last executing test programs: 3.955071655s ago: executing program 3 (id=330): close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000100)={'wlan1\x00', @random="ef00"}) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f0000000400000004000000120000"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "1b8100", 0x18, 0x11, 0x0, @empty, @mcast2, {[], {0x4e25, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x5, 0x9}}}}}}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.238349624s ago: executing program 3 (id=337): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800110000000000000000000000ca6c9500000000000000ffdb360734076d08000d0ba8897489c522ba66c5439753d3e0c9b47bef3c2879fc55ce1649fcc6cff6b7eddc1ae3947efadabc0399ee4099902841e1c394783c541a69c0b2af1dcd8598b5c388992876d8e7858aed8e2f5308e47d9b93e38f092f022e25a098b85645ea1b65d5b5e38355cb7d53cb83ed9d6bc2756c81b8692e12b1b572660c0d83d23e57f5ffa19bad8b1feca88786116725e92d6d6e399a37a38899d361337c02c04a0dbda849dc41b918a60e7830677446f3280ea4f0e5"], &(0x7f00000008c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0xc, &(0x7f0000000900)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd1}, 0x90) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) sendfile(r2, r3, 0x0, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x0, 0x4, 0x10001, 0x178dd7f7d4b38b22, 0x0, 0x1, '\x00', 0x0, r2, 0x0, 0x0, 0x0, 0x0, @value=r1, @void, @value=r2}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x9, 0x9}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r6}, 0x50) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000980), 0x10) listen(r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f00000009c0)={0x28, 0x0, 0x0, @local}, 0x10) r9 = accept4$unix(r7, 0x0, 0x0, 0x0) recvmsg(r9, &(0x7f0000000a00)={0x0, 0x6cda83faea3171fc, &(0x7f0000000a40)=[{&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/93}, {&(0x7f0000001b00)=""/63}, {&(0x7f0000001b40)=""/151}], 0x44}, 0x4c2103a0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xd, &(0x7f00000003c0)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r10, 0x0, 0xe, 0x0, &(0x7f0000000600)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {0x6}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}, {}, {0x85, 0x0, 0x0, 0x5b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.0315853s ago: executing program 1 (id=339): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x8) (async, rerun: 32) r4 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xffff}, {0x0, 0x1}, {0x1, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 2.987260365s ago: executing program 3 (id=340): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x6, 0x1a, 0x0, 0x20000000) setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000000000)=0x3ff, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@private=0xa010100, 0x4e21, 0x839d, 0x4e20, 0xfff8, 0xa, 0xc0, 0x80, 0x22, r2, 0xee00}, {0x7, 0x4, 0x2, 0x7, 0x3, 0x7, 0x3, 0x177}, {0x5, 0xfffffffffffffffd, 0x2, 0x100}, 0x18000, 0x6e6bb8, 0x0, 0x1, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x1e, @in=@empty, 0x3506, 0x3, 0x3, 0x6, 0x2, 0x1, 0x6}}, 0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600"], 0x44}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@ipv4_newroute={0x42c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x408, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x404, 0x1, {{}, [@dev, @dev={0xfe, 0x80, '\x00', 0x24}, @private0, @ipv4={'\x00', '\xff\xff', @private}, @local, @mcast2, @empty, @mcast2, @local, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, @mcast1, @local, @remote, @ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0x24}, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @dev}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @private2, @mcast2, @mcast2, @private0, @private2, @mcast2, @dev, @dev={0xfe, 0x80, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @loopback, @local, @loopback, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @mcast1, @empty, @local, @private1, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @ipv4, @mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev]}}}]}, 0x42c}}, 0x0) 2.578868757s ago: executing program 3 (id=346): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/pid\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x8004b706, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xc, 0x8, 0x3}, 0x31) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'erspan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x405, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, 0x4508, 0x8008}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_ERSPAN_VER={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40010) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="700000001200230500"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000efff002100010007031c000a"], 0x70}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xfc, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x1, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_DST={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008800) 2.398915797s ago: executing program 1 (id=348): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYRESDEC=0x0], 0x48}}, 0x4084) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r1 = socket$rxrpc(0x21, 0x2, 0xa) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x68}}, 0x0) (async) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x10e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x8, 0xa0, 0x8, 0xfffffffffffffd9a, 0x0}}, 0x10) (async) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="60010000", @ANYRES16, @ANYBLOB="01000000000000000000140000000c00078008000200ff7f00000c00068004000200040005009000058007000100696200000700010069620000440002800800020007000000080004000400000008000400040000000800010017"], 0x160}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r6) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x1c, r7, 0x1, 0xf0bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, r7, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x9c}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040840}, 0x1) (async) bind$rxrpc(r1, &(0x7f00000000c0)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0xc, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xb}}, 0x24) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.259482914s ago: executing program 4 (id=351): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000680)={'tunl0\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x0, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x7, 0x0, 0x40, 0x4, 0x0, @local, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000740)={'gre0\x00', 0x0, 0x0, 0x0, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @loopback}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x4, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8001}, [@generic={0x91, 0x1, 0x1, 0x49}]}, &(0x7f0000000880)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xce, 0x0, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r3, 0x20, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f0000000440)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x64}, [@ldst={0x7}]}, &(0x7f0000000480)='GPL\x00', 0x2, 0xc3, &(0x7f00000004c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000640), 0x10}, 0x3c) setsockopt$sock_attach_bpf(r4, 0x1, 0x2f, &(0x7f0000000140), 0x3b) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x2, 0x1000, @empty}, 0x10, &(0x7f0000000280)=[{&(0x7f00000002c0)='\b\x00', 0x2}, {&(0x7f0000000300)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x0) listen(r1, 0x0) syz_80211_join_ibss(&(0x7f0000000600)='wlan0\x00', 0x0, 0x0, 0x2) 2.258807194s ago: executing program 3 (id=352): socket$kcm(0x10, 0x7, 0x4) (async) r0 = socket$kcm(0x10, 0x7, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000800)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r3, &(0x7f0000000800)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) (async) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0xbe, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000b0010000000911907800000000e000000101004e20009c90780100000003000000c91a5d1ad61de19a476276d0b0abd6dd1b2fb3a979b67bbe59b18460012faa4d959b2e978beb1fdd534cde27d3e259e5e52e01e826f56425b4f57f0b615885d6c8862525170fc83a6ad07d25bdbfb809b60814cf57d8256fb447039f4f8ebd2e07b88853da364c02ccbba1b3a282ed319ce9793b9f1df78ae130e84bd7bdcf770600fd9380f8f9a5d3e845b3"], 0x0) (async) syz_emit_ethernet(0xbe, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000b0010000000911907800000000e000000101004e20009c90780100000003000000c91a5d1ad61de19a476276d0b0abd6dd1b2fb3a979b67bbe59b18460012faa4d959b2e978beb1fdd534cde27d3e259e5e52e01e826f56425b4f57f0b615885d6c8862525170fc83a6ad07d25bdbfb809b60814cf57d8256fb447039f4f8ebd2e07b88853da364c02ccbba1b3a282ed319ce9793b9f1df78ae130e84bd7bdcf770600fd9380f8f9a5d3e845b3"], 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000700)=[{&(0x7f0000000740)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@acquire={0x16c, 0x17, 0x90d, 0x0, 0x0, {{@in=@broadcast}, @in=@dev, {@in6=@remote, @in6=@mcast2}, {{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x44, 0x10, [{{@in=@multicast2}}]}]}, 0x16c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 2.216393098s ago: executing program 1 (id=353): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x4801}) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wg2\x00', 0x1000}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000280)) ppoll(&(0x7f0000000240)=[{r0, 0xe200}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @broadcast}) 2.107513813s ago: executing program 0 (id=354): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xffff}, {0x0, 0x1}, {0x1, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200018d0}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = socket(0x10, 0x3, 0x0) (rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000240)={0x80000220}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r3], 0x30}}, 0x0) (async) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2.05516145s ago: executing program 3 (id=356): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000001c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000280), 0x20000328) getsockopt$inet_mreqn(r3, 0x0, 0x24, 0x0, &(0x7f00000002c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000b030000000000000000000002"], 0x0, 0x3e}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xe, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xe, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="61100c0000000000150003000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000050002000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000b7030000000000008500000033000000b7000000020000009500000000000000"], &(0x7f0000000940)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r6, 0x0, 0xe, 0x0, &(0x7f0000000a00)="00112233445566778899aabb0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x12, r7, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0)={0x42, 0x1}, 0x10) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x9, &(0x7f00000003c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x66, 0x8}, @alu={0x7, 0x1, 0x9, 0x6, 0x7, 0x2, 0xfffffffffffffffc}, @exit, @exit]}, &(0x7f0000000440)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x7}, 0x94) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r9, 0x8932, &(0x7f0000000280)={'dummy0\x00', @ifru_flags=0x1000}) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000140), 0x8) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x8, 0x3000000000002, 0x0, 0x44008804}, 0x0) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r1) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000680)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)={0x30, r10, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xdc}]}, 0x30}, 0x1, 0x0, 0x0, 0x40011}, 0x4000890) 1.946973476s ago: executing program 4 (id=358): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="300000001c00010000000000000000a007000000", @ANYRES32=r1, @ANYBLOB="400096040a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r3, 0x107, 0x14, 0x0, &(0x7f0000000700)) setsockopt$inet_int(r2, 0x0, 0x18, &(0x7f0000000040)=0xfc, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x5, &(0x7f00000000c0)=0x6, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="0d48008009000000852000000400000085100000fbffffff18010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffff00008500000006000000851000000400000018290000", @ANYRES32=0x1, @ANYBLOB="00000000db1b0000950006000200000040c02f30fcddf79aeaca39021ea9132355f59de14d817d7af8c3f5cb4a75d5db52bcd9fd72d1"], &(0x7f0000000180)='GPL\x00', 0x9e, 0xc4, &(0x7f0000000200)=""/196, 0x41000, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x100001}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xc, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000380)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x5, 0x1, 0x4, 0xc}, {0x2, 0x1, 0x5, 0x3}, {0x3, 0x1, 0x10, 0x1}, {0x0, 0x1, 0x2, 0xa}, {0x1, 0x4, 0x9, 0x7}], 0x10, 0x79800000}, 0x94) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0xb, 0x3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x3}, {}, {0x5, 0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x9, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x592, [{0x2, 0x1, 0x5, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000073116f00000000008510ffff02000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000900)='GPL\x00', 0x5, 0x29e, &(0x7f0000000940)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) connect$can_j1939(r5, &(0x7f0000000100)={0x1d, r7, 0x0, {0x1}, 0xfd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r4}, 0x94) 1.815835103s ago: executing program 0 (id=360): r0 = socket$kcm(0x10, 0x2, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=0xffffffffffffffff, 0x16, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="5400000013000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000034001a8006000000020000002800058024000180080001000100000008000200000000000800030000000001080004"], 0x54}}, 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000000c0)={@ipv4={""/10, ""/2, @remote}, 0x0}, &(0x7f0000000200)=0x14) bind(r0, &(0x7f0000000240)=@ll={0x11, 0x6, r6, 0x1, 0x3, 0x6, @broadcast}, 0x80) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000c40)={r8, &(0x7f0000000c80), &(0x7f0000000cc0)=@udp=r7}, 0x20) (async) recvmmsg(r7, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000d80)=""/157, 0x9d}], 0x1}}], 0x1, 0x0, 0x0) (async) ioctl$int_in(r7, 0x5452, &(0x7f0000000e40)=0x14f) (async) setsockopt$inet6_tcp_int(r7, 0x6, 0x19, &(0x7f0000000e80), 0x4) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000001900f3fe0000000000000000fe8000000000000000000000000000bbac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRESHEX=r2], 0xc4}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0001000d000000ba8000001201", 0x2e}], 0x1}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r9, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB="50010000010301010000000000000000030000000c000200ffffffff7fffffff30010b809c000e802c00018014000300fc01000000000000000000000000000114000400fe8000000000000000000000000000aa0c000280050001002f00000014000180080001007f000001080002000a01010006000340000200000c00028005000100010000002c00018014000300fc01000000000000000000000000000114000400fe8800000000000000000000000000010c000280050001001100000044000f8008000340000000000800024000000007080001400000000908000340fffffffb080001400000001708000140000008b208000240000000080800034000000000080016407fffffff2c000f802800014000000005080002400000000808000140000000090800014000000b12080002400000000508000840000000000800034000000004080017000000040008da4e4b85a7534cdffcca21198806fb7f7b8bf04178b3d57a6fa8ace2efff1fedf320299123fd67f910e382a1b159aeded85252df98628c14f767fc5c2e97fe5f936b6c7c746effe79ee8cda0a82d81d7a938a964283fc4626cc250d5088fb038b854a96c348d6389678b3bcca9dbbcce82714e90b7f2ecf72de9e8acde8356f9eb1ab96697ad178d8221175d34517849edbf802a4d64f392168c4fa417e727c6cd72ba3f188a0dc209da326714ddbb79f94a88a047b60f6c2893cded816de583890e80cd603cc8a102b4c69b30c560701ae2e3bef2ec6c5d35"], 0x150}, 0x1, 0x0, 0x0, 0x50004}, 0x80) readv(r9, &(0x7f0000000b40)=[{&(0x7f0000000300)=""/195, 0xc3}, {&(0x7f0000000400)=""/127, 0x7f}, {&(0x7f00000008c0)=""/199, 0xc7}, {&(0x7f00000009c0)=""/72, 0x48}, {&(0x7f0000000a40)=""/58, 0x3a}, {&(0x7f0000000a80)=""/16, 0x10}, {&(0x7f0000000ac0)=""/103, 0x67}], 0x7) 1.815628967s ago: executing program 2 (id=361): r0 = socket$inet(0x2, 0x6, 0x8d) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@kfunc={0x85, 0x0, 0x2, 0x41, 0x8000}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'macvlan1\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) 1.725791215s ago: executing program 4 (id=362): r0 = socket(0x10, 0x3, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x300}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x4, 0x0, 0x0) bind$rxrpc(r1, &(0x7f00000001c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r1, 0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000300)=0x80) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000340)={0x8001, 0x0, 0x0, 0x0, 0x8}) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x40000) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x4004) listen(r1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="300034471a00010000000000000000001c0000000014", @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x40008d1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850000009e0000007b00020000000000bf0100000000000085000000c200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.594992037s ago: executing program 4 (id=363): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0xa, 0x1, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000400)={0x58, r2, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0x1a, 0x34, @random="18bc4c35bab7592c87a253cd7cc4264ebf277b9c0e08"}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000090}, 0x20000050) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x0, {0x3, 0xff, 0x2}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="85000000050000006d000000000000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x0, 0x10, &(0x7f0000000600), 0x64}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r6, 0xc0189436, &(0x7f0000000280)={'wlan1\x00', @random='\x00\x00\\ \x00'}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)="3874517c2edc", 0xfdef}, {0x0}], 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x0, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 1.589974218s ago: executing program 0 (id=364): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x3, 0x0, @mcast2}, 0x1c) pipe(&(0x7f00000002c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@dev}, 0x14) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000240)={@remote}, 0x14) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) recvmmsg(r4, &(0x7f0000004000)=[{{&(0x7f0000000380)=@ieee802154, 0x80, &(0x7f0000002540)=[{&(0x7f0000000400)=""/21, 0x15}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/51, 0x33}, {&(0x7f0000002340)=""/165, 0xa5}, {&(0x7f0000002400)=""/61, 0x3d}, {&(0x7f0000002440)=""/194, 0xc2}], 0x6, &(0x7f00000025c0)=""/188, 0xbc}, 0x800}, {{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000002680)=""/175, 0xaf}, {&(0x7f0000002740)=""/227, 0xe3}, {&(0x7f0000002840)}], 0x3}, 0x8}, {{&(0x7f00000028c0)=@xdp, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002940)=""/216, 0xd8}], 0x1, &(0x7f0000002a80)=""/15, 0xf}, 0x40}, {{&(0x7f0000002ac0)=@can, 0x80, &(0x7f0000003f00)=[{&(0x7f0000002b40)=""/164, 0xa4}, {&(0x7f0000002c00)=""/125, 0x7d}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/69, 0x45}, {&(0x7f0000003d00)=""/159, 0x9f}, {&(0x7f0000003dc0)=""/36, 0x24}, {&(0x7f0000003e00)=""/219, 0xdb}], 0x7, &(0x7f0000003f80)=""/71, 0x47}, 0x8}], 0x4, 0x100, &(0x7f0000004100)={0x0, 0x3938700}) 1.499789355s ago: executing program 2 (id=365): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000070d794363f4eb0cdd435b9000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b60901000000002066000000646c6c2518010000646c6c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003f93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x58, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, @in6={0xa, 0x4e21, 0x2, @remote, 0xf}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e23, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r1, 0x3, 0x5b6, 0x80, 0x2, 0x7ff}, 0x14) 1.383689526s ago: executing program 2 (id=366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}}, @NFT_MSG_DELCHAIN={0x28, 0x5, 0xa, 0x201, 0x0, 0x0, {0x6, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.3630996s ago: executing program 2 (id=367): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000003c0)=0x8001, 0x4) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x10000816) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x24040080) (async) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x70, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0xbb2c, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x4}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x70}}, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000500)='2', 0x1}], 0x1}}], 0x1, 0x8000) 1.140139379s ago: executing program 1 (id=368): recvmmsg(0xffffffffffffffff, &(0x7f0000005080)=[{{&(0x7f0000000140)=@in, 0x80, &(0x7f0000002740)=[{&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/194, 0xc2}, {&(0x7f0000002400)=""/32, 0x20}, {&(0x7f0000002440)=""/111, 0x6f}, {&(0x7f00000024c0)=""/112, 0x70}, {&(0x7f0000002540)=""/233, 0xe9}, {&(0x7f0000002640)=""/193, 0xc1}], 0x8, &(0x7f00000027c0)=""/131, 0x83}, 0x3}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002880)=""/46, 0x2e}], 0x1, &(0x7f0000002900)=""/208, 0xd0}, 0x2}, {{&(0x7f0000002a00)=@qipcrtr, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002a80)=""/109, 0x6d}, {&(0x7f0000002b00)=""/225, 0xe1}, {&(0x7f0000002c00)=""/43, 0x2b}, {&(0x7f0000002c40)=""/234, 0xea}], 0x4, &(0x7f0000002d80)=""/88, 0x58}, 0x200}, {{&(0x7f0000002e00)=@caif=@util, 0x80, &(0x7f0000003100)=[{&(0x7f0000002e80)=""/36, 0x24}, {&(0x7f0000002ec0)=""/136, 0x88}, {&(0x7f0000002f80)=""/65, 0x41}, {&(0x7f0000003000)=""/202, 0xca}], 0x4, &(0x7f0000003140)=""/177, 0xb1}, 0x2}, {{&(0x7f0000003200)=@pppol2tpv3, 0x80, &(0x7f0000003380)=[{&(0x7f0000003280)=""/208, 0xd0}], 0x1, &(0x7f00000033c0)=""/148, 0x94}, 0x80}, {{&(0x7f0000003480)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003500)=""/215, 0xd7}, {&(0x7f0000003600)=""/233, 0xe9}, {&(0x7f0000003700)=""/99, 0x63}, {&(0x7f0000003780)=""/230, 0xe6}, {&(0x7f0000003880)=""/253, 0xfd}, {&(0x7f0000003980)=""/41, 0x29}], 0x6, &(0x7f0000003a40)=""/96, 0x60}, 0x3}, {{&(0x7f0000003ac0)=@hci, 0x80, &(0x7f0000004f00)=[{&(0x7f0000003b40)=""/4096, 0x1000}, {&(0x7f0000004b40)=""/28, 0x1c}, {&(0x7f0000004b80)=""/123, 0x7b}, {&(0x7f0000004c00)=""/175, 0xaf}, {&(0x7f0000004cc0)=""/181, 0xb5}, {&(0x7f0000004d80)=""/201, 0xc9}, {0xfffffffffffffffd}, {&(0x7f0000004e80)=""/3, 0x3}, {&(0x7f0000004ec0)=""/36, 0x24}], 0x9, &(0x7f0000004fc0)=""/167, 0xa7}, 0x1}], 0x7, 0x2, &(0x7f0000005240)={0x0, 0x989680}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x108) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x100}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7}}]}, 0x90}}, 0x0) 942.969481ms ago: executing program 1 (id=369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000a00)={'syzkaller0\x00', 0x5005}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="1300"/28], 0x48) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="00000075b70c0000193a00d273112fd0", @ANYRES16=r0, @ANYBLOB="01002abd7000fedbdf250100000003000a0000000000050007000c0000000c0009000202aaaaaaaaaaaa0500110003000000"], 0x38}, 0x1, 0x0, 0x0, 0x45}, 0xc400) (async, rerun: 64) r5 = socket$inet(0x2, 0x3, 0x6) (rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r2, &(0x7f0000000580), &(0x7f00000005c0)=@udp=r5}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'pimreg1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xb}}]}, 0x38}}, 0x0) (async, rerun: 64) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r8, 0x0, 0x37, 0x0, &(0x7f0000000840)="f6f6e9a1d78ad62ceef1894386dd78bb3fb7dbfcc7199cc190885422e4d22c8c4c8622ed05991376a096ee089adbde87b8a86001e649d5", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000880)="0102", 0x0}, 0x50) (async) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', 0x1}) (async, rerun: 64) r10 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xffff}, {0x300, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x2}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) write$tun(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="12030800030016000c0045f50028006500000411"], 0x32) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0xc800) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r13, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c0900001e00940008001508000000000000007f00f235a8764561760600190000000100"], 0x64}}, 0x0) (async, rerun: 64) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x2, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000301019e"], 0x38}}, 0x0) 516.565811ms ago: executing program 0 (id=370): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60000004001806fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c200ec4e"], 0x0) 443.865759ms ago: executing program 2 (id=371): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1808000004000000fcffffff000000009500000000000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000400), 0x10, 0x749}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f00000004c0)) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10009, 0x8a0}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}]}, 0x34}}, 0x4084) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xffffffffffffff35, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x0, 0x2}}]}}]}, 0x44}}, 0x0) 322.252611ms ago: executing program 0 (id=372): socket$inet6(0xa, 0x3, 0x8000000003c) (async) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r1, 0x0, 0x8840) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000280)={0x1, 0x1}, &(0x7f00000002c0)=0x8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r2, @ANYRES16=0x0, @ANYRESHEX=0x0, @ANYBLOB="ad9eeee60531e4e707ba79e0f923c485", @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r2, @ANYRES16=0x0, @ANYRESHEX=0x0, @ANYBLOB="ad9eeee60531e4e707ba79e0f923c485", @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000380)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000400)="c59a9693", 0x4}], 0x1}}, {{&(0x7f0000000440)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000480)=[{&(0x7f00000004c0)="93", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000500)=@assoc_value, &(0x7f0000000540)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000500)=@assoc_value={0x0}, &(0x7f0000000540)=0x8) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$l2tp6(0xa, 0x2, 0x73) connect$pppl2tp(r6, &(0x7f0000000840)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0xffff, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x32) (async) connect$pppl2tp(r6, &(0x7f0000000840)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0xffff, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x32) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000580)={r5, 0x2}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000580)={r5, 0x2}, 0x8) shutdown(r4, 0x1) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x190, r2, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x67}, @void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "29c620623857f89a12d69bd68bc7ae5de37b0023c00e5367"}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4b8251e70f8c261b101e799560981a27eb395afce622fc8f"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "affe3e9a47e02f53aee02691db7fdfcde14c167ebefa13ea"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec1fb881d4f9bb6ec60ee0d0b48ba1338e7601554f103125"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_virt_wifi\x00'}]}, 0x190}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x953a, &(0x7f0000000080)=[{&(0x7f00000000c0)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 284.8481ms ago: executing program 4 (id=373): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0), 0x200002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x15, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bind$can_j1939(r1, &(0x7f0000000300)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000340)=0x1, 0x4) sendmmsg(r1, &(0x7f0000000380)=[{{0x0, 0xfffffffffffffd0f, &(0x7f00000003c0)=[{&(0x7f0000000400)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r5, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r6, 0x0, 0xd1, &(0x7f0000000040)=0x8, 0x4) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000440)=[{0x1, 0x3, {0x0, 0x62da12a15307ded4}, {0x1, 0x1, 0x2}, 0x1, 0x2}, {0x1, 0x3, {0x0, 0xf0, 0x4}, {0x1, 0x1, 0x4}, 0xfd, 0xff}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xe}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) 275.478571ms ago: executing program 1 (id=374): r0 = socket(0x10, 0x803, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r2 = socket$inet6(0xa, 0x2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="505f807e70000000000066003d000800", @ANYRES32=r5, @ANYBLOB='\b\x00&\x00l\t\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0xe, &(0x7f0000000040)=0xc, 0x4) (async) recvfrom$inet6(r2, &(0x7f0000000080)=""/63, 0x3f, 0x2002, &(0x7f00000000c0)={0xa, 0x4e21, 0xe, @local, 0x800}, 0x1c) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) (async) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000500)={{0xa, 0x4e23, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, {0xa, 0x4e21, 0xa, @private2, 0xfffffff7}, 0xffffffffffffffff, {[0x8000, 0x5, 0x7ff, 0x1ff, 0x5, 0x6, 0x2083, 0x800]}}, 0x5c) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x8, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4080000000000007311a2000000000085100000160000009500001200000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000000740)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000007c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r8, &(0x7f0000000800)={0x2, 0x0, @multicast1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket(0x1, 0x803, 0x0) (async) r10 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r10, 0x0, 0x4, &(0x7f0000000580)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000840)='vcan0\x00', 0x10) (async) connect$inet(r10, &(0x7f0000000880)={0x2, 0x4e23, @multicast1}, 0x10) (async) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 54.789729ms ago: executing program 2 (id=375): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newtfilter={0x2c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff2, 0xffff}, {0x300}}, [@TCA_CHAIN={0x8, 0xb, 0xffffff7f}]}, 0x2c}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) bind$packet(r8, &(0x7f00000004c0)={0x11, 0x300, r6, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r8, &(0x7f0000000500)="0802110000010802110000000800", 0xe) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) (async) socket$unix(0x1, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller1\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newtfilter={0x2c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff2, 0xffff}, {0x300}}, [@TCA_CHAIN={0x8, 0xb, 0xffffff7f}]}, 0x2c}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) socket$inet(0x2, 0x2, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) bind$packet(r8, &(0x7f00000004c0)={0x11, 0x300, r6, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) (async) write(r8, &(0x7f0000000500)="0802110000010802110000000800", 0xe) (async) 16.358229ms ago: executing program 4 (id=376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r4], 0x448}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000740)={&(0x7f0000000880)=@in6={0xa, 0x4e23, 0x200b, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefcb) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) openat$nci(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000009c0), 0x1a9380, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000a00)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000a40)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x80000001}, 0x0, 0x0) close(0x4) sendmmsg$inet(r4, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000340)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000380), 0x2}}], 0x40000000000003a, 0x0) socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000006c0)={'bond_slave_1\x00'}) 0s ago: executing program 0 (id=377): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@local, @in=@rand_addr=0x64010102, 0x4e20, 0x0, 0x4e22, 0x10c, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xee01}, {0x2e6, 0x0, 0x1ff, 0x0, 0x8000000000, 0x800, 0x0, 0x800000000}, {0x1, 0x0, 0x0, 0x1ffffffffe}, 0x20, 0x800000, 0x0, 0x1, 0x0, 0x1}, {{@in=@private=0xa010102, 0x0, 0x33}, 0x0, @in=@broadcast, 0x4, 0x3, 0x0, 0x0, 0xfffffc01, 0x5001, 0x6}}, 0xe8) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974"], 0xdc}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r6, &(0x7f0000000100), 0x0, 0x4, &(0x7f0000000240)={0x2, 0x4e20, @empty}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0xc881}, 0x8080) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRES32=r4, @ANYBLOB="004100000000000014002b8008000100", @ANYRESOCT=r3], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x404c014) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.77' (ED25519) to the list of known hosts. [ 79.293168][ T5604] cgroup: Unknown subsys name 'net' [ 79.427968][ T5604] cgroup: Unknown subsys name 'cpuset' [ 79.431827][ T5604] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.106986][ T5604] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.471386][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.481164][ T4935] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.481923][ T4935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.485999][ T4935] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.490706][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.506764][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.515907][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.516913][ T4935] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.539791][ T4935] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.540454][ T4935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.573675][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.582347][ T4935] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.583102][ T4935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.587474][ T4935] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.593599][ T4935] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.599743][ T4935] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.604613][ T4935] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.614627][ T4935] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.616757][ T4935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.620997][ T4935] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.632564][ T4935] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.662979][ T5617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.671296][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.675845][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.677586][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.678815][ T5620] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.680418][ T5622] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 84.681469][ T5616] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 84.691603][ T5620] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.718833][ T5618] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 84.719191][ T5620] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.857478][ T5615] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 85.103832][ T5620] infiniband rxe0: set active [ 85.105755][ T5620] infiniband rxe0: added rxe_eth0 [ 85.133706][ T5620] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 85.133750][ T5620] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 85.133805][ T5620] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 85.197869][ T25] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.236838][ T5620] RDS/IB: rxe0: added [ 85.237125][ T5620] smc: adding ib device rxe0 with port count 1 [ 85.237188][ T5620] smc: ib device rxe0 port 1 has no pnetid [ 85.278445][ T190] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.279392][ T5620] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.565266][ T52] Bluetooth: hci0: command tx timeout [ 85.582575][ T5620] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.654020][ T52] Bluetooth: hci1: command tx timeout [ 85.724095][ T5625] Bluetooth: hci2: command tx timeout [ 85.724243][ T5625] Bluetooth: hci3: command tx timeout [ 85.724424][ T52] Bluetooth: hci4: command tx timeout [ 86.070650][ T5620] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.267577][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.269583][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.269768][ T5618] bridge_slave_0: entered allmulticast mode [ 86.271943][ T5618] bridge_slave_0: entered promiscuous mode [ 86.328978][ T5620] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.330223][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.330480][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.330630][ T5616] bridge_slave_0: entered allmulticast mode [ 86.332796][ T5616] bridge_slave_0: entered promiscuous mode [ 86.369637][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.369749][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.369880][ T5618] bridge_slave_1: entered allmulticast mode [ 86.372844][ T5618] bridge_slave_1: entered promiscuous mode [ 86.436593][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.436713][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.437118][ T5616] bridge_slave_1: entered allmulticast mode [ 86.439653][ T5616] bridge_slave_1: entered promiscuous mode [ 86.477146][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.477293][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.477396][ T5622] bridge_slave_0: entered allmulticast mode [ 86.480684][ T5622] bridge_slave_0: entered promiscuous mode [ 86.567619][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.567885][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.567993][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.568393][ T5622] bridge_slave_1: entered allmulticast mode [ 86.571922][ T5622] bridge_slave_1: entered promiscuous mode [ 86.608950][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.609063][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.609226][ T5615] bridge_slave_0: entered allmulticast mode [ 86.622444][ T5615] bridge_slave_0: entered promiscuous mode [ 86.656438][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.698190][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.698376][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.698523][ T5615] bridge_slave_1: entered allmulticast mode [ 86.702003][ T5615] bridge_slave_1: entered promiscuous mode [ 86.732057][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.762008][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.813514][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.840106][ T5618] team0: Port device team_slave_0 added [ 86.850258][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.872635][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.883691][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.926607][ T5618] team0: Port device team_slave_1 added [ 86.980674][ T5620] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.049252][ T5616] team0: Port device team_slave_0 added [ 87.098853][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.098873][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.098899][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.103633][ T5622] team0: Port device team_slave_0 added [ 87.130026][ T5616] team0: Port device team_slave_1 added [ 87.147832][ T5615] team0: Port device team_slave_0 added [ 87.155356][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.155398][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.155463][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.196878][ T5622] team0: Port device team_slave_1 added [ 87.281331][ T5615] team0: Port device team_slave_1 added [ 87.365068][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.365086][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.365112][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.367493][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.367510][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.367535][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.370149][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.370160][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.370178][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.373343][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.373358][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.373383][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.543357][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.543394][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.543467][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.594378][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.594392][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.594411][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.649280][ T5617] Bluetooth: hci0: command tx timeout [ 87.689084][ T5618] hsr_slave_0: entered promiscuous mode [ 87.690144][ T5618] hsr_slave_1: entered promiscuous mode [ 87.723989][ T5617] Bluetooth: hci1: command tx timeout [ 87.803325][ T5616] hsr_slave_0: entered promiscuous mode [ 87.805089][ T5617] Bluetooth: hci4: command tx timeout [ 87.805192][ T5617] Bluetooth: hci3: command tx timeout [ 87.805250][ T5617] Bluetooth: hci2: command tx timeout [ 87.815084][ T5616] hsr_slave_1: entered promiscuous mode [ 87.817331][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 87.817568][ T5616] Cannot create hsr debugfs directory [ 87.868029][ T5622] hsr_slave_0: entered promiscuous mode [ 87.868840][ T5622] hsr_slave_1: entered promiscuous mode [ 87.869427][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 87.869447][ T5622] Cannot create hsr debugfs directory [ 87.929646][ T5615] hsr_slave_0: entered promiscuous mode [ 87.930458][ T5615] hsr_slave_1: entered promiscuous mode [ 87.931017][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 87.931037][ T5615] Cannot create hsr debugfs directory [ 88.539119][ T5618] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.550607][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.567336][ T5618] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.570649][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.571723][ T5618] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.587999][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.622903][ T5618] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.633115][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.662364][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.662441][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.662546][ T5620] bridge_slave_0: entered allmulticast mode [ 88.670431][ T5620] bridge_slave_0: entered promiscuous mode [ 88.711449][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.711611][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.711721][ T5620] bridge_slave_1: entered allmulticast mode [ 88.713128][ T5620] bridge_slave_1: entered promiscuous mode [ 88.778983][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.781901][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.848277][ T5620] team0: Port device team_slave_0 added [ 88.852435][ T5620] team0: Port device team_slave_1 added [ 88.852973][ T5615] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.870775][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.877945][ T5615] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.893173][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.923631][ T5615] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.934583][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.957816][ T5615] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.962630][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.963869][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.964045][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.966384][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.025604][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.025623][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.025652][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.145088][ T5622] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.150093][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.152191][ T5622] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.177108][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.183455][ T5620] hsr_slave_0: entered promiscuous mode [ 89.187056][ T5620] hsr_slave_1: entered promiscuous mode [ 89.189263][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 89.189325][ T5620] Cannot create hsr debugfs directory [ 89.221606][ T5622] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.229849][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.254183][ T5622] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.258090][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.380836][ T5616] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.392515][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.411705][ T5616] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.420591][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.445684][ T5616] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.449192][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.480709][ T5616] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.483683][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.555194][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.660213][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.706430][ T1259] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.706539][ T1259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.737501][ T52] Bluetooth: hci0: command tx timeout [ 89.756012][ T5620] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.759148][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.759934][ T5620] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.763007][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.777664][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.777950][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.806238][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.815002][ T52] Bluetooth: hci1: command tx timeout [ 89.827700][ T5620] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.830880][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.831815][ T5620] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.856932][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.884562][ T5617] Bluetooth: hci3: command tx timeout [ 89.884598][ T5617] Bluetooth: hci4: command tx timeout [ 89.884725][ T52] Bluetooth: hci2: command tx timeout [ 89.945719][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.990426][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.990502][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.024241][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.024348][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.069440][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.168506][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.191434][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.224776][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.224989][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.261730][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.281742][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.281858][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.301952][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.302064][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.361746][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.361860][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.448046][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.566873][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.619072][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.619210][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.659223][ T3343] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.659358][ T3343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.453727][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.614312][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.689892][ T5618] veth0_vlan: entered promiscuous mode [ 91.736278][ T5618] veth1_vlan: entered promiscuous mode [ 91.807624][ T52] Bluetooth: hci0: command tx timeout [ 91.871241][ T5615] veth0_vlan: entered promiscuous mode [ 91.885318][ T52] Bluetooth: hci1: command tx timeout [ 91.893235][ T944] cfg80211: failed to load regulatory.db [ 91.926407][ T5618] veth0_macvtap: entered promiscuous mode [ 91.953654][ T5615] veth1_vlan: entered promiscuous mode [ 91.964736][ T5625] Bluetooth: hci4: command tx timeout [ 91.964772][ T5625] Bluetooth: hci3: command tx timeout [ 91.964830][ T52] Bluetooth: hci2: command tx timeout [ 91.985097][ T5618] veth1_macvtap: entered promiscuous mode [ 92.059316][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.101499][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.139363][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.160418][ T5615] veth0_macvtap: entered promiscuous mode [ 92.190248][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.209899][ T5615] veth1_macvtap: entered promiscuous mode [ 92.258393][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.350132][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.387059][ T5622] veth0_vlan: entered promiscuous mode [ 92.422701][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.471972][ T5622] veth1_vlan: entered promiscuous mode [ 92.558528][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.558551][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.677474][ T5620] veth0_vlan: entered promiscuous mode [ 92.712495][ T3343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.712517][ T3343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.735475][ T3343] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.735900][ T3343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.735917][ T3343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.737137][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.737556][ T5622] veth0_macvtap: entered promiscuous mode [ 92.743245][ T5622] veth1_macvtap: entered promiscuous mode [ 92.830163][ T5620] veth1_vlan: entered promiscuous mode [ 92.882810][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.884010][ T5618] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.911424][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.911497][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.911512][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.911720][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.911947][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.911989][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.912028][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.912067][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.013078][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.057475][ T5616] veth0_vlan: entered promiscuous mode [ 93.100447][ T5616] veth1_vlan: entered promiscuous mode [ 93.125618][ T5620] veth0_macvtap: entered promiscuous mode [ 93.157875][ T5814] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 93.179732][ T5620] veth1_macvtap: entered promiscuous mode [ 93.192803][ T5815] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 93.264924][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.265893][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.265935][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.265975][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.337397][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.392286][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.449025][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.449049][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.480434][ T5616] veth0_macvtap: entered promiscuous mode [ 93.528774][ T5616] veth1_macvtap: entered promiscuous mode [ 93.596098][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.630286][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.630308][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.711069][ T5822] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7'. [ 93.726895][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.768237][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.812807][ T5827] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7'. [ 93.816337][ T3343] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.832373][ T1259] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.832560][ T1259] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.894834][ T1259] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.931173][ T5833] Bluetooth: MGMT ver 1.23 [ 93.940469][ T79] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.940744][ T79] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.943069][ T5833] Bluetooth: hci0: unsupported parameter 5135 [ 93.943088][ T5833] Bluetooth: hci0: unsupported parameter 8192 [ 93.943104][ T5833] Bluetooth: hci0: unsupported parameter 5135 [ 93.943116][ T5833] Bluetooth: hci0: unsupported parameter 8192 [ 94.054914][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.110581][ T5626] block nbd64: NBD_DISCONNECT [ 94.132044][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.334718][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.334740][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.518733][ T3343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.518755][ T3343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.677502][ T5626] udevd[5626]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 94.709741][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.709764][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.750637][ T5856] vcan0: tx address claim with different name [ 94.807422][ T5856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10'. [ 94.839583][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.839603][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.962589][ T5862] netlink: 'syz.0.11': attribute type 1 has an invalid length. [ 94.968745][ T5863] netlink: 'syz.0.11': attribute type 1 has an invalid length. [ 95.261356][ T5879] syz.1.13 uses obsolete (PF_INET,SOCK_PACKET) [ 95.603850][ T5900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 95.609744][ T5900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 95.711217][ T5900] Zero length message leads to an empty skb [ 95.856506][ T5913] xt_nat: multiple ranges no longer supported [ 95.964219][ T5920] netlink: 32 bytes leftover after parsing attributes in process `syz.4.18'. [ 96.082329][ T5924] netlink: 80 bytes leftover after parsing attributes in process `syz.0.21'. [ 96.233092][ T5933] warning: `syz.4.24' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.271976][ T5793] rxe_eth0 speed is unknown, defaulting to 1000 [ 96.809289][ T5952] hsr0: entered allmulticast mode [ 96.809313][ T5952] hsr_slave_0: entered allmulticast mode [ 96.809336][ T5952] hsr_slave_1: entered allmulticast mode [ 97.584612][ T5977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.34'. [ 97.735285][ T5990] ip_tables: iptables: counters copy to user failed while replacing table [ 97.761266][ T5990] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 97.968816][ T5999] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 98.065512][ T6000] dvmrp0: entered allmulticast mode [ 98.152494][ T6007] netlink: 'syz.2.43': attribute type 20 has an invalid length. [ 98.152536][ T6007] IPv6: NLM_F_CREATE should be specified when creating new route [ 98.172369][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.44'. [ 98.203011][ T6013] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 98.322693][ T6017] netlink: 36 bytes leftover after parsing attributes in process `syz.0.46'. [ 98.334997][ T6017] xt_bpf: check failed: parse error [ 98.464294][ T6023] netlink: 'syz.4.49': attribute type 3 has an invalid length. [ 98.464319][ T6023] netlink: 3 bytes leftover after parsing attributes in process `syz.4.49'. [ 98.566556][ T6025] netlink: 'syz.2.50': attribute type 3 has an invalid length. [ 99.093268][ T6057] netlink: 'syz.2.56': attribute type 4 has an invalid length. [ 99.283808][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.60'. [ 99.283835][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.60'. [ 99.400854][ T6070] netlink: 84 bytes leftover after parsing attributes in process `syz.2.59'. [ 99.636097][ T6080] netlink: 48 bytes leftover after parsing attributes in process `syz.2.63'. [ 99.663559][ T13] IPVS: starting estimator thread 0... [ 99.740194][ T6090] netlink: 14 bytes leftover after parsing attributes in process `syz.1.62'. [ 99.765395][ T6084] IPVS: using max 27 ests per chain, 64800 per kthread [ 99.818744][ T6090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.841946][ T6091] netlink: 'syz.4.65': attribute type 83 has an invalid length. [ 99.859286][ T6090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.879244][ T6090] bond0 (unregistering): Released all slaves [ 99.933535][ T6099] pim6reg: entered allmulticast mode [ 100.021658][ T6098] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 100.178108][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.69'. [ 100.199381][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.69'. [ 100.325735][ T6118] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 100.442595][ T6116] bond0: option mode: invalid value (10) [ 100.491762][ T6116] bond0 (unregistering): Released all slaves [ 100.718542][ T6150] netlink: 'syz.2.76': attribute type 32 has an invalid length. [ 101.267989][ T6168] openvswitch: netlink: Message has 8 unknown bytes. [ 101.881073][ T6206] netlink: 'syz.3.91': attribute type 29 has an invalid length. [ 101.883006][ T6206] netlink: 'syz.3.91': attribute type 29 has an invalid length. [ 101.935806][ T6211] netlink: 'syz.1.92': attribute type 5 has an invalid length. [ 102.152455][ T6220] syzkaller0: entered promiscuous mode [ 102.152480][ T6220] syzkaller0: entered allmulticast mode [ 102.536326][ T6232] netlink: 'syz.4.99': attribute type 10 has an invalid length. [ 104.482976][ T6181] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 104.651591][ T6241] netlink: 'syz.2.101': attribute type 21 has an invalid length. [ 104.651723][ T6241] __nla_validate_parse: 8 callbacks suppressed [ 104.651737][ T6241] netlink: 132 bytes leftover after parsing attributes in process `syz.2.101'. [ 104.651953][ T6241] netlink: 'syz.2.101': attribute type 21 has an invalid length. [ 104.652001][ T6241] netlink: 132 bytes leftover after parsing attributes in process `syz.2.101'. [ 104.652212][ T6241] netlink: 'syz.2.101': attribute type 21 has an invalid length. [ 104.652251][ T6241] netlink: 132 bytes leftover after parsing attributes in process `syz.2.101'. [ 104.652476][ T6241] netlink: 'syz.2.101': attribute type 21 has an invalid length. [ 104.652522][ T6241] netlink: 132 bytes leftover after parsing attributes in process `syz.2.101'. [ 104.670012][ T6241] netlink: 'syz.2.101': attribute type 21 has an invalid length. [ 104.747349][ T6241] netlink: 132 bytes leftover after parsing attributes in process `syz.2.101'. [ 104.747627][ T6241] netlink: 132 bytes leftover after parsing attributes in process `syz.2.101'. [ 104.747699][ T6238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.100'. [ 104.747859][ T6241] netlink: 132 bytes leftover after parsing attributes in process `syz.2.101'. [ 104.748081][ T6241] netlink: 132 bytes leftover after parsing attributes in process `syz.2.101'. [ 104.748298][ T6241] netlink: 132 bytes leftover after parsing attributes in process `syz.2.101'. [ 104.910756][ T6253] 8021q: VLANs not supported on ipvlan1 [ 104.972576][ T6257] bond0: entered promiscuous mode [ 104.972601][ T6257] bond_slave_0: entered promiscuous mode [ 104.984550][ T6257] bond_slave_1: entered promiscuous mode [ 105.008511][ T6257] batadv0: entered promiscuous mode [ 105.013150][ T6257] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 105.158396][ T6265] IPVS: set_ctl: invalid protocol: 13 224.0.0.2:20002 [ 105.716299][ T6292] xt_TCPMSS: Only works on TCP SYN packets [ 105.716482][ T6295] ip_tables: iptables: counters copy to user failed while replacing table [ 106.198368][ T6311] vlan2: entered promiscuous mode [ 106.198395][ T6311] hsr0: entered promiscuous mode [ 106.198729][ T6311] vlan2: entered allmulticast mode [ 106.198744][ T6311] hsr0: entered allmulticast mode [ 106.198758][ T6311] hsr_slave_0: entered allmulticast mode [ 106.198774][ T6311] hsr_slave_1: entered allmulticast mode [ 106.549589][ T6340] ip_tables: iptables: counters copy to user failed while replacing table [ 106.589110][ T6348] ip_tables: iptables: counters copy to user failed while replacing table [ 107.096115][ T6375] validate_nla: 62 callbacks suppressed [ 107.096135][ T6375] netlink: 'syz.2.134': attribute type 1 has an invalid length. [ 107.099668][ T6365] bond1 (unregistering): Released all slaves [ 107.159956][ T6380] netlink: 'syz.1.133': attribute type 142 has an invalid length. [ 107.517397][ T6402] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 107.697873][ T6411] openvswitch: netlink: Message has 8 unknown bytes. [ 107.697917][ T6411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.795349][ T6416] netlink: 'syz.0.148': attribute type 2 has an invalid length. [ 107.795393][ T6416] netlink: 'syz.0.148': attribute type 2 has an invalid length. [ 107.885595][ T52] Bluetooth: hci4: command tx timeout [ 108.358838][ T6450] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 108.411016][ T6453] gretap0: entered promiscuous mode [ 108.551892][ T13] IPVS: starting estimator thread 0... [ 108.627596][ T6466] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 108.632525][ T6466] bond1 (unregistering): Released all slaves [ 108.646063][ T6468] IPVS: using max 38 ests per chain, 91200 per kthread [ 108.844853][ T6472] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.921195][ T6472] ipvlan2: entered allmulticast mode [ 108.921218][ T6472] bond1: entered allmulticast mode [ 109.240359][ T6492] macsec1: entered promiscuous mode [ 109.240389][ T6492] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 109.240689][ T6492] macsec1: entered allmulticast mode [ 109.240708][ T6492] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 109.243098][ T6492] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 109.291276][ T5606] hid-generic 0005:0008:63AA.0001: hidraw0: BLUETOOTH HID v0.03 Device [syz0] on aa:aa:aa:aa:aa:aa [ 109.470379][ T5793] hid-generic 0005:0008:63AA.0002: hidraw0: BLUETOOTH HID v0.03 Device [syz0] on aa:aa:aa:aa:aa:aa [ 109.545877][ T6507] fido_id[6507]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 109.838038][ T6529] __nla_validate_parse: 75 callbacks suppressed [ 109.838061][ T6529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.175'. [ 109.894815][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.175'. [ 109.955403][ T6534] Bluetooth: hci0: unsupported parameter 5135 [ 109.955437][ T6534] Bluetooth: hci0: unsupported parameter 8192 [ 109.955451][ T6534] Bluetooth: hci0: unsupported parameter 5135 [ 109.955464][ T6534] Bluetooth: hci0: unsupported parameter 8192 [ 109.962846][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.175'. [ 109.964326][ T59] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.965456][ T3343] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.965873][ T3343] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.968206][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.177923][ T6540] netlink: 16 bytes leftover after parsing attributes in process `syz.1.181'. [ 110.177967][ T6540] netlink: 16 bytes leftover after parsing attributes in process `syz.1.181'. [ 110.284277][ T6549] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 28 bytes [ 110.341330][ T6554] Cannot find set identified by id 65534 to match [ 110.588847][ T6559] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.037258][ T6588] ip_tables: iptables: counters copy to user failed while replacing table [ 111.070877][ T6592] ip_tables: iptables: counters copy to user failed while replacing table [ 111.112826][ T6594] netlink: 72 bytes leftover after parsing attributes in process `syz.4.193'. [ 111.131236][ T6594] xt_ecn: cannot match TCP bits for non-tcp packets [ 111.194676][ T6606] ip_tables: iptables: counters copy to user failed while replacing table [ 111.294944][ T6594] netlink: 16 bytes leftover after parsing attributes in process `syz.4.193'. [ 111.628473][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.198'. [ 111.630065][ T6628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.198'. [ 111.664301][ T6618] netlink: 104 bytes leftover after parsing attributes in process `syz.1.196'. [ 111.888534][ T6641] netlink: 'syz.2.202': attribute type 1 has an invalid length. [ 112.098761][ T6647] veth3: entered allmulticast mode [ 112.110229][ T6647] bond2: (slave veth3): Enslaving as an active interface with a down link [ 112.151003][ T6641] bond2: (slave veth0_to_bond): making interface the new active one [ 112.162168][ T6641] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 112.407457][ T6673] netlink: 'syz.2.209': attribute type 2 has an invalid length. [ 112.606492][ T1259] IPVS: starting estimator thread 0... [ 112.662847][ T6688] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 112.695054][ T6686] IPVS: using max 25 ests per chain, 60000 per kthread [ 112.699811][ T6690] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 112.742434][ T6694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.058629][ T6709] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 113.169688][ T6715] tunl0: entered promiscuous mode [ 113.181195][ T6715] netlink: 'syz.4.225': attribute type 3 has an invalid length. [ 113.569474][ T6738] syzkaller1: entered allmulticast mode [ 113.952253][ T6766] syzkaller1: entered promiscuous mode [ 113.952278][ T6766] syzkaller1: entered allmulticast mode [ 114.013297][ T6771] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 114.013347][ T6771] IPv6: NLM_F_CREATE should be set when creating new route [ 114.017589][ T6771] IPv6: NLM_F_CREATE should be set when creating new route [ 114.017686][ T6771] IPv6: NLM_F_CREATE should be set when creating new route [ 114.257587][ T6772] 0ªX¹¦Dö»: renamed from gretap0 [ 114.272357][ T6772] 0ªX¹¦Dö»: entered allmulticast mode [ 114.398754][ T6787] bridge0: port 3(batadv1) entered blocking state [ 114.399020][ T6787] bridge0: port 3(batadv1) entered disabled state [ 114.399190][ T6787] batadv1: entered allmulticast mode [ 114.403220][ T6787] batadv1: entered promiscuous mode [ 114.491407][ T6792] ip_tables: iptables: counters copy to user failed while replacing table [ 114.521367][ T6795] C: renamed from lo (while UP) [ 114.547318][ T6795] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 114.885273][ T3343] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 114.885294][ T3343] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 114.942312][ T6826] xt_TCPMSS: Only works on TCP SYN packets [ 114.961599][ T6826] __nla_validate_parse: 17 callbacks suppressed [ 114.961622][ T6826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.255'. [ 114.961643][ T6826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.255'. [ 115.229093][ T6841] netlink: 'syz.2.262': attribute type 1 has an invalid length. [ 115.229118][ T6841] netlink: 'syz.2.262': attribute type 4 has an invalid length. [ 115.229132][ T6841] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.262'. [ 115.287605][ T6839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.261'. [ 115.287635][ T6839] netlink: 32 bytes leftover after parsing attributes in process `syz.0.261'. [ 115.355640][ T6847] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.639933][ T6858] netlink: 'syz.1.266': attribute type 7 has an invalid length. [ 115.722841][ T6860] pim6reg1: entered promiscuous mode [ 115.722891][ T6860] pim6reg1: entered allmulticast mode [ 115.856637][ T6864] netlink: 36 bytes leftover after parsing attributes in process `syz.3.267'. [ 116.446966][ T6878] netlink: 44 bytes leftover after parsing attributes in process `syz.1.270'. [ 116.450407][ T6879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.482333][ T6884] netlink: 68 bytes leftover after parsing attributes in process `syz.0.273'. [ 116.587128][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.274'. [ 117.137341][ T6927] netlink: 27 bytes leftover after parsing attributes in process `syz.3.284'. [ 117.675875][ T6954] netlink: 'syz.4.288': attribute type 2 has an invalid length. [ 117.704181][ T6954] xt_HMARK: proto mask must be zero with L3 mode [ 117.953438][ T6964] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 117.954068][ T6965] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 118.049729][ T6967] x_tables: duplicate underflow at hook 3 [ 118.951572][ T7016] syzkaller1: entered promiscuous mode [ 118.951594][ T7016] syzkaller1: entered allmulticast mode [ 119.811020][ T7059] netlink: 'syz.3.311': attribute type 83 has an invalid length. [ 119.980124][ T7072] __nla_validate_parse: 8 callbacks suppressed [ 119.980145][ T7072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.315'. [ 120.016429][ T7072] netlink: 'syz.3.315': attribute type 83 has an invalid length. [ 120.117973][ T7082] netlink: 'syz.1.317': attribute type 1 has an invalid length. [ 120.133751][ T7084] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 120.156418][ T7082] bond0: option mode: invalid value (11) [ 120.157734][ T7082] bond0 (unregistering): Released all slaves [ 120.183484][ T7080] netlink: 'syz.1.317': attribute type 1 has an invalid length. [ 120.183505][ T7080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.317'. [ 120.287141][ T7089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.318'. [ 120.752337][ T7114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.324'. [ 120.752374][ T7114] netlink: 'syz.4.324': attribute type 5 has an invalid length. [ 120.752391][ T7114] netlink: 20 bytes leftover after parsing attributes in process `syz.4.324'. [ 120.845181][ T7114] geneve2: entered promiscuous mode [ 120.845724][ T7114] geneve2: entered allmulticast mode [ 120.883998][ T32] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 120.884046][ T32] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 120.884082][ T32] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 120.884116][ T32] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 121.095225][ T7129] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 121.342636][ T7142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.331'. [ 121.354783][ T7142] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 121.371267][ T7142] netlink: 152 bytes leftover after parsing attributes in process `syz.4.331'. [ 121.580167][ T7150] netlink: 'syz.1.335': attribute type 1 has an invalid length. [ 121.627226][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.335'. [ 122.225377][ T7183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.695830][ T7204] netlink: 40 bytes leftover after parsing attributes in process `syz.3.346'. [ 122.743843][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.348'. [ 122.867666][ T7221] ip_tables: iptables: counters copy to user failed while replacing table [ 122.868004][ T7222] ip_tables: iptables: counters copy to user failed while replacing table [ 122.869607][ T7221] netlink: 'syz.3.352': attribute type 4 has an invalid length. [ 123.038393][ T7237] netlink: 'syz.0.354': attribute type 11 has an invalid length. [ 123.038418][ T7237] netlink: 'syz.0.354': attribute type 11 has an invalid length. [ 123.156649][ T7242] syzkaller0: entered promiscuous mode [ 123.156675][ T7242] syzkaller0: entered allmulticast mode [ 124.721307][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880573f3400: rx timeout, send abort [ 124.722825][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880573f3400: 0x2ff03: (3) A timeout occurred and this is the connection abort to close the session. [ 125.127672][ T7307] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.176495][ T7318] __nla_validate_parse: 11 callbacks suppressed [ 125.176517][ T7318] netlink: 80 bytes leftover after parsing attributes in process `syz.0.377'. [ 125.176605][ T7318] netlink: 80 bytes leftover after parsing attributes in process `syz.0.377'. [ 125.217837][ T7318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.302480][ T7318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.403544][ T7333] ------------[ cut here ]------------ [ 125.403561][ T7333] sp->magic != HWSIM_STA_MAGIC [ 125.403574][ T7333] WARNING: drivers/net/wireless/virtual/mac80211_hwsim_main.c:258 at mac80211_hwsim_tx+0x1cec/0x2580, CPU#0: syz.2.375/7333 [ 125.427319][ T7333] Modules linked in: [ 125.431249][ T7333] CPU: 0 UID: 0 PID: 7333 Comm: syz.2.375 Not tainted syzkaller #0 PREEMPT(full) [ 125.440513][ T7333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 125.450642][ T7333] RIP: 0010:mac80211_hwsim_tx+0x1cec/0x2580 [ 125.456654][ T7333] Code: e8 03 42 0f b6 04 20 84 c0 0f 85 ee 07 00 00 45 0f b6 8d 59 08 00 00 4c 89 ee 67 48 0f b9 3a e9 dc f4 ff ff e8 75 b9 8a fa 90 <0f> 0b 90 e9 3f f5 ff ff e8 67 b9 8a fa 90 0f 0b 90 48 8b 7c 24 20 [ 125.476360][ T7333] RSP: 0018:ffffc9000325eb80 EFLAGS: 00010293 [ 125.482470][ T7333] RAX: ffffffff873d570b RBX: 0000000000000000 RCX: ffff88807efe3e80 [ 125.490528][ T7333] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006d537749 [ 125.498575][ T7333] RBP: ffffc9000325ed10 R08: ffff88802cffa14f R09: 0000000000000000 [ 125.506639][ T7333] R10: ffff88802cffa140 R11: ffffffff873d3a20 R12: dffffc0000000000 [ 125.514705][ T7333] R13: 00000000ffffffff R14: 0000000000000000 R15: 1ffff9200064bdbc [ 125.522756][ T7333] FS: 00007f0eb6bb46c0(0000) GS:ffff888123abf000(0000) knlGS:0000000000000000 [ 125.531761][ T7333] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.538415][ T7333] CR2: 00007f0eb6bb3ff8 CR3: 0000000058dd8000 CR4: 00000000003526f0 [ 125.546462][ T7333] Call Trace: [ 125.549803][ T7333] [ 125.552804][ T7333] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 125.558390][ T7333] ieee80211_tx_frags+0x3df/0x890 [ 125.563581][ T7333] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 125.569231][ T7333] __ieee80211_xmit_fast+0xabf/0x2160 [ 125.574713][ T7333] ? __flow_hash_from_keys+0x431/0x6c0 [ 125.580226][ T7333] ? cfg80211_classify8021d+0x67e/0x1220 [ 125.585950][ T7333] ? lock_acquire+0x115/0x350 [ 125.590681][ T7333] ? __pfx___ieee80211_xmit_fast+0x10/0x10 [ 125.596601][ T7333] ? ieee80211_downgrade_queue+0x432/0x5b0 [ 125.602459][ T7333] ? ieee80211_mesh_xmit_fast+0x902/0xe20 [ 125.608275][ T7333] ieee80211_mesh_xmit_fast+0xa6d/0xe20 [ 125.613947][ T7333] ? lock_acquire+0x115/0x350 [ 125.618688][ T7333] ? __pfx_ieee80211_mesh_xmit_fast+0x10/0x10 [ 125.624855][ T7333] ? __ieee80211_subif_start_xmit+0x2e6/0x1770 [ 125.631085][ T7333] __ieee80211_subif_start_xmit+0x706/0x1770 [ 125.637183][ T7333] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 125.643650][ T7333] ? sock_def_readable+0xae/0x550 [ 125.648783][ T7333] ieee80211_subif_start_xmit+0xf1/0x570 [ 125.654505][ T7333] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 125.660803][ T7333] ? dev_queue_xmit_nit+0x2d/0xac0 [ 125.666020][ T7333] ? dev_queue_xmit_nit+0x95c/0xac0 [ 125.671270][ T7333] ? dev_queue_xmit_nit+0x2d/0xac0 [ 125.676502][ T7333] dev_hard_start_xmit+0x2cd/0x830 [ 125.681670][ T7333] __dev_queue_xmit+0x14d1/0x3920 [ 125.686785][ T7333] ? __dev_queue_xmit+0x29b/0x3920 [ 125.691960][ T7333] ? _copy_from_iter+0x21b/0x1660 [ 125.697100][ T7333] ? skb_set_owner_w+0x263/0x3d0 [ 125.702094][ T7333] ? __pfx___dev_queue_xmit+0x10/0x10 [ 125.707555][ T7333] ? __pfx__copy_from_iter+0x10/0x10 [ 125.712911][ T7333] ? __pfx_packet_parse_headers+0x10/0x10 [ 125.718743][ T7333] ? packet_xmit+0x68/0x330 [ 125.723320][ T7333] ? skb_put+0x112/0x210 [ 125.727669][ T7333] packet_sendmsg+0x3f11/0x51a0 [ 125.732609][ T7333] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 125.738108][ T7333] ? lock_acquire+0x115/0x350 [ 125.742830][ T7333] ? lock_acquire+0x115/0x350 [ 125.747606][ T7333] ? aa_file_perm+0x18b/0x15f0 [ 125.752414][ T7333] ? __pfx_packet_sendmsg+0x10/0x10 [ 125.757732][ T7333] ? aa_sk_perm+0x713/0x900 [ 125.762318][ T7333] ? __lock_acquire+0x747/0x2de0 [ 125.767355][ T7333] ? __pfx_aa_sk_perm+0x10/0x10 [ 125.772254][ T7333] ? __css_rstat_updated+0x237/0x540 [ 125.777737][ T7333] ? aa_sock_msg_perm+0x144/0x210 [ 125.782822][ T7333] ? apparmor_socket_sendmsg+0x98/0x360 [ 125.788472][ T7333] ? __pfx_packet_sendmsg+0x10/0x10 [ 125.793723][ T7333] sock_sendmsg_nosec+0x13a/0x180 [ 125.798857][ T7333] sock_write_iter+0x2de/0x3e0 [ 125.803673][ T7333] ? __pfx_sock_write_iter+0x10/0x10 [ 125.809069][ T7333] ? bpf_lsm_file_permission+0x9/0x20 [ 125.814501][ T7333] ? security_file_permission+0x75/0x260 [ 125.820188][ T7333] vfs_write+0x612/0xba0 [ 125.824521][ T7333] ? __pfx_vfs_write+0x10/0x10 [ 125.829330][ T7333] ? __fget_files+0x2a/0x420 [ 125.834029][ T7333] ksys_write+0x150/0x270 [ 125.838436][ T7333] ? __pfx_ksys_write+0x10/0x10 [ 125.843344][ T7333] do_syscall_64+0x166/0x520 [ 125.848044][ T7333] ? trace_irq_disable+0x3b/0x140 [ 125.853110][ T7333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.859273][ T7333] ? clear_bhb_loop+0x70/0xc0 [ 125.864033][ T7333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.869964][ T7333] RIP: 0033:0x7f0eb899e559 [ 125.874479][ T7333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.894171][ T7333] RSP: 002b:00007f0eb6bb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 125.902638][ T7333] RAX: ffffffffffffffda RBX: 00007f0eb8c26720 RCX: 00007f0eb899e559 [ 125.910715][ T7333] RDX: 000000000000000e RSI: 0000200000000500 RDI: 0000000000000008 [ 125.918773][ T7333] RBP: 00007f0eb8a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 125.926836][ T7333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.934885][ T7333] R13: 00007f0eb8c267b8 R14: 00007f0eb8c26720 R15: 00007ffc7f87cc68 [ 125.942917][ T7333] [ 125.946041][ T7333] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 125.953369][ T7333] CPU: 0 UID: 0 PID: 7333 Comm: syz.2.375 Not tainted syzkaller #0 PREEMPT(full) [ 125.962721][ T7333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 125.972817][ T7333] Call Trace: [ 125.976141][ T7333] [ 125.979110][ T7333] vpanic+0x56d/0xa60 [ 125.983137][ T7333] ? __pfx__printk+0x10/0x10 [ 125.987765][ T7333] ? __pfx_vpanic+0x10/0x10 [ 125.992314][ T7333] ? is_bpf_text_address+0x292/0x2b0 [ 125.997650][ T7333] ? is_bpf_text_address+0x26/0x2b0 [ 126.002917][ T7333] panic+0xc5/0xd0 [ 126.006691][ T7333] ? __pfx_panic+0x10/0x10 [ 126.011204][ T7333] __warn+0x315/0x4c0 [ 126.015247][ T7333] ? mac80211_hwsim_tx+0x1cec/0x2580 [ 126.020586][ T7333] ? mac80211_hwsim_tx+0x1cec/0x2580 [ 126.025935][ T7333] __report_bug+0x276/0x570 [ 126.030482][ T7333] ? mac80211_hwsim_tx+0x1cec/0x2580 [ 126.035830][ T7333] ? __pfx___report_bug+0x10/0x10 [ 126.040899][ T7333] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 126.046749][ T7333] ? ieee80211_encrypt_tx_skb+0x2fc/0x3f0 [ 126.052514][ T7333] ? mac80211_hwsim_tx+0x1cec/0x2580 [ 126.057887][ T7333] report_bug+0x16b/0x220 [ 126.062250][ T7333] ? mac80211_hwsim_tx+0x1cec/0x2580 [ 126.067573][ T7333] ? mac80211_hwsim_tx+0x1cee/0x2580 [ 126.072904][ T7333] handle_bug+0x9c/0x200 [ 126.077186][ T7333] exc_invalid_op+0x1a/0x50 [ 126.081725][ T7333] asm_exc_invalid_op+0x1a/0x20 [ 126.086611][ T7333] RIP: 0010:mac80211_hwsim_tx+0x1cec/0x2580 [ 126.092534][ T7333] Code: e8 03 42 0f b6 04 20 84 c0 0f 85 ee 07 00 00 45 0f b6 8d 59 08 00 00 4c 89 ee 67 48 0f b9 3a e9 dc f4 ff ff e8 75 b9 8a fa 90 <0f> 0b 90 e9 3f f5 ff ff e8 67 b9 8a fa 90 0f 0b 90 48 8b 7c 24 20 [ 126.112255][ T7333] RSP: 0018:ffffc9000325eb80 EFLAGS: 00010293 [ 126.118359][ T7333] RAX: ffffffff873d570b RBX: 0000000000000000 RCX: ffff88807efe3e80 [ 126.126353][ T7333] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006d537749 [ 126.134367][ T7333] RBP: ffffc9000325ed10 R08: ffff88802cffa14f R09: 0000000000000000 [ 126.142360][ T7333] R10: ffff88802cffa140 R11: ffffffff873d3a20 R12: dffffc0000000000 [ 126.150352][ T7333] R13: 00000000ffffffff R14: 0000000000000000 R15: 1ffff9200064bdbc [ 126.158349][ T7333] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 126.163842][ T7333] ? mac80211_hwsim_tx+0x1ceb/0x2580 [ 126.169183][ T7333] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 126.174685][ T7333] ieee80211_tx_frags+0x3df/0x890 [ 126.179752][ T7333] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 126.185345][ T7333] __ieee80211_xmit_fast+0xabf/0x2160 [ 126.190847][ T7333] ? __flow_hash_from_keys+0x431/0x6c0 [ 126.196344][ T7333] ? cfg80211_classify8021d+0x67e/0x1220 [ 126.202020][ T7333] ? lock_acquire+0x115/0x350 [ 126.206733][ T7333] ? __pfx___ieee80211_xmit_fast+0x10/0x10 [ 126.212600][ T7333] ? ieee80211_downgrade_queue+0x432/0x5b0 [ 126.218462][ T7333] ? ieee80211_mesh_xmit_fast+0x902/0xe20 [ 126.224224][ T7333] ieee80211_mesh_xmit_fast+0xa6d/0xe20 [ 126.229802][ T7333] ? lock_acquire+0x115/0x350 [ 126.234505][ T7333] ? __pfx_ieee80211_mesh_xmit_fast+0x10/0x10 [ 126.240618][ T7333] ? __ieee80211_subif_start_xmit+0x2e6/0x1770 [ 126.246822][ T7333] __ieee80211_subif_start_xmit+0x706/0x1770 [ 126.252879][ T7333] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 126.259328][ T7333] ? sock_def_readable+0xae/0x550 [ 126.264393][ T7333] ieee80211_subif_start_xmit+0xf1/0x570 [ 126.270075][ T7333] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 126.276366][ T7333] ? dev_queue_xmit_nit+0x2d/0xac0 [ 126.281518][ T7333] ? dev_queue_xmit_nit+0x95c/0xac0 [ 126.286743][ T7333] ? dev_queue_xmit_nit+0x2d/0xac0 [ 126.291903][ T7333] dev_hard_start_xmit+0x2cd/0x830 [ 126.297070][ T7333] __dev_queue_xmit+0x14d1/0x3920 [ 126.302127][ T7333] ? __dev_queue_xmit+0x29b/0x3920 [ 126.307294][ T7333] ? _copy_from_iter+0x21b/0x1660 [ 126.312344][ T7333] ? skb_set_owner_w+0x263/0x3d0 [ 126.317314][ T7333] ? __pfx___dev_queue_xmit+0x10/0x10 [ 126.322717][ T7333] ? __pfx__copy_from_iter+0x10/0x10 [ 126.328043][ T7333] ? __pfx_packet_parse_headers+0x10/0x10 [ 126.333787][ T7333] ? packet_xmit+0x68/0x330 [ 126.338308][ T7333] ? skb_put+0x112/0x210 [ 126.342573][ T7333] packet_sendmsg+0x3f11/0x51a0 [ 126.347469][ T7333] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 126.352904][ T7333] ? lock_acquire+0x115/0x350 [ 126.357621][ T7333] ? lock_acquire+0x115/0x350 [ 126.362327][ T7333] ? aa_file_perm+0x18b/0x15f0 [ 126.367116][ T7333] ? __pfx_packet_sendmsg+0x10/0x10 [ 126.372346][ T7333] ? aa_sk_perm+0x713/0x900 [ 126.376874][ T7333] ? __lock_acquire+0x747/0x2de0 [ 126.381838][ T7333] ? __pfx_aa_sk_perm+0x10/0x10 [ 126.386709][ T7333] ? __css_rstat_updated+0x237/0x540 [ 126.392033][ T7333] ? aa_sock_msg_perm+0x144/0x210 [ 126.397088][ T7333] ? apparmor_socket_sendmsg+0x98/0x360 [ 126.402662][ T7333] ? __pfx_packet_sendmsg+0x10/0x10 [ 126.407890][ T7333] sock_sendmsg_nosec+0x13a/0x180 [ 126.412962][ T7333] sock_write_iter+0x2de/0x3e0 [ 126.417757][ T7333] ? __pfx_sock_write_iter+0x10/0x10 [ 126.423100][ T7333] ? bpf_lsm_file_permission+0x9/0x20 [ 126.428490][ T7333] ? security_file_permission+0x75/0x260 [ 126.434158][ T7333] vfs_write+0x612/0xba0 [ 126.438433][ T7333] ? __pfx_vfs_write+0x10/0x10 [ 126.443227][ T7333] ? __fget_files+0x2a/0x420 [ 126.447851][ T7333] ksys_write+0x150/0x270 [ 126.452212][ T7333] ? __pfx_ksys_write+0x10/0x10 [ 126.457093][ T7333] do_syscall_64+0x166/0x520 [ 126.461709][ T7333] ? trace_irq_disable+0x3b/0x140 [ 126.466757][ T7333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.472843][ T7333] ? clear_bhb_loop+0x70/0xc0 [ 126.477549][ T7333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.483458][ T7333] RIP: 0033:0x7f0eb899e559 [ 126.487909][ T7333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.507530][ T7333] RSP: 002b:00007f0eb6bb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 126.515971][ T7333] RAX: ffffffffffffffda RBX: 00007f0eb8c26720 RCX: 00007f0eb899e559 [ 126.523962][ T7333] RDX: 000000000000000e RSI: 0000200000000500 RDI: 0000000000000008 [ 126.531956][ T7333] RBP: 00007f0eb8a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 126.539947][ T7333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.547938][ T7333] R13: 00007f0eb8c267b8 R14: 00007f0eb8c26720 R15: 00007ffc7f87cc68 [ 126.555950][ T7333] [ 126.559573][ T7333] Kernel Offset: disabled [ 126.563921][ T7333] Rebooting in 86400 seconds..