [{0x8001, 0x0, 0x1}, {0x3}, {0x4, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x6}, {0x1}, {}, {0x8001, 0x0, 0x1}, {0xc0000}, {0x7d5a, 0x0, 0x1}, {}, {0x4, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x80}, {0x6}, {0x2, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x8}, {0x100}, {0x3, 0x0, 0x1}, {0xffff}, {0x0, 0x0, 0x1}, {0x65a4}, {0x6, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0xfffff}, {0x200}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0xfff}]}, @RTA_VIA={0x14, 0x12, {0x1d, "0c337c8680f2a13b96bb22763684"}}]}, 0x148}, 0x1, 0x5502000000000000}, 0x0) unshare(0x2c020400) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100}]}, 0x28}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$inet(0x2, 0x1, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x5c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x5c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r10, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, 0x0) r11 = socket$kcm(0x2, 0xa, 0x2) socket$igmp6(0xa, 0x3, 0x3a) ioctl$SIOCSIFHWADDR(r11, 0x8914, 0x0) 1.342826814s ago: executing program 4 (id=311): r0 = socket$rxrpc(0x21, 0x2, 0x2) close(r0) 1.199379794s ago: executing program 2 (id=312): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x3}]}, {0x0, [0x30, 0x0, 0x5f]}}, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000740)=@raw=[@cb_func], &(0x7f0000000140)='syzkaller\x00', 0x8, 0xff, &(0x7f0000000340)=""/255, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x9, &(0x7f0000000080)={0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.137439837s ago: executing program 4 (id=313): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b03d25a806f8c6394f90324fc602f1a04000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x40, 0xa, 0x20, 0x80, 0x87}, {0x0, 0x5}, {0x0, 0x1}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x6c}, 0x0, @in6=@mcast2, 0x80, 0x0, 0x0, 0x0, 0x4, 0xfffffffd}}, 0xe8) listen(r2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x3) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0xfb, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@end]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x40, 0x2, 0x0, 0x0, {[@window={0x3, 0x3, 0x3d}, @sack={0x5, 0x2}, @fastopen={0x22, 0x4, '~\t'}, @sack={0x5, 0x1e, [0x5, 0x5, 0x10, 0x0, 0xc2, 0xfffffff7, 0xfffffffb]}, @exp_fastopen={0xfe, 0x4}, @md5sig={0x13, 0x12, "4d561d7ef6737b6a2efa8f86467f69a2"}]}}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83", 0x1e, 0x840, 0x0, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000011143dcf0000000000000000080001000000000008004b00"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtfilter={0x78, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0x0, 0xa}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x4c, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_ACT={0x34, 0x7, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x800) r11 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x10000, @private0, 0x2}, @in6={0xa, 0x4e23, 0x8, @remote, 0x3}, @in6={0xa, 0x4e23, 0x1bc9, @dev={0xfe, 0x80, '\x00', 0x38}, 0x7}, @in={0x2, 0x4e20, @broadcast}]}, &(0x7f0000000180)=0x10) 1.135876333s ago: executing program 0 (id=314): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0x42, 0x4, 0x328, 0xffffffff, 0x198, 0x198, 0x198, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}}]}, @REJECT={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x2000}}, @common=@ttl={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'virt_wifi0\x00'}) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@updsa={0x144, 0x10, 0x1, 0x0, 0x200019, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in6=@private1, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r8, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0xfea2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r5, 0x3ff, 0x9, 0x100}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r11, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="99742bbd7000fbdbdf25150000004c000180380004001400010002004e20ac14141d0000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 1.002079912s ago: executing program 2 (id=315): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000020100000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 961.703677ms ago: executing program 4 (id=316): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'vxcan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010100, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0xa}]}]}, 0xa0}}, 0x0) r6 = socket$inet(0x2, 0x1, 0x5) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000003d0007010000000000000000027c0000040000000c00018006000600894f"], 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7020000000008300000008000300", @ANYRES32=0x0, @ANYBLOB="50000e804c0002150400018004000200040002002c000180180801800400080004000100060004000100000004000a000c0001800400080004000c000400018000"/80], 0x6c}, 0x1, 0x0, 0x0, 0x24048084}, 0x884) r10 = socket$caif_stream(0x25, 0x1, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x4582}, {r6, 0x2000}, {r8, 0x2308}, {r10, 0x1000}, {r0, 0x2000}, {r3, 0x4512}, {r0}, {r3, 0x4}], 0x8, &(0x7f00000000c0), &(0x7f0000000140)={[0x6000]}, 0x8) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000280)=0x8) sendmsg$nl_route_sched(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd090032000300300000006000000001002f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120088a8"], 0xfdef) 924.370271ms ago: executing program 2 (id=317): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000002380)={0x48, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x38fa007c1ec2a12) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x74, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x35, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@device_b, {0x0, 0x4}}, 0x0, @default, 0x1007, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0xab, 0x4b}}, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_IE_PROBE_RESP={0xc, 0x7f, [@ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x100}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x74}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff0414"], 0x528}}, 0xc000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x2000, 0x747, 0x0, 0x3, 0x0, 0x0, 0x9}, 0xc) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$inet(r2, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)="ce", 0x1}], 0x1}}], 0x2, 0x40488e4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x1, 0x101, 0x80}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000a5000000040000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, 0x0, 0x20004000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r5, 0x800, 0x55007}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x6}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) socket$nl_route(0x10, 0x3, 0x0) 760.670147ms ago: executing program 0 (id=318): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000200)="240000001a005f0400f9f4070009040180202000000000000000000004001e0000000000", 0x24) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x20, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x6, "e6673fcf"}, @window={0x3, 0x3, 0xfe}]}}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x22, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0xc800) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000000)=ANY=[], 0x6) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="30000000000000008400000001000000"], 0x30}], 0x1, 0x0) read$alg(r5, &(0x7f0000000280)=""/147, 0x93) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000240)={0x6, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}}, 0x0, 0x2, [{{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e21, @rand_addr=0x64010100}}]}, 0x190) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) getpeername(r6, 0x0, &(0x7f0000001ac0)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'ip6erspan0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x45, 0x0, 0x3}, {}, {}, {0x6}]}) socket$netlink(0x10, 0x3, 0x0) 686.921923ms ago: executing program 2 (id=319): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x20, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x6, "e6673fcf"}, @window={0x3, 0x3, 0xfe}]}}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x22, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0xc800) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000000)=ANY=[], 0x6) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="30000000000000008400000001000000"], 0x30}], 0x1, 0x0) read$alg(r4, &(0x7f0000000280)=""/147, 0x93) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000240)={0x6, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}}, 0x0, 0x2, [{{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e21, @rand_addr=0x64010100}}]}, 0x190) r5 = socket$qrtr(0x2a, 0x2, 0x0) getpeername(r5, 0x0, &(0x7f0000001ac0)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'ip6erspan0\x00', 0x7c2}) socket$netlink(0x10, 0x3, 0x0) 586.198999ms ago: executing program 4 (id=320): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000200)="240000001a005f0400f9f4070009040180202000000000000000000004001e0000000000", 0x24) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x20, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x6, "e6673fcf"}, @window={0x3, 0x3, 0xfe}]}}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x22, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0xc800) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000000)=ANY=[], 0x6) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="30000000000000008400000001000000"], 0x30}], 0x1, 0x0) read$alg(r5, &(0x7f0000000280)=""/147, 0x93) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000240)={0x6, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}}, 0x0, 0x2, [{{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e21, @rand_addr=0x64010100}}]}, 0x190) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) getpeername(r6, 0x0, &(0x7f0000001ac0)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'ip6erspan0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x45, 0x0, 0x3}, {}, {}, {0x6}]}) socket$netlink(0x10, 0x3, 0x0) 517.645219ms ago: executing program 0 (id=321): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000001080)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x2, 0x4, 0xdd9d, 0x0, 0x4, 0x800}}, {0x4}}]}]}, 0x5c}}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYBLOB="0000000002000000b705000008000000850000"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PPPIOCSACTIVE(r6, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r6, &(0x7f0000000100)=""/113, 0x71) write$ppp(r6, &(0x7f0000000200)="bc72", 0x2) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0x7, 0x4, 0x1, 0x5, 0x6, 0x4, 0x2, 0x5, r4}, 0x20) connect$ax25(r1, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r7 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000080)}], 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x46, &(0x7f0000000240)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}]}}}}}}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 501.046125ms ago: executing program 1 (id=322): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000200)="240000001a005f0400f9f4070009040180202000000000000000000004001e0000000000", 0x24) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x20, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x6, "e6673fcf"}, @window={0x3, 0x3, 0xfe}]}}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x22, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0xc800) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000000)=ANY=[], 0x6) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="30000000000000008400000001000000"], 0x30}], 0x1, 0x0) read$alg(r5, &(0x7f0000000280)=""/147, 0x93) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000240)={0x6, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}}, 0x0, 0x2, [{{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e21, @rand_addr=0x64010100}}]}, 0x190) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) getpeername(r6, 0x0, &(0x7f0000001ac0)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'ip6erspan0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x45, 0x0, 0x3}, {}, {}, {0x6}]}) socket$netlink(0x10, 0x3, 0x0) 375.515562ms ago: executing program 3 (id=323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FITHAW(r1, 0xc0045878) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)={0xac, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x8c, 0x1, 0x0, 0x1, [@nested={0x88, 0x10, 0x0, 0x1, [@typed={0x81, 0x8, 0x0, 0x0, @binary="509d5dba6c50869ca71ec714b69739fc7eb4464e4b4c200003f460a768d2149821eb570d55bdf9c7ec33e87d6b7b3328f40e7a7ee63fd9ecdfdecf44f1ed43b28ac62902ae549e7dffe73df6ffa0b7bd9e7af241ea0bcaccdc07e7e3a67ffdb31dd9ac07c4539116d944d69b30fe22b75efc16ab7259989d89d02bd4a5"}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0xac}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}], 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x1ac, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x11b2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA={0xec, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc10d}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd45}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbb0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0xd0}, 0x8000) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000104010100000000000000ffff0004000500010003"], 0x1c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@mpls_getroute={0x148, 0x1a, 0x0, 0x70bd2a, 0x25dfdbff, {0x1c, 0x20, 0x0, 0x7, 0xfd, 0x2, 0xc8, 0x7, 0x1500}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x7}, @RTA_NEWDST={0x84, 0x13, [{0x7fff}, {0x101}, {0x7, 0x0, 0x1}, {0xa, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x81}, {0x1ff}, {0xf, 0x0, 0x1}, {0x6890}, {0x5, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x4}, {0x7ff, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x7}, {0x7ff, 0x0, 0x1}, {0xf6a38}, {0x6, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x7e}, {0x7, 0x0, 0x1}, {0x4}, {0x8}, {0x3b}, {0x8, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x7, 0x0, 0x1}, {}, {0xa}, {0x9, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x2}, @RTA_NEWDST={0x84, 0x13, [{0x8001, 0x0, 0x1}, {0x3}, {0x4, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x6}, {0x1}, {}, {0x8001, 0x0, 0x1}, {0xc0000}, {0x7d5a, 0x0, 0x1}, {}, {0x4, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x80}, {0x6}, {0x2, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x8}, {0x100}, {0x3, 0x0, 0x1}, {0xffff}, {0x0, 0x0, 0x1}, {0x65a4}, {0x6, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0xfffff}, {0x200}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0xfff}]}, @RTA_VIA={0x14, 0x12, {0x1d, "0c337c8680f2a13b96bb22763684"}}]}, 0x148}, 0x1, 0x5502000000000000}, 0x0) unshare(0x2c020400) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100}]}, 0x28}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$inet(0x2, 0x1, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x5c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x5c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r10, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, 0x0) r11 = socket$kcm(0x2, 0xa, 0x2) socket$igmp6(0xa, 0x3, 0x3a) ioctl$SIOCSIFHWADDR(r11, 0x8914, 0x0) 373.707751ms ago: executing program 2 (id=324): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettaction={0x34, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x1a}]}, 0x34}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8947, &(0x7f0000000140)={'bond0\x00'}) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="140100002d0001000000000000000000030100800c0000000000000000000000140001000100000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c0073ab84fb5bb9baadcfedd2ef74d74002989c99b5a3cb0152b05b3065820cfc1e07d0bc052bc73ca34a10d40ca5e4823e468d3f3cc3dc3400e394fe10d3a4b341eacd7eafc8ec5e719250fce0bac22f11ecdb1a0321980ffa1461ab4e0020a7714d"], 0x114}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r4, &(0x7f0000001b00)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x1) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000120000f00"}}}]}, 0x48}}, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x0, 0x1, &(0x7f00000001c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000200)='GPL\x00', 0x7, 0xc2, &(0x7f0000000600)=""/194, 0x41000, 0x2, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x8, 0x7f, 0xb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r3, r3, 0xffffffffffffffff, r10, 0xffffffffffffffff], 0x0, 0x10, 0x6e, @void, @value}, 0x94) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x25a5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000180)=0x1000, 0x81) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r11, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', r12, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 165.491465ms ago: executing program 4 (id=325): socket$inet6_sctp(0xa, 0x4, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff8085000000710000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x54099000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a27f2", 0x2, 0x2c, 0x0, @remote, @local, {[@routing={0xff, 0x0, 0x1, 0x8}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5000002000000000000006000000000303a00ff020000000000000000000000000001fc01000000000000e900000000000000040090780000000363fefbd400020001fc010000000000000000000000000000fc0100"/102], 0x66) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f00000001c0)=0x80000002, 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) 112.67165ms ago: executing program 1 (id=326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000020000000900010073797a310000000060000000160a03000000000000000000020000000900010073797a31000000000900020073797a31000000002c000380080002400000000008000140000000001800038014000100776c616e3100000000000000000000000800074000000001"], 0xa8}}, 0x0) 0s ago: executing program 0 (id=327): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b03d25a806f8c6394f90324fc602f1a04000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x40, 0xa, 0x20, 0x80, 0x87}, {0x0, 0x5}, {0x0, 0x1}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x6c}, 0x0, @in6=@mcast2, 0x80, 0x0, 0x0, 0x0, 0x4, 0xfffffffd}}, 0xe8) listen(r2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x3) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0xfb, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@end]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x40, 0x2, 0x0, 0x0, {[@window={0x3, 0x3, 0x3d}, @sack={0x5, 0x2}, @fastopen={0x22, 0x4, '~\t'}, @sack={0x5, 0x1e, [0x5, 0x5, 0x10, 0x0, 0xc2, 0xfffffff7, 0xfffffffb]}, @exp_fastopen={0xfe, 0x4}, @md5sig={0x13, 0x12, "4d561d7ef6737b6a2efa8f86467f69a2"}]}}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83", 0x1e, 0x840, 0x0, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000011143dcf0000000000000000080001000000000008004b00"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtfilter={0x78, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0x0, 0xa}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x4c, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_ACT={0x34, 0x7, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x800) r11 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x10000, @private0, 0x2}, @in6={0xa, 0x4e23, 0x8, @remote, 0x3}, @in6={0xa, 0x4e23, 0x1bc9, @dev={0xfe, 0x80, '\x00', 0x38}, 0x7}, @in={0x2, 0x4e20, @broadcast}]}, &(0x7f0000000180)=0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.6' (ED25519) to the list of known hosts. [ 75.474333][ T5822] cgroup: Unknown subsys name 'net' [ 75.654302][ T5822] cgroup: Unknown subsys name 'cpuset' [ 75.662986][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.256782][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.482624][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.494406][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.526298][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.535032][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.538012][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.550162][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.552350][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.558462][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.564920][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.573052][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.579461][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.587524][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.600575][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.611407][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.611432][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.641738][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.642067][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.658447][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.666873][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.666917][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.680965][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.682814][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.688950][ T5852] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 81.695482][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.702929][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.710303][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.716830][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.725573][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.738142][ T5852] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.750459][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.243435][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 82.262380][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 82.280842][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 82.359131][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 82.386295][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 82.481007][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.488306][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.497874][ T5832] bridge_slave_0: entered allmulticast mode [ 82.505059][ T5832] bridge_slave_0: entered promiscuous mode [ 82.559272][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.566801][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.574251][ T5832] bridge_slave_1: entered allmulticast mode [ 82.582019][ T5832] bridge_slave_1: entered promiscuous mode [ 82.598865][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.606100][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.613864][ T5836] bridge_slave_0: entered allmulticast mode [ 82.620840][ T5836] bridge_slave_0: entered promiscuous mode [ 82.628280][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.636424][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.644049][ T5836] bridge_slave_1: entered allmulticast mode [ 82.651579][ T5836] bridge_slave_1: entered promiscuous mode [ 82.670764][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.677894][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.685462][ T5835] bridge_slave_0: entered allmulticast mode [ 82.692613][ T5835] bridge_slave_0: entered promiscuous mode [ 82.765483][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.773490][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.780952][ T5835] bridge_slave_1: entered allmulticast mode [ 82.788309][ T5835] bridge_slave_1: entered promiscuous mode [ 82.806323][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.818937][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.833590][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.859874][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.867185][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.875209][ T5845] bridge_slave_0: entered allmulticast mode [ 82.882219][ T5845] bridge_slave_0: entered promiscuous mode [ 82.900568][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.926943][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.938811][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.946219][ T5845] bridge_slave_1: entered allmulticast mode [ 82.954289][ T5845] bridge_slave_1: entered promiscuous mode [ 82.977338][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.984505][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.992087][ T5842] bridge_slave_0: entered allmulticast mode [ 82.999042][ T5842] bridge_slave_0: entered promiscuous mode [ 83.009090][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.021534][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.041324][ T5832] team0: Port device team_slave_0 added [ 83.055342][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.063076][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.070769][ T5842] bridge_slave_1: entered allmulticast mode [ 83.077518][ T5842] bridge_slave_1: entered promiscuous mode [ 83.123041][ T5832] team0: Port device team_slave_1 added [ 83.131906][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.145152][ T5836] team0: Port device team_slave_0 added [ 83.167852][ T5835] team0: Port device team_slave_0 added [ 83.176405][ T5835] team0: Port device team_slave_1 added [ 83.194879][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.216470][ T5836] team0: Port device team_slave_1 added [ 83.234340][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.248239][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.287164][ T5845] team0: Port device team_slave_0 added [ 83.302557][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.309547][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.336006][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.368865][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.376817][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.403273][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.415924][ T5845] team0: Port device team_slave_1 added [ 83.422378][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.429340][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.456304][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.477243][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.484562][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.510884][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.523505][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.530598][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.556689][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.570026][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.577012][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.603594][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.635742][ T5842] team0: Port device team_slave_0 added [ 83.644101][ T5842] team0: Port device team_slave_1 added [ 83.666710][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.675184][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.675236][ T5850] Bluetooth: hci2: command tx timeout [ 83.707763][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.749959][ T5850] Bluetooth: hci0: command tx timeout [ 83.770360][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.777346][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.803984][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.829617][ T5832] hsr_slave_0: entered promiscuous mode [ 83.829824][ T5850] Bluetooth: hci1: command tx timeout [ 83.830809][ T5832] hsr_slave_1: entered promiscuous mode [ 83.835913][ T5850] Bluetooth: hci3: command tx timeout [ 83.852285][ T5843] Bluetooth: hci4: command tx timeout [ 83.871430][ T5835] hsr_slave_0: entered promiscuous mode [ 83.877685][ T5835] hsr_slave_1: entered promiscuous mode [ 83.884035][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.892210][ T5835] Cannot create hsr debugfs directory [ 83.912624][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.919882][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.946094][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.958846][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.965915][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.992115][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.008095][ T5836] hsr_slave_0: entered promiscuous mode [ 84.014655][ T5836] hsr_slave_1: entered promiscuous mode [ 84.021109][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.028709][ T5836] Cannot create hsr debugfs directory [ 84.101109][ T5845] hsr_slave_0: entered promiscuous mode [ 84.107355][ T5845] hsr_slave_1: entered promiscuous mode [ 84.117412][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.125733][ T5845] Cannot create hsr debugfs directory [ 84.273382][ T5842] hsr_slave_0: entered promiscuous mode [ 84.280296][ T5842] hsr_slave_1: entered promiscuous mode [ 84.286450][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.294400][ T5842] Cannot create hsr debugfs directory [ 84.539590][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.553158][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.568757][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.581838][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.631981][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.648800][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.672637][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.689239][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.736295][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.767963][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.779293][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.809226][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.835093][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.844326][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.855202][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.866319][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.946072][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.959415][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.001132][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.008018][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.018389][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.079202][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.113809][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.131823][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.139119][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.156438][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.183783][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.190955][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.254508][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.279056][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.286351][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.296980][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.304120][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.320345][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.383047][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.390270][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.411333][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.418458][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.474899][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.532120][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.551998][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.614033][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.633910][ T736] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.641106][ T736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.654127][ T736] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.661552][ T736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.716307][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.754987][ T5850] Bluetooth: hci2: command tx timeout [ 85.766381][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.794450][ T4515] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.801702][ T4515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.815873][ T4515] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.823055][ T4515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.834873][ T5850] Bluetooth: hci0: command tx timeout [ 85.910879][ T53] Bluetooth: hci3: command tx timeout [ 85.916356][ T53] Bluetooth: hci4: command tx timeout [ 85.922752][ T5843] Bluetooth: hci1: command tx timeout [ 85.942112][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.061836][ T5845] veth0_vlan: entered promiscuous mode [ 86.081346][ T5845] veth1_vlan: entered promiscuous mode [ 86.123054][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.215329][ T5836] veth0_vlan: entered promiscuous mode [ 86.235819][ T5836] veth1_vlan: entered promiscuous mode [ 86.267739][ T5845] veth0_macvtap: entered promiscuous mode [ 86.306103][ T5845] veth1_macvtap: entered promiscuous mode [ 86.333054][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.354745][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.368772][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.388989][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.407955][ T5836] veth0_macvtap: entered promiscuous mode [ 86.435855][ T5832] veth0_vlan: entered promiscuous mode [ 86.464718][ T5845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.476584][ T5845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.486525][ T5845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.496179][ T5845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.514974][ T5836] veth1_macvtap: entered promiscuous mode [ 86.530587][ T5832] veth1_vlan: entered promiscuous mode [ 86.623355][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.637023][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.651808][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.693146][ T5832] veth0_macvtap: entered promiscuous mode [ 86.731289][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.752717][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.765395][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.781716][ T5835] veth0_vlan: entered promiscuous mode [ 86.804480][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.814016][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.824405][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.833327][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.845809][ T5832] veth1_macvtap: entered promiscuous mode [ 86.875657][ T5835] veth1_vlan: entered promiscuous mode [ 86.908564][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.918276][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.957747][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.968785][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.979180][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.991999][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.004055][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.020989][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.032831][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.045013][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.055657][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.066843][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.093443][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.105613][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.115680][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.124830][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.147734][ T736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.155002][ T5842] veth0_vlan: entered promiscuous mode [ 87.170616][ T736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.228508][ T5835] veth0_macvtap: entered promiscuous mode [ 87.275380][ T5842] veth1_vlan: entered promiscuous mode [ 87.299184][ T736] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.302139][ T5835] veth1_macvtap: entered promiscuous mode [ 87.323211][ T736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.328389][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.384423][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.396664][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.413545][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.425860][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.448156][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.465409][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.477454][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.542315][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.554678][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.575708][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.589121][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.616103][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.647374][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.659490][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.686173][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.697126][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.706383][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.714277][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.724613][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.733751][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.829941][ T53] Bluetooth: hci2: command tx timeout [ 87.836444][ T736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.853759][ T736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.910680][ T53] Bluetooth: hci0: command tx timeout [ 87.990037][ T53] Bluetooth: hci4: command tx timeout [ 87.996160][ T5850] Bluetooth: hci1: command tx timeout [ 88.001959][ T5843] Bluetooth: hci3: command tx timeout [ 88.003379][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.029372][ T5842] veth0_macvtap: entered promiscuous mode [ 88.043398][ T5842] veth1_macvtap: entered promiscuous mode [ 88.081595][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.108679][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.143254][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.153693][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.164710][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.174711][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.185955][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.195908][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.207439][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.220805][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.241888][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.262792][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.283680][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.296347][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.306730][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.317960][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.328137][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.338923][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.350415][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.386238][ T5842] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.397084][ T5842] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.406399][ T5842] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.415499][ T5842] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.507505][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.575685][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.600597][ T5925] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.650521][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.671604][ T5925] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 88.673576][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.703342][ T5926] bridge_slave_0: left allmulticast mode [ 88.709057][ T5926] bridge_slave_0: left promiscuous mode [ 88.751396][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.763983][ T5926] bridge_slave_1: left allmulticast mode [ 88.772408][ T5926] bridge_slave_1: left promiscuous mode [ 88.781546][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.809493][ T5926] bond0: (slave bond_slave_0): Releasing backup interface [ 88.833746][ T5926] bond0: (slave bond_slave_1): Releasing backup interface [ 88.936706][ T5938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 88.960300][ T5926] team0: Port device team_slave_0 removed [ 89.023326][ T5926] team0: Port device team_slave_1 removed [ 89.060661][ T5926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.077505][ T5926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.087642][ T5926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.095991][ T5926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.270413][ T5925] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 89.384778][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.403774][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.603175][ T5948] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9'. [ 89.630143][ T5948] openvswitch: netlink: Flow actions attr not present in new flow. [ 89.788689][ T736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.799142][ T736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.905937][ T5956] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.922688][ T53] Bluetooth: hci2: command tx timeout [ 90.002895][ T53] Bluetooth: hci0: command tx timeout [ 90.071466][ T53] Bluetooth: hci4: command tx timeout [ 90.072386][ T5956] syz.0.10 uses obsolete (PF_INET,SOCK_PACKET) [ 90.076973][ T53] Bluetooth: hci1: command tx timeout [ 90.088590][ T5850] Bluetooth: hci3: command tx timeout [ 90.377558][ T5960] tipc: Started in network mode [ 90.397252][ T5960] tipc: Node identity ac14142f, cluster identity 4711 [ 90.406722][ T5971] Zero length message leads to an empty skb [ 90.414213][ T5960] tipc: New replicast peer: 0.0.0.0 [ 90.442282][ T5960] tipc: Enabled bearer , priority 10 [ 90.493854][ T5951] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8'. [ 91.087206][ T5982] netlink: 'syz.2.12': attribute type 27 has an invalid length. [ 91.352526][ T5989] xt_CT: You must specify a L4 protocol and not use inversions on it [ 91.563500][ T9] tipc: Node number set to 2886997039 [ 91.676778][ T5996] netlink: 'syz.0.17': attribute type 30 has an invalid length. [ 91.706617][ T5996] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 91.712781][ T5994] netlink: 'syz.4.15': attribute type 30 has an invalid length. [ 91.752284][ T5998] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 91.753413][ T5997] netlink: 'syz.3.16': attribute type 30 has an invalid length. [ 91.804124][ T5994] Bluetooth: MGMT ver 1.23 [ 91.988011][ T6001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.147859][ T6003] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.191531][ T6005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.236032][ T6003] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 92.262728][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.271175][ T6003] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.322311][ T25] cfg80211: failed to load regulatory.db [ 92.970339][ T6028] tipc: Started in network mode [ 92.989925][ T6028] tipc: Node identity ac14142f, cluster identity 4711 [ 93.023023][ T6028] tipc: New replicast peer: 0.0.0.0 [ 93.046386][ T6028] tipc: Enabled bearer , priority 10 [ 93.184386][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28'. [ 93.328487][ T6041] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.338146][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'. [ 93.348569][ T6040] netlink: 24 bytes leftover after parsing attributes in process `syz.1.29'. [ 93.378915][ T6040] tc_dump_action: action bad kind [ 93.386230][ T6041] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 93.405169][ T6040] netlink: 'syz.1.29': attribute type 1 has an invalid length. [ 93.416092][ T6041] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.423895][ T6041] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.454689][ T6040] netlink: 224 bytes leftover after parsing attributes in process `syz.1.29'. [ 93.610241][ T6047] netlink: 'syz.2.31': attribute type 30 has an invalid length. [ 93.640443][ T6047] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 93.676870][ T6050] netlink: 'syz.3.32': attribute type 30 has an invalid length. [ 93.696382][ T6052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.702796][ T6054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.160843][ T5887] tipc: Node number set to 2886997039 [ 94.452819][ T6062] vxcan1: entered allmulticast mode [ 94.773598][ T6092] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.935656][ T6092] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.000643][ T6100] vlan2: entered promiscuous mode [ 95.062516][ T6097] ax25_connect(): syz.3.43 uses autobind, please contact jreuter@yaina.de [ 95.101274][ T6092] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.457703][ T6092] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.556270][ T6110] bond0: option xmit_hash_policy: invalid value (71) [ 95.683075][ T6112] ax25_connect(): syz.3.47 uses autobind, please contact jreuter@yaina.de [ 95.841334][ T6092] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.850325][ T6121] netlink: 'syz.1.41': attribute type 30 has an invalid length. [ 95.884362][ T6092] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.925429][ T6092] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.968344][ T6092] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.224968][ T6129] ax25_connect(): syz.3.49 uses autobind, please contact jreuter@yaina.de [ 96.294516][ T6092] netlink: 20 bytes leftover after parsing attributes in process `syz.1.41'. [ 96.947933][ T6141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.52'. [ 97.015535][ T6145] netlink: 'syz.1.54': attribute type 30 has an invalid length. [ 97.027639][ T6145] net_ratelimit: 2 callbacks suppressed [ 97.027657][ T6145] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 97.088270][ T6143] netlink: 52 bytes leftover after parsing attributes in process `syz.2.53'. [ 97.345227][ T6131] lo: entered promiscuous mode [ 97.354115][ T6131] tunl0: entered promiscuous mode [ 97.361771][ T6131] gre0: entered promiscuous mode [ 97.368470][ T6131] gretap0: entered promiscuous mode [ 97.374769][ T6131] erspan0: entered promiscuous mode [ 97.381507][ T6131] ip_vti0: entered promiscuous mode [ 97.387682][ T6131] ip6_vti0: entered promiscuous mode [ 97.399955][ T6131] sit0: entered promiscuous mode [ 97.405966][ T6131] ip6tnl0: entered promiscuous mode [ 97.414099][ T6131] ip6gre0: entered promiscuous mode [ 97.420594][ T6131] syz_tun: entered promiscuous mode [ 97.426817][ T6131] ip6gretap0: entered promiscuous mode [ 97.435525][ T6131] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.442725][ T6131] bridge0: port 2(bridge_slave_1) entered listening state [ 97.450486][ T6131] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.457640][ T6131] bridge0: port 1(bridge_slave_0) entered listening state [ 97.522329][ T6155] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 97.561474][ T6131] bridge0: entered promiscuous mode [ 97.604626][ T6131] vcan0: entered promiscuous mode [ 97.618568][ T6131] bond0: entered promiscuous mode [ 97.624857][ T6131] bond_slave_0: entered promiscuous mode [ 97.638700][ T6131] bond_slave_1: entered promiscuous mode [ 97.690324][ T6131] team0: entered promiscuous mode [ 97.695434][ T6131] team_slave_0: entered promiscuous mode [ 97.719960][ T6131] team_slave_1: entered promiscuous mode [ 97.726963][ T6131] dummy0: entered promiscuous mode [ 97.740885][ T6131] nlmon0: entered promiscuous mode [ 97.752563][ T6131] caif0: entered promiscuous mode [ 97.760684][ T6131] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.869195][ T6166] ax25_connect(): syz.2.58 uses autobind, please contact jreuter@yaina.de [ 98.271885][ T6172] tipc: Started in network mode [ 98.276839][ T6172] tipc: Node identity ac14142f, cluster identity 4711 [ 98.332647][ T6172] tipc: New replicast peer: 0.0.0.0 [ 98.345804][ T6172] tipc: Enabled bearer , priority 10 [ 98.368294][ T6179] vxcan1: entered allmulticast mode [ 98.446161][ T6189] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 98.457556][ T6165] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.874132][ T6197] bond0: option xmit_hash_policy: invalid value (71) [ 99.067985][ T6202] openvswitch: netlink: Geneve opt len 63 is not a multiple of 4. [ 99.202117][ T6204] tipc: Started in network mode [ 99.207112][ T6204] tipc: Node identity ac14142f, cluster identity 4711 [ 99.230975][ T6204] tipc: New replicast peer: 0.0.0.0 [ 99.238167][ T6204] tipc: Enabled bearer , priority 10 [ 99.261078][ T6209] netlink: 'syz.1.67': attribute type 30 has an invalid length. [ 99.274600][ T6208] netlink: 'syz.0.66': attribute type 30 has an invalid length. [ 99.288039][ T6209] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 99.308319][ T6208] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 99.450822][ T5887] tipc: Node number set to 2886997039 [ 99.591839][ T6218] netlink: 'syz.3.69': attribute type 30 has an invalid length. [ 99.617635][ T6218] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 99.730510][ T6223] netlink: 'syz.1.71': attribute type 30 has an invalid length. [ 99.764555][ T6223] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 99.799381][ T6222] ax25_connect(): syz.0.70 uses autobind, please contact jreuter@yaina.de [ 99.960135][ T6226] ax25_connect(): syz.4.72 uses autobind, please contact jreuter@yaina.de [ 100.157025][ T6238] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 100.341009][ T6241] bond0: option xmit_hash_policy: invalid value (71) [ 100.349887][ T5887] tipc: Node number set to 2886997039 [ 100.624206][ T6254] bond0: option xmit_hash_policy: invalid value (71) [ 100.820900][ T6262] tipc: Enabling of bearer rejected, already enabled [ 100.994564][ T6266] netlink: 'syz.4.82': attribute type 30 has an invalid length. [ 101.002819][ T6265] netlink: 'syz.2.81': attribute type 30 has an invalid length. [ 101.422212][ T6269] tipc: Enabling of bearer rejected, already enabled [ 101.507893][ T6278] ax25_connect(): syz.1.86 uses autobind, please contact jreuter@yaina.de [ 101.929145][ T6296] tipc: Started in network mode [ 101.947619][ T6296] tipc: Node identity ac14142f, cluster identity 4711 [ 101.980458][ T6296] tipc: New replicast peer: 0.0.0.0 [ 102.009571][ T6296] tipc: Enabled bearer , priority 10 [ 102.332481][ T6307] netlink: 'syz.2.91': attribute type 1 has an invalid length. [ 102.357834][ T6307] netlink: 224 bytes leftover after parsing attributes in process `syz.2.91'. [ 102.690449][ T6322] netlink: 'syz.0.94': attribute type 30 has an invalid length. [ 102.742399][ T6315] netlink: 52 bytes leftover after parsing attributes in process `syz.4.92'. [ 102.753020][ T6322] net_ratelimit: 4 callbacks suppressed [ 102.753039][ T6322] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 102.826053][ T6327] netlink: 'syz.3.95': attribute type 30 has an invalid length. [ 102.853919][ T6327] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 103.131873][ T5886] tipc: Node number set to 2886997039 [ 103.261379][ T6341] ax25_connect(): syz.0.98 uses autobind, please contact jreuter@yaina.de [ 103.273903][ T6344] netlink: 'syz.3.99': attribute type 30 has an invalid length. [ 103.287845][ T6344] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 103.664406][ T6360] netlink: 'syz.2.103': attribute type 30 has an invalid length. [ 103.674645][ T6360] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 103.977267][ T6369] openvswitch: netlink: Geneve opt len 95 is not a multiple of 4. [ 104.135574][ T6377] tipc: Enabling of bearer rejected, already enabled [ 104.571305][ T6386] netlink: 'syz.0.109': attribute type 30 has an invalid length. [ 104.608791][ T6386] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 104.614001][ T6389] bond0: option xmit_hash_policy: invalid value (71) [ 104.808175][ T6393] openvswitch: netlink: Flow key attr not present in new flow. [ 104.848422][ T6395] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 104.975838][ T6398] openvswitch: netlink: Geneve opt len 63 is not a multiple of 4. [ 105.284973][ T6414] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 105.879368][ T6430] tipc: Enabling of bearer rejected, already enabled [ 105.961193][ T6433] bond0: option xmit_hash_policy: invalid value (71) [ 106.086190][ T6428] netlink: 52 bytes leftover after parsing attributes in process `syz.0.121'. [ 106.160347][ T6438] netlink: 'syz.3.123': attribute type 30 has an invalid length. [ 106.482405][ T6451] netlink: 'syz.3.127': attribute type 30 has an invalid length. [ 106.715247][ T6455] vxcan1: entered allmulticast mode [ 106.729786][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.130'. [ 106.749892][ T6457] netlink: 24 bytes leftover after parsing attributes in process `syz.2.130'. [ 106.769062][ T6457] tc_dump_action: action bad kind [ 106.798408][ T6457] netlink: 'syz.2.130': attribute type 1 has an invalid length. [ 106.828818][ T6457] netlink: 224 bytes leftover after parsing attributes in process `syz.2.130'. [ 107.430805][ T6481] bond0: option xmit_hash_policy: invalid value (71) [ 107.515578][ T6486] netlink: 'syz.1.135': attribute type 1 has an invalid length. [ 107.523497][ T6486] netlink: 224 bytes leftover after parsing attributes in process `syz.1.135'. [ 107.669476][ T6484] netlink: 52 bytes leftover after parsing attributes in process `syz.4.136'. [ 107.963234][ T6505] netlink: 'syz.4.140': attribute type 30 has an invalid length. [ 108.065992][ T6502] ax25_connect(): syz.1.138 uses autobind, please contact jreuter@yaina.de [ 108.108847][ T6512] net_ratelimit: 6 callbacks suppressed [ 108.108867][ T6512] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 108.381150][ T6522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.144'. [ 108.431983][ T6522] netlink: 24 bytes leftover after parsing attributes in process `syz.1.144'. [ 108.504847][ T6522] tc_dump_action: action bad kind [ 108.525690][ T6532] netlink: 'syz.1.144': attribute type 1 has an invalid length. [ 108.533963][ T6532] netlink: 224 bytes leftover after parsing attributes in process `syz.1.144'. [ 108.552834][ T6533] openvswitch: netlink: Geneve opt len 111 is not a multiple of 4. [ 108.913096][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'. [ 108.923995][ T6545] openvswitch: netlink: Flow key attr not present in new flow. [ 109.057198][ T6549] tipc: Enabling of bearer rejected, already enabled [ 109.150364][ T6551] netlink: 52 bytes leftover after parsing attributes in process `syz.4.150'. [ 109.265680][ T6553] netlink: 'syz.4.151': attribute type 30 has an invalid length. [ 109.369037][ T6555] ax25_connect(): syz.1.152 uses autobind, please contact jreuter@yaina.de [ 109.571682][ T6562] netlink: 'syz.4.154': attribute type 30 has an invalid length. [ 109.689992][ T6570] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 110.024788][ T6582] bond0: option xmit_hash_policy: invalid value (71) [ 110.277508][ T6589] tipc: Enabling of bearer rejected, already enabled [ 110.344314][ T6592] netlink: 'syz.4.161': attribute type 1 has an invalid length. [ 110.353561][ T6592] netlink: 224 bytes leftover after parsing attributes in process `syz.4.161'. [ 110.439168][ T6595] netlink: 52 bytes leftover after parsing attributes in process `syz.2.162'. [ 110.534564][ T6601] netlink: 'syz.1.163': attribute type 30 has an invalid length. [ 110.887588][ T6612] ax25_connect(): syz.1.166 uses autobind, please contact jreuter@yaina.de [ 110.960510][ T6617] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 111.212374][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.168'. [ 111.290386][ T6623] vxcan1: entered allmulticast mode [ 111.308843][ T6627] openvswitch: netlink: Geneve opt len 95 is not a multiple of 4. [ 111.361242][ T6629] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 111.486516][ T6634] bond0: option xmit_hash_policy: invalid value (71) [ 111.754932][ T6647] netlink: 'syz.3.176': attribute type 30 has an invalid length. [ 111.814114][ T6640] netlink: 'syz.4.175': attribute type 1 has an invalid length. [ 112.189509][ T6659] tc_dump_action: action bad kind [ 112.237871][ T6659] netlink: 'syz.4.177': attribute type 1 has an invalid length. [ 112.392304][ T6679] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 112.395580][ T6676] tipc: Enabling of bearer rejected, already enabled [ 112.648249][ T6684] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 112.731918][ T6691] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 112.750947][ T6686] netlink: 'syz.4.182': attribute type 30 has an invalid length. [ 112.790507][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 112.798733][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 113.178741][ T6706] net_ratelimit: 1 callbacks suppressed [ 113.178790][ T6706] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 113.296270][ T6708] netlink: 'syz.1.189': attribute type 1 has an invalid length. [ 113.304359][ T6708] __nla_validate_parse: 4 callbacks suppressed [ 113.304376][ T6708] netlink: 224 bytes leftover after parsing attributes in process `syz.1.189'. [ 113.624911][ T6717] ax25_connect(): syz.2.191 uses autobind, please contact jreuter@yaina.de [ 114.199567][ T6748] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 114.229386][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.195'. [ 114.283556][ T6750] netlink: 'syz.4.198': attribute type 30 has an invalid length. [ 114.352459][ T6753] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 114.757157][ T6765] vxcan1: entered allmulticast mode [ 114.806229][ T6769] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 114.834093][ T6772] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 114.848655][ T6770] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 114.947954][ T6775] netlink: 'syz.0.203': attribute type 1 has an invalid length. [ 114.972199][ T6775] netlink: 224 bytes leftover after parsing attributes in process `syz.0.203'. [ 115.089551][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.204'. [ 115.264114][ T6787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.325918][ T6783] ax25_connect(): syz.2.205 uses autobind, please contact jreuter@yaina.de [ 115.485516][ T6800] bond0: option xmit_hash_policy: invalid value (71) [ 115.687945][ T6803] openvswitch: netlink: Geneve opt len 111 is not a multiple of 4. [ 115.703149][ T6807] netlink: 'syz.2.212': attribute type 30 has an invalid length. [ 115.738186][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.211'. [ 115.887775][ T6811] netlink: 52 bytes leftover after parsing attributes in process `syz.4.213'. [ 116.148944][ T6822] netlink: 'syz.0.217': attribute type 1 has an invalid length. [ 116.163287][ T6822] netlink: 224 bytes leftover after parsing attributes in process `syz.0.217'. [ 116.245171][ T6829] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 116.300319][ T6827] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 116.516407][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.221'. [ 116.526625][ T6838] netlink: 24 bytes leftover after parsing attributes in process `syz.4.221'. [ 116.536131][ T6838] tc_dump_action: action bad kind [ 116.562827][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.220'. [ 116.571431][ T6838] netlink: 'syz.4.221': attribute type 1 has an invalid length. [ 116.634791][ T6842] bond0: option xmit_hash_policy: invalid value (71) [ 116.779229][ T6844] ax25_connect(): syz.4.223 uses autobind, please contact jreuter@yaina.de [ 117.031068][ T6856] netlink: 'syz.2.226': attribute type 30 has an invalid length. [ 117.466152][ T6872] netlink: 'syz.2.229': attribute type 30 has an invalid length. [ 117.890160][ T6888] tc_dump_action: action bad kind [ 117.901398][ T6888] netlink: 'syz.4.234': attribute type 1 has an invalid length. [ 117.928616][ T6887] tipc: Enabling of bearer rejected, already enabled [ 118.234063][ T6897] net_ratelimit: 4 callbacks suppressed [ 118.234082][ T6897] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 118.470069][ T6905] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 118.484158][ T6905] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 118.511793][ T6901] af_packet: tpacket_rcv: packet too big, clamped from 3954 to 3710. macoff=82 [ 118.606195][ T6911] openvswitch: netlink: IP tunnel dst address not specified [ 118.834329][ T6923] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 118.883238][ T6914] __nla_validate_parse: 7 callbacks suppressed [ 118.883258][ T6914] netlink: 52 bytes leftover after parsing attributes in process `syz.4.242'. [ 118.917922][ T6899] smc: net device bond0 applied user defined pnetid SYZ2 [ 119.156436][ T6930] openvswitch: netlink: Geneve opt len 119 is not a multiple of 4. [ 119.341670][ T6935] tipc: Enabling of bearer rejected, already enabled [ 119.354652][ T6935] netlink: 16 bytes leftover after parsing attributes in process `syz.4.247'. [ 119.403620][ T6937] ax25_connect(): syz.3.248 uses autobind, please contact jreuter@yaina.de [ 119.783182][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.250'. [ 119.833959][ T6952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'. [ 120.007557][ T6956] netlink: 'syz.2.254': attribute type 30 has an invalid length. [ 120.016494][ T6956] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 120.285085][ T6964] netlink: 'syz.2.257': attribute type 1 has an invalid length. [ 120.293286][ T6964] netlink: 224 bytes leftover after parsing attributes in process `syz.2.257'. [ 120.654406][ T6978] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 120.845927][ T6983] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 121.027521][ T6986] tipc: Enabling of bearer rejected, already enabled [ 121.050798][ T6986] netlink: 16 bytes leftover after parsing attributes in process `syz.3.262'. [ 121.440337][ T7004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.266'. [ 121.504906][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.267'. [ 121.728829][ T7017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.777996][ T7021] bond0: option xmit_hash_policy: invalid value (71) [ 121.795134][ T7022] tipc: Enabling of bearer rejected, already enabled [ 121.803608][ T7022] netlink: 16 bytes leftover after parsing attributes in process `syz.3.268'. [ 121.876832][ T7017] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 121.980965][ T7027] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 122.188019][ T7033] ax25_connect(): syz.1.275 uses autobind, please contact jreuter@yaina.de [ 122.217525][ T7040] netlink: 'syz.3.276': attribute type 30 has an invalid length. [ 122.538206][ T7047] netlink: 'syz.4.278': attribute type 1 has an invalid length. [ 122.554007][ T7047] netlink: 224 bytes leftover after parsing attributes in process `syz.4.278'. [ 122.653395][ T7058] tipc: Enabling of bearer rejected, already enabled [ 123.191543][ T7078] bond0: option xmit_hash_policy: invalid value (71) [ 123.417643][ T7087] net_ratelimit: 4 callbacks suppressed [ 123.417664][ T7087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.600717][ T7096] netlink: 'syz.0.290': attribute type 30 has an invalid length. [ 123.619411][ T7097] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 123.635738][ T7096] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 123.908643][ T7104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.990512][ T7104] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 124.025882][ T7104] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.033455][ T7104] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.123318][ T7111] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 124.413684][ T7083] netlink: 'syz.2.286': attribute type 1 has an invalid length. [ 124.435873][ T7083] __nla_validate_parse: 3 callbacks suppressed [ 124.435910][ T7083] netlink: 228 bytes leftover after parsing attributes in process `syz.2.286'. [ 124.483256][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.296'. [ 124.825879][ T7126] bond0: option xmit_hash_policy: invalid value (71) [ 124.836365][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.297'. [ 125.055773][ T7134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.190660][ T7138] x_tables: unsorted underflow at hook 3 [ 125.301234][ T7142] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 125.316390][ T7141] netlink: 'syz.4.303': attribute type 30 has an invalid length. [ 125.345948][ T7141] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 125.389365][ T7147] openvswitch: netlink: Geneve opt len 123 is not a multiple of 4. [ 125.435377][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 125.446855][ T7149] netlink: 24 bytes leftover after parsing attributes in process `syz.0.305'. [ 125.463512][ T7149] tc_dump_action: action bad kind [ 125.492979][ T7149] netlink: 'syz.0.305': attribute type 1 has an invalid length. [ 125.504560][ T7149] netlink: 224 bytes leftover after parsing attributes in process `syz.0.305'. [ 125.714010][ T7160] netlink: 'syz.1.308': attribute type 30 has an invalid length. [ 125.725705][ T7160] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 125.795131][ T7156] ax25_connect(): syz.3.306 uses autobind, please contact jreuter@yaina.de [ 126.400814][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.313'. [ 126.447461][ T7185] tipc: Enabling of bearer rejected, already enabled [ 126.464026][ T7185] netlink: 16 bytes leftover after parsing attributes in process `syz.0.314'. [ 126.630289][ T7191] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 126.661674][ T7191] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.669206][ T7191] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.796449][ T7197] netlink: 'syz.0.318': attribute type 30 has an invalid length. [ 126.968803][ T7201] netlink: 'syz.4.320': attribute type 30 has an invalid length. [ 127.093912][ T7205] netlink: 'syz.1.322': attribute type 30 has an invalid length. [ 127.167549][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 127.180212][ T7204] ax25_connect(): syz.0.321 uses autobind, please contact jreuter@yaina.de [ 127.185808][ T7207] netlink: 24 bytes leftover after parsing attributes in process `syz.2.324'. [ 127.205073][ T7207] tc_dump_action: action bad kind [ 127.231753][ T7212] netlink: 'syz.2.324': attribute type 1 has an invalid length. [ 127.452844][ T7223] ------------[ cut here ]------------ [ 127.458690][ T7223] RTNL: assertion failed at net/core/dev.c (1769) [ 127.467429][ T7223] WARNING: CPU: 1 PID: 7223 at net/core/dev.c:1769 dev_setup_tc+0x315/0x360 [ 127.476808][ T7223] Modules linked in: [ 127.481230][ T7223] CPU: 1 UID: 0 PID: 7223 Comm: syz.1.326 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 127.491903][ T7223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 127.502166][ T7223] RIP: 0010:dev_setup_tc+0x315/0x360 [ 127.507510][ T7223] Code: cc 49 89 ee e8 dc da f7 f7 c6 05 c0 39 5d 06 01 90 48 c7 c7 a0 5e 2e 8d 48 c7 c6 80 5e 2e 8d ba e9 06 00 00 e8 3c 97 b7 f7 90 <0f> 0b 90 90 e9 66 fd ff ff 89 d1 80 e1 07 38 c1 0f 8c aa fd ff ff [ 127.527627][ T7223] RSP: 0018:ffffc9001a5a6ed0 EFLAGS: 00010246 [ 127.533825][ T7223] RAX: e733cac1520c8a00 RBX: 0000000000000000 RCX: 0000000000080000 [ 127.541932][ T7223] RDX: ffffc9000bf39000 RSI: 00000000000039a6 RDI: 00000000000039a7 [ 127.549994][ T7223] RBP: ffff888012aac008 R08: ffffffff81818e32 R09: fffffbfff1d3a67c [ 127.558016][ T7223] R10: dffffc0000000000 R11: fffffbfff1d3a67c R12: ffffc9001a5a7070 [ 127.566263][ T7223] R13: ffffffff8d4ab1e0 R14: ffff888012aac008 R15: ffff888012aac000 [ 127.574367][ T7223] FS: 00007fabdbe786c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 127.583842][ T7223] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.591189][ T7223] CR2: 0000400000000300 CR3: 000000007dfd2000 CR4: 00000000003526f0 [ 127.599222][ T7223] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 127.607394][ T7223] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 127.615460][ T7223] Call Trace: [ 127.618774][ T7223] [ 127.621887][ T7223] ? __warn+0x165/0x4d0 [ 127.626123][ T7223] ? dev_setup_tc+0x315/0x360 [ 127.631155][ T7223] ? report_bug+0x2b3/0x500 [ 127.635707][ T7223] ? dev_setup_tc+0x315/0x360 [ 127.640506][ T7223] ? handle_bug+0x60/0x90 [ 127.644903][ T7223] ? exc_invalid_op+0x1a/0x50 [ 127.649711][ T7223] ? asm_exc_invalid_op+0x1a/0x20 [ 127.654796][ T7223] ? __warn_printk+0x292/0x360 [ 127.659671][ T7223] ? dev_setup_tc+0x315/0x360 [ 127.664411][ T7223] nf_flow_table_offload_setup+0x2ff/0x710 [ 127.670727][ T7223] ? __pfx_ieee80211_netdev_setup_tc+0x10/0x10 [ 127.676951][ T7223] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 127.683817][ T7223] ? __pfx_lock_release+0x10/0x10 [ 127.688929][ T7223] ? nft_pernet+0x23/0x240 [ 127.693825][ T7223] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 127.700279][ T7223] nft_register_flowtable_net_hooks+0x24c/0x570 [ 127.706595][ T7223] nf_tables_newflowtable+0x19f4/0x23d0 [ 127.712402][ T7223] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 127.718370][ T7223] ? nfnl_pernet+0x23/0x240 [ 127.722993][ T7223] ? __pfx_lock_release+0x10/0x10 [ 127.728087][ T7223] ? __nla_parse+0x40/0x60 [ 127.732594][ T7223] nfnetlink_rcv+0x14e3/0x2ab0 [ 127.737452][ T7223] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 127.742789][ T7223] ? netlink_deliver_tap+0x2e/0x1b0 [ 127.748049][ T7223] ? skb_clone+0x240/0x390 [ 127.752635][ T7223] ? __pfx_lock_release+0x10/0x10 [ 127.757743][ T7223] ? netlink_deliver_tap+0x2e/0x1b0 [ 127.763053][ T7223] netlink_unicast+0x7f6/0x990 [ 127.767902][ T7223] ? __pfx_netlink_unicast+0x10/0x10 [ 127.773415][ T7223] ? __virt_addr_valid+0x45f/0x530 [ 127.778582][ T7223] ? __phys_addr_symbol+0x2f/0x70 [ 127.784095][ T7223] ? __check_object_size+0x47a/0x730 [ 127.789449][ T7223] netlink_sendmsg+0x8de/0xcb0 [ 127.794766][ T7223] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.800173][ T7223] ? aa_sock_msg_perm+0x91/0x160 [ 127.805180][ T7223] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.810559][ T7223] __sock_sendmsg+0x221/0x270 [ 127.815305][ T7223] ____sys_sendmsg+0x53a/0x860 [ 127.820198][ T7223] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.825533][ T7223] ? __fget_files+0x2a/0x410 [ 127.830434][ T7223] ? __fget_files+0x2a/0x410 [ 127.835142][ T7223] __sys_sendmsg+0x269/0x350 [ 127.839850][ T7223] ? __pfx___sys_sendmsg+0x10/0x10 [ 127.845054][ T7223] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 127.851480][ T7223] ? do_syscall_64+0x100/0x230 [ 127.856287][ T7223] ? do_syscall_64+0xb6/0x230 [ 127.861067][ T7223] do_syscall_64+0xf3/0x230 [ 127.865619][ T7223] ? clear_bhb_loop+0x35/0x90 [ 127.870436][ T7223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.876406][ T7223] RIP: 0033:0x7fabdaf8d169 [ 127.880936][ T7223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.901047][ T7223] RSP: 002b:00007fabdbe78038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.910273][ T7223] RAX: ffffffffffffffda RBX: 00007fabdb1a5fa0 RCX: 00007fabdaf8d169 [ 127.918304][ T7223] RDX: 0000000000000000 RSI: 0000400000000300 RDI: 0000000000000003 [ 127.926370][ T7223] RBP: 00007fabdb00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 127.934445][ T7223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.942538][ T7223] R13: 0000000000000000 R14: 00007fabdb1a5fa0 R15: 00007ffdda509e48 [ 127.950648][ T7223] [ 127.953756][ T7223] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 127.961181][ T7223] CPU: 1 UID: 0 PID: 7223 Comm: syz.1.326 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 127.971846][ T7223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 127.982038][ T7223] Call Trace: [ 127.985353][ T7223] [ 127.988356][ T7223] dump_stack_lvl+0x241/0x360 [ 127.993080][ T7223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.998332][ T7223] ? __pfx__printk+0x10/0x10 [ 128.002981][ T7223] ? vscnprintf+0x5d/0x90 [ 128.007373][ T7223] panic+0x349/0x880 [ 128.011328][ T7223] ? __warn+0x174/0x4d0 [ 128.015519][ T7223] ? __pfx_panic+0x10/0x10 [ 128.020004][ T7223] __warn+0x344/0x4d0 [ 128.024028][ T7223] ? dev_setup_tc+0x315/0x360 [ 128.028766][ T7223] report_bug+0x2b3/0x500 [ 128.033134][ T7223] ? dev_setup_tc+0x315/0x360 [ 128.037858][ T7223] handle_bug+0x60/0x90 [ 128.042049][ T7223] exc_invalid_op+0x1a/0x50 [ 128.046582][ T7223] asm_exc_invalid_op+0x1a/0x20 [ 128.051462][ T7223] RIP: 0010:dev_setup_tc+0x315/0x360 [ 128.056788][ T7223] Code: cc 49 89 ee e8 dc da f7 f7 c6 05 c0 39 5d 06 01 90 48 c7 c7 a0 5e 2e 8d 48 c7 c6 80 5e 2e 8d ba e9 06 00 00 e8 3c 97 b7 f7 90 <0f> 0b 90 90 e9 66 fd ff ff 89 d1 80 e1 07 38 c1 0f 8c aa fd ff ff [ 128.076426][ T7223] RSP: 0018:ffffc9001a5a6ed0 EFLAGS: 00010246 [ 128.082520][ T7223] RAX: e733cac1520c8a00 RBX: 0000000000000000 RCX: 0000000000080000 [ 128.090511][ T7223] RDX: ffffc9000bf39000 RSI: 00000000000039a6 RDI: 00000000000039a7 [ 128.098496][ T7223] RBP: ffff888012aac008 R08: ffffffff81818e32 R09: fffffbfff1d3a67c [ 128.106482][ T7223] R10: dffffc0000000000 R11: fffffbfff1d3a67c R12: ffffc9001a5a7070 [ 128.114470][ T7223] R13: ffffffff8d4ab1e0 R14: ffff888012aac008 R15: ffff888012aac000 [ 128.122462][ T7223] ? __warn_printk+0x292/0x360 [ 128.127257][ T7223] nf_flow_table_offload_setup+0x2ff/0x710 [ 128.133103][ T7223] ? __pfx_ieee80211_netdev_setup_tc+0x10/0x10 [ 128.139306][ T7223] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 128.145676][ T7223] ? __pfx_lock_release+0x10/0x10 [ 128.150741][ T7223] ? nft_pernet+0x23/0x240 [ 128.155173][ T7223] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 128.161522][ T7223] nft_register_flowtable_net_hooks+0x24c/0x570 [ 128.167803][ T7223] nf_tables_newflowtable+0x19f4/0x23d0 [ 128.173409][ T7223] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 128.179334][ T7223] ? nfnl_pernet+0x23/0x240 [ 128.183865][ T7223] ? __pfx_lock_release+0x10/0x10 [ 128.188956][ T7223] ? __nla_parse+0x40/0x60 [ 128.193398][ T7223] nfnetlink_rcv+0x14e3/0x2ab0 [ 128.198217][ T7223] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 128.203385][ T7223] ? netlink_deliver_tap+0x2e/0x1b0 [ 128.208600][ T7223] ? skb_clone+0x240/0x390 [ 128.213032][ T7223] ? __pfx_lock_release+0x10/0x10 [ 128.218086][ T7223] ? netlink_deliver_tap+0x2e/0x1b0 [ 128.223300][ T7223] netlink_unicast+0x7f6/0x990 [ 128.228083][ T7223] ? __pfx_netlink_unicast+0x10/0x10 [ 128.233381][ T7223] ? __virt_addr_valid+0x45f/0x530 [ 128.238508][ T7223] ? __phys_addr_symbol+0x2f/0x70 [ 128.243539][ T7223] ? __check_object_size+0x47a/0x730 [ 128.248852][ T7223] netlink_sendmsg+0x8de/0xcb0 [ 128.253658][ T7223] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.258961][ T7223] ? aa_sock_msg_perm+0x91/0x160 [ 128.263920][ T7223] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.269229][ T7223] __sock_sendmsg+0x221/0x270 [ 128.273924][ T7223] ____sys_sendmsg+0x53a/0x860 [ 128.278704][ T7223] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.284346][ T7223] ? __fget_files+0x2a/0x410 [ 128.288978][ T7223] ? __fget_files+0x2a/0x410 [ 128.293770][ T7223] __sys_sendmsg+0x269/0x350 [ 128.298392][ T7223] ? __pfx___sys_sendmsg+0x10/0x10 [ 128.303606][ T7223] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 128.309999][ T7223] ? do_syscall_64+0x100/0x230 [ 128.314821][ T7223] ? do_syscall_64+0xb6/0x230 [ 128.319721][ T7223] do_syscall_64+0xf3/0x230 [ 128.324278][ T7223] ? clear_bhb_loop+0x35/0x90 [ 128.328988][ T7223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.334913][ T7223] RIP: 0033:0x7fabdaf8d169 [ 128.339351][ T7223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.358981][ T7223] RSP: 002b:00007fabdbe78038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.367421][ T7223] RAX: ffffffffffffffda RBX: 00007fabdb1a5fa0 RCX: 00007fabdaf8d169 [ 128.375492][ T7223] RDX: 0000000000000000 RSI: 0000400000000300 RDI: 0000000000000003 [ 128.383472][ T7223] RBP: 00007fabdb00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 128.391464][ T7223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.399453][ T7223] R13: 0000000000000000 R14: 00007fabdb1a5fa0 R15: 00007ffdda509e48 [ 128.407455][ T7223] [ 128.410827][ T7223] Kernel Offset: disabled [ 128.415245][ T7223] Rebooting in 86400 seconds..